Machine Learning Malware Detection

Machine Learning Workflow

* Asking the right questions
* Preparing the data
* Selecting the algorithm
* Training the model
* Testing the model

Why are we even interested in Machine Learning?

Because Machine Learning is Sexy and you get to work with models!

ai_2.jpg

Asking the right question...,

Is a PE file Malware or Not Malware?
Hotdog or Not Hotdog? notdogfull.jpg

Solution Statement:

Attempt to use the machine learning workflow to process and transform sampled PE file data to create a prediction model. Using the generated data, predict with 65% accuracy which PE files are likely to be classified as malware.

http://resources.infosecinstitute.com/machine-learning-malware-detection/

https://app.pluralsight.com/library/courses/python-understanding-machine-learning/exercise-files

http://2012.infosecsouthwest.com/files/speaker_materials/ISSW2012_Selecting_Features_to_Classify_Malware.pdf

Based off of the research "Selecting Features to Classify Malware", we are interested in extracting the following fields of a PE File:

  • Major Image Version: Used to indicate the major version number of the application; in Microsoft Excel version 4.0, it would be 4.

  • Virtual Adress and Size of the IMAGE_DATA_DIRECTORY

  • OS Version (may not give much)

  • Import Adress Table Adress

  • Ressources Size

  • Number Of Sections (we should look into section names)

  • Linker Version (may not give much)

  • Size of Stack Reserve

  • DLL Characteristics

  • Export Table Size and Adress

  • Address of Entry Point

  • Image Base

  • Number Of Import DLL

  • Number Of Import Functions

  • Number Of Sections

Included in the dataset but not used:

DLL name and Imported Symbols (we might be able to create a weighted score to use with this info?)

filename

Stuff to include: DebugSize DebugRVA ImageVersion OperatingSystemVersion SizeOfStackReserve LinkerVersion DllCharacteristics IatRVA ExportSize ExportRVA ExportNameLen ResourceSize ExportFunctionsCount

Import all the needed libraries

Pandas - provided data frames
matplotlib.pyplot - plotting support
In [1]:
import os
import pefile
import pprint as pp
import pandas as pd
import numpy as np
import matplotlib.pyplot as plt
import re
import csv
import glob
import magic
import hashlib
import sys
import struct
import peutils
from sklearn import model_selection
from sklearn.metrics import classification_report
from sklearn.metrics import confusion_matrix
from sklearn.metrics import accuracy_score
from sklearn.linear_model import LogisticRegression
from sklearn.tree import DecisionTreeClassifier
from sklearn.neighbors import KNeighborsClassifier
from sklearn.discriminant_analysis import LinearDiscriminantAnalysis
from sklearn.naive_bayes import GaussianNB
from sklearn.svm import SVC

To make our code more organized let’s start by creating a class that represents the PE File information as one object. We are using the python module pefile which is a multi-platform Python module to parse and work with Portable Executable (aka PE) files. https://github.com/erocarrera/pefile

In [2]:
def sha256_checksum(filename, block_size=65536):
    sha256 = hashlib.sha256()
    with open(filename, 'rb') as f:
        for block in iter(lambda: f.read(block_size), b''):
            sha256.update(block)
    return sha256.hexdigest()
In [3]:
class PEFile:
    """ 
    This Class is constructed by parsing the pe file for the interesting features
    each pe file is an object by itself and we extract the needed information
    into a dictionary
    """
    # look to add PEid signatures to detect packers 
    # https://github.com/erocarrera/pefile/blob/wiki/PEiDSignatures.md
    # signatures = peutils.SignatureDatabase('./userdb.txt')    
    
    def __init__(self, filename):

        self.pe = pefile.PE(filename, fast_load=True)
        
        self.filename = filename      
        self.DebugSize = self.pe.OPTIONAL_HEADER.DATA_DIRECTORY[6].Size
        self.DebugRVA = self.pe.OPTIONAL_HEADER.DATA_DIRECTORY[6].VirtualAddress
        self.ImageVersion = self.pe.OPTIONAL_HEADER.MajorImageVersion
        self.OSVersion = self.pe.OPTIONAL_HEADER.MajorOperatingSystemVersion
        self.ExportRVA = self.pe.OPTIONAL_HEADER.DATA_DIRECTORY[0].VirtualAddress
        self.ExportSize = self.pe.OPTIONAL_HEADER.DATA_DIRECTORY[0].Size
        self.IATRVA = self.pe.OPTIONAL_HEADER.DATA_DIRECTORY[12].VirtualAddress
        self.ResSize = self.pe.OPTIONAL_HEADER.DATA_DIRECTORY[2].Size
        self.LinkerVersion = self.pe.OPTIONAL_HEADER.MajorLinkerVersion
        self.NumberOfSections = self.pe.FILE_HEADER.NumberOfSections
        self.StackReserveSize = self.pe.OPTIONAL_HEADER.SizeOfStackReserve
        self.Dll = self.pe.OPTIONAL_HEADER.DllCharacteristics
        self.AddressOfEntryPoint = self.pe.OPTIONAL_HEADER.AddressOfEntryPoint
        self.ImageBase = self.pe.OPTIONAL_HEADER.ImageBase
        
        # If the PE file was loaded using the fast_load=True argument, we will need to parse the data directories:
        self.pe.parse_data_directories()
        imported_dll = {}
        number_dll = 0
        try:
            for entry in self.pe.DIRECTORY_ENTRY_IMPORT:
                if entry is not None:
                #print(entry.dll)
                    number_dll += 1
                    for imp in entry.imports:
                        #print('\t', hex(imp.address), imp.name)
                        if imp.name is not None:
                            #print(imp.name.decode())
                            imported_dll[entry.dll.decode()] = imp.name.decode()
        except:
            print("[-]")
                        
        self.ImportedDLL = imported_dll
        self.NumberOfImportDLL = number_dll
        
        section_names = {}
        number_sections = 0
        try:
            for section in self.pe.sections:
                number_sections += 1
                #print (section.Name, hex(section.VirtualAddress), hex(section.Misc_VirtualSize), section.SizeOfRawData )
                section_names[section.Name.decode()] = section.SizeOfRawData
            self.SectionNames = section_names
            self.NumberOfSections = number_sections
        except:
            print("[-]")
            
        number_import_functions = 0
        import_function = []
        
        try:
            if self.pe.OPTIONAL_HEADER.DATA_DIRECTORY[pefile.DIRECTORY_ENTRY['IMAGE_DIRECTORY_ENTRY_IMPORT']].VirtualAddress != 0:
                self.pe.parse_data_directories(directories=[pefile.DIRECTORY_ENTRY['IMAGE_DIRECTORY_ENTRY_IMPORT']])
                for entry in self.pe.DIRECTORY_ENTRY_IMPORT:
                    for imp in entry.imports:
                        #print('\t', hex(imp.address), imp.name)
                        if imp.name:
                            number_import_functions += 1
                            import_function.append(imp.name.decode())
        except:
            print("[-]")
            
        self.NumberOfImportFunctions = number_import_functions
        self.ImportedFunctions = import_function
        
    def Construct(self):
        sample = {}

        for attr, k in self.__dict__.items():
            if(attr != "pe"):
                sample[attr] = k
        return sample
    
    

Now we move on to write a small method that constructs a dictionnary for each PE File thus each sample will be represented as a python dictionnary where keys are the features and values are the value of each parsed field .

In [4]:
def pe2vec(directory):
    """
    dirty function (handling all exceptions) for each sample
    it construct a dictionary of dictionaries in the format:
    sample x : pe informations
    """
    dataset = {}
    #directory = "./data/"
    print("")
    print("[*] Extracting the PE file data: ")
    print("")
    for subdir, dirs, files in os.walk(directory):
        for f in files:
            file_path = os.path.join(subdir, f)
            
            #print(magic.from_file(file_path))
            if re.match('^PE.*', magic.from_file(file_path)):
                try:
                    print("[+] "+file_path)
                    pe = PEFile(file_path)
                    dataset[str(f)] = pe.Construct()
                except Exception as e:
                    raise
            else:
                print()
                print("[-] File not PE: "+file_path+" \n=>\t "+magic.from_file(file_path))
                print()
                print("Removing file.")
                os.remove(file_path)
    return dataset
    
    

Testing the pe2vec() method and PEFile class

Print out the dataset for the Malware and Clean Samples

In [5]:
for subdir, dirs, files in os.walk("./data/malware/"):
        for f in files:
            print(f)
            os.rename("./data/malware/"+f, "./data/malware/"+sha256_checksum("./data/malware/"+f))
            
print("Done Renaming files to sha256")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 Renaming files to sha256
In [6]:
# create a dataset dictionary from the collected PE file information
# we might consider adding an MD5 hash value and aappend it to a new column
# an asscoiated MD5 value could be used to lookup the VirusToltal score to confirm it is Malware if we did not get the sample from a good source
ds_malware = {}
ds_malware = pe2vec("./data/malware")
print("")
print("[*] Malware PE information:")
print("")
pp.pprint(ds_malware)

print("")
print("[*] Completed Malware PE information extraction:")
print("")
[*] Extracting the PE file data: 

[+] ./data/malware/e4ec5e2d8509a7c60597f08674b6341324befafa910aa5637c473149b0a298cd
[+] ./data/malware/da0a0ab047599de47b204359f9ffe81b307025ff53c233efeac32d4841a2ad60
[+] ./data/malware/638d8b4c817622aa1020c2e89d068d43fe8efaed37339ee2fd5713579c2041eb
[+] ./data/malware/c1b3329113be9495c5d52ac198521196abd95e10b43a0c7090aa192d66b89bab
[+] ./data/malware/e8162f1766459e6ef57b0063938da6cab886743ee5c5669233424855c8098f8f
[+] ./data/malware/7c77aad390fde87d0b8a8a4c3a2d5e2c15d890189003312f75a8a444ad47fa40
[+] ./data/malware/90355b0723ab41d99642fa4bad2ee77ed1cb2a92cb2c1fe45c2f3869727df08c
[+] ./data/malware/b6315a036afd83d623ee31d4f6d9983237f7d7628a9c85faaf3fef76a818ac63
[+] ./data/malware/473bc48119ba2883b34c83d240085957470e473ec6047cea082be3186dd954f6
[+] ./data/malware/084ae81e93031857b6c804af1df2da7c4e055d58caadf727fae67d3530c2bb7f
[+] ./data/malware/3c212affc4e21d5ebd1e4376aca98577cd44f9436e7ec3abbea5f14edb5aab1a
[+] ./data/malware/47fd3cbebe85ff92a7c7939c289361822c45c1c1c0887cbcbf7478b45244b1bc
[+] ./data/malware/2a44cc2b8cd5e04c31b640a2d7e6cfbe27ddfcc614b445268a94d18756678af0
[+] ./data/malware/f307939244103caadc4a73c86667ec6e601fa082b56a734b723fc7edcdb9b4a6
[+] ./data/malware/321fc8782390b7e99a8cc946a299fe8bcb4f0a2569ea2541ae1c8e1b0659a37c
[+] ./data/malware/ec3f778fe07bf5f3fcced76b5445c2757dbcf38c90d486f8280616f54689f655
[+] ./data/malware/2b17b1def146ff2d023c383784bae55ba613124af3df33cbb7dd8eeb1f830f54
[-]
[-]
[+] ./data/malware/365bc4420db612e21f2c0a17ec94d224037fa69e878c3a6880b59060950ff2a3
[+] ./data/malware/f0323b7e2e721504a0c4539cc02dd471fd5615bb0a913aa4bd0c105dffa22dab
[+] ./data/malware/4e5ea8c3edd23c80f3b4bfe53d129529f492f5b3859b4b9835d8dab8f1b37941
[-]
[+] ./data/malware/844e86dbaf12dcb82fc0129e9f7c8e59889f5548120a6f1824c4c2de139c4c23
[+] ./data/malware/5d0f268e678a5c5cdb08e1c78907d667f4a4ea039cbbd0b4c58789f4f197b737
[-]
[-]
[+] ./data/malware/f1c8f2a783fc891800db4054c1096b77f3908a7db2cdf255d36a6731d96a09de
[+] ./data/malware/f278cb2e5c34a75a2f5e57ffb4c8a9a52bc8abad537a61f481730be0c0b13d40
[-]
[+] ./data/malware/a39ef11b53db39a1c4e81071a0676688706f17ca3667a98c065560a4612e804a
[+] ./data/malware/cbc8c15a7c0237d403ef0b4caa6f3e7c8df61a8bdc34b03c155055cb267768ec
[-]
[-]
[+] ./data/malware/3603f67a6606e7fc32c06519e2afeed15289bd160cfd48d37487bc5f8aaf513c
[+] ./data/malware/32cf4fe1bf38926e63376417b3f8ce2d2c591fd3539839892708b11807ebac23
[+] ./data/malware/1af7a96895ba3064b40323b07f79fe279c9db72a71ea43b321e480f03073b01d
[+] ./data/malware/22cde70dee00d2f5071739d89658114e0cadf7f7fbf742e7b60931625f88df78
[+] ./data/malware/00a02d154e7389d3a5fe572e9800f1628e74b8aabe4270f3282a8c0ab0951ff9
[+] ./data/malware/cab869f98ba3fe1948d2b48fa76fa4767fa7f31e28f3be2b34572ab0c63f942a
[+] ./data/malware/48b2050373ad48fa2848943c04e8b60c2fc5ad9c3f4c7bfd46b8c0ca09269312
[+] ./data/malware/2631aafa045b1953c09502c92f520acecfd0b17a6f059a2e7f10ce77dd3c632e
[+] ./data/malware/72a1639c4d0c53e0d73610a6af4277ce6cfa751aefa5eb1b6a121f090d599721
[+] ./data/malware/c4f1d59feb1a131b6fd99fb352ebd8f039a33524703bc5ecb68b1521f5b32097
[-]
[+] ./data/malware/652cac5fedbc07221da48a735868fb33b55e11496c2d31816c99b1d8a8d86a39
[+] ./data/malware/40377c131bbeeddc46eb0f025f77b4693be80aa271cb0978a392f5b31532ed6c
[+] ./data/malware/67085c902c65567e81845fa9d162bff568bdcd59df67bfe1dd90dd6bf8ea0ba5
[+] ./data/malware/46f0980e21c9995bd5357a4ca872c3d3ee965d3942d99c982270b85f382b3905
[+] ./data/malware/0ed3b1449a469849f451de56d6ff1d23f27adffdafb5698c3bcb4c3e6ddc2594
[+] ./data/malware/e9b355846580911b7cc8507f1c698fb0811eb0b6d0ea61f21305e47c375aa8ae
[-]
[+] ./data/malware/6647101d7f42fd62225439f1065f0214acfffb3adb2f152cd4aab4539ad5f10d
[+] ./data/malware/75a2b1e6231ff9b7dcdb8069aabb0f6c84d9db620714f52f24c1be3c409b9e68
[-]
[-]
[+] ./data/malware/8120f39e256c0869fa09e0569430b23a27ce59c37e1d7bd54b17f06ed0292fe7
[+] ./data/malware/a8d16e74db0f5a450c32a2f67394b6456ee1a415ba4a1c4a76735a9d9fb53f74
[+] ./data/malware/00dbc9c0db2020a47a7833740b12141c6c865510f67eb5b88d6d5f0a7a833268
[+] ./data/malware/47eaebc920ccf99e09fc9924feb6b19b8a28589f52783327067c9b09754b5e84
[+] ./data/malware/5c1ff70e2603b10fbced58f7af99fee9ec7cbba62979ec3a0857aee7c682a45b
[-]
[-]
[+] ./data/malware/3f65fc632a0189985f0818a04853cb775ee86b280dc9ae2edf56a6d576dde59b
[+] ./data/malware/97b39ac28794a7610ed83ad65e28c605397ea7be878109c35228c126d43e2f46
[+] ./data/malware/0b67d8fc01b7855cb117bd01bf8a66d5f799a72efe225305921356b14790b42d
[+] ./data/malware/46bc4c8119718c81909742d4faf14a9e38cda9925a2943ba36ce94362fa20a2a
[+] ./data/malware/0d2b7269bfa06c7ee80b4da2c522b14799f947e96ca880e4f3d0b35f6cb1ec32
[+] ./data/malware/1f56d5e7a22c2b767b000100d80dacc0f63a7a4a5039c67b015d205c8aa5c0e4
[+] ./data/malware/8d235cf40112e6b419fa1437913bc903f9a90b17a24ec4872ff17f469b1a8589
[+] ./data/malware/4bdf030e2a349281208f8913ebd504a14b7245f5490b6dcec6037dbd0e6a6983
[+] ./data/malware/c53af157120ddec348df431992662028c761b5b398989ee0f98694979d82980c
[+] ./data/malware/7e6a30dd68215546a890b21ef57bad0fb15a6b7ac64e3400c265c0e0f6ffa70b
[-]
[+] ./data/malware/b382d2387250fcf4d3ad86324e48ccf0288ce78d439ed06acbdcade44997f3d2
[+] ./data/malware/6d475b148222e98a20f165c4868e212788247a4f8e0028afaf5f128c4d0aa715
[+] ./data/malware/7116d03a7d857b18fd970c1e3dabfc953188e64269640eb757b3e7fc1e50c4cd
[-]
[+] ./data/malware/7e701144072b13f33270aeed3ea9eeeb2823840bb36286146c73d86df9221d1e
[+] ./data/malware/a46f94a4d86c8f9c97f2b1e283515f27a0bb3c849977aa05007eab525f4cf036
[-]
[-]
[+] ./data/malware/a8b2cd0b25847b92220f60786ebeead8e47df8fdf737d0676a82335445bf7d62
[-]
[-]
[+] ./data/malware/aeaa2be9d0f3793ef20f834c039d57cf9d9fc5f68e5e4cc470d93f954a102bc3
[+] ./data/malware/18f36aac41ad4aaa1a6b2d475ac41720a081c3debf2df2c7f049394770264925
[+] ./data/malware/bfcc7f99c4e6087f216494fe50b5c4169c2ec3126573a81e26154c500a979e5f
[-]
[-]
[+] ./data/malware/34a84a55a2d3eca30055460dd6b44da61373131de769bdd548f9fb6b940433c6
[-]
[-]
[+] ./data/malware/26f6e0023895a06223a91363d56e71f3e23b2ee59809a08d8838b994a1a8c90c
[+] ./data/malware/c3c47f5b2983a580985735b0fa32d966c1925f248bb97ec6638209d2543b4cb3
[+] ./data/malware/4db151037e5548c12cb6faa218e9a6adec7330ae96418bbd15c8d912f544fc73
[-]
[+] ./data/malware/16aa94d26d21f07a7bad5cb9bb027229aed63bd5e746c6ded2366a60204063a6
[-]
[-]
[+] ./data/malware/d002b5d4e52f343bd5ff377ba374e5d3dce7bdf5d2919b134abfbead90386f1a
[+] ./data/malware/0dd9fca04aba0e49801f3c1f1647d40fcfcf48808603855f955c07b390d1e1ad
[+] ./data/malware/8fe59abc18708967e5a5a0c7d331bcfa3898159b2789572dd695953322914d70
[+] ./data/malware/3e0765de464110e8b2ab5b05feb4b0cb9286c09ae61654a224a64d202f6019ba
[+] ./data/malware/00cb557ec3c36d07f27e264dd6bffb6c858a3d9568878db3fded2a0bd0f9fe3b
[-]
[-]
[+] ./data/malware/538d982b1151cb6e367f5c3a27a02c4d8c8ec0c467d7dcd50df5d7b97aaef0db
[+] ./data/malware/13abc28b2269a73c8d621fb88b487b7e83c6ee014816493f0d78281a504ffeb0
[+] ./data/malware/12c7ad0cb4e245b5d51dafb3d6ade6a22681c4a7ab19d919104cab333f956260
[+] ./data/malware/e16314d8ccfeef3c294865925c01babab9d52d4773466a3925aebb7c90041bf0
[+] ./data/malware/8ef3a0b2620fff9b616db2e7e77e3a07137748d9c05cb26d6dd946983b06b849
[-]
[-]
[+] ./data/malware/8db369f1944a2bceff930181fd861603129a94f5b5febbe5fc20df8eb09520fd
[+] ./data/malware/05f2de90c06301502274b4ca2ec279e1012906d522176e416bba667353668f7d
[+] ./data/malware/72259a3704916c9c60a055321313a70e190dd7662beea77c3c63bc1380abc0c3
[+] ./data/malware/2f3a68fff0973a87198307b55c6680503fc8254bcb2d745e27b0d23343ce5f51
[-]
[+] ./data/malware/2a83f8a8d335bfec595b4c4ebf0a96c78889aade87134859a1693ebae8f9e159
[+] ./data/malware/2a1868e906229098e6f5ef10923fe7cacdbb2fa8cb9623e627f752ad3bff6cb0
[+] ./data/malware/cb0103b3fcffdc166321a9ecb304368095c7b5d4e8219ac920cbe1b3e5b89ddf
[+] ./data/malware/bf60b1c50ae9598d289a5b9e2223cbb09c2227552ff83a490491d6d74f840f9d
[+] ./data/malware/78efc5995178177035e59357d306eeea3c6bbc36dedc5a5be980aa57e74dabf0
[+] ./data/malware/604a974c12832f7aae6f2714f01642d80a72e0e11015ea2f77400a165f96c86f
[+] ./data/malware/5b7b07d1a22abe6baa665864312ff2990cfa41e9fc50b71041742a612f11f7c7
[-]
[-]
[+] ./data/malware/ae090428cb05c1d951e1641d0471b6533a5bda75db1c557cca057a3372d0336b
[+] ./data/malware/7b4870390dbbfd1467cb4554ecfc88704b82551f31ba065093199d8d1f16ebd5
[+] ./data/malware/9fc2af1fcfe6f7edbc0580a7fec662c095871ae1bef9faaadf36a1e737939eb2
[+] ./data/malware/a0b4baff4a545b01f9e18d1aa963cea21d29b4fe10657d2457b6b9afdefd9165
[+] ./data/malware/6daccdfab365667009132e7c938a6dceab09dbf11d9df8678cc7dcfe8abc3973
[-]
[+] ./data/malware/4f63eb99dabefb760e61745ebeae4981fc16d91715605a717d3cd94db2db9789
[+] ./data/malware/3dfe8530b3c7425d5363ecb4f90f1b93bba9dd353af33ea72ccf3aaadf736d3a
[-]
[+] ./data/malware/d3b74d0a7cb512a60472d53d09a5ff4b9813d6a76ea8c6f8b926f83469537624
[+] ./data/malware/77293255d2e6c1d3ceaeed6739073a6844b976ff8497924a4695318f0f61f993
[+] ./data/malware/2f6e2e657c9c15fb9828d2a6b473a77327a2f6b0e1e3d0a0975f2a5c7aed2d13
[+] ./data/malware/cc007c0f5f127e8c6340f548888cc7d7aae12c60e2c951e622b192b272ebc413
[+] ./data/malware/06e931e942a7b3eaafbac790e6ac103e7a77eb2faf1b6d3d4127289a90b985cf
[+] ./data/malware/284ee87a6751d1c031bf5305ca4f5025cf8043f3fe71f0712514beda6444e640
[+] ./data/malware/d059c198f98d55898e15b4631e0e5eff55d0f699efc508e377c84e637b75db49
[+] ./data/malware/2debe67a9d687500e6a82b4896301429280435bb5225bd90abae4e7cb85458a5
[+] ./data/malware/aeb9b9b6e3b380aa117c4fa7d9482119b231c629c0ffc1e6eb3c0c5d066e28af
[+] ./data/malware/242335f7306a747874d99734e86f4cbf9b90cd6af0ff6ad4cdc1c6d1716d89a9
[-]
[+] ./data/malware/5f23c5c42fa609d9a42f562f8e64211d59019bfa89ba039c926abaedbc1c2318
[+] ./data/malware/77b438e42357321350d2a7c0b543f15f817991958364d7d3c3688b9aeb28e623
[-]
[-]
[+] ./data/malware/a63b12be457d884f289c74dc54e9e056d2040e0bb921b1cccc888db4c8fd9ed8
[+] ./data/malware/a2dd820f6ec0e2dc19691b35aa3ae72d3a0e499950b6d54b880a141496d5dd8d
[+] ./data/malware/534437dbaf653a5eb9eeb7f50df6a105800ee722527a598cf222eb488a3a7095
[+] ./data/malware/6056ee4e09c4e67e50a113f5aca5abcf5790ed1c36bf9f154f630be4b1f5e84f
[+] ./data/malware/8e777183a21aa9c1238a306550e3656d3825d91cad569a210b3170aba1a12cd1
[+] ./data/malware/aeb53cb28bf5d26c2234c12e1bd4ec85570f8420e94da1a111bc962f2fe608d9
[+] ./data/malware/db65794f7ef7778c60f9a98f5a30e4a820c16d32ab033c3b7751d91e42f9549c
[-]
[-]
[+] ./data/malware/07cb05f72ad3be4f58378a618eef1b957b9a5a57d6fc6e0f15e850aca5d5161b
[+] ./data/malware/15add92599f9e46fbb9083de921f2bb6d6a5850c500c637b72baca52da8b7750
[+] ./data/malware/b9027e7744cc79f86d3a2c734031fdecc84eb99e3c7f8c2e6fcc7022dc8c40b4
[+] ./data/malware/739b028044f47f6bb25d3488bd131bdea62d5dd3111ebf6cb9716c2cd55393be
[-]
[+] ./data/malware/4edcabead7df2e864c6e874e42f7d6c999b2f872ec3a41b06e2b3193045c2117
[+] ./data/malware/1c22680620514ba964277970ef4f2337cba95f2ee888ce2ba7fcc79696ceaf85
[+] ./data/malware/9441032d923e580327c87c44a1258726267a2c556ad5660b058409df0c37234c
[+] ./data/malware/9b53be1f8b1a550ec9a8d99af5e6ce6f3adcbfe6747a6020b2ffb0db005e482a
[-]
[-]
[+] ./data/malware/6bb4f7b217fa108f6d218aa8acf1c7ca741577073009ed5d265003f05fc09fcd
[-]
[-]
[+] ./data/malware/241d986b7b36353853127986de8d4687eec42b9c39bad2824c90ab4f18cc4961
[-]
[+] ./data/malware/efd5f0db92b96994cfe87d71d30234132a5b5bd61dd9eb576f154e5474c41be4
[-]
[+] ./data/malware/ed79e88bd6f0e5a6472b560e95df02e2a806b51791024bd0ef88e41badfd17f1
[+] ./data/malware/5314ff1f49a498544f8d4d3afdbc8e3536a958e7ba75e5dac1b8ccd183b62126
[+] ./data/malware/e0b97c1bb84dd9723ffe2c1d87b01e88e217a535b570d159641bcfa4952333ed
[+] ./data/malware/8fefab350799a00a43005745bffb8f9bae3d1a8bd6d4861b886b930b0f6112a3
[+] ./data/malware/d286e34dff391567cabc6acadc28fb572b180d56b6cd40d43752af4100888340
[+] ./data/malware/54a018f57390ca007adcec44a49e510ab0cf78e4e9698fb9daaa3fc07cfa18f4
[+] ./data/malware/66c6327c3e1c5f001fb61984b80e58fe9c34f243744f3a8752429bad518f8749
[+] ./data/malware/99052b0c9c4b47c853e0ef9c20ab4c8f4cf234d16b350b79f7c91dae506ce34e
[+] ./data/malware/33d9efb38d0fffae6c67c329aecde9696ca915a571b178a5482efd11413fd786
[+] ./data/malware/47a7a5de661e37d6754f0ca1d24e6feb49f5e8b4080b0a40b794d8904a011ad6
[+] ./data/malware/393d6000d170cd5726668b00a0e99430dd390b0ca09da0360d17e6ef2af69228
[+] ./data/malware/7e7192e906c44301c0a0801e0479de5451b27c4de42a41cde2b4df15ed3d71c1
[+] ./data/malware/34f8571f4152d7f493b5339d175932d3b4be713769aa8b870457ea38bdb9a65d
[-]
[-]
[+] ./data/malware/c611bb7eaa165bd6b85540f31dba08ecfa79076ee56187d28b126ace54bebe52
[+] ./data/malware/8a60b820f87182605953df77025ed1b8274a6a7a505243ba9e09feeb359cb536
[-]
[-]
[+] ./data/malware/ca9dbb4128a952aebe242c09120880a5001fc39b703560e3afc3ff5762c9f142
[+] ./data/malware/4aac6b77c7c48d212ba41a231f62792100ef4b05e5087b9c1feb8a71e63f4e5a
[-]
[-]
[+] ./data/malware/2c8f21f584a3803463d2584785b85f483f5c14abd910bae289430ed2c6ce5e36
[-]
[+] ./data/malware/34ec07469a5fbe567932245cef254e362db1ce3a9c97e9cfef298f47bc08642e
[+] ./data/malware/3f25be90c7c84ae837e874dbc5fec5f28f3bb087746bd24e3ba11cc7ea130f2a
[-]
[-]
[+] ./data/malware/8e5e76d065e6339a183c4f15f66e17e79beed735cdebc166eb4f3e5371d780b1
[-]
[-]
[+] ./data/malware/0825c00613ec1a0c879cd5053f862db5a7ce9368ef95913f91ff7eb6280947d3
[+] ./data/malware/47bca70cbc72253dd7d97d83edb7d1456f0e2c2ba4b667f98fe1456c5edf5c07
[-]
[-]
[+] ./data/malware/cb2894f04f790e3f8be68278b6c80ff35f42f88b98137ea8fd3165cd09215ede
[+] ./data/malware/8f6554e78cfb6d1d3898dca8d8f14757784a167fec5438ba3e3227fcff9463b8
[-]
[-]
[+] ./data/malware/7f549769ae36cacca1f331dd0b6123dedf4ba10badfcb798c46d810b2ebd5471
[+] ./data/malware/6b2a17901118712076fc578b12cb46b892d2824f6935297d919af61763ef8608
[-]
[-]
[+] ./data/malware/c3c46fa3a2818518d22391b7ddd7910542da15e2ea5c608f3010e8dd7e6ffa75
[+] ./data/malware/799e53bf46b012ed9bb28e2007bd830333bb70b62134210e5967e5a2416665b6
[-]
[-]
[+] ./data/malware/2b77bcec314435ec275eca22642dbd15685d4c3350d83a4d775fe2a8641d5c45
[-]
[+] ./data/malware/b781bce08d62ee8ca17be3dbb1842012a32532c3e71ab69e22cdef60259a3464
[+] ./data/malware/9b38ba90836003bf5cc67f75769be3991227fe5ef58b367a4a2bf0ea0d1556f3
[+] ./data/malware/c8da1a824306a596d3a0f4e84e1f492a3d7fbde77484a72d485f6deb9de32bbb
[+] ./data/malware/7560e4554d08d0123b38ea06136c212354eb37245bb31fe6d92a2ea12c687169
[+] ./data/malware/14d06b21ab235a0c4259e0002c7cdf653491167da4f02fb4820f0ce8bd067800
[-]
[-]
[+] ./data/malware/5a10a670b1f0f4609411055c234193ace3ee941de8c07efdcbe5717789bb3a48
[+] ./data/malware/513e6f142cd61a2d3abc35735b35ba8681867b794ca9e511b33c6a4fcdb5b5de
[+] ./data/malware/2cf12dfc7d2db4ab5383592293a929a3d73850a5957fcc330ac80320ebb43a8d
[+] ./data/malware/f89e7192d08324b8d1f9669d5ad22cf3e3331c3b8a31d73008378c74c3a1f1c9
[+] ./data/malware/6ef69ff379dd2987fb1b88f2f82623c98a92fe41f71d05f00f96d179d3909ebd
[-]
[-]
[+] ./data/malware/8c5a0e5ebe5061a358b706986a818ef98ee724f1e3d978f3a1d85f4882e28957
[+] ./data/malware/1ff97b0d790e7d34e4f4c4b18154cf90ff82a4d5e66665b893ec3bb3ea8c1bf8
[+] ./data/malware/af6a6786793afcaf681887ddb812cb14562d73d6bd6214ba99bef5ae379e1bbf
[+] ./data/malware/d33171bca09c4f40902144810399f44d3e8b73e2c6c635a020525004ba7ac53e
[+] ./data/malware/a4c65a75662efeb5149fbf7cab8e73ffe6422040ed6d0c8a57f27b2ad3007998
[-]
[-]
[+] ./data/malware/34e7b0ea40b7e09ceaf993a42e3c0c9e68e9841e5eda859d06b0aa141a50647c
[-]
[-]
[+] ./data/malware/805374ff33c185bc2b5191a8c1b4c19fff4f774856dd1b9fff0189ff0bc9a989
[+] ./data/malware/07aaac257f6fdb5c4060722ef297e0c0e06c24861740014f94f4541c7eeb7279
[-]
[-]
[+] ./data/malware/6592df07e6f9c9b818e7c9b45331f5ca79e60ef5977d2b3ab19bac23f585740e
[+] ./data/malware/a5832b8f7a014354a6c570094226500aefc7d3fc804379a3ff79dcd8cc719b45
[+] ./data/malware/9c0f5c51f85733cb4d5b47c467ce9f787f8d6f446a03fd6317445d86a73d1b38
[+] ./data/malware/a295b2ba638cbc488c0bc9faec2bac82b720a525ccee5a9becdca312480ea4c4
[+] ./data/malware/ac5883f82889de7303a2383e323f9055b304b692a457f3aba05e962a127337ab
[+] ./data/malware/c80d55690277777de5bba0a0b52e4d9869f814829e5cf6bad0dd9ee3b9976993
[+] ./data/malware/73a6f060f3e62c8067e29563a1d27f2419d760a4f1a7ffc1579e307f5f4a58f1
[+] ./data/malware/d7d2a2e15082d02b3be99bad6dd5ddf122dca716e204df7e01341b6fa36407ab
[-]
[+] ./data/malware/eed1f52569e1839586f5d70b09ce36873b081b0ce70f47b7bccf16a17edd561c
[+] ./data/malware/bbb7ae83a9922299538e33465a22fdc54ec6c15d6e9f0637c09d24c748848762
[+] ./data/malware/59e6176a2d95519b793531b4ca584e34d7195158fc7bb280e86cbc23d2bfb185
[+] ./data/malware/9abf6f9bd611fc58a61fe989df1a4a20eb670d8b1bc6a300bfbc76d1c5d9d193
[-]
[-]
[+] ./data/malware/5e83d91dcf08a62c9c02dcd5bff3f268f84ac9bd0152a81b653e08c2e56fed8d
[+] ./data/malware/72e6fa2b84dece16c7e0a1ab93e1b551228005380fa1e90591a996592ec6daa5
[+] ./data/malware/5480b04b18624c10222fd5bf67a19e4ec6b606561e477b928e80c7211532c79a
[+] ./data/malware/3f4c9f83b441cec84667f4ba1e937788b32d1d29315ab0e874df73bee2657ce2
[+] ./data/malware/01d9eb3e7c4b0a8ceb4c69924daba0bb4da90b0849665c46e815ae9ddf0c24d2
[+] ./data/malware/ae1c10480e7bc7c94bd038bcb1e33a7ebde7d84261d8317eb00a864726f0a37c
[+] ./data/malware/3dc41de2a9165db7ed462b50e0625c75e903cca91bd8a5ffca86ff4883b3a8ce
[+] ./data/malware/9bd02fa85c6ca4ecb91508e87f476d3acaadce24c0c9c8a0a6e10fd03d71a37a
[+] ./data/malware/54b9b8c9c1fe79d6a279ecdaf4ad8bf21e15e2ba93933bc43821ffb362b81ac5
[-]
[-]
[+] ./data/malware/331f801955c58276a8151065aa3011bc26bd95fcfbdebd26d20b0fe6ce0905e1
[+] ./data/malware/f26a9a6a65bacb457abe25895e5713c7459e8f91add60584be460a8ee4858a62
[+] ./data/malware/ea9142915371fad08d233c021c7d72bd252c30a966b195e3b510c3684cf76585
[-]
[+] ./data/malware/c00a16cd22e54538300ce78ae97c8f5d865de8edec22c02acaab67286b53ca19
[+] ./data/malware/ca5e87fb923947256bfe1fc1b92919a091c6da3ea7a3477871ea7210a01fb9b9
[+] ./data/malware/c1f64acbaf96cb7d78b008fd5358f799d56960c8c393fd0c4d0902a80ae76bdd
[+] ./data/malware/865b2dbe4bfa34663444dd508655860778332f228c52088ecb681538406270f3
[-]
[-]
[+] ./data/malware/b30503fb0eb8ffb6711df39dd5e2c8b305ea8c1d60cc81df51affa2f8e4a0713
[+] ./data/malware/38a08e1f3f72bb4dae5f65e9d968747389ed61bff9e4aac3c74b636d117bb9fa
[+] ./data/malware/1c14ade9d37a71d33dfb45c7d72f9f4b6a6ac3be425d723b4272b5cbe1ac735c
[-]
[-]
[+] ./data/malware/977a6d01cd81c628d89f6f0f7df7689a5eb3519b76fc4257a9dfcc2d96cf2878
[+] ./data/malware/3b38878bec77b98c79bdb1b209084ea27f708a33f2933d945cfe1ba1d8f30673
[+] ./data/malware/1ba4df646c590d5a0595ed0f33e764e79535ccc5335057827214c716cd2a982d
[+] ./data/malware/6dd17eb2564bc0263516ce985a02b345974dd624152ac9f87225f85ac040dc88
[+] ./data/malware/71408dc0a8a68a5e457a25d9f39c967a6ed0488180ff3c63b081decb2e126cd2
[+] ./data/malware/8568f814e03594d9a352607e26caa6b10fd9ab17fc2e529946246917e48f88a1
[+] ./data/malware/73f22d8dea968b0f417f88d7fb4a7be4ce7e5109583b36a6eab798072e6fe832
[-]
[+] ./data/malware/74cdd7e59b3abd27e56d06139287b79ecc92ac6a1dcdc13d34ae65f89860ec95
[+] ./data/malware/cf621637a0ad13ca415ebc77a6e6d90caf6391b9997f0cd0ad09c5e884035b82
[+] ./data/malware/73042ec92014fd226e9254c5cc03dae59b097834f05e70f70b571860420da8a8
[+] ./data/malware/6bd17fc3a63470b20bba539be198ea59d800ced03b8362484fce9291e8c22928
[+] ./data/malware/4a287131352410c1e0c0139a2bfe45989209f7aede866817d89e857ade8a7658
[-]
[+] ./data/malware/4e81aa5a0a2567ff616f7099774d742e22866dd010c3a850290f13124009de78
[+] ./data/malware/32cc654cc4073e9dcaf78cf6aa3a49215b24f51e351f121752e3f7dc118a5b36
[+] ./data/malware/3c8fba7851aa5c9eca70752fcd64fde62f3705257eadb51e7bd0bcb2b1d3491f
[+] ./data/malware/9b88a79837067b2b1495e54df55218df8a6a55c4898b3d37bf56bdc0b9d5bb1d
[+] ./data/malware/cf663f070b61dc087ec5537c55a7d1727e7c4ed6e1dcdf8b20576ccf9de9c3b2
[+] ./data/malware/9d05f358cac118b158f311719670427ff0746133e37f07972db6a2d7f1e5e27f
[+] ./data/malware/623737f068a89cd15b608abdf194a1c666d621d0024750fc9c58492444bc9ef7
[+] ./data/malware/7d000acb7f5a4d390cc1481a44635d5692585a11ed1b6ba752b45ed2e256689b
[+] ./data/malware/3fa426d290f3e54baa17d1b867e5edc9e83d9d7b8aa38247dbad72d8f87e06ec
[+] ./data/malware/6ac80a063b8606daf2e4975983b142e44ce7e9861815a11ad3b2c7cb853d73d3
[+] ./data/malware/4e977a30a9648c13e874c4fa95a596c6eae65eb83b76bdcad8014df2627ef29d
[-]
[-]
[+] ./data/malware/1464e665566b7cafbfdc7aaa0c67e5daa4c92002abc87941805c527aa15bcb35
[+] ./data/malware/5c9db4ece4efdab4ef8ee14727084031e71a257d8409bcd68a5231c83df78e86
[+] ./data/malware/6ae6183b55c18e6ace0216cd0903f3cef52ae00f2dbf0461fc4c66e6e7249854
[-]
[-]
[+] ./data/malware/6091bcf4dbff3294d19334246cd9c793cedab2ed0599ddc43707195a845fc236
[+] ./data/malware/96cc76f7ef8e8e533d17fe5c34fdd944e1e3e21723b54a1d8ee6df97a2a29346
[+] ./data/malware/3a1a39852786a3210972f4f3f3dfda8ec10e3bdf0a2e88dc412be4c06378b483
[+] ./data/malware/d2fbfffcf8f621629e718eb7f82a1aec73e174b4fbbbadc1424f3b93c9dbe581
[+] ./data/malware/c1aac973b9050c9bd23dade59cc3e8c58bebb9a6229f6c06b5b58f3f487c138a
[-]
[-]
[+] ./data/malware/1737a2011c904447473efaedbb95934860310a2e117570b7c43180643ef3690f
[+] ./data/malware/3c2584a26896f9e70ae767222fe0b2d23d9971cd7869d054ad3e4b705385674f
[+] ./data/malware/24d88bd850dc75992c0facd5091db956aa95c42c8296e7bf9ef0dbd115cdf410
[+] ./data/malware/519dfc9e14f6480a1a1ec3ba7745367d77e4dd798685eb8211e3dc23417ff43f
[+] ./data/malware/2444a501dccaf6f2dd85102fa014e41d9bde5f0d20267084c37ccdd99b21d9b3
[-]
[-]
[+] ./data/malware/adc82f423ab22f6fe031d3a80683db642b5a92cfb748c41ced4d0b2b1e4a04de
[+] ./data/malware/9e27dc85bb110d11d762b594f5d6843c06fbbd3762a3eb4b94b968c5e5a2a21d
[+] ./data/malware/deff872ed525bc283d11d386ded952dbbbdbb32c84d3d17631d27b5f7b04cf83
[-]
[+] ./data/malware/f493057440e28d88dac057c92b21b47a6e729fbaf19e8fe4374a23793a5df755
[+] ./data/malware/359ed51b783a857cf8a986b08703540bb5a4a47f1672bc7379c43c5ee569e8d6
[+] ./data/malware/59c2a6a2f007d06bb1ccde6cfb34444764899c2d2c86501058cad75c3f9724d2
[+] ./data/malware/480dd6a26428416c54673d10d25e3bbbfce07430713f4fa73168063b55babb93
[+] ./data/malware/9b68998fde3e1b362ddede54bd76a6288f8c4286b5ee8a2761a5e3acfd21a022
[+] ./data/malware/f18fb26d15a28b2314cad232830aa15bd06e97c781ba2ab37a4146fc7cb04e05
[+] ./data/malware/2d726abd9e0bc3716f86141015eab7379689115223662f943d7579f9c683d3cc
[+] ./data/malware/6dbcb3b1dc7a5dc10a2440241c192039bc0b5fc552ce4997bbb5f927dae816ab
[-]
[+] ./data/malware/bfe14df209ae1ce3e58bc6974573594e5ec092eefb2b9eb70c7e24280acd62ed
[-]
[-]
[+] ./data/malware/3e12b00604bbb40f673a38bc80ea882874c2fa3b2670b136e0b9b79dd915a1fa
[+] ./data/malware/69e084e17f3256766031cf1de87950f700339ec7e7de02fd8c80e8e13cf1ce06
[+] ./data/malware/6a059810c40bf6534540ceb5305fdc08213541da786085c1a637d5fbfa5ef9b2
[+] ./data/malware/8bb2546c2dda690d3540d78ce745a99b335882ef2dc48a7474580006d9cfaf79
[-]
[-]
[+] ./data/malware/fee18f402375b210fc7b89e29084fb8e478d5ee0f0cdb85d4618d14abb2e5197
[+] ./data/malware/baa0f9e799a3d46ccb04c9d4520a69e58383b2d88aad8746f9214eaa8d3a06f3
[+] ./data/malware/9402d333af81d07ddb8c9d90b722fa32a03f2a06e921139e56e4ab4d16e516e0
[+] ./data/malware/210fc1511f475c1d448ba4693d99487b70ca50b2448c482026aa1c7e87d9424a
[+] ./data/malware/12aa72f9c1d95b0796bf193c1dcc09a3694b6ba84252d748aff5e5d133832178
[-]
[-]
[+] ./data/malware/78ad88d90b7be0504aa97e796e712084cfa8e29316e73c801fbf99d3c4cb80ba
[-]
[+] ./data/malware/bb0471c1357a1552cdaa0c94bac293cad20e2838ba91036ae9fcdf815c2db5d3
[+] ./data/malware/afb936117a51446680827f2964dbdb34f2dffb782ab9929f7ec992725096f6e8
[+] ./data/malware/d7b0f9e0d738aa6926ec9af18686a6d512f8d1ab951c559a22481a2da905857a
[-]
[+] ./data/malware/95106629b0db072f44822dfa15d2f838a7142880f82eb6b6faedca4f12a56a66
[+] ./data/malware/a08e9e2b0032a4a13a01af974d8489137dc3a3058b758e8478a21f4f5c140c38
[+] ./data/malware/45e1fd52db8c8aacf9b19f971368ffba8ef3f29f83e5d0c2f3912a52d202b4e8
[-]
[-]
[+] ./data/malware/80747893a1c549f9efac06401a24938b12f71a60694d26c7953d06a2fb8a6c79
[+] ./data/malware/b95a5e2ae5653e4de504a1d230857b40b1c251c5b832057a3f3ac67ec4cdb408
[+] ./data/malware/9b53c66e950f469105cee4b5c653e3f50e1650e5ac9616a9df7a6a8ff87e3be8
[+] ./data/malware/b5f5fce7b9eb7c338b29ed4a152703a949c9f2092a1db3ae121c195687e31e1a
[+] ./data/malware/835a520db6ad05bd9e5f307c23c6db2929c45ca32bd09d6c5a14fa51a1b0866e
[+] ./data/malware/5319d4e1f53c44803c2952361d555510324a06072dc3c1c13c98594bc70013d7
[+] ./data/malware/3f871160d4ddc76584e793ec3f40f1deb83a2f7b5616e2306f720e5b4dbc1f91
[+] ./data/malware/14eb6038b34896245ff06998d98c4d7188292ec9899531222542b980aece72f8
[+] ./data/malware/b608dddd151c96f7c15fc780b4fc1109095dbc80e356598297d81207419d5b70
[+] ./data/malware/76437993f28048cb0461ee1d622e853460791ec0cdc97b156a4789143f4692bf
[+] ./data/malware/3ea7116346c1059548b52f43f3564672120c322f89d712902c664f6c0706d28c
[-]
[-]
[+] ./data/malware/bf2a030e812b0af137a649bf53e310c9752e0172ff6e873ec77a2e8b3db256c2
[+] ./data/malware/61a84fdc0e402a04b4fe3487c595e790ade0df010c0e928933797e47cee386c9
[-]
[-]
[+] ./data/malware/ae39e62466f163d1ddb80fcfef7e30fdb7412b56f54578c809acb3e52e42abfc
[+] ./data/malware/70baf02e96ef1a515db921c1a3c466696af75a6fe51d8f1bf78e9e9d2964bd5a
[+] ./data/malware/1578893a802d00f6f5cede6b4ae74a82e844761a5666e5b0efcbe648e6741fc5
[+] ./data/malware/821d5b54191fa82573243f746b1dd746fcf1c8271914d1f654bf742ed565ca0a
[+] ./data/malware/335eeb80174bf8d034cbf23c7d2a41ec1413017db0a9c23f5dd4fce0847f4009
[+] ./data/malware/c233ce7dbdea82ef96aea61eabf8834d356435f6fb83db235bb46cfffb99b793
[+] ./data/malware/60dc6bb966079d506892fd6320ef54d67b38a74a8bd9284520c4c78f028dfad6
[+] ./data/malware/945e189c3ddac1d8300925b3faf553e8c3185cee0518e670089ff4d114672bcc
[+] ./data/malware/178408a29a7d6affb78af839765008453a2a1125026a4c961fd765379e7c5eb8
[+] ./data/malware/58d409bea05dd325ce5a2db1b46db3c9b8ee1cd495928fd5477a0f7e054231a7
[+] ./data/malware/d21aae932a180cab1159fb9ecf0224bdbcbc90e54a6fb72edfb291f6b9b2cf17
[+] ./data/malware/37a1a31a031414bbcbd7b7a7c16026f7af003b2c4b1786aa1bc0b93e86aff8d5
[-]
[-]
[+] ./data/malware/25680ce9e31c5642bd173d611ac465ca7166f7504d67a58e20fb5e6fd20f875d
[+] ./data/malware/5edd9e5338291dda1b4bba7ba5c6e7c7698568ba411ef3c0972bf96a48308dd0
[+] ./data/malware/54c1e4ccf229be4378be24b10ecaaab4516072e020ecaef78742c5cba6d233c1
[+] ./data/malware/b4ed50833256dd30497430ab7ae859e3902e72a3dc202dff6168f941666af334
[+] ./data/malware/74e16a62ee0983797f4ee5d2b04164d1cc90448269807dc1105e11a591279108
[+] ./data/malware/a8d2184d31ac2f84559b98aacff6352447dfb4fbff77f1ee1b8c3e4eae7c2afc
[-]
[+] ./data/malware/679185dfe9116ec51311577155282272f97eff304d230e6d087b5fa4f83b1ddf
[+] ./data/malware/201f26b787fb7913b384fc266f649bc698e0465d7d27b5bf27c7c2aa7f538b62
[+] ./data/malware/52c3a44ae22f0dbb72cb2de5fa19a46c9eb4ee0d79887aa390438bf1f1d63871
[+] ./data/malware/16a8a52f7c6699dfce18c9913aa748da7a62900f4d5b049d1984cecda95b7a94
[+] ./data/malware/18a36234f2dd49da0a65f4faa43830f1a8522027483be661df22a1c23b8ce122
[-]
[+] ./data/malware/9b72465f522eadbbbef1ad0d4b44ea6d4f5d554a157a2b8dd779172b7454be18
[+] ./data/malware/3f09ec2b3e1a0c6ab91b596f0302e76fb741a80039db91693ac93a7b71113610
[+] ./data/malware/e9142a19eac88acda42d97fb32435de8bf0434e355f4cfb58b948f193db59775
[-]
[+] ./data/malware/19ab5b7bec07ec3bce7d87ce3fb851943774b93a300ab19d10f06739886fde48
[-]
[-]
[+] ./data/malware/a2c7be5350a73331778681b5491c2258ec3ea99897f725c23110adea6bdad832
[+] ./data/malware/7a420da87dbca02d188e2ffdc62b016dd1adb737be705f86ec35fce55f1b42f5
[+] ./data/malware/2a5a580d083aa88cfa19f735cdcd0e0c79291384088df317e2c0f621f3da22f2
[+] ./data/malware/1c3d5f48f9abdb8bc3ef5cb84c8652ca1516bdd7c78d3fc972adcedad55df69d
[+] ./data/malware/40209dd150e8c1ddeb618dd1b4520bc2eb76b1c7c77d59860aad859d29dcdfe1
[+] ./data/malware/a18937267aa0b97fa0fddcbb9b5ff1bb5995000103db3f4f3633acb6c44c674a
[-]
[-]
[+] ./data/malware/c15fe5257c5fa068d21d321cbf11eb5db3cefb3b75000f232455bdbe84f98c33
[-]
[-]
[+] ./data/malware/b0c507b096c8975f9bcd5270b9e142596ecd5deb940c51622d1f4987a5c92879
[+] ./data/malware/75384515682b641bed4b3cc09157f9c16d1a4742a0f08bab5c250d616582ef8a
[-]
[+] ./data/malware/968985829bec5c795c8e9729ef2d3e66a2c5d189f43a4c6c3a2b474c206c1c1e
[+] ./data/malware/1b0827e93dfec06d54b8504a3e5d9c73f227e24d7b5481e5435e09cacb391f6d
[+] ./data/malware/a543d660352d9e6c21a8b3c830ff682a3b42e43e2bc881e03787c64b83cf31aa
[+] ./data/malware/df481c0a996c8d66840a21bf3628768add8759571edd504cb3192b7b8ba3376e
[+] ./data/malware/fab80c8daa62c97bbb4cac1520a95c25b6cb755fbd181437feb2e51ead19b368
[-]
[+] ./data/malware/43bd6c7e304a5ad09b52f279ea84eeb7df2e55f3d92428767f110b7ae27a3bed
[+] ./data/malware/85c0b53691d27e2edc76975df9d03a9182c7212f56da8539e3066127cf57b6cf
[+] ./data/malware/1e70874eff6d7ca829968eca23f6c43478488d12442ba676227ad7a47cb9ba06
[+] ./data/malware/acd9dddb835b32baf47cce03ae93ea8635967e10305acf00e7eb0b12bbcce901
[+] ./data/malware/0004cec68fdb95507c6161d84e4965db60f997a679ce20786075992f1e5b340c
[+] ./data/malware/3aec694d72efb396b6c3c857153455a714afa89f4edb5536219e0dc8a74f531a
[-]
[-]
[+] ./data/malware/48889e272a054bcb255dd74fcec273a61da8d6789c842cf20c06fbec37ace1ee
[+] ./data/malware/62f51d2196485408045ac008b1c6020e10f57cbf61ded71c0b346af2e869ee23
[+] ./data/malware/8d621fadea6da7a8b77a64f287f37c9ce4cd8c685599b3ff66ebca898a90555f
[+] ./data/malware/f20b6dd67a16ed8ff9ca5db8bb4581d32b2f4c11951b20fb798de502db8390e5
[+] ./data/malware/a3d0f51fcf455dbdb766f9f8994140da762dd1d8c4d139c748fce970ddc4991f
[-]
[+] ./data/malware/8991d57126ce4fb3eb9c77651aa50e640f99e39e546671bae8a8d84d7c9b72b5
[+] ./data/malware/4f67d58a4cbb09be604cfdbf75637469d75db9bebdc47efbc0c77fc6eddaf95c
[+] ./data/malware/a514d3f6498c98d2a3c4f1bba802be59eabb5de066355bc6c477f5a6172255f9
[+] ./data/malware/dc52184c184823c942ad69902f8608b0d997590f515011ae67e7e18705076ecd
[-]
[+] ./data/malware/d86d9d0c314415ed5fba9ec59f0b42e1ab3c599f8b25d00a0d1e7e6416776d7a
[+] ./data/malware/9dc0a77f4a26df00b6f2578826852b98266dd7c6ceafaf498415337873bd9aee
[-]
[+] ./data/malware/b1aae702bb095a17fa479fdfb66fa1168619638fe4f070de441a3297976be2d4
[+] ./data/malware/c5caefd19fe5b361a65d124a9318ae8d357bc300e66e6d34d030eaeef2b1ce3f
[-]
[+] ./data/malware/642a03a55e04e2ec6da2f8a8df0a2f8b63c0f35f7ac021eb0a4fa1e92a6f601c
[+] ./data/malware/b4d2adf74b34ca61114473dc6a10338881d702797239a337886e205a246f0cac
[+] ./data/malware/8cb63c682f24b058f474a0d6237ab2ce5f303103e1356bc33958456e185ef61b
[+] ./data/malware/b74493860b294233f324e97349ee9b51838fab3171d4a1f33cd67a3dae47eb97
[-]
[-]
[+] ./data/malware/202096bde5a417f4c9546d8263cd836fffc61b806cde45e3830df7bc83c6b247
[+] ./data/malware/50aadca76302e13145462a6c70559b52b0054310653619ee5ef12a002c90e88c
[-]
[+] ./data/malware/c8651e5b373efecda48ad2ec2f92307e6894d673f0e7d83ae60647a07a185a7d
[+] ./data/malware/542afb77433a3fe19788642e90f3a675fe7040e7283aab5e93266df398c65eae
[+] ./data/malware/432c26e8f90d9e2135f47766a548bbcd4963a1aad8b52ade8894cc916de3af58
[-]
[-]
[+] ./data/malware/2d0aba272b39e942344931beb1469229285ea1e23bf8ee1038b8d32ba2e8db86
[-]
[-]
[+] ./data/malware/3ddd314f1a0f781596c0f4b2191c6beffc2c2df0dc02f7ab4842a3eebfd02059
[+] ./data/malware/8b806500dee38824b854e9d5d4ca7d5df244a8653dc45bfec538c5dc28a5a15f
[-]
[-]
[+] ./data/malware/82961145087458fe8e5de95016722e9bc676f7a5a6a0886262de67b5f6859b6c
[+] ./data/malware/d775ef79cd103752ae08187b28b73227546d0d7583b9ca4fd338931b334eff0b
[+] ./data/malware/3c2a40f64aae9c3185cd852d8113c1bde8142852f115304bcfbdb2b8d753ef3f
[+] ./data/malware/9a0d9c3e6340c7bb8c593b318b8bbbeb98e1cf71a57d7442930bdcdb0345d912
[+] ./data/malware/5f8c892d0cf1ec2d9781c13853b2fb1b0f5e087e4c77e8b9de361b6ebe2226c5
[+] ./data/malware/e84f033460a4b6cdc5a5340ef654cb7c42e01bd690b9033c515c4b2a5ffc65c9
[+] ./data/malware/153b5a09d89213a8164dc511bccf4530af70853b89efd9babe0499777d154852
[+] ./data/malware/3a48814c69b47661371a4ae184640c4dcc3db94cad3715b99db9325c85d5d5d7
[+] ./data/malware/2f6921f9135ee2ab2cbea588746648334d5596a6f40817a11b0268f9fe834afd
[-]
[+] ./data/malware/cda12d1a94fecc9aacc41b95f9df7c0b3ba452496052c6c62d3e0b98347f9ae9
[+] ./data/malware/400dd28d8c2fb176cf12e8093eb344a6997f15e7d333f2abbafe4b56cb47afbe
[+] ./data/malware/8ded3a26fc6a148a20965f13d6aaa936a04d0105472e8b10ed1461d3b0673e14
[-]
[-]
[+] ./data/malware/90546d4bda78b91c8296207505e5d5475c4d350646906b2d6f593391cb34e0e7
[+] ./data/malware/c641b11634f0f5319a153fea5ec9e4ae1c4c049c4898a55551f2df0ecae333b7
[-]
[-]
[+] ./data/malware/317849c236aa238bd3287ed58effeef15db1c7d63cf54bbbba1f88b3d97d6c7a
[+] ./data/malware/9739b574cf04d593fc3984a467a33512fa153c0c8330bb1fd929a8e951956775
[+] ./data/malware/79aa829a6dac8d25f453ccebb063f7f080c3abc922031f4c7a5dfb4dec8036d8
[+] ./data/malware/f65a6c764b773dbe55a8dc0b5a992b55e0b3621bf11081ffb273d71eece10641
[+] ./data/malware/64ed0e533d82e680dc32f4d593bbc63f97bcc171f8d4d43b43366e2cc6d6d826
[+] ./data/malware/69422bbcff151cbc45d6f45a203c12a0042eb281f72b4a059cd2ebdae291227b
[+] ./data/malware/61ba03cce4bb75cc502f8b0175ab3a12f7807a51f2321468ee32fbcf3317287f
[-]
[+] ./data/malware/1af8e45337900146089a025fb0f0c45a2738841dcbb547a85212d202e550672d
[+] ./data/malware/7bcf1cf72fc56121779116e4e11f9a7f4b96a5dd04b6427e0bb70374bf1a898f
[-]
[-]
[+] ./data/malware/898de47d1976e3cfa2743dc6446126110cfcb057109ea775db5e4da535cc5549
[+] ./data/malware/8416770393cfc2367ec5cf05871e059501d4e177bfd3a95796a880b3bb0b7f67
[+] ./data/malware/abfc0216cb1db3c9345ae4ce7f685a569e9be9b90fa391cc09ee0f7a40112fa4
[+] ./data/malware/2b20cab13ce9e060bf31aa1aa6dca2db2d3f1d3dfdcaf7bcdf91e12b3a6e05f5
[+] ./data/malware/3d8fd3071a78e85341b8ee9b0399fb665a391622b4fb6c27b3ffe111bab5fb4b
[-]
[-]
[+] ./data/malware/c6eb63781a87572ed1522bcb2cdd5a9e5e1916d2d840ded41cb6759ba3eebc01
[-]
[-]
[+] ./data/malware/3eab2d7a09996e92d91a04b51073dddc2abc99dbe2ddc713faefb3b913ba108b
[+] ./data/malware/5161cdafd0c6d79616d775f79214b2e7e3ad13de71db63e9fa6bfc448ba4084b
[+] ./data/malware/6a3cd9c3d2b5a1d61652085c1a3b172fba70413bd2297ff3f503ac05fd953f3c
[+] ./data/malware/5f119d621493d1731ca7df8ffc67c58f3a7dc3851e76f736649aeef524db0dc4
[+] ./data/malware/2b64f38771ffeea01cbfd5a57505e9bb58ed9328bfefabfa3891e17dd564ef0b
[-]
[-]
[+] ./data/malware/cb6512661e568c9b9326d915a74c809ccf71693f0afe196a9f3f068aeca646f1
[+] ./data/malware/21a99040697696e8095e3a442303c12c1e8ebfa481fd13c16086220d505c502e
[+] ./data/malware/49290e5cb88e66762409c2bb3ec2463f44d9cd8d56020edf53f55a9b715a8d64
[-]
[+] ./data/malware/7d1bfaff177d8793dbc6f76eca5487b338f69c9d3c84e8e1601cc77e59a3d07b
[+] ./data/malware/420aac924ab38220b5cab5fe6eb895a82efae97eab224b79881677c1bdf9dae0
[+] ./data/malware/52f6e2401e4b1c6f91734b3dc20e10de648688de4a9f05dadc9c8e8931a64cd7
[+] ./data/malware/41a01196b9d71cf32e34a643924261b9b0d5ed2fb4f4147cd83e31e4e23dae74
[+] ./data/malware/f18a6d3cf01c2f0d46fb23df3ed1e49c7e185b2796f8d54e184a6ea168da0bbd
[+] ./data/malware/73dbf71fbc42b1cb2354b12d3c4c10ca80929bc34100eac6c1db390b6df79a8c
[-]
[+] ./data/malware/411ce28a7260f2a9ad989f46dba2bd5c5cdc666c306af899f652a1de2b7c54f4
[-]
[+] ./data/malware/3528469d41b556fda2c6f22acd8d92744d868ce1c15fbce991e25b76e2bb780d
[+] ./data/malware/a0a55f7390c91afe5764662e5476b2917e5963bbf25364528aea66f2dfbf7594
[+] ./data/malware/54940ef6bc662a3cb3ad5c9155e28a8c459ac919497aa9dc123e5e1af7379b34
[+] ./data/malware/a038bd815a7c04ee3f6ab38cd2c97156b07da76fe1e3497370cb29bfea6f065a
[+] ./data/malware/66732ae7086ac646b223a5244af6a89f3ec25061d9f3d401a6111dbe5f4dd7b3
[+] ./data/malware/176806e07fdd05e2b990124d59be8ba640736550efe71f052c8fc52775b12af5
[-]
[+] ./data/malware/c0b29888d722dec82e3b9bc2424e5e7fb32c3ede9647be5a1e8c501e912dabd9
[+] ./data/malware/2e1738364af0008c3adf761818a88d004402d87f96639681b47fa66adba2f4ea
[+] ./data/malware/7a31bfc29c25edad1c5ed7546ce03b09e8c7cd55080d639678349d81499fc1e1
[-]
[-]
[+] ./data/malware/4744f60445f39850f834c20b68585d747d509e812d307974d9a75f8a1b644ef5
[+] ./data/malware/6a508ee7fa8102b82ab051446a98a069350e2f480f2e7fb8001386babb968fdd
[-]
[-]
[+] ./data/malware/3e1b7db89d3cc871443a8d09b54554fd19b2fcc67d8b32e767348284ec2df4e4
[+] ./data/malware/41dddfdd1b3c91ef07760f678a34fe43d6f0466ec68eb07997960eadf37b4241
[+] ./data/malware/bd6cab093b5451b4cc85b4528dc0251c97a3d11cb3c1493d25f37b06f8cd2238
[+] ./data/malware/639528ba0d2f206cdcf4df6f4aa9c533c899726435c21c67a8398ae989361649
[+] ./data/malware/23a2dcffda0de0bc85eb46b8705b6533f9f0103e3d707ac729a2936235713339
[+] ./data/malware/bd3b15859fa38d34fdc27ae5f08cb8962accdf28dfa3172a9f42d04222c2689f
[+] ./data/malware/80915284b9414f25b362b51db88d38b8fb42724b433681061cb7b211244c748d
[+] ./data/malware/38307a004e8d5680b6ef191fcf2cce0d32a19d44fc4bfbc180b2869095783f80
[+] ./data/malware/6da809b7eba9044a0f1f764c5436e0de8a0c5a7fe810b8adad4dff4812d99fd9
[+] ./data/malware/2703a38a1b9a8718c9c53984f8ae34fee22d2b9354d369795ef205e90fa6f8d7
[-]
[-]
[+] ./data/malware/c65d2b1c916db909d4c2fb0f6893978e76b9c52d53e69f9e3a4a3c13ba1b87bd
[-]
[-]
[+] ./data/malware/2f02a820c591f5c915ae5ab612362848b2a0b48be22529641d732030c66aa73e
[+] ./data/malware/ac6fcad140c294b035b03cd4d15c14122b3a34f74800382f1dd8db1f545540cb
[+] ./data/malware/7cf8392bef146ce128f871541f92dbd23686c417ce5c061e4b7e5678f152a382
[+] ./data/malware/f1bcd14143b9c4f4b35e38a486e5bc281c5104da5ae8bcde963c293e2a32cbc2
[+] ./data/malware/71a42d2c0d2b9aac8a7a572ae3163e8d69b2df700e174190e2ded475c7b71ca6
[+] ./data/malware/fde7f22dcebcfbedafd5daecba1dc9952ff51c0ee433164b5509ec67aeb04d87
[+] ./data/malware/c01fe9f01b40633db53e458c170996a5bdd8cd2f6513c4a054e1514fde661829
[+] ./data/malware/e7725dfd8522b86f60d8eafe1b8a6f227b0a3f1e74e77d579573e113b0fd5813
[-]
[-]
[+] ./data/malware/259486b3ef32096ae8cdecdf20025ca282ff9722be54d71de79f5b36e69b1016
[-]
[-]
[+] ./data/malware/20255538932444661fb16979d0ac347fba388a07e1c096cc6b74710a7ad61ce1
[+] ./data/malware/f32b01499bfea3cbe329958c26e9c0ef5e9b846b5d902a37abe87e11b1dcdea6
[+] ./data/malware/62673b2b94c92523ae07c781f47903913ca28bffe827c49c4eddfddb07fea54f
[+] ./data/malware/adf7d4b104224a9e4eb6e96aadc69c9782661530b33e2d46c3cd9ec1b2076f27
[+] ./data/malware/51af36f519a74c3f2d5b673f1ca48ea3f92d6c60a8ea81c4daff5096b05edcbc
[-]
[-]
[+] ./data/malware/c2a029613bcdc032f9f653f765f10ece7930c8b9294386e3e1ce857494c09a8f
[+] ./data/malware/b4a8b4a9662e20f74c888ef27a0940b7fb6af2572d3d01d51bed97ac49680a87
[+] ./data/malware/f9b4f1787b1d8eb87fd1f0192ce96f70aa227addd6a30ec2a31160d1caba35bc
[+] ./data/malware/ded49ccd2b47b64b9f959746a2d23d4b0021b51ad9b6988b73d68c5dcc9ba168
[-]
[-]
[+] ./data/malware/3a384d62d08835e3e0746848d9ca89a4ca393fc115d0c11e4a5003c1c2585284
[+] ./data/malware/3debde619eea6ba2603167edaa7f6011128554679edda1f1bdd206922b46af2f
[+] ./data/malware/5db1ada64170e7a7932c29998c2e2aaeaf8bded504ac456d5b335037ef34d487
[+] ./data/malware/9a29f1de2628a368849c25cd605c4db409b2b8ddcb8287cf45e23926eea49e53
[+] ./data/malware/6207633b1841e8ead389e463a97b622e4fa399b1aa9284feeadfc3474c507231
[-]
[+] ./data/malware/1f0ddacd24cea4cbc15927edb18b4fb78e206ca896fc7855c53f6ec2cdadc099
[+] ./data/malware/44f9192b213f5588c725d2c3e30ba5ef6bd43b66c617f4ede48e2f0ac0327460
[+] ./data/malware/6bedfe4ecf7dd924c6374437f1d6e4199b121531cdf20df007c828999198b8bb
[+] ./data/malware/1ab3d22097fbfc9c63890d636c5f8fce86f90ccdd282be7c4cf302866e67b94c
[+] ./data/malware/9de51643e99b08e56e076401abe53a099e9590c7083d140464f6f6fc91b14d98
[+] ./data/malware/086c0d2d932584851fec3851282d7de822d07f129ca383924e157adf388bbf29
[+] ./data/malware/6a51f33c24a49eda081c319fe9ddc15b735531a1d847d9b0128e36a357898feb
[-]
[-]
[+] ./data/malware/dc2edc7f2df5614c6e75a9e1f27943075712e88def317bc276cdffb1708f5dc5
[+] ./data/malware/8c398acc63b54549f470f7f83f2593ad2b9a091e4deef29ebbb51efb095c04ba
[+] ./data/malware/3d4b357481c8e8308988955e31def8145ec0b1734b1352f09a469dd052fe9448
[-]
[-]
[+] ./data/malware/eacc44ed55385c3253f9844b61cb50305de4a850c72acd843f7b8929907a0053
[+] ./data/malware/020b9c2e74cc6d932a7f60acacaf269db8f0135538ee81f3bb51e005f1769c44
[-]
[+] ./data/malware/19740564489f1c9e874cb46fe092851e397ef33ca6afe554d7240b7443afc129
[+] ./data/malware/c1479eb8e0065857e0b9bde2c0c62b7bb3167b8455372af17e3274414a380d39
[-]
[-]
[+] ./data/malware/26f557b692a934da20fe12ece8ae586dee70e08b4055f8e8e7715404dfe094d2
[-]
[+] ./data/malware/491b05cb3f9adc92619272c191c9db67c6eddad4cdba8a179f5678749de800ac
[+] ./data/malware/6aa26aa6216320589a41ac14af447ab611d500783017afefbc0bb0206d860bad
[-]
[-]
[+] ./data/malware/edacc966aade9677f5f0e8acfbe1221c632a66ea0d7ed953844bad3b37b699f0
[+] ./data/malware/4c35825542adb5df5ce569fe4131a28052cd3faf32d4ea8f3d494f2e54f8a965
[-]
[+] ./data/malware/6c98b9d6d3b9680c0f0ad39b3fdfc59cbd45a668041bf2dfdc53ee0bf121fcd9
[-]
[-]
[+] ./data/malware/67afdd03734db788bb2e027f60b5e4f341a644db5fce057fe16fb6994ff0e460
[+] ./data/malware/8e8eeadfa03d31ebc8e00a181bd95404c223594ce15c0871b8861bdc89a81cbf
[-]
[+] ./data/malware/3fca9fe19d2fe89cb9391ffe22b869cb8cf652734b4a988ee2a51557616abc25
[-]
[+] ./data/malware/1726f58f49655d41116942b87f5bfa55c53c2280f15350731bb54fe52ff9b765
[+] ./data/malware/8f904518fd655a1ee57248ebede2ea0a45bc9daf63181692589216ff873d504d
[+] ./data/malware/c7a4aa6db8e6c69e619ddb517a4fb963d45fd9df325fff1361ec6c0a5b13580e
[+] ./data/malware/e9a0170496e18c976183a500e736ab58eeac2d19663f94f9bf9703fbf9cabc7a
[+] ./data/malware/7c9b51c03611d6ee1fdb2b9b27bc57acd6a7690c0f4bb354d918522f2a2a10a6
[+] ./data/malware/32a973ce00bf7502162ec5039a78fe6fc644ae0e999b889ba805476b54c801f9
[-]
[+] ./data/malware/69e6ac5e7a648b547e0513821aefdff286918fec9a17bdc604c798dd38dc1863
[-]
[-]
[+] ./data/malware/ac4f4a07170dfabf06e0c23733ea3068f992e4093f81afdfbc147b2f5ae919a2
[+] ./data/malware/0f031acfd428352cda06be247793114d4a5e192a863a83ded0b5f086b0773cb2
[+] ./data/malware/4621b7ffe87b96683b8c55de1464089f6b8fd8564f9b3164fa4113039428cb7d
[+] ./data/malware/5bbc6c1cbc6b22f38d4691e4dee1a171258b74c5cb6bd4196eee46a43f35d926
[-]
[-]
[+] ./data/malware/24f3521bafd4747a082fa64043c4c362a16c1612a4b076d1fa146c2ef71939e5
[+] ./data/malware/9b0ad8cb11583974eac461d138ce1c344b4d0238e70713ee79768186ff00903d
[+] ./data/malware/ca61e148f167f4bbc2bd9ec709c2acebd2af0e0f939b05ce0e61f88106af991a
[+] ./data/malware/dca2f38a365a3878bada4c0f09bdd5a43f3ba661acd58100eafa40db94b48f0a
[-]
[+] ./data/malware/e26cb57638e309602caacab844f911bddf8246a404126edaba9aeeb1cb95284a
[+] ./data/malware/4916a86b6c2b4b141a1b50635ac115c776274bc7b177e6a2d6585775b15514a5
[+] ./data/malware/f492a8b86bbd70975cd524c4ac45df283ea42c280a9423911405824d27a07942
[+] ./data/malware/4f2c4a3aa41d32a1a8a4618cfaeece2dafcbf770af85ef48effa59d330960d32
[+] ./data/malware/3d6ff7fa98a376f7674b9975daca012278683f6cecf22126ca9d7b75e862e4ba
[-]
[-]
[+] ./data/malware/8fff4ea5fc319a00a920005ede04c4eec837259208d1927a6c18cce6d9b38175
[+] ./data/malware/561c898e605592b99a76c372be03280972b9ec28aa08af8eef1231968725a456
[+] ./data/malware/ab050900a8e10fb104a514c6047762d0c37da2a5e95779fb385a9cc8c289d6ee
[+] ./data/malware/36255fcc28988554e9a5b89d5af374876c0f925e47a7cb5db1d0bb49d68039f6
[+] ./data/malware/96e5a790c6a549a44ca45fc96f4bbd6d927ff67d782df1232ddac6d9b32274d2
[-]
[-]
[+] ./data/malware/0024eec62931670946abd4240d38127e23b4c0c9321de43bc9af96804d30dd50
[+] ./data/malware/4af8f703ab6535ed70c03c6e98e1ad040589ceb79726a531d49a7acbac7ad624
[+] ./data/malware/33ea253da16d4bc1a0a5598a994d20ce600bcfb10c3e255b79d5c9baf79a1a75
[-]
[-]
[+] ./data/malware/19b4ef0e6d9ecdd2c1d3f4bc978f2156470a4f0fee10ef41269266d024376421
[+] ./data/malware/514152828f6ecd9f0a5ee1698e79883ca97e39bb4dffeab7cfdd29b6495a2a0f
[-]
[+] ./data/malware/9127e176fa15d685992b36d6781d79dee5c5994431a021d13f78f3328168cd04
[+] ./data/malware/43eeea045ab4362873f0b110ba737c29e71bea6c209c1ad047cb15ae16f00ce8
[+] ./data/malware/b0de112a27c4b64f71137c19428243627f7187f62d092c04b3352aafe26f218d
[-]
[-]
[+] ./data/malware/56ed446dbc6513c68a357fdac55eaffd9ce6463256f5c3bcc0455a571c9f614b
[+] ./data/malware/41754660e199e9027afaf46edf0de3f8be91a19536a27ad4cd08c41f5f213793
[+] ./data/malware/44d6683f47a13d203309ade994b70663c76dabb2226af5f1f1df8cbca6e8e09c
[+] ./data/malware/72542d9a736877019ba23be25276e47375cb4d442796c44f6ade1b6104e8fc53
[+] ./data/malware/579989ee80b64d29aedf108a93ad5efe1f1ece2d331a737278d8a51d43673a32
[+] ./data/malware/a652ccbc910dfb92e89705532c627b82f5590a71462627715b2562072c25dcbb
[+] ./data/malware/36d0d1d1ed96e71b90e2e15da0189b2bbf6f69c21a0e63ee1be706b262c25482
[+] ./data/malware/09c5667f35d0bb61d4bacc3db30e7c91f436ca87d4afca095d5ae64b74a79a34
[+] ./data/malware/557d9a047e5edf21f90cd56f7bebef8ba4f0a279e1e2dd8e6ebb95991cfb7e4b
[+] ./data/malware/02ef8fcd3671438012dd0056b7946edc02ad383bc2b591b9e2b06d1d5c2e334c
[+] ./data/malware/72d410fda343e2f90e1bbf7b7d283f82bfa04b2b2a063546e9e01e72a9d4d62f
[+] ./data/malware/00aac566d9664b844e5d7ae641c58131ce59deced312236f4299638356484fa0
[+] ./data/malware/4f0498aa57fdebcca74c719cda157184c1d31bcb2692cfbb5c9b63343901eb92
[-]
[-]
[+] ./data/malware/dcc2fa1185fdaa6a42f5e2a7e72828e2d04de8e2c2263186559c09446e44c99a
[+] ./data/malware/cf791914b2e3190945882c4c24ce8f44a653643c16a9399166c5b865f9664061
[+] ./data/malware/db7b8bdbf3b2fd7953f4d4018ddb88fff79e8d337122ad3a571e47fb8ea5a537
[+] ./data/malware/6a645668f630f05072da573a2ee6de2c8b56068e24ee117e6c6078d4bf2c76f3
[+] ./data/malware/1b5621c68261f4f97e9852f8f2799e00c9694865f488c40223abf9ebdfed37ed
[-]
[+] ./data/malware/27c6a044aad80ce77bee9c25489f1c2a867f0c7525bcbe7c2dca6f9ef7a271d9
[-]
[-]
[+] ./data/malware/21e4eb7c65655256ddeeac4de8f3e1f6178f4cfc5a7387ceb9cd9948ade15f38
[-]
[+] ./data/malware/994ae2c68ba7f1ad9c9fbdb6b8c70156af9455baf82a5f6bd474b280a2180c2c
[+] ./data/malware/df7c6753f1fe2bb2fd168a715a1ba859e34efdd42b25783803869e1f832bf18b
[+] ./data/malware/93adec15e6e1bffa3fbcac246ffd42eaf34c0d815677e6de2444bd876a2b4680
[-]
[+] ./data/malware/76ea5fed87f149064150f91dd51d7bba3cf7907715f24bbc3b15458d6acd3a0f
[-]
[+] ./data/malware/1f02b810f254fda92c1f45203b5f204d6dc7b27e92d832ccb633de5d790492fc
[+] ./data/malware/29d108e43304fd59b71d7af372bcff505323e94e5cd115fa614c7c6b80bde216
[-]
[-]
[+] ./data/malware/a98b27f54fdc7b542d0c2ff11dc9a0b78c425071620dfdf071ec59b431ecb8a6
[+] ./data/malware/e9d1c4f94282311d558015795d18dde7e856ca07005ea1656ce84bd2132f8f9e
[-]
[-]
[+] ./data/malware/47e60a03fff1c174edbebb6a60e48ee5a8b048f2c6c34e8ecac0ceed8ebdf8a4
[+] ./data/malware/8336d53004c6e7021f9be107134239099e0eafd977692c39ed00a79649ae9523
[+] ./data/malware/af8a50427ba526a7fd34ba42f6c457dcd6d54f744987eeb120c3dc074a8cd7b5
[+] ./data/malware/07ecdbefdb715680519c6889f3b552bbd8f200c399b0387966974f49fb5d27cd
[+] ./data/malware/6dc8848c6775b59b0e17fccc7e89ddb71473fa1472d3fa4044e02a228bfd0968
[+] ./data/malware/6744cee15755896a14f23ecad9f789932097f61f3af9e863cd9563818bd52f3c
[+] ./data/malware/2772bbf4f0a755f954414106f67d73e0db0ba87a721dcfd0b9451173a19ddf1e
[+] ./data/malware/d447bc82825588ac76d7a582900d943886b9f8e39a7bf115ab2673868ae91f88
[+] ./data/malware/bbdf1900774f4d6c1ee4fbe0afec71f571e1ed8084f863916df1ba286b083824
[+] ./data/malware/5dcd219206f72c433064a90d5fd5233740671ced87885ff3881e1694c8f3a3c4
[+] ./data/malware/d73443f9b511a7d82e94e73fb91690778366f07be89f920184bc8fc50acb493b
[+] ./data/malware/133cb2f76051ce78533347aebf651fbaa80e4e9155930b6ec7900ae7816d0f58
[+] ./data/malware/a6734d12c46d70539f43aef735c0de7e9f80e7e39f925b8c3c1a0a000f43f7b5
[-]
[-]
[+] ./data/malware/ca0068ee2b92ebdd3fddf1914cf314da9564238dcf2144277701a7b41d45c307
[+] ./data/malware/f3a1b6ccf1574590fae51100bcfa8a11938f77abe40820cfc483cc8999c0e850
[+] ./data/malware/d4922069f9bf68d2b950d0a7587b7334ffcb9d83cbc7e3fecac972e3ff8bdf1e
[+] ./data/malware/84797885eba607c4d597cbcd7dd3b9af4b9ac436be2a069b1df2e3662dcdea78
[-]
[-]
[+] ./data/malware/6df712028446af021b9ca5090778b3cc0af63616691cdcd50ba94d97df021b60
[-]
[-]
[+] ./data/malware/3fdc969d7c30c622caedab1d646735d5274e8aa8ba7355c39d04a24f7a2e7bc8
[+] ./data/malware/03bf155ded9ccebc74790dd1bbf2d9000cacab079a3ba1b5df4947123f70c9b8
[+] ./data/malware/22c39fc56634725bfc943206a98b86efaab3a3c3acf1c2b624425c2f3e6230fc
[+] ./data/malware/4fa6203e5ab578e4f9886fb6d1b0b91753a0ddf4baf5036b744da06a587a9b40
[-]
[-]
[+] ./data/malware/0afe81f4608744675c5fda4b36b249a7da16d52de14af542ecd62de48ccf654c
[+] ./data/malware/df793f700ac4a70a63681b95cf6e01db32b42d54d5b487e4d9b7fa24c84d2313
[+] ./data/malware/3716ffe86a444de25dc44d6d002388fdc65a4d8bdcff5564b828f5e8517e3b32
[+] ./data/malware/afb33f868c27a7722629436707bd7ae6fe9e11fd9c9200ba073772e638ba0266
[+] ./data/malware/1b0cfdff377f1ddae9a3f21461df10d138bf248cfc9703bf2929bb3b8640c345
[+] ./data/malware/28b514b2f7c5321645932d2a044fb25cca346b6a2eb2b67d8a20179b0eb04788
[+] ./data/malware/0776cf5a136b7f287806801be96d1419dd7a3fd8283d004cfad828008b11b052
[+] ./data/malware/1b50d0858bb5662ccd46881a856bf7cb9be2fca6eacf4ae675e741a5c4966be9
[+] ./data/malware/a1b23923eab57d5007399c955164ef55b5e6274f3a9f9b2584b8d2844d99cc9e
[+] ./data/malware/2deb9d002aeb1f3f12a3104f1aa71d038b3a0ca354d45ac13e35d4836cb3add9
[-]
[+] ./data/malware/c535795438e9e6f1b5796c945b169ed1b442e481385e4a29ba745d1b6f06cbb6
[+] ./data/malware/6be1e343201b56ea7491d6f5be72ac9d4bf41a16920804d7e0f04cefd562d028
[+] ./data/malware/410eb3166bb6e806652cd945b62db9024090958f82e18b714646999b0559ed8b
[-]
[-]
[+] ./data/malware/23c28ba9209fbf0ef195a29be1ff95e24eda60aac980e2cb042d036f59c844c9
[+] ./data/malware/755a80e0353fce89db01f79067d3fe185c2ef1757494c6f98e15618e95916e7b
[+] ./data/malware/3be7b1d360376dc9228cae463338d3ac305996d057125e379ea1ca42cbff8d76
[+] ./data/malware/d784768937ea27ed673969a464b96798df3df80f9c79f5cbef4a8c62832e3f0b
[+] ./data/malware/6ad07f6615e9de8713b14fb4e12c95960fa24731a94a6e1e540e4f354e842b25

[-] File not PE: ./data/malware/2ba910eb4196a66cb6681ecaea3b5df7cb8b6cbe2c7bdfaccdca614e74dc894c 
=>	 Zip archive data

Removing file.
[+] ./data/malware/00e77c92f5584c245cb6422a37028c47f232fa3fadb59b493bc7f4bd28df70cd
[+] ./data/malware/7c86e0403bfd8bb5b397786a3443f5f483beca2167b339cad01baa6ec8e4e91b
[+] ./data/malware/9edba1829cde6a6ccd3ba286126a8115d2e0d416cba5bd86c3bbf431f580e2cc
[+] ./data/malware/5295f2deee57b943be839c444d77b28e4dcab0627cf744bce2ef7d2515d3c7ae
[+] ./data/malware/808e02f8878ac4091078fd6fc59dca4cb12cec2f626fe3ab335ac880db213494
[+] ./data/malware/317d12da8444f3bd33fdad54b20cf25b2ccc7826e8f6ee03d28f4831beac3045
[-]
[+] ./data/malware/f9e4b51cf668410226769506c9aef59d613d32de3aed980d501a39b39770ce70
[-]
[-]
[+] ./data/malware/4381e84007f5ae7d8b8faa3df667cc2d726fec8446b03f04beaff55a78cecbb3
[+] ./data/malware/d3c41c9e301e8474c6eb8c1ce5d89f1ade602367e6fe08d879d4ff6363dc07ed
[-]
[-]
[+] ./data/malware/c936bcda2930341557ffff92fd68f0250903f2394d8ea7a0cdc265494d40a046
[-]
[+] ./data/malware/03e7fc4b59ef56723f33c3531c292288051670a34112c1f8c896b0309fe8df78
[+] ./data/malware/513b431da8a384449085183f8d90e36262fd77ffe01209c5a29f2fcc60507029
[+] ./data/malware/6cb6c44e78447e34cd2815aa187381922067de877f0b267534603e7a1d8c84ea
[+] ./data/malware/2dde31dbb7090df38972b3d577d71c16b799e5d1f58d6bdc0fad0b588f4dd886
[+] ./data/malware/23cafd6f0772e7ed7a71251a1aded64f474261809e423d50e543e35271b9b0e9
[+] ./data/malware/a54aa248a163a22590ea330022d373fde4919b7af92aa71f63293ff1028ebf49
[+] ./data/malware/bad817ee87e1ed7ac1318a47f723a7f502938aba6f111f1cb0223a0952dd4474
[+] ./data/malware/69bfb20f7c1756426db121ae0f57f6e421f434b79eb13e4b81fbaeaa7a713053
[+] ./data/malware/09f1cc20675bc53e8504ed6df682fc513e535a5bc34dce58996ee799a7e9964b
[-]
[+] ./data/malware/9e1df835855965e562bdad9c3f75de9713de2d219c880fc9c457806293daef1e
[+] ./data/malware/eb2a55ec12c2fa476df5e88d2b38f8d0a158d2a4c973b8b33fdc1a52a376761d
[+] ./data/malware/02968edeae1088f046b4afe4dc20c4668b40ac8849a88f763807a8d5637f424f
[+] ./data/malware/56c4084f1c6cc2d8e4e9a65940ce6e5c8b9d0ab403e4941c12bda6d6f94cb472
[+] ./data/malware/cc78002044bab5b262705620b3af18d767ae46283ab6aa70562a580bc2867dc3
[+] ./data/malware/8dd98370dea2233f53a97942b187460f23ba0520fea092c00e9fe8bfe63e7356
[-]
[-]
[+] ./data/malware/440f62b8089c9a3c187ab98b3ea0e5088215e151fe1af2969154439e8eb49454
[+] ./data/malware/d9c44546221acb7ad6df7b7a5e361db4440ecaeb9758f912edb75f88cd05ffed
[+] ./data/malware/13ab431291a9b486bcb7e07a5c6f4ef46d7aa932a1dadd4d52f2b52dda6db413
[-]
[+] ./data/malware/5911a5e7e9526333140815ed2d8b0ca8c3afb90e0750f31ee70099549b8a1f7f
[+] ./data/malware/553abcc0d38d5476bcf867fb031913c4a89192fee1e239e416fdf7ae6d46c545
[+] ./data/malware/1c4b22b2601bb190b754c12e45dbe9413dfc98ecfe632b0e187da35954236d92
[+] ./data/malware/de87683be8164d8c6e676f0fbc26ae75a059f7676fb5e3f1b8e1b8217737c4c0
[+] ./data/malware/3dbcab057f5790dc41c2000a53545eb369742a8e85c65ac52d3b473e6915371f
[-]
[+] ./data/malware/9b2ef34f6784d0d375f45e7ab97341f861e7943f7dc7320db4ded27f237969be
[+] ./data/malware/9c0f7d20a3b7b9a3266f3a9f1ea8857d416a0af23e81029a7db549e8df3217c4
[+] ./data/malware/96676dbb157049f54c35275c960dfb087d1ff119e7709bc5b11074b45e997e07
[-]
[-]
[+] ./data/malware/6edfe6ef35a7f7908e6a887b054b5aa697f00d1537a332675e6218ffd7a02071
[+] ./data/malware/09782a24b5a800b4498501f2d33c60fc6b8f2b4a919c279f44658c345fa31314
[+] ./data/malware/ca230efa76a5f9899150133426f5065f46fc11ac58ead007e9758b870cd80e78
[+] ./data/malware/e73bd8b8396d12820a8934a089372cd2761346c68e786dd1dd9072d690851b3e
[+] ./data/malware/39c19e7de1c6430e66e1f3f8f3f62c971d4c49a62b5928b20fcaccffe55e7663
[+] ./data/malware/75561c8830f865f2816ee896c15c20a0188be2bbbd6cb89db12637435c489fc3
[+] ./data/malware/3dce8322f749a2aed8a9da7c0d2670a82bce10f9038f286e5fa94577f0fc57ef
[+] ./data/malware/10c3579049c2396b2cb5cbbcd8d7a6fcf479bf9c0e16f2909bb14b6b4d735768
[-]
[+] ./data/malware/0730c7e1bc0ba0fac6e3d8bf8baac1953c5fc5c3b3d77c3bf244cfe8b75cc0f1
[+] ./data/malware/cef4b489b037f6adec49906b58b67ac504a82b65c3187b46d906f9356c284394
[+] ./data/malware/59399e56b27987c50e4320ef3b805efb8b2d76463f3084becca90830f3c59b51
[+] ./data/malware/1cbf329b143a0932064dc1ade7da9657fa218779dc99b140be6a986e17a09e11
[+] ./data/malware/2bb6ba2a3011b5820bc30a7986fbb3356cfdd92f6287264d51139a12c59f68c3
[+] ./data/malware/7fdcdc9bbf1dbd3343c9f0e2706b84c580189e0f42005b0cc53ebee3cd885c87
[+] ./data/malware/4d5be389a9743f18c109994086148154257ff7827b16ddd87752853887eb73f7
[+] ./data/malware/5a434c49cb043580e18b6ca33a01e61e9e65c1fdc26aa89ccc0c8923400a23b6
[+] ./data/malware/960eef6b284f5f03c8e358419ab7e9694ae0aefd5a923d9a6202a0764361c84c
[+] ./data/malware/2c35d36fbef41f51fce55dbe751bd3a2307e70c0ae055f58eb20271cdb5036fa
[-]
[+] ./data/malware/c06fc98500bfc6a56de88812254930a7e1466f00179750d19f66398ea0ba64d5
[+] ./data/malware/b8c1bb5014dde0701b424b0e16770f1f14a0806f353ac5aece75b49ca51eafd0
[+] ./data/malware/9701f4f2068929dea4185c6c9c9be9f509eac6f53ee15e584f47974a0b96fe14
[+] ./data/malware/3c5a6986d9cd1f4bc13a50d2bacaeeb71f2d827bd08b7f0b9ac870ec468719de
[-]
[-]
[+] ./data/malware/adc09c295222b90c4eb25a3badfa88976b5d9313a35e4023e8ea146ab4369f1c
[+] ./data/malware/bb77ff371efba8dbbd55072487171eafa446be95f970683c67de7d19b07c3c0b
[+] ./data/malware/a8669e9cfbb19572be0eba1a6f59d24a3155b01f6546ddded4c69898d6ae600c
[+] ./data/malware/af0af11fbb7a9b77927a2da1da65f1016b455e517fcbd223d42bea56bc6da442
[-]
[+] ./data/malware/08f7c373abfa4dc80b015c518834a2f441544a75ae5091f7585bedd31c0e31e2
[+] ./data/malware/58a3305e60e836d22e5b0bb68850b92d6077e74c30b0152625052b0680b95c88
[+] ./data/malware/ab59fbbf1752f23332541f4470160f63fac267fafd501f1fd9a249f86467eccd
[+] ./data/malware/d701d7d7db2536cc21ca3710872e9d86cba52d409eb4f88ae22b6c75ea924ecd
[+] ./data/malware/2691c4a41aad316f6fbfa2224f639edd890e38ebd0593fc1b8a9c2f7bfc4782d
[+] ./data/malware/20866850568dd3d2d4ff5d856cd258628cd037f8abb2cffc4d8ab77aa8afde1a
[+] ./data/malware/72a2ae423d8c804cbaba16510b11fc00268ae98ff9b89f2839d9fd0043b3028d
[+] ./data/malware/4a923f5859ac948959e116870857e2cd7972167acdedef65fc7ecd373d4892a4
[+] ./data/malware/a81f2938aee35ef632759531af1cbc2f9e744e3155e0fbf9537509ad17fca273
[+] ./data/malware/8ed1dde2831d3cc57194785d805cbfc7c20dcf3feaf5f171be7b507daa8433f5
[+] ./data/malware/5556dedde7d7dc3b27850c53031c2b9f918d6ff410840665f54db122042475a7
[+] ./data/malware/20a8f15ef6186413536aad11334983eb0b5036f6f89ece87b2a5d5896b229959
[+] ./data/malware/0d4e4ccf74a156bf4102a9b683b430b010a746a7cb1399fec8f69da59ad11b0a
[+] ./data/malware/fd353ce31912ea745bf0b47144171a5700b128664711adfdd007577cf087e546
[+] ./data/malware/48cfe53b964beb5ba3f94fa557b3646fb002ff9c22a6b8456d31f143ec6bf376
[+] ./data/malware/a163a205c9d2f6ab9b1231d509e88c852ad53fdd78ef0cd80664bf2b43dd4772
[+] ./data/malware/b7d657a61556fdf6f964a600d7cd918cfb24ec33f3a67ae5a6587fc10dcb26d9
[+] ./data/malware/4919847f6e5f4ba757ab6b55f3599e8369f785b0c63b091b6e3051e0316acbfd
[+] ./data/malware/576839e1a2f2eafe7032d9d5363a2040de9c3daa4ed3f777568bc4986e76fe52
[-]
[+] ./data/malware/1d94a265bb89f2f1155e2066c4585455f31dd0607772e930f04e9204e6889db6
[+] ./data/malware/20d6d009cee8bb1f4c8fe280a03d181a21d40b80cf0f08c4309240035c955e39
[+] ./data/malware/4d7d445f825db745c750e397dfbd3ff556697f1491a8c8102b0941f901857e07
[-]
[+] ./data/malware/1a13ebe7147dd568d37ad11663af8ea86c8e706c7e1119eaf7f5bcf7915d8ba1
[+] ./data/malware/90428d61c592805fecd4dc0188e144591120c84e3fb89bd012116034a77d5340
[+] ./data/malware/7f403c32de153a769d54a7144dc94c03e6b32aa8549d34e727649cbf0646db08
[+] ./data/malware/c0be7a344a863894890127e61851838037bd9d076423bfc8296cfd6e01d66f6b
[+] ./data/malware/5c56da74208db017c583e9b002b348a2e56dad3316eb08860b126a10e5967dff
[+] ./data/malware/20bef119489f0e10041056dd738f8ff65db07f5b55fa0ecf9bc917bc7705e7c7
[+] ./data/malware/b64ca63aa4083316896ba5ee578788843859fc81953d629c81a8a5f39b0cf9d9
[+] ./data/malware/5481e9586cd65b71cace4a3d25af4eb5e77f431066ff72e01b772a67635032c4
[+] ./data/malware/3f3132b1fd2148c34b83c49946fe472b7d81696665fd9c8008150a3053857261
[+] ./data/malware/61d5ae02ad56f91cecbbb2850b3e32bb8f05195633f1ae78376dd76a832998e1
[-]
[-]
[+] ./data/malware/590766c37733bb55dba7ca9eb2c8d186bd18b2c8e6cff1bd49cdc6652f884162
[-]
[+] ./data/malware/1410447de4851cfca8e9d1aafbe0fd2cc3d06d2201929b683417e7cc2269b084
[-]
[-]
[+] ./data/malware/6d7ea30f0b4a32dd8a6d26d3ff062317253bf0966c02be782b5b73e7b1149e5b
[+] ./data/malware/4b18da73cd54b742d727f1b3b70fc64942de916ce0ea7d4139d22f4625de4645
[+] ./data/malware/d942c0a0b558d228e64ec19da22d0acf4cc2a0cf0d8771ef5752d311df6474b5
[+] ./data/malware/2e9532ca86fbaa19de9b8e529ed10adf791064fcc56f9b1d86e907c4bd9b1a77
[+] ./data/malware/1a05660630ee0995f558cd0419117e4bc736cf954f5b703ebb3e986f9cf762fb
[+] ./data/malware/a8ce807548d49e2cfe83c04fe00521289426bac3579a8400fbde6fa6a3da6f22
[+] ./data/malware/c9a75996d09b9f1365e665bc42640f03f2c506964a4abcbeac95a07a97d666a7
[-]
[-]
[+] ./data/malware/f106307a90b03b3b91721c9bf8f763ee3022c3a318d0df611c49450433f7fb1f
[+] ./data/malware/5e0c529a5ded9802307428d4c18b84ad36f674e36e050dd515d554af981010e7
[-]
[-]
[+] ./data/malware/9604293e5c87e7f97b778699e129f19e6f19c9b8a4f307329c6ce1fa31436e65
[-]
[-]
[+] ./data/malware/7c48c1c26bdab0759787e130d6e0caefc70c7ea14be9856f385af422cd9d9f3f
[+] ./data/malware/cf3617f3a3ce58489034e48f9cd52d8e869089ef7d27cb171c7a84587ef24894
[+] ./data/malware/133b13790a6150d75cb797b9d02f7986803c2fcd2c66135066a9d98a3b59f0b3
[+] ./data/malware/cc6ebc65ece218c4d9ffbc72df1f96311f9e24b3af307491f33f3c72252b4730
[-]
[-]
[+] ./data/malware/90457f123fcca3b43ec0ab962e2c186074d37776304d3996c3be1af6912a701c
[+] ./data/malware/d14f36b198b9d1fea5b09a0794d56d2959c6dfe2fc6b0830075f044fbb4f72aa
[-]
[-]
[+] ./data/malware/28e489769672c34430d942d0829517470b396fa16661e1c1029db6b677a96fad
[-]
[-]
[+] ./data/malware/6d5aa16e97689af6d6464aee85edd7160a929a2f0c351b43104eacd0adf1c042
[+] ./data/malware/2fb0af0e0f164251f3c4a3cf24537ea4060dd897a497de68717edf018beaff47
[-]
[-]
[+] ./data/malware/69c21aa33067e98e331dfef3e7b36d338abb09e3395c177850a68ee4401b939d
[+] ./data/malware/0cb93487639cd60e5f88642514c91dae11f3fd2635e4fdd2c01ab17cd1785c2c
[+] ./data/malware/df5baaf7361227dce7d44aa9cb7ccf72a12ea057b404a79550919ec352ab84d3
[-]
[-]
[+] ./data/malware/fef17c9f848a3d291aa2070105bbbc143bb48ffd4c1fdfac24b1eea39782c0de
[+] ./data/malware/ae87afb90767f3a8fc43c0e2bb569be0056222a1f9632c350154bce16e44c11c
[+] ./data/malware/8d45c03081c64663abe1f83220e5efeca5661fe6f9ab564a74f3ec7e01aead7f
[+] ./data/malware/f21e9ca8169b6ce332afccbbd8bee5cec9b0081f65f6788406c6f45c03e6a968
[+] ./data/malware/a2de7686de9ffffdde12a4f13b467bd1899a4860353db0b36ddb6ef1c029ff7c
[+] ./data/malware/bf00fe376b2daed5c7b648bde4bf013c1a6840be2b054ff4a7d3248543690a07
[-]
[+] ./data/malware/1d26329a19713971dd82b2a3e5e3deb38df996095365e09d68ec71596ec4a1dc
[+] ./data/malware/3be8a8db322b71e851ae241b124c4dfbdd76324b90b5c095a80bd310c65cc1a7
[+] ./data/malware/550e925fc282785456ddedf5d71030191f05d2351c6bc156df9df4753878e90d
[-]
[+] ./data/malware/f2e68e0d707fd7c7430c3fd4175ea2bc5a6a7b178885b57800459ff8af0abe5c
[+] ./data/malware/a9ad1e7b242cf084c621f046e9d2ecb0251afeceb39adbfb6dfd96057d0368bd
[+] ./data/malware/95a2bb0edbb1bf20d3a561f2df135e568353eae813ce6c1eed909d04900d416f
[+] ./data/malware/cf2782ea0689ee6ad255a660f7f4ea13f487d6488c6b54c175d7cdb716826a2f
[+] ./data/malware/222a7bc35cc02800086c6cd9ed36fff7e90672ea2c0d1593b5e4728b2424e9a7
[+] ./data/malware/8ca39c796aef656f65fa0b87ce6fc3cd3ace91585b3459f0d2443b3ae6ea16fa
[+] ./data/malware/528054a1dc69ce3038086b05c61ea7e4117057f5f21121ae1358ef0c1ce7b45e
[+] ./data/malware/68a48964f3f010ebee03d061919bb25ac8b39cdabaa0e8f854306e7a607a60f4
[+] ./data/malware/dc1f3d6668938040fceb3b959440f50668c7afb4770df534131133a9c2d8252c
[+] ./data/malware/24de8cd24631271add833dc11b601d46f2de5f4e5d7380fcaaff0aa28d544756
[+] ./data/malware/358b06f3e46f54c4c87d6fa5fad3876a6e42c3f2b875fa5cc58f0fa1af8ff84a
[+] ./data/malware/9065cac7e0a4b70534c12165e2f2d5c6df3e60625addd6a372b539f3efaa49cf
[+] ./data/malware/e32669c449629bc13ddbfc0b64cd6eec781253217c5db0feea7ccede5ab28dfc
[+] ./data/malware/bb64b57454f11dc0ea90eb5734b74ec5701a2d079080d4251a041050a5b47167
[-]
[-]
[+] ./data/malware/88150367aa119b5392050799a6e9d2aa135d37a0b26d7055adac03c1e1b9b2ad
[+] ./data/malware/db3e29051639b1b843821283c2c361044f5e8f169e0390839fdaff10ee8f9114
[-]
[-]
[+] ./data/malware/cf301ae1dd3d8fdce27f624ac102a44349f2b9f24b25731db4406dadb103e884
[+] ./data/malware/7f4a849f041fc0c4b8fb8dc789ac3dd72d8de922515360326c890b96a099b57d
[+] ./data/malware/cc1944c6e3d3ab0dcfe4e9323b1c6906ec699be7aabae9b34791c0286b39b663
[+] ./data/malware/237f2e44426612eb410b1656547ca36ba608f653911c18d3bdd5377774007053
[-]
[+] ./data/malware/05f0e608c8bd180c20465edbf2ce63900298d79f178e474774b9b205f23a255d
[+] ./data/malware/53e2b6a7f41c6479a40ee20a0048b0e0f851b85c051a38972efb06cf065430e5
[-]
[+] ./data/malware/928dca2a8beb02fc52cc5e82bf47d7cc7c14f394ecd4d976b75a9d9a24131bb5
[+] ./data/malware/9c790e52f85186e54147c1bc6dd5aa324107979d88f482b26514dcb3a280dd68
[+] ./data/malware/10884471bd86e199f38dd97ea1c207bfedf5cc0ce5e7ebadb5a78b52a0776bc4
[+] ./data/malware/77b33050c0b300f64858371f2fdb46e56c721cceecaacc40b0b5d16b0846be18
[+] ./data/malware/1832274845811b18784a09623839bab7a7efb1fd78fc882937caa7e3cb6046b6
[+] ./data/malware/7c70e55ab01df14bec956cc869223f3ce231fb3828c2ac08996c4a9953ef02f4
[-]
[-]
[+] ./data/malware/c68e9f3d0ff98f04b8c1e9ffd0c3a67781bf4b2984e8d17231822883e0f36df5
[+] ./data/malware/e411e9caad9f33646d3a4736da6420ef814a615fe8e5e6643b3e0a873e2c5209
[+] ./data/malware/03d8af28ecdfe2fc392f2d0e9260706debec2e72fa7ef5e9bd492768325c2ea7
[+] ./data/malware/0d36a4a97dcf7962f0670d09fc2b15c5dea7eb2d0fcd3ee00275fc8896d018e4
[+] ./data/malware/8215ca9e02357b4a0019f8813a658a26adbbce59ae3bafb963bfbe0cec81db57
[+] ./data/malware/9e73b9588d3b21bd8ed27ecb57c6381c63b4a6d55b9ea5a668ee21b85d35cbd3
[+] ./data/malware/318cba67eaf945c667019f2d3d5a88f4850d27aa153e8718668c60debb54a2b4
[+] ./data/malware/53d7a3530e71c5c0d5a1e8fd9456ee6a49e39dbbed6b19044a6b15855b8c0b3c
[+] ./data/malware/a0ce718c6ffa64758bd705863fa40374d57504f8e327d7dad45b7fe0992fc25f
[-]
[+] ./data/malware/4e903131653f2203f82e82ee3df903360ad59b1d574e7a6dfee6f5cd63b26a35
[+] ./data/malware/5d415f30075b6d3c3f65205e049ff1fe89115bda7e36ea162b85b10d3e08aefd
[-]
[+] ./data/malware/8233bbc061c7bec9a7fac1b87922847f9a2ace0f950a7f6cd404c76addfc65db
[+] ./data/malware/0c2d88e35e35ad495009f2dd2e0f467211297bfb4306eea06cb8d78decffcb75
[+] ./data/malware/4b918308a9548fef214a00d9d332378a92132d9247d3a2f0e9230ec59137f4eb
[-]
[+] ./data/malware/2fe57b9024edd2c1c5c35dd1f03f88d45c194dd00bc7be12ae7d82a2a18a2e4f
[+] ./data/malware/b90c45b593caa67d5c686b4c0ae43364be4fedcaf801c57cd08b39c8f66bc1ab
[+] ./data/malware/7118f44277e560fb597c02d33d0fe4eb1ff69204b49da88e526c5f1e63bd0adc
[+] ./data/malware/3e814b46804787fc22a09b5915ebffa456317b7425df9eaaaea727fab2e85b01
[+] ./data/malware/c83263d852ec6c0c891bd2a281e45aaed3332dfd33d289eb78a55ec6f464337a
[+] ./data/malware/29be0cae71c8a88a49726327c7a04eec03eb96becc5bbbed4d0e07b80637d0df
[+] ./data/malware/180bb3a0e1af1f22fdb59d1fd565e80777d761e1c08adab92e9010e789c2be69
[+] ./data/malware/cc7fed7020ba9aab671fa3278d4ad530d5046d69fe056d638691432f5936cd2e
[+] ./data/malware/9fbb168a5cd5922e85ef5c8ee8e895f1a666991be6585a440c11bcadd84c93fe
[+] ./data/malware/8baa06d7d12f114b97e7fa41cedacbc6ea43b8ba506eec76328eee1c56c8f9d0
[-]
[+] ./data/malware/6157fb7d72639cd60ea8c162222b58bcfca772182e1c8ca5fcba07ab8cb14e32
[+] ./data/malware/3344c73616af23482450024453d7f88fd11e1cb2e7f1972b5ac406f4532068ce
[-]
[-]
[+] ./data/malware/9f9c723f70673656a68ba5f47778757d7a27bfe6f21bc78005107e19e737ab5e
[+] ./data/malware/202377640777e1416e1c6082eb4a2a885c14a70cfb26556eb881de173a3174f7
[+] ./data/malware/ca8a48fb04c2af0d2ff09b880fa81a518b6caae6abf7b0e91eb402899687f8fd
[+] ./data/malware/06ec5432328675ec67fe6b4ec9876ad4b21c7e3ec6464cc5d413812d65e3a64a
[+] ./data/malware/e65f6131d5e50cc106a826249cb157dd5d984f219a7f68ecbb0d19e1f29dafdc
[+] ./data/malware/694d2a24f641ab5379049d579f8d382904bc400c7915e44aa8c0cb95b0957d1c
[+] ./data/malware/c577b542762b3c4f3d981eb2e0839fa2d7e7cdd52916390d77a334d40737678d
[+] ./data/malware/5e1f857866d58145c5a5791067214ab371c73849737497686c510f534c629557
[+] ./data/malware/59c232ac9a7c1893fe374c4833fa8b5962576fc4ef31e663c0782ab1cfcb4220
[+] ./data/malware/95e71beb42bf1c7c0ef0f08b57c9ace1b58c07661eebaf41e9b5607f9129afd0
[+] ./data/malware/8f759b877c2adfcb5a18dd58b755a1c0899e00d4d3296aa382138dec89749ba3
[-]
[-]
[+] ./data/malware/33f6cce599557993969af2ae7c1076a45866811ff8fab866ebdef69da7ce2c3e
[-]
[-]
[+] ./data/malware/3ef2ac6a6fd915f211f2c40a44c3065ce81720362fd00bdbc3bb47e003a3fba8
[+] ./data/malware/2ccab21121df27e4297f3d669f2b21267f1f3211e8fe09cf665024001ec53b75
[-]
[-]
[+] ./data/malware/60ddb0c3201897bcd98e9cf3aa8eca8851274ab77caec001c974d8864288e1be
[+] ./data/malware/388c4d430259d15ce9d9fe6e8abb79351538d6e1f2d4327d8c6497c7c486645a
[+] ./data/malware/2d14147c131afd39db6f868a0bf7d5ab5697b5eae497af5170c31d83287a855d
[+] ./data/malware/454991dd0268cfb691d38e28199dd7bbf47cba78d8d39b40cfc481b81db0ff07
[+] ./data/malware/35b8f943c86d3c6abc48613e94b80d8c7fdd7a61bcca1e876ba54e3436ca1fa9
[+] ./data/malware/a8187a33f878d4e526ad8284e6209e4f25d89ced88ca7a2efc7ef7fd6c3e7cee
[-]
[+] ./data/malware/c399978c5882e926f83d44095687ff604d34ba588b217cfffe38a9e5b9765b91
[+] ./data/malware/bc90bd9af3a38846f1f167db751f16b3a26a90bd6de2a20c48a75bb3b23b0547
[+] ./data/malware/236f89f80987e348e7caf6669ce8f7f5fa8dd319c4f1ba65e2bb54167e1958f3
[+] ./data/malware/017a1596c87a3ab76161666f34113ab8b16d1e5da7d535c705949d3a6b36398d
[+] ./data/malware/7d2022518de508a988bbf7495cdb27d4af9666c4f93d5bdf9aff979622255f68
[+] ./data/malware/1ebebe4cf789d000f700d89be46dbbfc2b1edca283dc4e2e46eeb0a6d1133144
[+] ./data/malware/e04031a7c2095b795162df0926bb9e4ec3685bbb817861102262b932e70ea0cd
[+] ./data/malware/9ee4a88c8e0594299d9d019dc0db5bfabb54fbad97aaff066fa866b1bb894f91
[+] ./data/malware/891e34f023cec5106828ebd13f76bbe5eb03c142da9c8ee14484403ae5fe2a07
[-]
[-]
[+] ./data/malware/7e78819f722261855ee6893500b68d2aa84e975b00cdce68c34bca821f8cad47
[+] ./data/malware/2b1bd9877ffb6f1422d2053e95b9acfeadae1ff4033553ce164d4150b31d04fc
[+] ./data/malware/bc1ea7fa981b02acfce1d92555d5e4d52f61be7b1b11c95a83d6555ac50aac9b
[+] ./data/malware/e647717985bf0a1c6b3e2464d4f95d2efe3b77801c43246bde45eae908b940b8
[+] ./data/malware/9ae1fb3abafca43545340aca63a736c4d0fab1fd8d4fbbd9f212f4e228220077
[+] ./data/malware/6262fdf0c20cde4333154d22fafccedb99856c1ab2dd0964c7dbf8892197d68e
[+] ./data/malware/d33e6b41a890d73d656e2bdd0663a9d28c75226796a069b861f63afe790d4ee2
[-]
[+] ./data/malware/12fd18ddc4b6e27d6f0a4db4d473d0f014daf76486ce2809be21e9507c62a316
[-]
[-]
[+] ./data/malware/5d9d8c129d9464885a9076159cb413d2d7c928ea0e2fe3a7b3acde77d29978fc
[+] ./data/malware/1760c643d8d0066f40e68659966d8e19e864299426605be40700a599be66adad
[+] ./data/malware/554c9b195c6a702569600de1148e3e5461fc92c75b45aed98e7d70218eb02df5
[-]
[+] ./data/malware/68ba25079b1394986f7208d6dabc272ae35d6578b9525d7470fe9560159ff943
[+] ./data/malware/dc72db959e60d3826e00fe1cf2ec668cb63871c230879e99eed66d6dbc553b52
[-]
[-]
[+] ./data/malware/93cfce739ea094b074d5e4fe11193ea8ed49946c83ddff480cdf5660a75eb689
[+] ./data/malware/124883126fb29d731189e33ce768577d2de4f70f34df60811a2d1925a4790170
[+] ./data/malware/3f842bd4ef9728e19a5f16177ecd9b351f9f55105cff731c86ec99693e67fd8e
[+] ./data/malware/b772ce40f992b0948e3c858b03d132377e62fb95568a7e100f56fbe64739b55b
[-]
[+] ./data/malware/4d29729cbcff4cfa719e6fec77c13da0de3f1188cd581e969b65acea30484a07
[-]
[-]
[+] ./data/malware/933c748e8708d6b463b04b1d9abaecfd32f514a364ba9e216f82940a5e813a70
[+] ./data/malware/ccb6f32b36f8d3dfd9ad6112ee763308d5e8cb6c0ee275ed5c329d07acfa88ec
[-]
[+] ./data/malware/1d911f1eb16af290edad1219a45875f30693d6a36af322934cc597f0073f6457
[+] ./data/malware/81f35dcd965dff4faaaa775075d80da22a5fdaaa4ff5d40188cd5341be6c778f
[+] ./data/malware/9655a5a20c18928a2d883b1bec10e1d443ec9a152efd4ecf008b88f886b967d4
[-]
[-]
[+] ./data/malware/1d278653e0cbe848bf17fe3f778cfa38e9a79a507a231b1ef76dd62fb69ac5f5
[-]
[-]
[+] ./data/malware/3fe4e7a0a80e574fcde544d9c8074b0cdd90b08f6451f566e61ac70cfe201fc5
[+] ./data/malware/9675bd6f09ee4488c0e0d90851d4c5ace8cd4cc7de084d3741028400808530b2
[+] ./data/malware/7d7f1860850f539a5fdf2374f8c1b0cdb77500892f5d0f7e4a39c629b7d4c16d
[-]
[-]
[+] ./data/malware/75430d49c67c6b69ac562d1a7455e38e32755a85919a9dbdbf4882d4dad70f96
[+] ./data/malware/86f217a88e15aba7dfb24193e4d86648c8e2da19336b38fa8502f47d724b2cd4
[+] ./data/malware/3773a767edad25f74163507049902b7b0a8e3a8c57b052bab00256d05aeae306
[+] ./data/malware/79dba6c641b4be28a7888f625e1c1faa849893c682256a8406026d22e9b2c8d3
[+] ./data/malware/8b12eef74fb877629679504b030117f4fedeb38d645e578bc8382441fe96572c
[+] ./data/malware/393cd0a96ed1dd5f44d004affb65e95406ed4af63e23ccd0203bb017888351fe
[-]
[+] ./data/malware/02d30c0c6aec1869906a97039b604a8d885e55a58c30bc6b70a833a4bcfe8662
[-]
[+] ./data/malware/26c7eabb7226dbeffc544d040e0d83c311c2b40dbd64044994686b37dc2a45e3
[+] ./data/malware/5c904dba6263766e9f388a26b383f165c10b4d06b12ae0846fa18a6a303ad03e
[-]
[+] ./data/malware/0e0120604f328252fbcd85d39747cff98a10b31bad25f97bcd69b3ba6aa213fd
[+] ./data/malware/39641f1c43c6eed90d045a9d660baea68ac990c4c3522662a0d36b225c6da3d5
[+] ./data/malware/01edb51ae3d6d79dd1b57a3a2cf84ad082f2a12cad2877c60e7dbe96ff251b22
[+] ./data/malware/01f8fad499ebd1017200eb5673d21e82bbcdfb0c382f49929a62c14c796a5225
[+] ./data/malware/23b091fc7652eb5680b2fa4373a36e8a640ddb6e555c33af29f2842e10912581
[+] ./data/malware/5abc656d62b39862f29c82a27b788d46d8144dae3c5a8e4b87a3caa72f76384d
[+] ./data/malware/5896d527fecbe9b1068b5e6804769afb6208e771fb9870d6357d60f56855d3d1
[+] ./data/malware/ea29b59d8a7e9328c8d4fb105a42fd9cd57fc067dd079876e6028a308fd5c342
[+] ./data/malware/5976f122d6529e5ae60eec259a850fcf56e6c8820954e2579893aef5ae3352b7
[+] ./data/malware/b26ded71cf8b913756047e1dc0719bc5e2c37905ae5819005b29f13099e6efed
[-]
[+] ./data/malware/b132ea55ec4bc8cbfe95f72691d4ab3c49fb6b49603961ade03e9eb276cc9794
[+] ./data/malware/8d024914617c100051c788a950b3f5aedfe18152cd705f53eb6b53f6718be2b0
[+] ./data/malware/426020715f5ad14545ba39bc32577394acee42706c24a9c8e79347af2fd407d2
[-]
[+] ./data/malware/2e06d0ebc006b7abb206a5e3ecb56cb3162404656eaaafe95c2b95bec7669669
[+] ./data/malware/101c285300edf78e1a4222032c0295908257c28c868aba6f019358e14ca2fa12
[+] ./data/malware/35762d897761aa383e755eced4845e8a2effd33947843ecb2ccbde4aa17253cb
[+] ./data/malware/d406fbc2107aaf9d7803865be129f490247f79efcd3de32e6f60a65923f4d5ba
[+] ./data/malware/9613f2048b7c2609e03830d5f32c5395fc2181d5e96ca80fd76826488fd00f7c
[+] ./data/malware/8d8bc961be5ce00d10d7b4840d72885701cc20bfe08cda04c66f74d1a7706e67
[-]
[+] ./data/malware/a9932f82d9992e82f4dd46434c84834677a5d83d56c8339449cf12d5281f0fd9
[-]
[+] ./data/malware/535885cccbbc206bc77bec26a8cf2cc70dc2fc005b0daa46b347083931894b45
[+] ./data/malware/ad9d39e35f76538955913d9ca5cae6351b6a59f90396fec211c6ffbc2745a33f
[+] ./data/malware/c4ae92b70d858b90547ecb897469e75fb264645bd1369a68520512cdfabbfd76
[+] ./data/malware/4f1d180079b3c120650b23011e9cfb43e9d3f5f5f67fb48432f26836db3de9ac
[+] ./data/malware/3c57c336abbe953ab379eebc319482f933373ede8f30ed8e0215f38393873ce1
[+] ./data/malware/9a51eeddcba8cabab631b00ac3f324dd4e1c0b330e06ce6a79c724feb5118bb5
[-]
[-]
[+] ./data/malware/c42596870b532f86a28660158f5ea35a79c8edd09ee34677c7f95d36c04b08d3
[+] ./data/malware/8ffff484598e90767e96e7fcdfca37c82d1808bb5ea30d281ce8784ee164eb55
[+] ./data/malware/5087c7445e36ebb0a746a6961c39dd78d1d4ed8d2895e25abaae05413c3be8ea
[+] ./data/malware/3c1ffaf975a7aa8380f6fc111ba26476eed90008946d5de788cd50ec7a6b66aa
[-]
[-]
[+] ./data/malware/40036495b493e07d34b22e6833b063d5edb882f8f61c635b1c6064334d0d76f3
[+] ./data/malware/47851153e1efd092eafbfaae15b18f20bb8cd699cf1062ed7c11e43c4181a78c
[+] ./data/malware/437185de0cd49a605245b494aa8a6305375b5f067a2d50fe2a80198271b67e7a
[+] ./data/malware/b3debb87cda70761f234387c0bde1dcbc2f97d1da454ccdd3fcfd78626bbcb58
[+] ./data/malware/bababe21a23c67430c69484ec92c24710f561c20c3e8bc7a75a7cc6d9478a659
[-]
[+] ./data/malware/3826ea17aad6bc70c25325cbc5084933add96972498d4a17d780ad5d33b0e165
[+] ./data/malware/3e09126bb9245f524be55e3ca1ac11e26b8ecb26f455fe8d6fef90d78b35e259
[+] ./data/malware/c1baa34573b5b257f50e4998bd4eae72c8359ea93971af6be31f7456236165b5
[-]
[+] ./data/malware/85cb89dc3eb35b4088013d404979718ef2767cabcfce5269335126c89e80edd5
[+] ./data/malware/c5c86b23cc0352cfee11e7062523d22557619a2b45f2f8ff9da0ba96c89934b1
[-]
[-]
[+] ./data/malware/5a78cbd3d93d3c418b081baf415f9fe087c1b4d8a9a7aadb610fa7f3cb16ecc2
[+] ./data/malware/d87b37d5346312ccf3b629d2911c8c4802fffa4ad20bfb001ae85cff1186320d
[+] ./data/malware/e9a94221d0cd8c2716ef8d6157f587b2fe6d09e128885bc54015663cc39c0edb
[+] ./data/malware/a193b194595166df6fca3c960514d9e269de66d671119736f7a3336342fd5297
[-]
[-]
[+] ./data/malware/5fe50cc188551b4cb9fbfc89d7e3a3b66d5c3ab188003f602d8661f43e29b90f
[+] ./data/malware/0233b7eac732b159543513b9d148ddd5dcc54548be2867bf050fa3ff5f605064
[-]
[+] ./data/malware/743b1b48a92948d3a9e3f813d97f028f270d5bb5c7e1a535ec54fc3fa954014b
[+] ./data/malware/8a2a17170695e4e86965805df82c692804d1ed4335f504411fecc4101a109092
[-]
[+] ./data/malware/c9f177cb1800ef6ccc4b40cc9bc3de00745cd6b2b20ae49b6ce046d83b9e2b0f
[-]
[-]
[+] ./data/malware/22d47a69e5a223b6afb8eec6b893c780048cc0c4ce950a306ba8fe54caa1b0f7
[-]
[+] ./data/malware/36f6591c97f2ee32237077895f909f4c334a6ec164f460f2055fc870066245e2
[+] ./data/malware/0a0faa8e09269ec70fa16a3e2d27af5649b0e819525bd390e4d44fe9a604666c
[+] ./data/malware/03ccdc44982eb7cc3b64951c8ae287c5f79ee4edb8d61b0b084eeca84011264e
[+] ./data/malware/76de637a182f73a2f5d07dcbec95eba0b36bde8e0368281f0a8884aef390418b
[-]
[-]
[+] ./data/malware/9a2fe26b7cd6e7bbcb176e2c91893e2061ae9c094a225ed979cfe04c487b8f52
[+] ./data/malware/767a72c288c1c59ad66cfde80ee8a9f87c1e19c7366742d92930ec3b8e9dbf30
[-]
[+] ./data/malware/f3941074c899374b4b8c538d2fd93bcf7351686c3178e083271a8df919b611ae
[+] ./data/malware/7e4dfa13677374119405398ca669bf86e6c34449e7bd5396579c9460cef800e4
[+] ./data/malware/2df9b94ab21d882f6c9caffcf03dfd910786fcf62ec2dd161a1fe435c0d7a9a4
[+] ./data/malware/2512ec4c9e7b9fa27df463b70c22867ea87896a68d24854a8f10fc4da1a6bd1b
[+] ./data/malware/7ed0eacdb5e1cf0797178e509d167d9c1215a1c1ebd6725cdb70b51d64aa0d43
[+] ./data/malware/c124f107d52fb1a85d1b5ccf3e6a4212a531f3dd4b2edccbcd04fcc83a0b9183
[-]
[-]
[+] ./data/malware/8fc4dd78f6a1414aeb523bea862a08acedb942e16cb43e823d4196f6a3745a11
[+] ./data/malware/5a00ec85e0de347e52e9431543e7e19218994498fa561f07928f15b906afebc3
[-]
[-]
[+] ./data/malware/d48a02d1d7ada67611a777be64dbbaacd57924f9ff0a8eaad1972547f9569256
[+] ./data/malware/b65c03b9325bbf1118ad00b4bb42d2db0570a89c865fdeb6217e76b4d3bd233a
[-]
[+] ./data/malware/16866b1e5201d4d3a8a63100fe7fd6d74fa36b5648b3bcd4e12267f8827f597f
[+] ./data/malware/8c4b8684f7fbef3e4cab7a47039f8c972af5b73c01f39bf9f4adeb0d5653ad8e
[-]
[-]
[+] ./data/malware/59545ef5eb03e6eb4b43a9d329d8d43617dd8b146c59203895148bd1b233deee
[+] ./data/malware/25b03b6520ebb0d532111143b88a4271ba0cdb3beb485b2980d7dc5d92b39fa8
[+] ./data/malware/a6f4774156de36bc935597ef020c65f2d6e24cd48be08b6e7f98b19555ee3b4f
[+] ./data/malware/2cf222d489e7a9a44ec6dfa5e928e3a6b58226c31a7fe9d9230384446f955607
[+] ./data/malware/b5e99027aa834d9ca2380f2f3d95be48a3a22781c022f61f5a346972bb509aef
[+] ./data/malware/5096df319af5515306f8a2c4ecc8dec38448c2c6fd6facf23627c351667eaec2
[+] ./data/malware/e10cb9994f890c8bd6f49d2e07d0a4e7284ff083849aa000c903c0f8aebe2654
[+] ./data/malware/9fd050b81dc2c947a7dc91be54232a34dab8149c4f59269f4164b42af73747e0
[+] ./data/malware/8ce91d16ec31d8bc1672cb396ff8311008e127f5ee3c3f7978c599daae67f93e
[+] ./data/malware/77eb4a110d4a18546bb537af46d5dd3d73036a0b90d5d0b63f30c164550596f1
[+] ./data/malware/ceac9a8c206ac4cebbfd3b5efd67b3b92ea13239d910bd65429db87cf65a5440
[+] ./data/malware/bc5e01e8165907b958dfab9853b533b7c0e8a1f6baa1db56dc6a7a3ae2150e78
[-]
[-]
[+] ./data/malware/2afc4a24f024b8698642ce8d75aedff9fee94d9ec4e8aa444997d2833bb60da9
[+] ./data/malware/43e96f8797d4711ca8270d0e41d1920aa4bd5f465b29825e39de60f43ad6b39e
[+] ./data/malware/9a989717d12a3027343c842b2d72c023da7099d97639cfbd39041c1dfd0308a0
[+] ./data/malware/19ce03444ec992ba7a4e288b7e5e006523454f2c11c4fb87110606a26df06bdf
[-]
[+] ./data/malware/0dd9d3e39ad88f5bd2a47749878dbdeee30e9e16f6a9476edd0677c284cbb7c2
[+] ./data/malware/a747ab0ad442e17582607bdb5850644a17b7a058de6b9e5a2205a6a6569ff8db
[+] ./data/malware/d45e0b77ce387170298c6adff9097cfdb68ed5a38529cecf5a51b6b642ccba36
[+] ./data/malware/6abb95578c8f3341ea170e2184e56235644889281700a841e61d65fe45b80519
[+] ./data/malware/dbfc34f278a4e41267214e1fdcbbd28ec63d4054f546e01e5832cec3d334d135
[+] ./data/malware/1882a8ee3959789ccd6710cef5fde654d5d95d8fdc13de9b5eea485b5e06dfd1
[-]
[-]
[+] ./data/malware/14905373243166ea424db6c3b4923c1882fa92d637713fc8c681cb9ef5c36c6c
[+] ./data/malware/7316d366eec3da9f0757bceeacccbb4c8595bf08288bfa9db6b8ae2228899df4
[-]
[-]
[+] ./data/malware/733c43ff38b7c341f2a0f064ef3f0bc4200a33c9533b9fc558a4fe35cd39d3eb
[+] ./data/malware/8d1c9039f23e3a53e848567cefebcf8009f5218984c9c741aff363bfce102476
[-]
[+] ./data/malware/6334f6cd2af17fec522fe6443f05acecd002e5f52c86e516aa5b54fcfcebd170
[+] ./data/malware/b16f45eecf032b997d3ffb7354b8c4f546f6dd792b6083ccc5fd1faadc8c284a

[-] File not PE: ./data/malware/c43f61289cf097bdbbc4b264d6356817652cc0407b38545847f4250e8cf6d99d 
=>	 Zip archive data

Removing file.
[+] ./data/malware/68d003ae15085663b50f6fccd4df7cad70798bcc61b5f30ef670c2fbbb4084dc
[-]
[+] ./data/malware/29730548ef5cbd722c86f4cfcabb29173d38a7c538befc281cab8f96154b4655
[+] ./data/malware/5b0842bc78915d712da423587af2b2b17bc21c6ac6713d3b4c2b61daeb167165
[-]
[-]
[+] ./data/malware/7b605f40a203a30ba6bced92b1b731601470f92a64c7cf92f078376661ac43a4
[+] ./data/malware/1ab0d7ae73c5f0696f786efb93e8957b78b7c5195573aa0dff770b7e7794f4c3
[+] ./data/malware/79ff017c232af6dff43cc336cb17293cd9ab7281e85391d8282daaa670e2d368
[+] ./data/malware/8c452e159752e25efbb945f66af6ba563a5b14d1874b33814acb4d11d2e30981
[+] ./data/malware/4413aeef55e37168a42461af2b1b0f692b7517606aac072988757cacca2327a7
[+] ./data/malware/c7f78db6d8d18bb2bb0663f2736599345be8978ac58fb4532025169ff340e752
[+] ./data/malware/d47ef1b5ac5f5bdcdf43919733d7e3935f3c313ac36eacc45f0c875698114a03
[+] ./data/malware/56980b78247805c214ba8a5adaff6018b8ad740c2a5b3a5c8d50b0a676d0c8aa
[+] ./data/malware/73dfab2cc9307fb34cf75930b930963cc02be23f9e8b87cd87d50e2476cb74d7
[+] ./data/malware/3c943b88b07b0d6210dce1746769194d3104bf19a0a581d7a075b19da63cf19f
[+] ./data/malware/5a87d463ec341664142d5dfebce4cecdcdd3f8259b51f86d5f797c18d83b8f66
[+] ./data/malware/1e05bc15c50398089c5e2bebd15ddbc5c07e382e181041c575481a4f2a3f2e62
[+] ./data/malware/6b7b54a29b8ab08b35d1a0d83b49249741526e4f2153c7192b06ee90c443a9d1
[+] ./data/malware/8e65b8b0637a89688524906d9a58b4d6bb275b0f37f4a115745fa428a4a59e9c
[+] ./data/malware/74499aa52ed87c6a9a90e990236d7aeab061cfa0f12397689b2d0ee12410932e
[+] ./data/malware/cbc4cb1056b59d186ebc39de6647946e7b92ec1000872b0e4c9ec604c001ce06
[+] ./data/malware/2ea7ba53f55d1abcfb6e7b14c0b36ebc72ff38b4d1ec3603e1cabbcc752e86c0
[+] ./data/malware/ced21ce61a3c9150e46ad1f93ac225a5ee6116334d9da5ba443794db8708e156
[+] ./data/malware/28abf49b5af3909813357f3044a9c8b42c028e9b77fc82700fcf5a393c0c4839
[-]
[-]
[+] ./data/malware/436a5ff5a22780be7433312a6fd87b5ee1313b98edd7cebaf11a318afb19622d
[+] ./data/malware/6dbcf9b55a03cbbfd3009f53e292cc5975ffb1ad136ed00c725356772f09d4b7
[+] ./data/malware/0544d6ed305440899e82b793660f3fcee7bf585e3051c182f5550c6b9f8b8f98
[-]
[+] ./data/malware/38c1eaf41dbf8251bedd53a58636c97372f818ebbe76b97ef427d72539d26be6
[+] ./data/malware/38ff98c056b705492c12a757149563a42b12c43208ea92f9c308b2f187becb74
[+] ./data/malware/d23bd82ae5878a946625d7a67921962e4e3304cdeda5bc47e402955a76aa8718
[+] ./data/malware/7b21ee388157d64dbcc44d263ba6e62d633bdd64458a4452d1b5743636684231
[+] ./data/malware/3c2f3f730ba452ff1cfef86d0ccbc09c411fb45eaee7861ba5fc66b880fe1c3a
[+] ./data/malware/73d807dcf7103b8dfadd56db747508cbe258081a8a900989285679999bad11cc
[+] ./data/malware/caf50ae6b130dfccdba999fe9d93dbc3dc75066b499835715ddd42443c8d9786
[+] ./data/malware/8fc2784ac119e5bd441218c7e43268977c6a5d63697d43ea9a21a929ac3ab76c
[+] ./data/malware/dba7b30682401e40fea5a14bc858d934261459a0e274e274f38844a3ea36bd6e
[+] ./data/malware/c4034813118d49aca0f8be68e264443521289c627ddfd5751bd5728a974bf0d5
[+] ./data/malware/bf06b816fe16e915592447c042bbb529cfc6ac382a4fc62010e10f15d3252ef6
[+] ./data/malware/180f76da669e8447edca155c3054b7b709885b026fbe5d5965201ffb16500172
[+] ./data/malware/dd7a51df679e9cfa4609eda781fcf520dce1805d0da3e8d243140374c3619ed8
[+] ./data/malware/54c8cc1327e27d1bdeeec44614e02ee6337ca51b558f954d9f14f47f704d8a96
[-]
[-]
[+] ./data/malware/86cf13cfd08d945dc516114939d559c9450bdd1867d94fa64757f1aff8d86911
[-]
[-]
[+] ./data/malware/bf9ef43f775cf2f049af6d24061ecad790e88a64725974f26f9cccc3b07e18f3
[-]
[-]
[+] ./data/malware/78403bfde2a779dc530d623820d17e6d050c316d7f68dba980b49e7b9d5856cc
[+] ./data/malware/0dda4832bfeddd2261634aa12928a5215860c4b090e45af36aa159ea325e6f70
[-]
[+] ./data/malware/8d0fe069c2619751dbc3310506c28afbe45288e37e4b92b51818e200d03a80b3
[+] ./data/malware/368fac9a24d0b544c9a5442e2666913e261d3cd845a0ef1646b02f206600348b
[+] ./data/malware/aa4f391dcc0de9fc1c27c93ff94f47e1a5185c046bbadd4d9fe5f868d24793e3
[-]
[+] ./data/malware/6cdf96b602ec10e4a9a713e471711c4fed02af7d40d435c484d9e55a045e6ba0
[-]
[+] ./data/malware/88cfe05358c1c44a7cc5ff09b30e0fe58c73e58becc724b04aceb9e4988cf920
[+] ./data/malware/28bf19434e6a2fd5cec3632784576d42b3d67135eec47d72db0cda2800b27814
[+] ./data/malware/68142e058d6123c0e2e6a623189eb5d7ccfe59dae52dca751db5c5600d31e446
[+] ./data/malware/75420d9f3fa29fb6e99c4affbf6adcc03fc2b375034e443db88f4b7c0b622125
[+] ./data/malware/b78038b0f8943d5ab243462f7b9d0e99eb1b0eadb1737d8cb65f595e8733e2d3
[+] ./data/malware/262f4534a3f41a1d00ccab7cb1ca330a6c39204529e650d95bf168d3be52307d
[-]
[+] ./data/malware/2ae130e8471de572550f425f261de6369fe5784a7423a3f9488bd3807f4ec581
[+] ./data/malware/d60a769c000fd56bf4ad4728adf36afe46073337f4e8deafa2a834c0f8289fd5
[-]
[+] ./data/malware/709401e49372ea0405b9d1ac37daea5ed499469c245012baa3d77e6b3864cfb3
[+] ./data/malware/74c3c9a4e6728191382470d0d70fdc8eeb74e5a2ed941cc34e9f7146a527480c
[+] ./data/malware/35b97b759d6ce90ae6d2d3da6131046035020383cf5cea2a5d59510f3fc1d9d7
[-]
[-]
[+] ./data/malware/432a06c4bbe435c375f23e00b7f5d682fb93d31fcd082717e116dad2628eb4f2
[+] ./data/malware/bcffc6796f0043c354635b9b961798239b1c8f0c0cae3b910b45dc67a35c397d
[-]
[-]
[+] ./data/malware/85f4715ee748efac042d3dda901d39c539d02b7e592e62a2501547c0a7da0b10
[+] ./data/malware/5bfe3a260c9473b51f584505b45e3b4c6e90b412b303f792ed35b8e6920c4b9b
[-]
[-]
[+] ./data/malware/20bf7eb38d34e46099e08eb3394383f1c0ed21686b89d3c0ae74829babdadad0
[+] ./data/malware/c11c5e4489f95b42753fb0e1e80020979b61f797255d61c31ce3094918f6c4e6
[-]
[-]
[+] ./data/malware/3cec9b0e4f60895cdad85e8190352662edebe353e4dab4a5f301376b81b5df1a
[+] ./data/malware/3a26abded2c4305dd780912d5db949dfcbfdbb41f7908478a97b625d304821aa
[+] ./data/malware/28f2f64d13fc0f3ff2f5676da7dfc021b0d860d29ab2fd566574c6bbf9d5e0ce
[+] ./data/malware/1191213732f83276ce81fbd85549c6af72b22bba43fd9eb7524ea220a6eccc5f
[+] ./data/malware/785bf15195704996029556f7926a27e0a77a579d723e2a8b2e85648d230bd676
[+] ./data/malware/eb94ef1c22bd34c0ca2187024eca4aea3cd063c223f3d37889e08813774e5179
[-]
[-]
[+] ./data/malware/409ac4598eb81fc8270e64d97c76e506d79ad88cecdd2ca0c528f17d51082741
[+] ./data/malware/c10b0bc20c69fe389891addf684fcc5bff678c1de3da05d8c90f492d3d8df547
[+] ./data/malware/8b4518ded714b28dab43e8c4cdc97611e074841d26daf6759a0dc613285eab0c
[+] ./data/malware/3365106f1cffa97b4f92c3f5345baf665e586a1cdc40db759ab09781676d1996
[+] ./data/malware/7c23c35d46cec1b80daa31cae3e40784970dd812c32a4c0e043c75a06a0477f5
[+] ./data/malware/53d8fb74b81b035f85ac1336ee841988b512682f1e46eb843c33185a3280f7c1
[+] ./data/malware/63ce11e3c93db194fbd2bb199f440fb0f262ba519deabc922a3bb4fc66ceadff
[+] ./data/malware/b69544a8f8136e0292d56c5150a2cef176488cac5c2ba2daa4cb613034098a93
[+] ./data/malware/1baa26354e41f811119b4c61a64d156d3c05f7b60f97976110fff40db3e24121
[-]
[-]
[+] ./data/malware/8dc6f38e8dd0746c1295609d7ecd5ddce04fb49549613eaf6603739a514a9e82
[+] ./data/malware/0c55fe68032aba40d00f7b41602720a71e265555a61332934f597040fa6dd167

[*] Malware PE information:

{'0004cec68fdb95507c6161d84e4965db60f997a679ce20786075992f1e5b340c': {'AddressOfEntryPoint': 1073962461,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 155648,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CreateProcessAsUserW',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'OutputDebugStringA',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SETUPAPI.dll': 'SetupInitDefaultQueueCallbackEx',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathUnquoteSpacesW',
                                                                                      'USER32.dll': 'SetWindowLongPtrW',
                                                                                      'USERENV.dll': 'DestroyEnvironmentBlock',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'msvcrt.dll': '_strcmpi',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['GetPrivateProfileSectionW',
                                                                                            'CopyFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetVersionExW',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'GetFileSize',
                                                                                            'GetTickCount',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetCurrentThread',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateDirectoryW',
                                                                                            'lstrlenA',
                                                                                            'OpenEventW',
                                                                                            'GetSystemInfo',
                                                                                            'GetExitCodeProcess',
                                                                                            'ResetEvent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'DeleteFileW',
                                                                                            'GetLocalTime',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ReadFile',
                                                                                            'GetLastError',
                                                                                            '_local_unwind',
                                                                                            'LoadLibraryW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'FreeLibrary',
                                                                                            '__C_specific_handler',
                                                                                            'lstrcmpW',
                                                                                            'lstrcmpiW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcatW',
                                                                                            'lstrcpyW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'LoadLibraryA',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'CloseHandle',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateProcessW',
                                                                                            'OutputDebugStringA',
                                                                                            'EndDialog',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetWindowTextW',
                                                                                            'CheckDlgButton',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'TrackPopupMenu',
                                                                                            'DestroyMenu',
                                                                                            'SendMessageW',
                                                                                            'DialogBoxParamW',
                                                                                            'CreateDialogParamW',
                                                                                            'CharLowerBuffA',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'GetWindowRect',
                                                                                            'CreateWindowExW',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'UpdateWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindow',
                                                                                            'IsWindowVisible',
                                                                                            'EnumWindows',
                                                                                            'PostMessageW',
                                                                                            'GetMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDlgItem',
                                                                                            'BringWindowToTop',
                                                                                            'GetCursorPos',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetStockObject',
                                                                                            'EnumPrintersW',
                                                                                            'DeleteMonitorW',
                                                                                            'EnumMonitorsW',
                                                                                            'EnumPortsW',
                                                                                            'AddPrinterW',
                                                                                            'DeletePrinterDriverW',
                                                                                            'AddPrinterDriverExW',
                                                                                            'DeletePrinter',
                                                                                            'GetPrinterW',
                                                                                            'GetPrinterDriverW',
                                                                                            'AddMonitorW',
                                                                                            'GetPrinterDriverDirectoryW',
                                                                                            'AddFormW',
                                                                                            'DeleteFormW',
                                                                                            'OpenPrinterW',
                                                                                            'EnumFormsW',
                                                                                            'ClosePrinter',
                                                                                            'GetOpenFileNameW',
                                                                                            'SetSecurityDescriptorSacl',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatusEx',
                                                                                            'StartServiceW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'ControlService',
                                                                                            'DuplicateTokenEx',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenThreadToken',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CreateProcessAsUserW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'CoTaskMemFree',
                                                                                            'PathIsFileSpecW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveBlanksA',
                                                                                            'PathAddBackslashW',
                                                                                            'PathRemoveExtensionA',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathUnquoteSpacesW',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'EnumProcessModules',
                                                                                            'SetupSetDirectoryIdW',
                                                                                            'SetupOpenAppendInfFileW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupInstallFromInfSectionW',
                                                                                            'SetupInitDefaultQueueCallbackEx',
                                                                                            'PropertySheetW',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'vsprintf',
                                                                                            'strcpy',
                                                                                            'swscanf',
                                                                                            'wcschr',
                                                                                            'wcstok',
                                                                                            'sscanf',
                                                                                            'isdigit',
                                                                                            'iswdigit',
                                                                                            'fclose',
                                                                                            'sprintf',
                                                                                            'fopen',
                                                                                            'memcpy',
                                                                                            'rand',
                                                                                            '_itow',
                                                                                            '_wtoi',
                                                                                            'atof',
                                                                                            'memcmp',
                                                                                            'strstr',
                                                                                            'wcsstr',
                                                                                            'wcsrchr',
                                                                                            '_wmakepath',
                                                                                            '_wsplitpath',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'memmove',
                                                                                            'wcslen',
                                                                                            'fprintf',
                                                                                            '_wtol',
                                                                                            'toupper',
                                                                                            'tolower',
                                                                                            'ceil',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'memset',
                                                                                            'time',
                                                                                            'localtime',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'strrchr',
                                                                                            'iswspace',
                                                                                            'strlen',
                                                                                            '_strcmpi'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 253,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 10856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 49664,
                                                                                       '.text\x00\x00\x00': 148992,
                                                                                       'gr\x03\x00c\x00\x00\x00': 11264},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/0004cec68fdb95507c6161d84e4965db60f997a679ce20786075992f1e5b340c'},
 '0024eec62931670946abd4240d38127e23b4c0c9321de43bc9af96804d30dd50': {'AddressOfEntryPoint': 37296,
                                                                      'DebugRVA': 24720,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortDebugPrint'},
                                                                      'ImportedFunctions': ['StorPortPauseDevice',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortResumeDevice',
                                                                                            'StorPortLogError',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortNotification',
                                                                                            'StorPortCompleteRequest',
                                                                                            'StorPortReady',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortConvertUlongToPhysicalAddress',
                                                                                            'StorPortGetVirtualAddress',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortValidateRange',
                                                                                            'StorPortDebugPrint',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 16,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1536,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 18432,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/0024eec62931670946abd4240d38127e23b4c0c9321de43bc9af96804d30dd50'},
 '00a02d154e7389d3a5fe572e9800f1628e74b8aabe4270f3282a8c0ab0951ff9': {'AddressOfEntryPoint': 1073916548,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'SHLWAPI.dll': 'StrStrIA',
                                                                                      'USER32.dll': 'CreatePopupMenu',
                                                                                      'hccutils.DLL': 'FindResources',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['LoadBITMAP',
                                                                                            'LoadSTRINGW',
                                                                                            'LoadICON',
                                                                                            'LoadIMAGE',
                                                                                            'FindResources',
                                                                                            'CreateEventA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpiA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineA',
                                                                                            'Sleep',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetLastError',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'LCMapStringA',
                                                                                            'ExitProcess',
                                                                                            'LCMapStringW',
                                                                                            'FlsAlloc',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'HeapAlloc',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'CreateFileA',
                                                                                            'GetLocaleInfoA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetStdHandle',
                                                                                            'SetFilePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TerminateProcess',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RegisterWindowMessageA',
                                                                                            'IsWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'ShowWindow',
                                                                                            'GetDC',
                                                                                            'GetSystemMetrics',
                                                                                            'ReleaseDC',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'SendMessageW',
                                                                                            'AppendMenuA',
                                                                                            'SetForegroundWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'DestroyIcon',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowTextW',
                                                                                            'wsprintfW',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'PostMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyMenu',
                                                                                            'FindWindowA',
                                                                                            'SetWindowLongW',
                                                                                            'PostThreadMessageA',
                                                                                            'CharNextW',
                                                                                            'CharNextA',
                                                                                            'GetCursorPos',
                                                                                            'GetWindowLongW',
                                                                                            'GetDesktopWindow',
                                                                                            'CreatePopupMenu',
                                                                                            'GetDIBits',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'BitBlt',
                                                                                            'SetTextColor',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'Shell_NotifyIconW',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoTaskMemAlloc',
                                                                                            'UnRegisterTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayDestroy',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'StrStrIA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 179,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2552,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 29184,
                                                                                       '.text\x00\x00\x00': 107520,
                                                                                       'ӻ\x02\x00c\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/00a02d154e7389d3a5fe572e9800f1628e74b8aabe4270f3282a8c0ab0951ff9'},
 '00aac566d9664b844e5d7ae641c58131ce59deced312236f4299638356484fa0': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 149376,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 149504,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/00aac566d9664b844e5d7ae641c58131ce59deced312236f4299638356484fa0'},
 '00cb557ec3c36d07f27e264dd6bffb6c858a3d9568878db3fded2a0bd0f9fe3b': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3492,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/00cb557ec3c36d07f27e264dd6bffb6c858a3d9568878db3fded2a0bd0f9fe3b'},
 '00dbc9c0db2020a47a7833740b12141c6c865510f67eb5b88d6d5f0a7a833268': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 215096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 215552,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/00dbc9c0db2020a47a7833740b12141c6c865510f67eb5b88d6d5f0a7a833268'},
 '00e77c92f5584c245cb6422a37028c47f232fa3fadb59b493bc7f4bd28df70cd': {'AddressOfEntryPoint': 53248,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['GetWindowsDirectoryA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'WinExec',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'wsprintfA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 9216,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 22016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/00e77c92f5584c245cb6422a37028c47f232fa3fadb59b493bc7f4bd28df70cd'},
 '017a1596c87a3ab76161666f34113ab8b16d1e5da7d535c705949d3a6b36398d': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 407992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 408064,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/017a1596c87a3ab76161666f34113ab8b16d1e5da7d535c705949d3a6b36398d'},
 '01d9eb3e7c4b0a8ceb4c69924daba0bb4da90b0849665c46e815ae9ddf0c24d2': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 509280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 509440,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/01d9eb3e7c4b0a8ceb4c69924daba0bb4da90b0849665c46e815ae9ddf0c24d2'},
 '01edb51ae3d6d79dd1b57a3a2cf84ad082f2a12cad2877c60e7dbe96ff251b22': {'AddressOfEntryPoint': 51316,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 184896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 185344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/01edb51ae3d6d79dd1b57a3a2cf84ad082f2a12cad2877c60e7dbe96ff251b22'},
 '01f8fad499ebd1017200eb5673d21e82bbcdfb0c382f49929a62c14c796a5225': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 388860,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 389120,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/01f8fad499ebd1017200eb5673d21e82bbcdfb0c382f49929a62c14c796a5225'},
 '020b9c2e74cc6d932a7f60acacaf269db8f0135538ee81f3bb51e005f1769c44': {'AddressOfEntryPoint': 1073781725,
                                                                      'DebugRVA': 4848,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'USER32.dll': 'CharNextA',
                                                                                      'msvcrt.dll': '_strnicmp'},
                                                                      'ImportedFunctions': ['_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'isalnum',
                                                                                            'isalpha',
                                                                                            'islower',
                                                                                            '_atoi64',
                                                                                            'atol',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'strchr',
                                                                                            'memcpy',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_strnicmp',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GlobalFlags',
                                                                                            '_lopen',
                                                                                            'GetStartupInfoA',
                                                                                            '_hread',
                                                                                            '_lclose',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'lstrcmpiA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcatA',
                                                                                            '_llseek',
                                                                                            'FindNextFileA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'lstrcpyA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SendMessageA',
                                                                                            'LoadStringA',
                                                                                            'CharPrevA',
                                                                                            'wsprintfA',
                                                                                            'GetSystemMetrics',
                                                                                            'CharNextA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2616,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/020b9c2e74cc6d932a7f60acacaf269db8f0135538ee81f3bb51e005f1769c44'},
 '0233b7eac732b159543513b9d148ddd5dcc54548be2867bf050fa3ff5f605064': {'AddressOfEntryPoint': 1074062968,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyA',
                                                                                      'CFGMGR32.dll': 'CM_Reenumerate_DevNode',
                                                                                      'KERNEL32.dll': 'ReadFile'},
                                                                      'ImportedFunctions': ['CM_Locate_DevNodeA',
                                                                                            'CM_Reenumerate_DevNode',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'CloseHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'ReadFile',
                                                                                            'RegDeleteKeyA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2664,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/0233b7eac732b159543513b9d148ddd5dcc54548be2867bf050fa3ff5f605064'},
 '02968edeae1088f046b4afe4dc20c4668b40ac8849a88f763807a8d5637f424f': {'AddressOfEntryPoint': 1073906705,
                                                                      'DebugRVA': 25136,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStringTypeW'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCommandLineA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 58,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 143444,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 143872,
                                                                                       '.text\x00\x00\x00': 19968,
                                                                                       '͝\x02\x00oc\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/02968edeae1088f046b4afe4dc20c4668b40ac8849a88f763807a8d5637f424f'},
 '02d30c0c6aec1869906a97039b604a8d885e55a58c30bc6b70a833a4bcfe8662': {'AddressOfEntryPoint': 1074867945,
                                                                      'DebugRVA': 809616,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 1065376,
                                                                      'ExportSize': 442,
                                                                      'IATRVA': 806912,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EqualSid',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'USER32.dll': 'RegisterClassExW',
                                                                                      'USERENV.dll': 'DestroyEnvironmentBlock',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'timeBeginPeriod',
                                                                                      'WS2_32.dll': 'socket'},
                                                                      'ImportedFunctions': ['GetQueuedCompletionStatus',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'DeleteCriticalSection',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetHandleInformation',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'WriteProcessMemory',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'VirtualQueryEx',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetThreadContext',
                                                                                            'AssignProcessToJobObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualProtectEx',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'QueryDosDeviceW',
                                                                                            'CreateJobObjectW',
                                                                                            'CreateMutexW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateNamedPipeW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'lstrlenW',
                                                                                            'VirtualQuery',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ReleaseMutex',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringA',
                                                                                            'FormatMessageA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStdHandle',
                                                                                            'OpenProcess',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemInfo',
                                                                                            'ReadFile',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'TerminateJobObject',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseSemaphore',
                                                                                            'RtlCaptureContext',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitNamedPipeW',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'DebugActiveProcess',
                                                                                            'GetUserDefaultLCID',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'HeapFree',
                                                                                            'ExitProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'LoadLibraryA',
                                                                                            'HeapAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapCreate',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetFullPathNameA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetNamedPipeInfo',
                                                                                            'CancelIo',
                                                                                            'ConnectNamedPipe',
                                                                                            'SuspendThread',
                                                                                            'SwitchToThread',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'WaitForDebugEvent',
                                                                                            'ContinueDebugEvent',
                                                                                            'SetThreadContext',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'SetInformationJobObject',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetTickCount',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'LocalAlloc',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'lstrlenA',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'OpenThread',
                                                                                            'FlushInstructionCache',
                                                                                            'ExitThread',
                                                                                            'VirtualAllocEx',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'FindFirstFileA',
                                                                                            'PostQuitMessage',
                                                                                            'CallMsgFilterW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'GetQueueStatus',
                                                                                            'PeekMessageW',
                                                                                            'WaitMessage',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'PostMessageW',
                                                                                            'MessageBoxW',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CharUpperW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetThreadDesktop',
                                                                                            'SetProcessWindowStation',
                                                                                            'CreateDesktopW',
                                                                                            'GetProcessWindowStation',
                                                                                            'CreateWindowStationW',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'UnregisterClassW',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'RegCreateKeyExW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'SetSecurityInfo',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CopySid',
                                                                                            'CreateWellKnownSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'SetEntriesInAclW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDestroyKey',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'EqualSid',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetDevCaps',
                                                                                            'timeBeginPeriod',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'ntohs',
                                                                                            'bind',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'socket'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 299,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/02d30c0c6aec1869906a97039b604a8d885e55a58c30bc6b70a833a4bcfe8662'},
 '02ef8fcd3671438012dd0056b7946edc02ad383bc2b591b9e2b06d1d5c2e334c': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 765312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 765440,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/02ef8fcd3671438012dd0056b7946edc02ad383bc2b591b9e2b06d1d5c2e334c'},
 '03bf155ded9ccebc74790dd1bbf2d9000cacab079a3ba1b5df4947123f70c9b8': {'AddressOfEntryPoint': 77160,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['GetWindowsDirectoryA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'WinExec',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'wsprintfA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 29184,
                                                                                       '.rdata\x00\x00': 9216,
                                                                                       '.text\x00\x00\x00': 21504,
                                                                                       'vcapnhb\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/03bf155ded9ccebc74790dd1bbf2d9000cacab079a3ba1b5df4947123f70c9b8'},
 '03ccdc44982eb7cc3b64951c8ae287c5f79ee4edb8d61b0b084eeca84011264e': {'AddressOfEntryPoint': 137036,
                                                                      'DebugRVA': 182240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 211504,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'RtlLookupFunctionEntry',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'LoadIconW',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'Sleep',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetTickCount',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'CreateThread',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetProcessAffinityMask',
                                                                                            'ReleaseSemaphore',
                                                                                            'ResetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'SetThreadPriority',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'CreateSemaphoreW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileType',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLongPathNameW',
                                                                                            'MoveFileW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'CreateFileW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'CreateHardLinkW',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GlobalAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxW',
                                                                                            'FindWindowExW',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharUpperW',
                                                                                            'OemToCharBuffA',
                                                                                            'LoadBitmapW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'PostMessageW',
                                                                                            'GetSysColor',
                                                                                            'SetForegroundWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'IsWindowVisible',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyIcon',
                                                                                            'SetFocus',
                                                                                            'GetClassNameW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'EndDialog',
                                                                                            'SetDlgItemTextW',
                                                                                            'wvsprintfW',
                                                                                            'SendMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadStringW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'LoadIconW',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SHBrowseForFolderW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetFileInfoW',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 213,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 26040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 31744,
                                                                                       '.rsrc\x00\x00\x00': 26112,
                                                                                       '.text\x00\x00\x00': 174080},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/03ccdc44982eb7cc3b64951c8ae287c5f79ee4edb8d61b0b084eeca84011264e'},
 '03d8af28ecdfe2fc392f2d0e9260706debec2e72fa7ef5e9bd492768325c2ea7': {'AddressOfEntryPoint': 1073812569,
                                                                      'DebugRVA': 29344,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LoadLibraryW',
                                                                                      'SETUPAPI.dll': 'SetupDiGetClassDevsW',
                                                                                      'SHLWAPI.dll': 'StrCatW',
                                                                                      'USER32.dll': 'wsprintfW'},
                                                                      'ImportedFunctions': ['wsprintfW',
                                                                                            'StrCmpIW',
                                                                                            'StrStrIW',
                                                                                            'StrCatW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetLastError',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'WideCharToMultiByte',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'Sleep',
                                                                                            'HeapFree',
                                                                                            'OutputDebugStringW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 49452,
                                                                      'SectionNames': {'\x15.\x01\x00oc\x00\x00': 1024,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 49664,
                                                                                       '.text\x00\x00\x00': 21504},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/03d8af28ecdfe2fc392f2d0e9260706debec2e72fa7ef5e9bd492768325c2ea7'},
 '03e7fc4b59ef56723f33c3531c292288051670a34112c1f8c896b0309fe8df78': {'AddressOfEntryPoint': 5424,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49964,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetNamedSecurityInfoW',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'msvcrt.dll': 'wprintf'},
                                                                      'ImportedFunctions': ['AdjustTokenPrivileges',
                                                                                            'GetTokenInformation',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'EnterCriticalSection',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RemoveDirectoryW',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetFileAttributesW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            '__C_specific_handler',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__iob_func',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '__wgetmainargs',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_snwprintf',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fwprintf',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'realloc',
                                                                                            'signal',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'vfprintf',
                                                                                            'wcschr',
                                                                                            'wcscmp',
                                                                                            'wcslen',
                                                                                            'wcsncpy',
                                                                                            'wcsrchr',
                                                                                            'wprintf',
                                                                                            'SHFileOperationW'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 22016,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.xdata\x00\x00': 1024},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/malware/03e7fc4b59ef56723f33c3531c292288051670a34112c1f8c896b0309fe8df78'},
 '0544d6ed305440899e82b793660f3fcee7bf585e3051c182f5550c6b9f8b8f98': {'AddressOfEntryPoint': 1073781213,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueA',
                                                                                      'KERNEL32.dll': 'LCMapStringA',
                                                                                      'SETUPAPI.dll': 'SetupDiEnumDeviceInfo',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['SetupDiGetClassDevsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'OpenFile',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'FormatMessageA',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'lstrlenA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileA',
                                                                                            'GetCommandLineA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'MessageBoxA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'SHFileOperationA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 960,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/0544d6ed305440899e82b793660f3fcee7bf585e3051c182f5550c6b9f8b8f98'},
 '05f0e608c8bd180c20465edbf2ce63900298d79f178e474774b9b205f23a255d': {'AddressOfEntryPoint': 121744,
                                                                      'DebugRVA': 95104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90112,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/05f0e608c8bd180c20465edbf2ce63900298d79f178e474774b9b205f23a255d'},
 '05f2de90c06301502274b4ca2ec279e1012906d522176e416bba667353668f7d': {'AddressOfEntryPoint': 112016,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyA',
                                                                                      'KERNEL32.dll': 'CreateFileA',
                                                                                      'SHLWAPI.dll': 'PathFileExistsA',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'CopyFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'GetVersionExA',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'HeapSize',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'MessageBoxA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyA',
                                                                                            'PathFileExistsA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 892,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 20480,
                                                                                       '.rsrc\x00\x00\x00': 20992,
                                                                                       '.text\x00\x00\x00': 62976},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/05f2de90c06301502274b4ca2ec279e1012906d522176e416bba667353668f7d'},
 '06e931e942a7b3eaafbac790e6ac103e7a77eb2faf1b6d3d4127289a90b985cf': {'AddressOfEntryPoint': 49844,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateFileA',
                                                                                      'USER32.dll': 'SetWindowPos',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'FreeLibrary',
                                                                                            'lstrlenA',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            '_llseek',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'MulDiv',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'lstrcmpA',
                                                                                            'CreateFileA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDlgItem',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDesktopWindow',
                                                                                            'EndDialog',
                                                                                            'CharPrevA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'MessageBeep',
                                                                                            'LoadStringA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'CallWindowProcA',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetSystemMetrics',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            'memcpy_s',
                                                                                            '_vsnprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 620648,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 621056,
                                                                                       '.text\x00\x00\x00': 53248},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/06e931e942a7b3eaafbac790e6ac103e7a77eb2faf1b6d3d4127289a90b985cf'},
 '06ec5432328675ec67fe6b4ec9876ad4b21c7e3ec6464cc5d413812d65e3a64a': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 763132,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 763392,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/06ec5432328675ec67fe6b4ec9876ad4b21c7e3ec6464cc5d413812d65e3a64a'},
 '0730c7e1bc0ba0fac6e3d8bf8baac1953c5fc5c3b3d77c3bf244cfe8b75cc0f1': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 395780,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 396288,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/0730c7e1bc0ba0fac6e3d8bf8baac1953c5fc5c3b3d77c3bf244cfe8b75cc0f1'},
 '0776cf5a136b7f287806801be96d1419dd7a3fd8283d004cfad828008b11b052': {'AddressOfEntryPoint': 5208,
                                                                      'DebugRVA': 41296,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetVersion',
                                                                                      'WS2_32.dll': 'bind',
                                                                                      'ntdll.dll': '__chkstk'},
                                                                      'ImportedFunctions': ['RtlComputeCrc32',
                                                                                            'ZwClose',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQueryInformationThread',
                                                                                            'ZwOpenThread',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'LdrFindEntryForAddress',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'wcslen',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlGetCurrentPeb',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'memset',
                                                                                            'ZwResumeThread',
                                                                                            'wcscpy',
                                                                                            'wcscat',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            'wcstoul',
                                                                                            'ZwQuerySystemInformation',
                                                                                            '__chkstk',
                                                                                            'ExitProcess',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'Sleep',
                                                                                            'CreateProcessW',
                                                                                            'GetCommandLineW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetVersion',
                                                                                            'setsockopt',
                                                                                            'WSASendTo',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup',
                                                                                            'bind'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 39,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 34816},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/0776cf5a136b7f287806801be96d1419dd7a3fd8283d004cfad828008b11b052'},
 '07aaac257f6fdb5c4060722ef297e0c0e06c24861740014f94f4541c7eeb7279': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 111808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 112128,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/07aaac257f6fdb5c4060722ef297e0c0e06c24861740014f94f4541c7eeb7279'},
 '07cb05f72ad3be4f58378a618eef1b957b9a5a57d6fc6e0f15e850aca5d5161b': {'AddressOfEntryPoint': 73632,
                                                                      'DebugRVA': 252604,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 253952,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'API-MS-Win-Core-ErrorHandling-L1-1-0.dll': 'UnhandledExceptionFilter',
                                                                                      'API-MS-Win-Core-File-L1-1-0.dll': 'FindNextFileW',
                                                                                      'API-MS-Win-Core-Handle-L1-1-0.dll': 'CloseHandle',
                                                                                      'API-MS-Win-Core-Heap-L1-1-0.dll': 'HeapSetInformation',
                                                                                      'API-MS-Win-Core-IO-L1-1-0.dll': 'DeviceIoControl',
                                                                                      'API-MS-Win-Core-LibraryLoader-L1-1-0.dll': 'LoadStringW',
                                                                                      'API-MS-Win-Core-LocalRegistry-L1-1-0.dll': 'RegSetValueExW',
                                                                                      'API-MS-Win-Core-Misc-L1-1-0.dll': 'lstrlenW',
                                                                                      'API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'API-MS-Win-Core-ProcessThreads-L1-1-0.dll': 'GetProcessTimes',
                                                                                      'API-MS-Win-Core-Profile-L1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'API-MS-Win-Core-String-L1-1-0.dll': 'CompareStringW',
                                                                                      'API-MS-Win-Core-Synch-L1-1-0.dll': 'OpenProcess',
                                                                                      'API-MS-Win-Core-SysInfo-L1-1-0.dll': 'GetSystemTime',
                                                                                      'API-MS-Win-Security-Base-L1-1-0.dll': 'SetTokenInformation',
                                                                                      'API-MS-Win-Security-LSALookup-L1-1-0.dll': 'LsaLookupOpenLocalPolicy',
                                                                                      'API-MS-Win-Security-SDDL-L1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'CRYPTBASE.dll': 'SystemFunction005',
                                                                                      'RPCRT4.dll': 'RpcAsyncAbortCall',
                                                                                      'SspiCli.dll': 'LogonUserExExW',
                                                                                      'msvcrt.dll': '_ultow',
                                                                                      'ntdll.dll': 'RtlUnicodeStringToInteger'},
                                                                      'ImportedFunctions': ['_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_ltow',
                                                                                            'wcscspn',
                                                                                            '__getmainargs',
                                                                                            '_ltow_s',
                                                                                            'wcschr',
                                                                                            '_wcslwr',
                                                                                            '_ultow_s',
                                                                                            'time',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            'wcstoul',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            'wcsncmp',
                                                                                            '_ultow',
                                                                                            'UuidCreate',
                                                                                            'UuidCreateNil',
                                                                                            'UuidEqual',
                                                                                            'RpcServerUnsubscribeForNotification',
                                                                                            'RpcServerSubscribeForNotification',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcServerInqBindingHandle',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'I_RpcSessionStrictContextHandle',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'NdrServerCall2',
                                                                                            'NdrAsyncServerCall',
                                                                                            'UuidFromStringW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcServerInqCallAttributesA',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcAsyncAbortCall',
                                                                                            'LogonUserExExW',
                                                                                            'RtlLengthSid',
                                                                                            'EtwTraceMessage',
                                                                                            'NtTraceControl',
                                                                                            'RtlSetLastWin32Error',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtOpenThread',
                                                                                            'NtQueueApcThread',
                                                                                            'RtlQueueApcWow64Thread',
                                                                                            'EvtIntReportEventAndSourceAsync',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventRegister',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlFreeHeap',
                                                                                            'NtSetEvent',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtOpenProcessToken',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtQueryDirectoryFile',
                                                                                            'NtDeleteFile',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'NtFilterToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtSetInformationThread',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtDuplicateToken',
                                                                                            'NtAccessCheckAndAuditAlarm',
                                                                                            'NtAccessCheck',
                                                                                            'NtPrivilegeObjectAuditAlarm',
                                                                                            'NtPrivilegeCheck',
                                                                                            'RtlMapGenericMask',
                                                                                            'RtlSetSecurityObject',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'RtlQuerySecurityObject',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'NtDeleteKey',
                                                                                            'NtEnumerateKey',
                                                                                            'NtDeleteValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenKey',
                                                                                            'NtCreateKey',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlConvertExclusiveToShared',
                                                                                            'RtlConvertSharedToExclusive',
                                                                                            'RtlCreateServiceSid',
                                                                                            'RtlRegisterWait',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlCopySid',
                                                                                            'NtUnloadDriver',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'NtLoadDriver',
                                                                                            'DbgPrintEx',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlInitializeSRWLock',
                                                                                            'NtOpenFile',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlReleaseSRWLockShared',
                                                                                            'NtDeleteObjectAuditAlarm',
                                                                                            'RtlAcquireSRWLockShared',
                                                                                            'NtFlushKey',
                                                                                            'RtlAreAllAccessesGranted',
                                                                                            'NtCloseObjectAuditAlarm',
                                                                                            'RtlReleaseSRWLockExclusive',
                                                                                            'RtlAcquireSRWLockExclusive',
                                                                                            'RtlDeregisterWait',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlQueueWorkItem',
                                                                                            'RtlDeleteSecurityObject',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlCopyLuid',
                                                                                            'NtQueryKey',
                                                                                            'NtShutdownSystem',
                                                                                            'NtInitializeRegistry',
                                                                                            'NtSetSystemEnvironmentValue',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlNewSecurityObject',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'LsaLookupTranslateSids',
                                                                                            'LsaLookupFreeMemory',
                                                                                            'LsaLookupClose',
                                                                                            'LsaLookupManageSidNameMapping',
                                                                                            'LsaLookupGetDomainInfo',
                                                                                            'LsaLookupTranslateNames',
                                                                                            'LsaLookupOpenLocalPolicy',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'SystemFunction029',
                                                                                            'SystemFunction005',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetFileInformationByHandle',
                                                                                            'CreateDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeviceIoControl',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'LoadStringW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegLoadMUIStringW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'IsWow64Process',
                                                                                            'lstrlenW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetProcessId',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateProcessAsUserW',
                                                                                            'ResumeThread',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'ExitThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetProcessTimes',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CompareStringW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'ResetEvent',
                                                                                            'OpenEventW',
                                                                                            'OpenProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemTime',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'CheckTokenMembership',
                                                                                            'GetTokenInformation',
                                                                                            'InitializeAcl',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AllocateLocallyUniqueId',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetTokenInformation'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 293,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 19104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 39936,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 248832},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/07cb05f72ad3be4f58378a618eef1b957b9a5a57d6fc6e0f15e850aca5d5161b'},
 '07ecdbefdb715680519c6889f3b552bbd8f200c399b0387966974f49fb5d27cd': {'AddressOfEntryPoint': 8356,
                                                                      'DebugRVA': 25008,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'WDFLDR.SYS': 'WdfVersionBind',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoRegisterPlugPlayNotification',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'RtlInitUnicodeString',
                                                                                            'KeSetEvent',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmPageEntireDriver',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'InitSafeBootMode',
                                                                                            '_vsnwprintf',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'IofCompleteRequest',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeWaitForSingleObject',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoWMIWriteEvent',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'IofCallDriver',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'KeInitializeDpc',
                                                                                            'IoFreeMdl',
                                                                                            'IoCancelIrp',
                                                                                            'IoBuildAsynchronousFsdRequest',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'KeInsertQueueDpc',
                                                                                            'IoFreeIrp',
                                                                                            'MmProbeAndLockPages',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'MmUnlockPages',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ExFreePoolWithTag',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'DbgPrint',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            '__C_specific_handler',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind',
                                                                                            'KeQueryPerformanceCounter'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 17920,
                                                                                       'INIT\x00\x00\x00\x00': 3072,
                                                                                       'PAGE\x00\x00\x00\x00': 10752},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/07ecdbefdb715680519c6889f3b552bbd8f200c399b0387966974f49fb5d27cd'},
 '0825c00613ec1a0c879cd5053f862db5a7ce9368ef95913f91ff7eb6280947d3': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 630220,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 630272,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/0825c00613ec1a0c879cd5053f862db5a7ce9368ef95913f91ff7eb6280947d3'},
 '084ae81e93031857b6c804af1df2da7c4e055d58caadf727fae67d3530c2bb7f': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 179324,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 179712,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/084ae81e93031857b6c804af1df2da7c4e055d58caadf727fae67d3530c2bb7f'},
 '086c0d2d932584851fec3851282d7de822d07f129ca383924e157adf388bbf29': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/086c0d2d932584851fec3851282d7de822d07f129ca383924e157adf388bbf29'},
 '08f7c373abfa4dc80b015c518834a2f441544a75ae5091f7585bedd31c0e31e2': {'AddressOfEntryPoint': 71700,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 131072,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'GetModuleInformation',
                                                                                      'Secur32.dll': 'LsaEnumerateLogonSessions',
                                                                                      'WS2_32.dll': 'htonl'},
                                                                      'ImportedFunctions': ['GetModuleInformation',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenThreadToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'NotifyChangeEventLog',
                                                                                            'OpenEventLogA',
                                                                                            'GetNumberOfEventLogRecords',
                                                                                            'GetOldestEventLogRecord',
                                                                                            'ReadEventLogA',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptCreateHash',
                                                                                            'CryptAcquireContextA',
                                                                                            'QueryServiceStatus',
                                                                                            'CreateServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'DeleteService',
                                                                                            'OpenServiceA',
                                                                                            'StartServiceA',
                                                                                            'ControlService',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'LsaGetLogonSessionData',
                                                                                            'LsaEnumerateLogonSessions',
                                                                                            'ntohl',
                                                                                            'ntohs',
                                                                                            'htonl',
                                                                                            'CreateEventA',
                                                                                            'CreateFileW',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'DeleteFileA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'Sleep',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetVersionExA',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'IsBadReadPtr',
                                                                                            'Process32Next',
                                                                                            'CloseHandle',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'ReadProcessMemory',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateRemoteThread',
                                                                                            'VirtualFreeEx',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetProcAddress',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateFileA',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'FreeResource',
                                                                                            'ResetEvent',
                                                                                            'GetLastError',
                                                                                            'ReadFile',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemWindowsDirectoryA',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'WriteFile',
                                                                                            'WaitNamedPipeA',
                                                                                            'FlushFileBuffers',
                                                                                            'DisconnectNamedPipe',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeA',
                                                                                            'WideCharToMultiByte',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCurrentThread',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 150,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 43120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 22528,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 43008,
                                                                                       '.text\x00\x00\x00': 124928},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/08f7c373abfa4dc80b015c518834a2f441544a75ae5091f7585bedd31c0e31e2'},
 '09782a24b5a800b4498501f2d33c60fc6b8f2b4a919c279f44658c345fa31314': {'AddressOfEntryPoint': 18896,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetFileAttributesA',
                                                                                      'SETUPAPI.dll': 'SetupDiOpenDevRegKey',
                                                                                      'SHLWAPI.dll': 'SHDeleteEmptyKeyA',
                                                                                      'USER32.dll': 'WaitForInputIdle',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA'},
                                                                      'ImportedFunctions': ['InitializeCriticalSection',
                                                                                            'CreateProcessA',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetFileAttributesA',
                                                                                            'EnterCriticalSection',
                                                                                            'FindFirstFileA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'SetStdHandle',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'IsBadCodePtr',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'HeapFree',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'DeleteFileA',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'Sleep',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetCPInfo',
                                                                                            'GetFileAttributesA',
                                                                                            'WaitForInputIdle',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'PrivilegeCheck',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupGetInfInformationA',
                                                                                            'SetupQueryInfVersionInformationA',
                                                                                            'SetupCopyOEMInfA',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupInstallFromInfSectionA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'SHDeleteEmptyKeyA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 99,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 22736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 23040,
                                                                                       '.text\x00\x00\x00': 47104},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/09782a24b5a800b4498501f2d33c60fc6b8f2b4a919c279f44658c345fa31314'},
 '09c5667f35d0bb61d4bacc3db30e7c91f436ca87d4afca095d5ae64b74a79a34': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 250232,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 250368,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/09c5667f35d0bb61d4bacc3db30e7c91f436ca87d4afca095d5ae64b74a79a34'},
 '09f1cc20675bc53e8504ed6df682fc513e535a5bc34dce58996ee799a7e9964b': {'AddressOfEntryPoint': 1074382917,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 151552,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'ExitProcess',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'SHLWAPI.dll': 'PathIsRelativeA',
                                                                                      'USER32.dll': 'IsDlgButtonChecked',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiGetINFClassA',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiEnumDriverInfoA',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsA',
                                                                                            'SetupDiRegisterDeviceInfo',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiCreateDeviceInfoA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiGetDriverInfoDetailA',
                                                                                            'SetupDiRemoveDevice',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'PathAppendA',
                                                                                            'PathUnquoteSpacesA',
                                                                                            'PathIsDirectoryA',
                                                                                            'PathIsRelativeA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetLastError',
                                                                                            'FindFirstFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GetComputerNameA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetCurrentProcess',
                                                                                            'ReleaseMutex',
                                                                                            'CreateDirectoryA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateMutexA',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetTimeFormatA',
                                                                                            'GetLocalTime',
                                                                                            'OutputDebugStringA',
                                                                                            'lstrcpynA',
                                                                                            'MoveFileExA',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'FreeLibrary',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'Module32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32Next',
                                                                                            'Process32First',
                                                                                            'TerminateProcess',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CloseHandle',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'CopyFileA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFilePointer',
                                                                                            'RtlVirtualUnwind',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'LCMapStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringA',
                                                                                            'RtlCaptureContext',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetConsoleCP',
                                                                                            'GlobalFree',
                                                                                            'WinExec',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'ReadFile',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'OpenProcess',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'SetEndOfFile',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'ExitProcess',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'LoadImageA',
                                                                                            'GetUserObjectInformationA',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'GetWindowRect',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetClientRect',
                                                                                            'SendMessageA',
                                                                                            'SetWindowPos',
                                                                                            'OffsetRect',
                                                                                            'CopyRect',
                                                                                            'GetParent',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'LoadBitmapA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'EnumWindows',
                                                                                            'DialogBoxParamA',
                                                                                            'GetWindowInfo',
                                                                                            'ExitWindowsEx',
                                                                                            'CreateWindowExA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDesktopWindow',
                                                                                            'EndDeferWindowPos',
                                                                                            'IsDlgButtonChecked',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceA',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'CloseServiceHandle',
                                                                                            'ImpersonateSelf',
                                                                                            'OpenThreadToken',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'AccessCheck',
                                                                                            'RevertToSelf',
                                                                                            'FreeSid',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegSetValueExA',
                                                                                            'GetUserNameA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'SHGetFolderPathA',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 225,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 412764,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/09f1cc20675bc53e8504ed6df682fc513e535a5bc34dce58996ee799a7e9964b'},
 '0a0faa8e09269ec70fa16a3e2d27af5649b0e819525bd390e4d44fe9a604666c': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlTimeToTimeFields',
                                                                                            'RtlComputeCrc32',
                                                                                            'sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwWriteFile',
                                                                                            'ZwSetValueKey',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwCreateKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/0a0faa8e09269ec70fa16a3e2d27af5649b0e819525bd390e4d44fe9a604666c'},
 '0afe81f4608744675c5fda4b36b249a7da16d52de14af542ecd62de48ccf654c': {'AddressOfEntryPoint': 12778992,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 13961624,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'URLMON.DLL': 'URLDownloadToFileA',
                                                                                      'advapi32.dll': 'RegCloseKey',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'gdi32.dll': 'AngleArc',
                                                                                      'glu32.dll': 'gluProject',
                                                                                      'kernel32.dll': 'MulDiv',
                                                                                      'msvcrt.dll': 'memcmp',
                                                                                      'ole32.dll': 'IsEqualGUID',
                                                                                      'oleacc.dll': 'LresultFromObject',
                                                                                      'oleaut32.dll': 'SysFreeString',
                                                                                      'opengl32.dll': 'wglCreateContext',
                                                                                      'shell32.dll': 'SHAddToRecentDocs',
                                                                                      'user32.dll': 'MonitorFromWindow',
                                                                                      'version.dll': 'GetFileVersionInfoW',
                                                                                      'winmm.dll': 'sndPlaySoundW',
                                                                                      'winspool.drv': 'GetDefaultPrinterW',
                                                                                      'wsock32.dll': 'inet_ntoa'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'VirtualQuery',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersion',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'IsValidLocale',
                                                                                            'SetThreadLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetConsoleCP',
                                                                                            'GetACP',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'SwitchToThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'ReadFile',
                                                                                            'GetFileType',
                                                                                            'GetFileSize',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'RaiseException',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetClassLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'CreateWindowExW',
                                                                                            'mouse_event',
                                                                                            'keybd_event',
                                                                                            'WindowFromPoint',
                                                                                            'WaitMessage',
                                                                                            'ValidateRect',
                                                                                            'UpdateWindow',
                                                                                            'UnregisterClassW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'TranslateMessage',
                                                                                            'TranslateMDISysAccel',
                                                                                            'TrackPopupMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'ShowWindow',
                                                                                            'ShowScrollBar',
                                                                                            'ShowOwnedPopups',
                                                                                            'ShowCaret',
                                                                                            'SetWindowRgn',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowPlacement',
                                                                                            'SetTimer',
                                                                                            'SetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'SetScrollInfo',
                                                                                            'SetRect',
                                                                                            'SetPropW',
                                                                                            'SetParent',
                                                                                            'SetMenuItemInfoW',
                                                                                            'SetMenu',
                                                                                            'SetKeyboardState',
                                                                                            'SetForegroundWindow',
                                                                                            'SetFocus',
                                                                                            'SetCursorPos',
                                                                                            'SetCursor',
                                                                                            'SetClipboardData',
                                                                                            'SetCaretPos',
                                                                                            'SetCapture',
                                                                                            'SetActiveWindow',
                                                                                            'SendMessageA',
                                                                                            'SendMessageW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'ScrollWindowEx',
                                                                                            'ScrollWindow',
                                                                                            'ScreenToClient',
                                                                                            'RemovePropW',
                                                                                            'RemoveMenu',
                                                                                            'ReleaseDC',
                                                                                            'ReleaseCapture',
                                                                                            'RegisterWindowMessageW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'RegisterClassW',
                                                                                            'RedrawWindow',
                                                                                            'PtInRect',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageW',
                                                                                            'PeekMessageA',
                                                                                            'PeekMessageW',
                                                                                            'OpenClipboard',
                                                                                            'OffsetRect',
                                                                                            'NotifyWinEvent',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'MessageBeep',
                                                                                            'MapWindowPoints',
                                                                                            'MapVirtualKeyW',
                                                                                            'LoadStringA',
                                                                                            'LoadStringW',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'KillTimer',
                                                                                            'IsZoomed',
                                                                                            'IsWindowVisible',
                                                                                            'IsWindowUnicode',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindow',
                                                                                            'IsIconic',
                                                                                            'IsDialogMessageA',
                                                                                            'IsDialogMessageW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'IsChild',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'InvalidateRect',
                                                                                            'IntersectRect',
                                                                                            'InsertMenuItemW',
                                                                                            'InsertMenuW',
                                                                                            'InflateRect',
                                                                                            'HideCaret',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowDC',
                                                                                            'GetUpdateRect',
                                                                                            'GetTopWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSystemMenu',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'GetSubMenu',
                                                                                            'GetScrollRange',
                                                                                            'GetScrollPos',
                                                                                            'GetScrollInfo',
                                                                                            'GetScrollBarInfo',
                                                                                            'GetPropW',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetMenuStringW',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenu',
                                                                                            'GetLastActivePopup',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetKeyState',
                                                                                            'GetKeyNameTextW',
                                                                                            'GetIconInfo',
                                                                                            'GetForegroundWindow',
                                                                                            'GetFocus',
                                                                                            'GetDoubleClickTime',
                                                                                            'GetDlgItem',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetDesktopWindow',
                                                                                            'GetDCEx',
                                                                                            'GetDC',
                                                                                            'GetCursorPos',
                                                                                            'GetCursor',
                                                                                            'GetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'GetClassNameW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'GetCaretPos',
                                                                                            'GetCapture',
                                                                                            'GetActiveWindow',
                                                                                            'FrameRect',
                                                                                            'FindWindowExW',
                                                                                            'FindWindowW',
                                                                                            'FillRect',
                                                                                            'EqualRect',
                                                                                            'EnumWindows',
                                                                                            'EnumThreadWindows',
                                                                                            'EnumClipboardFormats',
                                                                                            'EnumChildWindows',
                                                                                            'EndPaint',
                                                                                            'EndMenu',
                                                                                            'EndDeferWindowPos',
                                                                                            'EnableWindow',
                                                                                            'EnableScrollBar',
                                                                                            'EnableMenuItem',
                                                                                            'EmptyClipboard',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'DrawStateW',
                                                                                            'DrawMenuBar',
                                                                                            'DrawIconEx',
                                                                                            'DrawIcon',
                                                                                            'DrawFrameControl',
                                                                                            'DrawFocusRect',
                                                                                            'DrawEdge',
                                                                                            'DispatchMessageA',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'DestroyMenu',
                                                                                            'DestroyIcon',
                                                                                            'DestroyCursor',
                                                                                            'DestroyCaret',
                                                                                            'DeleteMenu',
                                                                                            'DeferWindowPos',
                                                                                            'DefWindowProcW',
                                                                                            'DefMDIChildProcW',
                                                                                            'DefFrameProcW',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateMenu',
                                                                                            'CreateIcon',
                                                                                            'CreateCaret',
                                                                                            'CountClipboardFormats',
                                                                                            'CopyImage',
                                                                                            'CloseClipboard',
                                                                                            'ClientToScreen',
                                                                                            'ChildWindowFromPoint',
                                                                                            'CheckMenuItem',
                                                                                            'CharUpperBuffW',
                                                                                            'CharUpperW',
                                                                                            'CharNextW',
                                                                                            'CharLowerBuffW',
                                                                                            'CharLowerW',
                                                                                            'CallWindowProcW',
                                                                                            'CallNextHookEx',
                                                                                            'BringWindowToTop',
                                                                                            'BeginPaint',
                                                                                            'BeginDeferWindowPos',
                                                                                            'CharPrevA',
                                                                                            'CharNextA',
                                                                                            'CharLowerA',
                                                                                            'CharUpperA',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'wglMakeCurrent',
                                                                                            'wglDeleteContext',
                                                                                            'wglCreateContext',
                                                                                            'UnrealizeObject',
                                                                                            'TextOutA',
                                                                                            'SwapBuffers',
                                                                                            'StretchDIBits',
                                                                                            'StretchBlt',
                                                                                            'StartPage',
                                                                                            'StartDocW',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetWinMetaFileBits',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'SetTextColor',
                                                                                            'SetStretchBltMode',
                                                                                            'SetROP2',
                                                                                            'SetPixelFormat',
                                                                                            'SetPixel',
                                                                                            'SetMapMode',
                                                                                            'SetEnhMetaFileBits',
                                                                                            'SetDIBits',
                                                                                            'SetDIBColorTable',
                                                                                            'SetDCPenColor',
                                                                                            'SetBrushOrgEx',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SetAbortProc',
                                                                                            'SelectPalette',
                                                                                            'SelectObject',
                                                                                            'SelectClipRgn',
                                                                                            'SaveDC',
                                                                                            'RoundRect',
                                                                                            'RestoreDC',
                                                                                            'ResizePalette',
                                                                                            'Rectangle',
                                                                                            'RectVisible',
                                                                                            'RealizePalette',
                                                                                            'Polyline',
                                                                                            'Polygon',
                                                                                            'PolyPolyline',
                                                                                            'PolyBezierTo',
                                                                                            'PolyBezier',
                                                                                            'PlayEnhMetaFile',
                                                                                            'Pie',
                                                                                            'PatBlt',
                                                                                            'MoveToEx',
                                                                                            'MaskBlt',
                                                                                            'LineTo',
                                                                                            'LPtoDP',
                                                                                            'IntersectClipRect',
                                                                                            'GetWindowOrgEx',
                                                                                            'GetWinMetaFileBits',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPointA',
                                                                                            'GetTextExtentPointW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'GetStockObject',
                                                                                            'GetRgnBox',
                                                                                            'GetPixel',
                                                                                            'GetPaletteEntries',
                                                                                            'GetObjectW',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'GetNearestColor',
                                                                                            'GetEnhMetaFilePaletteEntries',
                                                                                            'GetEnhMetaFileHeader',
                                                                                            'GetEnhMetaFileDescriptionW',
                                                                                            'GetEnhMetaFileBits',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDIBits',
                                                                                            'GetDIBColorTable',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetClipBox',
                                                                                            'GetBrushOrgEx',
                                                                                            'GetBitmapBits',
                                                                                            'GdiFlush',
                                                                                            'FrameRgn',
                                                                                            'ExtTextOutW',
                                                                                            'ExtFloodFill',
                                                                                            'ExtCreatePen',
                                                                                            'ExcludeClipRect',
                                                                                            'EnumFontsW',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'EndPage',
                                                                                            'EndDoc',
                                                                                            'Ellipse',
                                                                                            'DescribePixelFormat',
                                                                                            'DeleteObject',
                                                                                            'DeleteEnhMetaFile',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePenIndirect',
                                                                                            'CreatePalette',
                                                                                            'CreateICW',
                                                                                            'CreateHalftonePalette',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateEnhMetaFileW',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateDIBSection',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateBitmap',
                                                                                            'CopyEnhMetaFileW',
                                                                                            'CombineRgn',
                                                                                            'CloseEnhMetaFile',
                                                                                            'Chord',
                                                                                            'ChoosePixelFormat',
                                                                                            'BitBlt',
                                                                                            'ArcTo',
                                                                                            'Arc',
                                                                                            'AngleArc',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'lstrlenA',
                                                                                            'lstrcpynA',
                                                                                            'lstrcpyA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpW',
                                                                                            'lstrcatA',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'VirtualQueryEx',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'UnmapViewOfFile',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetThreadPriority',
                                                                                            'SetThreadLocale',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetFileAttributesW',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResumeThread',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'QueryDosDeviceW',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'MulDiv',
                                                                                            'MoveFileW',
                                                                                            'MapViewOfFile',
                                                                                            'LockResource',
                                                                                            'LocalFree',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExA',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'LCMapStringW',
                                                                                            'IsValidLocale',
                                                                                            'IsDBCSLeadByte',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapFree',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'HeapAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GlobalHandle',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTickCount',
                                                                                            'GetThreadPriority',
                                                                                            'GetThreadLocale',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetShortPathNameW',
                                                                                            'GetProcessHeap',
                                                                                            'GetProcAddress',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeThread',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetComputerNameW',
                                                                                            'GetCPInfoExW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'FreeResource',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileA',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'EnumSystemLocalesW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CopyFileW',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegFlushKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'Sleep',
                                                                                            'CoCreateGuid',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'CreateErrorInfo',
                                                                                            'GetErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'GetActiveObject',
                                                                                            'UnRegisterTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'VariantInit',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptor',
                                                                                            'SysFreeString',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'IsAccelerator',
                                                                                            'OleDraw',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'StringFromGUID2',
                                                                                            'ProgIDFromCLSID',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateInstance',
                                                                                            'CoGetClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'IsEqualGUID',
                                                                                            'InitializeFlatSB',
                                                                                            'FlatSB_SetScrollProp',
                                                                                            'FlatSB_SetScrollPos',
                                                                                            'FlatSB_SetScrollInfo',
                                                                                            'FlatSB_GetScrollPos',
                                                                                            'FlatSB_GetScrollInfo',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_SetIconSize',
                                                                                            'ImageList_GetIconSize',
                                                                                            'ImageList_Write',
                                                                                            'ImageList_Read',
                                                                                            'ImageList_GetDragImage',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_DrawEx',
                                                                                            'ImageList_Replace',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_GetBkColor',
                                                                                            'ImageList_SetBkColor',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControls',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'MonitorFromRect',
                                                                                            'MonitorFromWindow',
                                                                                            '_gcvt',
                                                                                            'strtod',
                                                                                            'atof',
                                                                                            'atoi',
                                                                                            '_atoi64',
                                                                                            '_itoa',
                                                                                            'sprintf',
                                                                                            '_ismbblead',
                                                                                            'towupper',
                                                                                            'towlower',
                                                                                            'strstr',
                                                                                            'wcstombs',
                                                                                            'wcslen',
                                                                                            '_mbscspn',
                                                                                            '_stricmp',
                                                                                            'strcspn',
                                                                                            'strlen',
                                                                                            'strcmp',
                                                                                            'strncpy',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'memset',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'ShellExecuteW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'DragAcceptFiles',
                                                                                            'URLDownloadToFileA',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHAddToRecentDocs',
                                                                                            'PrintDlgW',
                                                                                            'ChooseFontW',
                                                                                            'ReplaceTextW',
                                                                                            'FindTextW',
                                                                                            'ChooseColorW',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'WritePrinter',
                                                                                            'StartPagePrinter',
                                                                                            'StartDocPrinterW',
                                                                                            'OpenPrinterW',
                                                                                            'EnumPrintersW',
                                                                                            'EndPagePrinter',
                                                                                            'EndDocPrinter',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'GetDefaultPrinterW',
                                                                                            'MulDiv',
                                                                                            'timeGetTime',
                                                                                            'sndPlaySoundW',
                                                                                            'gluUnProject',
                                                                                            'gluProject',
                                                                                            'LresultFromObject',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'gethostbyname',
                                                                                            'inet_ntoa'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 30,
                                                                      'NumberOfImportFunctions': 711,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1093120,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 755200,
                                                                                       '.didata\x00': 3584,
                                                                                       '.idata\x00\x00': 25088,
                                                                                       '.pdata\x00\x00': 428032,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1093120,
                                                                                       '.text\x00\x00\x00': 12775424,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/0afe81f4608744675c5fda4b36b249a7da16d52de14af542ecd62de48ccf654c'},
 '0b67d8fc01b7855cb117bd01bf8a66d5f799a72efe225305921356b14790b42d': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 126452,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 126464,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/0b67d8fc01b7855cb117bd01bf8a66d5f799a72efe225305921356b14790b42d'},
 '0c2d88e35e35ad495009f2dd2e0f467211297bfb4306eea06cb8d78decffcb75': {'AddressOfEntryPoint': 335972,
                                                                      'DebugRVA': 45520,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'WMILIB.SYS': 'WmiCompleteRequest',
                                                                                      'ntoskrnl.exe': 'RtlAnsiCharToUnicodeChar',
                                                                                      'portcls.sys': 'PcRequestNewPowerState'},
                                                                      'ImportedFunctions': ['RtlCompareMemory',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'RtlInitUnicodeString',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'KeInitializeEvent',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInitializeTimer',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoFreeIrp',
                                                                                            'IoAllocateIrp',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoQueueWorkItem',
                                                                                            'KeCancelTimer',
                                                                                            '_purecall',
                                                                                            'KeClearEvent',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeDelayExecutionThread',
                                                                                            'PoSetPowerState',
                                                                                            'KeSetTimer',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeWaitForMultipleObjects',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'IoWMIWriteEvent',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'IoSetDeviceInterfaceState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'IofCompleteRequest',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'KeBugCheckEx',
                                                                                            'ExAllocatePoolWithQuotaTag',
                                                                                            'KeResetEvent',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'ExFreePoolWithTag',
                                                                                            'IoCancelIrp',
                                                                                            'ExFreePool',
                                                                                            'PsGetVersion',
                                                                                            'RtlAnsiCharToUnicodeChar',
                                                                                            'WmiSystemControl',
                                                                                            'WmiCompleteRequest',
                                                                                            'PcDispatchIrp',
                                                                                            'PcAddAdapterDevice',
                                                                                            'PcRegisterAdapterPowerManagement',
                                                                                            'PcInitializeAdapterDriver',
                                                                                            'PcUnregisterAdapterPowerManagement',
                                                                                            'PcNewRegistryKey',
                                                                                            'PcForwardIrpSynchronous',
                                                                                            'PcRegisterPhysicalConnection',
                                                                                            'PcRegisterSubdevice',
                                                                                            'PcNewPort',
                                                                                            'PcRequestNewPowerState'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 54,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 29672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8704,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 5632,
                                                                                       'CODE\x00\x00\x00\x00': 25600,
                                                                                       'INIT\x00\x00\x00\x00': 2048,
                                                                                       'PAGE\x00\x00\x00\x00': 247808,
                                                                                       'page\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/0c2d88e35e35ad495009f2dd2e0f467211297bfb4306eea06cb8d78decffcb75'},
 '0c55fe68032aba40d00f7b41602720a71e265555a61332934f597040fa6dd167': {'AddressOfEntryPoint': 177104,
                                                                      'DebugRVA': 51048,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NDIS.SYS': 'NdisInitializeReadWriteLock',
                                                                                      'NDISTAPI.SYS': 'NdisTapiRegisterProvider',
                                                                                      'NETIO.SYS': 'NmrClientAttachProvider',
                                                                                      'ntoskrnl.exe': 'ExInitializeNPagedLookasideList'},
                                                                      'ImportedFunctions': ['KeSetTimerEx',
                                                                                            'KeInitializeEvent',
                                                                                            'KeClearEvent',
                                                                                            'KeSetTimer',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IoIs32bitProcess',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInitializeTimerEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'IofCompleteRequest',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'RtlCompareMemory',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'IoWMIWriteEvent',
                                                                                            'RtlInitUnicodeString',
                                                                                            'KeWaitForSingleObject',
                                                                                            'MmLockPagableDataSection',
                                                                                            'KeSetEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExQueryDepthSList',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'RtlGUIDFromString',
                                                                                            'InitializeSListHead',
                                                                                            'ExAllocatePoolWithTagPriority',
                                                                                            'IoFreeMdl',
                                                                                            'DbgPrint',
                                                                                            'MmMapLockedPages',
                                                                                            'RtlUpcaseUnicodeString',
                                                                                            'KeBugCheckEx',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'NdisTerminateWrapper',
                                                                                            'NdisClDeregisterSap',
                                                                                            'NdisCmCloseCallComplete',
                                                                                            'NdisMCmDeactivateVc',
                                                                                            'NdisCoSendPackets',
                                                                                            'NdisCoRequest',
                                                                                            'NdisRequest',
                                                                                            'NdisResetEvent',
                                                                                            'NdisWaitEvent',
                                                                                            'NdisInitializeEvent',
                                                                                            'NdisClOpenAddressFamily',
                                                                                            'NdisCompleteUnbindAdapter',
                                                                                            'NdisCloseAdapter',
                                                                                            'NdisScheduleWorkItem',
                                                                                            'NdisOpenAdapter',
                                                                                            'NdisMCoSendComplete',
                                                                                            'NdisMCmRegisterAddressFamily',
                                                                                            'NdisReadNetworkAddress',
                                                                                            'NdisMSetAttributesEx',
                                                                                            'NdisRegisterDeviceEx',
                                                                                            'NdisCloseConfiguration',
                                                                                            'NdisReadConfiguration',
                                                                                            'NdisOpenConfiguration',
                                                                                            'NdisReturnPackets',
                                                                                            'NdisAllocateBuffer',
                                                                                            'NdisAllocatePacket',
                                                                                            'NdisAllocatePacketPoolEx',
                                                                                            'NdisFreeMemory',
                                                                                            'NdisAllocateMemory',
                                                                                            'NdisMCoReceiveComplete',
                                                                                            'NdisMCoIndicateReceivePacket',
                                                                                            'NdisMIndicateStatus',
                                                                                            'NdisDeregisterDeviceEx',
                                                                                            'NdisFreePacketPool',
                                                                                            'NdisFreePacket',
                                                                                            'NdisDeregisterProtocol',
                                                                                            'NdisReleaseReadWriteLock',
                                                                                            'NdisAcquireReadWriteLock',
                                                                                            'NdisRegisterProtocol',
                                                                                            'NdisMRegisterMiniport',
                                                                                            'NdisMRegisterUnloadHandler',
                                                                                            'NdisClRegisterSap',
                                                                                            'NdisClCloseAddressFamily',
                                                                                            'NdisClIncomingCallComplete',
                                                                                            'NdisCmDispatchIncomingCloseCall',
                                                                                            'NdisClCloseCall',
                                                                                            'NdisMCmActivateVc',
                                                                                            'NdisInitializeWrapper',
                                                                                            'NdisInitializeReadWriteLock',
                                                                                            'NdisTapiDeregisterProvider',
                                                                                            'NdisTapiCompleteRequest',
                                                                                            'NdisTapiIndicateStatus',
                                                                                            'NdisTapiRegisterProvider',
                                                                                            'NmrDeregisterClient',
                                                                                            'NmrWaitForClientDeregisterComplete',
                                                                                            'NmrRegisterClient',
                                                                                            'NmrClientAttachProvider'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 16896,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 47104,
                                                                                       'INIT\x00\x00\x00\x00': 10240,
                                                                                       'PAGE\x00\x00\x00\x00': 4608,
                                                                                       'PAGENWan': 72704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/0c55fe68032aba40d00f7b41602720a71e265555a61332934f597040fa6dd167'},
 '0cb93487639cd60e5f88642514c91dae11f3fd2635e4fdd2c01ab17cd1785c2c': {'AddressOfEntryPoint': 115996,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'OLEAUT32.dll': 'LoadTypeLib',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WININET.dll': 'InternetConnectA',
                                                                                      'gdiplus.dll': 'GdipCreateBitmapFromScan0',
                                                                                      'ole32.dll': 'CoTaskMemRealloc',
                                                                                      'urlmon.dll': 'URLDownloadToFileA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'SetDllDirectoryA',
                                                                                            'GetLongPathNameA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'ReadFile',
                                                                                            'CreateEventA',
                                                                                            'GetNativeSystemInfo',
                                                                                            'SetFilePointer',
                                                                                            'GetTempPathA',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'ExitProcess',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageA',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'SetEndOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'MoveFileExA',
                                                                                            'Process32Next',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetLocaleInfoA',
                                                                                            'ResetEvent',
                                                                                            'CreateThread',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetStringTypeW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'Sleep',
                                                                                            'LoadLibraryW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetStdHandle',
                                                                                            'HeapCreate',
                                                                                            'GetVersion',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetModuleHandleW',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'VirtualProtect',
                                                                                            'RtlPcToFileHeader',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WaitForSingleObject',
                                                                                            'FlushInstructionCache',
                                                                                            'GetThreadLocale',
                                                                                            'GetCommandLineA',
                                                                                            'lstrcpynA',
                                                                                            'CreateDirectoryA',
                                                                                            'GlobalHandle',
                                                                                            'GlobalFree',
                                                                                            'LoadLibraryExA',
                                                                                            'FreeLibrary',
                                                                                            'SetLastError',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetModuleFileNameA',
                                                                                            'MulDiv',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCurrentThreadId',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpA',
                                                                                            'lstrcpyA',
                                                                                            'lstrcmpiA',
                                                                                            'FindResourceA',
                                                                                            'GlobalAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'PtInRect',
                                                                                            'GetWindowRect',
                                                                                            'GetCursorPos',
                                                                                            'SetCursor',
                                                                                            'PeekMessageA',
                                                                                            'EndDialog',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageA',
                                                                                            'GetMessageW',
                                                                                            'IsWindowUnicode',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'LoadStringA',
                                                                                            'CharNextA',
                                                                                            'DefWindowProcA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'ShowWindow',
                                                                                            'LoadBitmapA',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'IsWindowVisible',
                                                                                            'GetSystemMenu',
                                                                                            'LoadImageA',
                                                                                            'EnableMenuItem',
                                                                                            'DispatchMessageA',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'MoveWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetClientRect',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'InvalidateRect',
                                                                                            'InvalidateRgn',
                                                                                            'RedrawWindow',
                                                                                            'SetCapture',
                                                                                            'IsChild',
                                                                                            'GetParent',
                                                                                            'GetDlgItem',
                                                                                            'GetClassNameA',
                                                                                            'ReleaseCapture',
                                                                                            'FillRect',
                                                                                            'CallWindowProcA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'SetFocus',
                                                                                            'GetWindow',
                                                                                            'GetFocus',
                                                                                            'UnregisterClassA',
                                                                                            'GetDesktopWindow',
                                                                                            'SendMessageA',
                                                                                            'IsWindow',
                                                                                            'GetClassInfoExA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'CreateWindowExA',
                                                                                            'CreateAcceleratorTableA',
                                                                                            'SetForegroundWindow',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckDlgButton',
                                                                                            'EnableWindow',
                                                                                            'EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'PostMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetActiveWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowTextA',
                                                                                            'CreateDIBSection',
                                                                                            'SetDIBColorTable',
                                                                                            'SetBkMode',
                                                                                            'StretchBlt',
                                                                                            'SetTextColor',
                                                                                            'SaveDC',
                                                                                            'SetGraphicsMode',
                                                                                            'ModifyWorldTransform',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'DPtoLP',
                                                                                            'CreateFontIndirectA',
                                                                                            'RestoreDC',
                                                                                            'GetStockObject',
                                                                                            'GetObjectA',
                                                                                            'CreateSolidBrush',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetDeviceCaps',
                                                                                            'CryptGetHashParam',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenCurrentUser',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptCreateHash',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptHashData',
                                                                                            'RegOpenKeyExA',
                                                                                            'CryptDestroyHash',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetFolderPathA',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoGetClassObject',
                                                                                            'OleLockRunning',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemRealloc',
                                                                                            'LoadRegTypeLib',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'LoadTypeLib',
                                                                                            'URLDownloadToFileA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetReadFile',
                                                                                            'HttpQueryInfoA',
                                                                                            'HttpSendRequestA',
                                                                                            'HttpOpenRequestA',
                                                                                            'InternetCrackUrlA',
                                                                                            'InternetOpenA',
                                                                                            'InternetErrorDlg',
                                                                                            'InternetConnectA',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipFree',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipCloneImage',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateBitmapFromScan0'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 319,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 32665128,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14336,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 62464,
                                                                                       '.reloc\x00\x00': 13312,
                                                                                       '.rsrc\x00\x00\x00': 32665600,
                                                                                       '.text\x00\x00\x00': 175616},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/0cb93487639cd60e5f88642514c91dae11f3fd2635e4fdd2c01ab17cd1785c2c'},
 '0d2b7269bfa06c7ee80b4da2c522b14799f947e96ca880e4f3d0b35f6cb1ec32': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 209992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 210432,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/0d2b7269bfa06c7ee80b4da2c522b14799f947e96ca880e4f3d0b35f6cb1ec32'},
 '0d36a4a97dcf7962f0670d09fc2b15c5dea7eb2d0fcd3ee00275fc8896d018e4': {'AddressOfEntryPoint': 49160,
                                                                      'DebugRVA': 36976,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortNotification'},
                                                                      'ImportedFunctions': ['StorPortGetScatterGatherList',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortLogError',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortCompleteRequest',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortNotification',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 12,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 31232,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/0d36a4a97dcf7962f0670d09fc2b15c5dea7eb2d0fcd3ee00275fc8896d018e4'},
 '0d4e4ccf74a156bf4102a9b683b430b010a746a7cb1399fec8f69da59ad11b0a': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 215096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 215552,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/0d4e4ccf74a156bf4102a9b683b430b010a746a7cb1399fec8f69da59ad11b0a'},
 '0dd9d3e39ad88f5bd2a47749878dbdeee30e9e16f6a9476edd0677c284cbb7c2': {'AddressOfEntryPoint': 82432,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'KERNEL32.dll': 'CompareStringA',
                                                                                      'SETUPAPI.dll': 'SetupCopyOEMInfW'},
                                                                      'ImportedFunctions': ['SetupCopyOEMInfW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CopyFileW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareStringW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetVersionExA',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'Sleep',
                                                                                            'GetLocaleInfoA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetFileAttributesA',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'RegCreateKeyExW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 7680,
                                                                                       '.text\x00\x00\x00': 45056},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/0dd9d3e39ad88f5bd2a47749878dbdeee30e9e16f6a9476edd0677c284cbb7c2'},
 '0dd9fca04aba0e49801f3c1f1647d40fcfcf48808603855f955c07b390d1e1ad': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 574680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 577536,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/0dd9fca04aba0e49801f3c1f1647d40fcfcf48808603855f955c07b390d1e1ad'},
 '0dda4832bfeddd2261634aa12928a5215860c4b090e45af36aa159ea325e6f70': {'AddressOfEntryPoint': 1073932093,
                                                                      'DebugRVA': 128112,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 126976,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceW',
                                                                                      'KERNEL32.dll': 'SetEndOfFile',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyW',
                                                                                      'USER32.dll': 'SendMessageTimeoutW',
                                                                                      'WINSPOOL.DRV': 'AddPrinterW'},
                                                                      'ImportedFunctions': ['GetSystemDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'GetModuleFileNameA',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'GetLocalTime',
                                                                                            'CreateFileW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'CopyFileW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'LoadLibraryW',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'GetVersion',
                                                                                            'HeapSetInformation',
                                                                                            'MoveFileExW',
                                                                                            'lstrlenA',
                                                                                            'GetVersionExW',
                                                                                            'GetComputerNameW',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'lstrlenW',
                                                                                            'GlobalFree',
                                                                                            'FlushFileBuffers',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetFilePointer',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'LCMapStringW',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'ReadFile',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'SetEndOfFile',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'AddPrinterDriverExW',
                                                                                            'DeletePrinter',
                                                                                            'SetPrinterDataW',
                                                                                            'DeletePrinterDriverExW',
                                                                                            'SetJobW',
                                                                                            'EnumJobsW',
                                                                                            'EnumPortsW',
                                                                                            'EnumPrintersW',
                                                                                            'OpenPrinterW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'DeleteMonitorW',
                                                                                            'GetPrinterW',
                                                                                            'AddMonitorW',
                                                                                            'AddPrinterW',
                                                                                            'QueryServiceStatus',
                                                                                            'EnumDependentServicesW',
                                                                                            'OpenServiceW',
                                                                                            'ControlService',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceA',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'StartServiceW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHDeleteEmptyKeyW',
                                                                                            'SHDeleteKeyW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 121,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1236,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/0dda4832bfeddd2261634aa12928a5215860c4b090e45af36aa159ea325e6f70'},
 '0e0120604f328252fbcd85d39747cff98a10b31bad25f97bcd69b3ba6aa213fd': {'AddressOfEntryPoint': 1249872,
                                                                      'DebugRVA': 968184,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 1241088,
                                                                      'ExportSize': 73,
                                                                      'IATRVA': 970752,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltReleaseFileNameInformation',
                                                                                      'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'NDIS.SYS': 'NdisAdjustNetBufferCurrentMdl',
                                                                                      'NETIO.SYS': 'NetioInsertWorkQueue',
                                                                                      'fwpkclnt.sys': 'FwpsCalloutUnregisterByKey0',
                                                                                      'ksecdd.sys': 'BCryptDestroyKey',
                                                                                      'msrpc.sys': 'MesDecodeBufferHandleCreate',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['PsGetCurrentProcessId',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'ExReleaseResourceLite',
                                                                                            'ExDeleteResourceLite',
                                                                                            'ExInitializeResourceLite',
                                                                                            'RtlAnsiCharToUnicodeChar',
                                                                                            'MmProbeAndLockPages',
                                                                                            'RtlSetBits',
                                                                                            'RtlInitializeBitMap',
                                                                                            'RtlSetBit',
                                                                                            'SeExports',
                                                                                            'ExInitializeLookasideListEx',
                                                                                            'ExDeleteLookasideListEx',
                                                                                            'KeQueryActiveProcessorCount',
                                                                                            'DbgPrint',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'SeQueryInformationToken',
                                                                                            'ObOpenObjectByPointer',
                                                                                            'PsIsSystemProcess',
                                                                                            'RtlEqualSid',
                                                                                            'QsDdreferencePrimaryToken',
                                                                                            'PsReferencePrimaryToken',
                                                                                            'PsReferenceImpersonationToken',
                                                                                            'RtlDowncaseUnicodeString',
                                                                                            'PsReferenceProcessFilePointer',
                                                                                            'ObCloseHandle',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'ExUuidCreate',
                                                                                            'ExGetPreviousMode',
                                                                                            'KeBugCheck',
                                                                                            'SeReportSecurityEventWithSubCategory',
                                                                                            'SeSetAuditParameter',
                                                                                            'DbgBreakPoint',
                                                                                            'MmSizeOfMdl',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwClose',
                                                                                            'ZwNotifyChangeKey',
                                                                                            'ZwOpenKey',
                                                                                            'KeFlushQueuedDpcs',
                                                                                            'KeCancelTimer',
                                                                                            'KeInitializeTimerEx',
                                                                                            'KeSetTimerEx',
                                                                                            'ExGetCurrentProcessorCounts',
                                                                                            'MmUserProbeAddress',
                                                                                            'ExCreateCallback',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoQueueWorkItem',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ExAcquireFastMutex',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSetTargetProcessorDpc',
                                                                                            'KeInitializeDpc',
                                                                                            'ExAllocatePoolWithTagPriority',
                                                                                            'KeReleaseInStackQueuedSpinLock',
                                                                                            'KeAcquireInStackQueuedSpinLock',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'ExNotifyCallback',
                                                                                            'RtlGetVersion',
                                                                                            'RtlInitializeGenericTableAvl',
                                                                                            'PsGetProcessSessionId',
                                                                                            'ExQueryDepthSList',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'RtlLookupElementGenericTableFullAvl',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'KeIsExecutingDpc',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ObDereferenceSecurityDescriptor',
                                                                                            'KeReleaseSpinLock',
                                                                                            'PsGetProcessId',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoBuildPartialMdl',
                                                                                            'IoAllocateMdl',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'KeTestSpinLock',
                                                                                            'KeAcquireInStackQueuedSpinLockAtDpcLevel',
                                                                                            'KeReleaseInStackQueuedSpinLockFromDpcLevel',
                                                                                            'KeReleaseSemaphore',
                                                                                            'ObReferenceSecurityDescriptor',
                                                                                            'KeNumberProcessors',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ObfDereferenceObject',
                                                                                            'ObfReferenceObject',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoIs32bitProcess',
                                                                                            'PsGetThreadProcess',
                                                                                            'PsIsSystemThread',
                                                                                            'PsGetCurrentThread',
                                                                                            'PsGetCurrentProcess',
                                                                                            'KeInitializeEvent',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeSetEvent',
                                                                                            'MmUnlockPages',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'RtlIpv6AddressToStringExW',
                                                                                            'RtlIpv4AddressToStringExW',
                                                                                            'KeDelayExecutionThread',
                                                                                            'KeReleaseMutex',
                                                                                            'InitializeSListHead',
                                                                                            'KeInitializeMutex',
                                                                                            'RtlEnumerateGenericTableLikeADirectory',
                                                                                            'RtlTimeToTimeFields',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlCompareMemory',
                                                                                            'IoDeleteDevice',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoGetCurrentProcess',
                                                                                            'IofCallDriver',
                                                                                            'IoWMIWriteEvent',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'RtlCopySid',
                                                                                            'ZwEnumerateKey',
                                                                                            'RtlLengthSid',
                                                                                            'RtlValidSid',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlIpv6StringToAddressW',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'ZwDuplicateToken',
                                                                                            'KeStackAttachProcess',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ZwOpenProcess',
                                                                                            'KeInitializeSemaphore',
                                                                                            'SeCaptureSubjectContextEx',
                                                                                            'SeLockSubjectContext',
                                                                                            'SeAccessCheck',
                                                                                            'IoGetFileObjectGenericMapping',
                                                                                            'SeOpenObjectAuditAlarmForNonObObject',
                                                                                            'SeUnlockSubjectContext',
                                                                                            'SeReleaseSubjectContext',
                                                                                            'RtlFindClearBits',
                                                                                            'RtlAreBitsClear',
                                                                                            'RtlFindSetBits',
                                                                                            'RtlClearBits',
                                                                                            'RtlClearAllBits',
                                                                                            'ExAcquireResourceSharedLite',
                                                                                            'RtlClearBit',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'ObSetSecurityObjectByPointer',
                                                                                            'ExFreePoolWithTag',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoCreateDevice',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            '__C_specific_handler',
                                                                                            'NetioFreeNetBufferList',
                                                                                            'NetioDereferenceNetBufferListChain',
                                                                                            'NetioExtendNetBuffer',
                                                                                            'FsbAllocateAtDpcLevel',
                                                                                            'RtlCleanupTimerWheelEntry',
                                                                                            'FsbAllocate',
                                                                                            'RtlLookupEntryHashTable',
                                                                                            'RtlInsertElementGenericTableBasicAvl',
                                                                                            'RtlComputeToeplitzHash',
                                                                                            'RtlGetNextExpiredTimerWheelEntry',
                                                                                            'RtlGetNextEntryHashTable',
                                                                                            'RtlDeleteElementGenericTableBasicAvl',
                                                                                            'RtlRemoveEntryHashTable',
                                                                                            'RtlReturnTimerWheelEntry',
                                                                                            'NetioInitializeWorkQueue',
                                                                                            'NetioShutdownWorkQueue',
                                                                                            'RtlInitializeTimerWheelEntry',
                                                                                            'RtlInsertEntryHashTable',
                                                                                            'RtlCopyMdlToMdlIndirect',
                                                                                            'NetioAdvanceToLocationInNetBuffer',
                                                                                            'TlDefaultRequestQueryDispatch',
                                                                                            'TlDefaultRequestMessage',
                                                                                            'TlDefaultRequestQueryDispatchEndpoint',
                                                                                            'RtlCopyMdlToBuffer',
                                                                                            'NetioFreeNetBufferAndNetBufferList',
                                                                                            'RtlCopyBufferToMdl',
                                                                                            'NetioAllocateAndReferenceNetBufferAndNetBufferList',
                                                                                            'RtlDeleteHashTable',
                                                                                            'RtlCleanupTimerWheel',
                                                                                            'RtlInitializeTimerWheel',
                                                                                            'RtlCreateHashTable',
                                                                                            'RtlExpandHashTable',
                                                                                            'RtlContractHashTable',
                                                                                            'NetioCompleteCopyNetBufferListChain',
                                                                                            'NetioInitializeNetBufferListContext',
                                                                                            'NetioFreeCopyNetBufferList',
                                                                                            'NetioAllocateAndReferenceCopyNetBufferListEx',
                                                                                            'RtlUpdateCurrentTimerWheelTick',
                                                                                            'NetioRetreatNetBufferList',
                                                                                            'NetioAllocateMdl',
                                                                                            'NmrProviderDetachClientComplete',
                                                                                            'NmrRegisterProvider',
                                                                                            'NmrDeregisterProvider',
                                                                                            'NmrWaitForProviderDeregisterComplete',
                                                                                            'NmrClientDetachProviderComplete',
                                                                                            'NmrClientAttachProvider',
                                                                                            'NmrRegisterClient',
                                                                                            'NmrDeregisterClient',
                                                                                            'NmrWaitForClientDeregisterComplete',
                                                                                            'RtlInitWeakEnumerationHashTable',
                                                                                            'RtlWeaklyEnumerateEntryHashTable',
                                                                                            'RtlEndWeakEnumerationHashTable',
                                                                                            'NetioReferenceNetBufferList',
                                                                                            'TlDefaultRequestListen',
                                                                                            'TlDefaultRequestConnect',
                                                                                            'TlDefaultRequestCancel',
                                                                                            'TlDefaultRequestIoControl',
                                                                                            'FsbFree',
                                                                                            'NetioFreeNetBuffer',
                                                                                            'NetioFreeMdl',
                                                                                            'NetioAllocateNetBufferMdlAndData',
                                                                                            'NetioFreeNetBufferListNetBufferMdlAndDataPool',
                                                                                            'NetioFreeNetBufferMdlAndDataPool',
                                                                                            'NetioAllocateNetBufferListNetBufferMdlAndDataPool',
                                                                                            'NetioAllocateNetBufferMdlAndDataPool',
                                                                                            'NetioDereferenceNetBufferList',
                                                                                            'NetioAllocateAndReferenceNetBufferListNetBufferMdlAndData',
                                                                                            'RtlIndicateTimerWheelEntryTimerStart',
                                                                                            'RtlCleanupToeplitzHash',
                                                                                            'RtlInitializeToeplitzHash',
                                                                                            'FsbDestroyPool',
                                                                                            'FsbCreatePool',
                                                                                            'WfpStreamEndpointCleanupBegin',
                                                                                            'WfpStopStreamShim',
                                                                                            'WfpStartStreamShim',
                                                                                            'NetioInitializeNetBufferListAndFirstNetBufferContext',
                                                                                            'NetioUnInitializeNetBufferListLibrary',
                                                                                            'NetioInitializeNetBufferListLibrary',
                                                                                            'RtlInvokeStopRoutines',
                                                                                            'RtlInvokeStartRoutines',
                                                                                            'WfpStreamInspectSend',
                                                                                            'WfpStreamInspectDisconnect',
                                                                                            'NsiEnumerateObjectsAllParameters',
                                                                                            'NsiReferenceDefaultObjectSecurity',
                                                                                            'NsiRegisterChangeNotification',
                                                                                            'NsiDeregisterChangeNotification',
                                                                                            'NetioCompleteNetBufferListChain',
                                                                                            'NetioAllocateAndReferenceFragmentNetBufferList',
                                                                                            'RtlCopyMdlToMdl',
                                                                                            'IoctlKfdResetState',
                                                                                            'IoctlKfdQueryLayerStatistics',
                                                                                            'IoctlKfdAbortTransaction',
                                                                                            'IoctlKfdCommitTransaction',
                                                                                            'IoctlKfdDeleteCache',
                                                                                            'IoctlKfdAddCache',
                                                                                            'IoctlKfdBatchUpdate',
                                                                                            'IoctlKfdDeleteIndex',
                                                                                            'IoctlKfdAddIndex',
                                                                                            'SetWfpDeviceObject',
                                                                                            'HfDestroyFactory',
                                                                                            'HfCreateFactory',
                                                                                            'NetioAllocateAndReferenceNetBufferList',
                                                                                            'NetioAllocateNetBuffer',
                                                                                            'NsiSetObjectSecurity',
                                                                                            'PtGetNumNodes',
                                                                                            'PtCreateTable',
                                                                                            'PtDestroyTable',
                                                                                            'NsiSetParameter',
                                                                                            'NsiFreeTable',
                                                                                            'NsiAllocateAndGetTable',
                                                                                            'PtInsertEntry',
                                                                                            'PtGetExactMatch',
                                                                                            'PtSetData',
                                                                                            'PtGetData',
                                                                                            'PtGetLongestMatch',
                                                                                            'PtEnumOverTable',
                                                                                            'PtGetKey',
                                                                                            'PtDeleteEntry',
                                                                                            'PtGetNextShorterMatch',
                                                                                            'NetioQueryNetBufferListTrafficClass',
                                                                                            'NetioExpandNetBuffer',
                                                                                            'NetioUpdateNetBufferListContext',
                                                                                            'NetioAllocateAndReferenceCloneNetBufferListEx',
                                                                                            'NetioAllocateAndReferenceCloneNetBufferList',
                                                                                            'NetioFreeCloneNetBufferList',
                                                                                            'NetioAllocateAndReferenceVacantNetBufferList',
                                                                                            'NetioCompleteNetBufferAndNetBufferListChain',
                                                                                            'NsiGetParameter',
                                                                                            'NsiGetAllParameters',
                                                                                            'RtlEndEnumerationHashTable',
                                                                                            'RtlEnumerateEntryHashTable',
                                                                                            'RtlInitEnumerationHashTable',
                                                                                            'KfdCheckAndCacheAcceptBypass',
                                                                                            'KfdCheckAcceptBypass',
                                                                                            'KfdCheckAndCacheConnectBypass',
                                                                                            'KfdCheckConnectBypass',
                                                                                            'KfdGetLayerActionFromEnumTemplate',
                                                                                            'KfdFreeEnumHandle',
                                                                                            'KfdDerefFilterContext',
                                                                                            'KfdGetNextFilter',
                                                                                            'KfdEnumLayer',
                                                                                            'WfpExpireEntryLru',
                                                                                            'WfpSetBucketsToEmptyLru',
                                                                                            'KfdAleInitializeFlowTable',
                                                                                            'WfpScavangeLeastRecentlyUsedList',
                                                                                            'NsiSetAllParameters',
                                                                                            'WfpStreamIsFilterPresent',
                                                                                            'WfpRefreshEntryLru',
                                                                                            'WfpDeleteEntryLru',
                                                                                            'WfpUninitializeLeastRecentlyUsedList',
                                                                                            'KfdToggleFilterActivation',
                                                                                            'KfdAleUninitializeFlowHandles',
                                                                                            'KfdAleInitializeFlowHandles',
                                                                                            'WfpInitializeLeastRecentlyUsedList',
                                                                                            'FwppStreamDeleteDpcQueue',
                                                                                            'KfdAleNotifyFlowDeletion',
                                                                                            'WfpInsertEntryLru',
                                                                                            'KfdGetOffloadEpoch',
                                                                                            'KfdIsLsoOffloadPossibleV6',
                                                                                            'KfdIsLsoOffloadPossibleV4',
                                                                                            'KfdIsV6InTransportFastEmpty',
                                                                                            'KfdIsV4InTransportFastEmpty',
                                                                                            'KfdIsV6OutTransportFastEmpty',
                                                                                            'KfdIsV4OutTransportFastEmpty',
                                                                                            'NetioAdvanceNetBufferList',
                                                                                            'KfdAleReleaseFlowHandleForFlow',
                                                                                            'KfdClassify',
                                                                                            'KfdAleAcquireFlowHandleForFlow',
                                                                                            'KfdIsLayerEmpty',
                                                                                            'KfdGetLayerCacheEpoch',
                                                                                            'FwppTruncateStreamDataAfterOffset',
                                                                                            'FwppAdvanceStreamDataPastOffset',
                                                                                            'FwppCopyStreamDataToBuffer',
                                                                                            'FwppStreamContinue',
                                                                                            'FwppStreamInject',
                                                                                            'WfpStreamInspectReceive',
                                                                                            'WfpStreamInspectRemoteDisconnect',
                                                                                            'NsiGetParameterEx',
                                                                                            'NetioInsertWorkQueue',
                                                                                            'NdisCompleteNetPnPEvent',
                                                                                            'NdisCloseAdapterEx',
                                                                                            'NdisOpenAdapterEx',
                                                                                            'NdisOidRequest',
                                                                                            'NdisInitiateOffload',
                                                                                            'NdisUpdateOffload',
                                                                                            'NdisInvalidateOffload',
                                                                                            'NdisInitializeTimer',
                                                                                            'NdisTerminateOffload',
                                                                                            'NdisRegisterProtocolDriver',
                                                                                            'NdisDeregisterProtocolDriver',
                                                                                            'NdisReleaseReadWriteLock',
                                                                                            'NdisAcquireReadWriteLock',
                                                                                            'NdisInitializeReadWriteLock',
                                                                                            'NdisGetSessionToCompartmentMappingEpochAndZero',
                                                                                            'NdisCancelTimer',
                                                                                            'NdisSetTimer',
                                                                                            'NdisReturnNetBufferLists',
                                                                                            'NdisSendNetBufferLists',
                                                                                            'NdisQueryOffloadState',
                                                                                            'NdisCancelSendNetBufferLists',
                                                                                            'NdisRetreatNetBufferDataStart',
                                                                                            'NdisGetDataBuffer',
                                                                                            'NdisGetProcessorInformation',
                                                                                            'NdisOffloadTcpReceive',
                                                                                            'NdisOffloadTcpSend',
                                                                                            'NdisOffloadTcpReceiveReturn',
                                                                                            'NdisSetOptionalHandlers',
                                                                                            'NdisOffloadTcpForward',
                                                                                            'NdisOffloadTcpDisconnect',
                                                                                            'NdisAdvanceNetBufferDataStart',
                                                                                            'NdisFreeNetBufferList',
                                                                                            'NdisGetSessionCompartmentId',
                                                                                            'NdisGetThreadObjectCompartmentId',
                                                                                            'NdisAdjustNetBufferCurrentMdl',
                                                                                            'FltGetFileNameInformationUnsafe',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FwpsCalloutRegisterWithoutDevice0',
                                                                                            'FwpmBfeStateUnsubscribeChanges0',
                                                                                            'FwpmBfeStateSubscribeChangesWithoutDevice0',
                                                                                            'FwpmEngineOpen0',
                                                                                            'FwpmEngineClose0',
                                                                                            'FwpsClassifyOptionSet0',
                                                                                            'FwpmSecureSocketDeleteByKeyAsync0',
                                                                                            'FwpmSecureSocketAddAsync0',
                                                                                            'FwpsQueryOutstandingNbls0',
                                                                                            'FwpsRequestEndpointDeleteNotification0',
                                                                                            'FwppDispatchDevCtl0',
                                                                                            'IPsecDriverExpire',
                                                                                            'IPsecDriverInitiateAcquire',
                                                                                            'FwpmEventProviderFireNetEvent0',
                                                                                            'FwpmEventProviderIsNetEventTypeEnabled0',
                                                                                            'FwpmEventProviderDestroy0',
                                                                                            'FwpsTcpIpDispatchTableClear0',
                                                                                            'FwpsTcpIpDispatchTableSet0',
                                                                                            'FwpmEventProviderCreate0',
                                                                                            'FwpsCalloutUnregisterByKey0',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'BCryptGenRandom',
                                                                                            'BCryptGenerateSymmetricKey',
                                                                                            'BCryptDestroyHash',
                                                                                            'BCryptFinishHash',
                                                                                            'BCryptHashData',
                                                                                            'BCryptCreateHash',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptSetProperty',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptEncrypt',
                                                                                            'BCryptDecrypt',
                                                                                            'BCryptDestroyKey',
                                                                                            'NdrMesTypeDecode3',
                                                                                            'MesHandleFree',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'MesDecodeBufferHandleCreate'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 422,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 50688,
                                                                                       '.edata\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 55296,
                                                                                       '.rdata\x00\x00': 96768,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 964608,
                                                                                       'INIT\x00\x00\x00\x00': 17408,
                                                                                       'PAGE\x00\x00\x00\x00': 3072,
                                                                                       'PAGECONS': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/0e0120604f328252fbcd85d39747cff98a10b31bad25f97bcd69b3ba6aa213fd'},
 '0ed3b1449a469849f451de56d6ff1d23f27adffdafb5698c3bcb4c3e6ddc2594': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 153020,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 153088,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/0ed3b1449a469849f451de56d6ff1d23f27adffdafb5698c3bcb4c3e6ddc2594'},
 '0f031acfd428352cda06be247793114d4a5e192a863a83ded0b5f086b0773cb2': {'AddressOfEntryPoint': 36964,
                                                                      'DebugRVA': 24768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'PCIIDEX.SYS': 'AtaPortWriteRegisterUlong'},
                                                                      'ImportedFunctions': ['AtaPortCopyMemory',
                                                                                            'AtaPortGetPhysicalAddress',
                                                                                            'AtaPortReadRegisterUlong',
                                                                                            'AtaPortInitializeEx',
                                                                                            'AtaPortDeviceStateChange',
                                                                                            'AtaPortEtwTraceLog',
                                                                                            'AtaPortRegistryFreeBuffer',
                                                                                            'AtaPortGetBusData',
                                                                                            'AtaPortRegistryRead',
                                                                                            'AtaPortRequestCallback',
                                                                                            'AtaPortStallExecution',
                                                                                            'AtaPortGetUnCachedExtension',
                                                                                            'AtaPortReadRegisterUchar',
                                                                                            'AtaPortBuildRequestSenseIrb',
                                                                                            'AtaPortReleaseRequestSenseIrb',
                                                                                            'AtaPortCompleteRequest',
                                                                                            'AtaPortNotification',
                                                                                            'AtaPortGetDeviceBase',
                                                                                            'AtaPortGetScatterGatherList',
                                                                                            'AtaPortRegistryAllocateBuffer',
                                                                                            'AtaPortWriteRegisterUlong',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 22,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 17408,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/0f031acfd428352cda06be247793114d4a5e192a863a83ded0b5f086b0773cb2'},
 '101c285300edf78e1a4222032c0295908257c28c868aba6f019358e14ca2fa12': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 580540,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 580608,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/101c285300edf78e1a4222032c0295908257c28c868aba6f019358e14ca2fa12'},
 '10884471bd86e199f38dd97ea1c207bfedf5cc0ce5e7ebadb5a78b52a0776bc4': {'AddressOfEntryPoint': 121744,
                                                                      'DebugRVA': 95104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90112,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/10884471bd86e199f38dd97ea1c207bfedf5cc0ce5e7ebadb5a78b52a0776bc4'},
 '10c3579049c2396b2cb5cbbcd8d7a6fcf479bf9c0e16f2909bb14b6b4d735768': {'AddressOfEntryPoint': 1074094045,
                                                                      'DebugRVA': 234528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 233472,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetStdHandle',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'OleInitialize'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'LoadLibraryExW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'lstrcpyW',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileW',
                                                                                            'CreateFileA',
                                                                                            'GetLocaleInfoW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCPInfo',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'RtlVirtualUnwind',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'WriteFile',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSize',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'MessageBoxW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 103,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 808,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/10c3579049c2396b2cb5cbbcd8d7a6fcf479bf9c0e16f2909bb14b6b4d735768'},
 '1191213732f83276ce81fbd85549c6af72b22bba43fd9eb7524ea220a6eccc5f': {'AddressOfEntryPoint': 1073835089,
                                                                      'DebugRVA': 5088,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'calloc',
                                                                                      'ntdll.dll': 'NtQueryValueKey'},
                                                                      'ImportedFunctions': ['QueryDosDeviceW',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SearchPathW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'FindResourceExW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetVersionExW',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'CreateFileMappingW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'CloseHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'free',
                                                                                            'isdigit',
                                                                                            'mbtowc',
                                                                                            '__mb_cur_max',
                                                                                            'isleadbyte',
                                                                                            'isxdigit',
                                                                                            'localeconv',
                                                                                            '_iob',
                                                                                            '_snprintf',
                                                                                            '_itoa',
                                                                                            'wctomb',
                                                                                            'malloc',
                                                                                            'ferror',
                                                                                            'iswctype',
                                                                                            'wcstombs',
                                                                                            'realloc',
                                                                                            '__badioinfo',
                                                                                            '__pioinfo',
                                                                                            '_read',
                                                                                            '_fileno',
                                                                                            '_lseeki64',
                                                                                            '_write',
                                                                                            '_isatty',
                                                                                            'ungetc',
                                                                                            'wcsstr',
                                                                                            'bsearch',
                                                                                            'wcsncmp',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_wcslwr',
                                                                                            '_errno',
                                                                                            'iswxdigit',
                                                                                            '_vsnwprintf',
                                                                                            'printf',
                                                                                            'isalpha',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            '_stricmp',
                                                                                            'calloc',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtResetEvent',
                                                                                            'NtCreateEvent',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'RtlFreeHeap',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtOpenFile',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'NtFsControlFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtOpenKey',
                                                                                            'NtQueryValueKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 112,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 15048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 23040,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 15360,
                                                                                       '.text\x00\x00\x00': 69632,
                                                                                       'ۀ\x01\x00oc\x00\x00': 2048},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1191213732f83276ce81fbd85549c6af72b22bba43fd9eb7524ea220a6eccc5f'},
 '124883126fb29d731189e33ce768577d2de4f70f34df60811a2d1925a4790170': {'AddressOfEntryPoint': 1978399,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2096472,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 2,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'ExitVDM'},
                                                                      'ImportedFunctions': ['OpenEventA',
                                                                                            'VirtualAlloc',
                                                                                            'OpenSemaphoreA',
                                                                                            'ExitVDM'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 4,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.code\x00\x00\x00': 32768,
                                                                                       '.data\x00\x00\x00': 30208,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       'DATA\x00\x00\x00\x00': 85504},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/124883126fb29d731189e33ce768577d2de4f70f34df60811a2d1925a4790170'},
 '12aa72f9c1d95b0796bf193c1dcc09a3694b6ba84252d748aff5e5d133832178': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 491272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 491520,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/12aa72f9c1d95b0796bf193c1dcc09a3694b6ba84252d748aff5e5d133832178'},
 '12c7ad0cb4e245b5d51dafb3d6ade6a22681c4a7ab19d919104cab333f956260': {'AddressOfEntryPoint': 18492,
                                                                      'DebugRVA': 49776,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadProcessMemory',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenProcess',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 42496},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/12c7ad0cb4e245b5d51dafb3d6ade6a22681c4a7ab19d919104cab333f956260'},
 '12fd18ddc4b6e27d6f0a4db4d473d0f014daf76486ce2809be21e9507c62a316': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 721772,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 721920,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/12fd18ddc4b6e27d6f0a4db4d473d0f014daf76486ce2809be21e9507c62a316'},
 '133b13790a6150d75cb797b9d02f7986803c2fcd2c66135066a9d98a3b59f0b3': {'AddressOfEntryPoint': 22268,
                                                                      'DebugRVA': 124304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'LoadTypeLibEx',
                                                                                      'RPCRT4.dll': 'UuidCreateSequential',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'SetWindowTextW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'ntdll.dll': '__chkstk',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ZwCreateSection',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'LdrFindEntryForAddress',
                                                                                            'RtlImageNtHeader',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwFlushKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'memcmp',
                                                                                            'ZwOpenTimer',
                                                                                            'ZwSetTimer',
                                                                                            'ZwDeleteFile',
                                                                                            'memcpy',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'memset',
                                                                                            'ZwWriteFile',
                                                                                            'strtoul',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetInformationFile',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'RtlGetCurrentPeb',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'LdrUnloadDll',
                                                                                            'LdrAddRefDll',
                                                                                            'sprintf',
                                                                                            'strlen',
                                                                                            'ZwRaiseHardError',
                                                                                            'wcsstr',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'LdrLoadDll',
                                                                                            'RtlInitUnicodeString',
                                                                                            'wcscpy',
                                                                                            'ZwClose',
                                                                                            'ZwQueryKey',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenKey',
                                                                                            'RtlComputeCrc32',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenProcess',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'ZwSetInformationToken',
                                                                                            'ZwDuplicateToken',
                                                                                            'ZwAdjustPrivilegesToken',
                                                                                            'ZwOpenThreadTokenEx',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwReadVirtualMemory',
                                                                                            'wcschr',
                                                                                            '__chkstk',
                                                                                            'SetThreadLocale',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'WideCharToMultiByte',
                                                                                            'CopyFileW',
                                                                                            'CreateProcessW',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'Sleep',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersion',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'MD5Update',
                                                                                            'MD5Final',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'MD5Init',
                                                                                            'GetWindowLongW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowPos',
                                                                                            'LoadIconW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DialogBoxParamW',
                                                                                            'PostMessageW',
                                                                                            'EndDialog',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'FindWindowW',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxW',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExW',
                                                                                            'AdjustWindowRect',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'OpenDesktopW',
                                                                                            'SetThreadDesktop',
                                                                                            'DestroyIcon',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetMessageW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SetWindowTextW',
                                                                                            'UuidCreateSequential',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'LoadTypeLibEx',
                                                                                            'WSAStartup',
                                                                                            'WSASocketW',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'WSAIoctl',
                                                                                            'WSARecv',
                                                                                            'WSASend',
                                                                                            'setsockopt',
                                                                                            'WSASendTo',
                                                                                            'WSARecvFrom',
                                                                                            'WSACleanup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 162,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 10104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 14336,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 115200},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/133b13790a6150d75cb797b9d02f7986803c2fcd2c66135066a9d98a3b59f0b3'},
 '133cb2f76051ce78533347aebf651fbaa80e4e9155930b6ec7900ae7816d0f58': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1326804,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1327104,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/133cb2f76051ce78533347aebf651fbaa80e4e9155930b6ec7900ae7816d0f58'},
 '13ab431291a9b486bcb7e07a5c6f4ef46d7aa932a1dadd4d52f2b52dda6db413': {'AddressOfEntryPoint': 1073915596,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'DIFXAPI.dll': 'DIFXAPISetLogCallbackA',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList'},
                                                                      'ImportedFunctions': ['GetEnvironmentVariableA',
                                                                                            'GetFullPathNameA',
                                                                                            'CreateFileA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapReAlloc',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapSize',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetupDiGetDeviceInfoListDetailA',
                                                                                            'CM_Get_Device_ID_ExA',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'DriverPackagePreinstallA',
                                                                                            'DriverPackageInstallA',
                                                                                            'DriverPackageGetPathA',
                                                                                            'DIFXAPISetLogCallbackA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 87,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/13ab431291a9b486bcb7e07a5c6f4ef46d7aa932a1dadd4d52f2b52dda6db413'},
 '13abc28b2269a73c8d621fb88b487b7e83c6ee014816493f0d78281a504ffeb0': {'AddressOfEntryPoint': 52904,
                                                                      'DebugRVA': 95600,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 104464,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'DosDateTimeToFileTime',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'USER32.dll': 'DispatchMessageA',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetNumberFormatA',
                                                                                            'lstrcmpiA',
                                                                                            'GetProcAddress',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetTempPathA',
                                                                                            'MoveFileExA',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'OpenFileMappingA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileA',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FindWindowExA',
                                                                                            'GetClassNameA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSysColor',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'LoadIconA',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'wvsprintfA',
                                                                                            'SetWindowLongA',
                                                                                            'CharUpperA',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DestroyWindow',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'MessageBoxA',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringA',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongA',
                                                                                            'OemToCharBuffA',
                                                                                            'DispatchMessageA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetOpenFileNameA',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetSaveFileNameA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ShellExecuteExA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHChangeNotify',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 164,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 117092,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 117248,
                                                                                       '.text\x00\x00\x00': 86528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/13abc28b2269a73c8d621fb88b487b7e83c6ee014816493f0d78281a504ffeb0'},
 '1410447de4851cfca8e9d1aafbe0fd2cc3d06d2201929b683417e7cc2269b084': {'AddressOfEntryPoint': 217088,
                                                                      'DebugRVA': 46864,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 0,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 127328,
                                                                      'SectionNames': {},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1410447de4851cfca8e9d1aafbe0fd2cc3d06d2201929b683417e7cc2269b084'},
 '1464e665566b7cafbfdc7aaa0c67e5daa4c92002abc87941805c527aa15bcb35': {'AddressOfEntryPoint': 77616,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'CreateStatusWindowW',
                                                                                      'KERNEL32.dll': 'LeaveCriticalSection',
                                                                                      'SHELL32.dll': 'SHGetDesktopFolder',
                                                                                      'USER32.dll': 'LoadAcceleratorsW',
                                                                                      'comdlg32.dll': 'GetSaveFileNameW'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'CreateStatusWindowW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'DeleteFileW',
                                                                                            'CompareStringW',
                                                                                            'GetCommandLineW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'LoadLibraryExW',
                                                                                            'EnumResourceNamesW',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateFileW',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'Sleep',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileSize',
                                                                                            'CopyFileW',
                                                                                            'GetFileTime',
                                                                                            'GetTempFileNameW',
                                                                                            'GetDriveTypeA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetTimeZoneInformation',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'HeapSize',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleFileNameA',
                                                                                            'WriteFile',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetStartupInfoA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'CreateThread',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExA',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'ExitProcess',
                                                                                            'SetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'PostMessageW',
                                                                                            'DestroyIcon',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadImageW',
                                                                                            'LoadCursorW',
                                                                                            'GetSystemMenu',
                                                                                            'DispatchMessageW',
                                                                                            'EnableMenuItem',
                                                                                            'TranslateMessage',
                                                                                            'EnableWindow',
                                                                                            'IsDialogMessageW',
                                                                                            'SendMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'LoadStringW',
                                                                                            'GetMessageW',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxA',
                                                                                            'SetFocus',
                                                                                            'EndDialog',
                                                                                            'UpdateWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItemTextW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'CheckMenuItem',
                                                                                            'MessageBeep',
                                                                                            'GetMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'DefWindowProcW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetCursor',
                                                                                            'CreateDialogParamW',
                                                                                            'PostQuitMessage',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetDesktopFolder'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 105368,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 44544,
                                                                                       '.rsrc\x00\x00\x00': 105472,
                                                                                       '.text\x00\x00\x00': 176128},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1464e665566b7cafbfdc7aaa0c67e5daa4c92002abc87941805c527aa15bcb35'},
 '14905373243166ea424db6c3b4923c1882fa92d637713fc8c681cb9ef5c36c6c': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 440652,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 440832,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/14905373243166ea424db6c3b4923c1882fa92d637713fc8c681cb9ef5c36c6c'},
 '14d06b21ab235a0c4259e0002c7cdf653491167da4f02fb4820f0ce8bd067800': {'AddressOfEntryPoint': 55200,
                                                                      'DebugRVA': 257128,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 258048,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9728,
                                                                                       '.pdata\x00\x00': 16384,
                                                                                       '.rdata\x00\x00': 82944,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 253440},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/14d06b21ab235a0c4259e0002c7cdf653491167da4f02fb4820f0ce8bd067800'},
 '14eb6038b34896245ff06998d98c4d7188292ec9899531222542b980aece72f8': {'AddressOfEntryPoint': 36964,
                                                                      'DebugRVA': 24768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'PCIIDEX.SYS': 'AtaPortWriteRegisterUlong'},
                                                                      'ImportedFunctions': ['AtaPortCopyMemory',
                                                                                            'AtaPortGetPhysicalAddress',
                                                                                            'AtaPortReadRegisterUlong',
                                                                                            'AtaPortInitializeEx',
                                                                                            'AtaPortDeviceStateChange',
                                                                                            'AtaPortEtwTraceLog',
                                                                                            'AtaPortRegistryFreeBuffer',
                                                                                            'AtaPortGetBusData',
                                                                                            'AtaPortRegistryRead',
                                                                                            'AtaPortRequestCallback',
                                                                                            'AtaPortStallExecution',
                                                                                            'AtaPortGetUnCachedExtension',
                                                                                            'AtaPortReadRegisterUchar',
                                                                                            'AtaPortBuildRequestSenseIrb',
                                                                                            'AtaPortReleaseRequestSenseIrb',
                                                                                            'AtaPortCompleteRequest',
                                                                                            'AtaPortNotification',
                                                                                            'AtaPortGetDeviceBase',
                                                                                            'AtaPortGetScatterGatherList',
                                                                                            'AtaPortRegistryAllocateBuffer',
                                                                                            'AtaPortWriteRegisterUlong',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 22,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 17920,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/14eb6038b34896245ff06998d98c4d7188292ec9899531222542b980aece72f8'},
 '153b5a09d89213a8164dc511bccf4530af70853b89efd9babe0499777d154852': {'AddressOfEntryPoint': 121744,
                                                                      'DebugRVA': 95104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90112,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/153b5a09d89213a8164dc511bccf4530af70853b89efd9babe0499777d154852'},
 '1578893a802d00f6f5cede6b4ae74a82e844761a5666e5b0efcbe648e6741fc5': {'AddressOfEntryPoint': 81180,
                                                                      'DebugRVA': 173760,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 172032,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'ksecdd.sys': 'BCryptFinishHash',
                                                                                      'mrxsmb.sys': 'SmbCeReferenceServerEntry',
                                                                                      'ntoskrnl.exe': 'IoAllocateMdl',
                                                                                      'rdbss.sys': 'RxNameCacheExpireEntry'},
                                                                      'ImportedFunctions': ['ExAcquireRundownProtection',
                                                                                            'ExReleaseRundownProtection',
                                                                                            'ExWaitForRundownProtectionRelease',
                                                                                            'ExReleaseResourceLite',
                                                                                            'ExInitializeRundownProtection',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            'ExDeleteResourceLite',
                                                                                            'ExInitializeResourceLite',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlInt64ToUnicodeString',
                                                                                            'RtlUpcaseUnicodeChar',
                                                                                            '__C_specific_handler',
                                                                                            'RtlUpcaseUnicodeString',
                                                                                            'FsRtlCancellableWaitForSingleObject',
                                                                                            'ExfReleasePushLock',
                                                                                            'RtlHashUnicodeString',
                                                                                            'FsRtlIsNameInExpression',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'IoSetTopLevelIrp',
                                                                                            'IoGetTopLevelIrp',
                                                                                            'ObfDereferenceObject',
                                                                                            'KeInitializeEvent',
                                                                                            'ExIsResourceAcquiredExclusiveLite',
                                                                                            'KeSetEvent',
                                                                                            'IoSetFileOrigin',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ZwClose',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwFsControlFile',
                                                                                            'ZwOpenFile',
                                                                                            'KeWaitForSingleObject',
                                                                                            'ExReleaseSpinLockShared',
                                                                                            'ExAcquireSpinLockShared',
                                                                                            'RtlFindLeastSignificantBit',
                                                                                            'ExUuidCreate',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'KeReleaseInStackQueuedSpinLock',
                                                                                            'KeAcquireInStackQueuedSpinLock',
                                                                                            'IoIs32bitProcess',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'ExfReleasePushLockShared',
                                                                                            'ExfAcquirePushLockShared',
                                                                                            'IoBuildPartialMdl',
                                                                                            'RtlLengthSid',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'KeDelayExecutionThread',
                                                                                            'KeFlushQueuedDpcs',
                                                                                            'EtwRegister',
                                                                                            'EtwUnregister',
                                                                                            'MmResetDriverPaging',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'RtlInitUnicodeString',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'ProbeForWrite',
                                                                                            'ProbeForRead',
                                                                                            'IoGetRequestorProcess',
                                                                                            'KeStackAttachProcess',
                                                                                            'ExfTryToWakePushLock',
                                                                                            'ExfAcquirePushLockExclusive',
                                                                                            'FsRtlFreeExtraCreateParameter',
                                                                                            'FsRtlInsertExtraCreateParameter',
                                                                                            'FsRtlAllocateExtraCreateParameter',
                                                                                            'FsRtlAcknowledgeEcp',
                                                                                            'FsRtlFindExtraCreateParameter',
                                                                                            'FsRtlGetNextExtraCreateParameter',
                                                                                            'FsRtlValidateReparsePointBuffer',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'MmUnlockPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'toupper',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'ExReleaseSpinLockExclusive',
                                                                                            'ExAcquireSpinLockExclusive',
                                                                                            'RtlCompareMemory',
                                                                                            'EtwWrite',
                                                                                            'IoFreeMdl',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoAllocateMdl',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'RxNameCacheFinalize',
                                                                                            'RxNameCacheInitializeEx',
                                                                                            'RxClearMinirdrCancelRoutine',
                                                                                            'RxNameCacheExpireEntriesWithPrefix',
                                                                                            'RxTearDownDiagnosticLogger',
                                                                                            'RxInitializeDiagnosticLogger',
                                                                                            'RxGetRDBSSProcess',
                                                                                            'RxDisableLocalBuffering',
                                                                                            'RxPostToWorkerThread',
                                                                                            'RxForceScavengerToRun',
                                                                                            'RxCancelContext',
                                                                                            'RxNameCacheCheckEntry',
                                                                                            'RxNameCacheActivateEntry',
                                                                                            'RxNameCacheCreateEntryEx',
                                                                                            'RxNameCacheFetchEntryEx',
                                                                                            'RxCrackPathName',
                                                                                            'RxDiagnosticTrace',
                                                                                            'RxIndicateChangeOfOplockStateWithCreateHint',
                                                                                            'RxLowIoGetBufferAddress',
                                                                                            'RxLockEnumerator',
                                                                                            'RxCreateRxContext',
                                                                                            'RxDereferenceAndDeleteRxContext_Real',
                                                                                            'RxQueryNetRootCachingMode',
                                                                                            'RxIndicateChangeOfOplockState',
                                                                                            'RxFcbScavengeRelatedFobxs',
                                                                                            'RxOrphanSrvOpen',
                                                                                            'RxProcessFcbChangeBufferingStateRequest',
                                                                                            'RxRegisterSrvOpenWithBufferingManager',
                                                                                            'RxRegisterFcbWithBufferingManager',
                                                                                            'RxFinishFcbInitialization',
                                                                                            'RxIndicateChangeOfOplockStateForTarget',
                                                                                            'RxCreateNetFobx',
                                                                                            'RxLowIoCompletion',
                                                                                            'RxDispatchToWorkerThread',
                                                                                            'RxNameCacheExpireEntry',
                                                                                            'BCryptGenerateSymmetricKey',
                                                                                            'BCryptKeyDerivation',
                                                                                            'BCryptDestroyKey',
                                                                                            'SecMakeSPNEx2',
                                                                                            'AcquireCredentialsHandleW',
                                                                                            'MapSecurityError',
                                                                                            'InitializeSecurityContextW',
                                                                                            'QueryContextAttributesW',
                                                                                            'BCryptDestroyHash',
                                                                                            'FreeContextBuffer',
                                                                                            'GetSecurityUserInfo',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptCreateHash',
                                                                                            'BCryptDuplicateHash',
                                                                                            'BCryptHashData',
                                                                                            'BCryptFinishHash',
                                                                                            'SmbCeReferenceExchange',
                                                                                            'SmbCeDereferenceExchange',
                                                                                            'SmbCeWaitForCompletionAndFinalizeExchangeEx',
                                                                                            'SmbCeInitiateExchange',
                                                                                            'SmbCeInitializeExchange',
                                                                                            'SubRdrBuildDialectRevisionNegotiateList',
                                                                                            'SmbCseFinalizeBufferContext',
                                                                                            'SmbCeDereferenceVNetRootContext',
                                                                                            'MRxSmbDeviceObject',
                                                                                            'SmbCeReferenceVNetRootContext',
                                                                                            'SmbCeSetConnectionKeepalive',
                                                                                            'SmbCeDisconnectServerEntryLite',
                                                                                            'SmbCeRuntimeContext',
                                                                                            'SmbCeContinueExchange',
                                                                                            'SmbCeCheckServerEntryDialect',
                                                                                            'MRxSmbGetConfigurationBlock',
                                                                                            'SmbCseSubmitBufferContext',
                                                                                            'SmbCseInitializeBufferContextWithMemoryRegistration',
                                                                                            'MRxSmbIsStreamFile',
                                                                                            'SmbCeRecoverSessionEntryLite',
                                                                                            'SmbCeAllocateExchangeBuffer',
                                                                                            'SmbCeAssociateExchangeWithCompoundingKeyEx',
                                                                                            'FsRtlValidateFileInformationBufferEx',
                                                                                            'SmbCeQueryOptimalBufferSize',
                                                                                            'SmbCseAllocateCompoundingKey',
                                                                                            'SmbCseReleaseCompoundingKey',
                                                                                            'SmbCseDereferenceCompoundingKey',
                                                                                            'SmbCeInitializeConnectionInfo',
                                                                                            'MRxSmbCreateVNetRoot',
                                                                                            'MRxSmbUpdateNetRootState',
                                                                                            'MRxSmbExtractNetRootName',
                                                                                            'MRxSmbFinalizeSrvCall',
                                                                                            'MRxSmbFinalizeNetRoot',
                                                                                            'MRxSmbFinalizeVNetRoot',
                                                                                            'MRxSmbGetShareRights',
                                                                                            'MRxSmbDeallocateForFcb',
                                                                                            'MRxSmbDeallocateForSrvOpen',
                                                                                            'MRxSmb2QueryConnectionPerformance',
                                                                                            'MRxSmbDeregisterDialect',
                                                                                            'MRxSmbDeregisterSubRedirector',
                                                                                            'MRxSmbRegisterSubRedirector',
                                                                                            'MRxSmbRegisterDialect',
                                                                                            'MRxSmbInitializeRecurrentService',
                                                                                            'MRxSmbActivateRecurrentService',
                                                                                            'MRxSmbShutdownRecurrentService',
                                                                                            'SubRdrGetDialectIndex',
                                                                                            'SmbCeSetServerBufferSizes',
                                                                                            'SmbCeSetExchangeExpiryTimeEx',
                                                                                            'SmbCeAllocateImplicitExchangeBuffer',
                                                                                            'VctReleaseEncryptionKey',
                                                                                            'VctCreateAndCacheEncryptionKey',
                                                                                            'VctReferenceEncryptionKey',
                                                                                            'SmbCeReferenceBindingObject',
                                                                                            'UninitializeSecurityContextForBindingObject',
                                                                                            'SmbCseReferenceCompoundingKey',
                                                                                            'SmbCeDereferenceBindingObject',
                                                                                            'SmbCeFreeExchangeBuffer',
                                                                                            'SmbCseGetMemoryDescriptors',
                                                                                            'SmbCseEstimateRequiredCreditsLite',
                                                                                            'SmbCeReferenceSessionEntry',
                                                                                            'SmbCeEstablishMultipleChannels',
                                                                                            'SmbCeDereferenceSessionEntryEx',
                                                                                            'MRxSmbDeallocateForFobx',
                                                                                            'SmbCepCompleteExchangeLite',
                                                                                            'SmbCeSwitchConnectionObjectTransport',
                                                                                            'SmbCeSuspendExchangeLite',
                                                                                            'SmbCeResumeSuspendedExchangesLite',
                                                                                            'MRxSmbPreparseName',
                                                                                            'SmbCeTranslateObjectState',
                                                                                            'VctDereferenceEndpoint',
                                                                                            'VctReferenceEndpoint',
                                                                                            'VctMarkConnectionForLargeMtu',
                                                                                            'SmbCeReferenceServerEntry'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 210,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 18944,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 166400,
                                                                                       'ALMOSTRO': 1024,
                                                                                       'INIT\x00\x00\x00\x00': 7680,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/1578893a802d00f6f5cede6b4ae74a82e844761a5666e5b0efcbe648e6741fc5'},
 '15add92599f9e46fbb9083de921f2bb6d6a5850c500c637b72baca52da8b7750': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 77824,
                                                                      'ExportSize': 12984088,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetVolumeInformationA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileA',
                                                                                            '_lclose',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetProcAddress',
                                                                                            '_llseek',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CompareStringA',
                                                                                            'LoadLibraryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetPrivateProfileIntA',
                                                                                            '_lopen',
                                                                                            'GetShortPathNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WriteFile',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVersionExA',
                                                                                            'SetFilePointer',
                                                                                            'GetVersion',
                                                                                            'FreeResource',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CreateDirectoryA',
                                                                                            'TerminateThread',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'LockResource',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetEvent',
                                                                                            'ReadFile',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetDeviceCaps',
                                                                                            'CallWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextA',
                                                                                            'DispatchMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDC',
                                                                                            'SetWindowPos',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'EndDialog',
                                                                                            'CharNextA',
                                                                                            'GetDesktopWindow',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'LoadStringA',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12985100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 12985344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/15add92599f9e46fbb9083de921f2bb6d6a5850c500c637b72baca52da8b7750'},
 '16866b1e5201d4d3a8a63100fe7fd6d74fa36b5648b3bcd4e12267f8827f597f': {'AddressOfEntryPoint': 12976,
                                                                      'DebugRVA': 123024,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'twiutorp.vzq': 'QuhpWissUetrme'},
                                                                      'ImportedFunctions': ['UqisQmvrLkcArsnw',
                                                                                            'QuhpWissUetrme'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 2,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 116736,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/16866b1e5201d4d3a8a63100fe7fd6d74fa36b5648b3bcd4e12267f8827f597f'},
 '16a8a52f7c6699dfce18c9913aa748da7a62900f4d5b049d1984cecda95b7a94': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 39104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 39424,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/16a8a52f7c6699dfce18c9913aa748da7a62900f4d5b049d1984cecda95b7a94'},
 '16aa94d26d21f07a7bad5cb9bb027229aed63bd5e746c6ded2366a60204063a6': {'AddressOfEntryPoint': 59120,
                                                                      'DebugRVA': 196172,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 196608,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 147872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 14848,
                                                                                       '.rdata\x00\x00': 65536,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 147968,
                                                                                       '.text\x00\x00\x00': 192512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/16aa94d26d21f07a7bad5cb9bb027229aed63bd5e746c6ded2366a60204063a6'},
 '1726f58f49655d41116942b87f5bfa55c53c2280f15350731bb54fe52ff9b765': {'AddressOfEntryPoint': 387608,
                                                                      'DebugRVA': 540032,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 845408,
                                                                      'ExportSize': 271,
                                                                      'IATRVA': 536576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetSystemDirectoryW',
                                                                                      'OLEAUT32.dll': 'VariantChangeType',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathIsUNCW',
                                                                                      'USER32.dll': 'GetWindowThreadProcessId',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'HttpAddRequestHeadersW',
                                                                                      'WS2_32.dll': 'ntohl',
                                                                                      'dbghelp.dll': 'StackWalk64',
                                                                                      'msvcrt.dll': '__iob_func',
                                                                                      'ole32.dll': 'StgOpenStorage'},
                                                                      'ImportedFunctions': ['WSAGetLastError',
                                                                                            'getservbyname',
                                                                                            'ntohs',
                                                                                            'ntohl',
                                                                                            'ferror',
                                                                                            '_purecall',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'atoi',
                                                                                            'fclose',
                                                                                            '_fileno',
                                                                                            'fopen',
                                                                                            'setvbuf',
                                                                                            'strtod',
                                                                                            '_read',
                                                                                            '_write',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'printf',
                                                                                            '__wargv',
                                                                                            '__argv',
                                                                                            '__argc',
                                                                                            'raise',
                                                                                            'signal',
                                                                                            'getenv',
                                                                                            'strncmp',
                                                                                            'fprintf',
                                                                                            'strcmp',
                                                                                            '_time64',
                                                                                            '_mktime64',
                                                                                            '_localtime64',
                                                                                            '_gmtime64',
                                                                                            'strftime',
                                                                                            'strstr',
                                                                                            '_open_osfhandle',
                                                                                            '_findnext64',
                                                                                            '_get_osfhandle',
                                                                                            '_findclose',
                                                                                            'fwrite',
                                                                                            'fread',
                                                                                            '_findfirst64',
                                                                                            'feof',
                                                                                            '_fdopen',
                                                                                            '_wsplitpath',
                                                                                            'memchr',
                                                                                            '__C_specific_handler',
                                                                                            '_endthreadex',
                                                                                            '_beginthreadex',
                                                                                            'ldexp',
                                                                                            'isalnum',
                                                                                            'strerror',
                                                                                            'strchr',
                                                                                            'fsetpos',
                                                                                            '_errno',
                                                                                            'wcsstr',
                                                                                            'wcschr',
                                                                                            'iswspace',
                                                                                            '_msize',
                                                                                            'realloc',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'isspace',
                                                                                            'isxdigit',
                                                                                            'isdigit',
                                                                                            'ungetc',
                                                                                            'sscanf',
                                                                                            '_pclose',
                                                                                            'fseek',
                                                                                            'fputc',
                                                                                            'fgetpos',
                                                                                            'fgetc',
                                                                                            'fflush',
                                                                                            'memmove',
                                                                                            'abort',
                                                                                            'sprintf',
                                                                                            '_vsnprintf',
                                                                                            'memcmp',
                                                                                            '_isatty',
                                                                                            '__iob_func',
                                                                                            'CharUpperW',
                                                                                            'IsCharAlphaW',
                                                                                            'MessageBeep',
                                                                                            'MessageBoxW',
                                                                                            'IsCharUpperW',
                                                                                            'IsCharLowerW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharToOemA',
                                                                                            'LoadStringW',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongW',
                                                                                            'EnumWindows',
                                                                                            'CharLowerW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CoUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromCLSID',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'StgCreateDocfile',
                                                                                            'StgOpenStorage',
                                                                                            'SysAllocString',
                                                                                            'VarDateFromStr',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayGetElemsize',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayGetVartype',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantCopyInd',
                                                                                            'VariantChangeType',
                                                                                            'HttpSendRequestExW',
                                                                                            'InternetOpenW',
                                                                                            'InternetConnectW',
                                                                                            'HttpEndRequestW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetSetFilePointer',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetWriteFile',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'GetModuleInformation',
                                                                                            'EnumProcessModules',
                                                                                            'SymFromAddr',
                                                                                            'SymInitialize',
                                                                                            'SymGetModuleBase64',
                                                                                            'SymFunctionTableAccess64',
                                                                                            'SymCleanup',
                                                                                            'StackWalk64',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'PathStripToRootW',
                                                                                            'PathIsUNCW',
                                                                                            'GetUserNameW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegFlushKey',
                                                                                            'RegLoadKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSaveKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegCloseKey',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'VirtualQueryEx',
                                                                                            'VirtualProtectEx',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'GetProcessVersion',
                                                                                            'CreateProcessW',
                                                                                            'GetProcessTimes',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCommandLineW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'CreateSemaphoreW',
                                                                                            'CreateEventW',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'DeleteCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'lstrcpyW',
                                                                                            'lstrcpynW',
                                                                                            'CreateFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'ResetEvent',
                                                                                            'DeviceIoControl',
                                                                                            'GetTempPathW',
                                                                                            'WriteFile',
                                                                                            'SetFileTime',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'FlushFileBuffers',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleFileNameW',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetOverlappedResult',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetStdHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetThreadTimes',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCurrentThread',
                                                                                            'RtlCaptureContext',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'OutputDebugStringA',
                                                                                            'SizeofResource',
                                                                                            'SetCommTimeouts',
                                                                                            'GetModuleHandleW',
                                                                                            'SetEvent',
                                                                                            'SetThreadContext',
                                                                                            'GetThreadContext',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'ResumeThread',
                                                                                            'SuspendThread',
                                                                                            'GetExitCodeThread',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'QueueUserAPC',
                                                                                            'SleepEx',
                                                                                            'WaitForSingleObject',
                                                                                            'RaiseException',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlPcToFileHeader',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'Sleep',
                                                                                            'GetVersion',
                                                                                            'GetTickCount',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'QueryDosDeviceW',
                                                                                            'GetSystemInfo',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryExA',
                                                                                            'GetVersionExW',
                                                                                            'FormatMessageW',
                                                                                            'FreeLibrary',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'GetSystemDirectoryW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 332,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 302720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 40960,
                                                                                       '.rdata\x00\x00': 309248,
                                                                                       '.rsrc\x00\x00\x00': 303104,
                                                                                       '.text\x00\x00\x00': 532480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1726f58f49655d41116942b87f5bfa55c53c2280f15350731bb54fe52ff9b765'},
 '1737a2011c904447473efaedbb95934860310a2e117570b7c43180643ef3690f': {'AddressOfEntryPoint': 11532,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetCPInfo',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects'},
                                                                      'ImportedFunctions': ['_lclose',
                                                                                            'GetModuleFileNameA',
                                                                                            '_lread',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            '_lwrite',
                                                                                            '_lcreat',
                                                                                            'CreateDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'MoveFileExA',
                                                                                            'Sleep',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'IsValidCodePage',
                                                                                            'lstrcpyA',
                                                                                            'GetTempPathA',
                                                                                            'CompareStringA',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'RtlUnwindEx',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'wsprintfA',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'MessageBoxA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'ShellExecuteExA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 91,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 28020,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 28160,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1737a2011c904447473efaedbb95934860310a2e117570b7c43180643ef3690f'},
 '1760c643d8d0066f40e68659966d8e19e864299426605be40700a599be66adad': {'AddressOfEntryPoint': 242652,
                                                                      'DebugRVA': 254768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 253952,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionUnbindClass',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'IoDetachDevice',
                                                                                            'PoSetPowerState',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'wcsstr',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionBindClass',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionUnbindClass'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 960,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 249344,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/1760c643d8d0066f40e68659966d8e19e864299426605be40700a599be66adad'},
 '176806e07fdd05e2b990124d59be8ba640736550efe71f052c8fc52775b12af5': {'AddressOfEntryPoint': 1073787205,
                                                                      'DebugRVA': 33440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'lstrcpynW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetLastError',
                                                                                            'lstrlenW',
                                                                                            'CloseHandle',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'SetTokenInformation',
                                                                                            'CreateProcessAsUserW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 71,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2912,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/176806e07fdd05e2b990124d59be8ba640736550efe71f052c8fc52775b12af5'},
 '178408a29a7d6affb78af839765008453a2a1125026a4c961fd765379e7c5eb8': {'AddressOfEntryPoint': 7340,
                                                                      'DebugRVA': 12688,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'HalGetProcessorIdByNtNumber',
                                                                                      'WDFLDR.SYS': 'WdfVersionBindClass',
                                                                                      'ntoskrnl.exe': 'ExAllocatePoolWithTag'},
                                                                      'ImportedFunctions': ['EtwWrite',
                                                                                            'KeAddProcessorAffinityEx',
                                                                                            'RtlQueryRegistryValuesEx',
                                                                                            'KeGetProcessorNumberFromIndex',
                                                                                            'KeGetCurrentProcessorNumberEx',
                                                                                            'HalDispatchTable',
                                                                                            'IoAllocateWorkItem',
                                                                                            'KeQueryActiveProcessorCountEx',
                                                                                            'KeCheckProcessorAffinityEx',
                                                                                            'IoQueueWorkItem',
                                                                                            'KeBugCheckEx',
                                                                                            'PoFxProcessorNotification',
                                                                                            'KeSetSystemGroupAffinityThread',
                                                                                            'KeInitializeAffinityEx',
                                                                                            'ZwPowerInformation',
                                                                                            'PoFxActivateComponent',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'EtwEventEnabled',
                                                                                            'KeProcessorGroupAffinity',
                                                                                            'PoFxStartDevicePowerManagement',
                                                                                            'PoFxRegisterDevice',
                                                                                            'KeRevertToUserGroupAffinityThread',
                                                                                            'KeCheckProcessorGroupAffinity',
                                                                                            'IoUninitializeWorkItem',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeDpc',
                                                                                            'KeSetTimerEx',
                                                                                            'KeAddProcessorGroupAffinity',
                                                                                            'IoInitializeWorkItem',
                                                                                            'KeInitializeEnumerationContextFromGroup',
                                                                                            'KeInitializeTimerEx',
                                                                                            'KeCancelTimer',
                                                                                            'IoSizeofWorkItem',
                                                                                            'EtwRegister',
                                                                                            'KeEnumerateNextProcessor',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'KeInitializeEnumerationContext',
                                                                                            'ExFreePoolWithTag',
                                                                                            'EtwUnregister',
                                                                                            'ZwClose',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'HalGetProcessorIdByNtNumber',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionUnbindClass',
                                                                                            'WdfVersionBindClass'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 5632,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'PAGE\x00\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/178408a29a7d6affb78af839765008453a2a1125026a4c961fd765379e7c5eb8'},
 '180bb3a0e1af1f22fdb59d1fd565e80777d761e1c08adab92e9010e789c2be69': {'AddressOfEntryPoint': 60864,
                                                                      'DebugRVA': 67152,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'CreateFontIndirectA',
                                                                                      'KERNEL32.dll': 'Heap32ListFirst',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'BeginPaint',
                                                                                      'comdlg32.dll': 'FindTextA',
                                                                                      'msvcrt.dll': 'strcat'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__setusermatherr',
                                                                                            '__dllonexit',
                                                                                            'sprintf',
                                                                                            '_purecall',
                                                                                            '_mbslwr',
                                                                                            'malloc',
                                                                                            'strtoul',
                                                                                            '_mbsicmp',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_onexit',
                                                                                            'memset',
                                                                                            'free',
                                                                                            'modf',
                                                                                            'memcmp',
                                                                                            '_mbscmp',
                                                                                            '_mbsrchr',
                                                                                            '_mbschr',
                                                                                            '_memicmp',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memcpy',
                                                                                            'strlen',
                                                                                            '_ultoa',
                                                                                            '_itoa',
                                                                                            'strcpy',
                                                                                            '_mbsnbcat',
                                                                                            '_snprintf',
                                                                                            'strcat',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'GetCurrentProcessId',
                                                                                            'ExitProcess',
                                                                                            'SetErrorMode',
                                                                                            'DeleteFileA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'EnumResourceNamesA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'LocalFree',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetTempFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'OpenProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'ReadProcessMemory',
                                                                                            'Heap32ListNext',
                                                                                            'Heap32ListFirst',
                                                                                            'EndPaint',
                                                                                            'FillRect',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'LoadCursorA',
                                                                                            'ShowWindow',
                                                                                            'SetCursor',
                                                                                            'ChildWindowFromPoint',
                                                                                            'GetSysColorBrush',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetWindowPos',
                                                                                            'DefWindowProcA',
                                                                                            'RegisterClassA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'UpdateWindow',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowPlacement',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SendMessageA',
                                                                                            'LoadAcceleratorsA',
                                                                                            'LoadIconA',
                                                                                            'LoadImageA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'InvalidateRect',
                                                                                            'SetFocus',
                                                                                            'EnableMenuItem',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetMenuItemCount',
                                                                                            'ScreenToClient',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EnableWindow',
                                                                                            'GetCursorPos',
                                                                                            'MapWindowPoints',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetClientRect',
                                                                                            'GetSysColor',
                                                                                            'MoveWindow',
                                                                                            'OpenClipboard',
                                                                                            'GetMenu',
                                                                                            'CheckMenuItem',
                                                                                            'EmptyClipboard',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'GetWindowTextA',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'EnumChildWindows',
                                                                                            'GetMenuItemInfoA',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'LoadStringA',
                                                                                            'DestroyIcon',
                                                                                            'GetMessageA',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetFocus',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'TrackPopupMenu',
                                                                                            'PostQuitMessage',
                                                                                            'DrawTextExA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'BeginPaint',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            'PatBlt',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateSolidBrush',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetSaveFileNameA',
                                                                                            'FindTextA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'ExtractIconExA',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 183,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 13352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 13312,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 57856},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/180bb3a0e1af1f22fdb59d1fd565e80777d761e1c08adab92e9010e789c2be69'},
 '180f76da669e8447edca155c3054b7b709885b026fbe5d5965201ffb16500172': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2451848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2451968,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/180f76da669e8447edca155c3054b7b709885b026fbe5d5965201ffb16500172'},
 '1832274845811b18784a09623839bab7a7efb1fd78fc882937caa7e3cb6046b6': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 27120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 27136,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/1832274845811b18784a09623839bab7a7efb1fd78fc882937caa7e3cb6046b6'},
 '1882a8ee3959789ccd6710cef5fde654d5d95d8fdc13de9b5eea485b5e06dfd1': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1882a8ee3959789ccd6710cef5fde654d5d95d8fdc13de9b5eea485b5e06dfd1'},
 '18a36234f2dd49da0a65f4faa43830f1a8522027483be661df22a1c23b8ce122': {'AddressOfEntryPoint': 1076803837,
                                                                      'DebugRVA': 2136912,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2129920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'BtAudioHelper.dll': 'GetPreferredWaveInDevice',
                                                                                      'GDI32.dll': 'CreateFontIndirectA',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersInfo',
                                                                                      'KERNEL32.dll': 'GetExitCodeProcess',
                                                                                      'MSVCR80.dll': '_wcsdup',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'PSAPI.DLL': 'EnumProcesses',
                                                                                      'SETUPAPI.dll': 'SetupDiOpenDeviceInterfaceRegKey',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathA',
                                                                                      'SHLWAPI.dll': 'UrlGetPartW',
                                                                                      'TAPI32.dll': 'lineGenerateDigitsA',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'WINSPOOL.DRV': 'GetPrinterA',
                                                                                      'WS2_32.dll': 'accept',
                                                                                      'btosif.dll': 'OSIF_DeleteObject',
                                                                                      'gdiplus.dll': 'GdipFree',
                                                                                      'irprops.cpl': 'BluetoothFindRadioClose',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['OSIF_FreeObject',
                                                                                            'OSIF_GetObjectName',
                                                                                            'OSIF_CodeToString',
                                                                                            'OSIF_WriteObject',
                                                                                            'OSIF_GetNextObject',
                                                                                            'OSIF_GetFirstObject',
                                                                                            'OSIF_GetObjectById',
                                                                                            'OSIF_AddObject',
                                                                                            'OSIF_ModifyObject',
                                                                                            'OSIF_ObjectsConflict',
                                                                                            'OSIF_FindObject',
                                                                                            'OSIF_ReadObjects',
                                                                                            'OSIF_GetObjectCount',
                                                                                            'OSIF_Close',
                                                                                            'OSIF_OpenX',
                                                                                            'OSIF_Open',
                                                                                            'OSIF_IsPresent',
                                                                                            'OSIF_IsPimSupported',
                                                                                            'OSIF_IsSupported',
                                                                                            '??1CBTvCard@@QEAA@XZ',
                                                                                            '?getName@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?Parse@CBTvCard@@QEAAHPEA_W@Z',
                                                                                            '??0CBTvCard@@QEAA@XZ',
                                                                                            'OSIF_ReplaceObject',
                                                                                            'OSIF_CreateFilter',
                                                                                            'OSIF_PIMId',
                                                                                            'OSIF_DeleteFilter',
                                                                                            'OSIF_GetCfgFolder',
                                                                                            'OSIF_WriteObjectEx',
                                                                                            'OSIF_SetFolder',
                                                                                            'OSIF_CL_Open',
                                                                                            'OSIF_CL_Close',
                                                                                            'OSIF_CL_GetDatabaseId',
                                                                                            'OSIF_CL_GetFirstEntry',
                                                                                            'OSIF_CL_GetNextEntry',
                                                                                            'OSIF_GetFirstId',
                                                                                            'OSIF_GetNextId',
                                                                                            'OSIF_CL_GetCurrentAnchor',
                                                                                            'OSIF_DeleteObject',
                                                                                            'FindBtAudioOutputDevice',
                                                                                            'CloseSpeakerConnection',
                                                                                            'AddPacketIntoInQueue',
                                                                                            'OpenMicrophoneConnection',
                                                                                            'GetNumberWaveInDevices',
                                                                                            'CloseMicrophoneConnection',
                                                                                            'GetAudioDeviceOUT',
                                                                                            'GetAudioDeviceIN',
                                                                                            'SetSpeakerVolume',
                                                                                            'GetSpeakerVolume',
                                                                                            'IsBtAudioDevicePresent',
                                                                                            'SetPreferredWaveOutDevice',
                                                                                            'SetPreferredWaveInDevice',
                                                                                            'GetPreferredWaveOutDevice',
                                                                                            'GetNumberWaveOutDevices',
                                                                                            'OpenSpeakerConnection',
                                                                                            'EnableMultimediaTimer',
                                                                                            'DisableMultimediaTimer',
                                                                                            'FindBtAudioDevice',
                                                                                            'GetPreferredWaveInDevice',
                                                                                            'GetInterfaceInfo',
                                                                                            'IpReleaseAddress',
                                                                                            'IpRenewAddress',
                                                                                            'GetAdaptersInfo',
                                                                                            'sendto',
                                                                                            'ntohl',
                                                                                            'bind',
                                                                                            'socket',
                                                                                            'WSAStartup',
                                                                                            'getsockname',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSACleanup',
                                                                                            'WSALookupServiceNextW',
                                                                                            'WSALookupServiceBeginW',
                                                                                            'WSALookupServiceEnd',
                                                                                            'WSALookupServiceNextA',
                                                                                            'WSALookupServiceBeginA',
                                                                                            'WSAAddressToStringA',
                                                                                            'WSASetServiceA',
                                                                                            'shutdown',
                                                                                            'connect',
                                                                                            'setsockopt',
                                                                                            'listen',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'accept',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiGetDeviceInterfaceDetailA',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'CM_Get_Parent',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'CM_Get_Device_IDA',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetDriverInfoDetailA',
                                                                                            'SetupDiEnumDriverInfoA',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiOpenDeviceInterfaceRegKey',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathRemoveFileSpecA',
                                                                                            'PathFindNextComponentA',
                                                                                            'SHSetValueA',
                                                                                            'SHGetValueW',
                                                                                            'StrRetToBufW',
                                                                                            'SHDeleteKeyW',
                                                                                            'SHGetValueA',
                                                                                            'SHSetValueW',
                                                                                            'wvnsprintfA',
                                                                                            'PathCombineA',
                                                                                            'PathIsDirectoryA',
                                                                                            'PathFileExistsW',
                                                                                            'PathFileExistsA',
                                                                                            'SHDeleteValueA',
                                                                                            'UrlGetPartW',
                                                                                            'lineGetLineDevStatus',
                                                                                            'lineDrop',
                                                                                            'lineSetCallPrivilege',
                                                                                            'lineGetCallInfoA',
                                                                                            'lineGetMessage',
                                                                                            'lineNegotiateAPIVersion',
                                                                                            'lineGetDevCapsA',
                                                                                            'lineInitializeExA',
                                                                                            'lineOpenA',
                                                                                            'lineSetStatusMessages',
                                                                                            'lineShutdown',
                                                                                            'lineGetCallStatus',
                                                                                            'lineClose',
                                                                                            'lineDeallocateCall',
                                                                                            'lineAnswer',
                                                                                            'lineMakeCallA',
                                                                                            'lineUnhold',
                                                                                            'lineHold',
                                                                                            'lineSetupConferenceA',
                                                                                            'lineAddToConference',
                                                                                            'lineGenerateDigitsA',
                                                                                            'BluetoothFindFirstDevice',
                                                                                            'BluetoothFindNextDevice',
                                                                                            'BluetoothFindDeviceClose',
                                                                                            'BluetoothEnumerateInstalledServices',
                                                                                            'BluetoothFindFirstRadio',
                                                                                            'BluetoothGetDeviceInfo',
                                                                                            'BluetoothFindRadioClose',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipCreateBitmapFromFileICM',
                                                                                            'GdipGetImageEncodersSize',
                                                                                            'GdipGetImageEncoders',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipSaveImageToFile',
                                                                                            'GdipDrawImagePointRectI',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipAlloc',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipFree',
                                                                                            'EnumProcesses',
                                                                                            '_strdup',
                                                                                            '_mbsrchr',
                                                                                            '_ltoa',
                                                                                            'labs',
                                                                                            'fclose',
                                                                                            'ftell',
                                                                                            'fread',
                                                                                            'fseek',
                                                                                            '_errno',
                                                                                            '_wfopen',
                                                                                            '_snprintf',
                                                                                            'atof',
                                                                                            '_time64',
                                                                                            '_localtime64_s',
                                                                                            'strtol',
                                                                                            '_strnicmp',
                                                                                            '_vswprintf',
                                                                                            'qsort',
                                                                                            'strtok',
                                                                                            'wcsncmp',
                                                                                            '_mbstok_s',
                                                                                            'wcschr',
                                                                                            'towlower',
                                                                                            'fopen',
                                                                                            'feof',
                                                                                            'ferror',
                                                                                            'fwrite',
                                                                                            'wcstok',
                                                                                            'fputc',
                                                                                            'fputs',
                                                                                            'fprintf',
                                                                                            '_ltow',
                                                                                            '_ultoa',
                                                                                            'fabs',
                                                                                            'atol',
                                                                                            '_mbsnbicmp',
                                                                                            '_ctime64',
                                                                                            'strncat',
                                                                                            '_strlwr',
                                                                                            'wcstol',
                                                                                            '_wcslwr',
                                                                                            'wcstoul',
                                                                                            'strtoul',
                                                                                            'floor',
                                                                                            'rand',
                                                                                            'strftime',
                                                                                            '_splitpath',
                                                                                            '__doserrno',
                                                                                            'clearerr_s',
                                                                                            'fgets',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '_encode_pointer',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_endthread',
                                                                                            '_mktime64',
                                                                                            '_localtime64',
                                                                                            '_gmtime64',
                                                                                            'asctime',
                                                                                            'isalpha',
                                                                                            'tolower',
                                                                                            'strncmp',
                                                                                            'memmove',
                                                                                            'strncpy_s',
                                                                                            'strchr',
                                                                                            'wcsrchr',
                                                                                            '_wcsupr',
                                                                                            '_wcsicmp',
                                                                                            '_wctime64',
                                                                                            '_ftime64_s',
                                                                                            'strrchr',
                                                                                            'sscanf_s',
                                                                                            'wcscat_s',
                                                                                            '_ultow_s',
                                                                                            'swscanf_s',
                                                                                            'vsprintf_s',
                                                                                            'swprintf_s',
                                                                                            'realloc',
                                                                                            '_mbsnbcat',
                                                                                            '_mbschr',
                                                                                            'strncpy',
                                                                                            '_mbsicmp',
                                                                                            '_mbsnbcpy',
                                                                                            '_stricmp',
                                                                                            '_memicmp',
                                                                                            'atoi',
                                                                                            'strcmp',
                                                                                            'isdigit',
                                                                                            'toupper',
                                                                                            'strstr',
                                                                                            '_strupr',
                                                                                            '_mbsnbcmp',
                                                                                            'isprint',
                                                                                            '_mbsupr',
                                                                                            'memmove_s',
                                                                                            '_mbsstr',
                                                                                            'sprintf_s',
                                                                                            'wcscmp',
                                                                                            'wcscpy',
                                                                                            'swscanf',
                                                                                            'wcsstr',
                                                                                            'mbstowcs',
                                                                                            'wcscat',
                                                                                            'strcat_s',
                                                                                            'sscanf',
                                                                                            'vsprintf',
                                                                                            '_mbsnbcpy_s',
                                                                                            'memcpy_s',
                                                                                            'strcat',
                                                                                            'ceil',
                                                                                            'memcmp',
                                                                                            '_mbscmp',
                                                                                            '__RTDynamicCast',
                                                                                            '_beginthreadex',
                                                                                            'strcpy_s',
                                                                                            'sprintf',
                                                                                            'strcpy',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy',
                                                                                            'strlen',
                                                                                            'wcsncpy',
                                                                                            '__C_specific_handler',
                                                                                            'calloc',
                                                                                            '_recalloc',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_purecall',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscpy_s',
                                                                                            'wcslen',
                                                                                            '_resetstkoflw',
                                                                                            '_swprintf',
                                                                                            '_ultow',
                                                                                            '_wrename',
                                                                                            '_wremove',
                                                                                            'fgetc',
                                                                                            '_snwprintf',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsdup',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'OutputDebugStringA',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetComputerNameA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryW',
                                                                                            'QueryActCtxW',
                                                                                            'FindActCtxSectionStringW',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'WinExec',
                                                                                            'FindNextFileA',
                                                                                            'TerminateProcess',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempFileNameA',
                                                                                            'GetCommModemStatus',
                                                                                            'WaitCommEvent',
                                                                                            'WriteFile',
                                                                                            'ClearCommError',
                                                                                            'ReadFile',
                                                                                            'EscapeCommFunction',
                                                                                            'PurgeComm',
                                                                                            'SetupComm',
                                                                                            'GetCommState',
                                                                                            'SetCommState',
                                                                                            'SetCommMask',
                                                                                            'SetCommTimeouts',
                                                                                            'CreateFileW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SetFileTime',
                                                                                            'MoveFileA',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileAttributesExA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetSystemPowerStatus',
                                                                                            'GetTempPathW',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'MulDiv',
                                                                                            'CancelWaitableTimer',
                                                                                            'SetWaitableTimer',
                                                                                            'CreateWaitableTimerA',
                                                                                            'FormatMessageA',
                                                                                            'SetThreadExecutionState',
                                                                                            'OpenEventA',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetOverlappedResult',
                                                                                            'TerminateThread',
                                                                                            'SetThreadPriority',
                                                                                            'LocalFree',
                                                                                            'OutputDebugStringW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcpyA',
                                                                                            'ResetEvent',
                                                                                            'Process32Next',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'SetLastError',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'FindResourceExA',
                                                                                            'HeapFree',
                                                                                            'CreateSemaphoreA',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'CallNamedPipeA',
                                                                                            'CreateProcessA',
                                                                                            'FindFirstFileA',
                                                                                            'GetACP',
                                                                                            'GetThreadLocale',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'OpenProcess',
                                                                                            'VerSetConditionMask',
                                                                                            'GetFileAttributesW',
                                                                                            'RaiseException',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExA',
                                                                                            'GetLocaleInfoA',
                                                                                            'IsValidCodePage',
                                                                                            'GetCurrentThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'SetEvent',
                                                                                            'IsDBCSLeadByte',
                                                                                            'LoadLibraryExA',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'CopyFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'GetProcAddress',
                                                                                            'CreateDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'CompareFileTime',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateMutexA',
                                                                                            'OpenMutexA',
                                                                                            'ReleaseMutex',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'OpenSemaphoreA',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpiA',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersion',
                                                                                            'VerifyVersionInfoA',
                                                                                            'GetExitCodeProcess',
                                                                                            'KillTimer',
                                                                                            'MessageBoxA',
                                                                                            'wvsprintfA',
                                                                                            'LoadStringW',
                                                                                            'RegisterWindowMessageA',
                                                                                            'IsWindow',
                                                                                            'GetWindowLongA',
                                                                                            'FindWindowExA',
                                                                                            'GetWindowTextW',
                                                                                            'GetClassNameA',
                                                                                            'GetParent',
                                                                                            'DestroyWindow',
                                                                                            'SetClassLongPtrW',
                                                                                            'CreateWindowExW',
                                                                                            'CheckRadioButton',
                                                                                            'CheckDlgButton',
                                                                                            'GetDlgItem',
                                                                                            'CallWindowProcW',
                                                                                            'PeekMessageA',
                                                                                            'wsprintfA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'InvalidateRect',
                                                                                            'GetClientRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'DestroyMenu',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'GetForegroundWindow',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'FindWindowA',
                                                                                            'PostMessageA',
                                                                                            'GetDesktopWindow',
                                                                                            'wsprintfW',
                                                                                            'RegisterClassExA',
                                                                                            'CreateWindowExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'SetTimer',
                                                                                            'GetMessageA',
                                                                                            'SendMessageA',
                                                                                            'PostThreadMessageA',
                                                                                            'CharNextA',
                                                                                            'LoadStringA',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'DispatchMessageA',
                                                                                            'UnregisterClassA',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectA',
                                                                                            'StartPagePrinter',
                                                                                            'EndDocPrinter',
                                                                                            'WritePrinter',
                                                                                            'EndPagePrinter',
                                                                                            'StartDocPrinterA',
                                                                                            'EnumJobsA',
                                                                                            'OpenPrinterA',
                                                                                            'ClosePrinter',
                                                                                            'EnumPrintersA',
                                                                                            'DeviceCapabilitiesA',
                                                                                            'SetJobA',
                                                                                            'GetPrinterA',
                                                                                            'RegEnumKeyExA',
                                                                                            'CryptImportKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyExA',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'QueryServiceStatus',
                                                                                            'ControlService',
                                                                                            'StartServiceA',
                                                                                            'OpenServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'GetUserNameA',
                                                                                            'CryptDecrypt',
                                                                                            'CryptGetUserKey',
                                                                                            'CryptGenKey',
                                                                                            'CryptExportKey',
                                                                                            'CryptEncrypt',
                                                                                            'CryptDestroyKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CryptSetProvParam',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextA',
                                                                                            'RegEnumValueA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteA',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetFolderPathA',
                                                                                            'SHCreateDirectoryExA',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'CoCreateGuid',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoUninitialize',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'StringFromGUID2',
                                                                                            'VarBstrFromDate',
                                                                                            'SysAllocStringLen',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'OleCreatePropertyFrame',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayDestroyData',
                                                                                            'LoadRegTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'DosDateTimeToVariantTime',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 641,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 85160,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/18a36234f2dd49da0a65f4faa43830f1a8522027483be661df22a1c23b8ce122'},
 '18f36aac41ad4aaa1a6b2d475ac41720a081c3debf2df2c7f049394770264925': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/18f36aac41ad4aaa1a6b2d475ac41720a081c3debf2df2c7f049394770264925'},
 '19740564489f1c9e874cb46fe092851e397ef33ca6afe554d7240b7443afc129': {'AddressOfEntryPoint': 484124,
                                                                      'DebugRVA': 633440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 836864,
                                                                      'ExportSize': 483,
                                                                      'IATRVA': 630784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptDestroyHash',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'USER32.dll': 'CreateDesktopW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'send'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileW',
                                                                                            'RtlCaptureContext',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'SetInformationJobObject',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'SetHandleInformation',
                                                                                            'GetSystemInfo',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'CloseHandle',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetThreadContext',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualProtectEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'FlushInstructionCache',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'RtlPcToFileHeader',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'PeekMessageW',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'PostQuitMessage',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CallMsgFilterW',
                                                                                            'TranslateMessage',
                                                                                            'CreateWindowStationW',
                                                                                            'DispatchMessageW',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'KillTimer',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CreateDesktopW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'ntohs',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'timeGetDevCaps',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 290,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 36864,
                                                                                       '.rdata\x00\x00': 206848,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 626688,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/19740564489f1c9e874cb46fe092851e397ef33ca6afe554d7240b7443afc129'},
 '19ab5b7bec07ec3bce7d87ce3fb851943774b93a300ab19d10f06739886fde48': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 111808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 112128,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/19ab5b7bec07ec3bce7d87ce3fb851943774b93a300ab19d10f06739886fde48'},
 '19b4ef0e6d9ecdd2c1d3f4bc978f2156470a4f0fee10ef41269266d024376421': {'AddressOfEntryPoint': 51316,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 713880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 714240,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/19b4ef0e6d9ecdd2c1d3f4bc978f2156470a4f0fee10ef41269266d024376421'},
 '19ce03444ec992ba7a4e288b7e5e006523454f2c11c4fb87110606a26df06bdf': {'AddressOfEntryPoint': 1073772357,
                                                                      'DebugRVA': 13072,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCommandLineW',
                                                                                      'MSVCR90.dll': '__CxxFrameHandler3',
                                                                                      'QtCore4.dll': '?qRealloc@@YAPEAXPEAX_K@Z',
                                                                                      'QtGui4.dll': '?setQuitOnLastWindowClosed@QApplication@@SAX_N@Z',
                                                                                      'lmubase.dll': '?retain@LMUBase@@QEAAXXZ',
                                                                                      'lmumain.dll': '?exec@LMUQtApplication@@UEAAHXZ',
                                                                                      'lmupipe.dll': '?packetFromCommandLine@LMUPipeConduit@@SAPEAVLMUPipePacket@@HQEAPEAD@Z'},
                                                                      'ImportedFunctions': ['_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_initterm_e',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '_encode_pointer',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '__crt_debugger_hook',
                                                                                            '__CxxFrameHandler3',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            '?qMalloc@@YAPEAX_K@Z',
                                                                                            '?toLocal8Bit@QString@@QEBA?AVQByteArray@@XZ',
                                                                                            '?qFree@@YAXPEAX@Z',
                                                                                            '?shared_null@QByteArray@@0UData@1@A',
                                                                                            '?qWinMain@@YAXPEAUHINSTANCE__@@0PEADHAEAHAEAV?$QVector@PEAD@@@Z',
                                                                                            '?malloc@QVectorData@@SAPEAU1@HHHPEAU1@@Z',
                                                                                            '?data@QByteArray@@QEAAPEADXZ',
                                                                                            '??1QByteArray@@QEAA@XZ',
                                                                                            '??0QByteArray@@QEAA@XZ',
                                                                                            '?deref@QBasicAtomicInt@@QEAA_NXZ',
                                                                                            '?ref@QBasicAtomicInt@@QEAA_NXZ',
                                                                                            '??4QBasicAtomicInt@@QEAAAEAV0@H@Z',
                                                                                            '??9QBasicAtomicInt@@QEBA_NH@Z',
                                                                                            '??1QString@@QEAA@XZ',
                                                                                            '??0QString@@QEAA@PEBD@Z',
                                                                                            '?qRegisterResourceData@@YA_NHPEBE00@Z',
                                                                                            '?qUnregisterResourceData@@YA_NHPEBE00@Z',
                                                                                            '?windowsVersion@QSysInfo@@SA?AW4WinVersion@1@XZ',
                                                                                            '?qMemSet@@YAPEAXPEAXH_K@Z',
                                                                                            '??4QByteArray@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '??4QByteArray@@QEAAAEAV0@PEBD@Z',
                                                                                            '?fromUtf16@QString@@SA?AV1@PEBGH@Z',
                                                                                            '?qRealloc@@YAPEAXPEAX_K@Z',
                                                                                            '?setQuitOnLastWindowClosed@QApplication@@SAX_N@Z',
                                                                                            '?release@LMUBase@@QEAAJXZ',
                                                                                            '?logDebug@LMUBase@@SAXAEBVQString@@@Z',
                                                                                            '?retain@LMUBase@@QEAAXXZ',
                                                                                            '?connect@LMUPipeInternalConduit@@SAPEAVLMUPipeSession@@XZ',
                                                                                            '?setMaxConnections@LMUPipeServer@@QEAAXJ@Z',
                                                                                            '?conduit@LMUPipeServer@@QEAAPEAVLMUPipeConduit@@XZ',
                                                                                            '?setTimeout@LMUPipeServer@@QEAAXJ@Z',
                                                                                            '?send@LMUPipeSession@@QEAAJPEAVLMUPipePacket@@@Z',
                                                                                            '?packetFromCommandLine@LMUPipeConduit@@SAPEAVLMUPipePacket@@HQEAPEAD@Z',
                                                                                            '?initialize@LMUApplication@@UEAAXXZ',
                                                                                            '??0LMUQtApplication@@QEAA@AEAHQEAPEAD_N@Z',
                                                                                            '?uninitialize@LMUApplication@@UEAAXXZ',
                                                                                            '??1LMUQtApplication@@UEAA@XZ',
                                                                                            '?server@LMUApplication@@QEAAPEAVLMUPipeServer@@XZ',
                                                                                            '?exec@LMUQtApplication@@UEAAHXZ'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 7024,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/19ce03444ec992ba7a4e288b7e5e006523454f2c11c4fb87110606a26df06bdf'},
 '1a05660630ee0995f558cd0419117e4bc736cf954f5b703ebb3e986f9cf762fb': {'AddressOfEntryPoint': 29492,
                                                                      'DebugRVA': 8624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltGetDeviceObject',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['KeAcquireSpinLockRaiseToDpc',
                                                                                            'ExAllocatePool',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeBugCheckEx',
                                                                                            'IoThreadToProcess',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterFsRegistrationChange',
                                                                                            'ExQueueWorkItem',
                                                                                            'IoDetachDevice',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'KeReleaseSpinLock',
                                                                                            'PsGetProcessId',
                                                                                            'IoUnregisterFsRegistrationChange',
                                                                                            'ZwWriteFile',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoCreateDevice',
                                                                                            'IoDeleteDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwReadFile',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'IoAttachDeviceToDeviceStackSafe',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'IoAllocateWorkItem',
                                                                                            '__C_specific_handler',
                                                                                            'FltObjectDereference',
                                                                                            'FltStartFiltering',
                                                                                            'FltGetVolumeFromDeviceObject',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltRegisterFilter',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltEnumerateVolumes',
                                                                                            'FltGetVolumeName',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltCloseClientPort',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltCancelFileOpen',
                                                                                            'FltGetBottomInstance',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltGetVolumeFromName',
                                                                                            'FltClose',
                                                                                            'FltAttachVolume',
                                                                                            'FltCreateFile',
                                                                                            'FltSendMessage',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltGetDeviceObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 52,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 3072,
                                                                                       'INIT\x00\x00\x00\x00': 3072,
                                                                                       'PAGE\x00\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/1a05660630ee0995f558cd0419117e4bc736cf954f5b703ebb3e986f9cf762fb'},
 '1a13ebe7147dd568d37ad11663af8ea86c8e706c7e1119eaf7f5bcf7915d8ba1': {'AddressOfEntryPoint': 18492,
                                                                      'DebugRVA': 49776,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadProcessMemory',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenProcess',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 42496},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1a13ebe7147dd568d37ad11663af8ea86c8e706c7e1119eaf7f5bcf7915d8ba1'},
 '1ab0d7ae73c5f0696f786efb93e8957b78b7c5195573aa0dff770b7e7794f4c3': {'AddressOfEntryPoint': 10172,
                                                                      'DebugRVA': 13920,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 27136,
                                                                      'ExportSize': 107,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'API-MS-Win-Core-ErrorHandling-L1-1-0.dll': 'SetErrorMode',
                                                                                      'API-MS-Win-Core-Handle-L1-1-0.dll': 'CloseHandle',
                                                                                      'API-MS-Win-Core-LibraryLoader-L1-1-0.dll': 'GetModuleHandleW',
                                                                                      'API-MS-Win-Core-LocalRegistry-L1-1-0.dll': 'RegQueryValueExW',
                                                                                      'API-MS-Win-Core-Misc-L1-1-0.dll': 'Sleep',
                                                                                      'API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll': 'GetEnvironmentVariableW',
                                                                                      'API-MS-Win-Core-ProcessThreads-L1-1-0.dll': 'TerminateProcess',
                                                                                      'API-MS-Win-Core-Profile-L1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'API-MS-Win-Core-Synch-L1-1-0.dll': 'OpenEventW',
                                                                                      'API-MS-Win-Core-SysInfo-L1-1-0.dll': 'GetTickCount',
                                                                                      'API-MS-Win-Security-Base-L1-1-0.dll': 'GetTokenInformation',
                                                                                      'RPCRT4.dll': 'RpcServerUseProtseqEpW',
                                                                                      'SspiSrv.dll': 'SspiSrvClientCallback',
                                                                                      'msvcrt.dll': '_vsnprintf_s',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            'memcpy',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            '__set_app_type',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            'strcpy_s',
                                                                                            '_vsnprintf_s',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtListenPort',
                                                                                            'NtAcceptConnectPort',
                                                                                            'NtRequestWaitReplyPort',
                                                                                            'NtConnectPort',
                                                                                            'NtReplyWaitReceivePort',
                                                                                            'NtCreatePort',
                                                                                            'NtCompleteConnectPort',
                                                                                            'NtSetSecurityObject',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtOpenEvent',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlLengthSid',
                                                                                            'NtOpenFile',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlMakeSelfRelativeSD',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlCreateAcl',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'RtlAddMandatoryAce',
                                                                                            'DbgPrintEx',
                                                                                            'RtlCaptureContext',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerRegisterIf2',
                                                                                            'NdrServerCallAll',
                                                                                            'NdrServerCall2',
                                                                                            'RpcServerListen',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'SspiSrvInitialize',
                                                                                            'SspiSrvClientCallback',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'OpenEventW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetTokenInformation'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 92,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 15360,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 10240},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1ab0d7ae73c5f0696f786efb93e8957b78b7c5195573aa0dff770b7e7794f4c3'},
 '1ab3d22097fbfc9c63890d636c5f8fce86f90ccdd282be7c4cf302866e67b94c': {'AddressOfEntryPoint': 5360,
                                                                      'DebugRVA': 8624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR90.dll': '__set_app_type',
                                                                                      'USER32.dll': 'wsprintfA'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'wsprintfA',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '_configthreadlocale',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            '__set_app_type'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 43,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1644,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1ab3d22097fbfc9c63890d636c5f8fce86f90ccdd282be7c4cf302866e67b94c'},
 '1af7a96895ba3064b40323b07f79fe279c9db72a71ea43b321e480f03073b01d': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 600516,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 488448,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1af7a96895ba3064b40323b07f79fe279c9db72a71ea43b321e480f03073b01d'},
 '1af8e45337900146089a025fb0f0c45a2738841dcbb547a85212d202e550672d': {'AddressOfEntryPoint': 72960,
                                                                      'DebugRVA': 79696,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptDeriveKey',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GlobalUnlock',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderA',
                                                                                      'USER32.dll': 'GetDlgItemInt',
                                                                                      'comdlg32.dll': 'GetSaveFileNameA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_purecall',
                                                                                            'qsort',
                                                                                            '_strlwr',
                                                                                            'strcmp',
                                                                                            '_memicmp',
                                                                                            'strchr',
                                                                                            'strrchr',
                                                                                            '_strcmpi',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'strtoul',
                                                                                            'atoi',
                                                                                            '_snprintf',
                                                                                            'wcscpy',
                                                                                            'wcschr',
                                                                                            'wcsncmp',
                                                                                            'memcmp',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_strnicmp',
                                                                                            'wcslen',
                                                                                            '_mbsicmp',
                                                                                            '_mbscmp',
                                                                                            'log',
                                                                                            'strlen',
                                                                                            'memcpy',
                                                                                            'abs',
                                                                                            'strcpy',
                                                                                            'memset',
                                                                                            '_itoa',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeleteFileA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'EnumResourceNamesA',
                                                                                            'WriteFile',
                                                                                            'CreateRemoteThread',
                                                                                            'EnumResourceTypesA',
                                                                                            'SizeofResource',
                                                                                            'GetStartupInfoA',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'CloseHandle',
                                                                                            'GetFileSize',
                                                                                            'LocalFree',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ResumeThread',
                                                                                            'OpenProcess',
                                                                                            'VirtualFreeEx',
                                                                                            'ReadProcessMemory',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'LoadLibraryExA',
                                                                                            'FindFirstFileA',
                                                                                            'GlobalAlloc',
                                                                                            'LoadResource',
                                                                                            'GetTempFileNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'FindClose',
                                                                                            'GetVersionExA',
                                                                                            'GlobalLock',
                                                                                            'GetTimeFormatA',
                                                                                            'GetTempPathA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FormatMessageA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FindNextFileA',
                                                                                            'FindResourceA',
                                                                                            'GetDateFormatA',
                                                                                            'GlobalUnlock',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetMessageA',
                                                                                            'DrawTextExA',
                                                                                            'IsDialogMessageA',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'MessageBoxA',
                                                                                            'DispatchMessageA',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'InvalidateRect',
                                                                                            'SetDlgItemInt',
                                                                                            'GetClientRect',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'DeferWindowPos',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowRect',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'RegisterClassA',
                                                                                            'UpdateWindow',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetWindowPos',
                                                                                            'LoadIconA',
                                                                                            'LoadImageA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'SetClipboardData',
                                                                                            'EnableWindow',
                                                                                            'EmptyClipboard',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'GetMenu',
                                                                                            'GetCursorPos',
                                                                                            'MoveWindow',
                                                                                            'GetDC',
                                                                                            'GetSysColor',
                                                                                            'CheckMenuItem',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'EnumChildWindows',
                                                                                            'GetMenuItemInfoA',
                                                                                            'GetWindowTextA',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'LoadStringA',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgCtrlID',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetFocus',
                                                                                            'BeginDeferWindowPos',
                                                                                            'TrackPopupMenu',
                                                                                            'PostQuitMessage',
                                                                                            'TranslateMessage',
                                                                                            'GetDlgItemInt',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'FindTextA',
                                                                                            'GetSaveFileNameA',
                                                                                            'CryptDecrypt',
                                                                                            'CryptCreateHash',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptAcquireContextA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyA',
                                                                                            'CryptDeriveKey',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetMalloc',
                                                                                            'ShellExecuteA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 214,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 16292,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 70144},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1af8e45337900146089a025fb0f0c45a2738841dcbb547a85212d202e550672d'},
 '1b0827e93dfec06d54b8504a3e5d9c73f227e24d7b5481e5435e09cacb391f6d': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9660,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 9728,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1b0827e93dfec06d54b8504a3e5d9c73f227e24d7b5481e5435e09cacb391f6d'},
 '1b0cfdff377f1ddae9a3f21461df10d138bf248cfc9703bf2929bb3b8640c345': {'AddressOfEntryPoint': 769184,
                                                                      'DebugRVA': 985648,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 1200384,
                                                                      'ExportSize': 251,
                                                                      'IATRVA': 983040,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetTokenInformation',
                                                                                      'KERNEL32.dll': 'LocalAlloc',
                                                                                      'PSAPI.DLL': 'QueryWorkingSet',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'USERENV.dll': 'DestroyEnvironmentBlock',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'timeBeginPeriod'},
                                                                      'ImportedFunctions': ['GetUserDefaultUILanguage',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetTickCount',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetInformationJobObject',
                                                                                            'WaitForSingleObject',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSection',
                                                                                            'TerminateJobObject',
                                                                                            'SetEvent',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'ResetEvent',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'DeleteCriticalSection',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'ResumeThread',
                                                                                            'SignalObjectAndWait',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'WriteProcessMemory',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetThreadContext',
                                                                                            'AssignProcessToJobObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'CreateJobObjectW',
                                                                                            'CreateMutexW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleW',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'VirtualProtectEx',
                                                                                            'CreateNamedPipeW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'VirtualQuery',
                                                                                            'ReadProcessMemory',
                                                                                            'GetLongPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'QueryDosDeviceW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ReleaseMutex',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringA',
                                                                                            'FormatMessageA',
                                                                                            'MultiByteToWideChar',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'CompareFileTime',
                                                                                            'MoveFileExW',
                                                                                            'ReplaceFileW',
                                                                                            'CopyFileW',
                                                                                            'GetFileAttributesExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindClose',
                                                                                            'CreateDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetStdHandle',
                                                                                            'AllocConsole',
                                                                                            'AttachConsole',
                                                                                            'OpenProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetProcessIoCounters',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'SetPriorityClass',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'GetProcessHeaps',
                                                                                            'GetProcessId',
                                                                                            'GetProcessTimes',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'SetHandleInformation',
                                                                                            'CreatePipe',
                                                                                            'RaiseException',
                                                                                            'IsDebuggerPresent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TryEnterCriticalSection',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointerEx',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetCurrentThread',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitNamedPipeW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'GetDateFormatW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapFree',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetFullPathNameW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetModuleFileNameA',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'TlsAlloc',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'FatalAppExitA',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetFullPathNameA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetTempPathW',
                                                                                            'LocalFree',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'WaitForInputIdle',
                                                                                            'MessageBoxW',
                                                                                            'wsprintfW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetKeyState',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDesktopWindow',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'UserHandleGrantAccess',
                                                                                            'CreateWindowStationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'CreateDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'CharUpperW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHChangeNotify',
                                                                                            'SHFileOperationW',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHDeleteEmptyKeyW',
                                                                                            'UrlCanonicalizeW',
                                                                                            'SHStrDupW',
                                                                                            'SHDeleteKeyW',
                                                                                            'PathFileExistsW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime',
                                                                                            'timeBeginPeriod',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetMappedFileNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'QueryWorkingSet',
                                                                                            'RegCloseKey',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'RevertToSelf',
                                                                                            'SetSecurityInfo',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenProcessToken',
                                                                                            'SetThreadToken',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateRestrictedToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'DuplicateToken',
                                                                                            'RegOpenKeyExW',
                                                                                            'EqualSid',
                                                                                            'TraceEvent',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'GetTokenInformation'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 291,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 176168,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10240,
                                                                                       '.pdata\x00\x00': 69632,
                                                                                       '.rdata\x00\x00': 217600,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 176640,
                                                                                       '.text\x00\x00\x00': 978944,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1b0cfdff377f1ddae9a3f21461df10d138bf248cfc9703bf2929bb3b8640c345'},
 '1b50d0858bb5662ccd46881a856bf7cb9be2fca6eacf4ae675e741a5c4966be9': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 339820,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 339968,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1b50d0858bb5662ccd46881a856bf7cb9be2fca6eacf4ae675e741a5c4966be9'},
 '1b5621c68261f4f97e9852f8f2799e00c9694865f488c40223abf9ebdfed37ed': {'AddressOfEntryPoint': 1074040274,
                                                                      'DebugRVA': 25312,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'jli.dll': 'JLI_MemFree',
                                                                                      'msvcrt.dll': '_strnicmp'},
                                                                      'ImportedFunctions': ['JLI_ExactVersionId',
                                                                                            'JLI_JarUnpackFile',
                                                                                            'JLI_StringDup',
                                                                                            'JLI_ParseManifest',
                                                                                            'JLI_ValidVersionString',
                                                                                            'JLI_AcceptableRelease',
                                                                                            'JLI_FreeManifest',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_MemFree',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            '_beginthreadex',
                                                                                            '_putenv',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'fflush',
                                                                                            '_errno',
                                                                                            'strerror',
                                                                                            'strchr',
                                                                                            'fgets',
                                                                                            'strcspn',
                                                                                            'strspn',
                                                                                            'strrchr',
                                                                                            'fopen',
                                                                                            'fwrite',
                                                                                            'fread',
                                                                                            'fclose',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'memset',
                                                                                            'getenv',
                                                                                            'strcmp',
                                                                                            'exit',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'printf',
                                                                                            'sprintf',
                                                                                            'memcpy',
                                                                                            'strncmp',
                                                                                            'sscanf',
                                                                                            'strlen',
                                                                                            '_access',
                                                                                            '_stat',
                                                                                            '_strnicmp',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'LocalFree',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetExitCodeProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetExitCodeThread',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2008,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1b5621c68261f4f97e9852f8f2799e00c9694865f488c40223abf9ebdfed37ed'},
 '1ba4df646c590d5a0595ed0f33e764e79535ccc5335057827214c716cd2a982d': {'AddressOfEntryPoint': 65636,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'ExAllocatePoolWithTag'},
                                                                      'ImportedFunctions': ['ExFreePoolWithTag',
                                                                                            'RtlUpperChar',
                                                                                            'IoAttachDevice',
                                                                                            'KeBugCheckEx',
                                                                                            'ExAllocatePoolWithTag'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 5,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8704,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 34304,
                                                                                       'INIT\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/1ba4df646c590d5a0595ed0f33e764e79535ccc5335057827214c716cd2a982d'},
 '1baa26354e41f811119b4c61a64d156d3c05f7b60f97976110fff40db3e24121': {'AddressOfEntryPoint': 5008,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3226840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3227136,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1baa26354e41f811119b4c61a64d156d3c05f7b60f97976110fff40db3e24121'},
 '1c14ade9d37a71d33dfb45c7d72f9f4b6a6ac3be425d723b4272b5cbe1ac735c': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3484,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1c14ade9d37a71d33dfb45c7d72f9f4b6a6ac3be425d723b4272b5cbe1ac735c'},
 '1c22680620514ba964277970ef4f2337cba95f2ee888ce2ba7fcc79696ceaf85': {'AddressOfEntryPoint': 231175,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'KERNEL32.dll': 'GetSystemInfo',
                                                                                      'USER32.dll': 'LoadIconA'},
                                                                      'ImportedFunctions': ['lstrcpyA',
                                                                                            'lstrcpynA',
                                                                                            'CreateProcessA',
                                                                                            'VirtualQuery',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapCreate',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'SetStdHandle',
                                                                                            'ReadFile',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'LoadIconA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 43784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 24576,
                                                                                       '.rsrc\x00\x00\x00': 71680,
                                                                                       '.text\x00\x00\x00': 73728,
                                                                                       'atqsigf\x00': 0,
                                                                                       'tubjntj\x00': 31232},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1c22680620514ba964277970ef4f2337cba95f2ee888ce2ba7fcc79696ceaf85'},
 '1c3d5f48f9abdb8bc3ef5cb84c8652ca1516bdd7c78d3fc972adcedad55df69d': {'AddressOfEntryPoint': 125112,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 598016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LogonUserW',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocDescriptorEx',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetReadFile',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['WSACleanup',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'select',
                                                                                            'accept',
                                                                                            '__WSAFDIsSet',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetConnectW',
                                                                                            'FtpOpenFileW',
                                                                                            'HttpQueryInfoW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetOpenW',
                                                                                            'InternetReadFile',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'CreatePipe',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'IsCharUpperW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'CharUpperBuffW',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursor',
                                                                                            'WindowFromPoint',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'EnumThreadWindows',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'FindWindowW',
                                                                                            'CloseClipboard',
                                                                                            'DestroyWindow',
                                                                                            'RoundRect',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'GetDIBits',
                                                                                            'DeleteDC',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'SetBkMode',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'GetAce',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'GetAclInformation',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetVartype',
                                                                                            'OleLoadPicture',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayAllocDescriptorEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 506,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 16216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 25600,
                                                                                       '.rdata\x00\x00': 86528,
                                                                                       '.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 590848},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/1c3d5f48f9abdb8bc3ef5cb84c8652ca1516bdd7c78d3fc972adcedad55df69d'},
 '1c4b22b2601bb190b754c12e45dbe9413dfc98ecfe632b0e187da35954236d92': {'AddressOfEntryPoint': 359424,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 305568,
                                                                      'ExportSize': 2012,
                                                                      'IATRVA': 249856,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'USER32.dll': 'CharToOemA',
                                                                                      'WSOCK32.dll': 'accept'},
                                                                      'ImportedFunctions': ['ioctlsocket',
                                                                                            'gethostbyname',
                                                                                            'htons',
                                                                                            'connect',
                                                                                            'setsockopt',
                                                                                            'select',
                                                                                            'WSAGetLastError',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'bind',
                                                                                            'listen',
                                                                                            'accept',
                                                                                            'CharToOemA',
                                                                                            'HeapFree',
                                                                                            'DuplicateHandle',
                                                                                            'CreateDirectoryA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'SetEndOfFile',
                                                                                            'SetStdHandle',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateFileA',
                                                                                            'GetLocalTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetVersionExA',
                                                                                            'FlushInstructionCache',
                                                                                            'VirtualProtectEx',
                                                                                            'ReadProcessMemory',
                                                                                            'WriteProcessMemory',
                                                                                            'SuspendThread',
                                                                                            'ResumeThread',
                                                                                            'DebugActiveProcess',
                                                                                            'ContinueDebugEvent',
                                                                                            'SetThreadContext',
                                                                                            'GetThreadContext',
                                                                                            'TerminateProcess',
                                                                                            'GetThreadSelectorEntry',
                                                                                            'GetModuleHandleA',
                                                                                            'WaitForDebugEvent',
                                                                                            'SetEvent',
                                                                                            'VirtualQueryEx',
                                                                                            'GetSystemInfo',
                                                                                            'CreateProcessA',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetLogicalDriveStringsA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageA',
                                                                                            'GetTempPathA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'FindClose',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FindFirstFileA',
                                                                                            'GetCommandLineA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'RtlCaptureContext',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapSize',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FlushFileBuffers',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'InitializeCriticalSection',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 21504,
                                                                                       '.rdata\x00\x00': 57856,
                                                                                       '.text\x00\x00\x00': 245760},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1c4b22b2601bb190b754c12e45dbe9413dfc98ecfe632b0e187da35954236d92'},
 '1cbf329b143a0932064dc1ade7da9657fa218779dc99b140be6a986e17a09e11': {'AddressOfEntryPoint': 330024,
                                                                      'DebugRVA': 452544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 556704,
                                                                      'ExportSize': 251,
                                                                      'IATRVA': 450560,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CopySid',
                                                                                      'KERNEL32.dll': 'RaiseException',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime'},
                                                                      'ImportedFunctions': ['PathRemoveFileSpecW',
                                                                                            'PathFileExistsW',
                                                                                            'GetTickCount',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetInformationJobObject',
                                                                                            'WaitForSingleObject',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSection',
                                                                                            'TerminateJobObject',
                                                                                            'SetEvent',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'ResetEvent',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'DeleteCriticalSection',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetHandleInformation',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'WriteProcessMemory',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetThreadContext',
                                                                                            'AssignProcessToJobObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'VirtualProtectEx',
                                                                                            'GetLongPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateFileW',
                                                                                            'QueryDosDeviceW',
                                                                                            'CreateJobObjectW',
                                                                                            'CreateMutexW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateNamedPipeW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'VirtualQuery',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ReleaseMutex',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringA',
                                                                                            'FormatMessageA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ReadFile',
                                                                                            'VirtualAlloc',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'IsDebuggerPresent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FlushFileBuffers',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitNamedPipeW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapFree',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapAlloc',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleFileNameA',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'LoadLibraryA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateFileA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetTempPathW',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'RaiseException',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'CreateWindowStationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'CreateDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'MessageBoxW',
                                                                                            'CharUpperW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'RegCloseKey',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'RevertToSelf',
                                                                                            'SetSecurityInfo',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenProcessToken',
                                                                                            'SetThreadToken',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegCreateKeyExW',
                                                                                            'CreateRestrictedToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'DuplicateToken',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'TraceEvent',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 213,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2004,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10752,
                                                                                       '.pdata\x00\x00': 27136,
                                                                                       '.rdata\x00\x00': 106496,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 442880,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1cbf329b143a0932064dc1ade7da9657fa218779dc99b140be6a986e17a09e11'},
 '1d26329a19713971dd82b2a3e5e3deb38df996095365e09d68ec71596ec4a1dc': {'AddressOfEntryPoint': 41871,
                                                                      'DebugRVA': 8528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 486539264,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR80.dll': '__setusermatherr',
                                                                                      'python26.dll': 'Py_Main'},
                                                                      'ImportedFunctions': ['Py_Main',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '_XcptFilter',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__argv',
                                                                                            '__argc',
                                                                                            '__setusermatherr',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 20636,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 48640,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 2000000,
                                                                      'filename': './data/malware/1d26329a19713971dd82b2a3e5e3deb38df996095365e09d68ec71596ec4a1dc'},
 '1d278653e0cbe848bf17fe3f778cfa38e9a79a507a231b1ef76dd62fb69ac5f5': {'AddressOfEntryPoint': 1789960,
                                                                      'DebugRVA': 1524288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1523712,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 896,
                                                                      'SectionNames': {'.aot\x00\x00\x00\x00': 47616,
                                                                                       '.data\x00\x00\x00': 53760,
                                                                                       '.pdata\x00\x00': 50688,
                                                                                       '.rdata\x00\x00': 153088,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 1458688,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'init\x00\x00\x00\x00': 512,
                                                                                       'page\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/1d278653e0cbe848bf17fe3f778cfa38e9a79a507a231b1ef76dd62fb69ac5f5'},
 '1d911f1eb16af290edad1219a45875f30693d6a36af322934cc597f0073f6457': {'AddressOfEntryPoint': 48472,
                                                                      'DebugRVA': 87360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 96768,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'DosDateTimeToFileTime',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalAlloc',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'wvsprintfA',
                                                                                            'wvsprintfW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClassNameW',
                                                                                            'DialogBoxParamW',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'LoadBitmapW',
                                                                                            'LoadIconW',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'CharUpperA',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharToOemBuffW',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'CharUpperW',
                                                                                            'FindWindowExW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteExW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 88852,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 89088,
                                                                                       '.text\x00\x00\x00': 80384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1d911f1eb16af290edad1219a45875f30693d6a36af322934cc597f0073f6457'},
 '1d94a265bb89f2f1155e2066c4585455f31dd0607772e930f04e9204e6889db6': {'AddressOfEntryPoint': 35132,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1d94a265bb89f2f1155e2066c4585455f31dd0607772e930f04e9204e6889db6'},
 '1e05bc15c50398089c5e2bebd15ddbc5c07e382e181041c575481a4f2a3f2e62': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 346856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 630784,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1e05bc15c50398089c5e2bebd15ddbc5c07e382e181041c575481a4f2a3f2e62'},
 '1e70874eff6d7ca829968eca23f6c43478488d12442ba676227ad7a47cb9ba06': {'AddressOfEntryPoint': 484736,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 585728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'GetActiveObject',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'SetKeyboardState',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'listen',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'listen',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'waveOutSetVolume',
                                                                                            'timeGetTime',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Remove',
                                                                                            'WNetUseConnectionW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenProcess',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'SetSystemPowerState',
                                                                                            'SetFileTime',
                                                                                            'FindResourceW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadResource',
                                                                                            'FindFirstFileW',
                                                                                            'LockResource',
                                                                                            'FindClose',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'CreatePipe',
                                                                                            'GetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'VirtualFree',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'DeviceIoControl',
                                                                                            'SetErrorMode',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'GetShortPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'Beep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileSize',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'HeapFree',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'PtInRect',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowDC',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateMenu',
                                                                                            'GetSysColor',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetActiveWindow',
                                                                                            'InflateRect',
                                                                                            'CharNextW',
                                                                                            'DrawFocusRect',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CountClipboardFormats',
                                                                                            'CharLowerBuffW',
                                                                                            'UnregisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'FillRect',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'IsCharLowerW',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'GetCursor',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'GetAsyncKeyState',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'CopyRect',
                                                                                            'BeginPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'DrawFrameControl',
                                                                                            'FrameRect',
                                                                                            'RedrawWindow',
                                                                                            'DrawTextW',
                                                                                            'wsprintfW',
                                                                                            'FlashWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'IsZoomed',
                                                                                            'GetCaretPos',
                                                                                            'GetSubMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetMenuStringW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharUpperW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetKeyboardState',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DestroyIcon',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetDC',
                                                                                            'WindowFromPoint',
                                                                                            'SetClipboardData',
                                                                                            'VkKeyScanA',
                                                                                            'EmptyClipboard',
                                                                                            'SetKeyboardState',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CloseFigure',
                                                                                            'SetPixel',
                                                                                            'EndPath',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'ExtCreatePen',
                                                                                            'PolyBezierTo',
                                                                                            'SetViewportOrgEx',
                                                                                            'Rectangle',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'SHFileOperationW',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'GetActiveObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 459,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 14092,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.pdata\x00\x00': 19456,
                                                                                       '.rdata\x00\x00': 81920,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 580096},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/1e70874eff6d7ca829968eca23f6c43478488d12442ba676227ad7a47cb9ba06'},
 '1ebebe4cf789d000f700d89be46dbbfc2b1edca283dc4e2e46eeb0a6d1133144': {'AddressOfEntryPoint': 1073973013,
                                                                      'DebugRVA': 116080,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyW',
                                                                                      'KERNEL32.dll': 'FreeEnvironmentStringsW',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'SHLWAPI.dll': 'StrCatW',
                                                                                      'USER32.dll': 'LoadImageW',
                                                                                      'accelerometerDLL.dll': '?FindAccelerometerDevice@@YAEPEAPEAX@Z',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['?IsSoftwareEnabled@@YAKPEAXPEAE@Z',
                                                                                            '?RegisterForAccelerometerEnabledEvent@@YAPEAXPEAUHWND__@@PEAX@Z',
                                                                                            '?GetAccelerometerProperty@@YAKPEAXW4_ACCELEROMETER_PROPERTY_FLAGS@@0@Z',
                                                                                            '?FindAccelerometerDevice@@YAEPEAPEAX@Z',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'lstrcmpiW',
                                                                                            'RaiseException',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'LockResource',
                                                                                            'FindResourceExW',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenW',
                                                                                            'GetProcAddress',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'FlsAlloc',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'CharUpperW',
                                                                                            'ShowWindow',
                                                                                            'IsIconic',
                                                                                            'SetForegroundWindow',
                                                                                            'FindWindowW',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'PostThreadMessageW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'LoadImageW',
                                                                                            'RegEnumKeyExW',
                                                                                            'TraceMessage',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFileInfoW',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'LoadRegTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'StrCatW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 146,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 66624,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 31744,
                                                                                       '.text\x00\x00\x00': 109056,
                                                                                       'Ѡ\x03\x00c\x00\x00\x00': 67072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/1ebebe4cf789d000f700d89be46dbbfc2b1edca283dc4e2e46eeb0a6d1133144'},
 '1f02b810f254fda92c1f45203b5f204d6dc7b27e92d832ccb633de5d790492fc': {'AddressOfEntryPoint': 241732,
                                                                      'DebugRVA': 70896,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'MSVCR80.dll': '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'WS2_32.dll': 'inet_ntoa'},
                                                                      'ImportedFunctions': ['SetThreadAffinityMask',
                                                                                            'GetConsoleCP',
                                                                                            'SetConsoleCP',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeThread',
                                                                                            'IsDebuggerPresent',
                                                                                            'DuplicateHandle',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentProcessId',
                                                                                            'SleepEx',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'CloseHandle',
                                                                                            'GetComputerNameA',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemInfo',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            '_stricmp',
                                                                                            '_lseek',
                                                                                            'strcpy_s',
                                                                                            'strncpy_s',
                                                                                            'strtoul',
                                                                                            'sprintf_s',
                                                                                            'strcat_s',
                                                                                            'getenv',
                                                                                            '_set_invalid_parameter_handler',
                                                                                            'atoi',
                                                                                            'strrchr',
                                                                                            'setlocale',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__lconv_init',
                                                                                            '_atoi64',
                                                                                            '_putenv',
                                                                                            'toupper',
                                                                                            '_fullpath',
                                                                                            'bsearch',
                                                                                            'qsort',
                                                                                            'perror',
                                                                                            'getc',
                                                                                            'strtok',
                                                                                            'abort',
                                                                                            'strspn',
                                                                                            'strpbrk',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'strtol',
                                                                                            '_get_osfhandle',
                                                                                            '_beginthreadex',
                                                                                            '_endthreadex',
                                                                                            'strstr',
                                                                                            'fprintf',
                                                                                            '_strnicmp',
                                                                                            '_fmode',
                                                                                            'realloc',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'free',
                                                                                            'strncpy',
                                                                                            'exit',
                                                                                            'scanf',
                                                                                            'fflush',
                                                                                            '__iob_func',
                                                                                            'sprintf',
                                                                                            'printf',
                                                                                            'memset',
                                                                                            'fread',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'strchr',
                                                                                            'calloc',
                                                                                            '_errno',
                                                                                            'memcpy',
                                                                                            '_splitpath',
                                                                                            '_fileno',
                                                                                            '_strdup',
                                                                                            '_CxxThrowException',
                                                                                            '_vsnprintf',
                                                                                            '_finite',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'VariantClear',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'getservbyname',
                                                                                            'htons',
                                                                                            'gethostbyaddr',
                                                                                            'getservbyport',
                                                                                            'htonl',
                                                                                            'WSASetLastError',
                                                                                            'WSAEnumProtocolsA',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'inet_addr',
                                                                                            'WSAGetLastError',
                                                                                            'gethostbyname',
                                                                                            'ntohs',
                                                                                            'inet_ntoa'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 141,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 38912,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.rdata\x00\x00': 71168,
                                                                                       '.reloc\x00\x00': 12288,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 64000,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 33554432,
                                                                      'filename': './data/malware/1f02b810f254fda92c1f45203b5f204d6dc7b27e92d832ccb633de5d790492fc'},
 '1f0ddacd24cea4cbc15927edb18b4fb78e206ca896fc7855c53f6ec2cdadc099': {'AddressOfEntryPoint': 129992,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 614400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'HttpQueryInfoW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['WSACleanup',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'select',
                                                                                            'accept',
                                                                                            '__WSAFDIsSet',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'HttpQueryInfoW',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'LoadUserProfileW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'HeapFree',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'PulseEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleFileNameA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'CreatePipe',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'IsCharUpperW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetClipboardData',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'CopyRect',
                                                                                            'CharUpperBuffW',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ReleaseDC',
                                                                                            'EnumThreadWindows',
                                                                                            'GetDC',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'IsIconic',
                                                                                            'GetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'GetPixel',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'GetDIBits',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'DeleteDC',
                                                                                            'GetObjectW',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'AddAce',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'SafeArrayDestroyData',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetVartype',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 512,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 92760,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 27136,
                                                                                       '.rdata\x00\x00': 88576,
                                                                                       '.rsrc\x00\x00\x00': 93184,
                                                                                       '.text\x00\x00\x00': 608256},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/1f0ddacd24cea4cbc15927edb18b4fb78e206ca896fc7855c53f6ec2cdadc099'},
 '1f56d5e7a22c2b767b000100d80dacc0f63a7a4a5039c67b015d205c8aa5c0e4': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 130372,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 130560,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1f56d5e7a22c2b767b000100d80dacc0f63a7a4a5039c67b015d205c8aa5c0e4'},
 '1ff97b0d790e7d34e4f4c4b18154cf90ff82a4d5e66665b893ec3bb3ea8c1bf8': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 508784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 508928,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/1ff97b0d790e7d34e4f4c4b18154cf90ff82a4d5e66665b893ec3bb3ea8c1bf8'},
 '201f26b787fb7913b384fc266f649bc698e0465d7d27b5bf27c7c2aa7f538b62': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 18101248,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/201f26b787fb7913b384fc266f649bc698e0465d7d27b5bf27c7c2aa7f538b62'},
 '202096bde5a417f4c9546d8263cd836fffc61b806cde45e3830df7bc83c6b247': {'AddressOfEntryPoint': 225512,
                                                                      'DebugRVA': 238368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 237568,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionBind',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoCancelIrp',
                                                                                            'PoSetPowerState',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IoDetachDevice',
                                                                                            'wcsstr',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 968,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 231936,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/202096bde5a417f4c9546d8263cd836fffc61b806cde45e3830df7bc83c6b247'},
 '202377640777e1416e1c6082eb4a2a885c14a70cfb26556eb881de173a3174f7': {'AddressOfEntryPoint': 35132,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/202377640777e1416e1c6082eb4a2a885c14a70cfb26556eb881de173a3174f7'},
 '20255538932444661fb16979d0ac347fba388a07e1c096cc6b74710a7ad61ce1': {'AddressOfEntryPoint': 357560,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 347912,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'hal.dll': 'HalMakeBeep',
                                                                                      'ntoskrnl.exe': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['PsGetVersion',
                                                                                            'PsGetCurrentThreadId',
                                                                                            'PsGetCurrentProcessId',
                                                                                            '__C_specific_handler',
                                                                                            'ProbeForWrite',
                                                                                            'KeDelayExecutionThread',
                                                                                            'ProbeForRead',
                                                                                            '_wcsnicmp',
                                                                                            '_stricmp',
                                                                                            'RtlDeleteRegistryValue',
                                                                                            'strstr',
                                                                                            'strrchr',
                                                                                            'strncpy',
                                                                                            '_strnicmp',
                                                                                            'PsDereferencePrimaryToken',
                                                                                            'RtlEqualSid',
                                                                                            'SeQueryInformationToken',
                                                                                            'PsReferencePrimaryToken',
                                                                                            'PsSetCreateProcessNotifyRoutine',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IofCompleteRequest',
                                                                                            '__chkstk',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoCreateDevice',
                                                                                            'PsSetLoadImageNotifyRoutine',
                                                                                            'ZwClose',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ExAcquireFastMutex',
                                                                                            'ZwCreateFile',
                                                                                            'KeInitializeEvent',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'MmIsAddressValid',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'ZwOpenFile',
                                                                                            'MmUnmapViewInSystemSpace',
                                                                                            'MmMapViewInSystemSpace',
                                                                                            'MmCreateSection',
                                                                                            'ZwQueryInformationThread',
                                                                                            'ZwOpenThread',
                                                                                            'PsGetProcessInheritedFromUniqueProcessId',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'PsGetProcessImageFileName',
                                                                                            'ObQueryNameString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'KeStackAttachProcess',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'PsGetProcessCreateTimeQuadPart',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'ZwQuerySymbolicLinkObject',
                                                                                            'ZwOpenSymbolicLinkObject',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'PsIsThreadTerminating',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'PsGetProcessId',
                                                                                            'PsGetThreadProcess',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwOpenDirectoryObject',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'tolower',
                                                                                            'strchr',
                                                                                            'PsGetProcessWin32Process',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            'ObOpenObjectByPointer',
                                                                                            'PsGetProcessSectionBaseAddress',
                                                                                            'ZwOpenProcessTokenEx',
                                                                                            'wcschr',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'ZwQueryObject',
                                                                                            'wcsncpy',
                                                                                            'IoQueryFileDosDeviceName',
                                                                                            'PsGetCurrentProcessSessionId',
                                                                                            'CmRegisterCallback',
                                                                                            'PsGetThreadTeb',
                                                                                            'PsLookupThreadByThreadId',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'PsGetProcessPeb',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlCreateUnicodeString',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'ZwSetInformationProcess',
                                                                                            'RtlLengthSid',
                                                                                            'ZwAssignProcessToJobObject',
                                                                                            'ZwSetInformationJobObject',
                                                                                            'ZwCreateJobObject',
                                                                                            'PsGetProcessJob',
                                                                                            'ZwTerminateProcess',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlGetAce',
                                                                                            'ZwSetSecurityObject',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'ZwQuerySecurityObject',
                                                                                            'SeTokenIsRestricted',
                                                                                            'SeFilterToken',
                                                                                            'ObfReferenceObject',
                                                                                            'ZwCreateKey',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlFormatCurrentUserKeyPath',
                                                                                            'IoGetCurrentProcess',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeBugCheckEx',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ZwConnectPort',
                                                                                            'LpcRequestWaitReplyPort',
                                                                                            'ObfDereferenceObject',
                                                                                            'ZwQueryInformationToken',
                                                                                            '_vsnprintf',
                                                                                            'IoAllocateMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmUnlockPages',
                                                                                            'IoFreeMdl',
                                                                                            'ExAllocatePool',
                                                                                            'ExFreePool',
                                                                                            'NtQuerySystemInformation',
                                                                                            'HalMakeBeep'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 132,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.Shltr0\x00': 0,
                                                                                       '.Shltr1\x00': 1024,
                                                                                       '.Shltr2\x00': 0,
                                                                                       '.Shltr3\x00': 168448,
                                                                                       '.data\x00\x00\x00': 0,
                                                                                       '.pdata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 0,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 0,
                                                                                       'INIT\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/20255538932444661fb16979d0ac347fba388a07e1c096cc6b74710a7ad61ce1'},
 '20866850568dd3d2d4ff5d856cd258628cd037f8abb2cffc4d8ab77aa8afde1a': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 77824,
                                                                      'ExportSize': 12984088,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetVolumeInformationA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileA',
                                                                                            '_lclose',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetProcAddress',
                                                                                            '_llseek',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CompareStringA',
                                                                                            'LoadLibraryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetPrivateProfileIntA',
                                                                                            '_lopen',
                                                                                            'GetShortPathNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WriteFile',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVersionExA',
                                                                                            'SetFilePointer',
                                                                                            'GetVersion',
                                                                                            'FreeResource',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CreateDirectoryA',
                                                                                            'TerminateThread',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'LockResource',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetEvent',
                                                                                            'ReadFile',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetDeviceCaps',
                                                                                            'CallWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextA',
                                                                                            'DispatchMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDC',
                                                                                            'SetWindowPos',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'EndDialog',
                                                                                            'CharNextA',
                                                                                            'GetDesktopWindow',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'LoadStringA',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12985100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 12985344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/20866850568dd3d2d4ff5d856cd258628cd037f8abb2cffc4d8ab77aa8afde1a'},
 '20a8f15ef6186413536aad11334983eb0b5036f6f89ece87b2a5d5896b229959': {'AddressOfEntryPoint': 56604,
                                                                      'DebugRVA': 144496,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 143360,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'SetWindowsHookExA'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetModuleFileNameA',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LocalAlloc',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'LocalFree',
                                                                                            'ReleaseSemaphore',
                                                                                            'ReleaseMutex',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetLastError',
                                                                                            'GetVersionExA',
                                                                                            'IsWow64Process',
                                                                                            'OpenProcess',
                                                                                            'Thread32Next',
                                                                                            'Thread32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 103,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 41984,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 137728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/20a8f15ef6186413536aad11334983eb0b5036f6f89ece87b2a5d5896b229959'},
 '20bef119489f0e10041056dd738f8ff65db07f5b55fa0ecf9bc917bc7705e7c7': {'AddressOfEntryPoint': 5016,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 45,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2845508,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2845696,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/20bef119489f0e10041056dd738f8ff65db07f5b55fa0ecf9bc917bc7705e7c7'},
 '20bf7eb38d34e46099e08eb3394383f1c0ed21686b89d3c0ae74829babdadad0': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 141908,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 142336,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/20bf7eb38d34e46099e08eb3394383f1c0ed21686b89d3c0ae74829babdadad0'},
 '20d6d009cee8bb1f4c8fe280a03d181a21d40b80cf0f08c4309240035c955e39': {'AddressOfEntryPoint': 3221233868,
                                                                      'DebugRVA': 4656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RtlCaptureContext',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA'},
                                                                      'ImportedFunctions': ['GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'SetFilePointer',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'CloseHandle',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 27648,
                                                                                       'V5\x00\x00ta\x00\x00': 2048},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/20d6d009cee8bb1f4c8fe280a03d181a21d40b80cf0f08c4309240035c955e39'},
 '210fc1511f475c1d448ba4693d99487b70ca50b2448c482026aa1c7e87d9424a': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/210fc1511f475c1d448ba4693d99487b70ca50b2448c482026aa1c7e87d9424a'},
 '21a99040697696e8095e3a442303c12c1e8ebfa481fd13c16086220d505c502e': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 39104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 39424,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/21a99040697696e8095e3a442303c12c1e8ebfa481fd13c16086220d505c502e'},
 '21e4eb7c65655256ddeeac4de8f3e1f6178f4cfc5a7387ceb9cd9948ade15f38': {'AddressOfEntryPoint': 1073764093,
                                                                      'DebugRVA': 12928,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'msvcrt.dll': '_mbschr',
                                                                                      'ole32.dll': 'StringFromCLSID'},
                                                                      'ImportedFunctions': ['RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegCloseKey',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_splitpath',
                                                                                            '__set_app_type',
                                                                                            '__argc',
                                                                                            'memset',
                                                                                            '_putenv',
                                                                                            '__CxxFrameHandler',
                                                                                            'calloc',
                                                                                            'free',
                                                                                            '_stat',
                                                                                            '_snprintf',
                                                                                            'printf',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_mbslwr',
                                                                                            '_mbsnbcmp',
                                                                                            '_mbscmp',
                                                                                            '_mbsstr',
                                                                                            '_mbsrchr',
                                                                                            '_mbsnbcpy',
                                                                                            '__argv',
                                                                                            '_mbschr',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrlenW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetLongPathNameA',
                                                                                            'GetVersionExA',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateProcessA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'wsprintfA',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1712,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/21e4eb7c65655256ddeeac4de8f3e1f6178f4cfc5a7387ceb9cd9948ade15f38'},
 '222a7bc35cc02800086c6cd9ed36fff7e90672ea2c0d1593b5e4728b2424e9a7': {'AddressOfEntryPoint': 670281,
                                                                      'DebugRVA': 418144,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 413696,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'COMCTL32.dll': 'ImageList_Merge',
                                                                                      'GDI32.dll': 'Escape',
                                                                                      'KERNEL32.dll': 'lstrcpyA',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ExtractIconA',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterA',
                                                                                      'comdlg32.dll': 'GetOpenFileNameA',
                                                                                      'ole32.dll': 'OleSetClipboard'},
                                                                      'ImportedFunctions': ['GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'GetStdHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoW',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapFree',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'CopyFileA',
                                                                                            'GlobalSize',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetFileTime',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTickCount',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'lstrlenW',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'CreateFileA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'WriteFile',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'GetShortPathNameA',
                                                                                            'GetStringTypeExA',
                                                                                            'DeleteFileA',
                                                                                            'MoveFileA',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'SetErrorMode',
                                                                                            'GetThreadLocale',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsFree',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'LocalAlloc',
                                                                                            'GetProcessVersion',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'GetLastError',
                                                                                            'GlobalFlags',
                                                                                            'MulDiv',
                                                                                            'SetLastError',
                                                                                            'CreateEventA',
                                                                                            'SuspendThread',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'ResumeThread',
                                                                                            'SetThreadPriority',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentThread',
                                                                                            'GlobalAlloc',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'lstrcmpiA',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalFindAtomA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'lstrcatA',
                                                                                            'lstrcpynA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExA',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'FreeResource',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'lstrcmpA',
                                                                                            'lstrlenA',
                                                                                            'FatalAppExitA',
                                                                                            'lstrcpyA',
                                                                                            'SetRect',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MessageBeep',
                                                                                            'TranslateAcceleratorA',
                                                                                            'SetMenu',
                                                                                            'BringWindowToTop',
                                                                                            'SetRectEmpty',
                                                                                            'InvalidateRect',
                                                                                            'LoadAcceleratorsA',
                                                                                            'LoadMenuA',
                                                                                            'ReuseDDElParam',
                                                                                            'UnpackDDElParam',
                                                                                            'CharUpperA',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'RemoveMenu',
                                                                                            'PostThreadMessageA',
                                                                                            'DestroyIcon',
                                                                                            'ReleaseCapture',
                                                                                            'WindowFromPoint',
                                                                                            'SetCapture',
                                                                                            'InflateRect',
                                                                                            'LoadCursorA',
                                                                                            'GetSysColorBrush',
                                                                                            'GetDialogBaseUnits',
                                                                                            'PtInRect',
                                                                                            'GetDesktopWindow',
                                                                                            'GetClassNameA',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'LoadStringA',
                                                                                            'DestroyMenu',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'ValidateRect',
                                                                                            'GetCursorPos',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetCursor',
                                                                                            'PostQuitMessage',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'wvsprintfA',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'ModifyMenuA',
                                                                                            'GetMenuState',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapA',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'CharNextA',
                                                                                            'ScrollWindowEx',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDlgItemInt',
                                                                                            'CheckRadioButton',
                                                                                            'CheckDlgButton',
                                                                                            'OemToCharA',
                                                                                            'CharToOemA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetCapture',
                                                                                            'WinHelpA',
                                                                                            'CreateWindowExA',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassLongA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'DispatchMessageA',
                                                                                            'GetFocus',
                                                                                            'SetFocus',
                                                                                            'IsChild',
                                                                                            'GetWindowLongPtrA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'SetWindowLongPtrA',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'ScrollWindow',
                                                                                            'GetTopWindow',
                                                                                            'MessageBoxA',
                                                                                            'TrackPopupMenu',
                                                                                            'GetKeyState',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'GetScrollPos',
                                                                                            'GetForegroundWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'PeekMessageA',
                                                                                            'GetLastActivePopup',
                                                                                            'ShowScrollBar',
                                                                                            'IsWindowVisible',
                                                                                            'MapWindowPoints',
                                                                                            'UpdateWindow',
                                                                                            'GetSysColor',
                                                                                            'GetMenu',
                                                                                            'PostMessageA',
                                                                                            'GetSubMenu',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'ScreenToClient',
                                                                                            'EqualRect',
                                                                                            'DeferWindowPos',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'InsertMenuA',
                                                                                            'GetMenuStringA',
                                                                                            'DeleteMenu',
                                                                                            'WaitMessage',
                                                                                            'IsDialogMessageA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowLongA',
                                                                                            'SetWindowPos',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'CopyRect',
                                                                                            'GetWindow',
                                                                                            'GetActiveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongA',
                                                                                            'GetDlgItem',
                                                                                            'IsWindowEnabled',
                                                                                            'GetParent',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'IsWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadIconA',
                                                                                            'GetClientRect',
                                                                                            'IsIconic',
                                                                                            'GetSystemMenu',
                                                                                            'AppendMenuA',
                                                                                            'DrawIcon',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'EnableWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'UnregisterClassA',
                                                                                            'GetDeviceCaps',
                                                                                            'ExtTextOutA',
                                                                                            'CreateDIBPatternBrushPt',
                                                                                            'CreatePen',
                                                                                            'ExtCreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateHatchBrush',
                                                                                            'CreatePatternBrush',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'GetTextMetricsA',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'GetMapMode',
                                                                                            'PlayMetaFile',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'LPtoDP',
                                                                                            'CopyMetaFileA',
                                                                                            'CreateDCA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'StartDocA',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'SelectClipPath',
                                                                                            'CreateRectRgn',
                                                                                            'EnumMetaFile',
                                                                                            'GetObjectType',
                                                                                            'PlayMetaFileRecord',
                                                                                            'ExtSelectClipRgn',
                                                                                            'PolyBezierTo',
                                                                                            'PolylineTo',
                                                                                            'PolyDraw',
                                                                                            'ArcTo',
                                                                                            'GetCurrentPositionEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectPalette',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'DPtoLP',
                                                                                            'GetDCOrgEx',
                                                                                            'GetClipRgn',
                                                                                            'SelectClipRgn',
                                                                                            'DeleteObject',
                                                                                            'SetColorAdjustment',
                                                                                            'SetArcDirection',
                                                                                            'SetMapperFlags',
                                                                                            'SetTextCharacterExtra',
                                                                                            'SetTextJustification',
                                                                                            'SetTextAlign',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'OffsetClipRgn',
                                                                                            'IntersectClipRect',
                                                                                            'ExcludeClipRect',
                                                                                            'SetMapMode',
                                                                                            'SetStretchBltMode',
                                                                                            'SetROP2',
                                                                                            'SetPolyFillMode',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'PatBlt',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateBitmap',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'Escape',
                                                                                            'GetSaveFileNameA',
                                                                                            'GetFileTitleA',
                                                                                            'GetOpenFileNameA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegSetValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueA',
                                                                                            'SHGetFileInfoA',
                                                                                            'DragQueryFileA',
                                                                                            'DragFinish',
                                                                                            'DragAcceptFiles',
                                                                                            'ExtractIconA',
                                                                                            'ImageList_Read',
                                                                                            'ImageList_Write',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_LoadImageA',
                                                                                            'ImageList_Merge',
                                                                                            'OleDuplicateData',
                                                                                            'ReleaseStgMedium',
                                                                                            'CoTreatAsClass',
                                                                                            'StringFromCLSID',
                                                                                            'ReadClassStg',
                                                                                            'ReadFmtUserTypeStg',
                                                                                            'OleRegGetUserType',
                                                                                            'WriteClassStg',
                                                                                            'WriteFmtUserTypeStg',
                                                                                            'SetConvertStg',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'OleUninitialize',
                                                                                            'OleRun',
                                                                                            'CoDisconnectObject',
                                                                                            'CoCreateInstance',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoGetClassObject',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleSetClipboard',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'VarBstrFromDate',
                                                                                            'VarDateFromStr',
                                                                                            'VarBstrFromCy',
                                                                                            'VarCyFromStr',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayAllocDescriptor',
                                                                                            'SafeArrayAllocData',
                                                                                            'SysStringByteLen',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayGetElemsize',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SysReAllocStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'OleCreateFontIndirect',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 498,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 14040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.pdata\x00\x00': 37376,
                                                                                       '.rdata\x00\x00': 159744,
                                                                                       '.rsrc\x00\x00\x00': 41984,
                                                                                       '.text\x00\x00\x00': 409088,
                                                                                       'onjagpj\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/222a7bc35cc02800086c6cd9ed36fff7e90672ea2c0d1593b5e4728b2424e9a7'},
 '22c39fc56634725bfc943206a98b86efaab3a3c3acf1c2b624425c2f3e6230fc': {'AddressOfEntryPoint': 12720,
                                                                      'DebugRVA': 28896,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'WDFLDR.SYS': 'WdfVersionBindClass',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['ExAllocatePool',
                                                                                            'IoAllocateMdl',
                                                                                            'MmUnlockPages',
                                                                                            'IoFreeMdl',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoFileObjectType',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoWMIWriteEvent',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlGUIDFromString',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExFreePool',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoGetCurrentProcess',
                                                                                            'ObfDereferenceObject',
                                                                                            'ExFreePoolWithTag',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            '__C_specific_handler',
                                                                                            'WdfVersionUnbindClass',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBindClass'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 26,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 18944,
                                                                                       'INIT\x00\x00\x00\x00': 2048,
                                                                                       'NONPAGE\x00': 1536,
                                                                                       'PAGE\x00\x00\x00\x00': 2048},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/22c39fc56634725bfc943206a98b86efaab3a3c3acf1c2b624425c2f3e6230fc'},
 '22cde70dee00d2f5071739d89658114e0cadf7f7fbf742e7b60931625f88df78': {'AddressOfEntryPoint': 60016,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyA',
                                                                                      'COMCTL32.dll': 'CreateToolbarEx',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'lstrcpyA',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'KillTimer',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'comdlg32.dll': 'GetSaveFileNameA',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ole32.dll': 'GetHGlobalFromStream'},
                                                                      'ImportedFunctions': ['VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'CreateToolbarEx',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_strlwr',
                                                                                            '_itoa',
                                                                                            'atoi',
                                                                                            'strcmp',
                                                                                            '_memicmp',
                                                                                            'strchr',
                                                                                            'strrchr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'modf',
                                                                                            'memcmp',
                                                                                            'strtoul',
                                                                                            '_ultoa',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            'strcpy',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_purecall',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            '_strcmpi',
                                                                                            'memcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'OpenProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteProcessMemory',
                                                                                            'GetStartupInfoA',
                                                                                            'FreeLibrary',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'DeleteFileA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'EnumResourceNamesA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'WriteFile',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalUnlock',
                                                                                            'GetProcAddress',
                                                                                            'GlobalLock',
                                                                                            'LoadLibraryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryExA',
                                                                                            'GlobalAlloc',
                                                                                            'GetTempFileNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetTempPathA',
                                                                                            'CreateFileA',
                                                                                            'GetNumberFormatA',
                                                                                            'LocalFree',
                                                                                            'GetFileSize',
                                                                                            'FormatMessageA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'UpdateWindow',
                                                                                            'LoadImageA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetMessageA',
                                                                                            'SetTimer',
                                                                                            'ReleaseCapture',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowPlacement',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'EndDeferWindowPos',
                                                                                            'PostQuitMessage',
                                                                                            'TrackPopupMenu',
                                                                                            'SetCapture',
                                                                                            'RegisterClassA',
                                                                                            'BeginDeferWindowPos',
                                                                                            'CreateWindowExA',
                                                                                            'EndDialog',
                                                                                            'SendMessageA',
                                                                                            'LoadCursorA',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextA',
                                                                                            'ChildWindowFromPoint',
                                                                                            'GetSysColorBrush',
                                                                                            'SetCursor',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowTextA',
                                                                                            'GetClassNameA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'EnumWindows',
                                                                                            'IsWindowVisible',
                                                                                            'RegisterWindowMessageA',
                                                                                            'LoadIconA',
                                                                                            'EnumChildWindows',
                                                                                            'SendMessageTimeoutA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'InvalidateRect',
                                                                                            'SetDlgItemInt',
                                                                                            'SetFocus',
                                                                                            'SetClipboardData',
                                                                                            'EnableWindow',
                                                                                            'EmptyClipboard',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'GetClientRect',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'GetWindowRect',
                                                                                            'ScreenToClient',
                                                                                            'CloseClipboard',
                                                                                            'GetMenuItemCount',
                                                                                            'MoveWindow',
                                                                                            'GetMenuStringA',
                                                                                            'GetSubMenu',
                                                                                            'GetMenu',
                                                                                            'GetCursorPos',
                                                                                            'CheckMenuItem',
                                                                                            'GetDC',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'LoadStringA',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'GetMenuItemInfoA',
                                                                                            'SetWindowPos',
                                                                                            'DestroyIcon',
                                                                                            'DeferWindowPos',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageA',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'ShowWindow',
                                                                                            'LoadAcceleratorsA',
                                                                                            'GetSysColor',
                                                                                            'GetFocus',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'KillTimer',
                                                                                            'PatBlt',
                                                                                            'SelectObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'SetTextColor',
                                                                                            'CreateSolidBrush',
                                                                                            'FindTextA',
                                                                                            'GetSaveFileNameA',
                                                                                            'RegDeleteKeyA',
                                                                                            'ExtractIconExA',
                                                                                            'ShellExecuteA',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitialize',
                                                                                            'GetHGlobalFromStream',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 191,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 13380,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/22cde70dee00d2f5071739d89658114e0cadf7f7fbf742e7b60931625f88df78'},
 '22d47a69e5a223b6afb8eec6b893c780048cc0c4ce950a306ba8fe54caa1b0f7': {'AddressOfEntryPoint': 1074322561,
                                                                      'DebugRVA': 277568,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 274432,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'CreateDIBSection',
                                                                                      'KERNEL32.dll': 'FlsFree',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SETUPAPI.dll': 'SetupDiEnumDeviceInterfaces',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'gdiplus.dll': 'GdipGetImageGraphicsContext',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetThreadLocale',
                                                                                            'lstrlenA',
                                                                                            'TlsFree',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'GlobalFlags',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentThread',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetVersion',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'lstrcmpA',
                                                                                            'GetLocaleInfoW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetCurrentProcessId',
                                                                                            'FormatMessageW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrlenW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeResource',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryA',
                                                                                            'SetLastError',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentThreadId',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'MulDiv',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindResourceExW',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'FlsFree',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'ReleaseDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'TabbedTextOutW',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'ValidateRect',
                                                                                            'GetActiveWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'IsWindowEnabled',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendDlgItemMessageW',
                                                                                            'WinHelpW',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongPtrW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'IsWindow',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetLastActivePopup',
                                                                                            'DispatchMessageW',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageW',
                                                                                            'MapWindowPoints',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetKeyState',
                                                                                            'IsWindowVisible',
                                                                                            'GetMenu',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ScreenToClient',
                                                                                            'CopyRect',
                                                                                            'PtInRect',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapW',
                                                                                            'GetFocus',
                                                                                            'GetMenuState',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'DestroyIcon',
                                                                                            'GetCursorPos',
                                                                                            'LoadMenuW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'RemoveMenu',
                                                                                            'ModifyMenuW',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'SetActiveWindow',
                                                                                            'IsIconic',
                                                                                            'UnregisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'InvalidateRect',
                                                                                            'DestroyMenu',
                                                                                            'SetCursor',
                                                                                            'RemovePropW',
                                                                                            'PostQuitMessage',
                                                                                            'AttachThreadInput',
                                                                                            'GetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'GetWindowLongW',
                                                                                            'LoadIconW',
                                                                                            'SetWindowPos',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'DrawIcon',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'GetSystemMetrics',
                                                                                            'SetForegroundWindow',
                                                                                            'FindWindowExW',
                                                                                            'GetClassInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'GetSysColorBrush',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'TrackMouseEvent',
                                                                                            'RedrawWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindow',
                                                                                            'GetDC',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetWindowRect',
                                                                                            'MapDialogRect',
                                                                                            'GetParent',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'PostMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'GetStockObject',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'Escape',
                                                                                            'ExtTextOutW',
                                                                                            'TextOutW',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetMapMode',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'SetTextAlign',
                                                                                            'SetMapMode',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'CreateBitmap',
                                                                                            'GetViewportExtEx',
                                                                                            'GetWindowExtEx',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextExtentExPointW',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'SetDIBColorTable',
                                                                                            'CreateDIBSection',
                                                                                            'AlphaBlend',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesW',
                                                                                            'OpenPrinterW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFindExtensionW',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoFreeUnusedLibrariesEx',
                                                                                            'CoTaskMemFree',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipCloneImage',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipFree',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipGetImageGraphicsContext'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 342,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 161456,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/22d47a69e5a223b6afb8eec6b893c780048cc0c4ce950a306ba8fe54caa1b0f7'},
 '236f89f80987e348e7caf6669ce8f7f5fa8dd319c4f1ba65e2bb54167e1958f3': {'AddressOfEntryPoint': 57096,
                                                                      'DebugRVA': 87024,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'HeapSize',
                                                                                      'USER32.dll': 'SendMessageA'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'GetStartupInfoA',
                                                                                            'LocalFree',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'DeleteFileA',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'LocalAlloc',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'FreeResource',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'SetStdHandle',
                                                                                            'GetLocalTime',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'HeapReAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileType',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'GetCommandLineA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'FlushFileBuffers',
                                                                                            'RtlUnwindEx',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetStdHandle',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetHandleCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSize',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'DestroyWindow',
                                                                                            'SendMessageA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 102,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 71166312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 13312,
                                                                                       '.rsrc\x00\x00\x00': 71166464,
                                                                                       '.text\x00\x00\x00': 80896},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/236f89f80987e348e7caf6669ce8f7f5fa8dd319c4f1ba65e2bb54167e1958f3'},
 '237f2e44426612eb410b1656547ca36ba608f653911c18d3bdd5377774007053': {'AddressOfEntryPoint': 27536,
                                                                      'DebugRVA': 78512,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualProtect',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA'},
                                                                      'ImportedFunctions': ['SetupDiCreateDeviceInfoA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'lstrcmpiA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'lstrlenA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapSize',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'CloseHandle',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'ReadFile',
                                                                                            'SetStdHandle',
                                                                                            'VirtualProtect'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/237f2e44426612eb410b1656547ca36ba608f653911c18d3bdd5377774007053'},
 '23a2dcffda0de0bc85eb46b8705b6533f9f0103e3d707ac729a2936235713339': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 29048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 29184,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/23a2dcffda0de0bc85eb46b8705b6533f9f0103e3d707ac729a2936235713339'},
 '23b091fc7652eb5680b2fa4373a36e8a640ddb6e555c33af29f2842e10912581': {'AddressOfEntryPoint': 86024,
                                                                      'DebugRVA': 73888,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'ScsiPortNotification'},
                                                                      'ImportedFunctions': ['StorPortGetBusData',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortDeviceReady',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortLogError',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortNotification',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortCompleteRequest',
                                                                                            'StorPortReady',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortDeviceBusy',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortDebugPrint',
                                                                                            'ScsiPortNotification',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 66560,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/23b091fc7652eb5680b2fa4373a36e8a640ddb6e555c33af29f2842e10912581'},
 '23c28ba9209fbf0ef195a29be1ff95e24eda60aac980e2cb042d036f59c844c9': {'AddressOfEntryPoint': 1074783937,
                                                                      'DebugRVA': 743984,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 986736,
                                                                      'ExportSize': 310,
                                                                      'IATRVA': 741376,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RevertToSelf',
                                                                                      'KERNEL32.dll': 'GetProcAddress',
                                                                                      'USER32.dll': 'RegisterClassExW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeBeginPeriod',
                                                                                      'WS2_32.dll': 'socket'},
                                                                      'ImportedFunctions': ['VirtualProtect',
                                                                                            'GetTickCount',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetInformationJobObject',
                                                                                            'WaitForSingleObject',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSection',
                                                                                            'TerminateJobObject',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'DeleteCriticalSection',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetHandleInformation',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'WriteProcessMemory',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'VirtualQueryEx',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetThreadContext',
                                                                                            'AssignProcessToJobObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualProtectEx',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'QueryDosDeviceW',
                                                                                            'CreateJobObjectW',
                                                                                            'CreateMutexW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateNamedPipeW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'lstrlenW',
                                                                                            'VirtualQuery',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ReleaseMutex',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringA',
                                                                                            'FormatMessageA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'RaiseException',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetThreadPriority',
                                                                                            'GetStdHandle',
                                                                                            'OpenProcess',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemInfo',
                                                                                            'ReadFile',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'SwitchToThread',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'VirtualAlloc',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseSemaphore',
                                                                                            'RtlCaptureContext',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitNamedPipeW',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'GetUserDefaultLCID',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'LoadLibraryA',
                                                                                            'HeapAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapCreate',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetFullPathNameA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'SuspendThread',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'GetNamedPipeInfo',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'LocalAlloc',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'lstrlenA',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'OpenThread',
                                                                                            'SetThreadContext',
                                                                                            'FlushInstructionCache',
                                                                                            'ExitThread',
                                                                                            'FindFirstFileA',
                                                                                            'VirtualAllocEx',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLongPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetTempPathW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'PostQuitMessage',
                                                                                            'CallMsgFilterW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'GetQueueStatus',
                                                                                            'PeekMessageW',
                                                                                            'WaitMessage',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'PostMessageW',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CharUpperW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetThreadDesktop',
                                                                                            'SetProcessWindowStation',
                                                                                            'CreateDesktopW',
                                                                                            'GetProcessWindowStation',
                                                                                            'CreateWindowStationW',
                                                                                            'CloseDesktop',
                                                                                            'MessageBoxW',
                                                                                            'CloseWindowStation',
                                                                                            'UnregisterClassW',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'SetSecurityInfo',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'SetThreadToken',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegCreateKeyExW',
                                                                                            'CreateRestrictedToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'DuplicateToken',
                                                                                            'EqualSid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CopySid',
                                                                                            'CreateWellKnownSid',
                                                                                            'GetSecurityInfo',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'SetEntriesInAclW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'RevertToSelf',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime',
                                                                                            'timeGetDevCaps',
                                                                                            'timeBeginPeriod',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'htonl',
                                                                                            'WSAStartup',
                                                                                            'htons',
                                                                                            'ntohs',
                                                                                            'WSACleanup',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'socket'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 288,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 15360,
                                                                                       '.pdata\x00\x00': 39936,
                                                                                       '.rdata\x00\x00': 245760,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 735744,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536,
                                                                                       '}\x00\x10\x00oc\x00\x00': 11776},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/23c28ba9209fbf0ef195a29be1ff95e24eda60aac980e2cb042d036f59c844c9'},
 '23cafd6f0772e7ed7a71251a1aded64f474261809e423d50e543e35271b9b0e9': {'AddressOfEntryPoint': 183812,
                                                                      'DebugRVA': 315008,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 311296,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyA',
                                                                                      'COMDLG32.dll': 'GetFileTitleA',
                                                                                      'GDI32.dll': 'ExtTextOutA',
                                                                                      'KERNEL32.dll': 'GlobalGetAtomNameA',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconA',
                                                                                      'SHLWAPI.dll': 'StrStrIA',
                                                                                      'USER32.dll': 'RegisterClassA',
                                                                                      'WINSPOOL.DRV': 'DocumentPropertiesA',
                                                                                      'WTSAPI32.dll': 'WTSRegisterSessionNotification',
                                                                                      'ole32.dll': 'CoRegisterMessageFilter'},
                                                                      'ImportedFunctions': ['WTSRegisterSessionNotification',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetNamedSecurityInfoA',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetNamedSecurityInfoA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'CreateFileA',
                                                                                            'GetModuleHandleW',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'HeapQueryInformation',
                                                                                            'HeapSize',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetFullPathNameA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDriveTypeA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'OpenMutexA',
                                                                                            'CreateMutexA',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeCriticalSection',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'GetVersionExA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'SetThreadPriority',
                                                                                            'SetEvent',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'OpenEventA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'LocalFree',
                                                                                            'FreeResource',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'lstrlenA',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrcmpW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'CompareStringA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalFindAtomA',
                                                                                            'GetVolumeInformationA',
                                                                                            'DuplicateHandle',
                                                                                            'GetFileSize',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetThreadLocale',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsFree',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'GlobalAddAtomA',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFlags',
                                                                                            'FindFirstFileA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'GetModuleFileNameW',
                                                                                            'FormatMessageA',
                                                                                            'MulDiv',
                                                                                            'GetCurrentProcessId',
                                                                                            'SuspendThread',
                                                                                            'WaitForSingleObject',
                                                                                            'ResumeThread',
                                                                                            'GetCurrentThread',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrcmpA',
                                                                                            'GlobalAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'UnregisterClassA',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'PostThreadMessageA',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'ValidateRect',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapA',
                                                                                            'ModifyMenuA',
                                                                                            'GetMenuState',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'WinHelpA',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassLongA',
                                                                                            'GetClassLongPtrA',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'GetLastActivePopup',
                                                                                            'DispatchMessageA',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageA',
                                                                                            'MapWindowPoints',
                                                                                            'TrackPopupMenu',
                                                                                            'GetKeyState',
                                                                                            'SetMenu',
                                                                                            'IsWindowVisible',
                                                                                            'UpdateWindow',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'MessageBoxA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'CopyRect',
                                                                                            'PtInRect',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'GetMenu',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'GetFocus',
                                                                                            'SetWindowPos',
                                                                                            'SetFocus',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowLongA',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'InvalidateRgn',
                                                                                            'InvalidateRect',
                                                                                            'SetRect',
                                                                                            'IsRectEmpty',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'CharNextA',
                                                                                            'GetSysColorBrush',
                                                                                            'DestroyMenu',
                                                                                            'SetPropA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetActiveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'GetWindowLongA',
                                                                                            'GetDlgItem',
                                                                                            'IsWindowEnabled',
                                                                                            'GetParent',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'GetWindow',
                                                                                            'GetWindowTextA',
                                                                                            'SystemParametersInfoA',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSubMenu',
                                                                                            'LoadMenuA',
                                                                                            'PostMessageA',
                                                                                            'GetClassNameA',
                                                                                            'GetForegroundWindow',
                                                                                            'LoadCursorA',
                                                                                            'KillTimer',
                                                                                            'DrawIcon',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'IsIconic',
                                                                                            'SetTimer',
                                                                                            'SendMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'LoadIconA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'EnableWindow',
                                                                                            'SetCursor',
                                                                                            'GetCursorPos',
                                                                                            'RegisterClassA',
                                                                                            'SaveDC',
                                                                                            'RestoreDC',
                                                                                            'SetMapMode',
                                                                                            'DeleteObject',
                                                                                            'GetViewportExtEx',
                                                                                            'GetWindowExtEx',
                                                                                            'PtVisible',
                                                                                            'RectVisible',
                                                                                            'TextOutA',
                                                                                            'CreateBitmap',
                                                                                            'Escape',
                                                                                            'SelectObject',
                                                                                            'SetViewportOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ExtSelectClipRgn',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetRgnBox',
                                                                                            'GetMapMode',
                                                                                            'ScaleViewportExtEx',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'ExtTextOutA',
                                                                                            'GetFileTitleA',
                                                                                            'OpenPrinterA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'ShellExecuteExA',
                                                                                            'Shell_NotifyIconA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathStripToRootA',
                                                                                            'PathIsUNCA',
                                                                                            'StrStrIA',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleInitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleUninitialize',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoGetClassObject',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'OleFlushClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'SysStringLen',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayDestroy',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'OleCreateFontIndirect',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 368,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 181608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 21504,
                                                                                       '.rdata\x00\x00': 108032,
                                                                                       '.reloc\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 181760,
                                                                                       '.text\x00\x00\x00': 305152},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/23cafd6f0772e7ed7a71251a1aded64f474261809e423d50e543e35271b9b0e9'},
 '241d986b7b36353853127986de8d4687eec42b9c39bad2824c90ab4f18cc4961': {'AddressOfEntryPoint': 113072,
                                                                      'DebugRVA': 182672,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'WriteConsoleW',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'SHLWAPI.dll': 'SHDeleteEmptyKeyW',
                                                                                      'USER32.dll': 'EnableWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'imagehlp.dll': 'BindImageEx',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'BindImageEx',
                                                                                            'UuidCreate',
                                                                                            'GetTempFileNameW',
                                                                                            'LoadLibraryW',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'RemoveDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'CreateThread',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrcmpW',
                                                                                            'GetVersionExW',
                                                                                            'DeleteFileW',
                                                                                            'FlushInstructionCache',
                                                                                            'FindNextFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'CreateMutexW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetLastError',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'CloseHandle',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'MultiByteToWideChar',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateFileMappingW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetLastError',
                                                                                            'GetSystemInfo',
                                                                                            'MoveFileExW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetDriveTypeW',
                                                                                            'DuplicateHandle',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'LockResource',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrlenW',
                                                                                            'MapViewOfFile',
                                                                                            'ReadFile',
                                                                                            'FindResourceExW',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'SetFilePointer',
                                                                                            'LoadLibraryA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'GetModuleHandleA',
                                                                                            'RtlCaptureContext',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'GetStartupInfoW',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'GetStringTypeA',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetVersionExA',
                                                                                            'GetThreadLocale',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetACP',
                                                                                            'LocalFree',
                                                                                            'GetTempPathW',
                                                                                            'GetExitCodeProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'LoadLibraryExW',
                                                                                            'SetStdHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CompareStringW',
                                                                                            'FindResourceW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CopyFileW',
                                                                                            'GetFileSize',
                                                                                            'LoadResource',
                                                                                            'OpenMutexW',
                                                                                            'WriteFile',
                                                                                            'lstrcpyW',
                                                                                            'GetModuleFileNameW',
                                                                                            'Process32NextW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SizeofResource',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpiW',
                                                                                            'CreateFileW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'CreateFileA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetStringTypeW',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'ExitWindowsEx',
                                                                                            'SetCursor',
                                                                                            'GetSysColor',
                                                                                            'GetCursorPos',
                                                                                            'FillRect',
                                                                                            'UnregisterClassA',
                                                                                            'IsWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'CallWindowProcW',
                                                                                            'DialogBoxParamW',
                                                                                            'SendMessageW',
                                                                                            'DestroyWindow',
                                                                                            'UpdateWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBoxW',
                                                                                            'LoadImageW',
                                                                                            'DispatchMessageW',
                                                                                            'GetSysColorBrush',
                                                                                            'LoadBitmapW',
                                                                                            'TranslateMessage',
                                                                                            'GetNextDlgTabItem',
                                                                                            'IsWindowEnabled',
                                                                                            'SetDlgItemTextW',
                                                                                            'PeekMessageW',
                                                                                            'DrawTextW',
                                                                                            'SetFocus',
                                                                                            'GetWindow',
                                                                                            'SetWindowPos',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetClassNameW',
                                                                                            'SetWindowTextW',
                                                                                            'SetCapture',
                                                                                            'CharNextW',
                                                                                            'LoadCursorW',
                                                                                            'OffsetRect',
                                                                                            'SetRectEmpty',
                                                                                            'KillTimer',
                                                                                            'ScreenToClient',
                                                                                            'SetWindowLongW',
                                                                                            'GetFocus',
                                                                                            'GetCapture',
                                                                                            'ShowWindow',
                                                                                            'ReleaseCapture',
                                                                                            'SetTimer',
                                                                                            'GetMessagePos',
                                                                                            'GetClientRect',
                                                                                            'DrawFocusRect',
                                                                                            'EndDialog',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindowTextW',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetParent',
                                                                                            'BeginPaint',
                                                                                            'InvalidateRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetDC',
                                                                                            'GetActiveWindow',
                                                                                            'CreateWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'EndPaint',
                                                                                            'PtInRect',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongW',
                                                                                            'MessageBeep',
                                                                                            'EnableWindow',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetStockObject',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'SelectObject',
                                                                                            'CloseServiceHandle',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'UnlockServiceDatabase',
                                                                                            'RegSetValueExW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenProcessToken',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHChangeNotify',
                                                                                            'CLSIDFromString',
                                                                                            'OleUninitialize',
                                                                                            'StringFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'VarUI4FromStr',
                                                                                            'PathAddBackslashW',
                                                                                            'PathGetCharTypeW',
                                                                                            'SHDeleteKeyW',
                                                                                            'SHDeleteEmptyKeyW',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_AddMasked',
                                                                                            '_TrackMouseEvent'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 264,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 231448,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/241d986b7b36353853127986de8d4687eec42b9c39bad2824c90ab4f18cc4961'},
 '242335f7306a747874d99734e86f4cbf9b90cd6af0ff6ad4cdc1c6d1716d89a9': {'AddressOfEntryPoint': 3221545949,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 325624,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'SetHandleCount',
                                                                                      'OLEAUT32.dll': 'CreateErrorInfo',
                                                                                      'USER32.dll': 'KillTimer',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['lstrlenW',
                                                                                            'GetLastError',
                                                                                            'lstrlenA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'lstrcmpiA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'lstrcatA',
                                                                                            'lstrcpynA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryExA',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidCodePage',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'MultiByteToWideChar',
                                                                                            '__C_specific_handler',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetVersionExA',
                                                                                            'CompareFileTime',
                                                                                            'OutputDebugStringA',
                                                                                            'lstrcpyA',
                                                                                            'CreateMutexA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'SetStdHandle',
                                                                                            'IsBadCodePtr',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'SetFilePointer',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'EnterCriticalSection',
                                                                                            'FatalAppExitA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'LocalFree',
                                                                                            'RtlUnwindEx',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'HeapValidate',
                                                                                            'DebugBreak',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetModuleHandleA',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetHandleCount',
                                                                                            'EnumDisplaySettingsA',
                                                                                            'CharNextA',
                                                                                            'PostThreadMessageA',
                                                                                            'ChangeDisplaySettingsExA',
                                                                                            'ChangeDisplaySettingsA',
                                                                                            'PostMessageA',
                                                                                            'SendNotifyMessageA',
                                                                                            'FindWindowA',
                                                                                            'CharPrevA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'SetTimer',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterWindowMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'KillTimer',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'CoCreateInstance',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'SysStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 156,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 3984,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/242335f7306a747874d99734e86f4cbf9b90cd6af0ff6ad4cdc1c6d1716d89a9'},
 '2444a501dccaf6f2dd85102fa014e41d9bde5f0d20267084c37ccdd99b21d9b3': {'AddressOfEntryPoint': 766848,
                                                                      'DebugRVA': 152992,
                                                                      'DebugSize': 28,
                                                                      'Dll': 128,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 151552,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 155136,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 147456,
                                                                                       'INIT\x00\x00\x00\x00': 8704,
                                                                                       'PAGE\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/2444a501dccaf6f2dd85102fa014e41d9bde5f0d20267084c37ccdd99b21d9b3'},
 '24d88bd850dc75992c0facd5091db956aa95c42c8296e7bf9ef0dbd115cdf410': {'AddressOfEntryPoint': 103394,
                                                                      'DebugRVA': 4880,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'FlushFileBuffers',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['GetLocalTime',
                                                                                            'Sleep',
                                                                                            'OutputDebugStringW',
                                                                                            'GetVersionExW',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetCommandLineA',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantClear',
                                                                                            'SafeArrayAccessData',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1464,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 72704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/24d88bd850dc75992c0facd5091db956aa95c42c8296e7bf9ef0dbd115cdf410'},
 '24de8cd24631271add833dc11b601d46f2de5f4e5d7380fcaaff0aa28d544756': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 347408,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 347648,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/24de8cd24631271add833dc11b601d46f2de5f4e5d7380fcaaff0aa28d544756'},
 '24f3521bafd4747a082fa64043c4c362a16c1612a4b076d1fa146c2ef71939e5': {'AddressOfEntryPoint': 5220,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'CloseHandle',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetCommandLineW',
                                                                                            'TerminateProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'SizeofResource',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 44,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2197008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2197504,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/24f3521bafd4747a082fa64043c4c362a16c1612a4b076d1fa146c2ef71939e5'},
 '2512ec4c9e7b9fa27df463b70c22867ea87896a68d24854a8f10fc4da1a6bd1b': {'AddressOfEntryPoint': 18492,
                                                                      'DebugRVA': 49776,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadProcessMemory',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenProcess',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 42496},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2512ec4c9e7b9fa27df463b70c22867ea87896a68d24854a8f10fc4da1a6bd1b'},
 '25680ce9e31c5642bd173d611ac465ca7166f7504d67a58e20fb5e6fd20f875d': {'AddressOfEntryPoint': 74096,
                                                                      'DebugRVA': 25312,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'jli.dll': 'JLI_MemFree',
                                                                                      'msvcrt.dll': '_strnicmp'},
                                                                      'ImportedFunctions': ['JLI_ExactVersionId',
                                                                                            'JLI_JarUnpackFile',
                                                                                            'JLI_StringDup',
                                                                                            'JLI_ParseManifest',
                                                                                            'JLI_ValidVersionString',
                                                                                            'JLI_AcceptableRelease',
                                                                                            'JLI_FreeManifest',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_MemFree',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            '_beginthreadex',
                                                                                            '_putenv',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'fflush',
                                                                                            '_errno',
                                                                                            'strerror',
                                                                                            'strchr',
                                                                                            'fgets',
                                                                                            'strcspn',
                                                                                            'strspn',
                                                                                            'strrchr',
                                                                                            'fopen',
                                                                                            'fwrite',
                                                                                            'fread',
                                                                                            'fclose',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'memset',
                                                                                            'getenv',
                                                                                            'strcmp',
                                                                                            'exit',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'printf',
                                                                                            'sprintf',
                                                                                            'memcpy',
                                                                                            'strncmp',
                                                                                            'sscanf',
                                                                                            'strlen',
                                                                                            '_access',
                                                                                            '_stat',
                                                                                            '_strnicmp',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'LocalFree',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetExitCodeProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetExitCodeThread',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 17408,
                                                                                       'dbfgqnm\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/25680ce9e31c5642bd173d611ac465ca7166f7504d67a58e20fb5e6fd20f875d'},
 '259486b3ef32096ae8cdecdf20025ca282ff9722be54d71de79f5b36e69b1016': {'AddressOfEntryPoint': 51968,
                                                                      'DebugRVA': 54848,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 20152,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.rsrc\x00\x00\x00': 20480,
                                                                                       '.text\x00\x00\x00': 49152},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/259486b3ef32096ae8cdecdf20025ca282ff9722be54d71de79f5b36e69b1016'},
 '25b03b6520ebb0d532111143b88a4271ba0cdb3beb485b2980d7dc5d92b39fa8': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1022404,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1022464,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/25b03b6520ebb0d532111143b88a4271ba0cdb3beb485b2980d7dc5d92b39fa8'},
 '262f4534a3f41a1d00ccab7cb1ca330a6c39204529e650d95bf168d3be52307d': {'AddressOfEntryPoint': 34224,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 2,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueA',
                                                                                      'GDI32.dll': 'CreateCompatibleDC',
                                                                                      'KERNEL32.dll': 'FlsGetValue',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'CreateDialogParamA'},
                                                                      'ImportedFunctions': ['CreateFileA',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'FlushFileBuffers',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateMutexA',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'LeaveCriticalSection',
                                                                                            'OpenFileMappingA',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'UnmapViewOfFile',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetTickCount',
                                                                                            'SwitchToThread',
                                                                                            'EnterCriticalSection',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetCursorPos',
                                                                                            'LoadMenuA',
                                                                                            'GetSubMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'DestroyMenu',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowPlacement',
                                                                                            'SetWindowTextA',
                                                                                            'SendMessageA',
                                                                                            'SetFocus',
                                                                                            'GetDlgItemInt',
                                                                                            'SendDlgItemMessageA',
                                                                                            'DestroyWindow',
                                                                                            'DestroyIcon',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'LoadIconA',
                                                                                            'LoadImageA',
                                                                                            'GetSystemMetrics',
                                                                                            'MapVirtualKeyA',
                                                                                            'SetWindowRgn',
                                                                                            'ScreenToClient',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'SetWindowPos',
                                                                                            'MessageBoxA',
                                                                                            'SetWindowsHookExA',
                                                                                            'SetDlgItemInt',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'CallNextHookEx',
                                                                                            'GetKeyNameTextA',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'PostMessageA',
                                                                                            'ShowWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'GetAsyncKeyState',
                                                                                            'keybd_event',
                                                                                            'CreateDialogParamA',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'DeleteDC',
                                                                                            'SetBkMode',
                                                                                            'GetDeviceCaps',
                                                                                            'GetStockObject',
                                                                                            'CreateRoundRectRgn',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 148,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1434816,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/262f4534a3f41a1d00ccab7cb1ca330a6c39204529e650d95bf168d3be52307d'},
 '2631aafa045b1953c09502c92f520acecfd0b17a6f059a2e7f10ce77dd3c632e': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/2631aafa045b1953c09502c92f520acecfd0b17a6f059a2e7f10ce77dd3c632e'},
 '2691c4a41aad316f6fbfa2224f639edd890e38ebd0593fc1b8a9c2f7bfc4782d': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 77824,
                                                                      'ExportSize': 12984088,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetVolumeInformationA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileA',
                                                                                            '_lclose',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetProcAddress',
                                                                                            '_llseek',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CompareStringA',
                                                                                            'LoadLibraryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetPrivateProfileIntA',
                                                                                            '_lopen',
                                                                                            'GetShortPathNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WriteFile',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVersionExA',
                                                                                            'SetFilePointer',
                                                                                            'GetVersion',
                                                                                            'FreeResource',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CreateDirectoryA',
                                                                                            'TerminateThread',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'LockResource',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetEvent',
                                                                                            'ReadFile',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetDeviceCaps',
                                                                                            'CallWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextA',
                                                                                            'DispatchMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDC',
                                                                                            'SetWindowPos',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'EndDialog',
                                                                                            'CharNextA',
                                                                                            'GetDesktopWindow',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'LoadStringA',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12985100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 12985344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2691c4a41aad316f6fbfa2224f639edd890e38ebd0593fc1b8a9c2f7bfc4782d'},
 '26c7eabb7226dbeffc544d040e0d83c311c2b40dbd64044994686b37dc2a45e3': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 349732,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 350208,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/26c7eabb7226dbeffc544d040e0d83c311c2b40dbd64044994686b37dc2a45e3'},
 '26f557b692a934da20fe12ece8ae586dee70e08b4055f8e8e7715404dfe094d2': {'AddressOfEntryPoint': 101056,
                                                                      'DebugRVA': 215968,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 281808,
                                                                      'ExportSize': 3644,
                                                                      'IATRVA': 212992,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADMIN_CLASS_LIB.dll': '?WriteLogVariable@CLog@@UEAAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4eSeverity@nsCLog@@PEB_WZZ',
                                                                                      'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'FingerprintLibrary.dll': 'HTFP_SetSuPwd',
                                                                                      'GDI32.dll': 'ExtTextOutW',
                                                                                      'KERNEL32.dll': 'SizeofResource',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameW',
                                                                                      'ShowErrMsg.dll': 'ShowErrorMessageEx',
                                                                                      'USER32.dll': 'SetCursor',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'eDSop.dll': 'HTOP_RegisterToWebSite',
                                                                                      'keyManager.dll': 'HTKM_CreateSystemKeyOfTPM',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'sysenv.dll': 'PathAppendW_s'},
                                                                      'ImportedFunctions': ['HT_ReadINIFileW',
                                                                                            'HT_ReadINIFileA',
                                                                                            'HT_IsGuestsGroup',
                                                                                            'HT_ReadLangINIFileW',
                                                                                            'HT_ReadLangINIFileEXW',
                                                                                            'HT_WriteLastSPWUseChgTime',
                                                                                            'HT_WriteINIFileA',
                                                                                            'HT_WriteINIFileW',
                                                                                            'PathAppendW_s',
                                                                                            'HTKM_CreateKeyStore',
                                                                                            'HTKM_CreateSystemKeyOfTPM',
                                                                                            'ShowErrorMessage',
                                                                                            'ShowErrorMessageEx',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegQueryValueW',
                                                                                            'RegSetValueExW',
                                                                                            '??1CTPMExaminer@@UEAA@XZ',
                                                                                            '?WriteLog@CLog@@UEAAHW4eSeverity@nsCLog@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z',
                                                                                            '?WriteLog@CLog@@UEAAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4eSeverity@nsCLog@@0@Z',
                                                                                            '?AddAppender@CLog@@UEAAHPEAVCLogAppender@@@Z',
                                                                                            '??0CTPMExamination@@QEAA@PEAVCTPMExaminer@@@Z',
                                                                                            'RenameOldPSDFolder',
                                                                                            '??0CPSDInitPSDManager@@QEAA@XZ',
                                                                                            '?CreateNewOrUseExistPSD@CPSDInitPSDManager@@QEAAIXZ',
                                                                                            '??1CPSDInitPSDManager@@UEAA@XZ',
                                                                                            '?WriteLog@CEventLogAppender@@UEAA_NW4eSeverity@nsCLog@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z',
                                                                                            '?WriteLog@CFileLogAppender@@UEAA_NW4eSeverity@nsCLog@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z',
                                                                                            '??0CTPMSimpleExaminer@@QEAA@XZ',
                                                                                            '?SetSourceName@CLog@@UEAAAEAV1@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z',
                                                                                            '?WriteLogHex@CLog@@UEAAHW4eSeverity@nsCLog@@PEAEH@Z',
                                                                                            '?WriteLogVariable@CLog@@UEAAHW4eSeverity@nsCLog@@PEB_WZZ',
                                                                                            '?OnNotEnabled@CTPMSimpleExaminer@@UEAAXXZ',
                                                                                            '?OnNotUserInitialized@CTPMSimpleExaminer@@UEAAXXZ',
                                                                                            '?OnNotInitialized@CTPMSimpleExaminer@@UEAAXXZ',
                                                                                            '?OnInitializedAndEnabled@CTPMSimpleExaminer@@UEAAXXZ',
                                                                                            '?ReportErrorMessage@CEDSException@@UEAAXXZ',
                                                                                            '?ReportError@CEDSException@@UEAAHIII@Z',
                                                                                            '??1CRecoverable@@UEAA@XZ',
                                                                                            '??1CLogAppender@@UEAA@XZ',
                                                                                            '??1CFileLogAppender@@UEAA@XZ',
                                                                                            '??1CEventLogAppender@@UEAA@XZ',
                                                                                            '??0CPSDDevice@@QEAA@IK@Z',
                                                                                            '??1CIni@@UEAA@XZ',
                                                                                            '??0CPSDManager@@QEAA@PEB_WI@Z',
                                                                                            '??1CEDSException@@UEAA@XZ',
                                                                                            '??1CTPMSimpleExaminer@@UEAA@XZ',
                                                                                            '?exam@CTPMExamination@@AEAAHXZ',
                                                                                            '?examTPMSysKey@CTPMExamination@@AEAAHXZ',
                                                                                            '??1CTPMExamination@@UEAA@XZ',
                                                                                            '?WriteLogVariable@CLog@@UEAAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4eSeverity@nsCLog@@PEB_WZZ',
                                                                                            'HTFP_DelFPPwd',
                                                                                            'HTFP_GetFPDeviceStatus',
                                                                                            'HTFP_SetSuPwd',
                                                                                            'HTOP_RegisterToWebSite',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'GetThreadLocale',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalFindAtomW',
                                                                                            'CreateFileW',
                                                                                            'lstrlenA',
                                                                                            'SetErrorMode',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'LoadLibraryA',
                                                                                            'GetVersionExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFlags',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetVersion',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcmpA',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'lstrlenW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrcmpW',
                                                                                            'GetLocalTime',
                                                                                            'WaitForSingleObject',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'lstrcmpiW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'Process32NextW',
                                                                                            'OpenProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'CreateMutexW',
                                                                                            'GetLastError',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'ShowWindow',
                                                                                            'UnregisterClassW',
                                                                                            'DestroyMenu',
                                                                                            'RemovePropW',
                                                                                            'IsWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'MapWindowPoints',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'CopyRect',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowPos',
                                                                                            'SystemParametersInfoA',
                                                                                            'IsIconic',
                                                                                            'GetWindowPlacement',
                                                                                            'GetCapture',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'TabbedTextOutW',
                                                                                            'ClientToScreen',
                                                                                            'GetWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetWindowRect',
                                                                                            'GetClassNameW',
                                                                                            'PtInRect',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'LoadCursorW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongW',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableWindow',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageW',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'GetCursorPos',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadIconW',
                                                                                            'WinHelpW',
                                                                                            'GetClassLongPtrW',
                                                                                            'ValidateRect',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapW',
                                                                                            'GetFocus',
                                                                                            'GetParent',
                                                                                            'SendMessageW',
                                                                                            'ModifyMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'PostMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'wsprintfW',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SetForegroundWindow',
                                                                                            'MessageBoxW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'UnregisterClassA',
                                                                                            'SetCursor',
                                                                                            'SetBkColor',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'DeleteObject',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'Escape',
                                                                                            'SelectObject',
                                                                                            'SetViewportOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'TextOutW',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetClipBox',
                                                                                            'SetMapMode',
                                                                                            'SetTextColor',
                                                                                            'ExtTextOutW',
                                                                                            'ShellExecuteW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathFileExistsW',
                                                                                            'PathFindFileNameW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleRun',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'GetErrorInfo',
                                                                                            'OpenPrinterW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 319,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 448980,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/26f557b692a934da20fe12ece8ae586dee70e08b4055f8e8e7715404dfe094d2'},
 '26f6e0023895a06223a91363d56e71f3e23b2ee59809a08d8838b994a1a8c90c': {'AddressOfEntryPoint': 18492,
                                                                      'DebugRVA': 49776,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadProcessMemory',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenProcess',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 42496},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/26f6e0023895a06223a91363d56e71f3e23b2ee59809a08d8838b994a1a8c90c'},
 '2703a38a1b9a8718c9c53984f8ae34fee22d2b9354d369795ef205e90fa6f8d7': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 449024,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2703a38a1b9a8718c9c53984f8ae34fee22d2b9354d369795ef205e90fa6f8d7'},
 '2772bbf4f0a755f954414106f67d73e0db0ba87a721dcfd0b9451173a19ddf1e': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 936680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 936960,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2772bbf4f0a755f954414106f67d73e0db0ba87a721dcfd0b9451173a19ddf1e'},
 '27c6a044aad80ce77bee9c25489f1c2a867f0c7525bcbe7c2dca6f9ef7a271d9': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 780724,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 780800,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/27c6a044aad80ce77bee9c25489f1c2a867f0c7525bcbe7c2dca6f9ef7a271d9'},
 '284ee87a6751d1c031bf5305ca4f5025cf8043f3fe71f0712514beda6444e640': {'AddressOfEntryPoint': 480640,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 581632,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'GetActiveObject',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetMenuItemCount',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'listen',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'listen',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'waveOutSetVolume',
                                                                                            'timeGetTime',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Remove',
                                                                                            'WNetUseConnectionW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SetSystemPowerState',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindResourceW',
                                                                                            'FindFirstFileW',
                                                                                            'LoadResource',
                                                                                            'FindClose',
                                                                                            'LockResource',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetVolumeLabelW',
                                                                                            'DeviceIoControl',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'SetErrorMode',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'CreatePipe',
                                                                                            'DuplicateHandle',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'PeekNamedPipe',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryExW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcessHeap',
                                                                                            'GetVersionExA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ResumeThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteCriticalSection',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'CreateFileMappingW',
                                                                                            'OpenProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'ReadProcessMemory',
                                                                                            'WriteProcessMemory',
                                                                                            'MapViewOfFile',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemInfo',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'Beep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetActiveWindow',
                                                                                            'InflateRect',
                                                                                            'CharNextW',
                                                                                            'DrawFocusRect',
                                                                                            'wsprintfW',
                                                                                            'DrawTextW',
                                                                                            'RedrawWindow',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DrawMenuBar',
                                                                                            'SubtractRect',
                                                                                            'OffsetRect',
                                                                                            'GetClassWord',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetWindow',
                                                                                            'IsChild',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'ReleaseDC',
                                                                                            'GetCursor',
                                                                                            'GetDC',
                                                                                            'WindowFromPoint',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CharLowerBuffW',
                                                                                            'UnregisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'SetWindowLongPtrW',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CreateIcon',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetWindowLongW',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'OpenClipboard',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'CopyRect',
                                                                                            'BeginPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'GetSysColor',
                                                                                            'SetClassLongPtrW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowDC',
                                                                                            'SetMenu',
                                                                                            'SetCursor',
                                                                                            'CreateMenu',
                                                                                            'DestroyMenu',
                                                                                            'FlashWindow',
                                                                                            'SetMenuDefaultItem',
                                                                                            'SetWindowLongW',
                                                                                            'ScreenToClient',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'CreatePopupMenu',
                                                                                            'MessageBoxA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'IsZoomed',
                                                                                            'GetCaretPos',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringW',
                                                                                            'IsCharUpperW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'CountClipboardFormats',
                                                                                            'SetWindowPos',
                                                                                            'CloseClipboard',
                                                                                            'CopyImage',
                                                                                            'GetClipboardData',
                                                                                            'SetForegroundWindow',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'DestroyIcon',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'GetKeyState',
                                                                                            'RegisterHotKey',
                                                                                            'GetMenuItemCount',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'PolyBezierTo',
                                                                                            'ExtCreatePen',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'Ellipse',
                                                                                            'MoveToEx',
                                                                                            'AngleArc',
                                                                                            'LineTo',
                                                                                            'CloseFigure',
                                                                                            'SetPixel',
                                                                                            'EndPath',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VarR4FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'GetActiveObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 462,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 14096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16384,
                                                                                       '.pdata\x00\x00': 18432,
                                                                                       '.rdata\x00\x00': 80896,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 575488},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/284ee87a6751d1c031bf5305ca4f5025cf8043f3fe71f0712514beda6444e640'},
 '28abf49b5af3909813357f3044a9c8b42c028e9b77fc82700fcf5a393c0c4839': {'AddressOfEntryPoint': 34956,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/28abf49b5af3909813357f3044a9c8b42c028e9b77fc82700fcf5a393c0c4839'},
 '28b514b2f7c5321645932d2a044fb25cca346b6a2eb2b67d8a20179b0eb04788': {'AddressOfEntryPoint': 49168,
                                                                      'DebugRVA': 29056,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 45056,
                                                                      'ExportSize': 1878,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'NDIS.SYS': 'NdisRegisterTdiCallBack',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['RtlAnsiStringToUnicodeString',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeDpc',
                                                                                            'RtlInitString',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'KeInitializeTimer',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeSetTimer',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'MmUnmapLockedPages',
                                                                                            'IoBuildPartialMdl',
                                                                                            'IoIs32bitProcess',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'MmFreeMappingAddress',
                                                                                            'MmMapLockedPagesWithReservedMapping',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'NtCreateFile',
                                                                                            'MmUnmapReservedMapping',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            '_wcsicmp',
                                                                                            'ExFreePoolWithTag',
                                                                                            '_wcsnicmp',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'KeInitializeEvent',
                                                                                            'DbgBreakPoint',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwClose',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'DbgPrint',
                                                                                            'ZwOpenKey',
                                                                                            'KeBugCheckEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'NlsMbCodePageTag',
                                                                                            'MmAllocateMappingAddress',
                                                                                            'ExQueueWorkItem',
                                                                                            '__C_specific_handler',
                                                                                            'NdisReturnPackets',
                                                                                            'NdisDeregisterTdiCallBack',
                                                                                            'NdisRegisterTdiCallBack'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.edata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 21504,
                                                                                       'INIT\x00\x00\x00\x00': 2048,
                                                                                       'PAGE\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/28b514b2f7c5321645932d2a044fb25cca346b6a2eb2b67d8a20179b0eb04788'},
 '28bf19434e6a2fd5cec3632784576d42b3d67135eec47d72db0cda2800b27814': {'AddressOfEntryPoint': 5112,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'DecodePointer',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'HeapReAlloc',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 60,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 624,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/28bf19434e6a2fd5cec3632784576d42b3d67135eec47d72db0cda2800b27814'},
 '28e489769672c34430d942d0829517470b396fa16661e1c1029db6b677a96fad': {'AddressOfEntryPoint': 1953900,
                                                                      'DebugRVA': 1324248,
                                                                      'DebugSize': 56,
                                                                      'Dll': 128,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1327104,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 129840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 53248,
                                                                                       '.pdata\x00\x00': 90624,
                                                                                       '.rdata\x00\x00': 159744,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 130048,
                                                                                       '.text\x00\x00\x00': 1320448,
                                                                                       'INIT\x00\x00\x00\x00': 22016,
                                                                                       'PAGE\x00\x00\x00\x00': 11264,
                                                                                       'PAGECONS': 512,
                                                                                       'PAGEIDP\x00': 11776,
                                                                                       'PAGEIPSE': 113152},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/28e489769672c34430d942d0829517470b396fa16661e1c1029db6b677a96fad'},
 '28f2f64d13fc0f3ff2f5676da7dfc021b0d860d29ab2fd566574c6bbf9d5e0ce': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['ZwQueryVolumeInformationFile',
                                                                                            'ZwQueryKey',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwWriteFile',
                                                                                            'ZwSetValueKey',
                                                                                            'wcstoul',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwResumeThread',
                                                                                            'ZwSetContextThread',
                                                                                            'sprintf',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwCreateKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'HeapAlloc',
                                                                                            'GetVersion',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 71,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/28f2f64d13fc0f3ff2f5676da7dfc021b0d860d29ab2fd566574c6bbf9d5e0ce'},
 '29730548ef5cbd722c86f4cfcabb29173d38a7c538befc281cab8f96154b4655': {'AddressOfEntryPoint': 362076,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 370952,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'hal.dll': 'HalMakeBeep',
                                                                                      'ntoskrnl.exe': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['PsGetVersion',
                                                                                            'PsGetCurrentThreadId',
                                                                                            'PsGetCurrentProcessId',
                                                                                            '__C_specific_handler',
                                                                                            'ProbeForWrite',
                                                                                            'KeDelayExecutionThread',
                                                                                            'ProbeForRead',
                                                                                            '_wcsnicmp',
                                                                                            '_stricmp',
                                                                                            'RtlDeleteRegistryValue',
                                                                                            'strstr',
                                                                                            'strrchr',
                                                                                            'ExFreePoolWithTag',
                                                                                            'strncpy',
                                                                                            '_strnicmp',
                                                                                            'PsDereferencePrimaryToken',
                                                                                            'RtlEqualSid',
                                                                                            'SeQueryInformationToken',
                                                                                            'PsReferencePrimaryToken',
                                                                                            'PsSetCreateProcessNotifyRoutine',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IofCompleteRequest',
                                                                                            '__chkstk',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoCreateDevice',
                                                                                            'PsSetLoadImageNotifyRoutine',
                                                                                            'ZwClose',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ExAcquireFastMutex',
                                                                                            'ZwCreateFile',
                                                                                            'KeInitializeEvent',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'MmIsAddressValid',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'ZwOpenFile',
                                                                                            'MmUnmapViewInSystemSpace',
                                                                                            'MmMapViewInSystemSpace',
                                                                                            'MmCreateSection',
                                                                                            'ZwQueryInformationThread',
                                                                                            'ZwOpenThread',
                                                                                            'PsGetProcessInheritedFromUniqueProcessId',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'PsGetProcessImageFileName',
                                                                                            'ObQueryNameString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'KeStackAttachProcess',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'PsGetProcessCreateTimeQuadPart',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'ZwQuerySymbolicLinkObject',
                                                                                            'ZwOpenSymbolicLinkObject',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'PsIsThreadTerminating',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'PsGetProcessId',
                                                                                            'PsGetThreadProcess',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwOpenDirectoryObject',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            'strchr',
                                                                                            'PsGetProcessWin32Process',
                                                                                            'ZwQueryInformationToken',
                                                                                            'ObOpenObjectByPointer',
                                                                                            'PsGetProcessSectionBaseAddress',
                                                                                            'ZwOpenProcessTokenEx',
                                                                                            'wcschr',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'ZwQueryObject',
                                                                                            'PsGetCurrentProcessSessionId',
                                                                                            'CmRegisterCallback',
                                                                                            'PsGetThreadTeb',
                                                                                            'PsLookupThreadByThreadId',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'PsGetProcessPeb',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlCreateUnicodeString',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'wcsncpy',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'ZwSetInformationProcess',
                                                                                            'RtlLengthSid',
                                                                                            'ZwAssignProcessToJobObject',
                                                                                            'ZwSetInformationJobObject',
                                                                                            'ZwCreateJobObject',
                                                                                            'PsGetProcessJob',
                                                                                            'ZwTerminateProcess',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlGetAce',
                                                                                            'ZwSetSecurityObject',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'ZwQuerySecurityObject',
                                                                                            'SeTokenIsRestricted',
                                                                                            'SeFilterToken',
                                                                                            'ObfReferenceObject',
                                                                                            'ZwCreateKey',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlFormatCurrentUserKeyPath',
                                                                                            'IoGetCurrentProcess',
                                                                                            'IoQueryFileDosDeviceName',
                                                                                            'ZwConnectPort',
                                                                                            'LpcRequestWaitReplyPort',
                                                                                            'KeBugCheckEx',
                                                                                            'ObfDereferenceObject',
                                                                                            'tolower',
                                                                                            '_vsnprintf',
                                                                                            'IoAllocateMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmUnlockPages',
                                                                                            'IoFreeMdl',
                                                                                            'ExAllocatePool',
                                                                                            'ExFreePool',
                                                                                            'NtQuerySystemInformation',
                                                                                            'HalMakeBeep'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 132,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.Shltr0\x00': 0,
                                                                                       '.Shltr1\x00': 1024,
                                                                                       '.Shltr2\x00': 0,
                                                                                       '.Shltr3\x00': 158208,
                                                                                       '.data\x00\x00\x00': 0,
                                                                                       '.pdata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 0,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 0,
                                                                                       'INIT\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/29730548ef5cbd722c86f4cfcabb29173d38a7c538befc281cab8f96154b4655'},
 '29be0cae71c8a88a49726327c7a04eec03eb96becc5bbbed4d0e07b80637d0df': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/29be0cae71c8a88a49726327c7a04eec03eb96becc5bbbed4d0e07b80637d0df'},
 '29d108e43304fd59b71d7af372bcff505323e94e5cd115fa614c7c6b80bde216': {'AddressOfEntryPoint': 5016,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2845508,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2845696,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/29d108e43304fd59b71d7af372bcff505323e94e5cd115fa614c7c6b80bde216'},
 '2a1868e906229098e6f5ef10923fe7cacdbb2fa8cb9623e627f752ad3bff6cb0': {'AddressOfEntryPoint': 129992,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 614400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'HttpQueryInfoW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['WSACleanup',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'select',
                                                                                            'accept',
                                                                                            '__WSAFDIsSet',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'HttpQueryInfoW',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'LoadUserProfileW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'HeapFree',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'PulseEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleFileNameA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'CreatePipe',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'IsCharUpperW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetClipboardData',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'CopyRect',
                                                                                            'CharUpperBuffW',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ReleaseDC',
                                                                                            'EnumThreadWindows',
                                                                                            'GetDC',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'IsIconic',
                                                                                            'GetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'GetPixel',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'GetDIBits',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'DeleteDC',
                                                                                            'GetObjectW',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'AddAce',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'SafeArrayDestroyData',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetVartype',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 512,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 29512,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 27136,
                                                                                       '.rdata\x00\x00': 88576,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 608256},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/2a1868e906229098e6f5ef10923fe7cacdbb2fa8cb9623e627f752ad3bff6cb0'},
 '2a44cc2b8cd5e04c31b640a2d7e6cfbe27ddfcc614b445268a94d18756678af0': {'AddressOfEntryPoint': 7344,
                                                                      'DebugRVA': 12848,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'USER32.dll': 'GetWindowThreadProcessId',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['CoInitialize',
                                                                                            'DispatchMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'PostThreadMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'IsWindow',
                                                                                            'RegisterClassExW',
                                                                                            'GetForegroundWindow',
                                                                                            'TranslateMessage',
                                                                                            'FindWindowW',
                                                                                            'PostMessageW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'SetTimer',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_wgetcwd',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RaiseException',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'LocalAlloc',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'OpenProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 59,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2a44cc2b8cd5e04c31b640a2d7e6cfbe27ddfcc614b445268a94d18756678af0'},
 '2a5a580d083aa88cfa19f735cdcd0e0c79291384088df317e2c0f621f3da22f2': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 218048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 218112,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/2a5a580d083aa88cfa19f735cdcd0e0c79291384088df317e2c0f621f3da22f2'},
 '2a83f8a8d335bfec595b4c4ebf0a96c78889aade87134859a1693ebae8f9e159': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 183584,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 183808,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2a83f8a8d335bfec595b4c4ebf0a96c78889aade87134859a1693ebae8f9e159'},
 '2ae130e8471de572550f425f261de6369fe5784a7423a3f9488bd3807f4ec581': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1785872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1704960,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2ae130e8471de572550f425f261de6369fe5784a7423a3f9488bd3807f4ec581'},
 '2afc4a24f024b8698642ce8d75aedff9fee94d9ec4e8aa444997d2833bb60da9': {'AddressOfEntryPoint': 77924,
                                                                      'DebugRVA': 41392,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoDeleteSymbolicLink',
                                                                                            'ExFreePoolWithTag',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'PsSetCreateProcessNotifyRoutine',
                                                                                            'ZwQueryValueKey',
                                                                                            'ExAllocatePool',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'IofCompleteRequest',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoCreateDevice',
                                                                                            'DbgPrint',
                                                                                            'ZwOpenKey',
                                                                                            'KeQueryActiveProcessors',
                                                                                            'PsProcessType',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            'KeInitializeApc',
                                                                                            'ZwMapViewOfSection',
                                                                                            'KeInsertQueueApc',
                                                                                            'PsSetCreateThreadNotifyRoutine',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ZwOpenThread',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'KeDetachProcess',
                                                                                            'KeDelayExecutionThread',
                                                                                            'MmGetPhysicalAddress',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeAttachProcess',
                                                                                            'ObfDereferenceObject',
                                                                                            'ZwOpenSection',
                                                                                            'ObOpenObjectByPointer',
                                                                                            'KeStackAttachProcess',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'PsLookupThreadByThreadId',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeReleaseSemaphore',
                                                                                            'KeClearEvent',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'PsGetCurrentThreadId',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'ZwReadFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'MmAllocateContiguousMemory',
                                                                                            'KeBugCheckEx',
                                                                                            '__C_specific_handler'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 53,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 33280,
                                                                                       'INIT\x00\x00\x00\x00': 2048},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/2afc4a24f024b8698642ce8d75aedff9fee94d9ec4e8aa444997d2833bb60da9'},
 '2b17b1def146ff2d023c383784bae55ba613124af3df33cbb7dd8eeb1f830f54': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2b17b1def146ff2d023c383784bae55ba613124af3df33cbb7dd8eeb1f830f54'},
 '2b1bd9877ffb6f1422d2053e95b9acfeadae1ff4033553ce164d4150b31d04fc': {'AddressOfEntryPoint': 229104,
                                                                      'DebugRVA': 238368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 237568,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionBind',
                                                                                      'ntoskrnl.exe': '_purecall'},
                                                                      'ImportedFunctions': ['ObfDereferenceObject',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoStartNextPacket',
                                                                                            'PoUnregisterSystemState',
                                                                                            'PoRegisterSystemState',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IofCompleteRequest',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IofCallDriver',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'PoSetPowerState',
                                                                                            'PoCallDriver',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IoFreeIrp',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'KeInitializeEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeReleaseMutex',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeClearEvent',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeSetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoInitializeIrp',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ExEventObjectType',
                                                                                            'IoDetachDevice',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'wcsstr',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'KeSynchronizeExecution',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'ExFreePoolWithTag',
                                                                                            '__C_specific_handler',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoAllocateMdl',
                                                                                            'MmUnmapLockedPages',
                                                                                            'PoRequestPowerIrp',
                                                                                            'swprintf',
                                                                                            'ZwCreateSection',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'KeDelayExecutionThread',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCreateDevice',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'sprintf',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            '_purecall',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 920,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 13312,
                                                                                       '.rdata\x00\x00': 31744,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 231936,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/2b1bd9877ffb6f1422d2053e95b9acfeadae1ff4033553ce164d4150b31d04fc'},
 '2b20cab13ce9e060bf31aa1aa6dca2db2d3f1d3dfdcaf7bcdf91e12b3a6e05f5': {'AddressOfEntryPoint': 174748,
                                                                      'DebugRVA': 4848,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'USER32.dll': 'CharNextA',
                                                                                      'msvcrt.dll': '_strnicmp'},
                                                                      'ImportedFunctions': ['_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'isalnum',
                                                                                            'isalpha',
                                                                                            'islower',
                                                                                            '_atoi64',
                                                                                            'atol',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'strchr',
                                                                                            'memcpy',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_strnicmp',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GlobalFlags',
                                                                                            '_lopen',
                                                                                            'GetStartupInfoA',
                                                                                            '_hread',
                                                                                            '_lclose',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'lstrcmpiA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcatA',
                                                                                            '_llseek',
                                                                                            'FindNextFileA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'lstrcpyA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SendMessageA',
                                                                                            'LoadStringA',
                                                                                            'CharPrevA',
                                                                                            'wsprintfA',
                                                                                            'GetSystemMetrics',
                                                                                            'CharNextA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2616,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 59392,
                                                                                       '.text\x00\x00\x00': 33280,
                                                                                       'hxobaxv\x00': 31232,
                                                                                       'ldqkunp\x00': 31744,
                                                                                       'ruutamc\x00': 0},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2b20cab13ce9e060bf31aa1aa6dca2db2d3f1d3dfdcaf7bcdf91e12b3a6e05f5'},
 '2b64f38771ffeea01cbfd5a57505e9bb58ed9328bfefabfa3891e17dd564ef0b': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 614912,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2b64f38771ffeea01cbfd5a57505e9bb58ed9328bfefabfa3891e17dd564ef0b'},
 '2b77bcec314435ec275eca22642dbd15685d4c3350d83a4d775fe2a8641d5c45': {'AddressOfEntryPoint': 1074821373,
                                                                      'DebugRVA': 687536,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 679936,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetNumberOfEventLogRecords',
                                                                                      'BtBalloon.dll': 'BalloonTooltip_RegisterClass',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'SetLastError',
                                                                                      'MSVCP80.dll': '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                      'MSVCR80.dll': '__setusermatherr',
                                                                                      'OLEAUT32.dll': 'VarBstrFromDate',
                                                                                      'RASAPI32.dll': 'RasGetErrorStringW',
                                                                                      'SETUPAPI.dll': 'SetupDiCreateDeviceInfoList',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'SendMessageW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'EnumPrintersW',
                                                                                      'WS2_32.dll': 'WSAAddressToStringW',
                                                                                      'btosif.dll': 'OSIF_GetFirstObject',
                                                                                      'btwapi.dll': '?GapStartDiscovery@CWBtAPI@@QEAA?AW4WBtRc@@PEAEH@Z',
                                                                                      'btwhidcs.DLL': '?getBatteryStatus@CBtHidExtRoot@@QEAAHPEAE0PEAH1@Z',
                                                                                      'irprops.cpl': 'BluetoothIsDiscoverable',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['?FaxRemoveConnection@CWBtAPI@@QEAA?AW4WBtRc@@HF@Z',
                                                                                            '?HSP_DisconnectGateway@CWBtAPI@@QEAA?AW4WBtRc@@QEAEJ@Z',
                                                                                            '?HAG_DisconnectHeadset@CWBtAPI@@QEAA?AW4WBtRc@@QEAEJ@Z',
                                                                                            '?SetOnSppStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11AEBU_GUID@@FJ@Z0@Z',
                                                                                            '?SetOnDunStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11AEBU_GUID@@FJ@Z0@Z',
                                                                                            '?SetOnLapStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11AEBU_GUID@@FJ@Z0@Z',
                                                                                            '?SetOnFaxStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11AEBU_GUID@@FJ@Z0@Z',
                                                                                            '?SetOnHSPConnectionStatusChangedCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11JJ@Z0@Z',
                                                                                            '?SetOnHidStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAEHJ@Z0@Z',
                                                                                            '?LapDisconnect@CWBtAPI@@QEAA?AW4WBtRc@@QEAE@Z',
                                                                                            '?DunRemoveConnection@CWBtAPI@@QEAA?AW4WBtRc@@HF@Z',
                                                                                            '?SppRemoveConnection@CWBtAPI@@QEAA?AW4WBtRc@@HF@Z',
                                                                                            '?SyncAbort@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?SetOnSyncAbortCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJ@Z0@Z',
                                                                                            '?ClearSyncAbortCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?ClearSyncSynchronizeCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?SetOnSyncSynchronizeCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAEJ@Z0@Z',
                                                                                            '?SetOnSyncProgressCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAEJJJJ@Z0@Z',
                                                                                            '?SyncSynchronize@CWBtAPI@@QEAA?AW4WBtRc@@QEAEU_GUID@@PEBD@Z',
                                                                                            '?SppCreateConnection@CWBtAPI@@QEAA?AW4WBtRc@@QEAEAEBU_GUID@@PEBDH@Z',
                                                                                            '?DunCreateConnection@CWBtAPI@@QEAA?AW4WBtRc@@QEAEAEBU_GUID@@PEBDH@Z',
                                                                                            '?LapCreateConnection@CWBtAPI@@QEAA?AW4WBtRc@@QEAEAEBU_GUID@@PEBDH@Z',
                                                                                            '?FaxCreateConnection@CWBtAPI@@QEAA?AW4WBtRc@@QEAEAEBU_GUID@@PEBDH@Z',
                                                                                            '?HAG_ConnectHeadsetUuid@CWBtAPI@@QEAA?AW4WBtRc@@QEAEPEBDG@Z',
                                                                                            '?HSP_ConnectGateway@CWBtAPI@@QEAA?AW4WBtRc@@QEAEPEBD@Z',
                                                                                            '?Hid_Connect@CWBtAPI@@QEAA?AW4WBtRc@@QEAEJ@Z',
                                                                                            '?BTAuthorizeRequestCallback@CWBtAPI@@QEAA?AW4WBtRc@@QEAE00JJJ@Z',
                                                                                            '?FTP_ServerEventAuthorization@CWBtAPI@@QEAA?AW4WBtRc@@JJJPEA_W@Z',
                                                                                            '?OPP_ServerEventAuthorization@CWBtAPI@@QEAA?AW4WBtRc@@JJJPEA_W@Z',
                                                                                            '?OAPP_AuthenticateAuthentication@CWBtAPI@@QEAA?AW4WBtRc@@JJJPEBD0@Z',
                                                                                            '?SyncResolveConflict@CWBtAPI@@QEAA?AW4WBtRc@@JJH@Z',
                                                                                            '?SyncAuthorize0Vcf@CWBtAPI@@QEAA?AW4WBtRc@@JJJPEA_W@Z',
                                                                                            '?SyncDeleteConfirmation@CWBtAPI@@QEAA?AW4WBtRc@@JH@Z',
                                                                                            '?BTManageSecurity@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?SetOnBTPINCodeRequest@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11PEA_W@Z0@Z',
                                                                                            '?SetOnBTAuthorizeRequest@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11JPEA_W@Z0@Z',
                                                                                            '?SetOnAuthenticationCompleteCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11J@Z0@Z',
                                                                                            '?SetOnLinkKeyNotificationCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE111@Z0@Z',
                                                                                            '?SetOnStackStateChangedCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJ@Z0@Z',
                                                                                            '?SetOnOPPServerEventCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJQEAE11JPEA_W@Z0@Z',
                                                                                            '?SetOnFTPServerEventCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJQEAE11JPEA_W@Z0@Z',
                                                                                            '?SetOnOAPPAuthenticateCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJQEAE11_N2JPEA_W3@Z0@Z',
                                                                                            '?SetOnSyncServerEventCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJQEAE11JPEA_W@Z0@Z',
                                                                                            '?SetOnSyncConflictEventCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11JPEA_WJJ@Z0@Z',
                                                                                            '?SetOnSync0VcfEventCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11JPEA_W@Z0@Z',
                                                                                            '?SetOnHFPNotificationCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11JJJPEA_W@Z0@Z',
                                                                                            '?SetOnSyncDeleteEventCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11JPEA_WJ@Z0@Z',
                                                                                            '?SetOnConfigurationResetCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAX@Z0@Z',
                                                                                            '?SetOnLocalServiceStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXPEAUtBT_SERVICE_INFO@@@Z0@Z',
                                                                                            '?SetOnHAGConnectionStatusChangedCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11JJ@Z0@Z',
                                                                                            '?BTPINCodeRequestCallback@CWBtAPI@@QEAA?AW4WBtRc@@QEAE000FJJJ@Z',
                                                                                            '?GapGetInquiredDevices@CWBtAPI@@QEAA?AW4WBtRc@@PEAJJPEAUtBT_BASIC_DEV_INFO@@@Z',
                                                                                            '?BtmDeviceIsReady@CWBtAPI@@QEAAHXZ',
                                                                                            '?GapBond@CWBtAPI@@QEAA?AW4WBtRc@@QEAEJ0J@Z',
                                                                                            '?GapBond_64@CWBtAPI@@QEAA?AW4WBtRc@@QEAEJ0JJ@Z',
                                                                                            '?ClearDeviceLostCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?Hid_Disconnect@CWBtAPI@@QEAA?AW4WBtRc@@QEAEJ@Z',
                                                                                            '?GapGetLocalServices@CWBtAPI@@QEAA?AW4WBtRc@@PEAHHPEAUtBT_SERVICE_INFO@@@Z',
                                                                                            '?ClearSyncProgressCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?ClearHidStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?ClearHSPConnectionStatusChangedCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?ClearHAGConnectionStatusChangedCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?ClearFaxStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?ClearLapStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?ClearDunStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?SetOnDeviceFoundCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE11H@Z0@Z',
                                                                                            '?ConnectToServer@CWBtAPI@@QEAA?AW4WBtRc@@_NI00@Z',
                                                                                            '??0CWBtAPI@@QEAA@XZ',
                                                                                            '?ClearDiscoveryEventCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?ClearSppStateChangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?GapGetServiceState@CWBtAPI@@QEAA?AW4WBtRc@@QEAEPEAU_GUID@@PEBDPEAJ3@Z',
                                                                                            '?GapGetActiveConnections@CWBtAPI@@QEAA?AW4WBtRc@@PEAJJPEAUtBT_ACTIVE_CONNS@@@Z',
                                                                                            '?GapStopInquiry@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?SetOnDeviceLostCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAE@Z0@Z',
                                                                                            '?SetOnDeviceStatusCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJJ@Z0@Z',
                                                                                            '?SetOnInquiryCompleteCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJF@Z0@Z',
                                                                                            '?SetOnOppPushCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJQEAEJPEA_WJ@Z0@Z',
                                                                                            '?SetOnOppPullCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJQEAEJPEA_WJ@Z0@Z',
                                                                                            '?SetOnOppExchangeCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJQEAEJPEA_WJ@Z0@Z',
                                                                                            '?GapGetAvailableServices@CWBtAPI@@QEAA?AW4WBtRc@@QEAEPEAHHPEAUtBT_SERVICE_INFO@@@Z',
                                                                                            '?GapGetApplicationState@CWBtAPI@@QEAA?AW4WBtRc@@QEAEPEAU_GUID@@PEBDPEAJ3@Z',
                                                                                            '??1CWBtAPI@@QEAA@XZ',
                                                                                            '?OppAbort@CWBtAPI@@QEAA?AW4WBtRc@@J@Z',
                                                                                            '?ClearDeviceFoundCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?SetOnOppProgressCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJQEAEJPEA_WJJJ@Z0@Z',
                                                                                            '?SetOnOppAbortCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXJJ@Z0@Z',
                                                                                            '?GapStartInquiry@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?LapRemoveConnection@CWBtAPI@@QEAA?AW4WBtRc@@HF@Z',
                                                                                            '?ClearDeviceStatusCallback@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?OppExchange@CWBtAPI@@QEAA?AW4WBtRc@@QEAEU_GUID@@PEBDPEA_W3PEAJ@Z',
                                                                                            '?OppPush@CWBtAPI@@QEAA?AW4WBtRc@@QEAEU_GUID@@PEBDPEA_WPEAJ@Z',
                                                                                            '?OppPull@CWBtAPI@@QEAA?AW4WBtRc@@QEAEU_GUID@@PEBDPEA_WPEAJJ@Z',
                                                                                            '?SetOnDiscoveryEventCallback@CWBtAPI@@QEAA?AW4WBtRc@@P6AXPEAXQEAEGJ@Z0@Z',
                                                                                            '?BtmResetConfiguration@CWBtAPI@@QEAA?AW4WBtRc@@XZ',
                                                                                            '?GapStartDiscovery@CWBtAPI@@QEAA?AW4WBtRc@@PEAEH@Z',
                                                                                            '?getCompany@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getJobTitle@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getID@CBTvCard@@QEAAHPEADH@Z',
                                                                                            'OSIF_FreeObject',
                                                                                            'OSIF_GetObjectName',
                                                                                            'OSIF_CodeToString',
                                                                                            'OSIF_WriteObject',
                                                                                            'OSIF_GetNextObject',
                                                                                            '?getSuffix@CBTvCard@@QEAAHPEADH@Z',
                                                                                            'OSIF_GetObjectById',
                                                                                            'OSIF_AddObject',
                                                                                            'OSIF_ModifyObject',
                                                                                            'OSIF_ObjectsConflict',
                                                                                            '?getDepartment@CBTvCard@@QEAAHPEADH@Z',
                                                                                            'OSIF_ReadObjects',
                                                                                            'OSIF_GetObjectCount',
                                                                                            'OSIF_Close',
                                                                                            'OSIF_OpenX',
                                                                                            'OSIF_Open',
                                                                                            'OSIF_IsPresent',
                                                                                            'OSIF_IsPimSupported',
                                                                                            'OSIF_IsSupported',
                                                                                            '?getEmailAddress@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '??0CBTvCard@@QEAA@XZ',
                                                                                            '?Parse@CBTvCard@@QEAAHPEA_W@Z',
                                                                                            '?getName@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getWorkPhone@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getWorkFax@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getMobilePhone@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getHomePhone@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getWorkAddress@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getHomeAddress@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?LoadFromVCard@CBTvCard@@QEAAXAEBUtagvCard@@@Z',
                                                                                            '?getFirstName@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getLastName@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '?getMiddleName@CBTvCard@@QEAAHPEADH@Z',
                                                                                            'OSIF_FindObject',
                                                                                            '?getTitle@CBTvCard@@QEAAHPEADH@Z',
                                                                                            '??1CBTvCard@@QEAA@XZ',
                                                                                            'OSIF_GetFirstObject',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupGetInfFileListW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupGetLineByIndexW',
                                                                                            'SetupGetLineCountW',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiClassGuidsFromNameW',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiOpenDeviceInterfaceRegKey',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'PathIsDirectoryW',
                                                                                            'SHGetValueW',
                                                                                            'SHSetValueW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathFileExistsW',
                                                                                            'RasGetErrorStringW',
                                                                                            'PlaySoundW',
                                                                                            '?WaitNoInstallEvents@CBtHidExtRoot@@QEAAHKK@Z',
                                                                                            '?getStack@@YAPEAVCBtHidExtRoot@@XZ',
                                                                                            '?readSettings@CBtHidExtRoot@@SAXPEAHPEAK001111@Z',
                                                                                            '?getBatteryStatus@CBtHidExtRoot@@QEAAHPEAE0PEAH1@Z',
                                                                                            'bind',
                                                                                            'getsockname',
                                                                                            'socket',
                                                                                            'closesocket',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSALookupServiceBeginW',
                                                                                            'WSALookupServiceNextW',
                                                                                            'WSAGetLastError',
                                                                                            'WSALookupServiceEnd',
                                                                                            'WSAAddressToStringW',
                                                                                            'BluetoothIsDiscoverable',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_decode_pointer',
                                                                                            '_initterm',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_beginthreadex',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            'memcpy',
                                                                                            'strncpy_s',
                                                                                            'free',
                                                                                            '_swprintf',
                                                                                            'wcscpy',
                                                                                            'swscanf',
                                                                                            'calloc',
                                                                                            '_recalloc',
                                                                                            '__C_specific_handler',
                                                                                            'fclose',
                                                                                            'fputws',
                                                                                            'fwprintf',
                                                                                            '_wfopen',
                                                                                            'wcscat',
                                                                                            '_wcsicmp',
                                                                                            '_time64',
                                                                                            'labs',
                                                                                            'wcslen',
                                                                                            '_memicmp',
                                                                                            '_stricmp',
                                                                                            'strcpy',
                                                                                            '_purecall',
                                                                                            '_wsplitpath',
                                                                                            'wcscat_s',
                                                                                            '_localtime64_s',
                                                                                            'ceil',
                                                                                            'floor',
                                                                                            'wcsncpy',
                                                                                            'wcsncat',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            'memmove_s',
                                                                                            'vsprintf_s',
                                                                                            'realloc',
                                                                                            'wcscmp',
                                                                                            'wcscpy_s',
                                                                                            'rand',
                                                                                            'srand',
                                                                                            'atof',
                                                                                            'sprintf',
                                                                                            'wcsncmp',
                                                                                            'wcsrchr',
                                                                                            'sscanf',
                                                                                            'strcmp',
                                                                                            '_wcsupr',
                                                                                            'wcsstr',
                                                                                            'malloc',
                                                                                            'strncmp',
                                                                                            'strcat',
                                                                                            'isprint',
                                                                                            '_strupr',
                                                                                            'strstr',
                                                                                            '_wtoi',
                                                                                            'vswprintf_s',
                                                                                            '_wcsdup',
                                                                                            'wcschr',
                                                                                            '_wtof',
                                                                                            'wcstok_s',
                                                                                            '_vswprintf',
                                                                                            'vsprintf',
                                                                                            'toupper',
                                                                                            'isdigit',
                                                                                            'strncpy',
                                                                                            'wcsftime',
                                                                                            'wcstombs',
                                                                                            'clearerr_s',
                                                                                            '__doserrno',
                                                                                            'fputs',
                                                                                            'feof',
                                                                                            'fgets',
                                                                                            'strtok',
                                                                                            '_strdup',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_commode',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidCodePage',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExW',
                                                                                            'CreateFileA',
                                                                                            'OutputDebugStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'TerminateThread',
                                                                                            'CreateFileW',
                                                                                            'SetThreadPriority',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetACP',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetThreadLocale',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryActCtxW',
                                                                                            'FindActCtxSectionStringW',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'lstrcmpiW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'CallNamedPipeA',
                                                                                            'EnumResourceNamesW',
                                                                                            'lstrcpynW',
                                                                                            'GetVersion',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryExW',
                                                                                            'OpenEventW',
                                                                                            'lstrcmpW',
                                                                                            'lstrcpyW',
                                                                                            'GetCurrentProcess',
                                                                                            'SuspendThread',
                                                                                            'DeleteFileW',
                                                                                            'CreateThread',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'SetThreadExecutionState',
                                                                                            'SetEvent',
                                                                                            'GetTickCount',
                                                                                            'WinExec',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ResetEvent',
                                                                                            'ProcessIdToSessionId',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'CreateEventW',
                                                                                            'GetCommandLineW',
                                                                                            'GetComputerNameW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetTempPathW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemTime',
                                                                                            'FreeLibrary',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'DestroyWindow',
                                                                                            'SetClassLongPtrW',
                                                                                            'CreateWindowExW',
                                                                                            'CheckRadioButton',
                                                                                            'CheckDlgButton',
                                                                                            'GetDlgItem',
                                                                                            'TranslateMessage',
                                                                                            'DeleteMenu',
                                                                                            'SendInput',
                                                                                            'GetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'DispatchMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SetWindowPos',
                                                                                            'SetDlgItemTextW',
                                                                                            'IsWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'KillTimer',
                                                                                            'ClientToScreen',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemCount',
                                                                                            'GetClassNameW',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'wsprintfW',
                                                                                            'IsMenu',
                                                                                            'SetTimer',
                                                                                            'FindWindowExW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'LoadStringW',
                                                                                            'DestroyIcon',
                                                                                            'GetCursorPos',
                                                                                            'TrackPopupMenu',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'DestroyMenu',
                                                                                            'SetWinEventHook',
                                                                                            'UnhookWinEvent',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'RegisterWindowMessageA',
                                                                                            'MessageBoxW',
                                                                                            'GetParent',
                                                                                            'LoadIconW',
                                                                                            'LoadImageW',
                                                                                            'CallWindowProcW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowLongW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetSystemMetrics',
                                                                                            'EnableMenuItem',
                                                                                            'PostThreadMessageW',
                                                                                            'FindWindowW',
                                                                                            'wvsprintfW',
                                                                                            'GetDesktopWindow',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EnableWindow',
                                                                                            'PeekMessageW',
                                                                                            'BringWindowToTop',
                                                                                            'GetWindowRect',
                                                                                            'SetForegroundWindow',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'IsRectEmpty',
                                                                                            'SendMessageW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetCurrentObject',
                                                                                            'Polyline',
                                                                                            'GetObjectW',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateSolidBrush',
                                                                                            'GetOpenFileNameW',
                                                                                            'EnumJobsW',
                                                                                            'OpenPrinterW',
                                                                                            'ClosePrinter',
                                                                                            'GetPrinterW',
                                                                                            'EnumPrintersW',
                                                                                            'CryptEncrypt',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'GetUserNameW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'DuplicateTokenEx',
                                                                                            'OpenProcessToken',
                                                                                            'CloseEventLog',
                                                                                            'NotifyChangeEventLog',
                                                                                            'OpenEventLogW',
                                                                                            'ReadEventLogW',
                                                                                            'GetOldestEventLogRecord',
                                                                                            'RegDeleteValueW',
                                                                                            'ControlService',
                                                                                            'StartServiceW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'CryptImportKey',
                                                                                            'CryptDecrypt',
                                                                                            'CryptGetUserKey',
                                                                                            'CryptGenKey',
                                                                                            'CryptExportKey',
                                                                                            'CryptSetProvParam',
                                                                                            'CryptDestroyKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetNumberOfEventLogRecords',
                                                                                            'ShellExecuteW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHAppBarMessage',
                                                                                            'Shell_NotifyIconW',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VarBstrFromDate',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAPEBDXZ',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            'BalloonTooltip_Delete',
                                                                                            'BalloonTooltip_Create',
                                                                                            'BalloonTooltip_Move',
                                                                                            'BalloonTooltip_RegisterClass',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 24,
                                                                      'NumberOfImportFunctions': 537,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 36740,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2b77bcec314435ec275eca22642dbd15685d4c3350d83a4d775fe2a8641d5c45'},
 '2bb6ba2a3011b5820bc30a7986fbb3356cfdd92f6287264d51139a12c59f68c3': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3488,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2bb6ba2a3011b5820bc30a7986fbb3356cfdd92f6287264d51139a12c59f68c3'},
 '2c35d36fbef41f51fce55dbe751bd3a2307e70c0ae055f58eb20271cdb5036fa': {'AddressOfEntryPoint': 1073792093,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'OpenEventA',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'OpenProcess',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'CreateMutexA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleFileNameExA',
                                                                                            'EnumProcessModules'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 71,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1436,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2c35d36fbef41f51fce55dbe751bd3a2307e70c0ae055f58eb20271cdb5036fa'},
 '2c8f21f584a3803463d2584785b85f483f5c14abd910bae289430ed2c6ce5e36': {'AddressOfEntryPoint': 1074000701,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 176128,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExW',
                                                                                      'CRYPT32.dll': 'CryptMsgClose',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINTRUST.dll': 'WTHelperGetProvSignerFromChain',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ShellExecuteExW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyExW',
                                                                                            'StrStrIW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'CloseHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'GetLongPathNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpA',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'GetSystemTime',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetACP',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetProcAddress',
                                                                                            'OpenThread',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapFree',
                                                                                            'CertGetNameStringA',
                                                                                            'CertGetNameStringW',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertCloseStore',
                                                                                            'CryptMsgUpdate',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CertOpenStore',
                                                                                            'CryptMsgClose'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 139,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15664,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2c8f21f584a3803463d2584785b85f483f5c14abd910bae289430ed2c6ce5e36'},
 '2ccab21121df27e4297f3d669f2b21267f1f3211e8fe09cf665024001ec53b75': {'AddressOfEntryPoint': 86700,
                                                                      'DebugRVA': 686356,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 785988,
                                                                      'ExportSize': 89,
                                                                      'IATRVA': 688128,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 517168,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12800,
                                                                                       '.pdata\x00\x00': 47616,
                                                                                       '.rdata\x00\x00': 202752,
                                                                                       '.reloc\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 517632,
                                                                                       '.text\x00\x00\x00': 682496},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2ccab21121df27e4297f3d669f2b21267f1f3211e8fe09cf665024001ec53b75'},
 '2cf12dfc7d2db4ab5383592293a929a3d73850a5957fcc330ac80320ebb43a8d': {'AddressOfEntryPoint': 510204,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 593920,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetAclInformation',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAccessData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'EnumWindows',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'CreateThread',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'OutputDebugStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'OpenClipboard',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'TrackPopupMenuEx',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'SystemParametersInfoW',
                                                                                            'DispatchMessageW',
                                                                                            'EnumWindows',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetAclInformation',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 92872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 18432,
                                                                                       '.pdata\x00\x00': 17408,
                                                                                       '.rdata\x00\x00': 79360,
                                                                                       '.rsrc\x00\x00\x00': 93184,
                                                                                       '.text\x00\x00\x00': 588800},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/2cf12dfc7d2db4ab5383592293a929a3d73850a5957fcc330ac80320ebb43a8d'},
 '2cf222d489e7a9a44ec6dfa5e928e3a6b58226c31a7fe9d9230384446f955607': {'AddressOfEntryPoint': 1073758637,
                                                                      'DebugRVA': 12896,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR80.dll': '_XcptFilter',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'StrCmpNW'},
                                                                      'ImportedFunctions': ['GetVersionExW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'PathFileExistsW',
                                                                                            'StrCmpIW',
                                                                                            'StrCpyW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'StrCatW',
                                                                                            'StrCatBuffW',
                                                                                            'StrCmpNW',
                                                                                            'wcscat_s',
                                                                                            'wcsstr',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            'wcsrchr',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            'wcslen',
                                                                                            'wcscpy_s',
                                                                                            '_XcptFilter'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 4608,
                                                                                       '7V\x00\x00c\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2cf222d489e7a9a44ec6dfa5e928e3a6b58226c31a7fe9d9230384446f955607'},
 '2d0aba272b39e942344931beb1469229285ea1e23bf8ee1038b8d32ba2e8db86': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3484,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2d0aba272b39e942344931beb1469229285ea1e23bf8ee1038b8d32ba2e8db86'},
 '2d14147c131afd39db6f868a0bf7d5ab5697b5eae497af5170c31d83287a855d': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 196020,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 196096,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2d14147c131afd39db6f868a0bf7d5ab5697b5eae497af5170c31d83287a855d'},
 '2d726abd9e0bc3716f86141015eab7379689115223662f943d7579f9c683d3cc': {'AddressOfEntryPoint': 24716,
                                                                      'DebugRVA': 8240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'RtlInitUnicodeString'},
                                                                      'ImportedFunctions': ['IoCreateFile',
                                                                                            'ZwClose',
                                                                                            'DbgPrint',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlInitUnicodeString'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 5,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 512,
                                                                                       'INIT\x00\x00\x00\x00': 1024,
                                                                                       'PAGE\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/2d726abd9e0bc3716f86141015eab7379689115223662f943d7579f9c683d3cc'},
 '2dde31dbb7090df38972b3d577d71c16b799e5d1f58d6bdc0fad0b588f4dd886': {'AddressOfEntryPoint': 4206,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 125104,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 4,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetModuleHandleW'},
                                                                      'ImportedFunctions': ['VirtualAlloc',
                                                                                            'MapViewOfFile',
                                                                                            'GetModuleHandleW'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 3,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 48128,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 72704,
                                                                                       'CRT\x00\x00\x00\x00\x00': 46080},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2dde31dbb7090df38972b3d577d71c16b799e5d1f58d6bdc0fad0b588f4dd886'},
 '2deb9d002aeb1f3f12a3104f1aa71d038b3a0ca354d45ac13e35d4836cb3add9': {'AddressOfEntryPoint': 1074048477,
                                                                      'DebugRVA': 186944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'ExtTextOutA',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'DragQueryFileA',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionA',
                                                                                      'USER32.dll': 'EnableMenuItem',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter'},
                                                                      'ImportedFunctions': ['HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'Sleep',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapQueryInformation',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStartupInfoA',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleHandleW',
                                                                                            'SetErrorMode',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'FormatMessageA',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFlags',
                                                                                            'GlobalFree',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'lstrlenA',
                                                                                            'GlobalUnlock',
                                                                                            'GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalFindAtomA',
                                                                                            'SetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpW',
                                                                                            'GetVersionExA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringA',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalLock',
                                                                                            'lstrcmpA',
                                                                                            'GlobalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'CreateProcessA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetLastError',
                                                                                            'GetWindowDC',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'FillRect',
                                                                                            'SetWindowTextA',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'LoadMenuA',
                                                                                            'DestroyMenu',
                                                                                            'ReleaseCapture',
                                                                                            'LoadAcceleratorsA',
                                                                                            'InvalidateRect',
                                                                                            'InsertMenuItemA',
                                                                                            'CreatePopupMenu',
                                                                                            'SetRectEmpty',
                                                                                            'BringWindowToTop',
                                                                                            'ShowWindow',
                                                                                            'TranslateAcceleratorA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'IsWindowEnabled',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetCursor',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'ValidateRect',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapA',
                                                                                            'ModifyMenuA',
                                                                                            'GetMenuState',
                                                                                            'CheckMenuItem',
                                                                                            'RegisterWindowMessageA',
                                                                                            'WinHelpA',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassLongA',
                                                                                            'GetClassNameA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'GetFocus',
                                                                                            'IsWindow',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'SetActiveWindow',
                                                                                            'DispatchMessageA',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageA',
                                                                                            'MapWindowPoints',
                                                                                            'TrackPopupMenu',
                                                                                            'FindWindowA',
                                                                                            'LoadIconA',
                                                                                            'LoadCursorA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetKeyState',
                                                                                            'SetMenu',
                                                                                            'EnableWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'IsWindowVisible',
                                                                                            'UpdateWindow',
                                                                                            'GetClientRect',
                                                                                            'GetSubMenu',
                                                                                            'UnregisterClassA',
                                                                                            'GetSysColorBrush',
                                                                                            'GetMenuItemInfoA',
                                                                                            'InflateRect',
                                                                                            'GetCursorPos',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'GetWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowPlacement',
                                                                                            'IsIconic',
                                                                                            'SystemParametersInfoA',
                                                                                            'IntersectRect',
                                                                                            'OffsetRect',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'GetMenu',
                                                                                            'CallWindowProcA',
                                                                                            'DefWindowProcA',
                                                                                            'SendMessageA',
                                                                                            'GetDlgCtrlID',
                                                                                            'PtInRect',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'MessageBoxA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetParent',
                                                                                            'ScreenToClient',
                                                                                            'EqualRect',
                                                                                            'DeferWindowPos',
                                                                                            'CopyRect',
                                                                                            'EnableMenuItem',
                                                                                            'DeleteDC',
                                                                                            'CreatePatternBrush',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'TextOutA',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetPixel',
                                                                                            'BitBlt',
                                                                                            'DeleteObject',
                                                                                            'SetMapMode',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBitmap',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'ExtTextOutA',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA',
                                                                                            'ClosePrinter',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'DragFinish',
                                                                                            'DragQueryFileA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathFindExtensionA',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 283,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 40348,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2deb9d002aeb1f3f12a3104f1aa71d038b3a0ca354d45ac13e35d4836cb3add9'},
 '2debe67a9d687500e6a82b4896301429280435bb5225bd90abae4e7cb85458a5': {'AddressOfEntryPoint': 1073802077,
                                                                      'DebugRVA': 33936,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'HTTPAPI.dll': 'HttpReceiveHttpRequest',
                                                                                      'IPHLPAPI.DLL': 'SendARP',
                                                                                      'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'MSVCP80.dll': '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                      'MSVCR80.dll': 'memset',
                                                                                      'USER32.dll': 'SendMessageW',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'CancelIo',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenFileMappingW',
                                                                                            'OpenSemaphoreW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateEventW',
                                                                                            'CancelIoEx',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'OpenMutexW',
                                                                                            'ReleaseSemaphore',
                                                                                            'SetEvent',
                                                                                            'OpenProcess',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'OutputDebugStringW',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ResetEvent',
                                                                                            'OpenEventW',
                                                                                            'UnmapViewOfFile',
                                                                                            'HeapFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'PostMessageW',
                                                                                            'SendMessageW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAHPEB_W@Z',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@_W@Z',
                                                                                            '??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PEB_W@Z',
                                                                                            '??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PEB_W@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAAEB_W_K@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_encode_pointer',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            '_stricmp',
                                                                                            'swscanf_s',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            'wprintf',
                                                                                            '_beginthreadex',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'memmove_s',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memcpy_s',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            'strcpy_s',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            'vswprintf_s',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            'sprintf_s',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '__winitenv',
                                                                                            'memset',
                                                                                            'HttpRemoveUrlFromUrlGroup',
                                                                                            'HttpCloseUrlGroup',
                                                                                            'HttpCloseServerSession',
                                                                                            'HttpSetUrlGroupProperty',
                                                                                            'HttpTerminate',
                                                                                            'HttpSendHttpResponse',
                                                                                            'HttpSendResponseEntityBody',
                                                                                            'HttpAddUrlToUrlGroup',
                                                                                            'HttpCreateRequestQueue',
                                                                                            'HttpCreateUrlGroup',
                                                                                            'HttpCreateServerSession',
                                                                                            'HttpCloseRequestQueue',
                                                                                            'HttpInitialize',
                                                                                            'HttpReceiveHttpRequest',
                                                                                            'SendARP',
                                                                                            'inet_ntoa',
                                                                                            'inet_addr'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1432,
                                                                      'SectionNames': {'\x19\x05\x01\x00c\x00\x00\x00': 1536,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 21504,
                                                                                       '.text\x00\x00\x00': 27648},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2debe67a9d687500e6a82b4896301429280435bb5225bd90abae4e7cb85458a5'},
 '2df9b94ab21d882f6c9caffcf03dfd910786fcf62ec2dd161a1fe435c0d7a9a4': {'AddressOfEntryPoint': 33652,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltGetBottomInstance',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['RtlCompareUnicodeString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwOpenProcess',
                                                                                            'IoDeleteDevice',
                                                                                            'ZwReadFile',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeBugCheckEx',
                                                                                            'IoAttachDeviceToDeviceStackSafe',
                                                                                            'ZwClose',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePool',
                                                                                            'IoRegisterFsRegistrationChange',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoThreadToProcess',
                                                                                            'PsGetProcessId',
                                                                                            'IoUnregisterFsRegistrationChange',
                                                                                            'IoDetachDevice',
                                                                                            'ExQueueWorkItem',
                                                                                            'ZwWriteFile',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoCreateDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoFreeWorkItem',
                                                                                            'ZwQueryInformationProcess',
                                                                                            '__C_specific_handler',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltCancelFileOpen',
                                                                                            'FltClose',
                                                                                            'FltAttachVolume',
                                                                                            'FltCreateFile',
                                                                                            'FltGetVolumeFromName',
                                                                                            'FltSendMessage',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltStartFiltering',
                                                                                            'FltGetVolumeFromDeviceObject',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltRegisterFilter',
                                                                                            'FltGetDeviceObject',
                                                                                            'FltObjectDereference',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltGetVolumeName',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltEnumerateVolumes',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltCloseClientPort',
                                                                                            'FltGetBottomInstance'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 3072,
                                                                                       'INIT\x00\x00\x00\x00': 3072,
                                                                                       'PAGE\x00\x00\x00\x00': 11264},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/2df9b94ab21d882f6c9caffcf03dfd910786fcf62ec2dd161a1fe435c0d7a9a4'},
 '2e06d0ebc006b7abb206a5e3ecb56cb3162404656eaaafe95c2b95bec7669669': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 398296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 398336,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2e06d0ebc006b7abb206a5e3ecb56cb3162404656eaaafe95c2b95bec7669669'},
 '2e1738364af0008c3adf761818a88d004402d87f96639681b47fa66adba2f4ea': {'AddressOfEntryPoint': 94784,
                                                                      'DebugRVA': 162000,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 159744,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'WriteConsoleA',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'USER32.dll': 'LoadMenuW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'comdlg32.dll': 'FindTextW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CreateToolbarEx',
                                                                                            'CreateStatusWindowW',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpyW',
                                                                                            'LockResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineW',
                                                                                            'GlobalUnlock',
                                                                                            'GetTempPathW',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTempFileNameW',
                                                                                            'GlobalLock',
                                                                                            'SizeofResource',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'GetFileSize',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeFormatW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FindResourceW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'EnumResourceNamesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetStdHandle',
                                                                                            'SetErrorMode',
                                                                                            'CreateProcessW',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadProcessMemory',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'RaiseException',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'OpenProcess',
                                                                                            'TerminateProcess',
                                                                                            'EnumResourceTypesW',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'LoadLibraryExW',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'HeapReAlloc',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'HeapSize',
                                                                                            'Sleep',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'GetModuleHandleA',
                                                                                            'RtlCaptureContext',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'lstrlenA',
                                                                                            'CompareFileTime',
                                                                                            'GetLocalTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetNumberFormatW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GlobalAlloc',
                                                                                            'LocalFree',
                                                                                            'LoadResource',
                                                                                            'GetProcAddress',
                                                                                            'FileTimeToSystemTime',
                                                                                            'WriteConsoleA',
                                                                                            'DrawTextExW',
                                                                                            'IsDialogMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'TrackPopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadCursorW',
                                                                                            'ShowWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'GetMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'BeginPaint',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'DeferWindowPos',
                                                                                            'CreateWindowExW',
                                                                                            'DestroyIcon',
                                                                                            'LoadIconW',
                                                                                            'SetWindowPos',
                                                                                            'LoadStringW',
                                                                                            'EnumChildWindows',
                                                                                            'DialogBoxParamW',
                                                                                            'CreateDialogParamW',
                                                                                            'GetParent',
                                                                                            'DestroyMenu',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetMenuItemInfoW',
                                                                                            'ModifyMenuW',
                                                                                            'GetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'CloseClipboard',
                                                                                            'MapWindowPoints',
                                                                                            'EnableWindow',
                                                                                            'GetSysColor',
                                                                                            'SetClipboardData',
                                                                                            'GetCursorPos',
                                                                                            'GetMenuStringW',
                                                                                            'CheckMenuRadioItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetMenuItemCount',
                                                                                            'MoveWindow',
                                                                                            'OpenClipboard',
                                                                                            'GetClassNameW',
                                                                                            'ReleaseDC',
                                                                                            'GetSubMenu',
                                                                                            'EnableMenuItem',
                                                                                            'GetDC',
                                                                                            'EmptyClipboard',
                                                                                            'EndDeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'SetFocus',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SetMenu',
                                                                                            'SetWindowPlacement',
                                                                                            'TranslateAcceleratorW',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassW',
                                                                                            'SendMessageW',
                                                                                            'PostMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetWindowPlacement',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'SetDlgItemInt',
                                                                                            'DrawFrameControl',
                                                                                            'GetWindow',
                                                                                            'EndPaint',
                                                                                            'InvalidateRect',
                                                                                            'GetDlgItemInt',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'LoadMenuW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'SelectObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'FindTextW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'WriteClassStg',
                                                                                            'StgCreateDocfile',
                                                                                            'CoCreateInstance',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 239,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 19152,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 32768,
                                                                                       '.rsrc\x00\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 153600},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2e1738364af0008c3adf761818a88d004402d87f96639681b47fa66adba2f4ea'},
 '2e9532ca86fbaa19de9b8e529ed10adf791064fcc56f9b1d86e907c4bd9b1a77': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 209368,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 209408,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2e9532ca86fbaa19de9b8e529ed10adf791064fcc56f9b1d86e907c4bd9b1a77'},
 '2ea7ba53f55d1abcfb6e7b14c0b36ebc72ff38b4d1ec3603e1cabbcc752e86c0': {'AddressOfEntryPoint': 114808,
                                                                      'DebugRVA': 6352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CertVerifyCertificateChainPolicy',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameW',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHCreateDirectoryExW',
                                                                                      'SHLWAPI.dll': 'SHSetValueW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINTRUST.dll': 'WTHelperProvDataFromStateData',
                                                                                      'msvcrt.dll': '__getmainargs',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegDeleteKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatusEx',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetTempFileNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindResourceExW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CreateDirectoryW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetVersionExW',
                                                                                            'MoveFileW',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemDirectoryW',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateThread',
                                                                                            'lstrcmpiW',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'OpenProcess',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetLastError',
                                                                                            'GetLocalTime',
                                                                                            'MoveFileExW',
                                                                                            'GetTempPathW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'SetFileAttributesW',
                                                                                            'EnumResourceNamesW',
                                                                                            'LocalAlloc',
                                                                                            'GetLocaleInfoW',
                                                                                            'SizeofResource',
                                                                                            'EnumUILanguagesW',
                                                                                            'LockResource',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'MulDiv',
                                                                                            'RaiseException',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemInfo',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'CreateMutexW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'FindResourceW',
                                                                                            'ResumeThread',
                                                                                            'CreateFileMappingW',
                                                                                            'IsWow64Process',
                                                                                            'MapViewOfFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetStartupInfoW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'LoadResource',
                                                                                            'EnterCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'LoadIconW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'KillTimer',
                                                                                            'PostMessageW',
                                                                                            'LoadImageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'SetTimer',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'CopyRect',
                                                                                            'SetWindowPos',
                                                                                            'GetDesktopWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'BringWindowToTop',
                                                                                            'OffsetRect',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowRect',
                                                                                            'CharToOemW',
                                                                                            'ExitWindowsEx',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageW',
                                                                                            'UpdateWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'UnregisterClassA',
                                                                                            'DispatchMessageW',
                                                                                            'CharNextW',
                                                                                            'FindWindowW',
                                                                                            'LoadStringW',
                                                                                            '_XcptFilter',
                                                                                            '_fileno',
                                                                                            '_read',
                                                                                            '__pioinfo',
                                                                                            '__badioinfo',
                                                                                            'wcstombs',
                                                                                            'iswctype',
                                                                                            'ferror',
                                                                                            'wctomb',
                                                                                            '_itoa',
                                                                                            '_snprintf',
                                                                                            '_iob',
                                                                                            'localeconv',
                                                                                            'isxdigit',
                                                                                            'calloc',
                                                                                            'malloc',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'free',
                                                                                            '_exit',
                                                                                            '_errno',
                                                                                            '_wcsicmp',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_vsnwprintf',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'iswdigit',
                                                                                            '_wtol',
                                                                                            'iswalpha',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'isleadbyte',
                                                                                            '__mb_cur_max',
                                                                                            'mbtowc',
                                                                                            'isdigit',
                                                                                            '_initterm',
                                                                                            'ungetc',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_isatty',
                                                                                            '_write',
                                                                                            '_lseeki64',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            'realloc',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            'InitCommonControlsEx',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysReAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'PathIsRelativeW',
                                                                                            'SHDeleteKeyW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFileExistsW',
                                                                                            'PathFindExtensionW',
                                                                                            'SHRegSetUSValueW',
                                                                                            'SHGetValueW',
                                                                                            'PathStripPathW',
                                                                                            'StrChrW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'SHRegGetValueW',
                                                                                            'PathIsFileSpecW',
                                                                                            'StrCmpNIW',
                                                                                            'SHSetValueW',
                                                                                            'IsThemeActive',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WinVerifyTrust',
                                                                                            'WTHelperProvDataFromStateData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 249,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 384368,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 384512,
                                                                                       '.text\x00\x00\x00': 141824},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2ea7ba53f55d1abcfb6e7b14c0b36ebc72ff38b4d1ec3603e1cabbcc752e86c0'},
 '2f02a820c591f5c915ae5ab612362848b2a0b48be22529641d732030c66aa73e': {'AddressOfEntryPoint': 166787,
                                                                      'DebugRVA': 400492,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 401408,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'gdiplus.dll': 'GdipGetImageGraphicsContext',
                                                                                      'msvcrt.dll': '_wcsrev',
                                                                                      'ntdll.dll': 'NtQueryLicenseValue',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SHGetSpecialFolderPathW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellAboutW',
                                                                                            'ShellExecuteExW',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipCloneBitmapAreaI',
                                                                                            'GdipSetPageUnit',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDrawArcI',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'QueryServiceConfigW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'EventWrite',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'IsThemeActive',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Add',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'PropertySheetW',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'NtQueryLicenseValue',
                                                                                            'lstrlenA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemTime',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'CloseHandle',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'MulDiv',
                                                                                            'GlobalFindAtomW',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetLocaleInfoW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetLocaleInfoEx',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'GetVersionExW',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'IsWow64Process',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'GetProfileStringW',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'RegisterApplicationRecoveryCallback',
                                                                                            'ApplicationRecoveryInProgress',
                                                                                            'Sleep',
                                                                                            'ApplicationRecoveryFinished',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetTempFileNameW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnableWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'PostMessageW',
                                                                                            'IsWindowEnabled',
                                                                                            'CharNextA',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetMenuState',
                                                                                            'GetFocus',
                                                                                            'OpenClipboard',
                                                                                            'GetClipboardData',
                                                                                            'InvalidateRect',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'InsertMenuItemW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageExtraInfo',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetKeyState',
                                                                                            'IsDialogMessageW',
                                                                                            'GetClassNameW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowLongW',
                                                                                            'DrawTextW',
                                                                                            'EnumChildWindows',
                                                                                            'SetPropW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetWindowPlacement',
                                                                                            'UpdateWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'MoveWindow',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'SetClassLongW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'OffsetRect',
                                                                                            'EqualRect',
                                                                                            'MonitorFromRect',
                                                                                            'GetClassWord',
                                                                                            'EnumDesktopWindows',
                                                                                            'EnumDisplayMonitors',
                                                                                            'IntersectRect',
                                                                                            'CopyRect',
                                                                                            'CreateDialogParamW',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'CreatePopupMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'GetAncestor',
                                                                                            'FindWindowW',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckMenuItem',
                                                                                            'GetSysColor',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetClassLongPtrW',
                                                                                            'EndDialog',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'SendMessageW',
                                                                                            'MessageBeep',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'DrawMenuBar',
                                                                                            'SetMenuItemInfoW',
                                                                                            'AppendMenuW',
                                                                                            'LoadStringW',
                                                                                            'GetSubMenu',
                                                                                            'RemoveMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'SetFocus',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'GetParent',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'LoadImageW',
                                                                                            'UnregisterClassA',
                                                                                            'FillRect',
                                                                                            'SetWindowTextW',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CheckRadioButton',
                                                                                            'DestroyWindow',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'timeGetTime',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'CreatePatternBrush',
                                                                                            'DeleteObject',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPointW',
                                                                                            'DeleteDC',
                                                                                            'GetRgnBox',
                                                                                            'CreateSolidBrush',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'ExtCreatePen',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateRectRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'EqualRgn',
                                                                                            'CreateDIBSection',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            '_wcsdup',
                                                                                            '_i64tow_s',
                                                                                            '_wtoi64',
                                                                                            'sprintf_s',
                                                                                            '_strtoi64',
                                                                                            '_strtoui64',
                                                                                            'memchr',
                                                                                            'strcspn',
                                                                                            'wcsrchr',
                                                                                            'wcstoul',
                                                                                            'isalpha',
                                                                                            'time',
                                                                                            'difftime',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '__CxxFrameHandler3',
                                                                                            'setlocale',
                                                                                            '__pctype_func',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            'localeconv',
                                                                                            '_errno',
                                                                                            '___mb_cur_max_func',
                                                                                            '__mb_cur_max',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__crtLCMapStringW',
                                                                                            '__uncaught_exception',
                                                                                            'tolower',
                                                                                            'isspace',
                                                                                            'abort',
                                                                                            'isalnum',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'iswalpha',
                                                                                            'iswdigit',
                                                                                            '_wcslwr_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcsncmp',
                                                                                            '_itow_s',
                                                                                            'calloc',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_itoa',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'wcstol',
                                                                                            'mbstowcs_s',
                                                                                            'exit',
                                                                                            'isdigit',
                                                                                            'isxdigit',
                                                                                            'toupper',
                                                                                            '_purecall',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            '_wcsrev'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 370,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 403352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 19968,
                                                                                       '.pdata\x00\x00': 26112,
                                                                                       '.rdata\x00\x00': 69632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 403456,
                                                                                       '.text\x00\x00\x00': 396800},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2f02a820c591f5c915ae5ab612362848b2a0b48be22529641d732030c66aa73e'},
 '2f3a68fff0973a87198307b55c6680503fc8254bcb2d745e27b0d23343ce5f51': {'AddressOfEntryPoint': 1073910005,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconA',
                                                                                      'SHLWAPI.dll': 'StrStrIA',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'hccutils.DLL': 'FindResources',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['LoadSTRING',
                                                                                            'LoadBITMAP',
                                                                                            'LoadICON',
                                                                                            'LoadIMAGE',
                                                                                            'FindResources',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpiA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineA',
                                                                                            'Sleep',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'CreateEventA',
                                                                                            'WriteConsoleW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'LCMapStringA',
                                                                                            'ExitProcess',
                                                                                            'LCMapStringW',
                                                                                            'FlsAlloc',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetProcAddress',
                                                                                            'CreateFileA',
                                                                                            'GetLocaleInfoA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'HeapAlloc',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetStdHandle',
                                                                                            'SetFilePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ShowWindow',
                                                                                            'GetDC',
                                                                                            'GetSystemMetrics',
                                                                                            'ReleaseDC',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'DestroyIcon',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'SetForegroundWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowTextA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'PostMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyMenu',
                                                                                            'FindWindowA',
                                                                                            'SetWindowLongA',
                                                                                            'PostThreadMessageA',
                                                                                            'CharNextW',
                                                                                            'CharNextA',
                                                                                            'GetCursorPos',
                                                                                            'GetWindowLongA',
                                                                                            'wsprintfA',
                                                                                            'IsWindow',
                                                                                            'RegisterWindowMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetDIBits',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'BitBlt',
                                                                                            'SetTextColor',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'Shell_NotifyIconA',
                                                                                            'CoTaskMemFree',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoTaskMemAlloc',
                                                                                            'VarUI4FromStr',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'StrStrIA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 172,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2552,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2f3a68fff0973a87198307b55c6680503fc8254bcb2d745e27b0d23343ce5f51'},
 '2f6921f9135ee2ab2cbea588746648334d5596a6f40817a11b0268f9fe834afd': {'AddressOfEntryPoint': 1073808349,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapSize',
                                                                                      'USER32.dll': 'wsprintfW'},
                                                                      'ImportedFunctions': ['GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetLastError',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetLocaleInfoA',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'wsprintfW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/2f6921f9135ee2ab2cbea588746648334d5596a6f40817a11b0268f9fe834afd'},
 '2f6e2e657c9c15fb9828d2a6b473a77327a2f6b0e1e3d0a0975f2a5c7aed2d13': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 77824,
                                                                      'ExportSize': 12984088,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetVolumeInformationA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileA',
                                                                                            '_lclose',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetProcAddress',
                                                                                            '_llseek',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CompareStringA',
                                                                                            'LoadLibraryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetPrivateProfileIntA',
                                                                                            '_lopen',
                                                                                            'GetShortPathNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WriteFile',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVersionExA',
                                                                                            'SetFilePointer',
                                                                                            'GetVersion',
                                                                                            'FreeResource',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CreateDirectoryA',
                                                                                            'TerminateThread',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'LockResource',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetEvent',
                                                                                            'ReadFile',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetDeviceCaps',
                                                                                            'CallWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextA',
                                                                                            'DispatchMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDC',
                                                                                            'SetWindowPos',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'EndDialog',
                                                                                            'CharNextA',
                                                                                            'GetDesktopWindow',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'LoadStringA',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12985100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 12985344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2f6e2e657c9c15fb9828d2a6b473a77327a2f6b0e1e3d0a0975f2a5c7aed2d13'},
 '2fb0af0e0f164251f3c4a3cf24537ea4060dd897a497de68717edf018beaff47': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 168364,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 168448,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2fb0af0e0f164251f3c4a3cf24537ea4060dd897a497de68717edf018beaff47'},
 '2fe57b9024edd2c1c5c35dd1f03f88d45c194dd00bc7be12ae7d82a2a18a2e4f': {'AddressOfEntryPoint': 30369,
                                                                      'DebugRVA': 46864,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'COMCTL32.dll': 'CreateStatusWindowW',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'CreateDCW',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'DragAcceptFiles',
                                                                                      'SHLWAPI.dll': 'SHStrDupW',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeExW',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'IsTextUnicode',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceConfigW',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'GlobalAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'lstrcmpW',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'IsWow64Process',
                                                                                            'CreateThread',
                                                                                            'FindNLSString',
                                                                                            'UnmapViewOfFile',
                                                                                            'LocalReAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetEndOfFile',
                                                                                            'DeleteFileW',
                                                                                            'GetACP',
                                                                                            'WriteFile',
                                                                                            'SetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'LocalSize',
                                                                                            'GetFullPathNameW',
                                                                                            'FoldStringW',
                                                                                            'LocalUnlock',
                                                                                            'LocalLock',
                                                                                            'FormatMessageW',
                                                                                            'FindClose',
                                                                                            'ReadFile',
                                                                                            'FindFirstFileW',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineW',
                                                                                            'lstrlenW',
                                                                                            'MulDiv',
                                                                                            'GetLocaleInfoW',
                                                                                            'GlobalFree',
                                                                                            'LocalAlloc',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersionExW',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'CreateFileW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcmpiW',
                                                                                            'LocalFree',
                                                                                            'GetProcessHeap',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'StartPage',
                                                                                            'StartDocW',
                                                                                            'SetAbortProc',
                                                                                            'DeleteDC',
                                                                                            'EndDoc',
                                                                                            'AbortDoc',
                                                                                            'EndPage',
                                                                                            'GetTextMetricsW',
                                                                                            'SetBkMode',
                                                                                            'LPtoDP',
                                                                                            'SetWindowExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'SetMapMode',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'TextOutW',
                                                                                            'EnumFontsW',
                                                                                            'GetTextFaceW',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateDCW',
                                                                                            'GetDlgItemTextW',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgCtrlID',
                                                                                            'WinHelpW',
                                                                                            'GetCursorPos',
                                                                                            'ScreenToClient',
                                                                                            'ChildWindowFromPoint',
                                                                                            'GetParent',
                                                                                            'GetWindowPlacement',
                                                                                            'CharUpperW',
                                                                                            'GetSystemMenu',
                                                                                            'LoadAcceleratorsW',
                                                                                            'SetWindowLongW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadCursorW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowPlacement',
                                                                                            'LoadImageW',
                                                                                            'RegisterClassExW',
                                                                                            'SetScrollPos',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'EnableWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'DrawTextExW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'GetAncestor',
                                                                                            'FindWindowW',
                                                                                            'SetForegroundWindow',
                                                                                            'OpenClipboard',
                                                                                            'GetMenuState',
                                                                                            'SetWindowTextW',
                                                                                            'UnhookWinEvent',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetMessageW',
                                                                                            'SetWinEventHook',
                                                                                            'CharNextW',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBeep',
                                                                                            'DestroyWindow',
                                                                                            'PostQuitMessage',
                                                                                            'IsIconic',
                                                                                            'DefWindowProcW',
                                                                                            'CloseClipboard',
                                                                                            'GetWindowTextW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'LoadStringW',
                                                                                            'SetActiveWindow',
                                                                                            'SetCursor',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'ShowWindow',
                                                                                            'CheckMenuItem',
                                                                                            'MessageBoxW',
                                                                                            'GetFocus',
                                                                                            'LoadIconW',
                                                                                            'DialogBoxParamW',
                                                                                            'SetFocus',
                                                                                            'GetSubMenu',
                                                                                            'EnableMenuItem',
                                                                                            'GetMenu',
                                                                                            'PostMessageW',
                                                                                            'MoveWindow',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'memset',
                                                                                            '_vsnwprintf',
                                                                                            '_wtol',
                                                                                            'iswctype',
                                                                                            'wcsrchr',
                                                                                            'wcsncmp',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetSaveFileNameW',
                                                                                            'ReplaceTextW',
                                                                                            'FindTextW',
                                                                                            'PageSetupDlgW',
                                                                                            'ChooseFontW',
                                                                                            'GetFileTitleW',
                                                                                            'PrintDlgExW',
                                                                                            'GetOpenFileNameW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteExW',
                                                                                            'DragFinish',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'ShellAboutW',
                                                                                            'DragQueryFileW',
                                                                                            'SHAddToRecentDocs',
                                                                                            'DragAcceptFiles',
                                                                                            'GetPrinterDriverW',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'PathIsFileSpecW',
                                                                                            'SHStrDupW',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'PropertySheetW',
                                                                                            'CreateStatusWindowW',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtQueryLicenseValue',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'GetFileVersionInfoSizeExW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 239,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 127328,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 127488,
                                                                                       '.text\x00\x00\x00': 43008},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/2fe57b9024edd2c1c5c35dd1f03f88d45c194dd00bc7be12ae7d82a2a18a2e4f'},
 '317849c236aa238bd3287ed58effeef15db1c7d63cf54bbbba1f88b3d97d6c7a': {'AddressOfEntryPoint': 18492,
                                                                      'DebugRVA': 49776,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadProcessMemory',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenProcess',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 42496},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/317849c236aa238bd3287ed58effeef15db1c7d63cf54bbbba1f88b3d97d6c7a'},
 '317d12da8444f3bd33fdad54b20cf25b2ccc7826e8f6ee03d28f4831beac3045': {'AddressOfEntryPoint': 1074327305,
                                                                      'DebugRVA': 452544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 556736,
                                                                      'ExportSize': 251,
                                                                      'IATRVA': 450560,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CopySid',
                                                                                      'KERNEL32.dll': 'RaiseException',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime'},
                                                                      'ImportedFunctions': ['PathRemoveFileSpecW',
                                                                                            'PathFileExistsW',
                                                                                            'GetTickCount',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetInformationJobObject',
                                                                                            'WaitForSingleObject',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSection',
                                                                                            'TerminateJobObject',
                                                                                            'SetEvent',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'ResetEvent',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'DeleteCriticalSection',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetHandleInformation',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'WriteProcessMemory',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetThreadContext',
                                                                                            'AssignProcessToJobObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'VirtualProtectEx',
                                                                                            'GetLongPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateFileW',
                                                                                            'QueryDosDeviceW',
                                                                                            'CreateJobObjectW',
                                                                                            'CreateMutexW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateNamedPipeW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'VirtualQuery',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ReleaseMutex',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringA',
                                                                                            'FormatMessageA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ReadFile',
                                                                                            'VirtualAlloc',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'IsDebuggerPresent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FlushFileBuffers',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitNamedPipeW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapFree',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapAlloc',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleFileNameA',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'LoadLibraryA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateFileA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetTempPathW',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'RaiseException',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'CreateWindowStationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'CreateDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'MessageBoxW',
                                                                                            'CharUpperW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'RegCloseKey',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'RevertToSelf',
                                                                                            'SetSecurityInfo',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenProcessToken',
                                                                                            'SetThreadToken',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegCreateKeyExW',
                                                                                            'CreateRestrictedToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'DuplicateToken',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'TraceEvent',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 213,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2004,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/317d12da8444f3bd33fdad54b20cf25b2ccc7826e8f6ee03d28f4831beac3045'},
 '318cba67eaf945c667019f2d3d5a88f4850d27aa153e8718668c60debb54a2b4': {'AddressOfEntryPoint': 11712,
                                                                      'DebugRVA': 13920,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 27136,
                                                                      'ExportSize': 107,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'API-MS-Win-Core-ErrorHandling-L1-1-0.dll': 'SetErrorMode',
                                                                                      'API-MS-Win-Core-Handle-L1-1-0.dll': 'CloseHandle',
                                                                                      'API-MS-Win-Core-LibraryLoader-L1-1-0.dll': 'GetModuleHandleW',
                                                                                      'API-MS-Win-Core-LocalRegistry-L1-1-0.dll': 'RegQueryValueExW',
                                                                                      'API-MS-Win-Core-Misc-L1-1-0.dll': 'Sleep',
                                                                                      'API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll': 'GetEnvironmentVariableW',
                                                                                      'API-MS-Win-Core-ProcessThreads-L1-1-0.dll': 'TerminateProcess',
                                                                                      'API-MS-Win-Core-Profile-L1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'API-MS-Win-Core-Synch-L1-1-0.dll': 'OpenEventW',
                                                                                      'API-MS-Win-Core-SysInfo-L1-1-0.dll': 'GetTickCount',
                                                                                      'API-MS-Win-Security-Base-L1-1-0.dll': 'GetTokenInformation',
                                                                                      'RPCRT4.dll': 'RpcServerUseProtseqEpW',
                                                                                      'SspiSrv.dll': 'SspiSrvClientCallback',
                                                                                      'msvcrt.dll': '_vsnprintf_s',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            'memcpy',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            '__set_app_type',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            'strcpy_s',
                                                                                            '_vsnprintf_s',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtListenPort',
                                                                                            'NtAcceptConnectPort',
                                                                                            'NtRequestWaitReplyPort',
                                                                                            'NtConnectPort',
                                                                                            'NtReplyWaitReceivePort',
                                                                                            'NtCreatePort',
                                                                                            'NtCompleteConnectPort',
                                                                                            'NtSetSecurityObject',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtOpenEvent',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlLengthSid',
                                                                                            'NtOpenFile',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlMakeSelfRelativeSD',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlCreateAcl',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'RtlAddMandatoryAce',
                                                                                            'DbgPrintEx',
                                                                                            'RtlCaptureContext',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerRegisterIf2',
                                                                                            'NdrServerCallAll',
                                                                                            'NdrServerCall2',
                                                                                            'RpcServerListen',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'SspiSrvInitialize',
                                                                                            'SspiSrvClientCallback',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'OpenEventW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetTokenInformation'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 92,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 15360,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 10240},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/318cba67eaf945c667019f2d3d5a88f4850d27aa153e8718668c60debb54a2b4'},
 '321fc8782390b7e99a8cc946a299fe8bcb4f0a2569ea2541ae1c8e1b0659a37c': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9628,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 15453184,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/321fc8782390b7e99a8cc946a299fe8bcb4f0a2569ea2541ae1c8e1b0659a37c'},
 '32a973ce00bf7502162ec5039a78fe6fc644ae0e999b889ba805476b54c801f9': {'AddressOfEntryPoint': 1073894965,
                                                                      'DebugRVA': 95200,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'IMM32.dll': 'ImmInstallIMEW',
                                                                                      'KERNEL32.dll': 'GetConsoleMode',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'VERSION.dll': 'VerQueryValueW'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'PathFileExistsW',
                                                                                            'ImmInstallIMEW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'CopyFileW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'HeapReAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'HeapSize',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileTime',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'ReadFile',
                                                                                            'FlsGetValue',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'Sleep',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'UnloadKeyboardLayout',
                                                                                            'MessageBoxW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 103,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 20028,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/32a973ce00bf7502162ec5039a78fe6fc644ae0e999b889ba805476b54c801f9'},
 '32cc654cc4073e9dcaf78cf6aa3a49215b24f51e351f121752e3f7dc118a5b36': {'AddressOfEntryPoint': 22268,
                                                                      'DebugRVA': 124304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'LoadTypeLibEx',
                                                                                      'RPCRT4.dll': 'UuidCreateSequential',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'SetWindowTextW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'ntdll.dll': '__chkstk',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ZwCreateSection',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'LdrFindEntryForAddress',
                                                                                            'RtlImageNtHeader',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwFlushKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'memcmp',
                                                                                            'ZwOpenTimer',
                                                                                            'ZwSetTimer',
                                                                                            'ZwDeleteFile',
                                                                                            'memcpy',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'memset',
                                                                                            'ZwWriteFile',
                                                                                            'strtoul',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetInformationFile',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'RtlGetCurrentPeb',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'LdrUnloadDll',
                                                                                            'LdrAddRefDll',
                                                                                            'sprintf',
                                                                                            'strlen',
                                                                                            'ZwRaiseHardError',
                                                                                            'wcsstr',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'LdrLoadDll',
                                                                                            'RtlInitUnicodeString',
                                                                                            'wcscpy',
                                                                                            'ZwClose',
                                                                                            'ZwQueryKey',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenKey',
                                                                                            'RtlComputeCrc32',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenProcess',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'ZwSetInformationToken',
                                                                                            'ZwDuplicateToken',
                                                                                            'ZwAdjustPrivilegesToken',
                                                                                            'ZwOpenThreadTokenEx',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwReadVirtualMemory',
                                                                                            'wcschr',
                                                                                            '__chkstk',
                                                                                            'SetThreadLocale',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'WideCharToMultiByte',
                                                                                            'CopyFileW',
                                                                                            'CreateProcessW',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'Sleep',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersion',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'MD5Update',
                                                                                            'MD5Final',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'MD5Init',
                                                                                            'GetWindowLongW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowPos',
                                                                                            'LoadIconW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DialogBoxParamW',
                                                                                            'PostMessageW',
                                                                                            'EndDialog',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'FindWindowW',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxW',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExW',
                                                                                            'AdjustWindowRect',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'OpenDesktopW',
                                                                                            'SetThreadDesktop',
                                                                                            'DestroyIcon',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetMessageW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SetWindowTextW',
                                                                                            'UuidCreateSequential',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'LoadTypeLibEx',
                                                                                            'WSAStartup',
                                                                                            'WSASocketW',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'WSAIoctl',
                                                                                            'WSARecv',
                                                                                            'WSASend',
                                                                                            'setsockopt',
                                                                                            'WSASendTo',
                                                                                            'WSARecvFrom',
                                                                                            'WSACleanup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 162,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 10104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 14336,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 115200},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/32cc654cc4073e9dcaf78cf6aa3a49215b24f51e351f121752e3f7dc118a5b36'},
 '32cf4fe1bf38926e63376417b3f8ce2d2c591fd3539839892708b11807ebac23': {'AddressOfEntryPoint': 249024,
                                                                      'DebugRVA': 368272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 364544,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetFileTitleW',
                                                                                      'GDI32.dll': 'PtVisible',
                                                                                      'KERNEL32.dll': 'GetCommandLineW',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'PROPSYS.dll': 'PropVariantToString',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceInstanceIdW',
                                                                                      'SHLWAPI.dll': 'PathIsUNCW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'gdiplus.dll': 'GdipGetImageWidth',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal',
                                                                                      'oledlg.dll': 'OleUIBusyW'},
                                                                      'ImportedFunctions': ['PropVariantCompareEx',
                                                                                            'PropVariantToUInt32',
                                                                                            'PropVariantToString',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapReAlloc',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetFileSize',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GlobalFlags',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetThreadLocale',
                                                                                            'lstrlenA',
                                                                                            'TlsFree',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetCurrentThread',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetVersion',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'lstrcmpA',
                                                                                            'GetLocaleInfoW',
                                                                                            'CompareStringA',
                                                                                            'SuspendThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeResource',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersionExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'FormatMessageW',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetLastError',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'CreateMutexW',
                                                                                            'DuplicateHandle',
                                                                                            'GetExitCodeThread',
                                                                                            'ResumeThread',
                                                                                            'GetCurrentProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'DeviceIoControl',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetCommandLineW',
                                                                                            'MessageBeep',
                                                                                            'CharUpperW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'PostThreadMessageW',
                                                                                            'SetCursor',
                                                                                            'PostQuitMessage',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapW',
                                                                                            'ModifyMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'IsWindowEnabled',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendDlgItemMessageW',
                                                                                            'WinHelpW',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongPtrW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetFocus',
                                                                                            'IsWindow',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetLastActivePopup',
                                                                                            'SetActiveWindow',
                                                                                            'DispatchMessageW',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'IsWindowVisible',
                                                                                            'GetMenu',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'PtInRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'IsIconic',
                                                                                            'GetWindowPlacement',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'TabbedTextOutW',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'LoadIconW',
                                                                                            'KillTimer',
                                                                                            'InvalidateRgn',
                                                                                            'IsRectEmpty',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'CharNextW',
                                                                                            'SetTimer',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetWindowTextW',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'FindWindowExW',
                                                                                            'SetWindowPos',
                                                                                            'EnableWindow',
                                                                                            'DrawFocusRect',
                                                                                            'InflateRect',
                                                                                            'SetRect',
                                                                                            'CopyRect',
                                                                                            'RedrawWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'DrawTextW',
                                                                                            'SendMessageW',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindow',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageW',
                                                                                            'EnumThreadWindows',
                                                                                            'InvalidateRect',
                                                                                            'SetForegroundWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'GetParent',
                                                                                            'DestroyMenu',
                                                                                            'LoadCursorW',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'MapWindowPoints',
                                                                                            'GetKeyState',
                                                                                            'UnregisterClassA',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ExtSelectClipRgn',
                                                                                            'CreateBitmap',
                                                                                            'SetViewportExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'Escape',
                                                                                            'ExtTextOutW',
                                                                                            'TextOutW',
                                                                                            'RectVisible',
                                                                                            'GetMapMode',
                                                                                            'GetObjectW',
                                                                                            'SetDIBColorTable',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'CreateFontW',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteDC',
                                                                                            'GetClipBox',
                                                                                            'SetMapMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'GetDeviceCaps',
                                                                                            'GetWindowExtEx',
                                                                                            'GetStockObject',
                                                                                            'GetViewportExtEx',
                                                                                            'PtVisible',
                                                                                            'AlphaBlend',
                                                                                            'GetFileTitleW',
                                                                                            'OpenPrinterW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathFindFileNameW',
                                                                                            'PathStripToRootW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathIsUNCW',
                                                                                            'OleUIBusyW',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'PropVariantCopy',
                                                                                            'FreePropVariantArray',
                                                                                            'CoFreeUnusedLibrariesEx',
                                                                                            'StringFromGUID2',
                                                                                            'PropVariantClear',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoGetClassObject',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'SysAllocString',
                                                                                            'OleCreateFontIndirect',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysStringLen',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'GdipFree',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCloneImage',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipAlloc',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 409,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 328928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 18432,
                                                                                       '.pdata\x00\x00': 26624,
                                                                                       '.rdata\x00\x00': 121344,
                                                                                       '.rsrc\x00\x00\x00': 329216,
                                                                                       '.text\x00\x00\x00': 359936},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/32cf4fe1bf38926e63376417b3f8ce2d2c591fd3539839892708b11807ebac23'},
 '331f801955c58276a8151065aa3011bc26bd95fcfbdebd26d20b0fe6ce0905e1': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'EnterCriticalSection'},
                                                                      'ImportedFunctions': ['OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 16,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/331f801955c58276a8151065aa3011bc26bd95fcfbdebd26d20b0fe6ce0905e1'},
 '3344c73616af23482450024453d7f88fd11e1cb2e7f1972b5ac406f4532068ce': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 812584,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 813056,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3344c73616af23482450024453d7f88fd11e1cb2e7f1972b5ac406f4532068ce'},
 '335eeb80174bf8d034cbf23c7d2a41ec1413017db0a9c23f5dd4fce0847f4009': {'AddressOfEntryPoint': 13528,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHLWAPI.dll': 'StrCmpW'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'StrCmpW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 36864},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/335eeb80174bf8d034cbf23c7d2a41ec1413017db0a9c23f5dd4fce0847f4009'},
 '3365106f1cffa97b4f92c3f5345baf665e586a1cdc40db759ab09781676d1996': {'AddressOfEntryPoint': 271424,
                                                                      'DebugRVA': 393088,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 389120,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'lstrcpyW',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'SHELL32.dll': 'DragQueryFileW',
                                                                                      'SHLWAPI.dll': 'PathIsUNCW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'comdlg32.dll': 'GetFileTitleW',
                                                                                      'gdiplus.dll': 'GdiplusStartup',
                                                                                      'imagehlp.dll': 'CheckSumMappedFile',
                                                                                      'iphlpapi.dll': 'GetIfEntry',
                                                                                      'ole32.dll': 'CoRegisterMessageFilter',
                                                                                      'oledlg.dll': 'OleUIBusyW'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapReAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSize',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetTickCount',
                                                                                            'GetFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'SetErrorMode',
                                                                                            'GetFullPathNameW',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DuplicateHandle',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetThreadLocale',
                                                                                            'GlobalFlags',
                                                                                            'lstrlenA',
                                                                                            'GetCurrentThread',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'lstrcmpA',
                                                                                            'CompareStringA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryA',
                                                                                            'GetVersionExA',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'MulDiv',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'DeviceIoControl',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'CreateMutexW',
                                                                                            'Sleep',
                                                                                            'GetTempPathW',
                                                                                            'lstrlenW',
                                                                                            'UnmapViewOfFile',
                                                                                            'IsBadReadPtr',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'WriteFile',
                                                                                            'DeleteFileW',
                                                                                            'CopyFileW',
                                                                                            'SetFilePointer',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'lstrcmpiW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'lstrcatW',
                                                                                            'MultiByteToWideChar',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcess',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'VirtualFree',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'VirtualAlloc',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'lstrcpyW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'PostThreadMessageW',
                                                                                            'SetCapture',
                                                                                            'UnregisterClassW',
                                                                                            'GetSysColorBrush',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'ValidateRect',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'ModifyMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpW',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassLongPtrW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'DispatchMessageW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageW',
                                                                                            'MapWindowPoints',
                                                                                            'IsWindowVisible',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'TabbedTextOutW',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'GetActiveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'EndDialog',
                                                                                            'DrawTextW',
                                                                                            'GetTopWindow',
                                                                                            'SetParent',
                                                                                            'GetKeyState',
                                                                                            'ScrollDC',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'GetParent',
                                                                                            'DrawStateW',
                                                                                            'DrawEdge',
                                                                                            'CopyRect',
                                                                                            'PtInRect',
                                                                                            'InvalidateRect',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'GetWindowPlacement',
                                                                                            'DestroyMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'GetSubMenu',
                                                                                            'LoadMenuW',
                                                                                            'GetCursorPos',
                                                                                            'OffsetRect',
                                                                                            'ReleaseCapture',
                                                                                            'DrawIcon',
                                                                                            'IsIconic',
                                                                                            'MessageBeep',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'InvalidateRgn',
                                                                                            'SetRect',
                                                                                            'CheckMenuItem',
                                                                                            'SetWindowPos',
                                                                                            'IsRectEmpty',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'CharNextW',
                                                                                            'CharUpperW',
                                                                                            'SetWindowRgn',
                                                                                            'GetClientRect',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'AppendMenuW',
                                                                                            'GetSystemMenu',
                                                                                            'LoadIconW',
                                                                                            'GetSystemMetrics',
                                                                                            'TranslateAcceleratorW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'LoadAcceleratorsW',
                                                                                            'EnumWindows',
                                                                                            'FindWindowW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowTextW',
                                                                                            'MessageBoxW',
                                                                                            'GetDlgItem',
                                                                                            'GetClassNameW',
                                                                                            'RedrawWindow',
                                                                                            'LoadBitmapW',
                                                                                            'GetFocus',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetFocus',
                                                                                            'PostMessageW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'wsprintfW',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'DrawIconEx',
                                                                                            'GetWindowRect',
                                                                                            'LoadImageW',
                                                                                            'GetWindowDC',
                                                                                            'UnregisterClassA',
                                                                                            'ExtSelectClipRgn',
                                                                                            'CreateBitmap',
                                                                                            'ScaleWindowExtEx',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetMapMode',
                                                                                            'DPtoLP',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'GetClipBox',
                                                                                            'SetMapMode',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'Escape',
                                                                                            'ExtTextOutW',
                                                                                            'TextOutW',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'SetTextAlign',
                                                                                            'MoveToEx',
                                                                                            'CreateSolidBrush',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'FloodFill',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'Ellipse',
                                                                                            'SetPixel',
                                                                                            'CreateFontW',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'Rectangle',
                                                                                            'DeleteObject',
                                                                                            'CreatePen',
                                                                                            'GetBkColor',
                                                                                            'FrameRgn',
                                                                                            'StretchBlt',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDCW',
                                                                                            'CombineRgn',
                                                                                            'CreateRectRgn',
                                                                                            'CreateRoundRectRgn',
                                                                                            'GetDeviceCaps',
                                                                                            'GetStockObject',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetFileTitleW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterW',
                                                                                            'OpenEventLogW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyW',
                                                                                            'CloseEventLog',
                                                                                            'ReadEventLogW',
                                                                                            'RegOpenKeyExW',
                                                                                            'ControlService',
                                                                                            'StartServiceW',
                                                                                            'DeleteService',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'CreateServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'DragFinish',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragQueryFileW',
                                                                                            '_TrackMouseEvent',
                                                                                            'PathFindExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathStripToRootW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsUNCW',
                                                                                            'OleUIBusyW',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromProgID',
                                                                                            'CLSIDFromString',
                                                                                            'CoGetClassObject',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleInitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'OleFlushClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'SysAllocString',
                                                                                            'OleCreateFontIndirect',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'VariantCopy',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'GetAdaptersInfo',
                                                                                            'GetTcpTable',
                                                                                            'GetTcpStatistics',
                                                                                            'GetIfEntry',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'CheckSumMappedFile',
                                                                                            'GdipFree',
                                                                                            'GdipSaveImageToFile',
                                                                                            'GdipGetImageEncodersSize',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipAlloc',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImageEncoders',
                                                                                            'GdipCloneImage',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 437,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 214744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 15360,
                                                                                       '.pdata\x00\x00': 30208,
                                                                                       '.rdata\x00\x00': 142848,
                                                                                       '.rsrc\x00\x00\x00': 215040,
                                                                                       '.text\x00\x00\x00': 382464},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3365106f1cffa97b4f92c3f5345baf665e586a1cdc40db759ab09781676d1996'},
 '33d9efb38d0fffae6c67c329aecde9696ca915a571b178a5482efd11413fd786': {'AddressOfEntryPoint': 602220,
                                                                      'DebugRVA': 85372,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'WMILIB.SYS': 'WmiSystemControl',
                                                                                      'ksecdd.sys': 'SystemPrng',
                                                                                      'ntoskrnl.exe': '__C_specific_handler',
                                                                                      'srvnet.sys': 'SrvNetDisconnectConnection'},
                                                                      'ImportedFunctions': ['RtlCompareMemory',
                                                                                            'KeInitializeEvent',
                                                                                            'ExInitializeResourceLite',
                                                                                            'InitializeSListHead',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ExReleaseResourceLite',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExDeleteResourceLite',
                                                                                            'NlsMbOemCodePageTag',
                                                                                            'RtlxUnicodeStringToOemSize',
                                                                                            'RtlUnicodeStringToOemString',
                                                                                            'KeResetEvent',
                                                                                            'ExAcquireResourceSharedLite',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'RtlUpcaseUnicodeChar',
                                                                                            'KeGetCurrentProcessorNumberEx',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoCheckDesiredAccess',
                                                                                            'PsIsThreadImpersonating',
                                                                                            'IoGetCurrentProcess',
                                                                                            'PsDereferencePrimaryToken',
                                                                                            'PsDereferenceImpersonationToken',
                                                                                            'PsImpersonateClient',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'KeStackAttachProcess',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'ZwClose',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'NtOpenFile',
                                                                                            'NtQueryInformationFile',
                                                                                            'KeInitializeTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeReadStateEvent',
                                                                                            'KeInitializeDpc',
                                                                                            'KeSetTargetProcessorDpcEx',
                                                                                            'KeClearEvent',
                                                                                            'KeSetTimer',
                                                                                            'RtlOemStringToUnicodeString',
                                                                                            'IoInitializeIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'ExFreePoolWithTag',
                                                                                            'KeInsertQueue',
                                                                                            'IoFreeMdl',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwMapViewOfSection',
                                                                                            'IoAllocateMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IofCallDriver',
                                                                                            'IoCreateFile',
                                                                                            'ZwCreateSection',
                                                                                            'NtReadFile',
                                                                                            'NtSetInformationFile',
                                                                                            'NtWriteFile',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'RtlUpperChar',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoWMIWriteEvent',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'IofCompleteRequest',
                                                                                            'IoCreateDevice',
                                                                                            'IoDeleteDevice',
                                                                                            'KeInsertHeadQueue',
                                                                                            'WmiGetClock',
                                                                                            'IoIs32bitProcess',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'IoAllocateWorkItem',
                                                                                            'MmUnlockPages',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'IoGetRequestorProcess',
                                                                                            'KeAttachProcess',
                                                                                            'KeDetachProcess',
                                                                                            'ExAllocatePoolWithTagPriority',
                                                                                            'IoQueueWorkItem',
                                                                                            'MmUnmapLockedPages',
                                                                                            'IoBuildPartialMdl',
                                                                                            'RtlFreeOemString',
                                                                                            'ZwOpenEvent',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeQueue',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlInitializeSid',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'KeDelayExecutionThread',
                                                                                            'KeRundownQueue',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'MmUnlockPagableImageSection',
                                                                                            '_wcsupr',
                                                                                            'KeGetProcessorNumberFromIndex',
                                                                                            'KeReadStateQueue',
                                                                                            '_wcsicmp',
                                                                                            'ZwSetValueKey',
                                                                                            'ExSystemTimeToLocalTime',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'NtQuerySecurityObject',
                                                                                            'FsRtlDoesNameContainWildCards',
                                                                                            'SeSinglePrivilegeCheck',
                                                                                            'SeExports',
                                                                                            'RtlTimeToTimeFields',
                                                                                            'RtlTimeFieldsToTime',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueThreadIrp',
                                                                                            'IoReuseIrp',
                                                                                            'MmLockPagableDataSection',
                                                                                            'IoCreateFileEx',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'IoCheckEaBufferValidity',
                                                                                            'IoCheckFunctionAccess',
                                                                                            'IoSetThreadHardErrorMode',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'IoCancelIrp',
                                                                                            'RtlInitString',
                                                                                            'RtlInt64ToUnicodeString',
                                                                                            '_stricmp',
                                                                                            'wcschr',
                                                                                            'strncmp',
                                                                                            'IoFastQueryNetworkAttributes',
                                                                                            'RtlSecondsSince1970ToTime',
                                                                                            'IoCheckQuerySetFileInformation',
                                                                                            'RtlUpcaseUnicodeStringToOemString',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'RtlFreeAnsiString',
                                                                                            'IoCheckQuerySetVolumeInformation',
                                                                                            'NtSetVolumeInformationFile',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'NtSetSecurityObject',
                                                                                            'NtQueryQuotaInformationFile',
                                                                                            'NtSetQuotaInformationFile',
                                                                                            '_wcsnicmp',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlIsNameLegalDOS8Dot3',
                                                                                            'FsRtlIsFatDbcsLegal',
                                                                                            'NlsOemLeadByteInfo',
                                                                                            'RtlUpcaseUnicodeToOemN',
                                                                                            'RtlUnicodeToOemN',
                                                                                            'IoSetFileOrigin',
                                                                                            'PsAssignImpersonationToken',
                                                                                            'RtlMapGenericMask',
                                                                                            'SeFreePrivileges',
                                                                                            'ExQueueWorkItem',
                                                                                            'ObOpenObjectByPointer',
                                                                                            'ZwDuplicateObject',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IoCreateFileSpecifyDeviceObjectHint',
                                                                                            'FsRtlInitializeExtraCreateParameterList',
                                                                                            'FsRtlInitializeExtraCreateParameter',
                                                                                            'FsRtlInsertExtraCreateParameter',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'KeQueryActiveProcessorCountEx',
                                                                                            'KeGetRecommendedSharedDataAlignment',
                                                                                            '_vsnwprintf',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'NtClose',
                                                                                            'toupper',
                                                                                            'FsRtlIsNameInExpression',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'MmSizeOfMdl',
                                                                                            'MmIsThisAnNtAsSystem',
                                                                                            'PsCreateSystemThread',
                                                                                            'NtSetInformationThread',
                                                                                            'KeQueryGroupAffinity',
                                                                                            'KeSetSystemGroupAffinityThread',
                                                                                            'KeSetIdealProcessorThread',
                                                                                            'KeRemoveQueue',
                                                                                            'PsTerminateSystemThread',
                                                                                            'NtFreeVirtualMemory',
                                                                                            'NtAllocateVirtualMemory',
                                                                                            'KeSetEvent',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlUpcaseUnicodeString',
                                                                                            'KeWaitForSingleObject',
                                                                                            'SeUnlockSubjectContext',
                                                                                            'SeQueryAuthenticationIdToken',
                                                                                            'SeLockSubjectContext',
                                                                                            'SeReleaseSubjectContext',
                                                                                            'SeCaptureSubjectContext',
                                                                                            'ExInterlockedAddUlong',
                                                                                            'ExLocalTimeToSystemTime',
                                                                                            'KeBugCheckEx',
                                                                                            'DbgPrint',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ExAcquireFastMutex',
                                                                                            'ExReleaseFastMutex',
                                                                                            '__C_specific_handler',
                                                                                            'WmiCompleteRequest',
                                                                                            'WmiSystemControl',
                                                                                            'AddCredentialsW',
                                                                                            'FreeCredentialsHandle',
                                                                                            'AcquireCredentialsHandleW',
                                                                                            'DeleteSecurityContext',
                                                                                            'InitSecurityInterfaceW',
                                                                                            'RevertSecurityContext',
                                                                                            'QueryContextAttributesW',
                                                                                            'ImpersonateSecurityContext',
                                                                                            'MapSecurityError',
                                                                                            'AcceptSecurityContext',
                                                                                            'KSecValidateBuffer',
                                                                                            'FreeContextBuffer',
                                                                                            'SystemPrng',
                                                                                            'SrvLibIsNetworkAddress',
                                                                                            'SrvNetCloseConnection',
                                                                                            'SrvLibGetBaseFileName',
                                                                                            'SrvXsSchedulePrintJob',
                                                                                            'SrvAdminDeregisterFile',
                                                                                            'SrvLibAuditForceAccess',
                                                                                            'SrvAdminDeregisterSession',
                                                                                            'SrvLibLookasideAllocate',
                                                                                            'SrvLibLookasideFree',
                                                                                            'SrvAdminDeregisterTreeConnect',
                                                                                            'SrvAdminQueryResumeKeyTarget',
                                                                                            'SrvAdminIsScopedName',
                                                                                            'SrvLibLogError',
                                                                                            'SrvLibIsLoggableError',
                                                                                            'SrvLibGenerateSrvServiceSD',
                                                                                            'SrvLibApplySrvDeviceAcl',
                                                                                            'SrvLibFreeSrvServiceSD',
                                                                                            'SrvNetReceiveData',
                                                                                            'SrvNetGetQueueStatistics',
                                                                                            'SrvNetRegisterClient',
                                                                                            'SrvNetStartClient',
                                                                                            'SrvXsConnect',
                                                                                            'SrvNetInitializeStatisticsQueues',
                                                                                            'SrvLibLookasideInitialize',
                                                                                            'SrvLibLookasideCreatePool',
                                                                                            'SrvLibLookasideDirectFreeBuffer',
                                                                                            'SrvLibLookasideDirectNonPagedAllocateBuffer',
                                                                                            'SrvLibLookasideDirectPagedAllocateBuffer',
                                                                                            'SrvAdminRegisterProvider',
                                                                                            'SrvNetStopClient',
                                                                                            'SrvNetDeregisterClient',
                                                                                            'SrvXsClosePrinter',
                                                                                            'SrvXsDisconnect',
                                                                                            'SrvAdminDeregisterProvider',
                                                                                            'SrvNetDisableStatisticsQueue',
                                                                                            'SrvLibLookasideDestroyPool',
                                                                                            'SrvAdminRefreshAnonymousLists',
                                                                                            'SrvAdminRefreshNoRemapPipeList',
                                                                                            'SrvLibGetDWord',
                                                                                            'SrvLibQueryLicensingDWord',
                                                                                            'SrvLibSetSrvErrorLogIgnore',
                                                                                            'SrvGraftName',
                                                                                            'SrvNetFreePool',
                                                                                            'SrvNetQueryConnectionInformation',
                                                                                            'SrvNetSetConnectionInformation',
                                                                                            'SrvNetSendData',
                                                                                            'SrvXsAddPrintJob',
                                                                                            'SrvAdminRemapPipeName',
                                                                                            'SrvAdminRegisterFile',
                                                                                            'SrvNetUpdateStatisticsFromQueues',
                                                                                            'SrvNetUpdateIOCountFromQueues',
                                                                                            'SrvAdminDoesShareAllowAnonymous',
                                                                                            'SrvLibTruncateDnsName',
                                                                                            'SrvAdminEvaluateServerAlias',
                                                                                            'SrvAdminRegisterSession',
                                                                                            'SrvLibIsFsctlDisallowed',
                                                                                            'SrvLibIsDosDeviceName',
                                                                                            'SrvAdminDoesPipeAllowAnonymous',
                                                                                            'SrvLibAllocatePipeEa',
                                                                                            'SrvLibFreePipeEa',
                                                                                            'SrvLibAuditSuccessEnabled',
                                                                                            'SrvLibAuditShareAccess',
                                                                                            'SrvLibRetrieveMaximalAccessRightsForUser',
                                                                                            'SrvLibAuditShareConnect',
                                                                                            'SrvAdminRegisterTreeConnect',
                                                                                            'SrvXsOpenPrinter',
                                                                                            'SrvNetGetStatisticsAndLock',
                                                                                            'SrvAdminSetUserLimit',
                                                                                            'SrvNetQueryRssScalability',
                                                                                            'SrvXsDownLevelAPI',
                                                                                            'SrvAdminAuditSpnCheck',
                                                                                            'SrvAdminCheckSpn',
                                                                                            'SrvLibSeAccessCheck',
                                                                                            'SrvAdminAllowIdlePowerDownForActivity',
                                                                                            'SrvAdminInhibitIdlePowerDownForActivity',
                                                                                            'SrvAdminInhibitIdlePowerDownForOpenFiles',
                                                                                            'SrvAdminAllowIdlePowerDownForOpenFiles',
                                                                                            'SrvNetDisconnectConnection'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 303,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 16896,
                                                                                       '.rdata\x00\x00': 29696,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 81408,
                                                                                       'INIT\x00\x00\x00\x00': 12288,
                                                                                       'PAGE\x00\x00\x00\x00': 310784,
                                                                                       'PAGE8FIL': 9728},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/33d9efb38d0fffae6c67c329aecde9696ca915a571b178a5482efd11413fd786'},
 '33ea253da16d4bc1a0a5598a994d20ce600bcfb10c3e255b79d5c9baf79a1a75': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3364,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/33ea253da16d4bc1a0a5598a994d20ce600bcfb10c3e255b79d5c9baf79a1a75'},
 '33f6cce599557993969af2ae7c1076a45866811ff8fab866ebdef69da7ce2c3e': {'AddressOfEntryPoint': 14496,
                                                                      'DebugRVA': 91040,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 5288,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6017024,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.rdata\x00\x00': 18944,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 84480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/33f6cce599557993969af2ae7c1076a45866811ff8fab866ebdef69da7ce2c3e'},
 '34a84a55a2d3eca30055460dd6b44da61373131de769bdd548f9fb6b940433c6': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 217600,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/34a84a55a2d3eca30055460dd6b44da61373131de769bdd548f9fb6b940433c6'},
 '34e7b0ea40b7e09ceaf993a42e3c0c9e68e9841e5eda859d06b0aa141a50647c': {'AddressOfEntryPoint': 405692,
                                                                      'DebugRVA': 4912,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 68728,
                                                                      'SectionNames': {'.npdata\x00': 1024,
                                                                                       '.pdata\x00\x00': 17408,
                                                                                       '.rdata\x00\x00': 40448,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 69120,
                                                                                       'INIT\x00\x00\x00\x00': 3584,
                                                                                       'PAGE\x00\x00\x00\x00': 301056,
                                                                                       'PAGED\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/34e7b0ea40b7e09ceaf993a42e3c0c9e68e9841e5eda859d06b0aa141a50647c'},
 '34ec07469a5fbe567932245cef254e362db1ce3a9c97e9cfef298f47bc08642e': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1953268,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1953280,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/34ec07469a5fbe567932245cef254e362db1ce3a9c97e9cfef298f47bc08642e'},
 '34f8571f4152d7f493b5339d175932d3b4be713769aa8b870457ea38bdb9a65d': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3488,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/34f8571f4152d7f493b5339d175932d3b4be713769aa8b870457ea38bdb9a65d'},
 '3528469d41b556fda2c6f22acd8d92744d868ce1c15fbce991e25b76e2bb780d': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetVolumeInformationA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileA',
                                                                                            '_lclose',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetProcAddress',
                                                                                            '_llseek',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CompareStringA',
                                                                                            'LoadLibraryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetPrivateProfileIntA',
                                                                                            '_lopen',
                                                                                            'GetShortPathNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WriteFile',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVersionExA',
                                                                                            'SetFilePointer',
                                                                                            'GetVersion',
                                                                                            'FreeResource',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CreateDirectoryA',
                                                                                            'TerminateThread',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'LockResource',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetEvent',
                                                                                            'ReadFile',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetDeviceCaps',
                                                                                            'CallWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextA',
                                                                                            'DispatchMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDC',
                                                                                            'SetWindowPos',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'EndDialog',
                                                                                            'CharNextA',
                                                                                            'GetDesktopWindow',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'LoadStringA',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 542892,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 543232,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3528469d41b556fda2c6f22acd8d92744d868ce1c15fbce991e25b76e2bb780d'},
 '35762d897761aa383e755eced4845e8a2effd33947843ecb2ccbde4aa17253cb': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 22312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 22528,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/35762d897761aa383e755eced4845e8a2effd33947843ecb2ccbde4aa17253cb'},
 '358b06f3e46f54c4c87d6fa5fad3876a6e42c3f2b875fa5cc58f0fa1af8ff84a': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4915636,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 4915712,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/358b06f3e46f54c4c87d6fa5fad3876a6e42c3f2b875fa5cc58f0fa1af8ff84a'},
 '359ed51b783a857cf8a986b08703540bb5a4a47f1672bc7379c43c5ee569e8d6': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/359ed51b783a857cf8a986b08703540bb5a4a47f1672bc7379c43c5ee569e8d6'},
 '35b8f943c86d3c6abc48613e94b80d8c7fdd7a61bcca1e876ba54e3436ca1fa9': {'AddressOfEntryPoint': 33652,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltGetBottomInstance',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['RtlCompareUnicodeString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwOpenProcess',
                                                                                            'IoDeleteDevice',
                                                                                            'ZwReadFile',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeBugCheckEx',
                                                                                            'IoAttachDeviceToDeviceStackSafe',
                                                                                            'ZwClose',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePool',
                                                                                            'IoRegisterFsRegistrationChange',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoThreadToProcess',
                                                                                            'PsGetProcessId',
                                                                                            'IoUnregisterFsRegistrationChange',
                                                                                            'IoDetachDevice',
                                                                                            'ExQueueWorkItem',
                                                                                            'ZwWriteFile',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoCreateDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoFreeWorkItem',
                                                                                            'ZwQueryInformationProcess',
                                                                                            '__C_specific_handler',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltCancelFileOpen',
                                                                                            'FltClose',
                                                                                            'FltAttachVolume',
                                                                                            'FltCreateFile',
                                                                                            'FltGetVolumeFromName',
                                                                                            'FltSendMessage',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltStartFiltering',
                                                                                            'FltGetVolumeFromDeviceObject',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltRegisterFilter',
                                                                                            'FltGetDeviceObject',
                                                                                            'FltObjectDereference',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltGetVolumeName',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltEnumerateVolumes',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltCloseClientPort',
                                                                                            'FltGetBottomInstance'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 3072,
                                                                                       'INIT\x00\x00\x00\x00': 3072,
                                                                                       'PAGE\x00\x00\x00\x00': 11264},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/35b8f943c86d3c6abc48613e94b80d8c7fdd7a61bcca1e876ba54e3436ca1fa9'},
 '35b97b759d6ce90ae6d2d3da6131046035020383cf5cea2a5d59510f3fc1d9d7': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/35b97b759d6ce90ae6d2d3da6131046035020383cf5cea2a5d59510f3fc1d9d7'},
 '3603f67a6606e7fc32c06519e2afeed15289bd160cfd48d37487bc5f8aaf513c': {'AddressOfEntryPoint': 221200,
                                                                      'DebugRVA': 160192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 159744,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'bxftska.sys': 'ks_add_device',
                                                                                      'iscsiprt.sys': 'iScsiPortNotification',
                                                                                      'ntoskrnl.exe': 'strncpy'},
                                                                      'ImportedFunctions': ['iScsiPortDeviceBusy',
                                                                                            'iScsiPortGetOriginalMdl',
                                                                                            'iScsiPortMoveMemory',
                                                                                            'iScsiPortCompleteServiceIrp',
                                                                                            'iScsiPortPauseDevice',
                                                                                            'iScsiPortResumeDevice',
                                                                                            'iScsiPortInitialize',
                                                                                            'iScsiPortDeviceReady',
                                                                                            'ScsiPortWmiPostProcess',
                                                                                            'ScsiPortWmiGetInstanceName',
                                                                                            'ScsiPortWmiSetInstanceName',
                                                                                            'ScsiPortWmiSetData',
                                                                                            'ScsiPortWmiSetInstanceCount',
                                                                                            'ScsiPortWmiDispatchFunction',
                                                                                            'ScsiPortWmiFireLogicalUnitEvent',
                                                                                            'iScsiPortNotification',
                                                                                            'ZwOpenKey',
                                                                                            'ZwClose',
                                                                                            'ZwCreateKey',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoOpenDeviceRegistryKey',
                                                                                            'ZwSetValueKey',
                                                                                            'wcsncpy',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwDeleteKey',
                                                                                            'IofCallDriver',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'KeInitializeEvent',
                                                                                            'KeSetEvent',
                                                                                            'IoGetDeviceProperty',
                                                                                            'IoBuildPartialMdl',
                                                                                            'IoAllocateMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmUnmapLockedPages',
                                                                                            'IoFreeMdl',
                                                                                            'DbgPrint',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExFreePoolWithTag',
                                                                                            'wcsncmp',
                                                                                            'sprintf',
                                                                                            'strstr',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeBugCheckEx',
                                                                                            'DbgBreakPoint',
                                                                                            'KeWaitForSingleObject',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'ks_add_device'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 52,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 37888,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 12288,
                                                                                       '.text\x00\x00\x00': 155136,
                                                                                       'INIT\x00\x00\x00\x00': 2048},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/3603f67a6606e7fc32c06519e2afeed15289bd160cfd48d37487bc5f8aaf513c'},
 '36255fcc28988554e9a5b89d5af374876c0f925e47a7cb5db1d0bb49d68039f6': {'AddressOfEntryPoint': 3221225536,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 356352,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'VirtualAlloc',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'SETUPAPI.dll': 'SetupFindFirstLineA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'SHLWAPI.dll': 'PathIsUNCA',
                                                                                      'USER32.dll': 'SetMenuItemBitmaps',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterA',
                                                                                      'comdlg32.dll': 'GetFileTitleA',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA',
                                                                                      'ole32.dll': 'CoRevokeClassObject'},
                                                                      'ImportedFunctions': ['SetupDiOpenDevRegKey',
                                                                                            'SetupCopyOEMInfA',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupGetTargetPathA',
                                                                                            'SetupFindNextLine',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiGetDeviceInfoListDetailA',
                                                                                            'CM_Get_DevNode_Status_Ex',
                                                                                            'SetupGetStringFieldA',
                                                                                            'SetupFindFirstLineA',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GlobalFlags',
                                                                                            'GetThreadLocale',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSize',
                                                                                            'DuplicateHandle',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileTime',
                                                                                            'GetTickCount',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalFindAtomA',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeResource',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrcmpA',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'MulDiv',
                                                                                            'SetLastError',
                                                                                            'CreateThread',
                                                                                            'lstrcpyA',
                                                                                            'SetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetCommandLineA',
                                                                                            'CreateProcessA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'VirtualAlloc',
                                                                                            'UnregisterClassA',
                                                                                            'DestroyMenu',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'PostThreadMessageA',
                                                                                            'SetCapture',
                                                                                            'GetSysColorBrush',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpA',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'GetClassLongA',
                                                                                            'GetClassNameA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'MessageBeep',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'PtInRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowLongA',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetWindow',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CopyRect',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CharUpperA',
                                                                                            'DrawIcon',
                                                                                            'SendMessageA',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageA',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'InvalidateRgn',
                                                                                            'InvalidateRect',
                                                                                            'SetRect',
                                                                                            'IsRectEmpty',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'CharNextA',
                                                                                            'MapWindowPoints',
                                                                                            'ReleaseCapture',
                                                                                            'IsIconic',
                                                                                            'GetClientRect',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadIconA',
                                                                                            'EnableWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuState',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'ModifyMenuA',
                                                                                            'GetParent',
                                                                                            'GetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'ExtSelectClipRgn',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetMapMode',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'SetMapMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'DeleteObject',
                                                                                            'GetFileTitleA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCreateKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathStripToRootA',
                                                                                            'SHDeleteKeyA',
                                                                                            'PathIsUNCA',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoGetClassObject',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'OleFlushClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRevokeClassObject',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 373,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1165144,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 24576,
                                                                                       '.rdata\x00\x00': 119296,
                                                                                       '.text\x00\x00\x00': 349184},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/36255fcc28988554e9a5b89d5af374876c0f925e47a7cb5db1d0bb49d68039f6'},
 '365bc4420db612e21f2c0a17ec94d224037fa69e878c3a6880b59060950ff2a3': {'AddressOfEntryPoint': 46113,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'hal.dll': 'HalMakeBeep',
                                                                                      'ntoskrnl.exe': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['_strnicmp',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'KdDebuggerNotPresent',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'IofCompleteRequest',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'IoCreateDevice',
                                                                                            'DbgPrint',
                                                                                            'IoAllocateMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmUnlockPages',
                                                                                            'IoFreeMdl',
                                                                                            'ExAllocatePool',
                                                                                            'ExFreePool',
                                                                                            'NtQuerySystemInformation',
                                                                                            'HalMakeBeep'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 19,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 5120,
                                                                                       '.vmp0\x00\x00\x00': 10752,
                                                                                       '.vmp1\x00\x00\x00': 31232,
                                                                                       'INIT\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/365bc4420db612e21f2c0a17ec94d224037fa69e878c3a6880b59060950ff2a3'},
 '368fac9a24d0b544c9a5442e2666913e261d3cd845a0ef1646b02f206600348b': {'AddressOfEntryPoint': 51316,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 184896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 185344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/368fac9a24d0b544c9a5442e2666913e261d3cd845a0ef1646b02f206600348b'},
 '36d0d1d1ed96e71b90e2e15da0189b2bbf6f69c21a0e63ee1be706b262c25482': {'AddressOfEntryPoint': 242652,
                                                                      'DebugRVA': 254768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 253952,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionUnbindClass',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'IoDetachDevice',
                                                                                            'PoSetPowerState',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'wcsstr',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionBindClass',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionUnbindClass'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 960,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 249344,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/36d0d1d1ed96e71b90e2e15da0189b2bbf6f69c21a0e63ee1be706b262c25482'},
 '36f6591c97f2ee32237077895f909f4c334a6ec164f460f2055fc870066245e2': {'AddressOfEntryPoint': 308553,
                                                                      'DebugRVA': 6240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ControlTraceW',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SPP.dll': 'SppFreeExternalGroupPropArray',
                                                                                      'SRCORE.dll': 'SrFreeRestoreStatus',
                                                                                      'USER32.dll': 'InflateRect',
                                                                                      'msvcrt.dll': 'memmove',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CloseTrace',
                                                                                            'InitiateShutdownW',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'ControlService',
                                                                                            'OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'CloseServiceHandle',
                                                                                            'CreateWellKnownSid',
                                                                                            'CheckTokenMembership',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'StartTraceW',
                                                                                            'EnableTrace',
                                                                                            'GetTokenInformation',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'ControlTraceW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoW',
                                                                                            'FindVolumeClose',
                                                                                            'FindNextVolumeW',
                                                                                            'FindFirstVolumeW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetDriveTypeW',
                                                                                            'MoveFileExW',
                                                                                            'DeviceIoControl',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FormatMessageW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateFileW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetProcAddress',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'SetErrorMode',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalFree',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'CreateThread',
                                                                                            'OpenProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LoadLibraryExW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'FindClose',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'SetBkMode',
                                                                                            'DeleteDC',
                                                                                            'GdiFlush',
                                                                                            'SelectObject',
                                                                                            'SetLayout',
                                                                                            'CreateCompatibleDC',
                                                                                            'ExtTextOutW',
                                                                                            'SetBkColor',
                                                                                            'CreateDIBSection',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'EnumWindows',
                                                                                            'MessageBoxW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EndPaint',
                                                                                            'MapWindowPoints',
                                                                                            'CopyRect',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowRect',
                                                                                            'BeginPaint',
                                                                                            'GetAncestor',
                                                                                            'GetClassNameW',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'LoadStringW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LoadIconW',
                                                                                            'SetForegroundWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'ShowWindow',
                                                                                            'DestroyWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowLongPtrW',
                                                                                            'PostMessageW',
                                                                                            'GetParent',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSysColor',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColorBrush',
                                                                                            'EndDialog',
                                                                                            'SetFocus',
                                                                                            'GetKeyState',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'UpdateWindow',
                                                                                            'GetClientRect',
                                                                                            'SetWindowTextW',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'IsWindow',
                                                                                            'CallWindowProcW',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'DrawFrameControl',
                                                                                            'OffsetRect',
                                                                                            'InflateRect',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'iswspace',
                                                                                            '_amsg_exit',
                                                                                            '_vscwprintf',
                                                                                            'memcpy',
                                                                                            '_vsnwprintf',
                                                                                            'strchr',
                                                                                            'memmove',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetStockIconInfo',
                                                                                            'CommandLineToArgvW',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromString',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'PropertySheetW',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlLookupElementGenericTableAvl',
                                                                                            'RtlInsertElementGenericTableAvl',
                                                                                            'RtlInitializeGenericTableAvl',
                                                                                            'RtlEnumerateGenericTableAvl',
                                                                                            'RtlDeleteElementGenericTableAvl',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'NtShutdownSystem',
                                                                                            'RtlGetLastNtStatus',
                                                                                            'RtlVirtualUnwind',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'SrFreeRpPropArray',
                                                                                            'SrFreeRestoreStatus',
                                                                                            'SxTracerDebuggerBreak',
                                                                                            'SxTracerShouldTrackFailure',
                                                                                            'SxTracerGetThreadContextRetail',
                                                                                            'SppFreeExternalGroupPropArray'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 244,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 106728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 28672,
                                                                                       '.rsrc\x00\x00\x00': 107008,
                                                                                       '.text\x00\x00\x00': 181760,
                                                                                       'afaqowd\x00': 0},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/36f6591c97f2ee32237077895f909f4c334a6ec164f460f2055fc870066245e2'},
 '3716ffe86a444de25dc44d6d002388fdc65a4d8bdcff5564b828f5e8517e3b32': {'AddressOfEntryPoint': 302128,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 377136,
                                                                      'ExportSize': 251,
                                                                      'IATRVA': 307200,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_BeginDrag',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'MSVCRT.dll': 'strlen',
                                                                                      'SETUPAPI.dll': 'SetupDiEnumDeviceInfo',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderA',
                                                                                      'USER32.dll': 'CopyRect',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'comdlg32.dll': 'ChooseColorA',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['socket',
                                                                                            'setsockopt',
                                                                                            'bind',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'WSAStartup',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'mktime',
                                                                                            '_mbsnbcpy',
                                                                                            '_mbsnbcat',
                                                                                            '_mbschr',
                                                                                            '_purecall',
                                                                                            'strrchr',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'fputc',
                                                                                            '_ftime',
                                                                                            'ctime',
                                                                                            '_strdup',
                                                                                            'atoi',
                                                                                            '_mbscmp',
                                                                                            'fflush',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memcpy',
                                                                                            'isxdigit',
                                                                                            'strstr',
                                                                                            'isdigit',
                                                                                            'toupper',
                                                                                            'strncmp',
                                                                                            'fgetc',
                                                                                            'strtoul',
                                                                                            '_stricmp',
                                                                                            'isspace',
                                                                                            'sscanf',
                                                                                            'memcmp',
                                                                                            'srand',
                                                                                            'fprintf',
                                                                                            'vsprintf',
                                                                                            'fgets',
                                                                                            'strcmp',
                                                                                            'fseek',
                                                                                            '_splitpath',
                                                                                            'fopen',
                                                                                            'fclose',
                                                                                            'rand',
                                                                                            '__CxxFrameHandler',
                                                                                            'memset',
                                                                                            'localtime',
                                                                                            'asctime',
                                                                                            'strcpy',
                                                                                            'gmtime',
                                                                                            'sprintf',
                                                                                            'strcat',
                                                                                            'strncpy',
                                                                                            '_endthread',
                                                                                            '_beginthreadex',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_setmbcp',
                                                                                            '_strupr',
                                                                                            'strlen',
                                                                                            'SetCommState',
                                                                                            'GetStartupInfoA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetLocaleInfoA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'CreateProcessA',
                                                                                            'MulDiv',
                                                                                            'ClearCommError',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetOverlappedResult',
                                                                                            'SetupComm',
                                                                                            'GetCommState',
                                                                                            'TlsAlloc',
                                                                                            'SetCommTimeouts',
                                                                                            'SetCommMask',
                                                                                            'EscapeCommFunction',
                                                                                            'PurgeComm',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CopyFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetComputerNameA',
                                                                                            'CreateThread',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CreateMutexA',
                                                                                            'OpenProcess',
                                                                                            'ReleaseMutex',
                                                                                            'TerminateThread',
                                                                                            'ResetEvent',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'TlsSetValue',
                                                                                            'CreateEventA',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetTickCount',
                                                                                            'FindWindowA',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'CheckMenuItem',
                                                                                            'GetSubMenu',
                                                                                            'UpdateWindow',
                                                                                            'OpenClipboard',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'RemoveMenu',
                                                                                            'LoadMenuA',
                                                                                            'GetMenu',
                                                                                            'SetMenu',
                                                                                            'IsZoomed',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongA',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'SetWindowTextA',
                                                                                            'GetSysColorBrush',
                                                                                            'SystemParametersInfoA',
                                                                                            'EndDeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'FillRect',
                                                                                            'GetClassLongPtrA',
                                                                                            'GetKeyState',
                                                                                            'wsprintfA',
                                                                                            'IsRectEmpty',
                                                                                            'PtInRect',
                                                                                            'InflateRect',
                                                                                            'OffsetRect',
                                                                                            'ClientToScreen',
                                                                                            'GetDCEx',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'CharNextA',
                                                                                            'LoadIconA',
                                                                                            'GetWindowRect',
                                                                                            'LoadBitmapA',
                                                                                            'LoadCursorA',
                                                                                            'GetParent',
                                                                                            'GetLastActivePopup',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetClientRect',
                                                                                            'PostMessageA',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'IsMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetSysColor',
                                                                                            'EnableWindow',
                                                                                            'GetWindow',
                                                                                            'RedrawWindow',
                                                                                            'SendMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'CopyRect',
                                                                                            'CreateFontA',
                                                                                            'PatBlt',
                                                                                            'GetTextColor',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetObjectA',
                                                                                            'SelectObject',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetTextMetricsA',
                                                                                            'GetDeviceCaps',
                                                                                            'ChooseColorA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_BeginDrag',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 239,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 51976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 62464,
                                                                                       '.pdata\x00\x00': 14848,
                                                                                       '.rdata\x00\x00': 70656,
                                                                                       '.rsrc\x00\x00\x00': 62976,
                                                                                       '.text\x00\x00\x00': 302592},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3716ffe86a444de25dc44d6d002388fdc65a4d8bdcff5564b828f5e8517e3b32'},
 '3773a767edad25f74163507049902b7b0a8e3a8c57b052bab00256d05aeae306': {'AddressOfEntryPoint': 64200,
                                                                      'DebugRVA': 400492,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 401408,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'gdiplus.dll': 'GdipGetImageGraphicsContext',
                                                                                      'msvcrt.dll': '_wcsrev',
                                                                                      'ntdll.dll': 'NtQueryLicenseValue',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SHGetSpecialFolderPathW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellAboutW',
                                                                                            'ShellExecuteExW',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipCloneBitmapAreaI',
                                                                                            'GdipSetPageUnit',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDrawArcI',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'QueryServiceConfigW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'EventWrite',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'IsThemeActive',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Add',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'PropertySheetW',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'NtQueryLicenseValue',
                                                                                            'lstrlenA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemTime',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'CloseHandle',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'MulDiv',
                                                                                            'GlobalFindAtomW',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetLocaleInfoW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetLocaleInfoEx',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'GetVersionExW',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'IsWow64Process',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'GetProfileStringW',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'RegisterApplicationRecoveryCallback',
                                                                                            'ApplicationRecoveryInProgress',
                                                                                            'Sleep',
                                                                                            'ApplicationRecoveryFinished',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetTempFileNameW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnableWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'PostMessageW',
                                                                                            'IsWindowEnabled',
                                                                                            'CharNextA',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetMenuState',
                                                                                            'GetFocus',
                                                                                            'OpenClipboard',
                                                                                            'GetClipboardData',
                                                                                            'InvalidateRect',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'InsertMenuItemW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageExtraInfo',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetKeyState',
                                                                                            'IsDialogMessageW',
                                                                                            'GetClassNameW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowLongW',
                                                                                            'DrawTextW',
                                                                                            'EnumChildWindows',
                                                                                            'SetPropW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetWindowPlacement',
                                                                                            'UpdateWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'MoveWindow',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'SetClassLongW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'OffsetRect',
                                                                                            'EqualRect',
                                                                                            'MonitorFromRect',
                                                                                            'GetClassWord',
                                                                                            'EnumDesktopWindows',
                                                                                            'EnumDisplayMonitors',
                                                                                            'IntersectRect',
                                                                                            'CopyRect',
                                                                                            'CreateDialogParamW',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'CreatePopupMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'GetAncestor',
                                                                                            'FindWindowW',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckMenuItem',
                                                                                            'GetSysColor',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetClassLongPtrW',
                                                                                            'EndDialog',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'SendMessageW',
                                                                                            'MessageBeep',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'DrawMenuBar',
                                                                                            'SetMenuItemInfoW',
                                                                                            'AppendMenuW',
                                                                                            'LoadStringW',
                                                                                            'GetSubMenu',
                                                                                            'RemoveMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'SetFocus',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'GetParent',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'LoadImageW',
                                                                                            'UnregisterClassA',
                                                                                            'FillRect',
                                                                                            'SetWindowTextW',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CheckRadioButton',
                                                                                            'DestroyWindow',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'timeGetTime',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'CreatePatternBrush',
                                                                                            'DeleteObject',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPointW',
                                                                                            'DeleteDC',
                                                                                            'GetRgnBox',
                                                                                            'CreateSolidBrush',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'ExtCreatePen',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateRectRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'EqualRgn',
                                                                                            'CreateDIBSection',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            '_wcsdup',
                                                                                            '_i64tow_s',
                                                                                            '_wtoi64',
                                                                                            'sprintf_s',
                                                                                            '_strtoi64',
                                                                                            '_strtoui64',
                                                                                            'memchr',
                                                                                            'strcspn',
                                                                                            'wcsrchr',
                                                                                            'wcstoul',
                                                                                            'isalpha',
                                                                                            'time',
                                                                                            'difftime',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '__CxxFrameHandler3',
                                                                                            'setlocale',
                                                                                            '__pctype_func',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            'localeconv',
                                                                                            '_errno',
                                                                                            '___mb_cur_max_func',
                                                                                            '__mb_cur_max',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__crtLCMapStringW',
                                                                                            '__uncaught_exception',
                                                                                            'tolower',
                                                                                            'isspace',
                                                                                            'abort',
                                                                                            'isalnum',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'iswalpha',
                                                                                            'iswdigit',
                                                                                            '_wcslwr_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcsncmp',
                                                                                            '_itow_s',
                                                                                            'calloc',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_itoa',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'wcstol',
                                                                                            'mbstowcs_s',
                                                                                            'exit',
                                                                                            'isdigit',
                                                                                            'isxdigit',
                                                                                            'toupper',
                                                                                            '_purecall',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            '_wcsrev'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 370,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 403352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 19968,
                                                                                       '.pdata\x00\x00': 26112,
                                                                                       '.rdata\x00\x00': 69632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 403456,
                                                                                       '.text\x00\x00\x00': 396800},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3773a767edad25f74163507049902b7b0a8e3a8c57b052bab00256d05aeae306'},
 '37a1a31a031414bbcbd7b7a7c16026f7af003b2c4b1786aa1bc0b93e86aff8d5': {'AddressOfEntryPoint': 5016,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2845508,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2845696,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/37a1a31a031414bbcbd7b7a7c16026f7af003b2c4b1786aa1bc0b93e86aff8d5'},
 '3826ea17aad6bc70c25325cbc5084933add96972498d4a17d780ad5d33b0e165': {'AddressOfEntryPoint': 34908,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3826ea17aad6bc70c25325cbc5084933add96972498d4a17d780ad5d33b0e165'},
 '38307a004e8d5680b6ef191fcf2cce0d32a19d44fc4bfbc180b2869095783f80': {'AddressOfEntryPoint': 332451,
                                                                      'DebugRVA': 400492,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 401408,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'gdiplus.dll': 'GdipGetImageGraphicsContext',
                                                                                      'msvcrt.dll': '_wcsrev',
                                                                                      'ntdll.dll': 'NtQueryLicenseValue',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SHGetSpecialFolderPathW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellAboutW',
                                                                                            'ShellExecuteExW',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipCloneBitmapAreaI',
                                                                                            'GdipSetPageUnit',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDrawArcI',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'QueryServiceConfigW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'EventWrite',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'IsThemeActive',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Add',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'PropertySheetW',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'NtQueryLicenseValue',
                                                                                            'lstrlenA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemTime',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'CloseHandle',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'MulDiv',
                                                                                            'GlobalFindAtomW',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetLocaleInfoW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetLocaleInfoEx',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'GetVersionExW',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'IsWow64Process',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'GetProfileStringW',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'RegisterApplicationRecoveryCallback',
                                                                                            'ApplicationRecoveryInProgress',
                                                                                            'Sleep',
                                                                                            'ApplicationRecoveryFinished',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetTempFileNameW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnableWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'PostMessageW',
                                                                                            'IsWindowEnabled',
                                                                                            'CharNextA',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetMenuState',
                                                                                            'GetFocus',
                                                                                            'OpenClipboard',
                                                                                            'GetClipboardData',
                                                                                            'InvalidateRect',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'InsertMenuItemW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageExtraInfo',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetKeyState',
                                                                                            'IsDialogMessageW',
                                                                                            'GetClassNameW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowLongW',
                                                                                            'DrawTextW',
                                                                                            'EnumChildWindows',
                                                                                            'SetPropW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetWindowPlacement',
                                                                                            'UpdateWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'MoveWindow',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'SetClassLongW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'OffsetRect',
                                                                                            'EqualRect',
                                                                                            'MonitorFromRect',
                                                                                            'GetClassWord',
                                                                                            'EnumDesktopWindows',
                                                                                            'EnumDisplayMonitors',
                                                                                            'IntersectRect',
                                                                                            'CopyRect',
                                                                                            'CreateDialogParamW',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'CreatePopupMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'GetAncestor',
                                                                                            'FindWindowW',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckMenuItem',
                                                                                            'GetSysColor',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetClassLongPtrW',
                                                                                            'EndDialog',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'SendMessageW',
                                                                                            'MessageBeep',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'DrawMenuBar',
                                                                                            'SetMenuItemInfoW',
                                                                                            'AppendMenuW',
                                                                                            'LoadStringW',
                                                                                            'GetSubMenu',
                                                                                            'RemoveMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'SetFocus',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'GetParent',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'LoadImageW',
                                                                                            'UnregisterClassA',
                                                                                            'FillRect',
                                                                                            'SetWindowTextW',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CheckRadioButton',
                                                                                            'DestroyWindow',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'timeGetTime',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'CreatePatternBrush',
                                                                                            'DeleteObject',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPointW',
                                                                                            'DeleteDC',
                                                                                            'GetRgnBox',
                                                                                            'CreateSolidBrush',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'ExtCreatePen',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateRectRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'EqualRgn',
                                                                                            'CreateDIBSection',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            '_wcsdup',
                                                                                            '_i64tow_s',
                                                                                            '_wtoi64',
                                                                                            'sprintf_s',
                                                                                            '_strtoi64',
                                                                                            '_strtoui64',
                                                                                            'memchr',
                                                                                            'strcspn',
                                                                                            'wcsrchr',
                                                                                            'wcstoul',
                                                                                            'isalpha',
                                                                                            'time',
                                                                                            'difftime',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '__CxxFrameHandler3',
                                                                                            'setlocale',
                                                                                            '__pctype_func',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            'localeconv',
                                                                                            '_errno',
                                                                                            '___mb_cur_max_func',
                                                                                            '__mb_cur_max',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__crtLCMapStringW',
                                                                                            '__uncaught_exception',
                                                                                            'tolower',
                                                                                            'isspace',
                                                                                            'abort',
                                                                                            'isalnum',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'iswalpha',
                                                                                            'iswdigit',
                                                                                            '_wcslwr_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcsncmp',
                                                                                            '_itow_s',
                                                                                            'calloc',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_itoa',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'wcstol',
                                                                                            'mbstowcs_s',
                                                                                            'exit',
                                                                                            'isdigit',
                                                                                            'isxdigit',
                                                                                            'toupper',
                                                                                            '_purecall',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            '_wcsrev'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 370,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 403352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 19968,
                                                                                       '.pdata\x00\x00': 26112,
                                                                                       '.rdata\x00\x00': 69632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 403456,
                                                                                       '.text\x00\x00\x00': 396800},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/38307a004e8d5680b6ef191fcf2cce0d32a19d44fc4bfbc180b2869095783f80'},
 '388c4d430259d15ce9d9fe6e8abb79351538d6e1f2d4327d8c6497c7c486645a': {'AddressOfEntryPoint': 121744,
                                                                      'DebugRVA': 95104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90112,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/388c4d430259d15ce9d9fe6e8abb79351538d6e1f2d4327d8c6497c7c486645a'},
 '38a08e1f3f72bb4dae5f65e9d968747389ed61bff9e4aac3c74b636d117bb9fa': {'AddressOfEntryPoint': 219616,
                                                                      'DebugRVA': 230176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 229376,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionBind',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoCancelIrp',
                                                                                            'PoSetPowerState',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IoDetachDevice',
                                                                                            'wcsstr',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 960,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 16896,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 224256,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/38a08e1f3f72bb4dae5f65e9d968747389ed61bff9e4aac3c74b636d117bb9fa'},
 '38c1eaf41dbf8251bedd53a58636c97372f818ebbe76b97ef427d72539d26be6': {'AddressOfEntryPoint': 35804,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['GetModuleBaseNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'CloseHandle',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'OpenProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'MessageBoxA',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 59904},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/38c1eaf41dbf8251bedd53a58636c97372f818ebbe76b97ef427d72539d26be6'},
 '38ff98c056b705492c12a757149563a42b12c43208ea92f9c308b2f187becb74': {'AddressOfEntryPoint': 125112,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 598016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LogonUserW',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocDescriptorEx',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetReadFile',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['WSACleanup',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'select',
                                                                                            'accept',
                                                                                            '__WSAFDIsSet',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetConnectW',
                                                                                            'FtpOpenFileW',
                                                                                            'HttpQueryInfoW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetOpenW',
                                                                                            'InternetReadFile',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'CreatePipe',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'IsCharUpperW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'CharUpperBuffW',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursor',
                                                                                            'WindowFromPoint',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'EnumThreadWindows',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'FindWindowW',
                                                                                            'CloseClipboard',
                                                                                            'DestroyWindow',
                                                                                            'RoundRect',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'GetDIBits',
                                                                                            'DeleteDC',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'SetBkMode',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'GetAce',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'GetAclInformation',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetVartype',
                                                                                            'OleLoadPicture',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayAllocDescriptorEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 506,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 120936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 25600,
                                                                                       '.rdata\x00\x00': 86528,
                                                                                       '.rsrc\x00\x00\x00': 121344,
                                                                                       '.text\x00\x00\x00': 590848},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/38ff98c056b705492c12a757149563a42b12c43208ea92f9c308b2f187becb74'},
 '393cd0a96ed1dd5f44d004affb65e95406ed4af63e23ccd0203bb017888351fe': {'AddressOfEntryPoint': 1073768413,
                                                                      'DebugRVA': 4576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualQuery',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceRegistryPropertyA'},
                                                                      'ImportedFunctions': ['lstrlenA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 48,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 976,
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/393cd0a96ed1dd5f44d004affb65e95406ed4af63e23ccd0203bb017888351fe'},
 '393d6000d170cd5726668b00a0e99430dd390b0ca09da0360d17e6ef2af69228': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1315352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1315840,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/393d6000d170cd5726668b00a0e99430dd390b0ca09da0360d17e6ef2af69228'},
 '39641f1c43c6eed90d045a9d660baea68ac990c4c3522662a0d36b225c6da3d5': {'AddressOfEntryPoint': 8760,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 58400,
                                                                      'ExportSize': 85,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers'},
                                                                      'ImportedFunctions': ['GetExitCodeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateRemoteThread',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'WriteProcessMemory',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSize',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/39641f1c43c6eed90d045a9d660baea68ac990c4c3522662a0d36b225c6da3d5'},
 '39c19e7de1c6430e66e1f3f8f3f62c971d4c49a62b5928b20fcaccffe55e7663': {'AddressOfEntryPoint': 84396,
                                                                      'DebugRVA': 103552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                      'KERNEL32.dll': 'GetCommandLineA',
                                                                                      'MSVCP90.dll': '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                      'MSVCR90.dll': 'memcpy',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'GetMessageA'},
                                                                      'ImportedFunctions': ['WriteFile',
                                                                                            'OpenProcess',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeA',
                                                                                            'ResetEvent',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcessId',
                                                                                            'PeekNamedPipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'CreateSemaphoreA',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'LocalAlloc',
                                                                                            'TlsGetValue',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'SHGetFileInfoW',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'strtok_s',
                                                                                            '_wsplitpath_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wcslwr_s',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            '_strdup',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcstok_s',
                                                                                            'memcpy',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 30208,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 94720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/39c19e7de1c6430e66e1f3f8f3f62c971d4c49a62b5928b20fcaccffe55e7663'},
 '3a1a39852786a3210972f4f3f3dfda8ec10e3bdf0a2e88dc412be4c06378b483': {'AddressOfEntryPoint': 4196,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'ExitProcess'},
                                                                      'ImportedFunctions': ['VirtualAlloc',
                                                                                            'ExitProcess'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 2,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.rdata\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3a1a39852786a3210972f4f3f3dfda8ec10e3bdf0a2e88dc412be4c06378b483'},
 '3a26abded2c4305dd780912d5db949dfcbfdbb41f7908478a97b625d304821aa': {'AddressOfEntryPoint': 35436,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['GetModuleBaseNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'GetStringTypeW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetLastError',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'lstrcpyW',
                                                                                            'FlsGetValue',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'MessageBoxA',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 59392},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3a26abded2c4305dd780912d5db949dfcbfdbb41f7908478a97b625d304821aa'},
 '3a384d62d08835e3e0746848d9ca89a4ca393fc115d0c11e4a5003c1c2585284': {'AddressOfEntryPoint': 250944,
                                                                      'DebugRVA': 262944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 262144,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionBind',
                                                                                      'ntoskrnl.exe': '_purecall'},
                                                                      'ImportedFunctions': ['ObfDereferenceObject',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoStartNextPacket',
                                                                                            'PoUnregisterSystemState',
                                                                                            'PoRegisterSystemState',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IofCompleteRequest',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IofCallDriver',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'PoSetPowerState',
                                                                                            'PoCallDriver',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IoFreeIrp',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'KeInitializeEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeReleaseMutex',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeClearEvent',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeSetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoInitializeIrp',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ExEventObjectType',
                                                                                            'IoDetachDevice',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'wcsstr',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'KeSynchronizeExecution',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'ExFreePoolWithTag',
                                                                                            '__C_specific_handler',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoAllocateMdl',
                                                                                            'MmUnmapLockedPages',
                                                                                            'PoRequestPowerIrp',
                                                                                            'swprintf',
                                                                                            'ZwCreateSection',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'KeDelayExecutionThread',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCreateDevice',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'sprintf',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            '_purecall',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 928,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 13824,
                                                                                       '.rdata\x00\x00': 33792,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 254976,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/3a384d62d08835e3e0746848d9ca89a4ca393fc115d0c11e4a5003c1c2585284'},
 '3a48814c69b47661371a4ae184640c4dcc3db94cad3715b99db9325c85d5d5d7': {'AddressOfEntryPoint': 51316,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 184896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.lon\x00\x00\x12\x00': 512,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 185344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3a48814c69b47661371a4ae184640c4dcc3db94cad3715b99db9325c85d5d5d7'},
 '3aec694d72efb396b6c3c857153455a714afa89f4edb5536219e0dc8a74f531a': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9636,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 9728,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3aec694d72efb396b6c3c857153455a714afa89f4edb5536219e0dc8a74f531a'},
 '3b38878bec77b98c79bdb1b209084ea27f708a33f2933d945cfe1ba1d8f30673': {'AddressOfEntryPoint': 33652,
                                                                      'DebugRVA': 20944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltCancelFileOpen',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoAttachDeviceToDeviceStackSafe',
                                                                                            'ZwReadFile',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwClose',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeBugCheckEx',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePool',
                                                                                            'IoRegisterFsRegistrationChange',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoThreadToProcess',
                                                                                            'PsGetProcessId',
                                                                                            'IoUnregisterFsRegistrationChange',
                                                                                            'IoDetachDevice',
                                                                                            'ExQueueWorkItem',
                                                                                            'ZwWriteFile',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoCreateDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'IoFreeWorkItem',
                                                                                            'ZwOpenProcess',
                                                                                            'IoDeleteDevice',
                                                                                            '__C_specific_handler',
                                                                                            'FltClose',
                                                                                            'FltAttachVolume',
                                                                                            'FltCreateFile',
                                                                                            'FltGetVolumeFromName',
                                                                                            'FltSendMessage',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltStartFiltering',
                                                                                            'FltGetVolumeFromDeviceObject',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltRegisterFilter',
                                                                                            'FltGetDeviceObject',
                                                                                            'FltObjectDereference',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltGetVolumeName',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltEnumerateVolumes',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltCloseClientPort',
                                                                                            'FltGetBottomInstance',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltCancelFileOpen'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 14336,
                                                                                       'INIT\x00\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/3b38878bec77b98c79bdb1b209084ea27f708a33f2933d945cfe1ba1d8f30673'},
 '3be7b1d360376dc9228cae463338d3ac305996d057125e379ea1ca42cbff8d76': {'AddressOfEntryPoint': 163392,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 335872,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyA',
                                                                                      'KERNEL32.dll': 'GetEnvironmentStringsW',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'USER32.dll': 'PostThreadMessageA',
                                                                                      'ole32.dll': 'CoRevokeClassObject'},
                                                                      'ImportedFunctions': ['SetEvent',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'FreeLibrary',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryExA',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'CreateFileA',
                                                                                            'ReadFile',
                                                                                            'GetLastError',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'FindResourceA',
                                                                                            'ReleaseMutex',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'SetFilePointer',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FlushFileBuffers',
                                                                                            'LoadLibraryA',
                                                                                            'SetHandleCount',
                                                                                            'OpenEventA',
                                                                                            'OutputDebugStringA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'VirtualAlloc',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetSystemInfo',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetCurrentThread',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'HeapSize',
                                                                                            'HeapValidate',
                                                                                            'IsBadReadPtr',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'DebugBreak',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryW',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapReAlloc',
                                                                                            'HeapQueryInformation',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'wsprintfA',
                                                                                            'CharNextA',
                                                                                            'CharNextW',
                                                                                            'GetMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'UnregisterClassA',
                                                                                            'PostThreadMessageA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SetThreadToken',
                                                                                            'RevertToSelf',
                                                                                            'OpenThreadToken',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'VarUI4FromStr',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 146,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 41416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13312,
                                                                                       '.pdata\x00\x00': 17408,
                                                                                       '.rdata\x00\x00': 100864,
                                                                                       '.rsrc\x00\x00\x00': 41472,
                                                                                       '.text\x00\x00\x00': 330240},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3be7b1d360376dc9228cae463338d3ac305996d057125e379ea1ca42cbff8d76'},
 '3be8a8db322b71e851ae241b124c4dfbdd76324b90b5c095a80bd310c65cc1a7': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 929196,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 929280,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3be8a8db322b71e851ae241b124c4dfbdd76324b90b5c095a80bd310c65cc1a7'},
 '3c1ffaf975a7aa8380f6fc111ba26476eed90008946d5de788cd50ec7a6b66aa': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 233200,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 233472,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3c1ffaf975a7aa8380f6fc111ba26476eed90008946d5de788cd50ec7a6b66aa'},
 '3c212affc4e21d5ebd1e4376aca98577cd44f9436e7ec3abbea5f14edb5aab1a': {'AddressOfEntryPoint': 135772,
                                                                      'DebugRVA': 28440,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NDIS.SYS': 'NdisUnchainBufferAtFront',
                                                                                      'NETIO.SYS': 'RtlCopyMdlToBuffer',
                                                                                      'ntoskrnl.exe': 'KeAcquireSpinLockRaiseToDpc'},
                                                                      'ImportedFunctions': ['KeBugCheckEx',
                                                                                            'ZwClose',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'IoFreeMdl',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'RtlCompareMemory',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'ExFreePoolWithTag',
                                                                                            'IoWMIWriteEvent',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoReuseIrp',
                                                                                            'KeResetEvent',
                                                                                            'IoFreeIrp',
                                                                                            'IoAllocateIrp',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'RtlIpv6AddressToStringA',
                                                                                            'RtlIpv6StringToAddressA',
                                                                                            'ExQueryDepthSList',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'MmLockPagableDataSection',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'NdisMRegisterMiniport',
                                                                                            'NdisAllocatePacketPool',
                                                                                            'NdisFreePacketPool',
                                                                                            'NdisAllocatePacket',
                                                                                            'NdisFreePacket',
                                                                                            'NdisAllocateBuffer',
                                                                                            'NdisFreeBufferPool',
                                                                                            'NdisAllocateBufferPool',
                                                                                            'NdisMSleep',
                                                                                            'NdisMCmRegisterAddressFamily',
                                                                                            'NdisMSetAttributesEx',
                                                                                            'NdisTerminateWrapper',
                                                                                            'NdisMRegisterUnloadHandler',
                                                                                            'NdisScheduleWorkItem',
                                                                                            'NdisMCoIndicateStatus',
                                                                                            'NdisSetTimer',
                                                                                            'NdisCancelTimer',
                                                                                            'NdisInitializeTimer',
                                                                                            'NdisMCoSendComplete',
                                                                                            'NdisMCoReceiveComplete',
                                                                                            'NdisMCoIndicateReceivePacket',
                                                                                            'NdisCopyBuffer',
                                                                                            'NdisCloseConfiguration',
                                                                                            'NdisReadConfiguration',
                                                                                            'NdisOpenConfiguration',
                                                                                            'NdisCmRegisterSapComplete',
                                                                                            'NdisCmDeregisterSapComplete',
                                                                                            'NdisAllocateMemoryWithTag',
                                                                                            'NdisFreeMemory',
                                                                                            'NdisCmMakeCallComplete',
                                                                                            'NdisCmCloseCallComplete',
                                                                                            'NdisMCmDeactivateVc',
                                                                                            'NdisCmDispatchCallConnected',
                                                                                            'NdisCmDispatchIncomingCloseCall',
                                                                                            'NdisMCmActivateVc',
                                                                                            'NdisCmCloseAddressFamilyComplete',
                                                                                            'NdisMCmDeleteVc',
                                                                                            'NdisMCmCreateVc',
                                                                                            'NdisCmDispatchIncomingCall',
                                                                                            'NdisInitializeWrapper',
                                                                                            'NdisUnchainBufferAtFront',
                                                                                            'NmrWaitForClientDeregisterComplete',
                                                                                            'NmrClientAttachProvider',
                                                                                            'NmrRegisterClient',
                                                                                            'RtlCopyMdlToBuffer'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 24576,
                                                                                       'INIT\x00\x00\x00\x00': 3584,
                                                                                       'PAGE\x00\x00\x00\x00': 8704,
                                                                                       'PAGEL2TP': 59904,
                                                                                       'PAGEWsk\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/3c212affc4e21d5ebd1e4376aca98577cd44f9436e7ec3abbea5f14edb5aab1a'},
 '3c2584a26896f9e70ae767222fe0b2d23d9971cd7869d054ad3e4b705385674f': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 367460,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 367616,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3c2584a26896f9e70ae767222fe0b2d23d9971cd7869d054ad3e4b705385674f'},
 '3c2a40f64aae9c3185cd852d8113c1bde8142852f115304bcfbdb2b8d753ef3f': {'AddressOfEntryPoint': 33032,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 54752,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetTempFileNameA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_commode'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'GlobalAlloc',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            '_llseek',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'FreeResource',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcmpA',
                                                                                            '_lclose',
                                                                                            'GlobalLock',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadResource',
                                                                                            'FreeLibrary',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetDeviceCaps',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'GetDC',
                                                                                            'MessageBoxA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'SendMessageA',
                                                                                            'GetSystemMetrics',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_commode',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 121724,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 121856,
                                                                                       '.text\x00\x00\x00': 32768},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3c2a40f64aae9c3185cd852d8113c1bde8142852f115304bcfbdb2b8d753ef3f'},
 '3c2f3f730ba452ff1cfef86d0ccbc09c411fb45eaee7861ba5fc66b880fe1c3a': {'AddressOfEntryPoint': 180536,
                                                                      'DebugRVA': 756104,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 757760,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'GDI32.dll': 'ExtTextOutW',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'POWRPROF.dll': 'GetPwrCapabilities',
                                                                                      'PROPSYS.dll': 'PropVariantToStringAlloc',
                                                                                      'RPCRT4.dll': 'RpcBindingFromStringBindingW',
                                                                                      'SHELL32.dll': 'SHCreateItemFromParsingName',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'GetClassNameW',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'dwmapi.dll': 'DwmUnregisterThumbnail',
                                                                                      'gdiplus.dll': 'GdipSetCompositingMode',
                                                                                      'msvcrt.dll': 'sin',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess',
                                                                                      'ole32.dll': 'CoCreateFreeThreadedMarshaler',
                                                                                      'slc.dll': 'SLGetWindowsInformationDWORD'},
                                                                      'ImportedFunctions': ['RegCreateKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'EventWrite',
                                                                                            'EventEnabled',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegQueryValueExW',
                                                                                            'GetLengthSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'TraceMessage',
                                                                                            'RegOpenKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'LsaOpenPolicy',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'LsaClose',
                                                                                            'IsValidSid',
                                                                                            'LsaFreeMemory',
                                                                                            'StartTraceW',
                                                                                            'EnableTraceEx',
                                                                                            'StopTraceW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'StartServiceW',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegEnumKeyExW',
                                                                                            'GetSidSubAuthority',
                                                                                            'LsaLookupSids',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CheckTokenMembership',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenThreadToken',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LoadLibraryExA',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'FlushInstructionCache',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'OpenThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleW',
                                                                                            'OpenEventW',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetLongPathNameW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetStartupInfoW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'VirtualFree',
                                                                                            'lstrcmpiW',
                                                                                            'CompareStringOrdinal',
                                                                                            'FindFirstFileW',
                                                                                            'SetErrorMode',
                                                                                            'CreateEventW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WaitForSingleObject',
                                                                                            'SetTermsrvAppInstallMode',
                                                                                            'GetFileAttributesW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MulDiv',
                                                                                            'GetTickCount64',
                                                                                            'GetThreadPriority',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetTickCount',
                                                                                            'GetUserDefaultLangID',
                                                                                            'ExitProcess',
                                                                                            'HeapDestroy',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'GetDynamicTimeZoneInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetBinaryTypeW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueueUserWorkItem',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProductInfo',
                                                                                            'TerminateThread',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'LoadLibraryA',
                                                                                            'DeleteFileW',
                                                                                            'GetProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'lstrcmpA',
                                                                                            'CompareFileTime',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'CreateFileMappingW',
                                                                                            'ResetEvent',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalFree',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetComputerNameW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateProcessW',
                                                                                            'lstrlenW',
                                                                                            'OpenProcess',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'QueryInformationJobObject',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetPriorityClass',
                                                                                            'ResumeThread',
                                                                                            'AssignProcessToJobObject',
                                                                                            'SetInformationJobObject',
                                                                                            'GetLastError',
                                                                                            'CreateJobObjectW',
                                                                                            'CloseHandle',
                                                                                            'LPtoDP',
                                                                                            'GetRgnBox',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'GetStockObject',
                                                                                            'GdiFlush',
                                                                                            'CombineRgn',
                                                                                            'OffsetRgn',
                                                                                            'SetLayout',
                                                                                            'SetWindowOrgEx',
                                                                                            'StretchBlt',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreatePen',
                                                                                            'Polyline',
                                                                                            'GetRegionData',
                                                                                            'GetTextColor',
                                                                                            'GetLayout',
                                                                                            'GetTextMetricsW',
                                                                                            'ExtCreateRegion',
                                                                                            'SetDIBits',
                                                                                            'SelectClipRgn',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetViewportOrgEx',
                                                                                            'IntersectClipRect',
                                                                                            'GetClipRgn',
                                                                                            'CreateRectRgn',
                                                                                            'GetBkColor',
                                                                                            'PatBlt',
                                                                                            'CreateBitmap',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetTextExtentPointW',
                                                                                            'GetClipBox',
                                                                                            'GetObjectW',
                                                                                            'GdiAlphaBlend',
                                                                                            'BitBlt',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'ExtTextOutW',
                                                                                            'CopyRect',
                                                                                            'SetRect',
                                                                                            'CreateWindowExW',
                                                                                            'DialogBoxParamW',
                                                                                            'GetClassInfoW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemCount',
                                                                                            'DefWindowProcW',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'GetCursorPos',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuStringW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'InsertMenuItemW',
                                                                                            'IsChild',
                                                                                            'IsWinEventHookInstalled',
                                                                                            'IsProcessDPIAware',
                                                                                            'IsRectEmpty',
                                                                                            'UnionRect',
                                                                                            'GetClassLongW',
                                                                                            'SetClassLongW',
                                                                                            'GetGUIThreadInfo',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MoveWindow',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'GetWindowDC',
                                                                                            'CharUpperW',
                                                                                            'UnregisterClassW',
                                                                                            'FrameRect',
                                                                                            'WindowFromDC',
                                                                                            'SendMessageCallbackW',
                                                                                            'UpdateLayeredWindow',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'ShowWindowAsync',
                                                                                            'BringWindowToTop',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetIconInfo',
                                                                                            'RegisterShellHookWindow',
                                                                                            'DeregisterShellHookWindow',
                                                                                            'FlashWindowEx',
                                                                                            'SetThreadDesktop',
                                                                                            'EndTask',
                                                                                            'OpenInputDesktop',
                                                                                            'CloseDesktop',
                                                                                            'GetMenuState',
                                                                                            'IsZoomed',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollPos',
                                                                                            'InternalGetWindowText',
                                                                                            'GetWindowInfo',
                                                                                            'GetCaretBlinkTime',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'GetLayeredWindowAttributes',
                                                                                            'GetUpdateRect',
                                                                                            'SetWindowsHookExW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'CallNextHookEx',
                                                                                            'SetFocus',
                                                                                            'GetAncestor',
                                                                                            'ReleaseCapture',
                                                                                            'GetDoubleClickTime',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetRectEmpty',
                                                                                            'EnumDisplayMonitors',
                                                                                            'InflateRect',
                                                                                            'EqualRect',
                                                                                            'UpdateWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'MonitorFromRect',
                                                                                            'CharPrevW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetMenuDefaultItem',
                                                                                            'SendNotifyMessageW',
                                                                                            'LockSetForegroundWindow',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'IntersectRect',
                                                                                            'MonitorFromWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetForegroundWindow',
                                                                                            'EnumWindows',
                                                                                            'GetParent',
                                                                                            'IsWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'WaitMessage',
                                                                                            'GetWindowTextW',
                                                                                            'GetClientRect',
                                                                                            'TrackPopupMenuEx',
                                                                                            'SetActiveWindow',
                                                                                            'GetKeyState',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SubtractRect',
                                                                                            'RedrawWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'InvalidateRect',
                                                                                            'OffsetRect',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetWindowRgn',
                                                                                            'UpdateLayeredWindowIndirect',
                                                                                            'GetWindowRgnBox',
                                                                                            'LoadImageW',
                                                                                            'GetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetLastInputInfo',
                                                                                            'RemovePropW',
                                                                                            'GetLastActivePopup',
                                                                                            'SwitchToThisWindow',
                                                                                            'MessageBeep',
                                                                                            'GetActiveWindow',
                                                                                            'GetFocus',
                                                                                            'SetCursor',
                                                                                            'UnregisterHotKey',
                                                                                            'RegisterHotKey',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'GetAsyncKeyState',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursorPos',
                                                                                            'GetMessagePos',
                                                                                            'BeginPaint',
                                                                                            'FillRect',
                                                                                            'DrawEdge',
                                                                                            'EndPaint',
                                                                                            'GetSystemMenu',
                                                                                            'EnableMenuItem',
                                                                                            'ExitWindowsEx',
                                                                                            'LoadIconW',
                                                                                            'DestroyIcon',
                                                                                            'IsIconic',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuItem',
                                                                                            'ModifyMenuW',
                                                                                            'WindowFromPoint',
                                                                                            'ClientToScreen',
                                                                                            'TrackPopupMenu',
                                                                                            'IsHungAppWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AppendMenuW',
                                                                                            'CascadeWindows',
                                                                                            'TileWindows',
                                                                                            'LockWorkStation',
                                                                                            'ScreenToClient',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'NotifyWinEvent',
                                                                                            'GetSysColor',
                                                                                            'DrawFocusRect',
                                                                                            'AdjustWindowRectEx',
                                                                                            'CopyIcon',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SetWinEventHook',
                                                                                            'RegisterClassExW',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemInt',
                                                                                            'SetDlgItemInt',
                                                                                            'IsDlgButtonChecked',
                                                                                            'IsWindowEnabled',
                                                                                            'CheckDlgButton',
                                                                                            'CallWindowProcW',
                                                                                            'SetCapture',
                                                                                            'DrawTextW',
                                                                                            'AdjustWindowRect',
                                                                                            'CalculatePopupWindowPosition',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetCapture',
                                                                                            'SetGestureConfig',
                                                                                            'DrawIconEx',
                                                                                            'RemoveMenu',
                                                                                            'SetMenuDefaultItem',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'LoadAcceleratorsW',
                                                                                            'TrackMouseEvent',
                                                                                            'CharNextW',
                                                                                            'GetWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'GetPropW',
                                                                                            'HungWindowFromGhostWindow',
                                                                                            'SetWindowCompositionAttribute',
                                                                                            'GetWindowLongW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'EnumChildWindows',
                                                                                            'SendMessageW',
                                                                                            'PtInRect',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetWindowRect',
                                                                                            'DestroyMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'ShowWindow',
                                                                                            'MapWindowPoints',
                                                                                            'SetTimer',
                                                                                            'SetPropW',
                                                                                            'KillTimer',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowLongPtrW',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DestroyWindow',
                                                                                            'ShutdownBlockReasonCreate',
                                                                                            'LoadStringW',
                                                                                            'PostMessageW',
                                                                                            'PeekMessageW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'FindWindowW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetShellWindow',
                                                                                            'GetClassNameW',
                                                                                            '_vsnwprintf',
                                                                                            'free',
                                                                                            'wcsstr',
                                                                                            'iswalpha',
                                                                                            'wcschr',
                                                                                            'realloc',
                                                                                            '_wcsicmp',
                                                                                            'cosf',
                                                                                            '_wtoi',
                                                                                            'memcmp',
                                                                                            'sqrt',
                                                                                            'ceil',
                                                                                            'bsearch',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_fmode',
                                                                                            'malloc',
                                                                                            'sin',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'NtSetSystemInformation',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmEventEnabled',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlGetProductInfo',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwEventWrite',
                                                                                            'NtQueryInformationProcess',
                                                                                            'StrStrIW',
                                                                                            'AssocQueryStringW',
                                                                                            'PathQuoteSpacesW',
                                                                                            'SHDeleteKeyW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'PathIsNetworkPathW',
                                                                                            'SHOpenRegStream2W',
                                                                                            'SHRegGetBoolUSValueW',
                                                                                            'SHStrDupW',
                                                                                            'StrChrIW',
                                                                                            'PathFileExistsW',
                                                                                            'PathGetDriveNumberW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsDirectoryW',
                                                                                            'SHRegGetValueW',
                                                                                            'ChrCmpIW',
                                                                                            'AssocQueryKeyW',
                                                                                            'PathStripPathW',
                                                                                            'PathIsRootW',
                                                                                            'PathParseIconLocationW',
                                                                                            'StrCmpIW',
                                                                                            'StrCmpW',
                                                                                            'PathIsPrefixW',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'SHQueryInfoKeyW',
                                                                                            'StrCmpNW',
                                                                                            'StrTrimW',
                                                                                            'PathStripToRootW',
                                                                                            'StrRetToBufW',
                                                                                            'PathCommonPrefixW',
                                                                                            'SHStrDupA',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathIsFileSpecW',
                                                                                            'AssocCreate',
                                                                                            'StrRetToStrW',
                                                                                            'StrToIntW',
                                                                                            'StrChrW',
                                                                                            'PathCombineW',
                                                                                            'SHCreateThreadRef',
                                                                                            'SHSetThreadRef',
                                                                                            'SHGetValueW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveArgsW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'StrCmpNIW',
                                                                                            'PathGetArgsW',
                                                                                            'SHSetValueW',
                                                                                            'SHDeleteValueW',
                                                                                            'PathAppendW',
                                                                                            'PathFindExtensionW',
                                                                                            'SHCreateDataObject',
                                                                                            'SHGetLocalizedName',
                                                                                            'Shell_GetCachedImageIndexW',
                                                                                            'SHGetStockIconInfo',
                                                                                            'SHGetPropertyStoreForWindow',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHCreateItemWithParent',
                                                                                            'SHBindToFolderIDListParent',
                                                                                            'SHBindToFolderIDListParentEx',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHParseDisplayName',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBindToObject',
                                                                                            'SHGetKnownFolderIDList',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetNameFromIDList',
                                                                                            'SHCreateShellItem',
                                                                                            'SHChangeNotifyRegisterThread',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'SHUpdateRecycleBinIcon',
                                                                                            'SHBindToParent',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'ShellExecuteW',
                                                                                            'SHEnableServiceObject',
                                                                                            'SHGetIDListFromObject',
                                                                                            'SHCreateItemFromIDList',
                                                                                            'SHAddToRecentDocs',
                                                                                            'Shell_NotifyIconW',
                                                                                            'Shell_NotifyIconGetRect',
                                                                                            'ExtractIconExW',
                                                                                            'SHEvaluateSystemCommandTemplate',
                                                                                            'SHCreateShellItemArrayFromIDLists',
                                                                                            'DragQueryFileW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'SHCreateShellItemArrayFromShellItem',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromString',
                                                                                            'CoGetMalloc',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'RevokeDragDrop',
                                                                                            'RegisterDragDrop',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'StringFromGUID2',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'ReleaseStgMedium',
                                                                                            'PropVariantClear',
                                                                                            'CreateBindCtx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'GetThemeBackgroundExtent',
                                                                                            'GetThemeBackgroundRegion',
                                                                                            'GetThemeColor',
                                                                                            'IsThemePartDefined',
                                                                                            'GetThemeRect',
                                                                                            'DrawThemeIcon',
                                                                                            'GetBufferedPaintBits',
                                                                                            'BufferedPaintClear',
                                                                                            'IsAppThemed',
                                                                                            'IsCompositionActive',
                                                                                            'OpenThemeData',
                                                                                            'CloseThemeData',
                                                                                            'SetWindowTheme',
                                                                                            'GetThemeMetric',
                                                                                            'DrawThemeBackground',
                                                                                            'GetThemeTextExtent',
                                                                                            'DrawThemeText',
                                                                                            'GetThemeBool',
                                                                                            'DrawThemeParentBackground',
                                                                                            'GetWindowTheme',
                                                                                            'GetThemeBackgroundContentRect',
                                                                                            'GetThemePartSize',
                                                                                            'BeginBufferedPaint',
                                                                                            'DrawThemeTextEx',
                                                                                            'EndBufferedPaint',
                                                                                            'GetThemeMargins',
                                                                                            'BufferedPaintInit',
                                                                                            'BufferedPaintUnInit',
                                                                                            'IsThemeActive',
                                                                                            'CallNtPowerInformation',
                                                                                            'PowerDeterminePlatformRole',
                                                                                            'GetPwrCapabilities',
                                                                                            'DwmEnableBlurBehindWindow',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'DwmIsCompositionEnabled',
                                                                                            'DwmQueryThumbnailSourceSize',
                                                                                            'DwmUpdateThumbnailProperties',
                                                                                            'DwmUnregisterThumbnail',
                                                                                            'SLGetWindowsInformationDWORD',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCloneImage',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipSetCompositingMode',
                                                                                            'GetUserNameExW',
                                                                                            'NdrClientCall3',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'PSCreateMemoryPropertyStore',
                                                                                            'VariantToStringAlloc',
                                                                                            'VariantToStringWithDefault',
                                                                                            'PropVariantToString',
                                                                                            'VariantToBooleanWithDefault',
                                                                                            'PropVariantToInt64',
                                                                                            'VariantToInt32WithDefault',
                                                                                            'PropVariantToBoolean',
                                                                                            'PropVariantToUInt64',
                                                                                            'PropVariantToUInt32',
                                                                                            'PropVariantToStringAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 703,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1846912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14848,
                                                                                       '.pdata\x00\x00': 52736,
                                                                                       '.rdata\x00\x00': 191488,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 1847296,
                                                                                       '.text\x00\x00\x00': 752128},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3c2f3f730ba452ff1cfef86d0ccbc09c411fb45eaee7861ba5fc66b880fe1c3a'},
 '3c57c336abbe953ab379eebc319482f933373ede8f30ed8e0215f38393873ce1': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 883776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 884224,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3c57c336abbe953ab379eebc319482f933373ede8f30ed8e0215f38393873ce1'},
 '3c5a6986d9cd1f4bc13a50d2bacaeeb71f2d827bd08b7f0b9ac870ec468719de': {'AddressOfEntryPoint': 31152,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 948,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 19968,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 52736},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3c5a6986d9cd1f4bc13a50d2bacaeeb71f2d827bd08b7f0b9ac870ec468719de'},
 '3c8fba7851aa5c9eca70752fcd64fde62f3705257eadb51e7bd0bcb2b1d3491f': {'AddressOfEntryPoint': 35388,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 59392},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3c8fba7851aa5c9eca70752fcd64fde62f3705257eadb51e7bd0bcb2b1d3491f'},
 '3c943b88b07b0d6210dce1746769194d3104bf19a0a581d7a075b19da63cf19f': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2266592,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2266624,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3c943b88b07b0d6210dce1746769194d3104bf19a0a581d7a075b19da63cf19f'},
 '3cec9b0e4f60895cdad85e8190352662edebe353e4dab4a5f301376b81b5df1a': {'AddressOfEntryPoint': 38912,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WININET.dll': 'InternetErrorDlg'},
                                                                      'ImportedFunctions': ['GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            '_local_unwind',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'SetFilePointer',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'LocalFree',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetVersionExA',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageA',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'TerminateProcess',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'InitializeCriticalSection',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetThreadLocale',
                                                                                            'GetCommandLineA',
                                                                                            'lstrcpynA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLastError',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            '__C_specific_handler',
                                                                                            'lstrcmpA',
                                                                                            'lstrcpyA',
                                                                                            'lstrcmpiA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsBadCodePtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetStdHandle',
                                                                                            'GetTimeZoneInformation',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'RaiseException',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'LoadStringA',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxA',
                                                                                            'wsprintfA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'SHGetFolderPathA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'HttpQueryInfoA',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetReadFile',
                                                                                            'HttpSendRequestA',
                                                                                            'HttpOpenRequestA',
                                                                                            'InternetConnectA',
                                                                                            'InternetCrackUrlA',
                                                                                            'InternetOpenA',
                                                                                            'InternetErrorDlg'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 130,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 17134080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 24576,
                                                                                       '.rsrc\x00\x00\x00': 17134080,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3cec9b0e4f60895cdad85e8190352662edebe353e4dab4a5f301376b81b5df1a'},
 '3d4b357481c8e8308988955e31def8145ec0b1734b1352f09a469dd052fe9448': {'AddressOfEntryPoint': 217088,
                                                                      'DebugRVA': 46864,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 0,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 127328,
                                                                      'SectionNames': {},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3d4b357481c8e8308988955e31def8145ec0b1734b1352f09a469dd052fe9448'},
 '3d6ff7fa98a376f7674b9975daca012278683f6cecf22126ca9d7b75e862e4ba': {'AddressOfEntryPoint': 217088,
                                                                      'DebugRVA': 46864,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 0,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 127328,
                                                                      'SectionNames': {},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3d6ff7fa98a376f7674b9975daca012278683f6cecf22126ca9d7b75e862e4ba'},
 '3d8fd3071a78e85341b8ee9b0399fb665a391622b4fb6c27b3ffe111bab5fb4b': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3420,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 1724928,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3d8fd3071a78e85341b8ee9b0399fb665a391622b4fb6c27b3ffe111bab5fb4b'},
 '3dbcab057f5790dc41c2000a53545eb369742a8e85c65ac52d3b473e6915371f': {'AddressOfEntryPoint': 1073742329,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'LoadLibraryW',
                                                                                      'MSVCR90.dll': '_wtol',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'EnableWindow'},
                                                                      'ImportedFunctions': ['__CxxFrameHandler3',
                                                                                            '_amsg_exit',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_wtol',
                                                                                            'LocalFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'PostMessageW',
                                                                                            'DrawIcon',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'IsIconic',
                                                                                            'SetParent',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'CommandLineToArgvW',
                                                                                            'InitCommonControlsEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 56,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2368,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3dbcab057f5790dc41c2000a53545eb369742a8e85c65ac52d3b473e6915371f'},
 '3dc41de2a9165db7ed462b50e0625c75e903cca91bd8a5ffca86ff4883b3a8ce': {'AddressOfEntryPoint': 1188446,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 289280,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 289280,
                                                                                       '.text\x00\x00\x00': 1180672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3dc41de2a9165db7ed462b50e0625c75e903cca91bd8a5ffca86ff4883b3a8ce'},
 '3dce8322f749a2aed8a9da7c0d2670a82bce10f9038f286e5fa94577f0fc57ef': {'AddressOfEntryPoint': 11532,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetCPInfo',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects'},
                                                                      'ImportedFunctions': ['_lclose',
                                                                                            'GetModuleFileNameA',
                                                                                            '_lread',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            '_lwrite',
                                                                                            '_lcreat',
                                                                                            'CreateDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'MoveFileExA',
                                                                                            'Sleep',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'IsValidCodePage',
                                                                                            'lstrcpyA',
                                                                                            'GetTempPathA',
                                                                                            'CompareStringA',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'RtlUnwindEx',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'wsprintfA',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'MessageBoxA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'ShellExecuteExA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 91,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 28020,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 28160,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3dce8322f749a2aed8a9da7c0d2670a82bce10f9038f286e5fa94577f0fc57ef'},
 '3ddd314f1a0f781596c0f4b2191c6beffc2c2df0dc02f7ab4842a3eebfd02059': {'AddressOfEntryPoint': 70368,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ControlService',
                                                                                      'KERNEL32.dll': 'GetACP',
                                                                                      'SETUPAPI.dll': 'SetupCloseInfFile',
                                                                                      'USER32.dll': 'wsprintfA'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegFlushKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceConfigA',
                                                                                            'OpenServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'StartServiceA',
                                                                                            'CreateServiceA',
                                                                                            'DeleteService',
                                                                                            'QueryServiceStatus',
                                                                                            'ControlService',
                                                                                            'wsprintfA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupInstallServicesFromInfSectionA',
                                                                                            'SetupCloseInfFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'GetOEMCP',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'GetVersionExA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetModuleHandleA',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetFilePointer',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetCPInfo',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetACP'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 92,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 35840},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3ddd314f1a0f781596c0f4b2191c6beffc2c2df0dc02f7ab4842a3eebfd02059'},
 '3debde619eea6ba2603167edaa7f6011128554679edda1f1bdd206922b46af2f': {'AddressOfEntryPoint': 63872,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 103040,
                                                                      'ExportSize': 192,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 905969664,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetUserNameA',
                                                                                      'KERNEL32.dll': 'GetStartupInfoA',
                                                                                      'SHLWAPI.dll': 'StrStrIA',
                                                                                      'USER32.dll': 'wvsprintfA',
                                                                                      'WININET.dll': 'InternetCloseHandle',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['StrRChrA',
                                                                                            'StrStrIA',
                                                                                            'CryptHashData',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegisterServiceCtrlHandlerExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptCreateHash',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegOpenKeyA',
                                                                                            'SetServiceStatus',
                                                                                            'GetUserNameA',
                                                                                            'CharLowerA',
                                                                                            'CharNextA',
                                                                                            'LoadStringA',
                                                                                            'wvsprintfA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'CloseHandle',
                                                                                            'lstrlenA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetStringTypeExA',
                                                                                            'GetThreadLocale',
                                                                                            'lstrcmpA',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'VirtualQuery',
                                                                                            'Sleep',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'UnmapViewOfFile',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'VirtualFree',
                                                                                            'IsBadReadPtr',
                                                                                            'GetLastError',
                                                                                            'GetFileTime',
                                                                                            'GetVolumeInformationA',
                                                                                            'OpenFileMappingW',
                                                                                            'lstrlenW',
                                                                                            'GetComputerNameA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemTime',
                                                                                            'GetModuleFileNameA',
                                                                                            'lstrcpynA',
                                                                                            'MoveFileExA',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExA',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetLocaleInfoA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapReAlloc',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSize',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStartupInfoA',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'HttpOpenRequestA',
                                                                                            'HttpSendRequestA',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'InternetConnectA',
                                                                                            'InternetGetConnectedState',
                                                                                            'InternetCheckConnectionA',
                                                                                            'InternetReadFile',
                                                                                            'InternetOpenA',
                                                                                            'InternetCrackUrlA',
                                                                                            'InternetCanonicalizeUrlA',
                                                                                            'InternetCloseHandle'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 132,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 4556,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 99328},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3debde619eea6ba2603167edaa7f6011128554679edda1f1bdd206922b46af2f'},
 '3dfe8530b3c7425d5363ecb4f90f1b93bba9dd353af33ea72ccf3aaadf736d3a': {'AddressOfEntryPoint': 3490504989,
                                                                      'DebugRVA': 6912,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetLengthSid',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'GDI32.dll': 'StartDocW',
                                                                                      'KERNEL32.dll': 'GetSystemDirectoryW',
                                                                                      'OLEAUT32.dll': 'VariantChangeType',
                                                                                      'SETUPAPI.dll': 'CM_Get_Device_IDW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminCalcHashFromFileHandle',
                                                                                      'msvcrt.dll': '__C_specific_handler',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['iswdigit',
                                                                                            '_vsnwprintf',
                                                                                            'wcspbrk',
                                                                                            'wcsrchr',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'memcmp',
                                                                                            'iswalpha',
                                                                                            'wcslen',
                                                                                            '__CxxFrameHandler',
                                                                                            'free',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_CxxThrowException',
                                                                                            '?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            'fread',
                                                                                            '_wfopen',
                                                                                            'fwprintf',
                                                                                            'fclose',
                                                                                            '_wcslwr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            'memset',
                                                                                            'realloc',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            'towupper',
                                                                                            'vswprintf',
                                                                                            '_vscwprintf',
                                                                                            '_wcsupr',
                                                                                            'malloc',
                                                                                            '__C_specific_handler',
                                                                                            'RegDeleteKeyW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetEntriesInAclW',
                                                                                            'DeleteService',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'OpenProcessToken',
                                                                                            'IsTextUnicode',
                                                                                            'StartServiceW',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'CloseServiceHandle',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'GetTokenInformation',
                                                                                            'CheckTokenMembership',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'DeviceIoControl',
                                                                                            'LocalReAlloc',
                                                                                            'GetACP',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetThreadLocale',
                                                                                            'GetVersionExW',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetLocalTime',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'SetThreadLocale',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetCommandLineW',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileSize',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'HeapAlloc',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'FillConsoleOutputCharacterW',
                                                                                            'ReadConsoleOutputW',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'FreeLibrary',
                                                                                            'FreeConsole',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'WriteConsoleOutputW',
                                                                                            'WriteConsoleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'lstrcpyW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcpynW',
                                                                                            'GlobalFree',
                                                                                            'MoveFileExW',
                                                                                            'GetShortPathNameW',
                                                                                            'CopyFileW',
                                                                                            'SetLastError',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CompareStringW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'Sleep',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetTextMetricsW',
                                                                                            'StartPage',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'EndPage',
                                                                                            'EndDoc',
                                                                                            'DeleteObject',
                                                                                            'StartDocW',
                                                                                            'GetParent',
                                                                                            'SetDlgItemTextW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckDlgButton',
                                                                                            'SetFocus',
                                                                                            'DrawTextExW',
                                                                                            'LoadImageW',
                                                                                            'LoadBitmapW',
                                                                                            'PostMessageW',
                                                                                            'GetSysColor',
                                                                                            'LoadIconW',
                                                                                            'LoadStringW',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'InvalidateRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SetWindowTextW',
                                                                                            'CallWindowProcW',
                                                                                            'DestroyIcon',
                                                                                            'DialogBoxParamW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'MessageBoxW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetUserObjectInformationW',
                                                                                            'CharLowerW',
                                                                                            'CharPrevW',
                                                                                            'GetSystemMetrics',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CM_Locate_DevNodeW',
                                                                                            'SetupDiOpenClassRegKey',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'pSetupSetGlobalFlags',
                                                                                            'pSetupGetGlobalFlags',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupGetIntField',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupFindNextLine',
                                                                                            'SetupFindNextMatchLineW',
                                                                                            'CM_Get_Device_ID_List_SizeW',
                                                                                            'SetupPromptReboot',
                                                                                            'SetupInstallFromInfSectionW',
                                                                                            'SetupInstallServicesFromInfSectionW',
                                                                                            'SetupFindFirstLineW',
                                                                                            'CMP_WaitNoPendingInstallEvents',
                                                                                            'SetupOpenAppendInfFileW',
                                                                                            'SetupGetLineCountW',
                                                                                            'SetupDiGetActualSectionToInstallW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'CM_Get_Device_ID_ListW',
                                                                                            'CM_Setup_DevNode',
                                                                                            'CM_Query_And_Remove_SubTreeW',
                                                                                            'CM_Enumerate_Classes',
                                                                                            'SetupInstallFilesFromInfSectionW',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupQueueCopyW',
                                                                                            'SetupQueueCopyIndirectW',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'SetupCommitFileQueueW',
                                                                                            'SetupInitDefaultQueueCallbackEx',
                                                                                            'SetupOpenFileQueue',
                                                                                            'SetupCloseFileQueue',
                                                                                            'SetupGetTargetPathW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiGetSelectedDriverW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantChangeType',
                                                                                            'CryptQueryObject',
                                                                                            'CertGetCTLContextProperty',
                                                                                            'CertFreeCTLContext',
                                                                                            'CertFreeCertificateContext',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 305,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 105376,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3dfe8530b3c7425d5363ecb4f90f1b93bba9dd353af33ea72ccf3aaadf736d3a'},
 '3e0765de464110e8b2ab5b05feb4b0cb9286c09ae61654a224a64d202f6019ba': {'AddressOfEntryPoint': 22268,
                                                                      'DebugRVA': 124304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'LoadTypeLibEx',
                                                                                      'RPCRT4.dll': 'UuidCreateSequential',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'SetWindowTextW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'ntdll.dll': '__chkstk',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ZwCreateSection',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'LdrFindEntryForAddress',
                                                                                            'RtlImageNtHeader',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwFlushKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'memcmp',
                                                                                            'ZwOpenTimer',
                                                                                            'ZwSetTimer',
                                                                                            'ZwDeleteFile',
                                                                                            'memcpy',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'memset',
                                                                                            'ZwWriteFile',
                                                                                            'strtoul',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetInformationFile',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'RtlGetCurrentPeb',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'LdrUnloadDll',
                                                                                            'LdrAddRefDll',
                                                                                            'sprintf',
                                                                                            'strlen',
                                                                                            'ZwRaiseHardError',
                                                                                            'wcsstr',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'LdrLoadDll',
                                                                                            'RtlInitUnicodeString',
                                                                                            'wcscpy',
                                                                                            'ZwClose',
                                                                                            'ZwQueryKey',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenKey',
                                                                                            'RtlComputeCrc32',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenProcess',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'ZwSetInformationToken',
                                                                                            'ZwDuplicateToken',
                                                                                            'ZwAdjustPrivilegesToken',
                                                                                            'ZwOpenThreadTokenEx',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwReadVirtualMemory',
                                                                                            'wcschr',
                                                                                            '__chkstk',
                                                                                            'SetThreadLocale',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'WideCharToMultiByte',
                                                                                            'CopyFileW',
                                                                                            'CreateProcessW',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'Sleep',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersion',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'MD5Update',
                                                                                            'MD5Final',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'MD5Init',
                                                                                            'GetWindowLongW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowPos',
                                                                                            'LoadIconW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DialogBoxParamW',
                                                                                            'PostMessageW',
                                                                                            'EndDialog',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'FindWindowW',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxW',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExW',
                                                                                            'AdjustWindowRect',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'OpenDesktopW',
                                                                                            'SetThreadDesktop',
                                                                                            'DestroyIcon',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetMessageW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SetWindowTextW',
                                                                                            'UuidCreateSequential',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'LoadTypeLibEx',
                                                                                            'WSAStartup',
                                                                                            'WSASocketW',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'WSAIoctl',
                                                                                            'WSARecv',
                                                                                            'WSASend',
                                                                                            'setsockopt',
                                                                                            'WSASendTo',
                                                                                            'WSARecvFrom',
                                                                                            'WSACleanup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 162,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 10104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 14336,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 115200},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3e0765de464110e8b2ab5b05feb4b0cb9286c09ae61654a224a64d202f6019ba'},
 '3e09126bb9245f524be55e3ca1ac11e26b8ecb26f455fe8d6fef90d78b35e259': {'AddressOfEntryPoint': 5568,
                                                                      'DebugRVA': 37632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorSacl',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'USER32.dll': 'GetMessageW'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'lstrlenW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcatW',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetSecurityDescriptorSacl'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 19456,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 30208},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3e09126bb9245f524be55e3ca1ac11e26b8ecb26f455fe8d6fef90d78b35e259'},
 '3e12b00604bbb40f673a38bc80ea882874c2fa3b2670b136e0b9b79dd915a1fa': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 394072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 325632,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3e12b00604bbb40f673a38bc80ea882874c2fa3b2670b136e0b9b79dd915a1fa'},
 '3e1b7db89d3cc871443a8d09b54554fd19b2fcc67d8b32e767348284ec2df4e4': {'AddressOfEntryPoint': 72032,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 147456,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'SHLWAPI.dll': 'PathIsDirectoryA',
                                                                                      'USER32.dll': 'GetWindowThreadProcessId',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiGetINFClassA',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiEnumDriverInfoA',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsA',
                                                                                            'SetupDiRegisterDeviceInfo',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiCreateDeviceInfoA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiGetDriverInfoDetailA',
                                                                                            'SetupDiRemoveDevice',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'PathAppendA',
                                                                                            'PathIsDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetLastError',
                                                                                            'FindFirstFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GetComputerNameA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetCurrentProcess',
                                                                                            'ReleaseMutex',
                                                                                            'CreateDirectoryA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateMutexA',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetTimeFormatA',
                                                                                            'GetLocalTime',
                                                                                            'OutputDebugStringA',
                                                                                            'MoveFileExA',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'FreeLibrary',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'Module32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32Next',
                                                                                            'Process32First',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'CopyFileA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'RemoveDirectoryA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'RtlVirtualUnwind',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'LCMapStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringA',
                                                                                            'RtlCaptureContext',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'SetStdHandle',
                                                                                            'FlsGetValue',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'WinExec',
                                                                                            'GetLastError',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetConsoleCP',
                                                                                            'GlobalFree',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'ReadFile',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'SetEndOfFile',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'ExitProcess',
                                                                                            'HeapFree',
                                                                                            'EndDeferWindowPos',
                                                                                            'LoadImageA',
                                                                                            'UpdateWindow',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'GetWindowRect',
                                                                                            'ShowWindow',
                                                                                            'DeferWindowPos',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'SendMessageA',
                                                                                            'CopyRect',
                                                                                            'GetParent',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'IsDlgButtonChecked',
                                                                                            'LoadBitmapA',
                                                                                            'EnumWindows',
                                                                                            'DialogBoxParamA',
                                                                                            'GetWindowInfo',
                                                                                            'ExitWindowsEx',
                                                                                            'CreateWindowExA',
                                                                                            'OffsetRect',
                                                                                            'GetDesktopWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceA',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'CloseServiceHandle',
                                                                                            'ImpersonateSelf',
                                                                                            'OpenThreadToken',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'AccessCheck',
                                                                                            'RevertToSelf',
                                                                                            'FreeSid',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegSetValueExA',
                                                                                            'GetUserNameA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'SHGetFolderPathA',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 220,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 318140,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 55808,
                                                                                       '.rsrc\x00\x00\x00': 318464,
                                                                                       '.text\x00\x00\x00': 141824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3e1b7db89d3cc871443a8d09b54554fd19b2fcc67d8b32e767348284ec2df4e4'},
 '3e814b46804787fc22a09b5915ebffa456317b7425df9eaaaea727fab2e85b01': {'AddressOfEntryPoint': 5904,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualQuery',
                                                                                      'msvcrt.dll': 'vfprintf'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__iob_func',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            '_vsnprintf',
                                                                                            'abort',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fread',
                                                                                            'free',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            'getchar',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'printf',
                                                                                            'puts',
                                                                                            'rewind',
                                                                                            'signal',
                                                                                            'sprintf',
                                                                                            'sscanf',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'strtoul',
                                                                                            'vfprintf'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 54272,
                                                                                       '.text\x00\x00\x00': 70656,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/malware/3e814b46804787fc22a09b5915ebffa456317b7425df9eaaaea727fab2e85b01'},
 '3ea7116346c1059548b52f43f3564672120c322f89d712902c664f6c0706d28c': {'AddressOfEntryPoint': 1381712,
                                                                      'DebugRVA': 1555264,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1548288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 173972,
                                                                      'SectionNames': {'.data\x00\x00\x00': 32768,
                                                                                       '.pdata\x00\x00': 77824,
                                                                                       '.rdata\x00\x00': 552960,
                                                                                       '.reloc\x00\x00': 77824,
                                                                                       '.rsrc\x00\x00\x00': 174080,
                                                                                       '.text\x00\x00\x00': 1540608,
                                                                                       'data\x00\x00\x00\x00': 2048,
                                                                                       'text\x00\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3ea7116346c1059548b52f43f3564672120c322f89d712902c664f6c0706d28c'},
 '3eab2d7a09996e92d91a04b51073dddc2abc99dbe2ddc713faefb3b913ba108b': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 127992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 128000,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3eab2d7a09996e92d91a04b51073dddc2abc99dbe2ddc713faefb3b913ba108b'},
 '3ef2ac6a6fd915f211f2c40a44c3065ce81720362fd00bdbc3bb47e003a3fba8': {'AddressOfEntryPoint': 127596,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 626688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 120536,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17920,
                                                                                       '.pdata\x00\x00': 27136,
                                                                                       '.rdata\x00\x00': 87040,
                                                                                       '.rsrc\x00\x00\x00': 120832,
                                                                                       '.text\x00\x00\x00': 620544},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/3ef2ac6a6fd915f211f2c40a44c3065ce81720362fd00bdbc3bb47e003a3fba8'},
 '3f09ec2b3e1a0c6ab91b596f0302e76fb741a80039db91693ac93a7b71113610': {'AddressOfEntryPoint': 2483035,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 2478872,
                                                                      'ExportSize': 3152,
                                                                      'IATRVA': 2491904,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'COMCTL32.dll': 'DestroyPropertySheetPage',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'ExitProcess',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'SETUPAPI.dll': 'CM_Request_Device_EjectW',
                                                                                      'SHELL32.dll': 'SHGetDataFromIDListW',
                                                                                      'SHLWAPI.dll': 'PathCompactPathExW',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoTaskMemFree',
                                                                                      'sqlite.dll': '?execDML@CppSQLite3DB@@UEAAHPEBD@Z',
                                                                                      'urlmon.dll': 'URLDownloadToCacheFileW'},
                                                                      'ImportedFunctions': ['SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'CM_Get_Parent',
                                                                                            'CM_Request_Device_EjectW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'lstrcmpiW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WinExec',
                                                                                            'GetSystemPowerStatus',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'GetExitCodeThread',
                                                                                            'lstrcmpW',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetShortPathNameA',
                                                                                            'WideCharToMultiByte',
                                                                                            'QueryDosDeviceW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetSystemTime',
                                                                                            'GetFileSize',
                                                                                            'GetShortPathNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetTimeZoneInformation',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStartupInfoA',
                                                                                            'SetHandleCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFileType',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetFullPathNameW',
                                                                                            'HeapSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStringTypeW',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStartupInfoW',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExitProcess',
                                                                                            'RemoveDirectoryW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'DeleteFileW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcpynW',
                                                                                            'UnmapViewOfFile',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeviceIoControl',
                                                                                            'GlobalSize',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'FormatMessageW',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'LocalFree',
                                                                                            'TerminateThread',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'OpenEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'FlushInstructionCache',
                                                                                            'GetOverlappedResult',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVolumeInformationW',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'CloseHandle',
                                                                                            'SetFilePointerEx',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'lstrlenA',
                                                                                            'OutputDebugStringW',
                                                                                            'DebugBreak',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'RemovePropW',
                                                                                            'PtInRect',
                                                                                            'GetScrollInfo',
                                                                                            'DrawFrameControl',
                                                                                            'DrawFocusRect',
                                                                                            'DrawEdge',
                                                                                            'UpdateWindow',
                                                                                            'GetScrollPos',
                                                                                            'GetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'SetScrollInfo',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'ReleaseDC',
                                                                                            'DestroyIcon',
                                                                                            'SetRectEmpty',
                                                                                            'GetKeyState',
                                                                                            'GetActiveWindow',
                                                                                            'UnregisterClassA',
                                                                                            'EndDialog',
                                                                                            'DialogBoxParamW',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetParent',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetPropW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'GetClientRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindowRect',
                                                                                            'GetWindow',
                                                                                            'CharNextW',
                                                                                            'wvsprintfW',
                                                                                            'LoadStringW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'IsWindowVisible',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadImageW',
                                                                                            'SetPropW',
                                                                                            'GetSysColor',
                                                                                            'ExitWindowsEx',
                                                                                            'CharLowerW',
                                                                                            'CharUpperBuffW',
                                                                                            'SetParent',
                                                                                            'EnableMenuItem',
                                                                                            'CreateWindowExW',
                                                                                            'InvalidateRect',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetFocus',
                                                                                            'MessageBoxW',
                                                                                            'SendInput',
                                                                                            'GetSystemMetrics',
                                                                                            'DefWindowProcW',
                                                                                            'InflateRect',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenu',
                                                                                            'DrawMenuBar',
                                                                                            'SetWindowLongW',
                                                                                            'IsDialogMessageW',
                                                                                            'BringWindowToTop',
                                                                                            'MoveWindow',
                                                                                            'IsIconic',
                                                                                            'RemoveMenu',
                                                                                            'CheckMenuItem',
                                                                                            'AppendMenuW',
                                                                                            'ClientToScreen',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetSysColorBrush',
                                                                                            'IsMenu',
                                                                                            'EnumWindows',
                                                                                            'PostQuitMessage',
                                                                                            'GetLastInputInfo',
                                                                                            'LoadIconW',
                                                                                            'GetDesktopWindow',
                                                                                            'CharUpperW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'MessageBeep',
                                                                                            'ScreenToClient',
                                                                                            'SetMenuDefaultItem',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMenuItemID',
                                                                                            'TrackPopupMenu',
                                                                                            'PostMessageW',
                                                                                            'DestroyWindow',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetSubMenu',
                                                                                            'LoadMenuW',
                                                                                            'DestroyMenu',
                                                                                            'GetCursorPos',
                                                                                            'RegisterWindowMessageW',
                                                                                            'CreateDialogParamW',
                                                                                            'wsprintfW',
                                                                                            'SetRect',
                                                                                            'DrawTextW',
                                                                                            'OffsetRect',
                                                                                            'CopyRect',
                                                                                            'CallWindowProcW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'IsWindow',
                                                                                            'SetDlgItemInt',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetDlgItemInt',
                                                                                            'CheckDlgButton',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetDC',
                                                                                            'GetTextColor',
                                                                                            'SetBkMode',
                                                                                            'ExcludeClipRect',
                                                                                            'GetViewportOrgEx',
                                                                                            'SetMapMode',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'GetTextMetricsW',
                                                                                            'DPtoLP',
                                                                                            'LPtoDP',
                                                                                            'SetWindowOrgEx',
                                                                                            'GetClipBox',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetDeviceCaps',
                                                                                            'SaveDC',
                                                                                            'GetStockObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'ExtTextOutW',
                                                                                            'SetBkColor',
                                                                                            'DeleteDC',
                                                                                            'RestoreDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextFaceW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreatePen',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'OpenSCManagerW',
                                                                                            'CreateServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExA',
                                                                                            'SHBindToParent',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'ShellExecuteW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDataFromIDListW',
                                                                                            'ReleaseStgMedium',
                                                                                            'DoDragDrop',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'VarUI4FromStr',
                                                                                            '?open@CppSQLite3DB@@UEAAXPEBD_N@Z',
                                                                                            '?isInitialized@CppSQLite3DB@@UEAA_NXZ',
                                                                                            '??0CTransaction@@QEAA@AEAVCppSQLite3DB@@@Z',
                                                                                            '?execQuery@CppSQLite3DB@@UEAA?AVCppSQLite3Query@@PEBD@Z',
                                                                                            '?eof@CppSQLite3Query@@UEAA_NXZ',
                                                                                            '?getStringField@CppSQLite3Query@@UEAAPEBDPEBD0@Z',
                                                                                            '?nextRow@CppSQLite3Query@@UEAAXXZ',
                                                                                            '??1CppSQLite3Query@@UEAA@XZ',
                                                                                            '??1CTransaction@@UEAA@XZ',
                                                                                            '?close@CppSQLite3DB@@UEAAXXZ',
                                                                                            '??1CppSQLite3Buffer@@UEAA@XZ',
                                                                                            '?format@CppSQLite3Buffer@@UEAAPEBDPEBDZZ',
                                                                                            '?lastRowId@CppSQLite3DB@@UEAA_JXZ',
                                                                                            '??0CppSQLite3Buffer@@QEAA@XZ',
                                                                                            '??0CppSQLite3DB@@QEAA@XZ',
                                                                                            '??1CppSQLite3DB@@UEAA@XZ',
                                                                                            '?execDML@CppSQLite3DB@@UEAAHPEBD@Z',
                                                                                            'StrFromTimeIntervalW',
                                                                                            'StrRetToBufW',
                                                                                            'PathCompactPathExW',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_GetImageInfo',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'ImageList_GetIconSize',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_SetOverlayImage',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Create',
                                                                                            'PropertySheetW',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'URLDownloadToCacheFileW',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 403,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 617216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 0,
                                                                                       '.pdata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 583680,
                                                                                       '.text\x00\x00\x00': 0,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.vmp0\x00\x00\x00': 0,
                                                                                       '.vmp1\x00\x00\x00': 551936},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3f09ec2b3e1a0c6ab91b596f0302e76fb741a80039db91693ac93a7b71113610'},
 '3f25be90c7c84ae837e874dbc5fec5f28f3bb087746bd24e3ba11cc7ea130f2a': {'AddressOfEntryPoint': 3125568,
                                                                      'DebugRVA': 6171360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 6160384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 753908,
                                                                      'SectionNames': {'.data\x00\x00\x00': 247296,
                                                                                       '.pdata\x00\x00': 204800,
                                                                                       '.rdata\x00\x00': 1924096,
                                                                                       '.reloc\x00\x00': 43520,
                                                                                       '.rsrc\x00\x00\x00': 754176,
                                                                                       '.text\x00\x00\x00': 6155776,
                                                                                       'data\x00\x00\x00\x00': 30720,
                                                                                       'text\x00\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3f25be90c7c84ae837e874dbc5fec5f28f3bb087746bd24e3ba11cc7ea130f2a'},
 '3f3132b1fd2148c34b83c49946fe472b7d81696665fd9c8008150a3053857261': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlTimeToTimeFields',
                                                                                            'RtlComputeCrc32',
                                                                                            'sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwWriteFile',
                                                                                            'ZwSetValueKey',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwCreateKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3f3132b1fd2148c34b83c49946fe472b7d81696665fd9c8008150a3053857261'},
 '3f4c9f83b441cec84667f4ba1e937788b32d1d29315ab0e874df73bee2657ce2': {'AddressOfEntryPoint': 258986,
                                                                      'DebugRVA': 6080,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'KERNEL32.dll': 'CreateThread',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'POWRPROF.dll': 'PowerDeterminePlatformRole',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'WINHTTP.dll': 'WinHttpOpen',
                                                                                      'msvcrt.dll': 'wcsstr',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'ole32.dll': 'StringFromGUID2',
                                                                                      'tdh.dll': 'TdhGetProperty',
                                                                                      'wevtapi.dll': 'EvtClose'},
                                                                      'ImportedFunctions': ['ProcessTrace',
                                                                                            'EnableTraceEx',
                                                                                            'TraceMessage',
                                                                                            'UpdateTraceW',
                                                                                            'ControlTraceW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'CloseTrace',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'StopTraceW',
                                                                                            'StartTraceW',
                                                                                            'RegDeleteValueW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegEnumValueW',
                                                                                            'IsValidSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegEnumKeyExW',
                                                                                            'QueryTraceW',
                                                                                            'OpenTraceW',
                                                                                            'RegCloseKey',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'RegisterEventSourceW',
                                                                                            'RegCreateKeyExW',
                                                                                            'DeregisterEventSource',
                                                                                            'ReportEventW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegSetValueExW',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'OpenProcessToken',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'GetTokenInformation',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'TraceEvent',
                                                                                            'QueryServiceStatus',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'RevertToSelf',
                                                                                            'RegGetValueW',
                                                                                            'CloseServiceHandle',
                                                                                            'FindNextFileW',
                                                                                            'GetFileAttributesExW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'GetSystemTime',
                                                                                            'SetFileAttributesW',
                                                                                            'GetActiveProcessorCount',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetUserGeoID',
                                                                                            'LoadLibraryW',
                                                                                            'GetLogicalProcessorInformationEx',
                                                                                            'GetProcAddress',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetProductInfo',
                                                                                            'GetSystemInfo',
                                                                                            'LocalFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'ReadFile',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEvent',
                                                                                            'CreateFileMappingW',
                                                                                            'ReleaseMutex',
                                                                                            'GetThreadPriority',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LockResource',
                                                                                            'GlobalFree',
                                                                                            'SetLastError',
                                                                                            'GetLongPathNameW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetTempPathW',
                                                                                            'GetFileAttributesW',
                                                                                            'VirtualAlloc',
                                                                                            'DuplicateHandle',
                                                                                            'VirtualFree',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileSize',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalAlloc',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SizeofResource',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFilePointerEx',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadResource',
                                                                                            'lstrlenW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetLocalTime',
                                                                                            'FindClose',
                                                                                            'GetLastError',
                                                                                            'SetThreadPriority',
                                                                                            'CreateFileW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetVersionExW',
                                                                                            'WriteFile',
                                                                                            'GetCurrentThread',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForSingleObject',
                                                                                            'CompareFileTime',
                                                                                            'MoveFileExW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateProcessW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateMutexW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'FindResourceW',
                                                                                            'FreeResource',
                                                                                            'GetTempFileNameW',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'CreateThread',
                                                                                            'LoadStringW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'memmove',
                                                                                            'ceilf',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_vsnwprintf',
                                                                                            'towupper',
                                                                                            'wcschr',
                                                                                            'malloc',
                                                                                            'wcstok_s',
                                                                                            '_purecall',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            'free',
                                                                                            '_callnewh',
                                                                                            '_wcsicmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnprintf',
                                                                                            'realloc',
                                                                                            'wcstoul',
                                                                                            'wcsrchr',
                                                                                            'wcsstr',
                                                                                            'StrToIntExW',
                                                                                            'StrStrIW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathCombineW',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFileExistsW',
                                                                                            'TdhGetPropertySize',
                                                                                            'TdhGetProperty',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetFolderPathAndSubDirW',
                                                                                            'CommandLineToArgvW',
                                                                                            'WinHttpGetIEProxyConfigForCurrentUser',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpWriteData',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpSetStatusCallback',
                                                                                            'WinHttpCrackUrl',
                                                                                            'WinHttpGetProxyForUrl',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'WinHttpGetDefaultProxyConfiguration',
                                                                                            'WinHttpSetCredentials',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpSetOption',
                                                                                            'WinHttpOpen',
                                                                                            'EvtNext',
                                                                                            'EvtQuery',
                                                                                            'EvtRender',
                                                                                            'EvtCreateRenderContext',
                                                                                            'EvtClose',
                                                                                            'PowerDeterminePlatformRole',
                                                                                            'NtQuerySystemTime',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 225,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 29616,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 28672,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 254976,
                                                                                       'ajduvis\x00': 0},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3f4c9f83b441cec84667f4ba1e937788b32d1d29315ab0e874df73bee2657ce2'},
 '3f65fc632a0189985f0818a04853cb775ee86b280dc9ae2edf56a6d576dde59b': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 393004,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 393216,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3f65fc632a0189985f0818a04853cb775ee86b280dc9ae2edf56a6d576dde59b'},
 '3f842bd4ef9728e19a5f16177ecd9b351f9f55105cff731c86ec99693e67fd8e': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 253156,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 253440,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3f842bd4ef9728e19a5f16177ecd9b351f9f55105cff731c86ec99693e67fd8e'},
 '3f871160d4ddc76584e793ec3f40f1deb83a2f7b5616e2306f720e5b4dbc1f91': {'AddressOfEntryPoint': 35804,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['GetModuleBaseNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'CloseHandle',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'OpenProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'MessageBoxA',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 59904},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3f871160d4ddc76584e793ec3f40f1deb83a2f7b5616e2306f720e5b4dbc1f91'},
 '3fa426d290f3e54baa17d1b867e5edc9e83d9d7b8aa38247dbad72d8f87e06ec': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1706368,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1625088,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3fa426d290f3e54baa17d1b867e5edc9e83d9d7b8aa38247dbad72d8f87e06ec'},
 '3fca9fe19d2fe89cb9391ffe22b869cb8cf652734b4a988ee2a51557616abc25': {'AddressOfEntryPoint': 1073811933,
                                                                      'DebugRVA': 5056,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDriverInfoDetailW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'fputws'},
                                                                      'ImportedFunctions': ['__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'wprintf',
                                                                                            'wcsrchr',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            'iswalpha',
                                                                                            'towupper',
                                                                                            'towlower',
                                                                                            'wcschr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_iob',
                                                                                            'fputs',
                                                                                            'fputws',
                                                                                            'CloseServiceHandle',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegSetValueExW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'lstrcpynW',
                                                                                            'GetTickCount',
                                                                                            'GetDateFormatW',
                                                                                            'lstrcpyW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupCloseFileQueue',
                                                                                            'SetupScanFileQueueW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupOpenFileQueue',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupDiGetDriverInstallParamsW',
                                                                                            'SetupDiOpenClassRegKeyExW',
                                                                                            'SetupDiGetClassDescriptionExW',
                                                                                            'SetupDiClassNameFromGuidExW',
                                                                                            'SetupDiBuildClassInfoListExW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiCreateDeviceInfoW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiGetINFClassW',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'CM_Disconnect_Machine',
                                                                                            'CM_Reenumerate_DevNode_Ex',
                                                                                            'CM_Locate_DevNode_ExW',
                                                                                            'CM_Connect_MachineW',
                                                                                            'CM_Get_First_Log_Conf_Ex',
                                                                                            'CM_Free_Log_Conf_Handle',
                                                                                            'CM_Get_Next_Res_Des_Ex',
                                                                                            'CM_Free_Res_Des_Handle',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'CM_Get_Device_ID_ExW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceInfoListDetailW',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiGetClassDevsExW',
                                                                                            'SetupDiCreateDeviceInfoListExW',
                                                                                            'SetupDiClassGuidsFromNameExW',
                                                                                            'CM_Get_DevNode_Status_Ex',
                                                                                            'CM_Get_Res_Des_Data_Ex',
                                                                                            'CM_Get_Res_Des_Data_Size_Ex',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevW',
                                                                                            'CharNextW',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 33608,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/3fca9fe19d2fe89cb9391ffe22b869cb8cf652734b4a988ee2a51557616abc25'},
 '3fdc969d7c30c622caedab1d646735d5274e8aa8ba7355c39d04a24f7a2e7bc8': {'AddressOfEntryPoint': 125112,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 598016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LogonUserW',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocDescriptorEx',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetReadFile',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['WSACleanup',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'select',
                                                                                            'accept',
                                                                                            '__WSAFDIsSet',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetConnectW',
                                                                                            'FtpOpenFileW',
                                                                                            'HttpQueryInfoW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetOpenW',
                                                                                            'InternetReadFile',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'CreatePipe',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'IsCharUpperW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'CharUpperBuffW',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursor',
                                                                                            'WindowFromPoint',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'EnumThreadWindows',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'FindWindowW',
                                                                                            'CloseClipboard',
                                                                                            'DestroyWindow',
                                                                                            'RoundRect',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'GetDIBits',
                                                                                            'DeleteDC',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'SetBkMode',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'GetAce',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'GetAclInformation',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetVartype',
                                                                                            'OleLoadPicture',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayAllocDescriptorEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 506,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 29688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 25600,
                                                                                       '.rdata\x00\x00': 86528,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 590848},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/3fdc969d7c30c622caedab1d646735d5274e8aa8ba7355c39d04a24f7a2e7bc8'},
 '3fe4e7a0a80e574fcde544d9c8074b0cdd90b08f6451f566e61ac70cfe201fc5': {'AddressOfEntryPoint': 208222,
                                                                      'DebugRVA': 210240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 208896,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'OemToCharBuffA'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'SetFileTime',
                                                                                            'MoveFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileAttributesW',
                                                                                            'MoveFileA',
                                                                                            'DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'CompareStringA',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'SetPriorityClass',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetSystemTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LocalFree',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCommandLineW',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetConsoleCP',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CharLowerW',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperA',
                                                                                            'CharLowerA',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'CharToOemBuffW',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'OemToCharBuffA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 145,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 44092,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 29184,
                                                                                       '.reloc\x00\x00': 29696,
                                                                                       '.rsrc\x00\x00\x00': 44544,
                                                                                       '.text\x00\x00\x00': 204288},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/3fe4e7a0a80e574fcde544d9c8074b0cdd90b08f6451f566e61ac70cfe201fc5'},
 '40036495b493e07d34b22e6833b063d5edb882f8f61c635b1c6064334d0d76f3': {'AddressOfEntryPoint': 84396,
                                                                      'DebugRVA': 103552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                      'KERNEL32.dll': 'GetCommandLineA',
                                                                                      'MSVCP90.dll': '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                      'MSVCR90.dll': 'memcpy',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'GetMessageA'},
                                                                      'ImportedFunctions': ['WriteFile',
                                                                                            'OpenProcess',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeA',
                                                                                            'ResetEvent',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcessId',
                                                                                            'PeekNamedPipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'CreateSemaphoreA',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'LocalAlloc',
                                                                                            'TlsGetValue',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'SHGetFileInfoW',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'strtok_s',
                                                                                            '_wsplitpath_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wcslwr_s',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            '_strdup',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcstok_s',
                                                                                            'memcpy',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 30208,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 94720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/40036495b493e07d34b22e6833b063d5edb882f8f61c635b1c6064334d0d76f3'},
 '400dd28d8c2fb176cf12e8093eb344a6997f15e7d333f2abbafe4b56cb47afbe': {'AddressOfEntryPoint': 114808,
                                                                      'DebugRVA': 6352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CertVerifyCertificateChainPolicy',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameW',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHCreateDirectoryExW',
                                                                                      'SHLWAPI.dll': 'SHSetValueW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINTRUST.dll': 'WTHelperProvDataFromStateData',
                                                                                      'msvcrt.dll': '__getmainargs',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegDeleteKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatusEx',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetTempFileNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindResourceExW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CreateDirectoryW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetVersionExW',
                                                                                            'MoveFileW',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemDirectoryW',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateThread',
                                                                                            'lstrcmpiW',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'OpenProcess',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetLastError',
                                                                                            'GetLocalTime',
                                                                                            'MoveFileExW',
                                                                                            'GetTempPathW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'SetFileAttributesW',
                                                                                            'EnumResourceNamesW',
                                                                                            'LocalAlloc',
                                                                                            'GetLocaleInfoW',
                                                                                            'SizeofResource',
                                                                                            'EnumUILanguagesW',
                                                                                            'LockResource',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'MulDiv',
                                                                                            'RaiseException',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemInfo',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'CreateMutexW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'FindResourceW',
                                                                                            'ResumeThread',
                                                                                            'CreateFileMappingW',
                                                                                            'IsWow64Process',
                                                                                            'MapViewOfFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetStartupInfoW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'LoadResource',
                                                                                            'EnterCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'LoadIconW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'KillTimer',
                                                                                            'PostMessageW',
                                                                                            'LoadImageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'SetTimer',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'CopyRect',
                                                                                            'SetWindowPos',
                                                                                            'GetDesktopWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'BringWindowToTop',
                                                                                            'OffsetRect',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowRect',
                                                                                            'CharToOemW',
                                                                                            'ExitWindowsEx',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageW',
                                                                                            'UpdateWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'UnregisterClassA',
                                                                                            'DispatchMessageW',
                                                                                            'CharNextW',
                                                                                            'FindWindowW',
                                                                                            'LoadStringW',
                                                                                            '_XcptFilter',
                                                                                            '_fileno',
                                                                                            '_read',
                                                                                            '__pioinfo',
                                                                                            '__badioinfo',
                                                                                            'wcstombs',
                                                                                            'iswctype',
                                                                                            'ferror',
                                                                                            'wctomb',
                                                                                            '_itoa',
                                                                                            '_snprintf',
                                                                                            '_iob',
                                                                                            'localeconv',
                                                                                            'isxdigit',
                                                                                            'calloc',
                                                                                            'malloc',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'free',
                                                                                            '_exit',
                                                                                            '_errno',
                                                                                            '_wcsicmp',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_vsnwprintf',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'iswdigit',
                                                                                            '_wtol',
                                                                                            'iswalpha',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'isleadbyte',
                                                                                            '__mb_cur_max',
                                                                                            'mbtowc',
                                                                                            'isdigit',
                                                                                            '_initterm',
                                                                                            'ungetc',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_isatty',
                                                                                            '_write',
                                                                                            '_lseeki64',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            'realloc',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            'InitCommonControlsEx',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysReAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'PathIsRelativeW',
                                                                                            'SHDeleteKeyW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFileExistsW',
                                                                                            'PathFindExtensionW',
                                                                                            'SHRegSetUSValueW',
                                                                                            'SHGetValueW',
                                                                                            'PathStripPathW',
                                                                                            'StrChrW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'SHRegGetValueW',
                                                                                            'PathIsFileSpecW',
                                                                                            'StrCmpNIW',
                                                                                            'SHSetValueW',
                                                                                            'IsThemeActive',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WinVerifyTrust',
                                                                                            'WTHelperProvDataFromStateData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 249,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 36724520,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 36724736,
                                                                                       '.text\x00\x00\x00': 141824},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/400dd28d8c2fb176cf12e8093eb344a6997f15e7d333f2abbafe4b56cb47afbe'},
 '40209dd150e8c1ddeb618dd1b4520bc2eb76b1c7c77d59860aad859d29dcdfe1': {'AddressOfEntryPoint': 250944,
                                                                      'DebugRVA': 262944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 262144,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionBind',
                                                                                      'ntoskrnl.exe': '_purecall'},
                                                                      'ImportedFunctions': ['ObfDereferenceObject',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoStartNextPacket',
                                                                                            'PoUnregisterSystemState',
                                                                                            'PoRegisterSystemState',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IofCompleteRequest',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IofCallDriver',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'PoSetPowerState',
                                                                                            'PoCallDriver',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IoFreeIrp',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'KeInitializeEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeReleaseMutex',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeClearEvent',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeSetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoInitializeIrp',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ExEventObjectType',
                                                                                            'IoDetachDevice',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'wcsstr',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'KeSynchronizeExecution',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'ExFreePoolWithTag',
                                                                                            '__C_specific_handler',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoAllocateMdl',
                                                                                            'MmUnmapLockedPages',
                                                                                            'PoRequestPowerIrp',
                                                                                            'swprintf',
                                                                                            'ZwCreateSection',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'KeDelayExecutionThread',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCreateDevice',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'sprintf',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            '_purecall',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 928,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 13824,
                                                                                       '.rdata\x00\x00': 33792,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 254976,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/40209dd150e8c1ddeb618dd1b4520bc2eb76b1c7c77d59860aad859d29dcdfe1'},
 '40377c131bbeeddc46eb0f025f77b4693be80aa271cb0978a392f5b31532ed6c': {'AddressOfEntryPoint': 1073765489,
                                                                      'DebugRVA': 29408,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LCMapStringA',
                                                                                      'USER32.dll': 'DispatchMessageW'},
                                                                      'ImportedFunctions': ['MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'OutputDebugStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'OpenFileMappingW',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'GetMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'UnregisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'CallNextHookEx',
                                                                                            'FindWindowW',
                                                                                            'TranslateMessage',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowsHookExW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1168,
                                                                      'SectionNames': {'-v\x00\x00oc\x00\x00': 1024,
                                                                                       '.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/40377c131bbeeddc46eb0f025f77b4693be80aa271cb0978a392f5b31532ed6c'},
 '409ac4598eb81fc8270e64d97c76e506d79ad88cecdd2ca0c528f17d51082741': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 44160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 44544,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/409ac4598eb81fc8270e64d97c76e506d79ad88cecdd2ca0c528f17d51082741'},
 '410eb3166bb6e806652cd945b62db9024090958f82e18b714646999b0559ed8b': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3492,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/410eb3166bb6e806652cd945b62db9024090958f82e18b714646999b0559ed8b'},
 '411ce28a7260f2a9ad989f46dba2bd5c5cdc666c306af899f652a1de2b7c54f4': {'AddressOfEntryPoint': 1074123857,
                                                                      'DebugRVA': 78624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'CreateFileA'},
                                                                      'ImportedFunctions': ['OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocalTime',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetLastError',
                                                                                            'WriteFile',
                                                                                            'FreeLibrary',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 300772,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/411ce28a7260f2a9ad989f46dba2bd5c5cdc666c306af899f652a1de2b7c54f4'},
 '41754660e199e9027afaf46edf0de3f8be91a19536a27ad4cd08c41f5f213793': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 173004,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 173056,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/41754660e199e9027afaf46edf0de3f8be91a19536a27ad4cd08c41f5f213793'},
 '41a01196b9d71cf32e34a643924261b9b0d5ed2fb4f4147cd83e31e4e23dae74': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 32880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 33280,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/41a01196b9d71cf32e34a643924261b9b0d5ed2fb4f4147cd83e31e4e23dae74'},
 '41dddfdd1b3c91ef07760f678a34fe43d6f0466ec68eb07997960eadf37b4241': {'AddressOfEntryPoint': 23584,
                                                                      'DebugRVA': 29456,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'FlsSetValue',
                                                                                      'PSAPI.DLL': 'EnumProcesses',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'SHLWAPI.dll': 'wnsprintfW',
                                                                                      'WININET.dll': 'InternetSetOptionW',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind'},
                                                                      'ImportedFunctions': ['PathAddBackslashW',
                                                                                            'StrCatW',
                                                                                            'wnsprintfW',
                                                                                            'InternetOpenW',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetSetOptionW',
                                                                                            'GetModuleFileNameExA',
                                                                                            'EnumProcesses',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapFree',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTickCount',
                                                                                            'CopyFileW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenW',
                                                                                            'GetTempPathW',
                                                                                            'lstrlenA',
                                                                                            'GetTempFileNameW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateRemoteThread',
                                                                                            'OpenProcess',
                                                                                            'VirtualFreeEx',
                                                                                            'TerminateProcess',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualAllocEx',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'WriteProcessMemory',
                                                                                            'ExitProcess',
                                                                                            'MoveFileExW',
                                                                                            'GetVersionExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringA',
                                                                                            'CreateFileW',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyW',
                                                                                            'GetTokenInformation',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'OpenProcessToken',
                                                                                            'RegSetValueExW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlVirtualUnwind'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 80,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 16,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1210368,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 20992},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/41dddfdd1b3c91ef07760f678a34fe43d6f0466ec68eb07997960eadf37b4241'},
 '420aac924ab38220b5cab5fe6eb895a82efae97eab224b79881677c1bdf9dae0': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1268848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1269248,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/420aac924ab38220b5cab5fe6eb895a82efae97eab224b79881677c1bdf9dae0'},
 '426020715f5ad14545ba39bc32577394acee42706c24a9c8e79347af2fd407d2': {'AddressOfEntryPoint': 1073795225,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 21088,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetFullPathNameW',
                                                                                      'USER32.dll': 'GetWindowThreadProcessId',
                                                                                      'msvcrt.dll': '??2@YAPEAX_K@Z',
                                                                                      'ntdll.dll': 'RtlLookupFunctionEntry'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'Sleep',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'HeapAlloc',
                                                                                            'FormatMessageW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'CreateMutexW',
                                                                                            'GetFullPathNameW',
                                                                                            'LoadStringW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnumWindows',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 59,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 50688,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/426020715f5ad14545ba39bc32577394acee42706c24a9c8e79347af2fd407d2'},
 '432a06c4bbe435c375f23e00b7f5d682fb93d31fcd082717e116dad2628eb4f2': {'AddressOfEntryPoint': 38460,
                                                                      'DebugRVA': 163296,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 163840,
                                                                      'ImageBase': 1255145472,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ln.fol': 'mtep'},
                                                                      'ImportedFunctions': ['f',
                                                                                            'LsflTkreadTlifn',
                                                                                            'agCotntdr',
                                                                                            'rcmd',
                                                                                            'g',
                                                                                            'NuSeuJoelrlauimmPslcdps',
                                                                                            'mtep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 7,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 33872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 119808,
                                                                                       '.pdata\x00\x00': 10240,
                                                                                       '.rdata\x00\x00': 18944,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 34304,
                                                                                       '.text\x00\x00\x00': 159744},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/432a06c4bbe435c375f23e00b7f5d682fb93d31fcd082717e116dad2628eb4f2'},
 '432c26e8f90d9e2135f47766a548bbcd4963a1aad8b52ade8894cc916de3af58': {'AddressOfEntryPoint': 3622800,
                                                                      'DebugRVA': 3766560,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 3760128,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2798528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 109568,
                                                                                       '.pdata\x00\x00': 154112,
                                                                                       '.rdata\x00\x00': 684544,
                                                                                       '.rsrc\x00\x00\x00': 2798592,
                                                                                       '.text\x00\x00\x00': 1536,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/432c26e8f90d9e2135f47766a548bbcd4963a1aad8b52ade8894cc916de3af58'},
 '436a5ff5a22780be7433312a6fd87b5ee1313b98edd7cebaf11a318afb19622d': {'AddressOfEntryPoint': 5008,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 518288,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 518656,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/436a5ff5a22780be7433312a6fd87b5ee1313b98edd7cebaf11a318afb19622d'},
 '437185de0cd49a605245b494aa8a6305375b5f067a2d50fe2a80198271b67e7a': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 14184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/437185de0cd49a605245b494aa8a6305375b5f067a2d50fe2a80198271b67e7a'},
 '4381e84007f5ae7d8b8faa3df667cc2d726fec8446b03f04beaff55a78cecbb3': {'AddressOfEntryPoint': 112864,
                                                                      'DebugRVA': 185360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'SETUPAPI.dll': 'SetupDiGetClassDevsA'},
                                                                      'ImportedFunctions': ['MoveFileExA',
                                                                                            'FreeLibrary',
                                                                                            'Sleep',
                                                                                            'GetFileAttributesA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetTempFileNameA',
                                                                                            'LoadLibraryA',
                                                                                            'lstrlenA',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteCriticalSection',
                                                                                            'CopyFileA',
                                                                                            'CloseHandle',
                                                                                            'SetFileAttributesA',
                                                                                            'CreateFileA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapReAlloc',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetStdHandle',
                                                                                            'GetStartupInfoA',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'ExitProcess',
                                                                                            'GetFileType',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'FlsAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'GetProcessHeap',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetupDiSetDriverInstallParamsA',
                                                                                            'SetupFindNextLine',
                                                                                            'SetupGetLineCountA',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupGetStringFieldA',
                                                                                            'SetupGetTargetPathA',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiRemoveDevice',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupFindFirstLineA',
                                                                                            'SetupDiGetINFClassA',
                                                                                            'SetupDiSetDeviceInstallParamsA',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiGetSelectedDriverA',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiGetDriverInstallParamsA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiGetClassDevsA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 111,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.getpat\x00': 274432,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 35840,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 177152},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4381e84007f5ae7d8b8faa3df667cc2d726fec8446b03f04beaff55a78cecbb3'},
 '43bd6c7e304a5ad09b52f279ea84eeb7df2e55f3d92428767f110b7ae27a3bed': {'AddressOfEntryPoint': 160967,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'HeapCreate',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'strncpy',
                                                                                            'memmove',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'memset',
                                                                                            'RtlCaptureContext',
                                                                                            'GetACP',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetOEMCP',
                                                                                            'GetVersionExA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'HeapReAlloc',
                                                                                            'ReadFile',
                                                                                            'SetStdHandle',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'LoadLibraryA',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'CloseHandle',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LoadIconA',
                                                                                            'wsprintfA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 27648,
                                                                                       '.rsrc\x00\x00\x00': 22528,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/43bd6c7e304a5ad09b52f279ea84eeb7df2e55f3d92428767f110b7ae27a3bed'},
 '43e96f8797d4711ca8270d0e41d1920aa4bd5f465b29825e39de60f43ad6b39e': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/43e96f8797d4711ca8270d0e41d1920aa4bd5f465b29825e39de60f43ad6b39e'},
 '43eeea045ab4362873f0b110ba737c29e71bea6c209c1ad047cb15ae16f00ce8': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/43eeea045ab4362873f0b110ba737c29e71bea6c209c1ad047cb15ae16f00ce8'},
 '440f62b8089c9a3c187ab98b3ea0e5088215e151fe1af2969154439e8eb49454': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 326056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 326144,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/440f62b8089c9a3c187ab98b3ea0e5088215e151fe1af2969154439e8eb49454'},
 '4413aeef55e37168a42461af2b1b0f692b7517606aac072988757cacca2327a7': {'AddressOfEntryPoint': 109776,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 241248,
                                                                      'ExportSize': 17917,
                                                                      'IATRVA': 192512,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetConsoleMode',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'FreeLibrary',
                                                                                            'SetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileA',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcatA',
                                                                                            'lstrcpyA',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetVersionExA',
                                                                                            'DeviceIoControl',
                                                                                            'SetLastError',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'LoadResource',
                                                                                            'FindResourceExA',
                                                                                            'LockResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetLocalTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'WinExec',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetACP',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrlenA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcess',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'OpenFile',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'HeapSetInformation',
                                                                                            'GetThreadLocale',
                                                                                            'HeapCreate',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'EnterCriticalSection',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'FlushFileBuffers',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'RtlVirtualUnwind',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'GetConsoleMode',
                                                                                            'LoadStringA',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'PostMessageA',
                                                                                            'GetMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'SetDlgItemTextA',
                                                                                            'DestroyWindow',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'PostQuitMessage',
                                                                                            'MessageBoxA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'wsprintfA',
                                                                                            'OpenProcessToken',
                                                                                            'OpenSCManagerA',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'RegSetKeySecurity',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'CloseServiceHandle',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegCloseKey',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'SysAllocString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'VarBstrCat',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 162,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 64156,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 13312,
                                                                                       '.rdata\x00\x00': 67072,
                                                                                       '.rsrc\x00\x00\x00': 64512,
                                                                                       '.text\x00\x00\x00': 185856},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4413aeef55e37168a42461af2b1b0f692b7517606aac072988757cacca2327a7'},
 '44d6683f47a13d203309ade994b70663c76dabb2226af5f1f1df8cbca6e8e09c': {'AddressOfEntryPoint': 4096,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 256,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'GetLastError',
                                                                                      'USER32.DLL': 'wsprintfA'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'lstrcatA',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'MessageBoxA',
                                                                                            'wsprintfA'],
                                                                      'LinkerVersion': 1,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 8,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.code\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 6144,
                                                                                       '.idata\x00\x00': 512},
                                                                      'StackReserveSize': 4096,
                                                                      'filename': './data/malware/44d6683f47a13d203309ade994b70663c76dabb2226af5f1f1df8cbca6e8e09c'},
 '44f9192b213f5588c725d2c3e30ba5ef6bd43b66c617f4ede48e2f0ac0327460': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 554004,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 554496,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/44f9192b213f5588c725d2c3e30ba5ef6bd43b66c617f4ede48e2f0ac0327460'},
 '454991dd0268cfb691d38e28199dd7bbf47cba78d8d39b40cfc481b81db0ff07': {'AddressOfEntryPoint': 5008,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 291388,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 291840,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/454991dd0268cfb691d38e28199dd7bbf47cba78d8d39b40cfc481b81db0ff07'},
 '45e1fd52db8c8aacf9b19f971368ffba8ef3f29f83e5d0c2f3912a52d202b4e8': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3492,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/45e1fd52db8c8aacf9b19f971368ffba8ef3f29f83e5d0c2f3912a52d202b4e8'},
 '4621b7ffe87b96683b8c55de1464089f6b8fd8564f9b3164fa4113039428cb7d': {'AddressOfEntryPoint': 41648,
                                                                      'DebugRVA': 103184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'DIFXAPI.dll': 'DriverPackageInstallW',
                                                                                      'KERNEL32.dll': 'GetLocaleInfoW'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'DriverPackageGetPathW',
                                                                                            'DriverPackagePreinstallW',
                                                                                            'DriverPackageUninstallW',
                                                                                            'DriverPackageInstallW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCPInfo',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 32256,
                                                                                       '.text\x00\x00\x00': 98304},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4621b7ffe87b96683b8c55de1464089f6b8fd8564f9b3164fa4113039428cb7d'},
 '46bc4c8119718c81909742d4faf14a9e38cda9925a2943ba36ce94362fa20a2a': {'AddressOfEntryPoint': 137036,
                                                                      'DebugRVA': 182240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 211504,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'RtlLookupFunctionEntry',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'LoadIconW',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'Sleep',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetTickCount',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'CreateThread',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetProcessAffinityMask',
                                                                                            'ReleaseSemaphore',
                                                                                            'ResetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'SetThreadPriority',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'CreateSemaphoreW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileType',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLongPathNameW',
                                                                                            'MoveFileW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'CreateFileW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'CreateHardLinkW',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GlobalAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxW',
                                                                                            'FindWindowExW',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharUpperW',
                                                                                            'OemToCharBuffA',
                                                                                            'LoadBitmapW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'PostMessageW',
                                                                                            'GetSysColor',
                                                                                            'SetForegroundWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'IsWindowVisible',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyIcon',
                                                                                            'SetFocus',
                                                                                            'GetClassNameW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'EndDialog',
                                                                                            'SetDlgItemTextW',
                                                                                            'wvsprintfW',
                                                                                            'SendMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadStringW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'LoadIconW',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SHBrowseForFolderW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetFileInfoW',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 213,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 26112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 31744,
                                                                                       '.rsrc\x00\x00\x00': 26112,
                                                                                       '.text\x00\x00\x00': 174080},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/46bc4c8119718c81909742d4faf14a9e38cda9925a2943ba36ce94362fa20a2a'},
 '46f0980e21c9995bd5357a4ca872c3d3ee965d3942d99c982270b85f382b3905': {'AddressOfEntryPoint': 257980,
                                                                      'DebugRVA': 6768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterTraceGuidsW',
                                                                                      'COMCTL32.dll': 'DestroyPropertySheetPage',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'CreateProcessW',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'StrStrW',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'msvcrt.dll': '_errno',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'urlmon.dll': 'IsValidURL'},
                                                                      'ImportedFunctions': ['CreateDirectoryW',
                                                                                            'SwitchToThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'SetFilePointerEx',
                                                                                            'SetEvent',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetFileAttributesW',
                                                                                            'ReadFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlPcToFileHeader',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'CreateThread',
                                                                                            'SuspendThread',
                                                                                            'ResumeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLocalTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetTimeFormatW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'MulDiv',
                                                                                            'lstrcmpW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'GetFileSizeEx',
                                                                                            'IsWow64Process',
                                                                                            'CreateEventW',
                                                                                            'RemoveDirectoryW',
                                                                                            'VirtualProtect',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LockResource',
                                                                                            'GetVersionExW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetSystemTime',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'QueueUserWorkItem',
                                                                                            'EnumResourceNamesW',
                                                                                            'GetLogicalDrives',
                                                                                            'GetDriveTypeW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'MoveFileW',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringW',
                                                                                            'InitializeCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'SetEndOfFile',
                                                                                            'GlobalFree',
                                                                                            'GetFullPathNameW',
                                                                                            'LoadLibraryA',
                                                                                            'RaiseException',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateProcessW',
                                                                                            'realloc',
                                                                                            '__pioinfo',
                                                                                            '__badioinfo',
                                                                                            '_read',
                                                                                            'wcstombs',
                                                                                            'iswctype',
                                                                                            'wctomb',
                                                                                            '__mb_cur_max',
                                                                                            'mbtowc',
                                                                                            'localeconv',
                                                                                            'calloc',
                                                                                            '_fileno',
                                                                                            'isleadbyte',
                                                                                            'isxdigit',
                                                                                            'isdigit',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '??1bad_cast@@UEAA@XZ',
                                                                                            '??1__non_rtti_object@@UEAA@XZ',
                                                                                            '??0bad_typeid@@QEAA@AEBV0@@Z',
                                                                                            '??0bad_cast@@QEAA@AEBV0@@Z',
                                                                                            '??0__non_rtti_object@@QEAA@AEBV0@@Z',
                                                                                            '??0__non_rtti_object@@QEAA@PEBD@Z',
                                                                                            '??0bad_cast@@QEAA@PEBD@Z',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'memcmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            '_vsnprintf',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'wcschr',
                                                                                            'iswspace',
                                                                                            '_vscwprintf',
                                                                                            '_vscprintf',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '_wfopen',
                                                                                            'wcsrchr',
                                                                                            'feof',
                                                                                            'fgetws',
                                                                                            'fclose',
                                                                                            'time',
                                                                                            'qsort',
                                                                                            'bsearch',
                                                                                            '_waccess',
                                                                                            '_wctime',
                                                                                            'ungetc',
                                                                                            'wcsncmp',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsupr',
                                                                                            'memcpy',
                                                                                            '_purecall',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '__CxxFrameHandler',
                                                                                            '_errno',
                                                                                            'InitCommonControlsEx',
                                                                                            'PropertySheetW',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'StrStrIW',
                                                                                            'StrStrW',
                                                                                            'ShellExecuteW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptDestroyHash',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'CopySid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'GetLengthSid',
                                                                                            'CheckTokenMembership',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'TraceEvent',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'GetTextExtentExPointW',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetTextColor',
                                                                                            'GetTextMetricsW',
                                                                                            'ExtTextOutW',
                                                                                            'GetBkColor',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'GetFocus',
                                                                                            'ReleaseDC',
                                                                                            'SetRect',
                                                                                            'GetClientRect',
                                                                                            'LoadStringW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CharNextW',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadCursorW',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'MapWindowPoints',
                                                                                            'PtInRect',
                                                                                            'EnableWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetSysColor',
                                                                                            'SetFocus',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetParent',
                                                                                            'OffsetRect',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'DrawTextExW',
                                                                                            'SetRectEmpty',
                                                                                            'GetDC',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'PostMessageW',
                                                                                            'LoadImageW',
                                                                                            'DestroyIcon',
                                                                                            'DialogBoxParamW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'LoadIconW',
                                                                                            'SendMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'ExitWindowsEx',
                                                                                            'MessageBoxW',
                                                                                            'IsWindowEnabled',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'SetCursor',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'GetWindowLongW',
                                                                                            'FrameRect',
                                                                                            'DrawFocusRect',
                                                                                            'MoveWindow',
                                                                                            'GetKeyState',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'UuidFromStringW',
                                                                                            'UuidToStringW',
                                                                                            'UuidCreate',
                                                                                            'RpcStringFreeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'IsValidURL'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 311,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 74962884,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 74962944,
                                                                                       '.text\x00\x00\x00': 330752},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/46f0980e21c9995bd5357a4ca872c3d3ee965d3942d99c982270b85f382b3905'},
 '473bc48119ba2883b34c83d240085957470e473ec6047cea082be3186dd954f6': {'AddressOfEntryPoint': 1074396116,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 155648,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'SHLWAPI.dll': 'PathIsRelativeA',
                                                                                      'USER32.dll': 'IsDlgButtonChecked',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiGetINFClassA',
                                                                                            'SetupDiEnumDriverInfoA',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsA',
                                                                                            'SetupDiRegisterDeviceInfo',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiCreateDeviceInfoA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiGetDriverInfoDetailA',
                                                                                            'SetupDiRemoveDevice',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'PathAppendA',
                                                                                            'PathUnquoteSpacesA',
                                                                                            'PathIsDirectoryA',
                                                                                            'PathIsRelativeA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetLastError',
                                                                                            'FindFirstFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GetComputerNameA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetCurrentProcess',
                                                                                            'ReleaseMutex',
                                                                                            'CreateDirectoryA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateMutexA',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetTimeFormatA',
                                                                                            'GetLocalTime',
                                                                                            'OutputDebugStringA',
                                                                                            'lstrcpynA',
                                                                                            'MoveFileExA',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'Module32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'FormatMessageA',
                                                                                            'Process32First',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'WinExec',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CopyFileA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'RemoveDirectoryA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'LCMapStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringA',
                                                                                            'RtlCaptureContext',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'SetStdHandle',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'LocalFree',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'ReadFile',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'Process32Next',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'HeapFree',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'SetEndOfFile',
                                                                                            'HeapReAlloc',
                                                                                            'UpdateWindow',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'EndDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'GetUserObjectInformationA',
                                                                                            'GetWindowRect',
                                                                                            'LoadImageA',
                                                                                            'GetClientRect',
                                                                                            'SetWindowPos',
                                                                                            'OffsetRect',
                                                                                            'CopyRect',
                                                                                            'GetParent',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'LoadBitmapA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'EnumWindows',
                                                                                            'DialogBoxParamA',
                                                                                            'GetWindowInfo',
                                                                                            'ExitWindowsEx',
                                                                                            'SendMessageA',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'IsDlgButtonChecked',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceA',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'CloseServiceHandle',
                                                                                            'ImpersonateSelf',
                                                                                            'OpenThreadToken',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'AccessCheck',
                                                                                            'RevertToSelf',
                                                                                            'FreeSid',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegSetValueExA',
                                                                                            'GetUserNameA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'SHGetFolderPathA',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 222,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 412764,
                                                                      'SectionNames': {'#\r\n\x00c\x00\x00\x00': 413184,
                                                                                       '.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 62464,
                                                                                       '.text\x00\x00\x00': 150016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/473bc48119ba2883b34c83d240085957470e473ec6047cea082be3186dd954f6'},
 '4744f60445f39850f834c20b68585d747d509e812d307974d9a75f8a1b644ef5': {'AddressOfEntryPoint': 15308,
                                                                      'DebugRVA': 5232,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'MSOERT2.dll': 'CopyRegistry',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'SHLWAPI.dll': 'SHSetValueW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '__wgetmainargs',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoFreeUnusedLibrariesEx'},
                                                                      'ImportedFunctions': ['TraceEvent',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsA',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetProcAddress',
                                                                                            'lstrlenW',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'CloseHandle',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapSetInformation',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetVersionExA',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetForegroundWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'GetParent',
                                                                                            'GetLastActivePopup',
                                                                                            'GetPropW',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'FindWindowW',
                                                                                            'SendMessageW',
                                                                                            'GetGUIThreadInfo',
                                                                                            'IsDialogMessageW',
                                                                                            'SetPropW',
                                                                                            'IsChild',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'memset',
                                                                                            '_vsnwprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            'CopyRegistry',
                                                                                            'OleInitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoFreeAllLibraries',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibrariesEx',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'StrCmpW',
                                                                                            'PathAddExtensionW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'PathCombineW',
                                                                                            'SHRegGetBoolUSValueA',
                                                                                            'SHDeleteKeyW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathAppendW',
                                                                                            'StrStrIW',
                                                                                            'SHRegGetValueA',
                                                                                            'PathFindFileNameW',
                                                                                            'StrCmpNIW',
                                                                                            'SHGetValueW',
                                                                                            'StrCmpIW',
                                                                                            'SHRegGetValueW',
                                                                                            'SHSetValueW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 119,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 367568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 367616,
                                                                                       '.text\x00\x00\x00': 27648,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/4744f60445f39850f834c20b68585d747d509e812d307974d9a75f8a1b644ef5'},
 '47851153e1efd092eafbfaae15b18f20bb8cd699cf1062ed7c11e43c4181a78c': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 847980,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 848384,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/47851153e1efd092eafbfaae15b18f20bb8cd699cf1062ed7c11e43c4181a78c'},
 '47a7a5de661e37d6754f0ca1d24e6feb49f5e8b4080b0a40b794d8904a011ad6': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 379064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 379392,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/47a7a5de661e37d6754f0ca1d24e6feb49f5e8b4080b0a40b794d8904a011ad6'},
 '47bca70cbc72253dd7d97d83edb7d1456f0e2c2ba4b667f98fe1456c5edf5c07': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 227236,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 227328,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/47bca70cbc72253dd7d97d83edb7d1456f0e2c2ba4b667f98fe1456c5edf5c07'},
 '47e60a03fff1c174edbebb6a60e48ee5a8b048f2c6c34e8ecac0ceed8ebdf8a4': {'AddressOfEntryPoint': 41060,
                                                                      'DebugRVA': 28864,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'PCIIDEX.SYS': 'AtaPortWriteRegisterUlong'},
                                                                      'ImportedFunctions': ['AtaPortGetPhysicalAddress',
                                                                                            'AtaPortReadRegisterUlong',
                                                                                            'AtaPortInitializeEx',
                                                                                            'AtaPortDeviceStateChange',
                                                                                            'AtaPortRegistryFreeBuffer',
                                                                                            'AtaPortGetBusData',
                                                                                            'AtaPortRegistryRead',
                                                                                            'AtaPortDebugPrint',
                                                                                            'AtaPortRegistryAllocateBuffer',
                                                                                            'AtaPortRequestCallback',
                                                                                            'AtaPortGetUnCachedExtension',
                                                                                            'AtaPortReadRegisterUchar',
                                                                                            'AtaPortNotification',
                                                                                            'AtaPortBuildRequestSenseIrb',
                                                                                            'AtaPortReleaseRequestSenseIrb',
                                                                                            'AtaPortCompleteRequest',
                                                                                            'AtaPortMoveMemory',
                                                                                            'AtaPortGetDeviceBase',
                                                                                            'AtaPortGetScatterGatherList',
                                                                                            'AtaPortStallExecution',
                                                                                            'AtaPortWriteRegisterUlong',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 22,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 24064,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/47e60a03fff1c174edbebb6a60e48ee5a8b048f2c6c34e8ecac0ceed8ebdf8a4'},
 '47eaebc920ccf99e09fc9924feb6b19b8a28589f52783327067c9b09754b5e84': {'AddressOfEntryPoint': 20488,
                                                                      'DebugRVA': 8304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'HalGetBusDataByOffset',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['MmUnmapIoSpace',
                                                                                            'MmMapIoSpace',
                                                                                            'IofCompleteRequest',
                                                                                            'IoDeleteDevice',
                                                                                            'IoCreateDevice',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            '__C_specific_handler',
                                                                                            'HalSetBusDataByOffset',
                                                                                            'HalGetBusDataByOffset'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 12,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 2048,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/47eaebc920ccf99e09fc9924feb6b19b8a28589f52783327067c9b09754b5e84'},
 '47fd3cbebe85ff92a7c7939c289361822c45c1c1c0887cbcbf7478b45244b1bc': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 744108,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 744448,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/47fd3cbebe85ff92a7c7939c289361822c45c1c1c0887cbcbf7478b45244b1bc'},
 '480dd6a26428416c54673d10d25e3bbbfce07430713f4fa73168063b55babb93': {'AddressOfEntryPoint': 44972,
                                                                      'DebugRVA': 400492,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 401408,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'gdiplus.dll': 'GdipGetImageGraphicsContext',
                                                                                      'msvcrt.dll': '_wcsrev',
                                                                                      'ntdll.dll': 'NtQueryLicenseValue',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SHGetSpecialFolderPathW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellAboutW',
                                                                                            'ShellExecuteExW',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipCloneBitmapAreaI',
                                                                                            'GdipSetPageUnit',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDrawArcI',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'QueryServiceConfigW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'EventWrite',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'IsThemeActive',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Add',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'PropertySheetW',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'NtQueryLicenseValue',
                                                                                            'lstrlenA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemTime',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'CloseHandle',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'MulDiv',
                                                                                            'GlobalFindAtomW',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetLocaleInfoW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetLocaleInfoEx',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'GetVersionExW',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'IsWow64Process',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'GetProfileStringW',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'RegisterApplicationRecoveryCallback',
                                                                                            'ApplicationRecoveryInProgress',
                                                                                            'Sleep',
                                                                                            'ApplicationRecoveryFinished',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetTempFileNameW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnableWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'PostMessageW',
                                                                                            'IsWindowEnabled',
                                                                                            'CharNextA',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetMenuState',
                                                                                            'GetFocus',
                                                                                            'OpenClipboard',
                                                                                            'GetClipboardData',
                                                                                            'InvalidateRect',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'InsertMenuItemW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageExtraInfo',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetKeyState',
                                                                                            'IsDialogMessageW',
                                                                                            'GetClassNameW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowLongW',
                                                                                            'DrawTextW',
                                                                                            'EnumChildWindows',
                                                                                            'SetPropW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetWindowPlacement',
                                                                                            'UpdateWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'MoveWindow',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'SetClassLongW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'OffsetRect',
                                                                                            'EqualRect',
                                                                                            'MonitorFromRect',
                                                                                            'GetClassWord',
                                                                                            'EnumDesktopWindows',
                                                                                            'EnumDisplayMonitors',
                                                                                            'IntersectRect',
                                                                                            'CopyRect',
                                                                                            'CreateDialogParamW',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'CreatePopupMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'GetAncestor',
                                                                                            'FindWindowW',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckMenuItem',
                                                                                            'GetSysColor',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetClassLongPtrW',
                                                                                            'EndDialog',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'SendMessageW',
                                                                                            'MessageBeep',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'DrawMenuBar',
                                                                                            'SetMenuItemInfoW',
                                                                                            'AppendMenuW',
                                                                                            'LoadStringW',
                                                                                            'GetSubMenu',
                                                                                            'RemoveMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'SetFocus',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'GetParent',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'LoadImageW',
                                                                                            'UnregisterClassA',
                                                                                            'FillRect',
                                                                                            'SetWindowTextW',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CheckRadioButton',
                                                                                            'DestroyWindow',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'timeGetTime',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'CreatePatternBrush',
                                                                                            'DeleteObject',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPointW',
                                                                                            'DeleteDC',
                                                                                            'GetRgnBox',
                                                                                            'CreateSolidBrush',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'ExtCreatePen',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateRectRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'EqualRgn',
                                                                                            'CreateDIBSection',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            '_wcsdup',
                                                                                            '_i64tow_s',
                                                                                            '_wtoi64',
                                                                                            'sprintf_s',
                                                                                            '_strtoi64',
                                                                                            '_strtoui64',
                                                                                            'memchr',
                                                                                            'strcspn',
                                                                                            'wcsrchr',
                                                                                            'wcstoul',
                                                                                            'isalpha',
                                                                                            'time',
                                                                                            'difftime',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '__CxxFrameHandler3',
                                                                                            'setlocale',
                                                                                            '__pctype_func',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            'localeconv',
                                                                                            '_errno',
                                                                                            '___mb_cur_max_func',
                                                                                            '__mb_cur_max',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__crtLCMapStringW',
                                                                                            '__uncaught_exception',
                                                                                            'tolower',
                                                                                            'isspace',
                                                                                            'abort',
                                                                                            'isalnum',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'iswalpha',
                                                                                            'iswdigit',
                                                                                            '_wcslwr_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcsncmp',
                                                                                            '_itow_s',
                                                                                            'calloc',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_itoa',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'wcstol',
                                                                                            'mbstowcs_s',
                                                                                            'exit',
                                                                                            'isdigit',
                                                                                            'isxdigit',
                                                                                            'toupper',
                                                                                            '_purecall',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            '_wcsrev'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 370,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 403352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 19968,
                                                                                       '.pdata\x00\x00': 26112,
                                                                                       '.rdata\x00\x00': 69632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 403456,
                                                                                       '.text\x00\x00\x00': 396800},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/480dd6a26428416c54673d10d25e3bbbfce07430713f4fa73168063b55babb93'},
 '48889e272a054bcb255dd74fcec273a61da8d6789c842cf20c06fbec37ace1ee': {'AddressOfEntryPoint': 122064,
                                                                      'DebugRVA': 215376,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 327680,
                                                                      'ExportSize': 4377,
                                                                      'IATRVA': 217088,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'NETIO.SYS': 'GetBestRoute2',
                                                                                      'TDI.SYS': 'TdiDeregisterPnPHandlers',
                                                                                      'ksecdd.sys': 'DeleteSecurityContext',
                                                                                      'msrpc.sys': 'RpcBindingFree',
                                                                                      'ntoskrnl.exe': '__C_specific_handler',
                                                                                      'rdbss.sys': 'RxStartMinirdr'},
                                                                      'ImportedFunctions': ['ExInterlockedInsertTailList',
                                                                                            'KeInitializeSpinLock',
                                                                                            'KeGetCurrentNodeNumber',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'IoAllocateMdl',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'KeQueryHighestNodeNumber',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'RtlTimeFieldsToTime',
                                                                                            'toupper',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            'KeInitializeEvent',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeFlushQueuedDpcs',
                                                                                            'RtlUnicodeStringToOemString',
                                                                                            'RtlUpcaseUnicodeStringToOemString',
                                                                                            'ExAcquireSpinLockShared',
                                                                                            'ExReleaseSpinLockShared',
                                                                                            'FsRtlCancellableWaitForMultipleObjects',
                                                                                            'FsRtlCancellableWaitForSingleObject',
                                                                                            'KeBugCheckEx',
                                                                                            'KeTryToAcquireSpinLockAtDpcLevel',
                                                                                            'KeAcquireInStackQueuedSpinLock',
                                                                                            'KeReleaseInStackQueuedSpinLock',
                                                                                            'ExAcquireRundownProtection',
                                                                                            'ExReleaseRundownProtection',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInitializeResourceLite',
                                                                                            'ExDeleteResourceLite',
                                                                                            'IoWMIOpenBlock',
                                                                                            'IoWMISetNotificationCallback',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'ZwOpenFile',
                                                                                            'KeReleaseSpinLock',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'IoCreateFile',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'IoRaiseInformationalHardError',
                                                                                            'MmUnmapLockedPages',
                                                                                            'IoBuildPartialMdl',
                                                                                            'NlsMbOemCodePageTag',
                                                                                            'RtlxUnicodeStringToOemSize',
                                                                                            'ExWaitForRundownProtectionRelease',
                                                                                            'IoFreeIrp',
                                                                                            'IoGetCurrentProcess',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeResetEvent',
                                                                                            'KeQueryActiveProcessorCountEx',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'SeMarkLogonSessionForTerminationNotification',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmUnlockPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'ExInitializeRundownProtection',
                                                                                            'KfRaiseIrql',
                                                                                            'KeAcquireInStackQueuedSpinLockAtDpcLevel',
                                                                                            'KeReleaseInStackQueuedSpinLockFromDpcLevel',
                                                                                            'KeLowerIrql',
                                                                                            'KeExpandKernelStackAndCallout',
                                                                                            'ProbeForWrite',
                                                                                            'KeStackAttachProcess',
                                                                                            'IoGetRequestorProcess',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlCompareMemory',
                                                                                            'EtwWrite',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'IofCompleteRequest',
                                                                                            'KeSetEvent',
                                                                                            '_wcsnicmp',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'SeRegisterLogonSessionTerminatedRoutine',
                                                                                            'SeUnregisterLogonSessionTerminatedRoutine',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlHashUnicodeString',
                                                                                            'ExfReleasePushLockShared',
                                                                                            'ExfAcquirePushLockShared',
                                                                                            'KeReleaseGuardedMutex',
                                                                                            'IoIs32bitProcess',
                                                                                            'KeAcquireGuardedMutex',
                                                                                            'ExReleaseResourceLite',
                                                                                            'ExAcquireResourceSharedLite',
                                                                                            'ExfTryToWakePushLock',
                                                                                            'ExfAcquirePushLockExclusive',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'RtlGUIDFromString',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'EtwUnregister',
                                                                                            'ZwClose',
                                                                                            'ExUuidCreate',
                                                                                            'IofCallDriver',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ZwCreateFile',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'KeReadStateEvent',
                                                                                            'RtlIpv6AddressToStringA',
                                                                                            'IoAllocateIrp',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'EtwProviderEnabled',
                                                                                            'IoGetActivityIdThread',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'KeInitializeGuardedMutex',
                                                                                            'EtwRegister',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExReleaseSpinLockExclusive',
                                                                                            'ExAcquireSpinLockExclusive',
                                                                                            'SeReleaseSubjectContext',
                                                                                            'SeExports',
                                                                                            'SeSinglePrivilegeCheck',
                                                                                            'SeAccessCheck',
                                                                                            'SeCaptureSubjectContext',
                                                                                            'PcwUnregister',
                                                                                            'PcwRegister',
                                                                                            'PcwAddInstance',
                                                                                            'ZwDeviceIoControlFile',
                                                                                            'IoCancelIrp',
                                                                                            '__C_specific_handler',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'RxDereferenceAndDeleteRxContext_Real',
                                                                                            'RxCreateRxContext',
                                                                                            'RxLowIoGetBufferAddress',
                                                                                            'RxMapUserBuffer',
                                                                                            'RxNameCacheExpireEntriesWithPrefix',
                                                                                            'RxUpdateNetRootCachingMode',
                                                                                            'RxNameCacheScavengeEntries',
                                                                                            'RxTearDownDiagnosticLogger',
                                                                                            'RxDereferenceCredential',
                                                                                            'RxInitializeDiagnosticLogger',
                                                                                            'RxCeFreeIrp',
                                                                                            'RxRegisterAsynchronousRequest',
                                                                                            'RxDeregisterAsynchronousRequest',
                                                                                            'RxCeAllocateIrpWithMDL',
                                                                                            'RxGetRDBSSProcess',
                                                                                            'RxLogEventWithAnnotation',
                                                                                            'RxReferenceCredential',
                                                                                            'RxFindEa',
                                                                                            'RxPerProcessCountersEnabled',
                                                                                            'RxCancelContext',
                                                                                            'RxClearMinirdrCancelRoutine',
                                                                                            'RxSetMinirdrCancelRoutine',
                                                                                            'RxDiagnosticTrace',
                                                                                            'RxpTrackDereference',
                                                                                            'RxFinalizeConnection',
                                                                                            'RxReference',
                                                                                            'RxpTrackReference',
                                                                                            'RxPrefixTableEnumerate',
                                                                                            'RxPrefixTableInitEnumContext',
                                                                                            'RxIsPrefixTableEmpty',
                                                                                            'RxPostToWorkerThread',
                                                                                            'RxPostPreAllocatedOneShotTimerRequest',
                                                                                            'RxCancelPreAllocatedTimerRequest',
                                                                                            'RxLogEventDirect',
                                                                                            'RxFsdDispatch',
                                                                                            'RxUnregisterMinirdr',
                                                                                            'RxRegisterMinirdr',
                                                                                            'RxDispatchToWorkerThread',
                                                                                            'RxDereference',
                                                                                            'RxPrefixTableLookupName',
                                                                                            'RxSetDomainForMailslotBroadcast',
                                                                                            'RxDeleteLinkedVNetRoot',
                                                                                            'RxCreateLinkedVNetRoot',
                                                                                            'RxSignalNetStatus',
                                                                                            'RxStopMinirdr',
                                                                                            'RxStartMinirdr',
                                                                                            'BCryptEncrypt',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptKeyDerivation',
                                                                                            'BCryptGenerateSymmetricKey',
                                                                                            'InitSecurityInterfaceW',
                                                                                            'BCryptDecrypt',
                                                                                            'BCryptSetProperty',
                                                                                            'BCryptDestroyKey',
                                                                                            'BCryptGetProperty',
                                                                                            'GetSecurityUserInfo',
                                                                                            'SspiEncodeStringsAsAuthIdentity',
                                                                                            'MapSecurityError',
                                                                                            'SspiCompareAuthIdentities',
                                                                                            'BCryptDestroyHash',
                                                                                            'FreeCredentialsHandle',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'DeleteSecurityContext',
                                                                                            'TdiRegisterPnPHandlers',
                                                                                            'TdiCopyBufferToMdl',
                                                                                            'TdiCopyMdlToBuffer',
                                                                                            'TdiDeregisterPnPHandlers',
                                                                                            'FreeMibTable',
                                                                                            'GetUnicastIpAddressTable',
                                                                                            'NsiSetAllParameters',
                                                                                            'NsiFreeTable',
                                                                                            'NsiAllocateAndGetTable',
                                                                                            'NsiGetAllParameters',
                                                                                            'GetIfEntry2',
                                                                                            'CreateSortedAddressPairs',
                                                                                            'NsiDeregisterChangeNotification',
                                                                                            'NsiRegisterChangeNotification',
                                                                                            'ConvertInterfaceLuidToIndex',
                                                                                            'ConvertInterfaceGuidToLuid',
                                                                                            'NmrRegisterClient',
                                                                                            'NmrDeregisterClient',
                                                                                            'NmrWaitForClientDeregisterComplete',
                                                                                            'NmrClientAttachProvider',
                                                                                            'GetIpInterfaceEntry',
                                                                                            'GetBestRoute2',
                                                                                            'RpcBindingCreateW',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcBindingBind',
                                                                                            'RpcBindingUnbind',
                                                                                            'RpcAsyncCancelCall',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'Ndr64AsyncClientCall',
                                                                                            'RpcBindingFree'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 241,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 42992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.edata\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 15360,
                                                                                       '.rdata\x00\x00': 32256,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 43008,
                                                                                       '.text\x00\x00\x00': 211456,
                                                                                       'ALMOSTRO': 512,
                                                                                       'INIT\x00\x00\x00\x00': 8704,
                                                                                       'PAGE\x00\x00\x00\x00': 47104,
                                                                                       'PAGEDATA': 0},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/48889e272a054bcb255dd74fcec273a61da8d6789c842cf20c06fbec37ace1ee'},
 '48b2050373ad48fa2848943c04e8b60c2fc5ad9c3f4c7bfd46b8c0ca09269312': {'AddressOfEntryPoint': 262700,
                                                                      'DebugRVA': 275248,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 274432,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionUnbindClass',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ZwEnumerateKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'IoDetachDevice',
                                                                                            'wcsstr',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'PoSetPowerState',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'strstr',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'RtlQueryRegistryValues',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionBindClass',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionUnbindClass'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 960,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 19968,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 270336,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/48b2050373ad48fa2848943c04e8b60c2fc5ad9c3f4c7bfd46b8c0ca09269312'},
 '48cfe53b964beb5ba3f94fa557b3646fb002ff9c22a6b8456d31f143ec6bf376': {'AddressOfEntryPoint': 250944,
                                                                      'DebugRVA': 262944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 262144,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionBind',
                                                                                      'ntoskrnl.exe': '_purecall'},
                                                                      'ImportedFunctions': ['ObfDereferenceObject',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoStartNextPacket',
                                                                                            'PoUnregisterSystemState',
                                                                                            'PoRegisterSystemState',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IofCompleteRequest',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IofCallDriver',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'PoSetPowerState',
                                                                                            'PoCallDriver',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IoFreeIrp',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'KeInitializeEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeReleaseMutex',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeClearEvent',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeSetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoInitializeIrp',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ExEventObjectType',
                                                                                            'IoDetachDevice',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'wcsstr',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'KeSynchronizeExecution',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'ExFreePoolWithTag',
                                                                                            '__C_specific_handler',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoAllocateMdl',
                                                                                            'MmUnmapLockedPages',
                                                                                            'PoRequestPowerIrp',
                                                                                            'swprintf',
                                                                                            'ZwCreateSection',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'KeDelayExecutionThread',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCreateDevice',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'sprintf',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            '_purecall',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 928,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 13824,
                                                                                       '.rdata\x00\x00': 33792,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 254976,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/48cfe53b964beb5ba3f94fa557b3646fb002ff9c22a6b8456d31f143ec6bf376'},
 '4916a86b6c2b4b141a1b50635ac115c776274bc7b177e6a2d6585775b15514a5': {'AddressOfEntryPoint': 36964,
                                                                      'DebugRVA': 24768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'PCIIDEX.SYS': 'AtaPortWriteRegisterUlong'},
                                                                      'ImportedFunctions': ['AtaPortCopyMemory',
                                                                                            'AtaPortGetPhysicalAddress',
                                                                                            'AtaPortReadRegisterUlong',
                                                                                            'AtaPortInitializeEx',
                                                                                            'AtaPortDeviceStateChange',
                                                                                            'AtaPortEtwTraceLog',
                                                                                            'AtaPortRegistryFreeBuffer',
                                                                                            'AtaPortGetBusData',
                                                                                            'AtaPortRegistryRead',
                                                                                            'AtaPortRequestCallback',
                                                                                            'AtaPortStallExecution',
                                                                                            'AtaPortGetUnCachedExtension',
                                                                                            'AtaPortReadRegisterUchar',
                                                                                            'AtaPortBuildRequestSenseIrb',
                                                                                            'AtaPortReleaseRequestSenseIrb',
                                                                                            'AtaPortCompleteRequest',
                                                                                            'AtaPortNotification',
                                                                                            'AtaPortGetDeviceBase',
                                                                                            'AtaPortGetScatterGatherList',
                                                                                            'AtaPortRegistryAllocateBuffer',
                                                                                            'AtaPortWriteRegisterUlong',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 22,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 17408,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/4916a86b6c2b4b141a1b50635ac115c776274bc7b177e6a2d6585775b15514a5'},
 '4919847f6e5f4ba757ab6b55f3599e8369f785b0c63b091b6e3051e0316acbfd': {'AddressOfEntryPoint': 33652,
                                                                      'DebugRVA': 20944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltCancelFileOpen',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoAttachDeviceToDeviceStackSafe',
                                                                                            'ZwReadFile',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwClose',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeBugCheckEx',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePool',
                                                                                            'IoRegisterFsRegistrationChange',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoThreadToProcess',
                                                                                            'PsGetProcessId',
                                                                                            'IoUnregisterFsRegistrationChange',
                                                                                            'IoDetachDevice',
                                                                                            'ExQueueWorkItem',
                                                                                            'ZwWriteFile',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoCreateDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'IoFreeWorkItem',
                                                                                            'ZwOpenProcess',
                                                                                            'IoDeleteDevice',
                                                                                            '__C_specific_handler',
                                                                                            'FltClose',
                                                                                            'FltAttachVolume',
                                                                                            'FltCreateFile',
                                                                                            'FltGetVolumeFromName',
                                                                                            'FltSendMessage',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltStartFiltering',
                                                                                            'FltGetVolumeFromDeviceObject',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltRegisterFilter',
                                                                                            'FltGetDeviceObject',
                                                                                            'FltObjectDereference',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltGetVolumeName',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltEnumerateVolumes',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltCloseClientPort',
                                                                                            'FltGetBottomInstance',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltCancelFileOpen'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 14336,
                                                                                       'INIT\x00\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/4919847f6e5f4ba757ab6b55f3599e8369f785b0c63b091b6e3051e0316acbfd'},
 '491b05cb3f9adc92619272c191c9db67c6eddad4cdba8a179f5678749de800ac': {'AddressOfEntryPoint': 1074003813,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'CRYPT32.dll': 'CertOpenStore',
                                                                                      'KERNEL32.dll': 'GetConsoleMode',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'USER32.dll': 'DdeUninitialize',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINTRUST.dll': 'WTHelperProvDataFromStateData',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['DdeCreateStringHandleW',
                                                                                            'DdeDisconnect',
                                                                                            'DdeGetLastError',
                                                                                            'DdeClientTransaction',
                                                                                            'DdeFreeStringHandle',
                                                                                            'DdeInitializeW',
                                                                                            'WaitForInputIdle',
                                                                                            'DdeConnect',
                                                                                            'DdeUninitialize',
                                                                                            'ShellExecuteExW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'StrStrIW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'GetLongPathNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetProcAddress',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'Sleep',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpA',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'GetSystemTime',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetACP',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'OpenThread',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertGetNameStringW',
                                                                                            'CertGetNameStringA',
                                                                                            'CryptMsgClose',
                                                                                            'CertCloseStore',
                                                                                            'CryptMsgUpdate',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CertOpenStore'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 148,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15664,
                                                                      'SectionNames': {'!\x19\x04\x00c\x00\x00\x00': 15872,
                                                                                       '.data\x00\x00\x00': 8192,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 47104,
                                                                                       '.text\x00\x00\x00': 173056},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/491b05cb3f9adc92619272c191c9db67c6eddad4cdba8a179f5678749de800ac'},
 '49290e5cb88e66762409c2bb3ec2463f44d9cd8d56020edf53f55a9b715a8d64': {'AddressOfEntryPoint': 3221233868,
                                                                      'DebugRVA': 4656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RtlCaptureContext',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA'},
                                                                      'ImportedFunctions': ['GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'SetFilePointer',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'CloseHandle',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/49290e5cb88e66762409c2bb3ec2463f44d9cd8d56020edf53f55a9b715a8d64'},
 '4a287131352410c1e0c0139a2bfe45989209f7aede866817d89e857ade8a7658': {'AddressOfEntryPoint': 1073793501,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'GetExitCodeProcess',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'msvcp60.dll': '??0Init@ios_base@std@@QEAA@XZ',
                                                                                      'msvcrt.dll': '_c_exit',
                                                                                      'ntdll.dll': '__chkstk'},
                                                                      'ImportedFunctions': ['memset',
                                                                                            'strstr',
                                                                                            '_strnicmp',
                                                                                            'memcpy',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            '__C_specific_handler',
                                                                                            '__chkstk',
                                                                                            'GetStartupInfoA',
                                                                                            'lstrcpynA',
                                                                                            'lstrcpyA',
                                                                                            'CreateProcessA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'LoadIconA',
                                                                                            'TranslateMessage',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            '??0_Winit@std@@QEAA@XZ',
                                                                                            '??1_Winit@std@@QEAA@XZ',
                                                                                            '??1Init@ios_base@std@@QEAA@XZ',
                                                                                            '??0Init@ios_base@std@@QEAA@XZ',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_acmdln',
                                                                                            'strtok',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 43,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 43784,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4a287131352410c1e0c0139a2bfe45989209f7aede866817d89e857ade8a7658'},
 '4a923f5859ac948959e116870857e2cd7972167acdedef65fc7ecd373d4892a4': {'AddressOfEntryPoint': 1073825305,
                                                                      'DebugRVA': 12976,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'OutputDebugStringW',
                                                                                      'MSVCR80.dll': '__CxxFrameHandler3',
                                                                                      'USER32.dll': 'LoadAcceleratorsW',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['GetTickCount',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadStringW',
                                                                                            'EndDialog',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'PostQuitMessage',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromProgID',
                                                                                            '_lock',
                                                                                            '_wcsicmp',
                                                                                            '_CxxThrowException',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_vswprintf',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__CxxFrameHandler3'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 49116,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.text\x00\x00\x00': 7168,
                                                                                       'hW\x01\x00c\x00\x00\x00': 49152},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4a923f5859ac948959e116870857e2cd7972167acdedef65fc7ecd373d4892a4'},
 '4aac6b77c7c48d212ba41a231f62792100ef4b05e5087b9c1feb8a71e63f4e5a': {'AddressOfEntryPoint': 405692,
                                                                      'DebugRVA': 4912,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 68728,
                                                                      'SectionNames': {'.npdata\x00': 1024,
                                                                                       '.pdata\x00\x00': 17408,
                                                                                       '.rdata\x00\x00': 40448,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 69120,
                                                                                       'INIT\x00\x00\x00\x00': 3584,
                                                                                       'PAGE\x00\x00\x00\x00': 301056,
                                                                                       'PAGED\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/4aac6b77c7c48d212ba41a231f62792100ef4b05e5087b9c1feb8a71e63f4e5a'},
 '4af8f703ab6535ed70c03c6e98e1ad040589ceb79726a531d49a7acbac7ad624': {'AddressOfEntryPoint': 253888,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 352256,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'VirtualAlloc',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'SETUPAPI.dll': 'SetupFindFirstLineA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'SHLWAPI.dll': 'PathIsUNCA',
                                                                                      'USER32.dll': 'SetMenuItemBitmaps',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterA',
                                                                                      'comdlg32.dll': 'GetFileTitleA',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA',
                                                                                      'ole32.dll': 'CoRevokeClassObject'},
                                                                      'ImportedFunctions': ['SetupDiOpenDevRegKey',
                                                                                            'SetupCopyOEMInfA',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupGetTargetPathA',
                                                                                            'SetupFindNextLine',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiGetDeviceInfoListDetailA',
                                                                                            'CM_Get_DevNode_Status_Ex',
                                                                                            'SetupGetStringFieldA',
                                                                                            'SetupFindFirstLineA',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GlobalFlags',
                                                                                            'GetThreadLocale',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSize',
                                                                                            'DuplicateHandle',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileTime',
                                                                                            'GetTickCount',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalFindAtomA',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeResource',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrcmpA',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'MulDiv',
                                                                                            'SetLastError',
                                                                                            'CreateThread',
                                                                                            'lstrcpyA',
                                                                                            'SetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetCommandLineA',
                                                                                            'CreateProcessA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'VirtualAlloc',
                                                                                            'UnregisterClassA',
                                                                                            'DestroyMenu',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'PostThreadMessageA',
                                                                                            'SetCapture',
                                                                                            'GetSysColorBrush',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpA',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'GetClassLongA',
                                                                                            'GetClassNameA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'MessageBeep',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'PtInRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowLongA',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetWindow',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CopyRect',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CharUpperA',
                                                                                            'DrawIcon',
                                                                                            'SendMessageA',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageA',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'InvalidateRgn',
                                                                                            'InvalidateRect',
                                                                                            'SetRect',
                                                                                            'IsRectEmpty',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'CharNextA',
                                                                                            'MapWindowPoints',
                                                                                            'ReleaseCapture',
                                                                                            'IsIconic',
                                                                                            'GetClientRect',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadIconA',
                                                                                            'EnableWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuState',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'ModifyMenuA',
                                                                                            'GetParent',
                                                                                            'GetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'ExtSelectClipRgn',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetMapMode',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'SetMapMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'DeleteObject',
                                                                                            'GetFileTitleA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCreateKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathStripToRootA',
                                                                                            'SHDeleteKeyA',
                                                                                            'PathIsUNCA',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoGetClassObject',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'OleFlushClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRevokeClassObject',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 373,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1165144,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 24576,
                                                                                       '.rdata\x00\x00': 119296,
                                                                                       '.rsrc\x00\x00\x00': 1165312,
                                                                                       '.text\x00\x00\x00': 347648},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4af8f703ab6535ed70c03c6e98e1ad040589ceb79726a531d49a7acbac7ad624'},
 '4b18da73cd54b742d727f1b3b70fc64942de916ce0ea7d4139d22f4625de4645': {'AddressOfEntryPoint': 18492,
                                                                      'DebugRVA': 49776,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadProcessMemory',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenProcess',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 42496},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4b18da73cd54b742d727f1b3b70fc64942de916ce0ea7d4139d22f4625de4645'},
 '4b918308a9548fef214a00d9d332378a92132d9247d3a2f0e9230ec59137f4eb': {'AddressOfEntryPoint': 1073843965,
                                                                      'DebugRVA': 51184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'MSVCR80.dll': '_initterm_e',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'USER32.dll': 'CharUpperA',
                                                                                      'WINSPOOL.DRV': 'GetPrinterA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'wcslen',
                                                                                            'strncmp',
                                                                                            'strtod',
                                                                                            '_stricmp',
                                                                                            'strstr',
                                                                                            '_recalloc',
                                                                                            'calloc',
                                                                                            'wcscpy_s',
                                                                                            'memcpy',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            '_resetstkoflw',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'malloc',
                                                                                            'strtoul',
                                                                                            '__CxxFrameHandler3',
                                                                                            'vsprintf',
                                                                                            'memset',
                                                                                            '_wcsicmp',
                                                                                            '_setmbcp',
                                                                                            'fclose',
                                                                                            'fwrite',
                                                                                            '_wfopen',
                                                                                            'free',
                                                                                            '_initterm_e',
                                                                                            'GetVersion',
                                                                                            'lstrlenW',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpiW',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetStringTypeExA',
                                                                                            'GetStringTypeExW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'lstrlenA',
                                                                                            'MultiByteToWideChar',
                                                                                            'TerminateProcess',
                                                                                            'OutputDebugStringA',
                                                                                            'GetACP',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetThreadLocale',
                                                                                            'GetVersionExA',
                                                                                            'WideCharToMultiByte',
                                                                                            'EnableWindow',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageA',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'CharLowerA',
                                                                                            'CharLowerW',
                                                                                            'CharUpperA',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterA',
                                                                                            'GetPrinterA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'VariantClear'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 104,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1880,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4b918308a9548fef214a00d9d332378a92132d9247d3a2f0e9230ec59137f4eb'},
 '4bdf030e2a349281208f8913ebd504a14b7245f5490b6dcec6037dbd0e6a6983': {'AddressOfEntryPoint': 42125596,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 39935056,
                                                                      'ExportSize': 53012,
                                                                      'IATRVA': 39930088,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyA',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameA',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'ExitProcess',
                                                                                      'NETAPI32.dll': 'Netbios',
                                                                                      'OLEAUT32.dll': 'VariantChangeType',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'SHLWAPI.dll': 'StrCatW',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'WININET.dll': 'InternetCloseHandle',
                                                                                      'WS2_32.dll': 'connect',
                                                                                      'd3d9.dll': 'Direct3DCreate9',
                                                                                      'd3dx9_38.dll': 'D3DXGetShaderConstantTable',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'tbb.dll': '?allocate@allocate_child_proxy@internal@tbb@@QEBAAEAVtask@3@_K@Z',
                                                                                      'tbbmalloc.dll': 'scalable_malloc'},
                                                                      'ImportedFunctions': ['connect',
                                                                                            'StrCatW',
                                                                                            'CreateDirectoryA',
                                                                                            'SetCursorPos',
                                                                                            'GetStockObject',
                                                                                            'GetOpenFileNameA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'ShellExecuteA',
                                                                                            'CoInitializeEx',
                                                                                            'VariantChangeType',
                                                                                            'scalable_malloc',
                                                                                            '?allocate@allocate_child_proxy@internal@tbb@@QEBAAEAVtask@3@_K@Z',
                                                                                            'Netbios',
                                                                                            'InitCommonControlsEx',
                                                                                            'Direct3DCreate9',
                                                                                            'D3DXGetShaderConstantTable',
                                                                                            'InternetCloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 24,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 357608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 0,
                                                                                       '.data1\x00\x00': 0,
                                                                                       '.pdata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 38400,
                                                                                       '.text\x00\x00\x00': 0,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.vmp0\x00\x00\x00': 0,
                                                                                       '.vmp1\x00\x00\x00': 11187712},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4bdf030e2a349281208f8913ebd504a14b7245f5490b6dcec6037dbd0e6a6983'},
 '4c35825542adb5df5ce569fe4131a28052cd3faf32d4ea8f3d494f2e54f8a965': {'AddressOfEntryPoint': 1078685393,
                                                                      'DebugRVA': 726688,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 716800,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'CRYPT32.dll': 'CryptStringToBinaryW',
                                                                                      'GDI32.dll': 'GetBitmapBits',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersInfo',
                                                                                      'KERNEL32.dll': 'RtlCaptureContext',
                                                                                      'MPR.dll': 'WNetCloseEnum',
                                                                                      'MSIMG32.dll': 'TransparentBlt',
                                                                                      'MSVCP90.dll': '?_Lockit_ctor@_Lockit@std@@SAXH@Z',
                                                                                      'MSVCR90.dll': 'strncpy',
                                                                                      'NETAPI32.dll': 'NetShareAdd',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'RASAPI32.dll': 'RasEnumEntriesW',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyW',
                                                                                      'USER32.dll': 'GetWindowRect',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'HttpOpenRequestW',
                                                                                      'WINSPOOL.DRV': 'EnumPrintersW',
                                                                                      'WS2_32.dll': 'WSAGetLastError',
                                                                                      'eappcfg.dll': 'EapHostPeerFreeMemory',
                                                                                      'mscoree.dll': '_CorExeMain',
                                                                                      'msvcm90.dll': '?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['_time64',
                                                                                            'wcscpy_s',
                                                                                            'wcsncpy',
                                                                                            'memmove_s',
                                                                                            '__RTDynamicCast',
                                                                                            '_mktime64',
                                                                                            'wcstok',
                                                                                            '_wtoi',
                                                                                            '_CxxThrowException',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '_wcsdup',
                                                                                            '_vswprintf',
                                                                                            'free',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '__CxxQueryExceptionSize',
                                                                                            '__CxxExceptionFilter',
                                                                                            '__CxxRegisterExceptionObject',
                                                                                            '__CxxDetectRethrow',
                                                                                            '__CxxUnregisterExceptionObject',
                                                                                            'fclose',
                                                                                            'isdigit',
                                                                                            'vswprintf_s',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            'fread',
                                                                                            '__CxxFrameHandler3',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_wfopen',
                                                                                            'wcsstr',
                                                                                            'fwrite',
                                                                                            'fsetpos',
                                                                                            'fseek',
                                                                                            'fgetpos',
                                                                                            '_stricmp',
                                                                                            'fflush',
                                                                                            'wcsftime',
                                                                                            '_localtime64_s',
                                                                                            '_wcsupr',
                                                                                            'wcstoul',
                                                                                            'memcpy_s',
                                                                                            'strtoul',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            'malloc',
                                                                                            '_wcsnicmp',
                                                                                            'qsort',
                                                                                            '_purecall',
                                                                                            'wcscat_s',
                                                                                            'fgetws',
                                                                                            'isxdigit',
                                                                                            '_amsg_exit',
                                                                                            '__crt_debugger_hook',
                                                                                            'mbstowcs',
                                                                                            '_encoded_null',
                                                                                            'abort',
                                                                                            '__FrameUnwindFilter',
                                                                                            'wcschr',
                                                                                            '_itow_s',
                                                                                            'memmove',
                                                                                            'strcpy_s',
                                                                                            '_waccess',
                                                                                            'ceilf',
                                                                                            'isalpha',
                                                                                            'strncpy',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetProcAddress',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetStdHandle',
                                                                                            'AllocConsole',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateMutexW',
                                                                                            'CreateDirectoryW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetLastError',
                                                                                            'WinExec',
                                                                                            'GetProcessShutdownParameters',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetDateFormatW',
                                                                                            'lstrcmpiW',
                                                                                            'GetVersionExW',
                                                                                            'LockResource',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'lstrcpyW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetTempFileNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MoveFileExW',
                                                                                            'ResumeThread',
                                                                                            'TerminateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'SleepEx',
                                                                                            'SetLastError',
                                                                                            'lstrcpynW',
                                                                                            'FreeResource',
                                                                                            'FindResourceExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'EnumResourceNamesW',
                                                                                            'SetThreadLocale',
                                                                                            'GetThreadLocale',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleInputW',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'CloseHandle',
                                                                                            'OpenMutexW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateEventW',
                                                                                            'LocalAlloc',
                                                                                            'SetFileAttributesW',
                                                                                            'GetComputerNameW',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'lstrlenA',
                                                                                            'GetShortPathNameW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetConsoleWindow',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'lstrcmpW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetOverlappedResult',
                                                                                            'LoadLibraryA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DeleteMenu',
                                                                                            'AppendMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'ModifyMenuW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetCursorPos',
                                                                                            'BroadcastSystemMessageW',
                                                                                            'CheckMenuItem',
                                                                                            'IsIconic',
                                                                                            'EqualRect',
                                                                                            'FrameRect',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DrawFocusRect',
                                                                                            'GetClientRect',
                                                                                            'GetClassInfoW',
                                                                                            'EnableScrollBar',
                                                                                            'ScrollWindow',
                                                                                            'SetParent',
                                                                                            'GetWindowLongPtrW',
                                                                                            'InflateRect',
                                                                                            'LoadBitmapW',
                                                                                            'CreatePopupMenu',
                                                                                            'ScreenToClient',
                                                                                            'ReleaseDC',
                                                                                            'GetDCEx',
                                                                                            'RegisterHotKey',
                                                                                            'SetCapture',
                                                                                            'MessageBeep',
                                                                                            'SystemParametersInfoW',
                                                                                            'ReleaseCapture',
                                                                                            'GetSystemMetrics',
                                                                                            'PtInRect',
                                                                                            'UnionRect',
                                                                                            'DrawEdge',
                                                                                            'DrawFrameControl',
                                                                                            'ClientToScreen',
                                                                                            'GetDC',
                                                                                            'IsWindowVisible',
                                                                                            'GetFocus',
                                                                                            'TabbedTextOutW',
                                                                                            'DrawTextW',
                                                                                            'DrawTextExW',
                                                                                            'GrayStringW',
                                                                                            'GetSysColor',
                                                                                            'GetMessagePos',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'LoadStringW',
                                                                                            'GetMenuState',
                                                                                            'IsMenu',
                                                                                            'ShowWindow',
                                                                                            'PostThreadMessageW',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'CharUpperW',
                                                                                            'CopyIcon',
                                                                                            'SetCursor',
                                                                                            'UnregisterHotKey',
                                                                                            'PostQuitMessage',
                                                                                            'LoadCursorW',
                                                                                            'InvalidateRect',
                                                                                            'GetParent',
                                                                                            'LoadMenuW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'LoadIconW',
                                                                                            'GetDesktopWindow',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'UpdateWindow',
                                                                                            'SendMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'SetWindowPos',
                                                                                            'BringWindowToTop',
                                                                                            'EnableWindow',
                                                                                            'RedrawWindow',
                                                                                            'GetWindowRect',
                                                                                            'CryptGetUserKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'FreeSid',
                                                                                            'LookupAccountSidW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'CryptSetProvParam',
                                                                                            'CryptGetProvParam',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenKey',
                                                                                            'RegCloseKey',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptDecrypt',
                                                                                            'CryptEncrypt',
                                                                                            'CryptDeriveKey',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'IsTextUnicode',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclW',
                                                                                            'LogonUserW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantCopy',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'GetInterfaceInfo',
                                                                                            'IpReleaseAddress',
                                                                                            'IpRenewAddress',
                                                                                            'GetAdaptersAddresses',
                                                                                            'GetIfEntry',
                                                                                            'NotifyAddrChange',
                                                                                            'GetAdaptersInfo',
                                                                                            'EapHostPeerGetMethods',
                                                                                            'EapHostPeerFreeErrorMemory',
                                                                                            'EapHostPeerFreeMemory',
                                                                                            'UuidToStringW',
                                                                                            'UuidFromStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'CryptBinaryToStringW',
                                                                                            'CryptStringToBinaryW',
                                                                                            'RasHangUpW',
                                                                                            'RasEnumConnectionsW',
                                                                                            'RasGetConnectStatusW',
                                                                                            'RasGetErrorStringW',
                                                                                            'RasDialW',
                                                                                            'RasGetEntryDialParamsW',
                                                                                            'RasGetEntryPropertiesW',
                                                                                            'RasEnumEntriesW',
                                                                                            'NetLocalGroupGetMembers',
                                                                                            'NetShareDel',
                                                                                            'NetApiBufferFree',
                                                                                            'NetShareEnum',
                                                                                            'NetShareAdd',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetUserW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetOpenEnumW',
                                                                                            'WNetEnumResourceW',
                                                                                            'WNetCloseEnum',
                                                                                            'BitBlt',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetStockObject',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateHatchBrush',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetROP2',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateCompatibleDC',
                                                                                            'Polygon',
                                                                                            'Rectangle',
                                                                                            'StretchBlt',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePalette',
                                                                                            'SetPixel',
                                                                                            'GetBkColor',
                                                                                            'GetCurrentObject',
                                                                                            'PtVisible',
                                                                                            'RectVisible',
                                                                                            'TextOutW',
                                                                                            'ExtTextOutW',
                                                                                            'Escape',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'RealizePalette',
                                                                                            'GetObjectW',
                                                                                            'GetBitmapBits',
                                                                                            'TransparentBlt',
                                                                                            'EnumPrintersW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'SHDeleteKeyW',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateGuid',
                                                                                            '?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$AAVEventHandler@System@@@Z',
                                                                                            '?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@@Z',
                                                                                            '?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVException@System@@0@Z',
                                                                                            '?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z',
                                                                                            '?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ',
                                                                                            '?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            '??0?$allocator@_W@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?_Decref@facet@locale@std@@QEAAPEAV123@XZ',
                                                                                            '?_Lockit_dtor@_Lockit@std@@SAXH@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAPEBDXZ',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?_Lockit_ctor@_Lockit@std@@SAXH@Z',
                                                                                            'WSAStartup',
                                                                                            'socket',
                                                                                            'setsockopt',
                                                                                            'gethostbyaddr',
                                                                                            'closesocket',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'gethostbyname',
                                                                                            'inet_addr',
                                                                                            'inet_ntoa',
                                                                                            'select',
                                                                                            'WSAAddressToStringW',
                                                                                            'WSAGetLastError',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetReadFile',
                                                                                            'InternetConnectW',
                                                                                            'HttpEndRequestW',
                                                                                            'InternetOpenW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetErrorDlg',
                                                                                            'HttpSendRequestA',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetOpenUrlW',
                                                                                            'HttpSendRequestW',
                                                                                            'InternetWriteFile',
                                                                                            'HttpSendRequestExW',
                                                                                            'HttpOpenRequestW',
                                                                                            '_CorExeMain'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 420,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1963632,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4c35825542adb5df5ce569fe4131a28052cd3faf32d4ea8f3d494f2e54f8a965'},
 '4d29729cbcff4cfa719e6fec77c13da0de3f1188cd581e969b65acea30484a07': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 206576,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 206848,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/4d29729cbcff4cfa719e6fec77c13da0de3f1188cd581e969b65acea30484a07'},
 '4d5be389a9743f18c109994086148154257ff7827b16ddd87752853887eb73f7': {'AddressOfEntryPoint': 5220,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'CloseHandle',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetCommandLineW',
                                                                                            'TerminateProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'SizeofResource',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 44,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 222248,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 222720,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/4d5be389a9743f18c109994086148154257ff7827b16ddd87752853887eb73f7'},
 '4d7d445f825db745c750e397dfbd3ff556697f1491a8c8102b0941f901857e07': {'AddressOfEntryPoint': 1074606557,
                                                                      'DebugRVA': 343232,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 339968,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'OLEAUT32.dll': 'VariantChangeType',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconA',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameA',
                                                                                      'USER32.dll': 'SetWindowPos',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'WINMM.dll': 'waveOutOpen',
                                                                                      'WINSPOOL.DRV': 'DocumentPropertiesA'},
                                                                      'ImportedFunctions': ['waveOutClose',
                                                                                            'waveInOpen',
                                                                                            'waveInStart',
                                                                                            'waveInStop',
                                                                                            'waveInClose',
                                                                                            'waveOutReset',
                                                                                            'waveOutUnprepareHeader',
                                                                                            'waveInReset',
                                                                                            'waveInPrepareHeader',
                                                                                            'waveInUnprepareHeader',
                                                                                            'waveInAddBuffer',
                                                                                            'waveOutWrite',
                                                                                            'waveOutPrepareHeader',
                                                                                            'waveOutOpen',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFindFileNameA',
                                                                                            'TlsFree',
                                                                                            'GlobalFlags',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetThreadLocale',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFullPathNameA',
                                                                                            'SetErrorMode',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCommandLineA',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'HeapSize',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDriveTypeA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'SuspendThread',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThread',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrcmpA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAlloc',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'MulDiv',
                                                                                            'FindFirstFileA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FreeResource',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalFindAtomA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'FreeLibrary',
                                                                                            'SetLastError',
                                                                                            'lstrcmpW',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'ResetEvent',
                                                                                            'CreateEventA',
                                                                                            'SetThreadPriority',
                                                                                            'ResumeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'TerminateThread',
                                                                                            'Sleep',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'lstrcpyA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'EnumUILanguagesA',
                                                                                            'GetCurrentProcess',
                                                                                            'IsWow64Process',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'FindResourceExA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'lstrlenA',
                                                                                            'CreateProcessA',
                                                                                            'HeapFree',
                                                                                            'GrayStringA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'PostQuitMessage',
                                                                                            'ValidateRect',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageA',
                                                                                            'SetCursor',
                                                                                            'DestroyMenu',
                                                                                            'WindowFromPoint',
                                                                                            'GetSysColorBrush',
                                                                                            'LoadCursorA',
                                                                                            'UnregisterClassA',
                                                                                            'DrawTextExA',
                                                                                            'TabbedTextOutA',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'ModifyMenuA',
                                                                                            'GetMenuState',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetDesktopWindow',
                                                                                            'GetActiveWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'IsWindowEnabled',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpA',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassLongA',
                                                                                            'GetClassNameA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'SetActiveWindow',
                                                                                            'DispatchMessageA',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageA',
                                                                                            'MapWindowPoints',
                                                                                            'TrackPopupMenu',
                                                                                            'GetKeyState',
                                                                                            'IsWindowVisible',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'MessageBoxA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'GetWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowPlacement',
                                                                                            'OffsetRect',
                                                                                            'IsWindow',
                                                                                            'DrawIcon',
                                                                                            'GetSubMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'IsIconic',
                                                                                            'LoadIconA',
                                                                                            'SetWindowRgn',
                                                                                            'SetMenuDefaultItem',
                                                                                            'SystemParametersInfoA',
                                                                                            'IntersectRect',
                                                                                            'CopyRect',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'InflateRect',
                                                                                            'GetSysColor',
                                                                                            'SetRect',
                                                                                            'LoadMenuA',
                                                                                            'LoadMenuIndirectA',
                                                                                            'FindWindowA',
                                                                                            'ReleaseCapture',
                                                                                            'PtInRect',
                                                                                            'GetCursorPos',
                                                                                            'SetCapture',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'ScreenToClient',
                                                                                            'DrawTextA',
                                                                                            'ClientToScreen',
                                                                                            'DrawFocusRect',
                                                                                            'GetFocus',
                                                                                            'SendMessageA',
                                                                                            'InvalidateRect',
                                                                                            'LoadBitmapA',
                                                                                            'GetWindowRect',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SetWindowLongA',
                                                                                            'PostMessageA',
                                                                                            'GetWindowLongA',
                                                                                            'BringWindowToTop',
                                                                                            'SetForegroundWindow',
                                                                                            'EnableWindow',
                                                                                            'SetFocus',
                                                                                            'SetWindowPos',
                                                                                            'SelectObject',
                                                                                            'CreatePolygonRgn',
                                                                                            'GetClipBox',
                                                                                            'PtVisible',
                                                                                            'RectVisible',
                                                                                            'TextOutA',
                                                                                            'ExtTextOutA',
                                                                                            'Escape',
                                                                                            'SetViewportOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetMapMode',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBitmap',
                                                                                            'BitBlt',
                                                                                            'CreateBitmapIndirect',
                                                                                            'SetPixel',
                                                                                            'GetObjectA',
                                                                                            'GetPixel',
                                                                                            'DeleteObject',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'SetMapMode',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'OpenPrinterA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'Shell_NotifyIconA',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 343,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 390728,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4d7d445f825db745c750e397dfbd3ff556697f1491a8c8102b0941f901857e07'},
 '4db151037e5548c12cb6faa218e9a6adec7330ae96418bbd15c8d912f544fc73': {'AddressOfEntryPoint': 1074630462,
                                                                      'DebugRVA': 64784,
                                                                      'DebugSize': 56,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetUserNameW',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'MSVCP90.dll': '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                      'MSVCR90.dll': '_XcptFilter',
                                                                                      'PSAPI.DLL': 'GetModuleBaseNameW',
                                                                                      'USER32.dll': 'UnloadKeyboardLayout',
                                                                                      'USERENV.dll': 'GetUserProfileDirectoryW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'FindWindowW',
                                                                                            'PostMessageW',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'SystemParametersInfoW',
                                                                                            'EnumDesktopWindows',
                                                                                            'OpenDesktopW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetClassNameW',
                                                                                            'CloseDesktop',
                                                                                            'UnloadKeyboardLayout',
                                                                                            'GetUserProfileDirectoryW',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'IsValidSid',
                                                                                            'GetTokenInformation',
                                                                                            'DeregisterEventSource',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'OpenProcessToken',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegFlushKey',
                                                                                            'GetUserNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetFileAttributesW',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'lstrlenA',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetTempPathW',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualProtect',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'InitializeCriticalSection',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'LocalFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'EnumProcessModules',
                                                                                            'GetModuleBaseNameW',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'wcscpy_s',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'vswprintf_s',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'wcstok_s',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            'swscanf_s',
                                                                                            'memmove_s',
                                                                                            'wcscat_s',
                                                                                            '_encode_pointer',
                                                                                            'swprintf_s',
                                                                                            'memcpy',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memset',
                                                                                            '_vsnwprintf_s',
                                                                                            'wcsncpy_s',
                                                                                            'wcsncat_s',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '_XcptFilter',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z',
                                                                                            '?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W@Z',
                                                                                            '?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KXZ',
                                                                                            '?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAPEB_WXZ',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAPEBDXZ',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 150,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1920,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4db151037e5548c12cb6faa218e9a6adec7330ae96418bbd15c8d912f544fc73'},
 '4e5ea8c3edd23c80f3b4bfe53d129529f492f5b3859b4b9835d8dab8f1b37941': {'AddressOfEntryPoint': 1073770461,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'GetShortPathNameA',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathA',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'msvcrt.dll': '_fmode',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['_onexit',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '__dllonexit',
                                                                                            'memset',
                                                                                            'atoi',
                                                                                            '_splitpath',
                                                                                            'atol',
                                                                                            '__CxxFrameHandler',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_setmbcp',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            'DeleteFileA',
                                                                                            'GetProfileIntA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrcpyA',
                                                                                            'lstrcatA',
                                                                                            'lstrlenA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SearchPathA',
                                                                                            'CopyFileA',
                                                                                            'GetLastError',
                                                                                            'lstrcpynA',
                                                                                            'GetVersionExA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'GetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'GetShortPathNameA',
                                                                                            'EnableWindow',
                                                                                            'LoadIconA',
                                                                                            'GetClientRect',
                                                                                            'IsIconic',
                                                                                            'SendMessageA',
                                                                                            'DrawIcon',
                                                                                            'MessageBoxA',
                                                                                            'GetSystemMetrics',
                                                                                            'wsprintfA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'ShellExecuteExA',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromProgID',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 79,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2864,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4e5ea8c3edd23c80f3b4bfe53d129529f492f5b3859b4b9835d8dab8f1b37941'},
 '4e81aa5a0a2567ff616f7099774d742e22866dd010c3a850290f13124009de78': {'AddressOfEntryPoint': 78608,
                                                                      'DebugRVA': 252508,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 253952,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'API-MS-Win-Core-ErrorHandling-L1-1-0.dll': 'UnhandledExceptionFilter',
                                                                                      'API-MS-Win-Core-File-L1-1-0.dll': 'FindNextFileW',
                                                                                      'API-MS-Win-Core-Handle-L1-1-0.dll': 'CloseHandle',
                                                                                      'API-MS-Win-Core-Heap-L1-1-0.dll': 'HeapSetInformation',
                                                                                      'API-MS-Win-Core-IO-L1-1-0.dll': 'DeviceIoControl',
                                                                                      'API-MS-Win-Core-LibraryLoader-L1-1-0.dll': 'LoadStringW',
                                                                                      'API-MS-Win-Core-LocalRegistry-L1-1-0.dll': 'RegSetValueExW',
                                                                                      'API-MS-Win-Core-Misc-L1-1-0.dll': 'lstrlenW',
                                                                                      'API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'API-MS-Win-Core-ProcessThreads-L1-1-0.dll': 'GetProcessTimes',
                                                                                      'API-MS-Win-Core-Profile-L1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'API-MS-Win-Core-String-L1-1-0.dll': 'CompareStringW',
                                                                                      'API-MS-Win-Core-Synch-L1-1-0.dll': 'OpenProcess',
                                                                                      'API-MS-Win-Core-SysInfo-L1-1-0.dll': 'GetSystemTime',
                                                                                      'API-MS-Win-Security-Base-L1-1-0.dll': 'SetTokenInformation',
                                                                                      'API-MS-Win-Security-LSALookup-L1-1-0.dll': 'LsaLookupOpenLocalPolicy',
                                                                                      'API-MS-Win-Security-SDDL-L1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'CRYPTBASE.dll': 'SystemFunction005',
                                                                                      'RPCRT4.dll': 'RpcAsyncAbortCall',
                                                                                      'SspiCli.dll': 'LogonUserExExW',
                                                                                      'msvcrt.dll': '_ultow',
                                                                                      'ntdll.dll': 'RtlUnicodeStringToInteger'},
                                                                      'ImportedFunctions': ['_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_ltow',
                                                                                            'wcscspn',
                                                                                            '__getmainargs',
                                                                                            '_ltow_s',
                                                                                            'wcschr',
                                                                                            '_wcslwr',
                                                                                            '_ultow_s',
                                                                                            'time',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            'wcstoul',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            'wcsncmp',
                                                                                            '_ultow',
                                                                                            'UuidCreate',
                                                                                            'UuidCreateNil',
                                                                                            'UuidEqual',
                                                                                            'RpcServerUnsubscribeForNotification',
                                                                                            'RpcServerSubscribeForNotification',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcServerInqBindingHandle',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'I_RpcSessionStrictContextHandle',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'NdrServerCall2',
                                                                                            'NdrAsyncServerCall',
                                                                                            'UuidFromStringW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcServerInqCallAttributesA',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcAsyncAbortCall',
                                                                                            'LogonUserExExW',
                                                                                            'RtlLengthSid',
                                                                                            'EtwTraceMessage',
                                                                                            'NtTraceControl',
                                                                                            'RtlSetLastWin32Error',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtOpenThread',
                                                                                            'NtQueueApcThread',
                                                                                            'RtlQueueApcWow64Thread',
                                                                                            'EvtIntReportEventAndSourceAsync',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventRegister',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlFreeHeap',
                                                                                            'NtSetEvent',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtOpenProcessToken',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtQueryDirectoryFile',
                                                                                            'NtDeleteFile',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'NtFilterToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtSetInformationThread',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtDuplicateToken',
                                                                                            'NtAccessCheckAndAuditAlarm',
                                                                                            'NtAccessCheck',
                                                                                            'NtPrivilegeObjectAuditAlarm',
                                                                                            'NtPrivilegeCheck',
                                                                                            'RtlMapGenericMask',
                                                                                            'RtlSetSecurityObject',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'RtlQuerySecurityObject',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'NtDeleteKey',
                                                                                            'NtEnumerateKey',
                                                                                            'NtDeleteValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenKey',
                                                                                            'NtCreateKey',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlConvertExclusiveToShared',
                                                                                            'RtlConvertSharedToExclusive',
                                                                                            'RtlCreateServiceSid',
                                                                                            'RtlRegisterWait',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlCopySid',
                                                                                            'NtUnloadDriver',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'NtLoadDriver',
                                                                                            'DbgPrintEx',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlInitializeSRWLock',
                                                                                            'NtOpenFile',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlReleaseSRWLockShared',
                                                                                            'NtDeleteObjectAuditAlarm',
                                                                                            'RtlAcquireSRWLockShared',
                                                                                            'NtFlushKey',
                                                                                            'RtlAreAllAccessesGranted',
                                                                                            'NtCloseObjectAuditAlarm',
                                                                                            'RtlReleaseSRWLockExclusive',
                                                                                            'RtlAcquireSRWLockExclusive',
                                                                                            'RtlDeregisterWait',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlQueueWorkItem',
                                                                                            'RtlDeleteSecurityObject',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlCopyLuid',
                                                                                            'NtQueryKey',
                                                                                            'NtShutdownSystem',
                                                                                            'NtInitializeRegistry',
                                                                                            'NtSetSystemEnvironmentValue',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlNewSecurityObject',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'LsaLookupTranslateSids',
                                                                                            'LsaLookupFreeMemory',
                                                                                            'LsaLookupClose',
                                                                                            'LsaLookupManageSidNameMapping',
                                                                                            'LsaLookupGetDomainInfo',
                                                                                            'LsaLookupTranslateNames',
                                                                                            'LsaLookupOpenLocalPolicy',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'SystemFunction029',
                                                                                            'SystemFunction005',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetFileInformationByHandle',
                                                                                            'CreateDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeviceIoControl',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'LoadStringW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegLoadMUIStringW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'IsWow64Process',
                                                                                            'lstrlenW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetProcessId',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateProcessAsUserW',
                                                                                            'ResumeThread',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'ExitThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetProcessTimes',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CompareStringW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'ResetEvent',
                                                                                            'OpenEventW',
                                                                                            'OpenProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemTime',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'CheckTokenMembership',
                                                                                            'GetTokenInformation',
                                                                                            'InitializeAcl',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AllocateLocallyUniqueId',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetTokenInformation'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 293,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 19112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 39936,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 248832},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/4e81aa5a0a2567ff616f7099774d742e22866dd010c3a850290f13124009de78'},
 '4e903131653f2203f82e82ee3df903360ad59b1d574e7a6dfee6f5cd63b26a35': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/4e903131653f2203f82e82ee3df903360ad59b1d574e7a6dfee6f5cd63b26a35'},
 '4e977a30a9648c13e874c4fa95a596c6eae65eb83b76bdcad8014df2627ef29d': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4e977a30a9648c13e874c4fa95a596c6eae65eb83b76bdcad8014df2627ef29d'},
 '4edcabead7df2e864c6e874e42f7d6c999b2f872ec3a41b06e2b3193045c2117': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/4edcabead7df2e864c6e874e42f7d6c999b2f872ec3a41b06e2b3193045c2117'},
 '4f0498aa57fdebcca74c719cda157184c1d31bcb2692cfbb5c9b63343901eb92': {'AddressOfEntryPoint': 2483035,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 2478872,
                                                                      'ExportSize': 3152,
                                                                      'IATRVA': 2491904,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 617216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 0,
                                                                                       '.pdata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 583680,
                                                                                       '.text\x00\x00\x00': 0,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.vmp0\x00\x00\x00': 0,
                                                                                       '.vmp1\x00\x00\x00': 551936},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4f0498aa57fdebcca74c719cda157184c1d31bcb2692cfbb5c9b63343901eb92'},
 '4f1d180079b3c120650b23011e9cfb43e9d3f5f5f67fb48432f26836db3de9ac': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3364,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 1385984,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/4f1d180079b3c120650b23011e9cfb43e9d3f5f5f67fb48432f26836db3de9ac'},
 '4f2c4a3aa41d32a1a8a4618cfaeece2dafcbf770af85ef48effa59d330960d32': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9660,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 4593664,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/4f2c4a3aa41d32a1a8a4618cfaeece2dafcbf770af85ef48effa59d330960d32'},
 '4f63eb99dabefb760e61745ebeae4981fc16d91715605a717d3cd94db2db9789': {'AddressOfEntryPoint': 45072,
                                                                      'DebugRVA': 24960,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 40960,
                                                                      'ExportSize': 1878,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'NDIS.SYS': 'NdisRegisterTdiCallBack',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['RtlAnsiStringToUnicodeString',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeDpc',
                                                                                            'RtlInitString',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'KeInitializeTimer',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeSetTimer',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'MmUnmapLockedPages',
                                                                                            'IoBuildPartialMdl',
                                                                                            'IoIs32bitProcess',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'MmFreeMappingAddress',
                                                                                            'MmMapLockedPagesWithReservedMapping',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'NtCreateFile',
                                                                                            'MmUnmapReservedMapping',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            '_wcsicmp',
                                                                                            'ExFreePoolWithTag',
                                                                                            '_wcsnicmp',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'KeInitializeEvent',
                                                                                            'DbgBreakPoint',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwClose',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'DbgPrint',
                                                                                            'ZwOpenKey',
                                                                                            'KeBugCheckEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'NlsMbCodePageTag',
                                                                                            'MmAllocateMappingAddress',
                                                                                            'ExQueueWorkItem',
                                                                                            '__C_specific_handler',
                                                                                            'NdisReturnPackets',
                                                                                            'NdisDeregisterTdiCallBack',
                                                                                            'NdisRegisterTdiCallBack'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.edata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 19968,
                                                                                       'INIT\x00\x00\x00\x00': 2048,
                                                                                       'PAGE\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/4f63eb99dabefb760e61745ebeae4981fc16d91715605a717d3cd94db2db9789'},
 '4f67d58a4cbb09be604cfdbf75637469d75db9bebdc47efbc0c77fc6eddaf95c': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 294516,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 294912,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/4f67d58a4cbb09be604cfdbf75637469d75db9bebdc47efbc0c77fc6eddaf95c'},
 '4fa6203e5ab578e4f9886fb6d1b0b91753a0ddf4baf5036b744da06a587a9b40': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/4fa6203e5ab578e4f9886fb6d1b0b91753a0ddf4baf5036b744da06a587a9b40'},
 '5087c7445e36ebb0a746a6961c39dd78d1d4ed8d2895e25abaae05413c3be8ea': {'AddressOfEntryPoint': 151856,
                                                                      'DebugRVA': 252528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 249856,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'ExtTextOutW',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'HeapReAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSize',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetErrorMode',
                                                                                            'lstrlenA',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetThreadLocale',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFlags',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'FreeResource',
                                                                                            'GlobalFindAtomW',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryA',
                                                                                            'GetVersionExA',
                                                                                            'MulDiv',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrlenW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAddAtomW',
                                                                                            'SetLastError',
                                                                                            'GlobalUnlock',
                                                                                            'VirtualProtect',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetVersion',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcmpA',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GlobalLock',
                                                                                            'lstrcmpW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'lstrcpyW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'GlobalAlloc',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GlobalFree',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GetLastError',
                                                                                            'CreateMutexW',
                                                                                            'GetTickCount',
                                                                                            'CloseHandle',
                                                                                            'DestroyMenu',
                                                                                            'GetDesktopWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendDlgItemMessageW',
                                                                                            'WinHelpW',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongPtrW',
                                                                                            'IsWindow',
                                                                                            'GetWindowTextW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'MapWindowPoints',
                                                                                            'UnregisterClassW',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'CopyRect',
                                                                                            'PtInRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindow',
                                                                                            'GetSysColor',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'TabbedTextOutW',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapW',
                                                                                            'ModifyMenuW',
                                                                                            'GetMenuState',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetLastActivePopup',
                                                                                            'MessageBoxW',
                                                                                            'SetCursor',
                                                                                            'SetPropW',
                                                                                            'GetCapture',
                                                                                            'SetActiveWindow',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'GetPropW',
                                                                                            'GetSysColorBrush',
                                                                                            'LoadCursorW',
                                                                                            'RemovePropW',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetFocus',
                                                                                            'SetFocus',
                                                                                            'GetWindowLongW',
                                                                                            'GetDlgItem',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageW',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'PostQuitMessage',
                                                                                            'LoadImageW',
                                                                                            'GetParent',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'LoadIconW',
                                                                                            'IsIconic',
                                                                                            'GetSystemMenu',
                                                                                            'AppendMenuW',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'DrawIcon',
                                                                                            'GetSystemMetrics',
                                                                                            'SetForegroundWindow',
                                                                                            'OpenIcon',
                                                                                            'PostMessageW',
                                                                                            'FindWindowW',
                                                                                            'UnregisterClassA',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'TextOutW',
                                                                                            'GetDeviceCaps',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'CreateBitmap',
                                                                                            'GetObjectW',
                                                                                            'DeleteObject',
                                                                                            'GetClipBox',
                                                                                            'SetMapMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'ExtTextOutW',
                                                                                            'DocumentPropertiesW',
                                                                                            'OpenPrinterW',
                                                                                            'ClosePrinter',
                                                                                            'RegEnumKeyW',
                                                                                            'RegQueryValueW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFindExtensionW',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'PropVariantClear',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 287,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 62200,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.pdata\x00\x00': 17920,
                                                                                       '.rdata\x00\x00': 76288,
                                                                                       '.rsrc\x00\x00\x00': 62464,
                                                                                       '.text\x00\x00\x00': 242688},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5087c7445e36ebb0a746a6961c39dd78d1d4ed8d2895e25abaae05413c3be8ea'},
 '5096df319af5515306f8a2c4ecc8dec38448c2c6fd6facf23627c351667eaec2': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwWriteFile',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwResumeThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetValueKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'HeapAlloc',
                                                                                            'GetVersion',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5096df319af5515306f8a2c4ecc8dec38448c2c6fd6facf23627c351667eaec2'},
 '50aadca76302e13145462a6c70559b52b0054310653619ee5ef12a002c90e88c': {'AddressOfEntryPoint': 1073819345,
                                                                      'DebugRVA': 4736,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventRegister',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CmnCliM.dll': 'CreateZoneShell',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'msvcrt.dll': '_amsg_exit',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'InitCommonControlsEx',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'CreateEventW',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'FreeLibrary',
                                                                                            'CloseHandle',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'CreateMutexW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteObject',
                                                                                            'SetForegroundWindow',
                                                                                            'FindWindowW',
                                                                                            'BringWindowToTop',
                                                                                            'ShowWindow',
                                                                                            'IsWindowVisible',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'DisplayFatalApplicationErrorMessage',
                                                                                            'CreateZoneShell'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 85064,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/50aadca76302e13145462a6c70559b52b0054310653619ee5ef12a002c90e88c'},
 '513b431da8a384449085183f8d90e36262fd77ffe01209c5a29f2fcc60507029': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 8335972,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 8336384,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/513b431da8a384449085183f8d90e36262fd77ffe01209c5a29f2fcc60507029'},
 '513e6f142cd61a2d3abc35735b35ba8681867b794ca9e511b33c6a4fcdb5b5de': {'AddressOfEntryPoint': 172132,
                                                                      'DebugRVA': 155824,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 155648,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortQuerySystemTime'},
                                                                      'ImportedFunctions': ['_vsnprintf',
                                                                                            'KeBugCheckEx',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortLogError',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortNotification',
                                                                                            'StorPortExtendedFunction',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortSetDeviceQueueDepth',
                                                                                            'StorPortGetLogicalUnit',
                                                                                            'StorPortSynchronizeAccess',
                                                                                            'StorPortAllocateRegistryBuffer',
                                                                                            'StorPortRegistryRead',
                                                                                            'StorPortFreeDeviceBase',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortQuerySystemTime'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 20,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 9656,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 9728,
                                                                                       '.text\x00\x00\x00': 151040,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/513e6f142cd61a2d3abc35735b35ba8681867b794ca9e511b33c6a4fcdb5b5de'},
 '514152828f6ecd9f0a5ee1698e79883ca97e39bb4dffeab7cfdd29b6495a2a0f': {'AddressOfEntryPoint': 1074702569,
                                                                      'DebugRVA': 666240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 906544,
                                                                      'ExportSize': 483,
                                                                      'IATRVA': 663552,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGetHashParam',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'USER32.dll': 'GetProcessWindowStation',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetDevCaps',
                                                                                      'WS2_32.dll': 'recv',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileW',
                                                                                            'RtlCaptureContext',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'SetInformationJobObject',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'SetHandleInformation',
                                                                                            'GetSystemInfo',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetThreadContext',
                                                                                            'VirtualProtectEx',
                                                                                            'VirtualFreeEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'FlushInstructionCache',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'RtlPcToFileHeader',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'CallMsgFilterW',
                                                                                            'CreateWindowStationW',
                                                                                            'KillTimer',
                                                                                            'CreateDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostMessageW',
                                                                                            'MessageBoxW',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CharUpperW',
                                                                                            'GetProcessWindowStation',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDestroyHash',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'GetProfileType',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'send',
                                                                                            'ntohs',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'recv',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime',
                                                                                            'timeGetDevCaps',
                                                                                            'CoTaskMemFree'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 292,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/514152828f6ecd9f0a5ee1698e79883ca97e39bb4dffeab7cfdd29b6495a2a0f'},
 '5161cdafd0c6d79616d775f79214b2e7e3ad13de71db63e9fa6bfc448ba4084b': {'AddressOfEntryPoint': 43360,
                                                                      'DebugRVA': 6272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'COMCTL32.dll': 'CreateStatusWindowW',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'CreateFileMappingW',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINTRUST.dll': 'CryptCATCatalogInfoFromContext',
                                                                                      'imagehlp.dll': 'MapFileAndCheckSumW',
                                                                                      'msvcrt.dll': 'free'},
                                                                      'ImportedFunctions': ['_wcmdln',
                                                                                            '__wgetmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_c_exit',
                                                                                            'exit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__dllonexit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_wcsicmp',
                                                                                            '_cexit',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler',
                                                                                            'malloc',
                                                                                            '__argc',
                                                                                            '__wargv',
                                                                                            'wcsrchr',
                                                                                            '_wcslwr',
                                                                                            'wcsstr',
                                                                                            '_fmode',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy',
                                                                                            'free',
                                                                                            'GetUserNameW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GetVersion',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemInfo',
                                                                                            'CopyFileW',
                                                                                            'lstrcpyW',
                                                                                            'lstrcmpW',
                                                                                            'lstrcatW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLastError',
                                                                                            'GlobalAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'IsBadReadPtr',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'lstrcpynW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetTempFileNameW',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'CreateMutexW',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingW',
                                                                                            'GetObjectW',
                                                                                            'GetStockObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'CharNextW',
                                                                                            'MessageBeep',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'InvalidateRect',
                                                                                            'ExitWindowsEx',
                                                                                            'GetClassNameW',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadIconW',
                                                                                            'GetClientRect',
                                                                                            'IsIconic',
                                                                                            'GetSystemMenu',
                                                                                            'PostMessageW',
                                                                                            'SendMessageW',
                                                                                            'AppendMenuW',
                                                                                            'EnableWindow',
                                                                                            'MessageBoxW',
                                                                                            'DrawIcon',
                                                                                            'wsprintfW',
                                                                                            'DragQueryFileW',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'PathFileExistsW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'CheckSumMappedFile',
                                                                                            'MapFileAndCheckSumW',
                                                                                            'CreateStatusWindowW',
                                                                                            'CryptCATAdminEnumCatalogFromHash',
                                                                                            'CryptCATAdminReleaseContext',
                                                                                            'CryptCATAdminAcquireContext',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATAdminReleaseCatalogContext',
                                                                                            'CryptCATCatalogInfoFromContext',
                                                                                            'NetUserGetInfo',
                                                                                            'NetApiBufferFree'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 24112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 24576,
                                                                                       '.text\x00\x00\x00': 49664},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5161cdafd0c6d79616d775f79214b2e7e3ad13de71db63e9fa6bfc448ba4084b'},
 '519dfc9e14f6480a1a1ec3ba7745367d77e4dd798685eb8211e3dc23417ff43f': {'AddressOfEntryPoint': 222316,
                                                                      'DebugRVA': 234288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 233472,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionUnbindClass',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'PoSetPowerState',
                                                                                            'IoDetachDevice',
                                                                                            'wcsstr',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionBindClass',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionUnbindClass'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 960,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 228352,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/519dfc9e14f6480a1a1ec3ba7745367d77e4dd798685eb8211e3dc23417ff43f'},
 '51af36f519a74c3f2d5b673f1ca48ea3f92d6c60a8ea81c4daff5096b05edcbc': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3440,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 533504,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/51af36f519a74c3f2d5b673f1ca48ea3f92d6c60a8ea81c4daff5096b05edcbc'},
 '528054a1dc69ce3038086b05c61ea7e4117057f5f21121ae1358ef0c1ce7b45e': {'AddressOfEntryPoint': 20656,
                                                                      'DebugRVA': 25680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'FindResourceW',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'GetMenuItemCount',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['wcsrchr',
                                                                                            'wcscpy',
                                                                                            'wcscat',
                                                                                            '_wtoi',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_itow',
                                                                                            'strcpy',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '__wgetmainargs',
                                                                                            '_wcsicmp',
                                                                                            'free',
                                                                                            'wcschr',
                                                                                            'wcslen',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_snwprintf',
                                                                                            'wcsncat',
                                                                                            'malloc',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'GetStartupInfoW',
                                                                                            'ReadProcessMemory',
                                                                                            'VirtualFreeEx',
                                                                                            'CreateRemoteThread',
                                                                                            'ResumeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'EnumResourceTypesW',
                                                                                            'GetLocalTime',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'EnumResourceNamesW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemTime',
                                                                                            'GetTempPathW',
                                                                                            'SizeofResource',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetFileAttributesW',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'FindResourceW',
                                                                                            'LoadMenuW',
                                                                                            'GetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowPos',
                                                                                            'LoadStringW',
                                                                                            'EnumChildWindows',
                                                                                            'DialogBoxParamW',
                                                                                            'CreateDialogParamW',
                                                                                            'GetParent',
                                                                                            'DestroyMenu',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetDC',
                                                                                            'MapWindowPoints',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetWindowRect',
                                                                                            'GetDlgItem',
                                                                                            'InvalidateRect',
                                                                                            'EndPaint',
                                                                                            'GetWindow',
                                                                                            'DrawFrameControl',
                                                                                            'SetWindowTextW',
                                                                                            'BeginPaint',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetClientRect',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'DeferWindowPos',
                                                                                            'SendMessageW',
                                                                                            'MessageBoxW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'EndDeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'LoadImageW',
                                                                                            'ReleaseDC',
                                                                                            'GetClassNameW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'GetMenuItemCount',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'GetOpenFileNameW',
                                                                                            'ShellExecuteW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 121,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 8556,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 17920},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/528054a1dc69ce3038086b05c61ea7e4117057f5f21121ae1358ef0c1ce7b45e'},
 '5295f2deee57b943be839c444d77b28e4dcab0627cf744bce2ef7d2515d3c7ae': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 325796,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 326144,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5295f2deee57b943be839c444d77b28e4dcab0627cf744bce2ef7d2515d3c7ae'},
 '52c3a44ae22f0dbb72cb2de5fa19a46c9eb4ee0d79887aa390438bf1f1d63871': {'AddressOfEntryPoint': 86024,
                                                                      'DebugRVA': 73888,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'ScsiPortNotification'},
                                                                      'ImportedFunctions': ['StorPortGetBusData',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortDeviceReady',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortLogError',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortNotification',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortCompleteRequest',
                                                                                            'StorPortReady',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortDeviceBusy',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortDebugPrint',
                                                                                            'ScsiPortNotification',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 66560,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/52c3a44ae22f0dbb72cb2de5fa19a46c9eb4ee0d79887aa390438bf1f1d63871'},
 '52f6e2401e4b1c6f91734b3dc20e10de648688de4a9f05dadc9c8e8931a64cd7': {'AddressOfEntryPoint': 1074002565,
                                                                      'DebugRVA': 189472,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 188416,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CreateFileA',
                                                                                      'VSSAPI.DLL': '?CreateVssBackupComponents@@YAJPEAPEAVIVssBackupComponents@@@Z',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CoInitializeSecurity',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            '?CreateVssBackupComponents@@YAJPEAPEAVIVssBackupComponents@@@Z',
                                                                                            'GetCPInfo',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetEvent',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'OpenProcess',
                                                                                            'GetOverlappedResult',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReadFile',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeviceIoControl',
                                                                                            'LoadLibraryA',
                                                                                            'GetTickCount',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapAlloc',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 101,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2492,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12800,
                                                                                       '.pdata\x00\x00': 11776,
                                                                                       '.rdata\x00\x00': 44544,
                                                                                       '.text\x00\x00\x00': 182272,
                                                                                       'A\x14\x04\x00c\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/52f6e2401e4b1c6f91734b3dc20e10de648688de4a9f05dadc9c8e8931a64cd7'},
 '5314ff1f49a498544f8d4d3afdbc8e3536a958e7ba75e5dac1b8ccd183b62126': {'AddressOfEntryPoint': 19200,
                                                                      'DebugRVA': 5104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'FindResourceExW',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'FindWindowW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['exit',
                                                                                            '_acmdln',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            'iswalpha',
                                                                                            'towupper',
                                                                                            'towlower',
                                                                                            'wcschr',
                                                                                            '_wcsdup',
                                                                                            'wprintf',
                                                                                            'wcsstr',
                                                                                            'memset',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'RegOpenKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'DuplicateTokenEx',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetSidSubAuthority',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'LoadLibraryA',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'lstrlenW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcpynW',
                                                                                            'lstrcpyW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcatW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'Sleep',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateMutexW',
                                                                                            'GetCurrentProcess',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'RtlCaptureContext',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetVersion',
                                                                                            'lstrcmpW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'OpenProcess',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceExW',
                                                                                            'DialogBoxParamW',
                                                                                            'ExitWindowsEx',
                                                                                            'CharNextW',
                                                                                            'PostMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'ShowWindow',
                                                                                            'EndDialog',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'FindWindowW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiCreateDeviceInfoW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiGetINFClassW',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'CM_Get_Device_ID_ExW',
                                                                                            'SetupDiGetDeviceInfoListDetailW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiGetClassDevsExW',
                                                                                            'SetupDiCreateDeviceInfoListExW',
                                                                                            'SetupDiClassGuidsFromNameExW',
                                                                                            'CM_Get_DevNode_Status_Ex',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'PathFileExistsW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 114,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5314ff1f49a498544f8d4d3afdbc8e3536a958e7ba75e5dac1b8ccd183b62126'},
 '5319d4e1f53c44803c2952361d555510324a06072dc3c1c13c98594bc70013d7': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2751520,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2752000,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5319d4e1f53c44803c2952361d555510324a06072dc3c1c13c98594bc70013d7'},
 '534437dbaf653a5eb9eeb7f50df6a105800ee722527a598cf222eb488a3a7095': {'AddressOfEntryPoint': 166544,
                                                                      'DebugRVA': 173680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 172032,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCP80.dll': '?_Myptr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IEAAPEAGXZ',
                                                                                      'MSVCR80.dll': '__CxxFrameHandler3',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathIsDirectoryW',
                                                                                      'USER32.dll': 'wsprintfW'},
                                                                      'ImportedFunctions': ['SetLastError',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'OutputDebugStringW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetFilePointer',
                                                                                            'FormatMessageW',
                                                                                            'VirtualQuery',
                                                                                            'IsBadWritePtr',
                                                                                            'GetCurrentThread',
                                                                                            'WriteFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'GetLastError',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'Sleep',
                                                                                            'SetEvent',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'RaiseException',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetCurrentProcessId',
                                                                                            'wvsprintfW',
                                                                                            'wsprintfW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFolderLocation',
                                                                                            'ShellExecuteW',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z',
                                                                                            '??_D?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAXXZ',
                                                                                            '?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KXZ',
                                                                                            '?str@?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ',
                                                                                            '??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@H@Z',
                                                                                            '??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PEBGAEBV10@@Z',
                                                                                            '??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@AEBV10@0@Z',
                                                                                            '??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@AEBV10@PEBG@Z',
                                                                                            '?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2_KB',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KAEBV12@_K@Z',
                                                                                            '?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBAHPEBG@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAPEBDXZ',
                                                                                            '?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z',
                                                                                            '?width@ios_base@std@@QEAA_J_J@Z',
                                                                                            '?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z',
                                                                                            '?eq_int_type@?$char_traits@G@std@@SA_NAEBG0@Z',
                                                                                            '?eof@?$char_traits@G@std@@SAGXZ',
                                                                                            '?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z',
                                                                                            '?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ',
                                                                                            '?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@PEBG@Z',
                                                                                            '?flags@ios_base@std@@QEBAHXZ',
                                                                                            '?width@ios_base@std@@QEBA_JXZ',
                                                                                            '?length@?$char_traits@G@std@@SA_KPEBG@Z',
                                                                                            '?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ',
                                                                                            '?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ',
                                                                                            '?good@ios_base@std@@QEBA_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAXXZ',
                                                                                            '??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@PEBG@Z',
                                                                                            '?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@_K0@Z',
                                                                                            '?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@V32@0@Z',
                                                                                            '?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ',
                                                                                            '?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ',
                                                                                            '??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NAEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z',
                                                                                            '?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA?AV12@_K0@Z',
                                                                                            '?str@?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z',
                                                                                            '??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NAEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z',
                                                                                            '?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@_K0PEBG@Z',
                                                                                            '?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBAHAEBV12@@Z',
                                                                                            '??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAG_K@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KAEBV12@_K@Z',
                                                                                            '?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KAEBV12@_K@Z',
                                                                                            '??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NAEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PEBG@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPEBGAEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z',
                                                                                            '?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KXZ',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z',
                                                                                            '??$?6GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAEAV?$basic_ostream@GU?$char_traits@G@std@@@0@AEAV10@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z',
                                                                                            '?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_NXZ',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z',
                                                                                            '?endl@std@@YAAEAV?$basic_ostream@GU?$char_traits@G@std@@@1@AEAV21@@Z',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z',
                                                                                            '?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBAPEBGXZ',
                                                                                            '??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@PEBG@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '?wcout@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ',
                                                                                            '?_Myptr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IEAAPEAGXZ',
                                                                                            '_waccess',
                                                                                            '_wchmod',
                                                                                            '_wrmdir',
                                                                                            'wcscmp',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            'towupper',
                                                                                            'towlower',
                                                                                            'wcsrchr',
                                                                                            'memset',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'mbstowcs_s',
                                                                                            'wcstombs_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'wcscpy',
                                                                                            'wcsncpy',
                                                                                            '_wstrtime',
                                                                                            '_wstrdate',
                                                                                            'wcschr',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_errno',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '_CxxThrowException',
                                                                                            '_vswprintf',
                                                                                            'getchar',
                                                                                            'wprintf',
                                                                                            'wcsstr',
                                                                                            '_wtoi',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'PathIsDirectoryW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 190,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 21472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 18432,
                                                                                       '.pdata\x00\x00': 15360,
                                                                                       '.rdata\x00\x00': 144384,
                                                                                       '.rsrc\x00\x00\x00': 21504,
                                                                                       '.text\x00\x00\x00': 164864},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/534437dbaf653a5eb9eeb7f50df6a105800ee722527a598cf222eb488a3a7095'},
 '535885cccbbc206bc77bec26a8cf2cc70dc2fc005b0daa46b347083931894b45': {'AddressOfEntryPoint': 97255,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 95816,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltGetVolumeContext',
                                                                                      'hal.dll': 'HalMakeBeep',
                                                                                      'ntoskrnl.exe': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['RtlCompareUnicodeString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            'KeResetEvent',
                                                                                            'IoIs32bitProcess',
                                                                                            'KeWaitForSingleObject',
                                                                                            'ExAcquireResourceSharedLite',
                                                                                            'KeDelayExecutionThread',
                                                                                            'PsCreateSystemThread',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ZwClose',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'strstr',
                                                                                            'strncmp',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'PsGetCurrentThreadId',
                                                                                            'RtlFreeAnsiString',
                                                                                            '_vsnprintf',
                                                                                            'FsRtlIsNameInExpression',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'IoThreadToProcess',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExInitializeResourceLite',
                                                                                            'ObfDereferenceObject',
                                                                                            'ExDeleteResourceLite',
                                                                                            'ExReleaseResourceLite',
                                                                                            'IoGetCurrentProcess',
                                                                                            'wcsstr',
                                                                                            'IoVolumeDeviceToDosName',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PsSetCreateProcessNotifyRoutine',
                                                                                            'PsSetCreateThreadNotifyRoutine',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PsRemoveCreateThreadNotifyRoutine',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeSetEvent',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            '__C_specific_handler',
                                                                                            '_local_unwind',
                                                                                            'FltParseFileNameInformation',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltIsDirectory',
                                                                                            'FltCancelFileOpen',
                                                                                            'FltSetVolumeContext',
                                                                                            'FltStartFiltering',
                                                                                            'FltRegisterFilter',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltGetVolumeName',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltAllocateContext',
                                                                                            'FltReleaseContext',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltGetVolumeProperties',
                                                                                            'FltGetDiskDeviceObject',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltCloseClientPort',
                                                                                            'FltGetVolumeContext',
                                                                                            'DbgPrint',
                                                                                            'IoAllocateMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmUnlockPages',
                                                                                            'IoFreeMdl',
                                                                                            'ExAllocatePool',
                                                                                            'ExFreePool',
                                                                                            'NtQuerySystemInformation',
                                                                                            'HalMakeBeep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 28672,
                                                                                       '.vmp0\x00\x00\x00': 512,
                                                                                       '.vmp1\x00\x00\x00': 5120,
                                                                                       '.vmp2\x00\x00\x00': 19456,
                                                                                       'INIT\x00\x00\x00\x00': 3584,
                                                                                       'PAGE\x00\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/535885cccbbc206bc77bec26a8cf2cc70dc2fc005b0daa46b347083931894b45'},
 '538d982b1151cb6e367f5c3a27a02c4d8c8ec0c467d7dcd50df5d7b97aaef0db': {'AddressOfEntryPoint': 140288,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueA',
                                                                                      'KERNEL32.dll': 'LCMapStringA',
                                                                                      'SETUPAPI.dll': 'SetupDiEnumDeviceInfo',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['SetupDiGetClassDevsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'OpenFile',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'FormatMessageA',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'lstrlenA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileA',
                                                                                            'GetCommandLineA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'MessageBoxA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'SHFileOperationA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 960,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 77312,
                                                                                       '.text\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/538d982b1151cb6e367f5c3a27a02c4d8c8ec0c467d7dcd50df5d7b97aaef0db'},
 '53d7a3530e71c5c0d5a1e8fd9456ee6a49e39dbbed6b19044a6b15855b8c0b3c': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 295948,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 296448,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/53d7a3530e71c5c0d5a1e8fd9456ee6a49e39dbbed6b19044a6b15855b8c0b3c'},
 '53d8fb74b81b035f85ac1336ee841988b512682f1e46eb843c33185a3280f7c1': {'AddressOfEntryPoint': 12744,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHLWAPI.dll': 'StrCmpW'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'OpenProcess',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'StrCmpW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 36352},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/53d8fb74b81b035f85ac1336ee841988b512682f1e46eb843c33185a3280f7c1'},
 '53e2b6a7f41c6479a40ee20a0048b0e0f851b85c051a38972efb06cf065430e5': {'AddressOfEntryPoint': 1073906971,
                                                                      'DebugRVA': 62672,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 9,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'RtlCaptureContext',
                                                                                      'MSVCR90.dll': '_close',
                                                                                      'mspdb80.dll': '?Open2W@PDB@@SAHPEBGPEBDPEAJPEAG_KPEAPEAU1@@Z'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'SetLastError',
                                                                                            'GetSystemInfo',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetVersion',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CloseHandle',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'ReleaseMutex',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'LoadLibraryExW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetLastError',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'SetFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileTime',
                                                                                            'CreateFileW',
                                                                                            'GetModuleFileNameW',
                                                                                            'VirtualQuery',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'HeapSetInformation',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            'RtlCaptureContext',
                                                                                            'fgetwc',
                                                                                            'ftell',
                                                                                            '_wutime64',
                                                                                            'exit',
                                                                                            '_wunlink',
                                                                                            'swprintf_s',
                                                                                            'memcpy_s',
                                                                                            '_wpgmptr',
                                                                                            'wcsncpy_s',
                                                                                            'swscanf_s',
                                                                                            '_itow_s',
                                                                                            'wcsncat_s',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            '_wcserror_s',
                                                                                            'fseek',
                                                                                            '_errno',
                                                                                            '_wsopen_s',
                                                                                            '_wfsopen',
                                                                                            '_read',
                                                                                            '_wgetcwd',
                                                                                            'memmove',
                                                                                            'setlocale',
                                                                                            'wcschr',
                                                                                            'wcsrchr',
                                                                                            'towlower',
                                                                                            'iswlower',
                                                                                            'iswupper',
                                                                                            'iswalpha',
                                                                                            '_wfindfirst64i32',
                                                                                            '_wfindnext64i32',
                                                                                            '_findclose',
                                                                                            'towupper',
                                                                                            'wcscspn',
                                                                                            'free',
                                                                                            'strcpy_s',
                                                                                            'calloc',
                                                                                            'realloc',
                                                                                            '_get_osfhandle',
                                                                                            '_fileno',
                                                                                            '__iob_func',
                                                                                            'fflush',
                                                                                            'vfwprintf',
                                                                                            '_vcwprintf',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_wcsicmp',
                                                                                            'memcpy',
                                                                                            'signal',
                                                                                            '_snwprintf_s',
                                                                                            'wcscat_s',
                                                                                            '_wstat64i32',
                                                                                            'wcscpy_s',
                                                                                            'memset',
                                                                                            '_close',
                                                                                            '?open@NameMap@@SAHPEAUPDB@@HPEAPEAU1@@Z',
                                                                                            '?Open2W@PDB@@SAHPEBGPEBDPEAJPEAG_KPEAPEAU1@@Z'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 134,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 6824,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/53e2b6a7f41c6479a40ee20a0048b0e0f851b85c051a38972efb06cf065430e5'},
 '542afb77433a3fe19788642e90f3a675fe7040e7283aab5e93266df398c65eae': {'AddressOfEntryPoint': 33228,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['GetModuleBaseNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'GetStringTypeW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetLastError',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'lstrcpyW',
                                                                                            'FlsGetValue',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'MessageBoxW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 17920,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 56832},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/542afb77433a3fe19788642e90f3a675fe7040e7283aab5e93266df398c65eae'},
 '5480b04b18624c10222fd5bf67a19e4ec6b606561e477b928e80c7211532c79a': {'AddressOfEntryPoint': 21182,
                                                                      'DebugRVA': 25312,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'jli.dll': 'JLI_MemFree',
                                                                                      'msvcrt.dll': '_strnicmp'},
                                                                      'ImportedFunctions': ['JLI_ExactVersionId',
                                                                                            'JLI_JarUnpackFile',
                                                                                            'JLI_StringDup',
                                                                                            'JLI_ParseManifest',
                                                                                            'JLI_ValidVersionString',
                                                                                            'JLI_AcceptableRelease',
                                                                                            'JLI_FreeManifest',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_MemFree',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            '_beginthreadex',
                                                                                            '_putenv',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'fflush',
                                                                                            '_errno',
                                                                                            'strerror',
                                                                                            'strchr',
                                                                                            'fgets',
                                                                                            'strcspn',
                                                                                            'strspn',
                                                                                            'strrchr',
                                                                                            'fopen',
                                                                                            'fwrite',
                                                                                            'fread',
                                                                                            'fclose',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'memset',
                                                                                            'getenv',
                                                                                            'strcmp',
                                                                                            'exit',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'printf',
                                                                                            'sprintf',
                                                                                            'memcpy',
                                                                                            'strncmp',
                                                                                            'sscanf',
                                                                                            'strlen',
                                                                                            '_access',
                                                                                            '_stat',
                                                                                            '_strnicmp',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'LocalFree',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetExitCodeProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetExitCodeThread',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 17408},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5480b04b18624c10222fd5bf67a19e4ec6b606561e477b928e80c7211532c79a'},
 '5481e9586cd65b71cace4a3d25af4eb5e77f431066ff72e01b772a67635032c4': {'AddressOfEntryPoint': 29536,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'BitBlt',
                                                                                      'KERNEL32.dll': 'UnmapViewOfFile',
                                                                                      'SHLWAPI.dll': 'PathFileExistsA',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterA'},
                                                                      'ImportedFunctions': ['lstrlenA',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLastError',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetLastError',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GetCurrentThread',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'GlobalFree',
                                                                                            'GetVersionExA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrcpynA',
                                                                                            'lstrcatA',
                                                                                            'GlobalFindAtomA',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GetVersion',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'lstrcpyA',
                                                                                            'GlobalFlags',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'LeaveCriticalSection',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'LocalReAlloc',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsFree',
                                                                                            'GetProcessVersion',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'SetErrorMode',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteFile',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetACP',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'GetLocaleInfoA',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'SetStdHandle',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'OpenFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'OpenEventA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ReleaseMutex',
                                                                                            'CloseHandle',
                                                                                            'GlobalUnlock',
                                                                                            'UnmapViewOfFile',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'IsWindowVisible',
                                                                                            'GetActiveWindow',
                                                                                            'CallNextHookEx',
                                                                                            'SetWindowsHookExA',
                                                                                            'LoadBitmapA',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'GetMenuState',
                                                                                            'ModifyMenuA',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetFocus',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'GetWindowTextA',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetFocus',
                                                                                            'SetWindowPos',
                                                                                            'GetWindow',
                                                                                            'CopyRect',
                                                                                            'GetWindowPlacement',
                                                                                            'CallWindowProcA',
                                                                                            'GetClassInfoA',
                                                                                            'wsprintfA',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMessageA',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetSubMenu',
                                                                                            'GetMenu',
                                                                                            'GetSysColor',
                                                                                            'UpdateWindow',
                                                                                            'MapWindowPoints',
                                                                                            'GetTopWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetMessagePos',
                                                                                            'GetMessageTime',
                                                                                            'GetWindowLongPtrA',
                                                                                            'RemovePropA',
                                                                                            'GetPropA',
                                                                                            'SetPropA',
                                                                                            'GetClassLongA',
                                                                                            'CreateWindowExA',
                                                                                            'WinHelpA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'TabbedTextOutA',
                                                                                            'DrawTextA',
                                                                                            'GrayStringA',
                                                                                            'ClientToScreen',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetClassNameA',
                                                                                            'PtInRect',
                                                                                            'GetSysColorBrush',
                                                                                            'DestroyMenu',
                                                                                            'PeekMessageA',
                                                                                            'GetWindowLongA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'SetCursor',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetKeyState',
                                                                                            'GetMenuItemID',
                                                                                            'ValidateRect',
                                                                                            'MonitorFromRect',
                                                                                            'MoveWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetMonitorInfoA',
                                                                                            'FindWindowA',
                                                                                            'GetCapture',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'SetRect',
                                                                                            'FillRect',
                                                                                            'GetParent',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxA',
                                                                                            'OpenClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'IsWindow',
                                                                                            'MapVirtualKeyA',
                                                                                            'ScreenToClient',
                                                                                            'DefWindowProcA',
                                                                                            'GetCursorPos',
                                                                                            'SetCursorPos',
                                                                                            'GetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SystemParametersInfoA',
                                                                                            'SetActiveWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'PostQuitMessage',
                                                                                            'GetSystemMetrics',
                                                                                            'GetAsyncKeyState',
                                                                                            'LoadStringA',
                                                                                            'EnableWindow',
                                                                                            'LoadIconA',
                                                                                            'GetClientRect',
                                                                                            'GetWindowRect',
                                                                                            'IsIconic',
                                                                                            'DrawIcon',
                                                                                            'RegisterClassA',
                                                                                            'LoadCursorA',
                                                                                            'AttachThreadInput',
                                                                                            'SendInput',
                                                                                            'SendNotifyMessageA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'SendMessageA',
                                                                                            'PostMessageA',
                                                                                            'UnregisterClassA',
                                                                                            'SaveDC',
                                                                                            'GetObjectA',
                                                                                            'SelectObject',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'RestoreDC',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'Escape',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'SetMapMode',
                                                                                            'GetStockObject',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'CreatePen',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'BitBlt',
                                                                                            'PathFileExistsA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 274,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 29968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 44544,
                                                                                       '.rsrc\x00\x00\x00': 30208,
                                                                                       '.text\x00\x00\x00': 110592},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5481e9586cd65b71cace4a3d25af4eb5e77f431066ff72e01b772a67635032c4'},
 '54940ef6bc662a3cb3ad5c9155e28a8c459ac919497aa9dc123e5e1af7379b34': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/54940ef6bc662a3cb3ad5c9155e28a8c459ac919497aa9dc123e5e1af7379b34'},
 '54a018f57390ca007adcec44a49e510ab0cf78e4e9698fb9daaa3fc07cfa18f4': {'AddressOfEntryPoint': 225914,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 233472,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 4232,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetNumberOfEventLogRecords',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersInfo',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'MSVCR80.dll': '_encode_pointer',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SETUPAPI.dll': 'SetupDiEnumDeviceInterfaces',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminCalcHashFromFileHandle',
                                                                                      'mscoree.dll': 'GetHashFromFileW',
                                                                                      'msvcm80.dll': '?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['__FrameUnwindFilter',
                                                                                            '_time64',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'sprintf',
                                                                                            'memmove',
                                                                                            'strncmp',
                                                                                            'strchr',
                                                                                            'atol',
                                                                                            'atoi',
                                                                                            '_strtoui64',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_strupr',
                                                                                            'strrchr',
                                                                                            '_gmtime32_s',
                                                                                            '_wcsupr',
                                                                                            'wcsncmp',
                                                                                            'wcstombs',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '__crt_debugger_hook',
                                                                                            'memset',
                                                                                            '_CxxThrowException',
                                                                                            '_strnicmp',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_configthreadlocale',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '__set_app_type',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '__CxxUnregisterExceptionObject',
                                                                                            '__CxxQueryExceptionSize',
                                                                                            '__CxxDetectRethrow',
                                                                                            '__CxxRegisterExceptionObject',
                                                                                            '__CxxExceptionFilter',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'memcmp',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            '_encode_pointer',
                                                                                            'RegCloseKey',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetThreadToken',
                                                                                            'RevertToSelf',
                                                                                            'OpenThreadToken',
                                                                                            'CloseEventLog',
                                                                                            'ReadEventLogA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'OpenEventLogA',
                                                                                            'GetNumberOfEventLogRecords',
                                                                                            'CloseHandle',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Module32First',
                                                                                            'GetProcAddress',
                                                                                            'Module32Next',
                                                                                            'EnumResourceNamesA',
                                                                                            'Sleep',
                                                                                            'CreateEventA',
                                                                                            'ExitProcess',
                                                                                            'SetEvent',
                                                                                            'GetExitCodeThread',
                                                                                            'TerminateThread',
                                                                                            'CreateThread',
                                                                                            'VirtualFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'LocalFree',
                                                                                            'GlobalAlloc',
                                                                                            'CreateFileA',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'GlobalFree',
                                                                                            'LoadLibraryA',
                                                                                            'RtlAddFunctionTable',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'RtlDeleteFunctionTable',
                                                                                            'FreeLibrary',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLastError',
                                                                                            'GetSystemInfo',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThread',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetModuleHandleA',
                                                                                            'VirtualAlloc',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetErrorInfo',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'VariantClear',
                                                                                            '?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$AAVEventHandler@System@@@Z',
                                                                                            '?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ',
                                                                                            '?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z',
                                                                                            '__setusermatherr_m',
                                                                                            '?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@@Z',
                                                                                            '?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVException@System@@0@Z',
                                                                                            '?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z',
                                                                                            '_CorExeMain',
                                                                                            'GetHashFromFileW',
                                                                                            'CryptCATAdminEnumCatalogFromHash',
                                                                                            'CryptCATAdminAcquireContext',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATAdminReleaseContext',
                                                                                            'CryptCATAdminReleaseCatalogContext',
                                                                                            'CryptCATCatalogInfoFromContext',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertCloseStore',
                                                                                            'CryptMsgClose',
                                                                                            'CryptQueryObject',
                                                                                            'CertGetNameStringA',
                                                                                            'CryptDecodeObject',
                                                                                            'CryptMsgGetParam',
                                                                                            'CertFreeCertificateContext',
                                                                                            'GetAdaptersInfo',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CommandLineToArgvW',
                                                                                            'SetupDiClassNameFromGuidA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInterfaceDetailA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 180,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 34932,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.nep\x00\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 111616,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 35328,
                                                                                       '.text\x00\x00\x00': 223232},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/54a018f57390ca007adcec44a49e510ab0cf78e4e9698fb9daaa3fc07cfa18f4'},
 '54b9b8c9c1fe79d6a279ecdaf4ad8bf21e15e2ba93933bc43821ffb362b81ac5': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9660,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 9728,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/54b9b8c9c1fe79d6a279ecdaf4ad8bf21e15e2ba93933bc43821ffb362b81ac5'},
 '54c1e4ccf229be4378be24b10ecaaab4516072e020ecaef78742c5cba6d233c1': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 157260,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 157696,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/54c1e4ccf229be4378be24b10ecaaab4516072e020ecaef78742c5cba6d233c1'},
 '54c8cc1327e27d1bdeeec44614e02ee6337ca51b558f954d9f14f47f704d8a96': {'AddressOfEntryPoint': 1789960,
                                                                      'DebugRVA': 1524288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1523712,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 896,
                                                                      'SectionNames': {'.aot\x00\x00\x00\x00': 47616,
                                                                                       '.data\x00\x00\x00': 53760,
                                                                                       '.pdata\x00\x00': 50688,
                                                                                       '.rdata\x00\x00': 153088,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 1458688,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'init\x00\x00\x00\x00': 512,
                                                                                       'page\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/54c8cc1327e27d1bdeeec44614e02ee6337ca51b558f954d9f14f47f704d8a96'},
 '550e925fc282785456ddedf5d71030191f05d2351c6bc156df9df4753878e90d': {'AddressOfEntryPoint': 1074541625,
                                                                      'DebugRVA': 608400,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 606208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CreateProcessAsUserW',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathAddBackslashW',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'WTSAPI32.dll': 'WTSEnumerateSessionsW',
                                                                                      'nvWmiShim.dll': '?setMonitorPower@ApiShim@@SA_NJ@Z',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['?setMonitorHwnd@ApiShim@@SA_NPEAUHWND__@@@Z',
                                                                                            '??1ApiShim@@QEAA@XZ',
                                                                                            '?getDisplays@ApiShim@@QEBAQEAPEAVIDisplayShim@@XZ',
                                                                                            '?getDisplayCount@ApiShim@@QEBAKXZ',
                                                                                            '??0ApiShim@@QEAA@XZ',
                                                                                            '?getDisplaySourceCount@ApiShim@@QEBAKXZ',
                                                                                            '?getDisplayGridManager@ApiShim@@QEBAPEAVIDisplayGridManager@@XZ',
                                                                                            '?setnView@ApiShim@@SAX_N@Z',
                                                                                            '?getnView@ApiShim@@SA_NXZ',
                                                                                            '?getGpuCount@ApiShim@@QEBAKXZ',
                                                                                            '?getGsyncCount@ApiShim@@QEBAKXZ',
                                                                                            '?getDisplayPathInfo@ApiShim@@QEBAPEAVIDisplayPathShim@@XZ',
                                                                                            '?getDisplayDriverVer@ApiShim@@QEBAKXZ',
                                                                                            '?getGpus@ApiShim@@QEBAQEAPEAVIGpuShim@@XZ',
                                                                                            '?getGsyncDevices@ApiShim@@QEBAQEAPEAVIGSyncShim@@XZ',
                                                                                            '?getSdiDevices@ApiShim@@QEBAQEAPEAVISdiShim@@XZ',
                                                                                            '?getDrs@ApiShim@@QEBAPEBVIDrsShim@@XZ',
                                                                                            '?getCooler@ApiShim@@QEBAQEAPEAVICoolerShim@@XZ',
                                                                                            '?getThermal@ApiShim@@QEBAQEAPEAVIThermalShim@@XZ',
                                                                                            '?getBoards@ApiShim@@QEBAQEAPEAVIBoardShim@@XZ',
                                                                                            '?getBoardCount@ApiShim@@QEBAKXZ',
                                                                                            '?registerEvents@@YA?AW4NvWMI_Status@@AEAUSCallbackTable@@@Z',
                                                                                            '?unregisterEvents@@YA?AW4NvWMI_Status@@XZ',
                                                                                            '?getDisplayTargetCount@ApiShim@@QEBAKI@Z',
                                                                                            '?getSdiCount@ApiShim@@QEBAKXZ',
                                                                                            '?getDrsMutable@ApiShim@@QEAAPEAVIDrsShim@@XZ',
                                                                                            '?setMonitorPower@ApiShim@@SA_NJ@Z',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'ReadFile',
                                                                                            'ReleaseMutex',
                                                                                            'SetEvent',
                                                                                            'OpenEventW',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'SignalObjectAndWait',
                                                                                            'ResetEvent',
                                                                                            'OpenProcess',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemDirectoryW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'GetModuleHandleW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersionExW',
                                                                                            'FormatMessageW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'CompareStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FatalAppExitA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'LoadLibraryW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapReAlloc',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'lstrlenA',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'OutputDebugStringW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'DefWindowProcW',
                                                                                            'LoadStringW',
                                                                                            'DestroyWindow',
                                                                                            'PostMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'GetMessageW',
                                                                                            'ShowWindow',
                                                                                            'DeleteService',
                                                                                            'QueryServiceStatus',
                                                                                            'ControlService',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'CreateServiceW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'SetTokenInformation',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysStringByteLen',
                                                                                            'VariantChangeType',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayCreateVector',
                                                                                            'GetErrorInfo',
                                                                                            'PathAppendW',
                                                                                            'PathAddBackslashW',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSEnumerateSessionsW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 189,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1464,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/550e925fc282785456ddedf5d71030191f05d2351c6bc156df9df4753878e90d'},
 '553abcc0d38d5476bcf867fb031913c4a89192fee1e239e416fdf7ae6d46c545': {'AddressOfEntryPoint': 21520,
                                                                      'DebugRVA': 120160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 118784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'LoadTypeLibEx',
                                                                                      'RPCRT4.dll': 'UuidCreateSequential',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'SetWindowPos',
                                                                                      'WS2_32.dll': 'WSARecv',
                                                                                      'ntdll.dll': '__chkstk',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ZwCreateSection',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'LdrFindEntryForAddress',
                                                                                            'RtlImageNtHeader',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'sprintf',
                                                                                            'ZwMapViewOfSection',
                                                                                            'RtlInitUnicodeString',
                                                                                            'wcscpy',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'memcmp',
                                                                                            'ZwFlushKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'ZwOpenTimer',
                                                                                            'ZwSetTimer',
                                                                                            'ZwDeleteFile',
                                                                                            'memcpy',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'ZwWriteFile',
                                                                                            'strtoul',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'memset',
                                                                                            'LdrUnloadDll',
                                                                                            'LdrAddRefDll',
                                                                                            'ZwRaiseHardError',
                                                                                            'wcsstr',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'LdrLoadDll',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwClose',
                                                                                            'ZwQueryKey',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'ZwOpenKey',
                                                                                            'RtlComputeCrc32',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenProcess',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'ZwSetInformationToken',
                                                                                            'ZwDuplicateToken',
                                                                                            'ZwAdjustPrivilegesToken',
                                                                                            'ZwOpenThreadTokenEx',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwReadVirtualMemory',
                                                                                            'wcschr',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlGetCurrentPeb',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'strlen',
                                                                                            'ZwSetInformationFile',
                                                                                            '__chkstk',
                                                                                            'ExitThread',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'WideCharToMultiByte',
                                                                                            'CopyFileW',
                                                                                            'CreateProcessW',
                                                                                            'SetThreadLocale',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersion',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'MD5Update',
                                                                                            'MD5Final',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'MD5Init',
                                                                                            'DialogBoxParamW',
                                                                                            'PostMessageW',
                                                                                            'FindWindowW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SendMessageW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetClientRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExW',
                                                                                            'AdjustWindowRect',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'OpenDesktopW',
                                                                                            'SetThreadDesktop',
                                                                                            'DestroyIcon',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetMessageW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'SetWindowPos',
                                                                                            'UuidCreateSequential',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'LoadTypeLibEx',
                                                                                            'WSARecvFrom',
                                                                                            'WSASendTo',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSASocketW',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'WSAIoctl',
                                                                                            'WSASend',
                                                                                            'WSARecv'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 10104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 111104},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/553abcc0d38d5476bcf867fb031913c4a89192fee1e239e416fdf7ae6d46c545'},
 '554c9b195c6a702569600de1148e3e5461fc92c75b45aed98e7d70218eb02df5': {'AddressOfEntryPoint': 3221237964,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['GetWindowsDirectoryA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'WinExec',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'wsprintfA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/554c9b195c6a702569600de1148e3e5461fc92c75b45aed98e7d70218eb02df5'},
 '5556dedde7d7dc3b27850c53031c2b9f918d6ff410840665f54db122042475a7': {'AddressOfEntryPoint': 180536,
                                                                      'DebugRVA': 756104,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 757760,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'GDI32.dll': 'ExtTextOutW',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'POWRPROF.dll': 'GetPwrCapabilities',
                                                                                      'PROPSYS.dll': 'PropVariantToStringAlloc',
                                                                                      'RPCRT4.dll': 'RpcBindingFromStringBindingW',
                                                                                      'SHELL32.dll': 'SHCreateItemFromParsingName',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'GetClassNameW',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'dwmapi.dll': 'DwmUnregisterThumbnail',
                                                                                      'gdiplus.dll': 'GdipSetCompositingMode',
                                                                                      'msvcrt.dll': 'sin',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess',
                                                                                      'ole32.dll': 'CoCreateFreeThreadedMarshaler',
                                                                                      'slc.dll': 'SLGetWindowsInformationDWORD'},
                                                                      'ImportedFunctions': ['RegCreateKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'EventWrite',
                                                                                            'EventEnabled',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegQueryValueExW',
                                                                                            'GetLengthSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'TraceMessage',
                                                                                            'RegOpenKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'LsaOpenPolicy',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'LsaClose',
                                                                                            'IsValidSid',
                                                                                            'LsaFreeMemory',
                                                                                            'StartTraceW',
                                                                                            'EnableTraceEx',
                                                                                            'StopTraceW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'StartServiceW',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegEnumKeyExW',
                                                                                            'GetSidSubAuthority',
                                                                                            'LsaLookupSids',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CheckTokenMembership',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenThreadToken',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LoadLibraryExA',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'FlushInstructionCache',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'OpenThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleW',
                                                                                            'OpenEventW',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetLongPathNameW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetStartupInfoW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'VirtualFree',
                                                                                            'lstrcmpiW',
                                                                                            'CompareStringOrdinal',
                                                                                            'FindFirstFileW',
                                                                                            'SetErrorMode',
                                                                                            'CreateEventW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WaitForSingleObject',
                                                                                            'SetTermsrvAppInstallMode',
                                                                                            'GetFileAttributesW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MulDiv',
                                                                                            'GetTickCount64',
                                                                                            'GetThreadPriority',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetTickCount',
                                                                                            'GetUserDefaultLangID',
                                                                                            'ExitProcess',
                                                                                            'HeapDestroy',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'GetDynamicTimeZoneInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetBinaryTypeW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueueUserWorkItem',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProductInfo',
                                                                                            'TerminateThread',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'LoadLibraryA',
                                                                                            'DeleteFileW',
                                                                                            'GetProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'lstrcmpA',
                                                                                            'CompareFileTime',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'CreateFileMappingW',
                                                                                            'ResetEvent',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalFree',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetComputerNameW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateProcessW',
                                                                                            'lstrlenW',
                                                                                            'OpenProcess',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'QueryInformationJobObject',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetPriorityClass',
                                                                                            'ResumeThread',
                                                                                            'AssignProcessToJobObject',
                                                                                            'SetInformationJobObject',
                                                                                            'GetLastError',
                                                                                            'CreateJobObjectW',
                                                                                            'CloseHandle',
                                                                                            'LPtoDP',
                                                                                            'GetRgnBox',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'GetStockObject',
                                                                                            'GdiFlush',
                                                                                            'CombineRgn',
                                                                                            'OffsetRgn',
                                                                                            'SetLayout',
                                                                                            'SetWindowOrgEx',
                                                                                            'StretchBlt',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreatePen',
                                                                                            'Polyline',
                                                                                            'GetRegionData',
                                                                                            'GetTextColor',
                                                                                            'GetLayout',
                                                                                            'GetTextMetricsW',
                                                                                            'ExtCreateRegion',
                                                                                            'SetDIBits',
                                                                                            'SelectClipRgn',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetViewportOrgEx',
                                                                                            'IntersectClipRect',
                                                                                            'GetClipRgn',
                                                                                            'CreateRectRgn',
                                                                                            'GetBkColor',
                                                                                            'PatBlt',
                                                                                            'CreateBitmap',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetTextExtentPointW',
                                                                                            'GetClipBox',
                                                                                            'GetObjectW',
                                                                                            'GdiAlphaBlend',
                                                                                            'BitBlt',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'ExtTextOutW',
                                                                                            'CopyRect',
                                                                                            'SetRect',
                                                                                            'CreateWindowExW',
                                                                                            'DialogBoxParamW',
                                                                                            'GetClassInfoW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemCount',
                                                                                            'DefWindowProcW',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'GetCursorPos',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuStringW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'InsertMenuItemW',
                                                                                            'IsChild',
                                                                                            'IsWinEventHookInstalled',
                                                                                            'IsProcessDPIAware',
                                                                                            'IsRectEmpty',
                                                                                            'UnionRect',
                                                                                            'GetClassLongW',
                                                                                            'SetClassLongW',
                                                                                            'GetGUIThreadInfo',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MoveWindow',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'GetWindowDC',
                                                                                            'CharUpperW',
                                                                                            'UnregisterClassW',
                                                                                            'FrameRect',
                                                                                            'WindowFromDC',
                                                                                            'SendMessageCallbackW',
                                                                                            'UpdateLayeredWindow',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'ShowWindowAsync',
                                                                                            'BringWindowToTop',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetIconInfo',
                                                                                            'RegisterShellHookWindow',
                                                                                            'DeregisterShellHookWindow',
                                                                                            'FlashWindowEx',
                                                                                            'SetThreadDesktop',
                                                                                            'EndTask',
                                                                                            'OpenInputDesktop',
                                                                                            'CloseDesktop',
                                                                                            'GetMenuState',
                                                                                            'IsZoomed',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollPos',
                                                                                            'InternalGetWindowText',
                                                                                            'GetWindowInfo',
                                                                                            'GetCaretBlinkTime',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'GetLayeredWindowAttributes',
                                                                                            'GetUpdateRect',
                                                                                            'SetWindowsHookExW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'CallNextHookEx',
                                                                                            'SetFocus',
                                                                                            'GetAncestor',
                                                                                            'ReleaseCapture',
                                                                                            'GetDoubleClickTime',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetRectEmpty',
                                                                                            'EnumDisplayMonitors',
                                                                                            'InflateRect',
                                                                                            'EqualRect',
                                                                                            'UpdateWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'MonitorFromRect',
                                                                                            'CharPrevW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetMenuDefaultItem',
                                                                                            'SendNotifyMessageW',
                                                                                            'LockSetForegroundWindow',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'IntersectRect',
                                                                                            'MonitorFromWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetForegroundWindow',
                                                                                            'EnumWindows',
                                                                                            'GetParent',
                                                                                            'IsWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'WaitMessage',
                                                                                            'GetWindowTextW',
                                                                                            'GetClientRect',
                                                                                            'TrackPopupMenuEx',
                                                                                            'SetActiveWindow',
                                                                                            'GetKeyState',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SubtractRect',
                                                                                            'RedrawWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'InvalidateRect',
                                                                                            'OffsetRect',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetWindowRgn',
                                                                                            'UpdateLayeredWindowIndirect',
                                                                                            'GetWindowRgnBox',
                                                                                            'LoadImageW',
                                                                                            'GetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetLastInputInfo',
                                                                                            'RemovePropW',
                                                                                            'GetLastActivePopup',
                                                                                            'SwitchToThisWindow',
                                                                                            'MessageBeep',
                                                                                            'GetActiveWindow',
                                                                                            'GetFocus',
                                                                                            'SetCursor',
                                                                                            'UnregisterHotKey',
                                                                                            'RegisterHotKey',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'GetAsyncKeyState',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursorPos',
                                                                                            'GetMessagePos',
                                                                                            'BeginPaint',
                                                                                            'FillRect',
                                                                                            'DrawEdge',
                                                                                            'EndPaint',
                                                                                            'GetSystemMenu',
                                                                                            'EnableMenuItem',
                                                                                            'ExitWindowsEx',
                                                                                            'LoadIconW',
                                                                                            'DestroyIcon',
                                                                                            'IsIconic',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuItem',
                                                                                            'ModifyMenuW',
                                                                                            'WindowFromPoint',
                                                                                            'ClientToScreen',
                                                                                            'TrackPopupMenu',
                                                                                            'IsHungAppWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AppendMenuW',
                                                                                            'CascadeWindows',
                                                                                            'TileWindows',
                                                                                            'LockWorkStation',
                                                                                            'ScreenToClient',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'NotifyWinEvent',
                                                                                            'GetSysColor',
                                                                                            'DrawFocusRect',
                                                                                            'AdjustWindowRectEx',
                                                                                            'CopyIcon',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SetWinEventHook',
                                                                                            'RegisterClassExW',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemInt',
                                                                                            'SetDlgItemInt',
                                                                                            'IsDlgButtonChecked',
                                                                                            'IsWindowEnabled',
                                                                                            'CheckDlgButton',
                                                                                            'CallWindowProcW',
                                                                                            'SetCapture',
                                                                                            'DrawTextW',
                                                                                            'AdjustWindowRect',
                                                                                            'CalculatePopupWindowPosition',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetCapture',
                                                                                            'SetGestureConfig',
                                                                                            'DrawIconEx',
                                                                                            'RemoveMenu',
                                                                                            'SetMenuDefaultItem',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'LoadAcceleratorsW',
                                                                                            'TrackMouseEvent',
                                                                                            'CharNextW',
                                                                                            'GetWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'GetPropW',
                                                                                            'HungWindowFromGhostWindow',
                                                                                            'SetWindowCompositionAttribute',
                                                                                            'GetWindowLongW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'EnumChildWindows',
                                                                                            'SendMessageW',
                                                                                            'PtInRect',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetWindowRect',
                                                                                            'DestroyMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'ShowWindow',
                                                                                            'MapWindowPoints',
                                                                                            'SetTimer',
                                                                                            'SetPropW',
                                                                                            'KillTimer',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowLongPtrW',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DestroyWindow',
                                                                                            'ShutdownBlockReasonCreate',
                                                                                            'LoadStringW',
                                                                                            'PostMessageW',
                                                                                            'PeekMessageW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'FindWindowW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetShellWindow',
                                                                                            'GetClassNameW',
                                                                                            '_vsnwprintf',
                                                                                            'free',
                                                                                            'wcsstr',
                                                                                            'iswalpha',
                                                                                            'wcschr',
                                                                                            'realloc',
                                                                                            '_wcsicmp',
                                                                                            'cosf',
                                                                                            '_wtoi',
                                                                                            'memcmp',
                                                                                            'sqrt',
                                                                                            'ceil',
                                                                                            'bsearch',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_fmode',
                                                                                            'malloc',
                                                                                            'sin',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'NtSetSystemInformation',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmEventEnabled',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlGetProductInfo',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwEventWrite',
                                                                                            'NtQueryInformationProcess',
                                                                                            'StrStrIW',
                                                                                            'AssocQueryStringW',
                                                                                            'PathQuoteSpacesW',
                                                                                            'SHDeleteKeyW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'PathIsNetworkPathW',
                                                                                            'SHOpenRegStream2W',
                                                                                            'SHRegGetBoolUSValueW',
                                                                                            'SHStrDupW',
                                                                                            'StrChrIW',
                                                                                            'PathFileExistsW',
                                                                                            'PathGetDriveNumberW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsDirectoryW',
                                                                                            'SHRegGetValueW',
                                                                                            'ChrCmpIW',
                                                                                            'AssocQueryKeyW',
                                                                                            'PathStripPathW',
                                                                                            'PathIsRootW',
                                                                                            'PathParseIconLocationW',
                                                                                            'StrCmpIW',
                                                                                            'StrCmpW',
                                                                                            'PathIsPrefixW',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'SHQueryInfoKeyW',
                                                                                            'StrCmpNW',
                                                                                            'StrTrimW',
                                                                                            'PathStripToRootW',
                                                                                            'StrRetToBufW',
                                                                                            'PathCommonPrefixW',
                                                                                            'SHStrDupA',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathIsFileSpecW',
                                                                                            'AssocCreate',
                                                                                            'StrRetToStrW',
                                                                                            'StrToIntW',
                                                                                            'StrChrW',
                                                                                            'PathCombineW',
                                                                                            'SHCreateThreadRef',
                                                                                            'SHSetThreadRef',
                                                                                            'SHGetValueW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveArgsW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'StrCmpNIW',
                                                                                            'PathGetArgsW',
                                                                                            'SHSetValueW',
                                                                                            'SHDeleteValueW',
                                                                                            'PathAppendW',
                                                                                            'PathFindExtensionW',
                                                                                            'SHCreateDataObject',
                                                                                            'SHGetLocalizedName',
                                                                                            'Shell_GetCachedImageIndexW',
                                                                                            'SHGetStockIconInfo',
                                                                                            'SHGetPropertyStoreForWindow',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHCreateItemWithParent',
                                                                                            'SHBindToFolderIDListParent',
                                                                                            'SHBindToFolderIDListParentEx',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHParseDisplayName',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBindToObject',
                                                                                            'SHGetKnownFolderIDList',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetNameFromIDList',
                                                                                            'SHCreateShellItem',
                                                                                            'SHChangeNotifyRegisterThread',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'SHUpdateRecycleBinIcon',
                                                                                            'SHBindToParent',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'ShellExecuteW',
                                                                                            'SHEnableServiceObject',
                                                                                            'SHGetIDListFromObject',
                                                                                            'SHCreateItemFromIDList',
                                                                                            'SHAddToRecentDocs',
                                                                                            'Shell_NotifyIconW',
                                                                                            'Shell_NotifyIconGetRect',
                                                                                            'ExtractIconExW',
                                                                                            'SHEvaluateSystemCommandTemplate',
                                                                                            'SHCreateShellItemArrayFromIDLists',
                                                                                            'DragQueryFileW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'SHCreateShellItemArrayFromShellItem',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromString',
                                                                                            'CoGetMalloc',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'RevokeDragDrop',
                                                                                            'RegisterDragDrop',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'StringFromGUID2',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'ReleaseStgMedium',
                                                                                            'PropVariantClear',
                                                                                            'CreateBindCtx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'GetThemeBackgroundExtent',
                                                                                            'GetThemeBackgroundRegion',
                                                                                            'GetThemeColor',
                                                                                            'IsThemePartDefined',
                                                                                            'GetThemeRect',
                                                                                            'DrawThemeIcon',
                                                                                            'GetBufferedPaintBits',
                                                                                            'BufferedPaintClear',
                                                                                            'IsAppThemed',
                                                                                            'IsCompositionActive',
                                                                                            'OpenThemeData',
                                                                                            'CloseThemeData',
                                                                                            'SetWindowTheme',
                                                                                            'GetThemeMetric',
                                                                                            'DrawThemeBackground',
                                                                                            'GetThemeTextExtent',
                                                                                            'DrawThemeText',
                                                                                            'GetThemeBool',
                                                                                            'DrawThemeParentBackground',
                                                                                            'GetWindowTheme',
                                                                                            'GetThemeBackgroundContentRect',
                                                                                            'GetThemePartSize',
                                                                                            'BeginBufferedPaint',
                                                                                            'DrawThemeTextEx',
                                                                                            'EndBufferedPaint',
                                                                                            'GetThemeMargins',
                                                                                            'BufferedPaintInit',
                                                                                            'BufferedPaintUnInit',
                                                                                            'IsThemeActive',
                                                                                            'CallNtPowerInformation',
                                                                                            'PowerDeterminePlatformRole',
                                                                                            'GetPwrCapabilities',
                                                                                            'DwmEnableBlurBehindWindow',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'DwmIsCompositionEnabled',
                                                                                            'DwmQueryThumbnailSourceSize',
                                                                                            'DwmUpdateThumbnailProperties',
                                                                                            'DwmUnregisterThumbnail',
                                                                                            'SLGetWindowsInformationDWORD',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCloneImage',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipSetCompositingMode',
                                                                                            'GetUserNameExW',
                                                                                            'NdrClientCall3',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'PSCreateMemoryPropertyStore',
                                                                                            'VariantToStringAlloc',
                                                                                            'VariantToStringWithDefault',
                                                                                            'PropVariantToString',
                                                                                            'VariantToBooleanWithDefault',
                                                                                            'PropVariantToInt64',
                                                                                            'VariantToInt32WithDefault',
                                                                                            'PropVariantToBoolean',
                                                                                            'PropVariantToUInt64',
                                                                                            'PropVariantToUInt32',
                                                                                            'PropVariantToStringAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 703,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1846824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14848,
                                                                                       '.pdata\x00\x00': 52736,
                                                                                       '.rdata\x00\x00': 191488,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 1847296,
                                                                                       '.text\x00\x00\x00': 752128},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5556dedde7d7dc3b27850c53031c2b9f918d6ff410840665f54db122042475a7'},
 '557d9a047e5edf21f90cd56f7bebef8ba4f0a279e1e2dd8e6ebb95991cfb7e4b': {'AddressOfEntryPoint': 34988,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/557d9a047e5edf21f90cd56f7bebef8ba4f0a279e1e2dd8e6ebb95991cfb7e4b'},
 '561c898e605592b99a76c372be03280972b9ec28aa08af8eef1231968725a456': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/561c898e605592b99a76c372be03280972b9ec28aa08af8eef1231968725a456'},
 '56980b78247805c214ba8a5adaff6018b8ad740c2a5b3a5c8d50b0a676d0c8aa': {'AddressOfEntryPoint': 81056,
                                                                      'DebugRVA': 165872,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 163840,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyW',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathStripPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'USERENV.dll': 'UnloadUserProfile'},
                                                                      'ImportedFunctions': ['GetSecurityDescriptorLength',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'TraceEvent',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'InitializeSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'RegQueryValueExW',
                                                                                            'GetLengthSid',
                                                                                            'AddAce',
                                                                                            'CopySid',
                                                                                            'InitializeAcl',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetAce',
                                                                                            'GetAclInformation',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'OpenProcessToken',
                                                                                            'MakeAbsoluteSD',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlUnwindEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'FlsAlloc',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'CreateEventW',
                                                                                            'CreateMutexW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'OutputDebugStringW',
                                                                                            'ReleaseMutex',
                                                                                            'lstrcmpW',
                                                                                            'SetFilePointer',
                                                                                            'GetLocalTime',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrcmpiW',
                                                                                            'CreateFileW',
                                                                                            'OutputDebugStringA',
                                                                                            'RemoveDirectoryW',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateDirectoryW',
                                                                                            'DuplicateHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'GetVersionExW',
                                                                                            'lstrcpynW',
                                                                                            'HeapDestroy',
                                                                                            'GetFileAttributesExW',
                                                                                            'MoveFileExW',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReadFile',
                                                                                            'TryEnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'VirtualQuery',
                                                                                            'GetTempPathW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'OpenProcess',
                                                                                            'VerSetConditionMask',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateProcessW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GetThreadLocale',
                                                                                            'UnregisterWait',
                                                                                            'DisconnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetOverlappedResult',
                                                                                            'QueueUserWorkItem',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CloseHandle',
                                                                                            'LoadResource',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'LockResource',
                                                                                            'GetLastError',
                                                                                            'FindResourceExW',
                                                                                            'SizeofResource',
                                                                                            'RaiseException',
                                                                                            'FindResourceW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'lstrlenW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetVersionExA',
                                                                                            'FlushFileBuffers',
                                                                                            'wvsprintfW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'CharLowerW',
                                                                                            'UnregisterClassA',
                                                                                            'wsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'GetMessageW',
                                                                                            'PeekMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'MessageBoxW',
                                                                                            'SHGetFolderPathW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathAppendW',
                                                                                            'PathIsRelativeW',
                                                                                            'SHQueryValueExW',
                                                                                            'PathStripPathW',
                                                                                            'UnloadUserProfile'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 200,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12520,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8704,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 36352,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 12800,
                                                                                       '.text\x00\x00\x00': 157696},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/56980b78247805c214ba8a5adaff6018b8ad740c2a5b3a5c8d50b0a676d0c8aa'},
 '56c4084f1c6cc2d8e4e9a65940ce6e5c8b9d0ab403e4941c12bda6d6f94cb472': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1107744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1107968,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/56c4084f1c6cc2d8e4e9a65940ce6e5c8b9d0ab403e4941c12bda6d6f94cb472'},
 '56ed446dbc6513c68a357fdac55eaffd9ce6463256f5c3bcc0455a571c9f614b': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 671640,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 671744,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/56ed446dbc6513c68a357fdac55eaffd9ce6463256f5c3bcc0455a571c9f614b'},
 '576839e1a2f2eafe7032d9d5363a2040de9c3daa4ed3f777568bc4986e76fe52': {'AddressOfEntryPoint': 1073785241,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'DIFXAPI.dll': 'DIFXAPISetLogCallbackA',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList'},
                                                                      'ImportedFunctions': ['GetEnvironmentVariableA',
                                                                                            'GetFullPathNameA',
                                                                                            'CreateFileA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapReAlloc',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapSize',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetupDiGetDeviceInfoListDetailA',
                                                                                            'CM_Get_Device_ID_ExA',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'DriverPackagePreinstallA',
                                                                                            'DriverPackageInstallA',
                                                                                            'DriverPackageGetPathA',
                                                                                            'DIFXAPISetLogCallbackA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 87,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/576839e1a2f2eafe7032d9d5363a2040de9c3daa4ed3f777568bc4986e76fe52'},
 '579989ee80b64d29aedf108a93ad5efe1f1ece2d331a737278d8a51d43673a32': {'AddressOfEntryPoint': 105679,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 98976,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltGetVolumeContext',
                                                                                      'hal.dll': 'HalMakeBeep',
                                                                                      'ntoskrnl.exe': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['RtlCompareUnicodeString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            'KeResetEvent',
                                                                                            'IoIs32bitProcess',
                                                                                            'KeWaitForSingleObject',
                                                                                            'ExAcquireResourceSharedLite',
                                                                                            'KeDelayExecutionThread',
                                                                                            'PsCreateSystemThread',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ZwClose',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'strstr',
                                                                                            'strncmp',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'PsGetCurrentThreadId',
                                                                                            'RtlFreeAnsiString',
                                                                                            '_vsnprintf',
                                                                                            'FsRtlIsNameInExpression',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'IoThreadToProcess',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExInitializeResourceLite',
                                                                                            'ObfDereferenceObject',
                                                                                            'ExDeleteResourceLite',
                                                                                            'ExReleaseResourceLite',
                                                                                            'IoGetCurrentProcess',
                                                                                            'wcsstr',
                                                                                            'IoVolumeDeviceToDosName',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PsSetCreateProcessNotifyRoutine',
                                                                                            'PsSetCreateThreadNotifyRoutine',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PsRemoveCreateThreadNotifyRoutine',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeSetEvent',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            '__C_specific_handler',
                                                                                            '_local_unwind',
                                                                                            'FltParseFileNameInformation',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltIsDirectory',
                                                                                            'FltCancelFileOpen',
                                                                                            'FltSetVolumeContext',
                                                                                            'FltStartFiltering',
                                                                                            'FltRegisterFilter',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltGetVolumeName',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltAllocateContext',
                                                                                            'FltReleaseContext',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltGetVolumeProperties',
                                                                                            'FltGetDiskDeviceObject',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltCloseClientPort',
                                                                                            'FltGetVolumeContext',
                                                                                            'DbgPrint',
                                                                                            'IoAllocateMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmUnlockPages',
                                                                                            'IoFreeMdl',
                                                                                            'ExAllocatePool',
                                                                                            'ExFreePool',
                                                                                            'NtQuerySystemInformation',
                                                                                            'HalMakeBeep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 28672,
                                                                                       '.vmp0\x00\x00\x00': 512,
                                                                                       '.vmp1\x00\x00\x00': 5120,
                                                                                       '.vmp2\x00\x00\x00': 19456,
                                                                                       'INIT\x00\x00\x00\x00': 3584,
                                                                                       'PAGE\x00\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/579989ee80b64d29aedf108a93ad5efe1f1ece2d331a737278d8a51d43673a32'},
 '5896d527fecbe9b1068b5e6804769afb6208e771fb9870d6357d60f56855d3d1': {'AddressOfEntryPoint': 128604,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 626688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetAclInformation',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAccessData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'EnumWindows',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'CreateThread',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'OutputDebugStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'OpenClipboard',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'TrackPopupMenuEx',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'SystemParametersInfoW',
                                                                                            'DispatchMessageW',
                                                                                            'EnumWindows',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetAclInformation',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17920,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 87552,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 621056},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/5896d527fecbe9b1068b5e6804769afb6208e771fb9870d6357d60f56855d3d1'},
 '58a3305e60e836d22e5b0bb68850b92d6077e74c30b0152625052b0680b95c88': {'AddressOfEntryPoint': 496226,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 409626,
                                                                      'ExportSize': 3152,
                                                                      'IATRVA': 494840,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'IsTextUnicode',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'GDI32.dll': 'SetAbortProc',
                                                                                      'KERNEL32.dll': 'ExitProcess',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'ShellAboutW',
                                                                                      'SHLWAPI.dll': 'SHStrDupW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINSPOOL.DRV': 'GetPrinterDriverW',
                                                                                      'msvcrt.dll': '_commode',
                                                                                      'ntdll.dll': 'RtlLookupFunctionEntry',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['IsTextUnicode',
                                                                                            'LoadLibraryW',
                                                                                            'SetAbortProc',
                                                                                            'ReleaseDC',
                                                                                            '_commode',
                                                                                            'GetSaveFileNameW',
                                                                                            'ShellAboutW',
                                                                                            'GetPrinterDriverW',
                                                                                            'CoTaskMemFree',
                                                                                            'SHStrDupW',
                                                                                            'PropertySheetW',
                                                                                            'SysAllocString',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'VerQueryValueW',
                                                                                            'MessageBoxW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 22,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 127328,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 127488,
                                                                                       '.text\x00\x00\x00': 43008,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.vmp0\x00\x00\x00': 512,
                                                                                       '.vmp1\x00\x00\x00': 196096,
                                                                                       '.vmp2\x00\x00\x00': 105472},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/58a3305e60e836d22e5b0bb68850b92d6077e74c30b0152625052b0680b95c88'},
 '58d409bea05dd325ce5a2db1b46db3c9b8ee1cd495928fd5477a0f7e054231a7': {'AddressOfEntryPoint': 43824,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExA',
                                                                                      'KERNEL32.dll': 'HeapCreate',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'RPCRT4.dll': 'UuidFromStringA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathA',
                                                                                      'USER32.dll': 'LoadStringA',
                                                                                      'ole32.dll': 'GetRunningObjectTable'},
                                                                      'ImportedFunctions': ['CreateThread',
                                                                                            'CreateEventA',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'lstrcmpiA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineA',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemWow64DirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExA',
                                                                                            'LoadLibraryA',
                                                                                            'GetStringTypeW',
                                                                                            'SetEvent',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetCPInfo',
                                                                                            'lstrlenA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            '__C_specific_handler',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'IsBadCodePtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetStringTypeA',
                                                                                            'CloseHandle',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'PostThreadMessageA',
                                                                                            'GetMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'LoadStringA',
                                                                                            'RegConnectRegistryA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'StringFromCLSID',
                                                                                            'CreateItemMoniker',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'GetRunningObjectTable',
                                                                                            'SysFreeString',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'UuidFromStringA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 16384,
                                                                                       '.rsrc\x00\x00\x00': 29184,
                                                                                       '.text\x00\x00\x00': 39936,
                                                                                       'vyigban\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/58d409bea05dd325ce5a2db1b46db3c9b8ee1cd495928fd5477a0f7e054231a7'},
 '590766c37733bb55dba7ca9eb2c8d186bd18b2c8e6cff1bd49cdc6652f884162': {'AddressOfEntryPoint': 1073810685,
                                                                      'DebugRVA': 46176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyA',
                                                                                      'KERNEL32.dll': 'GetVersionExA',
                                                                                      'MSVCR80.dll': '_CxxThrowException',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'CreateWindowExA',
                                                                                      'bthprops.cpl': 'BluetoothFindFirstRadio',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['BluetoothFindRadioClose',
                                                                                            'BluetoothFindFirstRadio',
                                                                                            'GetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'DeviceIoControl',
                                                                                            'DeleteCriticalSection',
                                                                                            'OutputDebugStringA',
                                                                                            'CloseHandle',
                                                                                            'GetTickCount',
                                                                                            'OpenEventA',
                                                                                            'WideCharToMultiByte',
                                                                                            'FindResourceA',
                                                                                            'lstrlenA',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'IsDBCSLeadByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'lstrcmpiA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateFileA',
                                                                                            'GetACP',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrlenW',
                                                                                            'GetThreadLocale',
                                                                                            'GetVersionExA',
                                                                                            'UnregisterClassA',
                                                                                            'CharNextA',
                                                                                            'DefWindowProcA',
                                                                                            'SetTimer',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'RegisterClassA',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'PostMessageA',
                                                                                            'EnumWindows',
                                                                                            'GetClassNameA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageA',
                                                                                            'CreateWindowExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            '__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            'vsprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_mbsnbicmp',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_vsnprintf',
                                                                                            'sprintf',
                                                                                            '_mbsicmp',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_resetstkoflw',
                                                                                            '_mbsnbcpy_s',
                                                                                            '_recalloc',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'memcpy_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '_encode_pointer',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_CxxThrowException'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 124,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1644,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/590766c37733bb55dba7ca9eb2c8d186bd18b2c8e6cff1bd49cdc6652f884162'},
 '5911a5e7e9526333140815ed2d8b0ca8c3afb90e0750f31ee70099549b8a1f7f': {'AddressOfEntryPoint': 6128,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['GetWindowsDirectoryA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'WinExec',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'wsprintfA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 9216,
                                                                                       '.text\x00\x00\x00': 22016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5911a5e7e9526333140815ed2d8b0ca8c3afb90e0750f31ee70099549b8a1f7f'},
 '59399e56b27987c50e4320ef3b805efb8b2d76463f3084becca90830f3c59b51': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetI',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 80,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/59399e56b27987c50e4320ef3b805efb8b2d76463f3084becca90830f3c59b51'},
 '59545ef5eb03e6eb4b43a9d329d8d43617dd8b146c59203895148bd1b233deee': {'AddressOfEntryPoint': 408080,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 409336,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'hal.dll': 'HalMakeBeep',
                                                                                      'ntoskrnl.exe': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['PsGetVersion',
                                                                                            'PsGetCurrentThreadId',
                                                                                            'PsGetCurrentProcessId',
                                                                                            '__C_specific_handler',
                                                                                            'ProbeForWrite',
                                                                                            'KeDelayExecutionThread',
                                                                                            'ProbeForRead',
                                                                                            '_wcsnicmp',
                                                                                            '_stricmp',
                                                                                            'RtlDeleteRegistryValue',
                                                                                            'strstr',
                                                                                            'strrchr',
                                                                                            'strncpy',
                                                                                            '_strnicmp',
                                                                                            'PsDereferencePrimaryToken',
                                                                                            'RtlEqualSid',
                                                                                            'SeQueryInformationToken',
                                                                                            'PsReferencePrimaryToken',
                                                                                            'PsGetProcessWin32Process',
                                                                                            'IoGetCurrentProcess',
                                                                                            'PsSetCreateProcessNotifyRoutine',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IofCompleteRequest',
                                                                                            '__chkstk',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoCreateDevice',
                                                                                            'PsSetLoadImageNotifyRoutine',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ExAcquireFastMutex',
                                                                                            'ZwClose',
                                                                                            'ZwCreateFile',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'KeInitializeEvent',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'MmIsAddressValid',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'ZwOpenFile',
                                                                                            'MmUnmapViewInSystemSpace',
                                                                                            'MmMapViewInSystemSpace',
                                                                                            'MmCreateSection',
                                                                                            'PsGetProcessInheritedFromUniqueProcessId',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'PsGetProcessImageFileName',
                                                                                            'ObQueryNameString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'KeStackAttachProcess',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'PsGetProcessCreateTimeQuadPart',
                                                                                            'ZwQuerySymbolicLinkObject',
                                                                                            'ZwOpenSymbolicLinkObject',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'PsIsThreadTerminating',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'PsGetProcessId',
                                                                                            'PsGetThreadProcess',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwOpenDirectoryObject',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'tolower',
                                                                                            'strchr',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            'ObOpenObjectByPointer',
                                                                                            'PsGetProcessSectionBaseAddress',
                                                                                            'ZwOpenProcessTokenEx',
                                                                                            'wcschr',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'ZwQueryObject',
                                                                                            'wcsncpy',
                                                                                            'IoQueryFileDosDeviceName',
                                                                                            'wcsrchr',
                                                                                            'PsGetCurrentThreadPreviousMode',
                                                                                            'PsLookupThreadByThreadId',
                                                                                            'PsGetCurrentProcessSessionId',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPages',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoAllocateMdl',
                                                                                            'MmUnmapLockedPages',
                                                                                            'CmRegisterCallback',
                                                                                            'PsGetThreadTeb',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'PsGetProcessPeb',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlCreateUnicodeString',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'ZwSetInformationProcess',
                                                                                            'RtlLengthSid',
                                                                                            'ZwAssignProcessToJobObject',
                                                                                            'ZwSetInformationJobObject',
                                                                                            'ZwCreateJobObject',
                                                                                            'PsGetProcessJob',
                                                                                            'ZwTerminateProcess',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlGetAce',
                                                                                            'ZwSetSecurityObject',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'ZwQuerySecurityObject',
                                                                                            'SeTokenIsRestricted',
                                                                                            'SeFilterToken',
                                                                                            'ObfReferenceObject',
                                                                                            'ZwCreateKey',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlFormatCurrentUserKeyPath',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeBugCheckEx',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ZwConnectPort',
                                                                                            'LpcRequestWaitReplyPort',
                                                                                            'LpcRequestPort',
                                                                                            'ObfDereferenceObject',
                                                                                            'ZwQueryInformationToken',
                                                                                            '_vsnprintf',
                                                                                            'IoAllocateMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmUnlockPages',
                                                                                            'IoFreeMdl',
                                                                                            'ExAllocatePool',
                                                                                            'ExFreePool',
                                                                                            'NtQuerySystemInformation',
                                                                                            'HalMakeBeep'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 138,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.Shltr0\x00': 0,
                                                                                       '.Shltr1\x00': 1024,
                                                                                       '.Shltr2\x00': 0,
                                                                                       '.Shltr3\x00': 169472,
                                                                                       '.data\x00\x00\x00': 0,
                                                                                       '.pdata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 0,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 0,
                                                                                       'INIT\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/59545ef5eb03e6eb4b43a9d329d8d43617dd8b146c59203895148bd1b233deee'},
 '5976f122d6529e5ae60eec259a850fcf56e6c8820954e2579893aef5ae3352b7': {'AddressOfEntryPoint': 237568,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 4,
                                                                      'ImportedDLL': {'GDI32.dll': 'GetBkColor',
                                                                                      'KERNEL32.dll': 'VirtualAlloc'},
                                                                      'ImportedFunctions': ['GetBkColor',
                                                                                            'VirtualAlloc'],
                                                                      'LinkerVersion': 4,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 2,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 972,
                                                                      'SectionNames': {'.edata\x00\x00': 97280,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 3145728,
                                                                      'filename': './data/malware/5976f122d6529e5ae60eec259a850fcf56e6c8820954e2579893aef5ae3352b7'},
 '59c232ac9a7c1893fe374c4833fa8b5962576fc4ef31e663c0782ab1cfcb4220': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1054500,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1054720,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/59c232ac9a7c1893fe374c4833fa8b5962576fc4ef31e663c0782ab1cfcb4220'},
 '59c2a6a2f007d06bb1ccde6cfb34444764899c2d2c86501058cad75c3f9724d2': {'AddressOfEntryPoint': 206560,
                                                                      'DebugRVA': 136704,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 135168,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'ksecdd.sys': 'BCryptGetProperty',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['qsort',
                                                                                            'NtQuerySystemInformation',
                                                                                            'KeAcquireGuardedMutex',
                                                                                            'RtlInitUnicodeString',
                                                                                            'KeSetEvent',
                                                                                            'FsRtlGetVirtualDiskNestingLevel',
                                                                                            'KeInitializeEvent',
                                                                                            'ZwSetValueKey',
                                                                                            'KeInitializeDpc',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ExReleaseRundownProtection',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExReleaseSpinLockExclusive',
                                                                                            'ExInitializeRundownProtection',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'KeInitializeTimer',
                                                                                            'KeReleaseGuardedMutex',
                                                                                            'KeDelayExecutionThread',
                                                                                            'PsCreateSystemThread',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'ZwQueryValueKey',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'bsearch',
                                                                                            'KeSetTimer',
                                                                                            'ExRundownCompleted',
                                                                                            'EtwWriteEx',
                                                                                            'ExReInitializeRundownProtection',
                                                                                            'ObfDereferenceObject',
                                                                                            'MmFreePagesFromMdl',
                                                                                            'KeCancelTimer',
                                                                                            'KeQueryPriorityThread',
                                                                                            'IoGetIoPriorityHint',
                                                                                            'ZwOpenKey',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoReuseIrp',
                                                                                            'IoGetLowerDeviceObject',
                                                                                            'EtwUnregister',
                                                                                            'ExfAcquirePushLockExclusive',
                                                                                            'InFeuRematedDeviceObject',
                                                                                            'IoDeleteDevice',
                                                                                            'RtlSetAllBits',
                                                                                            'EtwRegister',
                                                                                            'IoSetThreadHardErrorMode',
                                                                                            'IoDetachDevice',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'RtlSetBit',
                                                                                            'ExfReleasePushLockShared',
                                                                                            'ZwSetInformationFile',
                                                                                            'KeSetTimerEx',
                                                                                            'IoForwardIrpSynchronously',
                                                                                            'ObQueryNameString',
                                                                                            'IoFileObjectType',
                                                                                            'ExReleaseSpinLockExclusiveFromDpcLevel',
                                                                                            'MmSizeOfMdl',
                                                                                            'RtlAreBitsSet',
                                                                                            'ExfAcquirePushLockShared',
                                                                                            'ExEventObjectType',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoGetDeviceAttachmentBaseRef',
                                                                                            'ExfTryToWakePushLock',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ObCloseHandle',
                                                                                            'IoFreeIrp',
                                                                                            'PsInitialSystemProcess',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoGetStackLimits',
                                                                                            'IoAllocateIrp',
                                                                                            'MmUnlockPages',
                                                                                            'ExAcquireSpinLockExclusiveAtDpcLevel',
                                                                                            'ExAcquireSpinLockShared',
                                                                                            'ObfReferenceObject',
                                                                                            'IoCreateDevice',
                                                                                            'RtlFindNextForwardRunClear',
                                                                                            'RtlClearBits',
                                                                                            'KeWaitForMultipleObjects',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'ExReleaseSpinLockSharedFromDpcLevel',
                                                                                            'ExAcquireSpinLockSharedAtDpcLevel',
                                                                                            'IofCallDriver',
                                                                                            'RtlAreBitsClear',
                                                                                            'MmUnmapLockedPages',
                                                                                            'KdDebuggerEnabled',
                                                                                            'KeBugCheckEx',
                                                                                            'DbgPrint',
                                                                                            'IoSetIoPriorityHint',
                                                                                            'KeInitializeGuardedMutex',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'ZwSetSecurityObject',
                                                                                            'IoDeviceObjectType',
                                                                                            'ObOpenObjectByPointer',
                                                                                            '_snwprintf',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'SeCaptureSecurityDescriptor',
                                                                                            'RtlGetSaclSecurityDescriptor',
                                                                                            'RtlGetGroupSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlAbsoluteToSelfRelativeSD',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'SeExports',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'ZwCreateKey',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'ZwSetSystemInformation',
                                                                                            'ZwFsControlFile',
                                                                                            'NtWriteFile',
                                                                                            'RtlCreateAcl',
                                                                                            'KeInitializeApc',
                                                                                            'KeInsertQueueApc',
                                                                                            'IoCreateFile',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ZwDeleteValueKey',
                                                                                            'MmFreeMappingAddress',
                                                                                            'MmGetPhysicalAddress',
                                                                                            'ZwCreateFile',
                                                                                            'MmMapLockedPagesWithReservedMapping',
                                                                                            'MmAllocateMappingAddress',
                                                                                            'MmUnmapReservedMapping',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'ZwDuplicateObject',
                                                                                            'MmCreateMdl',
                                                                                            'RtlInitializeSid',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwWriteFile',
                                                                                            'NtReadFile',
                                                                                            'IoSynchronousPageWrite',
                                                                                            'isprint',
                                                                                            'wcsstr',
                                                                                            'EtwWrite',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmAllocatePagesForMdlEx',
                                                                                            'KeSetActualBasePriorityThread',
                                                                                            'KeClearEvent',
                                                                                            'ExAcquireSpinLockExclusive',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExAcquireRundownProtection',
                                                                                            'ExWaitForRundownProtectionRelease',
                                                                                            'RtlComputeCrc32',
                                                                                            'ExQueueWorkItem',
                                                                                            '__chkstk',
                                                                                            '__C_specific_handler',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'BCryptDecrypt',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptDestroyKey',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptGenRandom',
                                                                                            'BCryptEncrypt',
                                                                                            'BCryptGenerateSymmetricKey',
                                                                                            'BCryptSetProperty',
                                                                                            'BCryptGetProperty'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 169,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 20248,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 9728,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 20480,
                                                                                       '.text\x00\x00\x00': 128000,
                                                                                       'INIT\x00\x00\x00\x00': 7680,
                                                                                       'PAGE\x00\x00\x00\x00': 33792},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/59c2a6a2f007d06bb1ccde6cfb34444764899c2d2c86501058cad75c3f9724d2'},
 '59e6176a2d95519b793531b4ca584e34d7195158fc7bb280e86cbc23d2bfb185': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 498960,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 499200,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/59e6176a2d95519b793531b4ca584e34d7195158fc7bb280e86cbc23d2bfb185'},
 '5a00ec85e0de347e52e9431543e7e19218994498fa561f07928f15b906afebc3': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5a00ec85e0de347e52e9431543e7e19218994498fa561f07928f15b906afebc3'},
 '5a10a670b1f0f4609411055c234193ace3ee941de8c07efdcbe5717789bb3a48': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 388616,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 389120,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5a10a670b1f0f4609411055c234193ace3ee941de8c07efdcbe5717789bb3a48'},
 '5a434c49cb043580e18b6ca33a01e61e9e65c1fdc26aa89ccc0c8923400a23b6': {'AddressOfEntryPoint': 33720,
                                                                      'DebugRVA': 12672,
                                                                      'DebugSize': 28,
                                                                      'Dll': 8192,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'KeBugCheckEx'},
                                                                      'ImportedFunctions': ['IoAcquireRemoveLockEx',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ExAcquireFastMutex',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IoDetachDevice',
                                                                                            'PoRequestPowerIrp',
                                                                                            'PoRegisterPowerSettingCallback',
                                                                                            'PoSetPowerState',
                                                                                            'RtlGUIDFromString',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDeviceProperty',
                                                                                            'PoUnregisterPowerSettingCallback',
                                                                                            'IofCallDriver',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ExFreePoolWithTag',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoIs32bitProcess',
                                                                                            'ZwSetValueKey',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwClose',
                                                                                            'IoFreeIrp',
                                                                                            'IoAllocateIrp',
                                                                                            'IoOpenDeviceRegistryKey',
                                                                                            'IoAllocateMdl',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 5632,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'PAGE\x00\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/5a434c49cb043580e18b6ca33a01e61e9e65c1fdc26aa89ccc0c8923400a23b6'},
 '5a78cbd3d93d3c418b081baf415f9fe087c1b4d8a9a7aadb610fa7f3cb16ecc2': {'AddressOfEntryPoint': 18492,
                                                                      'DebugRVA': 49776,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadProcessMemory',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenProcess',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 42496},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5a78cbd3d93d3c418b081baf415f9fe087c1b4d8a9a7aadb610fa7f3cb16ecc2'},
 '5a87d463ec341664142d5dfebce4cecdcdd3f8259b51f86d5f797c18d83b8f66': {'AddressOfEntryPoint': 52904,
                                                                      'DebugRVA': 95600,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 104464,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'DosDateTimeToFileTime',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'USER32.dll': 'DispatchMessageA',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetNumberFormatA',
                                                                                            'lstrcmpiA',
                                                                                            'GetProcAddress',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetTempPathA',
                                                                                            'MoveFileExA',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'OpenFileMappingA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileA',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FindWindowExA',
                                                                                            'GetClassNameA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSysColor',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'LoadIconA',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'wvsprintfA',
                                                                                            'SetWindowLongA',
                                                                                            'CharUpperA',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DestroyWindow',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'MessageBoxA',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringA',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongA',
                                                                                            'OemToCharBuffA',
                                                                                            'DispatchMessageA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetOpenFileNameA',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetSaveFileNameA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ShellExecuteExA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHChangeNotify',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 164,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 109296,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 109568,
                                                                                       '.text\x00\x00\x00': 86528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5a87d463ec341664142d5dfebce4cecdcdd3f8259b51f86d5f797c18d83b8f66'},
 '5abc656d62b39862f29c82a27b788d46d8144dae3c5a8e4b87a3caa72f76384d': {'AddressOfEntryPoint': 57832,
                                                                      'DebugRVA': 161248,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 159744,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'COMCTL32.dll': 'PropertySheetA',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableW',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'SetDlgItemTextA',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'FreeLibrary',
                                                                                            'SetStdHandle',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'GetFileSize',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'DeleteFileA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'lstrlenA',
                                                                                            'GetLocaleInfoW',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileA',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateDirectoryA',
                                                                                            'SetLastError',
                                                                                            'GetConsoleCP',
                                                                                            'SetHandleCount',
                                                                                            'FatalAppExitA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcessHeap',
                                                                                            'RtlUnwindEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileType',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'HeapReAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'TlsAlloc',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'WriteFile',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'wsprintfA',
                                                                                            'GetFocus',
                                                                                            'ShowWindow',
                                                                                            'SetCursor',
                                                                                            'GetDlgItem',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetParent',
                                                                                            'PostMessageA',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'MessageBoxA',
                                                                                            'UpdateWindow',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'CreateFontA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'TextOutA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateSolidBrush',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'ShellExecuteA',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 50688,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 153600},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5abc656d62b39862f29c82a27b788d46d8144dae3c5a8e4b87a3caa72f76384d'},
 '5b0842bc78915d712da423587af2b2b17bc21c6ac6713d3b4c2b61daeb167165': {'AddressOfEntryPoint': 211044,
                                                                      'DebugRVA': 1278384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1273856,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 50540,
                                                                      'SectionNames': {'.data\x00\x00\x00': 482304,
                                                                                       '.pdata\x00\x00': 72704,
                                                                                       '.rdata\x00\x00': 550400,
                                                                                       '.rsrc\x00\x00\x00': 50688,
                                                                                       '.text\x00\x00\x00': 1269248},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5b0842bc78915d712da423587af2b2b17bc21c6ac6713d3b4c2b61daeb167165'},
 '5b7b07d1a22abe6baa665864312ff2990cfa41e9fc50b71041742a612f11f7c7': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 194180,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 194560,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/5b7b07d1a22abe6baa665864312ff2990cfa41e9fc50b71041742a612f11f7c7'},
 '5bbc6c1cbc6b22f38d4691e4dee1a171258b74c5cb6bd4196eee46a43f35d926': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 304576,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 304640,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5bbc6c1cbc6b22f38d4691e4dee1a171258b74c5cb6bd4196eee46a43f35d926'},
 '5bfe3a260c9473b51f584505b45e3b4c6e90b412b303f792ed35b8e6920c4b9b': {'AddressOfEntryPoint': 7053,
                                                                      'DebugRVA': 4496,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5bfe3a260c9473b51f584505b45e3b4c6e90b412b303f792ed35b8e6920c4b9b'},
 '5c1ff70e2603b10fbced58f7af99fee9ec7cbba62979ec3a0857aee7c682a45b': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5c1ff70e2603b10fbced58f7af99fee9ec7cbba62979ec3a0857aee7c682a45b'},
 '5c56da74208db017c583e9b002b348a2e56dad3316eb08860b126a10e5967dff': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3396408,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3396608,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5c56da74208db017c583e9b002b348a2e56dad3316eb08860b126a10e5967dff'},
 '5c904dba6263766e9f388a26b383f165c10b4d06b12ae0846fa18a6a303ad03e': {'AddressOfEntryPoint': 1074302941,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetSystemInfo',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'SETUPAPI.dll': 'CM_Get_DevNode_Status_Ex',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'SHLWAPI.dll': 'PathIsUNCA',
                                                                                      'USER32.dll': 'ValidateRect',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterA',
                                                                                      'comdlg32.dll': 'GetFileTitleA',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA',
                                                                                      'ole32.dll': 'CoRevokeClassObject'},
                                                                      'ImportedFunctions': ['SetupDiRemoveDevice',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupFindFirstLineA',
                                                                                            'SetupGetStringFieldA',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupCopyOEMInfA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiGetDeviceInfoListDetailA',
                                                                                            'CM_Get_DevNode_Status_Ex',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSize',
                                                                                            'GetThreadLocale',
                                                                                            'DuplicateHandle',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFullPathNameA',
                                                                                            'CreateFileA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileTime',
                                                                                            'GetTickCount',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GlobalFlags',
                                                                                            'VirtualQuery',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'GetACP',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalFindAtomA',
                                                                                            'lstrcmpW',
                                                                                            'GetVersionExA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeResource',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAddAtomA',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcmpA',
                                                                                            'FreeLibrary',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'FormatMessageA',
                                                                                            'MulDiv',
                                                                                            'SetLastError',
                                                                                            'CreateThread',
                                                                                            'lstrcpyA',
                                                                                            'SetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'lstrcatA',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemInfo',
                                                                                            'IsRectEmpty',
                                                                                            'SetRect',
                                                                                            'InvalidateRect',
                                                                                            'InvalidateRgn',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MessageBeep',
                                                                                            'UnregisterClassA',
                                                                                            'DestroyMenu',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'PostThreadMessageA',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpA',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'GetClassLongA',
                                                                                            'GetClassNameA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'SetForegroundWindow',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'PtInRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowLongA',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetWindow',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CopyRect',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'CharUpperA',
                                                                                            'DrawIcon',
                                                                                            'SendMessageA',
                                                                                            'EndDialog',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageA',
                                                                                            'GetCursorPos',
                                                                                            'CharNextA',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetSysColorBrush',
                                                                                            'EndPaint',
                                                                                            'MapWindowPoints',
                                                                                            'BeginPaint',
                                                                                            'IsIconic',
                                                                                            'GetClientRect',
                                                                                            'LoadIconA',
                                                                                            'EnableWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuState',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'ModifyMenuA',
                                                                                            'GetParent',
                                                                                            'GetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'ValidateRect',
                                                                                            'SetMapMode',
                                                                                            'ExtSelectClipRgn',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetMapMode',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'DeleteObject',
                                                                                            'GetFileTitleA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCreateKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathStripToRootA',
                                                                                            'SHDeleteKeyA',
                                                                                            'PathIsUNCA',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoGetClassObject',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'OleFlushClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRevokeClassObject',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 364,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 65124,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5c904dba6263766e9f388a26b383f165c10b4d06b12ae0846fa18a6a303ad03e'},
 '5c9db4ece4efdab4ef8ee14727084031e71a257d8409bcd68a5231c83df78e86': {'AddressOfEntryPoint': 17588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'ntoskrnl.exe': '_wcsicmp'},
                                                                      'ImportedFunctions': ['RtlEqualUnicodeString',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwOpenFile',
                                                                                            'ZwCreateFile',
                                                                                            'ZwReadFile',
                                                                                            'ZwWriteFile',
                                                                                            'ZwClose',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePool',
                                                                                            'PsCreateSystemThread',
                                                                                            'IoDeleteDevice',
                                                                                            'IoDetachDevice',
                                                                                            'IofCompleteRequest',
                                                                                            'IofCallDriver',
                                                                                            'KeReleaseInStackQueuedSpinLock',
                                                                                            'KeAcquireInStackQueuedSpinLock',
                                                                                            'IoQueryFileInformation',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoAttachDeviceToDeviceStackSafe',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'PsTerminateSystemThread',
                                                                                            'KeDelayExecutionThread',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'PsGetProcessImageFileName',
                                                                                            'IoGetCurrentProcess',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeIrp',
                                                                                            'IoFreeMdl',
                                                                                            'KeWaitForSingleObject',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeInitializeEvent',
                                                                                            'IoAllocateMdl',
                                                                                            'IoAllocateIrp',
                                                                                            'PsGetProcessId',
                                                                                            'IoGetRequestorProcess',
                                                                                            'IoAttachDevice',
                                                                                            'ZwTerminateProcess',
                                                                                            'ObOpenObjectByPointer',
                                                                                            'PsProcessType',
                                                                                            'PsInitialSystemProcess',
                                                                                            '__C_specific_handler',
                                                                                            'ObfReferenceObject',
                                                                                            'PsDereferencePrimaryToken',
                                                                                            'PsReferencePrimaryToken',
                                                                                            'ZwSetInformationProcess',
                                                                                            'ZwDuplicateToken',
                                                                                            'SeTokenObjectType',
                                                                                            'RtlGetVersion',
                                                                                            'RtlRandom',
                                                                                            'ZwOpenKey',
                                                                                            'ZwCreateKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'wcsncpy',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'PsGetVersion',
                                                                                            '_wcsnicmp',
                                                                                            'ZwFlushKey',
                                                                                            'swprintf',
                                                                                            'wcsncmp',
                                                                                            'ZwLoadDriver',
                                                                                            'sprintf',
                                                                                            'KeBugCheck',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IoThreadToProcess',
                                                                                            '_stricmp',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'KeReleaseMutex',
                                                                                            'qsort',
                                                                                            'wcschr',
                                                                                            'ObFindHandleForObject',
                                                                                            'CmRegisterCallback',
                                                                                            'PsThreadType',
                                                                                            'KeInitializeMutex',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ExAcquireFastMutex',
                                                                                            'towlower',
                                                                                            '_snwprintf',
                                                                                            'ZwQueryDirectoryFile',
                                                                                            'MmUnlockPages',
                                                                                            'MmUnmapLockedPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmProbeAndLockPages',
                                                                                            'wcsstr',
                                                                                            'MmHighestUserAddress',
                                                                                            'PsSetLoadImageNotifyRoutine',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            '_wcsicmp',
                                                                                            'KeQueryPerformanceCounter'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 8192,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 26624,
                                                                                       'INIT\x00\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/5c9db4ece4efdab4ef8ee14727084031e71a257d8409bcd68a5231c83df78e86'},
 '5d0f268e678a5c5cdb08e1c78907d667f4a4ea039cbbd0b4c58789f4f197b737': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3428,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5d0f268e678a5c5cdb08e1c78907d667f4a4ea039cbbd0b4c58789f4f197b737'},
 '5d415f30075b6d3c3f65205e049ff1fe89115bda7e36ea162b85b10d3e08aefd': {'AddressOfEntryPoint': 1073841845,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStartupInfoA',
                                                                                      'SETUPAPI.dll': 'CM_Locate_DevNodeW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'SHSetValueW'},
                                                                      'ImportedFunctions': ['GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'ShellExecuteExW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathFileExistsW',
                                                                                            'SHSetValueW',
                                                                                            'CM_Get_Sibling',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'CM_Get_Child',
                                                                                            'CM_Locate_DevNodeW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 16788,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5d415f30075b6d3c3f65205e049ff1fe89115bda7e36ea162b85b10d3e08aefd'},
 '5d9d8c129d9464885a9076159cb413d2d7c928ea0e2fe3a7b3acde77d29978fc': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1132284,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1132544,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5d9d8c129d9464885a9076159cb413d2d7c928ea0e2fe3a7b3acde77d29978fc'},
 '5db1ada64170e7a7932c29998c2e2aaeaf8bded504ac456d5b335037ef34d487': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 606032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 606208,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5db1ada64170e7a7932c29998c2e2aaeaf8bded504ac456d5b335037ef34d487'},
 '5dcd219206f72c433064a90d5fd5233740671ced87885ff3881e1694c8f3a3c4': {'AddressOfEntryPoint': 12288,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'DDRAW.DLL': 'DirectDrawCreate',
                                                                                      'KERNEL32.DLL': 'GetModuleHandleA',
                                                                                      'USER32.DLL': 'wsprintfA'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateWindowExA',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'LoadCursorA',
                                                                                            'LoadIconA',
                                                                                            'MessageBoxA',
                                                                                            'PeekMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassExA',
                                                                                            'TranslateMessage',
                                                                                            'WaitMessage',
                                                                                            'wsprintfA',
                                                                                            'DirectDrawCreate'],
                                                                      'LinkerVersion': 1,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 512,
                                                                                       '.code\x00\x00\x00': 2048,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024},
                                                                      'StackReserveSize': 4096,
                                                                      'filename': './data/malware/5dcd219206f72c433064a90d5fd5233740671ced87885ff3881e1694c8f3a3c4'},
 '5e0c529a5ded9802307428d4c18b84ad36f674e36e050dd515d554af981010e7': {'AddressOfEntryPoint': 3622800,
                                                                      'DebugRVA': 3766560,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 3760128,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2798528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 109568,
                                                                                       '.pdata\x00\x00': 154112,
                                                                                       '.rdata\x00\x00': 684544,
                                                                                       '.rsrc\x00\x00\x00': 2798592,
                                                                                       '.text\x00\x00\x00': 1536,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5e0c529a5ded9802307428d4c18b84ad36f674e36e050dd515d554af981010e7'},
 '5e1f857866d58145c5a5791067214ab371c73849737497686c510f534c629557': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 18101248,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5e1f857866d58145c5a5791067214ab371c73849737497686c510f534c629557'},
 '5e83d91dcf08a62c9c02dcd5bff3f268f84ac9bd0152a81b653e08c2e56fed8d': {'AddressOfEntryPoint': 219616,
                                                                      'DebugRVA': 230176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 229376,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionBind',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoCancelIrp',
                                                                                            'PoSetPowerState',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IoDetachDevice',
                                                                                            'wcsstr',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 960,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 16896,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 224256,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/5e83d91dcf08a62c9c02dcd5bff3f268f84ac9bd0152a81b653e08c2e56fed8d'},
 '5edd9e5338291dda1b4bba7ba5c6e7c7698568ba411ef3c0972bf96a48308dd0': {'AddressOfEntryPoint': 419914,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 421048,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'hal.dll': 'HalMakeBeep',
                                                                                      'ntoskrnl.exe': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['PsGetVersion',
                                                                                            'PsGetCurrentThreadId',
                                                                                            'PsGetCurrentProcessId',
                                                                                            '__C_specific_handler',
                                                                                            'ProbeForWrite',
                                                                                            'KeDelayExecutionThread',
                                                                                            'ProbeForRead',
                                                                                            '_wcsnicmp',
                                                                                            '_stricmp',
                                                                                            'RtlDeleteRegistryValue',
                                                                                            'strstr',
                                                                                            'strrchr',
                                                                                            'strncpy',
                                                                                            '_strnicmp',
                                                                                            'PsDereferencePrimaryToken',
                                                                                            'RtlEqualSid',
                                                                                            'SeQueryInformationToken',
                                                                                            'PsReferencePrimaryToken',
                                                                                            'PsSetCreateProcessNotifyRoutine',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IofCompleteRequest',
                                                                                            '__chkstk',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoCreateDevice',
                                                                                            'PsSetLoadImageNotifyRoutine',
                                                                                            'ZwQueryInformationThread',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ExAcquireFastMutex',
                                                                                            'ZwClose',
                                                                                            'ZwCreateFile',
                                                                                            'KeInitializeEvent',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'MmIsAddressValid',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'ZwOpenFile',
                                                                                            'MmUnmapViewInSystemSpace',
                                                                                            'MmMapViewInSystemSpace',
                                                                                            'MmCreateSection',
                                                                                            'ZwOpenThread',
                                                                                            'PsGetProcessInheritedFromUniqueProcessId',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'PsGetProcessImageFileName',
                                                                                            'ObQueryNameString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'KeStackAttachProcess',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'PsGetProcessCreateTimeQuadPart',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'ZwQuerySymbolicLinkObject',
                                                                                            'ZwOpenSymbolicLinkObject',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'PsIsThreadTerminating',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'PsGetProcessId',
                                                                                            'PsGetThreadProcess',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwOpenDirectoryObject',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'tolower',
                                                                                            'strchr',
                                                                                            'PsGetProcessWin32Process',
                                                                                            'ZwQueryInformationToken',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            'PsGetProcessSectionBaseAddress',
                                                                                            'ZwOpenProcessTokenEx',
                                                                                            'wcschr',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'ZwQueryObject',
                                                                                            'wcsncpy',
                                                                                            'IoQueryFileDosDeviceName',
                                                                                            'wcsrchr',
                                                                                            'PsGetCurrentProcessSessionId',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPages',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoAllocateMdl',
                                                                                            'MmUnmapLockedPages',
                                                                                            'CmRegisterCallback',
                                                                                            'PsGetThreadTeb',
                                                                                            'PsLookupThreadByThreadId',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'PsGetProcessPeb',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlCreateUnicodeString',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'ZwSetInformationProcess',
                                                                                            'RtlLengthSid',
                                                                                            'ZwAssignProcessToJobObject',
                                                                                            'ZwSetInformationJobObject',
                                                                                            'ZwCreateJobObject',
                                                                                            'PsGetProcessJob',
                                                                                            'ZwTerminateProcess',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlGetAce',
                                                                                            'ZwSetSecurityObject',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'ZwQuerySecurityObject',
                                                                                            'SeTokenIsRestricted',
                                                                                            'SeFilterToken',
                                                                                            'ObfReferenceObject',
                                                                                            'ZwCreateKey',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlFormatCurrentUserKeyPath',
                                                                                            'IoGetCurrentProcess',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeBugCheckEx',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ZwConnectPort',
                                                                                            'LpcRequestWaitReplyPort',
                                                                                            'LpcRequestPort',
                                                                                            'ObfDereferenceObject',
                                                                                            'ObOpenObjectByPointer',
                                                                                            '_vsnprintf',
                                                                                            'IoAllocateMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmUnlockPages',
                                                                                            'IoFreeMdl',
                                                                                            'ExAllocatePool',
                                                                                            'ExFreePool',
                                                                                            'NtQuerySystemInformation',
                                                                                            'HalMakeBeep'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 139,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.Shltr0\x00': 0,
                                                                                       '.Shltr1\x00': 1024,
                                                                                       '.Shltr2\x00': 0,
                                                                                       '.Shltr3\x00': 170496,
                                                                                       '.data\x00\x00\x00': 0,
                                                                                       '.pdata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 0,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 0,
                                                                                       'INIT\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/5edd9e5338291dda1b4bba7ba5c6e7c7698568ba411ef3c0972bf96a48308dd0'},
 '5f119d621493d1731ca7df8ffc67c58f3a7dc3851e76f736649aeef524db0dc4': {'AddressOfEntryPoint': 34988,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5f119d621493d1731ca7df8ffc67c58f3a7dc3851e76f736649aeef524db0dc4'},
 '5f23c5c42fa609d9a42f562f8e64211d59019bfa89ba039c926abaedbc1c2318': {'AddressOfEntryPoint': 121744,
                                                                      'DebugRVA': 95104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90112,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/5f23c5c42fa609d9a42f562f8e64211d59019bfa89ba039c926abaedbc1c2318'},
 '5f8c892d0cf1ec2d9781c13853b2fb1b0f5e087e4c77e8b9de361b6ebe2226c5': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 200980,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 211968,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/5f8c892d0cf1ec2d9781c13853b2fb1b0f5e087e4c77e8b9de361b6ebe2226c5'},
 '5fe50cc188551b4cb9fbfc89d7e3a3b66d5c3ab188003f602d8661f43e29b90f': {'AddressOfEntryPoint': 97840,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'OLEACC.dll': 'CreateStdAccessibleObject',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'SHLWAPI.dll': 'PathFileExistsA',
                                                                                      'USER32.dll': 'GetWindowPlacement',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterA',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['PathFindFileNameA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFileExistsA',
                                                                                            'GlobalFlags',
                                                                                            'lstrcmpW',
                                                                                            'GlobalFindAtomA',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'SetErrorMode',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameW',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrcmpA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'SetLastError',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'GetSystemTime',
                                                                                            'FindResourceA',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenEventA',
                                                                                            'Sleep',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'GetVersionExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetThreadLocale',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32First',
                                                                                            'OpenProcess',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'Process32Next',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentProcessId',
                                                                                            'OutputDebugStringA',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetProcessHeap',
                                                                                            'DestroyMenu',
                                                                                            'UnregisterClassA',
                                                                                            'ShowWindow',
                                                                                            'RegisterWindowMessageA',
                                                                                            'LoadIconA',
                                                                                            'WinHelpA',
                                                                                            'GetCapture',
                                                                                            'GetClassLongA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'IsWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'MapWindowPoints',
                                                                                            'SetForegroundWindow',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'CopyRect',
                                                                                            'AdjustWindowRectEx',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowPos',
                                                                                            'IsIconic',
                                                                                            'GetWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetWindowRect',
                                                                                            'GetClassNameA',
                                                                                            'PtInRect',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoA',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'LoadCursorA',
                                                                                            'ReleaseDC',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableWindow',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuState',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'ModifyMenuA',
                                                                                            'SendMessageA',
                                                                                            'GetParent',
                                                                                            'GetFocus',
                                                                                            'SetCursor',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageA',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetStockObject',
                                                                                            'DeleteDC',
                                                                                            'SetBkColor',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'DeleteObject',
                                                                                            'GetClipBox',
                                                                                            'SetMapMode',
                                                                                            'SetTextColor',
                                                                                            'DocumentPropertiesA',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueA',
                                                                                            'ShellExecuteExA',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'LresultFromObject',
                                                                                            'CreateStdAccessibleObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 262,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 9998812,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10240,
                                                                                       '.pdata\x00\x00': 12800,
                                                                                       '.rdata\x00\x00': 59392,
                                                                                       '.rsrc\x00\x00\x00': 9998848,
                                                                                       '.text\x00\x00\x00': 175104},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/5fe50cc188551b4cb9fbfc89d7e3a3b66d5c3ab188003f602d8661f43e29b90f'},
 '604a974c12832f7aae6f2714f01642d80a72e0e11015ea2f77400a165f96c86f': {'AddressOfEntryPoint': 15312,
                                                                      'DebugRVA': 109760,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 156808,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'CopyFileA',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'LeaveCriticalSection',
                                                                                            'FatalAppExitA',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'GetStringTypeA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetTimeZoneInformation',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CopyFileA',
                                                                                            'MessageBoxA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 87,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 99840},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/604a974c12832f7aae6f2714f01642d80a72e0e11015ea2f77400a165f96c86f'},
 '6056ee4e09c4e67e50a113f5aca5abcf5790ed1c36bf9f154f630be4b1f5e84f': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 248824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 248832,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6056ee4e09c4e67e50a113f5aca5abcf5790ed1c36bf9f154f630be4b1f5e84f'},
 '6091bcf4dbff3294d19334246cd9c793cedab2ed0599ddc43707195a845fc236': {'AddressOfEntryPoint': 24584,
                                                                      'DebugRVA': 12560,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'KeBugCheckEx'},
                                                                      'ImportedFunctions': ['KeSetPriorityThread',
                                                                                            'PsRevertToSelf',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoDeleteDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'KeSetEvent',
                                                                                            'IoCreateDevice',
                                                                                            'swprintf',
                                                                                            'ZwQueryInformationFile',
                                                                                            'KeInitializeEvent',
                                                                                            'ZwWriteFile',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'SeTokenType',
                                                                                            'SeCreateClientSecurity',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwMakeTemporaryObject',
                                                                                            'ZwCreateFile',
                                                                                            'PsCreateSystemThread',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'SeImpersonateClient',
                                                                                            'ExAllocatePool',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ZwClose',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'IofCompleteRequest',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ZwReadFile',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 33,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 7168,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/6091bcf4dbff3294d19334246cd9c793cedab2ed0599ddc43707195a845fc236'},
 '60dc6bb966079d506892fd6320ef54d67b38a74a8bd9284520c4c78f028dfad6': {'AddressOfEntryPoint': 108412,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 595968,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/60dc6bb966079d506892fd6320ef54d67b38a74a8bd9284520c4c78f028dfad6'},
 '60ddb0c3201897bcd98e9cf3aa8eca8851274ab77caec001c974d8864288e1be': {'AddressOfEntryPoint': 56620,
                                                                      'DebugRVA': 144496,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 143360,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'SetWindowsHookExA'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetModuleFileNameA',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LocalAlloc',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'LocalFree',
                                                                                            'ReleaseSemaphore',
                                                                                            'ReleaseMutex',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetLastError',
                                                                                            'GetVersionExA',
                                                                                            'IsWow64Process',
                                                                                            'OpenProcess',
                                                                                            'Thread32Next',
                                                                                            'Thread32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 41984,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 137728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/60ddb0c3201897bcd98e9cf3aa8eca8851274ab77caec001c974d8864288e1be'},
 '6157fb7d72639cd60ea8c162222b58bcfca772182e1c8ca5fcba07ab8cb14e32': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2901052,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2901504,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6157fb7d72639cd60ea8c162222b58bcfca772182e1c8ca5fcba07ab8cb14e32'},
 '61a84fdc0e402a04b4fe3487c595e790ade0df010c0e928933797e47cee386c9': {'AddressOfEntryPoint': 405692,
                                                                      'DebugRVA': 4912,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 68728,
                                                                      'SectionNames': {'.npdata\x00': 1024,
                                                                                       '.pdata\x00\x00': 17408,
                                                                                       '.rdata\x00\x00': 40448,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 69120,
                                                                                       'INIT\x00\x00\x00\x00': 3584,
                                                                                       'PAGE\x00\x00\x00\x00': 301056,
                                                                                       'PAGED\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/61a84fdc0e402a04b4fe3487c595e790ade0df010c0e928933797e47cee386c9'},
 '61ba03cce4bb75cc502f8b0175ab3a12f7807a51f2321468ee32fbcf3317287f': {'AddressOfEntryPoint': 1074142929,
                                                                      'DebugRVA': 333312,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 331776,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetStartupInfoA',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'USER32.dll': 'CharToOemA'},
                                                                      'ImportedFunctions': ['SetConsoleCtrlHandler',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateFileW',
                                                                                            'BackupRead',
                                                                                            'BackupSeek',
                                                                                            'SetFileTime',
                                                                                            'MoveFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileTime',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileAttributesW',
                                                                                            'MoveFileA',
                                                                                            'DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryA',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetVersionExW',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'GetProcessAffinityMask',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CompareStringA',
                                                                                            'SetPriorityClass',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'ExitThread',
                                                                                            'SetLastError',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetConsoleCP',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'CharLowerW',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperA',
                                                                                            'CharLowerA',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'CharToOemBuffW',
                                                                                            'CharToOemBuffA',
                                                                                            'OemToCharA',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'GetFileSecurityW',
                                                                                            'GetFileSecurityA',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHFileOperationW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 29208,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/61ba03cce4bb75cc502f8b0175ab3a12f7807a51f2321468ee32fbcf3317287f'},
 '61d5ae02ad56f91cecbbb2850b3e32bb8f05195633f1ae78376dd76a832998e1': {'AddressOfEntryPoint': 706148,
                                                                      'DebugRVA': 952880,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 1120560,
                                                                      'ExportSize': 223,
                                                                      'IATRVA': 950272,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 119392,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10240,
                                                                                       '.pdata\x00\x00': 67072,
                                                                                       '.rdata\x00\x00': 171008,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 119808,
                                                                                       '.text\x00\x00\x00': 945152},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/61d5ae02ad56f91cecbbb2850b3e32bb8f05195633f1ae78376dd76a832998e1'},
 '6207633b1841e8ead389e463a97b622e4fa399b1aa9284feeadfc3474c507231': {'AddressOfEntryPoint': 1073848573,
                                                                      'DebugRVA': 35008,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'MSVCR80.dll': '_wcsicmp',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'GetWindowRect',
                                                                                      'WS2_32.dll': 'WSAStartup'},
                                                                      'ImportedFunctions': ['?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memset',
                                                                                            'vsprintf',
                                                                                            'isdigit',
                                                                                            'toupper',
                                                                                            '_swprintf',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'swscanf',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_purecall',
                                                                                            '_wcsicmp',
                                                                                            'OutputDebugStringA',
                                                                                            'GetLastError',
                                                                                            'lstrcpyW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'SetLastError',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SendMessageW',
                                                                                            'LoadIconW',
                                                                                            'EnableWindow',
                                                                                            'GetParent',
                                                                                            'PostMessageW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowRect',
                                                                                            'CryptGetUserKey',
                                                                                            'CryptDecrypt',
                                                                                            'CryptImportKey',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptEncrypt',
                                                                                            'CryptExportKey',
                                                                                            'CryptGenKey',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptSetProvParam',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CryptAcquireContextW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'InitCommonControlsEx',
                                                                                            'SysAllocString',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 48804,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6207633b1841e8ead389e463a97b622e4fa399b1aa9284feeadfc3474c507231'},
 '623737f068a89cd15b608abdf194a1c666d621d0024750fc9c58492444bc9ef7': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 361592,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 361984,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/623737f068a89cd15b608abdf194a1c666d621d0024750fc9c58492444bc9ef7'},
 '6262fdf0c20cde4333154d22fafccedb99856c1ab2dd0964c7dbf8892197d68e': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15208,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 15360,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/6262fdf0c20cde4333154d22fafccedb99856c1ab2dd0964c7dbf8892197d68e'},
 '62673b2b94c92523ae07c781f47903913ca28bffe827c49c4eddfddb07fea54f': {'AddressOfEntryPoint': 58560,
                                                                      'DebugRVA': 63152,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GlobalLock',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'TrackPopupMenu',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'comdlg32.dll': 'GetSaveFileNameA',
                                                                                      'msvcrt.dll': 'sprintf'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__setusermatherr',
                                                                                            '__dllonexit',
                                                                                            '_mbschr',
                                                                                            '_snprintf',
                                                                                            '_strlwr',
                                                                                            '_mbsicmp',
                                                                                            '_purecall',
                                                                                            'qsort',
                                                                                            '_itoa',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memcmp',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_onexit',
                                                                                            'strtoul',
                                                                                            'atoi',
                                                                                            'strcmp',
                                                                                            '_memicmp',
                                                                                            'strrchr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'strchr',
                                                                                            'strlen',
                                                                                            '_stricmp',
                                                                                            'memcpy',
                                                                                            '_strcmpi',
                                                                                            'memset',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_SetImageCount',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'ReadProcessMemory',
                                                                                            'DeleteFileA',
                                                                                            'EnumResourceNamesA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WinExec',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'ReadFile',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LocalFree',
                                                                                            'lstrcpyA',
                                                                                            'FormatMessageA',
                                                                                            'CreateFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetFileSize',
                                                                                            'GlobalUnlock',
                                                                                            'GetDateFormatA',
                                                                                            'WriteFile',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'GlobalAlloc',
                                                                                            'GetTempFileNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GlobalLock',
                                                                                            'EnumWindows',
                                                                                            'AttachThreadInput',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'DispatchMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'DeferWindowPos',
                                                                                            'TranslateMessage',
                                                                                            'BeginDeferWindowPos',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'SetDlgItemTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'SetDlgItemInt',
                                                                                            'RegisterClassA',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetWindowPos',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'LoadIconA',
                                                                                            'LoadImageA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'InvalidateRect',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'GetMenu',
                                                                                            'GetCursorPos',
                                                                                            'MoveWindow',
                                                                                            'GetDC',
                                                                                            'GetSysColor',
                                                                                            'CheckMenuItem',
                                                                                            'SetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'EnableWindow',
                                                                                            'EmptyClipboard',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'GetMenuItemCount',
                                                                                            'DestroyWindow',
                                                                                            'GetMenuItemInfoA',
                                                                                            'GetWindowTextA',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'LoadStringA',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'EnumChildWindows',
                                                                                            'DestroyIcon',
                                                                                            'GetMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetFocus',
                                                                                            'EndDeferWindowPos',
                                                                                            'TrackPopupMenu',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'FindTextA',
                                                                                            'GetSaveFileNameA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'ExtractIconExA',
                                                                                            'ShellExecuteA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 194,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 11312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 13312,
                                                                                       '.rsrc\x00\x00\x00': 11776,
                                                                                       '.text\x00\x00\x00': 55808},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/62673b2b94c92523ae07c781f47903913ca28bffe827c49c4eddfddb07fea54f'},
 '62f51d2196485408045ac008b1c6020e10f57cbf61ded71c0b346af2e869ee23': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 487236,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 487424,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/62f51d2196485408045ac008b1c6020e10f57cbf61ded71c0b346af2e869ee23'},
 '6334f6cd2af17fec522fe6443f05acecd002e5f52c86e516aa5b54fcfcebd170': {'AddressOfEntryPoint': 49160,
                                                                      'DebugRVA': 36976,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortNotification'},
                                                                      'ImportedFunctions': ['StorPortGetScatterGatherList',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortLogError',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortCompleteRequest',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortNotification',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 12,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 31232,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/6334f6cd2af17fec522fe6443f05acecd002e5f52c86e516aa5b54fcfcebd170'},
 '638d8b4c817622aa1020c2e89d068d43fe8efaed37339ee2fd5713579c2041eb': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 502700,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 502784,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/638d8b4c817622aa1020c2e89d068d43fe8efaed37339ee2fd5713579c2041eb'},
 '639528ba0d2f206cdcf4df6f4aa9c533c899726435c21c67a8398ae989361649': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 591032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 591360,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/639528ba0d2f206cdcf4df6f4aa9c533c899726435c21c67a8398ae989361649'},
 '63ce11e3c93db194fbd2bb199f440fb0f262ba519deabc922a3bb4fc66ceadff': {'AddressOfEntryPoint': 121744,
                                                                      'DebugRVA': 95104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90112,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/63ce11e3c93db194fbd2bb199f440fb0f262ba519deabc922a3bb4fc66ceadff'},
 '642a03a55e04e2ec6da2f8a8df0a2f8b63c0f35f7ac021eb0a4fa1e92a6f601c': {'AddressOfEntryPoint': 35116,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/642a03a55e04e2ec6da2f8a8df0a2f8b63c0f35f7ac021eb0a4fa1e92a6f601c'},
 '64ed0e533d82e680dc32f4d593bbc63f97bcc171f8d4d43b43366e2cc6d6d826': {'AddressOfEntryPoint': 477410,
                                                                      'DebugRVA': 162144,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 159744,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptAcquireContextA',
                                                                                      'CRYPT32.dll': 'CertCloseStore',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.dll': 'GlobalHandle',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'EndPaint',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'WININET.dll': 'InternetErrorDlg',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'ole32.dll': 'CoTaskMemFree',
                                                                                      'urlmon.dll': 'URLDownloadToFileA'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptCreateHash',
                                                                                            'CryptAcquireContextA',
                                                                                            'CertGetNameStringW',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CryptMsgGetParam',
                                                                                            'CryptQueryObject',
                                                                                            'CryptMsgClose',
                                                                                            'CertCloseStore',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'wsprintfA',
                                                                                            'GetDesktopWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'GetSysColor',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowRect',
                                                                                            'PtInRect',
                                                                                            'SetCursor',
                                                                                            'GetDlgCtrlID',
                                                                                            'LoadBitmapA',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'CharNextA',
                                                                                            'RegisterClassA',
                                                                                            'ShowWindow',
                                                                                            'PostQuitMessage',
                                                                                            'LoadStringA',
                                                                                            'AppendMenuA',
                                                                                            'GetCursorPos',
                                                                                            'SetForegroundWindow',
                                                                                            'CallWindowProcA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetWindowPos',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'InvalidateRect',
                                                                                            'InvalidateRgn',
                                                                                            'RedrawWindow',
                                                                                            'SetCapture',
                                                                                            'IsChild',
                                                                                            'GetParent',
                                                                                            'GetDlgItem',
                                                                                            'GetClassNameA',
                                                                                            'SetFocus',
                                                                                            'GetWindow',
                                                                                            'GetFocus',
                                                                                            'MessageBoxA',
                                                                                            'CreatePopupMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'PostMessageA',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadImageA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowTextA',
                                                                                            'CreateAcceleratorTableA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'IsWindow',
                                                                                            'SendMessageA',
                                                                                            'ReleaseCapture',
                                                                                            'BeginPaint',
                                                                                            'FillRect',
                                                                                            'EndPaint',
                                                                                            'StretchBlt',
                                                                                            'SetTextColor',
                                                                                            'SaveDC',
                                                                                            'SetGraphicsMode',
                                                                                            'ModifyWorldTransform',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'DPtoLP',
                                                                                            'CreateFontIndirectA',
                                                                                            'RestoreDC',
                                                                                            'GetStockObject',
                                                                                            'GetObjectA',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'WinVerifyTrust',
                                                                                            'HttpAddRequestHeadersA',
                                                                                            'InternetTimeFromSystemTime',
                                                                                            'InternetTimeToSystemTime',
                                                                                            'InternetReadFile',
                                                                                            'InternetGetConnectedState',
                                                                                            'InternetOpenA',
                                                                                            'InternetCrackUrlA',
                                                                                            'InternetConnectA',
                                                                                            'HttpOpenRequestA',
                                                                                            'HttpSendRequestA',
                                                                                            'HttpQueryInfoA',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetErrorDlg',
                                                                                            'URLDownloadToFileA',
                                                                                            'Shell_NotifyIconA',
                                                                                            'ShellExecuteA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetTimeZoneInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlUnwindEx',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetThreadLocale',
                                                                                            'CreatePipe',
                                                                                            'SetHandleInformation',
                                                                                            'ReadFile',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetStdHandle',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'FlushFileBuffers',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringA',
                                                                                            'TlsAlloc',
                                                                                            'GetCPInfo',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'LocalFree',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'OpenEventA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemTime',
                                                                                            'lstrcpynA',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            '__C_specific_handler',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapDestroy',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateMutexA',
                                                                                            'lstrcmpiA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'FlushInstructionCache',
                                                                                            'GetCurrentProcess',
                                                                                            'RaiseException',
                                                                                            'WriteFile',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'CompareFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetFileTime',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'lstrcatA',
                                                                                            'lstrcpyA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'DeleteFileA',
                                                                                            'FormatMessageA',
                                                                                            'SetLastError',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'FreeResource',
                                                                                            'GlobalFree',
                                                                                            'GlobalHandle',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'StringFromCLSID',
                                                                                            'CLSIDFromProgID',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleLockRunning',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadRegTypeLib',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 272,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 208456,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8704,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 49152,
                                                                                       '.rsrc\x00\x00\x00': 236544,
                                                                                       '.text\x00\x00\x00': 154624,
                                                                                       'dwplybt\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/64ed0e533d82e680dc32f4d593bbc63f97bcc171f8d4d43b43366e2cc6d6d826'},
 '652cac5fedbc07221da48a735868fb33b55e11496c2d31816c99b1d8a8d86a39': {'AddressOfEntryPoint': 61916,
                                                                      'DebugRVA': 65680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'storport.sys': 'StorPortSetDeviceQueueDepth'},
                                                                      'ImportedFunctions': ['StorPortDebugPrint',
                                                                                            'StorPortNotification',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortExtendedFunction',
                                                                                            'StorPortQuerySystemTime',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortFreeRegistryBuffer',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortAllocateRegistryBuffer',
                                                                                            'StorPortRegistryRead',
                                                                                            'StorPortDeviceBusy',
                                                                                            'StorPortSetDeviceQueueDepth'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 16,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 60416,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/652cac5fedbc07221da48a735868fb33b55e11496c2d31816c99b1d8a8d86a39'},
 '6592df07e6f9c9b818e7c9b45331f5ca79e60ef5977d2b3ab19bac23f585740e': {'AddressOfEntryPoint': 34908,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6592df07e6f9c9b818e7c9b45331f5ca79e60ef5977d2b3ab19bac23f585740e'},
 '6647101d7f42fd62225439f1065f0214acfffb3adb2f152cd4aab4539ad5f10d': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/6647101d7f42fd62225439f1065f0214acfffb3adb2f152cd4aab4539ad5f10d'},
 '66732ae7086ac646b223a5244af6a89f3ec25061d9f3d401a6111dbe5f4dd7b3': {'AddressOfEntryPoint': 484736,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 585728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'GetActiveObject',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'SetKeyboardState',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'listen',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'listen',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'waveOutSetVolume',
                                                                                            'timeGetTime',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Remove',
                                                                                            'WNetUseConnectionW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenProcess',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'SetSystemPowerState',
                                                                                            'SetFileTime',
                                                                                            'FindResourceW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadResource',
                                                                                            'FindFirstFileW',
                                                                                            'LockResource',
                                                                                            'FindClose',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'CreatePipe',
                                                                                            'GetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'VirtualFree',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'DeviceIoControl',
                                                                                            'SetErrorMode',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'GetShortPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'Beep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileSize',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'HeapFree',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'PtInRect',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowDC',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateMenu',
                                                                                            'GetSysColor',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetActiveWindow',
                                                                                            'InflateRect',
                                                                                            'CharNextW',
                                                                                            'DrawFocusRect',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CountClipboardFormats',
                                                                                            'CharLowerBuffW',
                                                                                            'UnregisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'FillRect',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'IsCharLowerW',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'GetCursor',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'GetAsyncKeyState',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'CopyRect',
                                                                                            'BeginPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'DrawFrameControl',
                                                                                            'FrameRect',
                                                                                            'RedrawWindow',
                                                                                            'DrawTextW',
                                                                                            'wsprintfW',
                                                                                            'FlashWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'IsZoomed',
                                                                                            'GetCaretPos',
                                                                                            'GetSubMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetMenuStringW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharUpperW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetKeyboardState',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DestroyIcon',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetDC',
                                                                                            'WindowFromPoint',
                                                                                            'SetClipboardData',
                                                                                            'VkKeyScanA',
                                                                                            'EmptyClipboard',
                                                                                            'SetKeyboardState',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CloseFigure',
                                                                                            'SetPixel',
                                                                                            'EndPath',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'ExtCreatePen',
                                                                                            'PolyBezierTo',
                                                                                            'SetViewportOrgEx',
                                                                                            'Rectangle',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'SHFileOperationW',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'GetActiveObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 459,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 48816,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.pdata\x00\x00': 19456,
                                                                                       '.rdata\x00\x00': 81920,
                                                                                       '.rsrc\x00\x00\x00': 49152,
                                                                                       '.text\x00\x00\x00': 580096},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/66732ae7086ac646b223a5244af6a89f3ec25061d9f3d401a6111dbe5f4dd7b3'},
 '66c6327c3e1c5f001fb61984b80e58fe9c34f243744f3a8752429bad518f8749': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwWriteFile',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwResumeThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetValueKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'HeapAlloc',
                                                                                            'GetVersion',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/66c6327c3e1c5f001fb61984b80e58fe9c34f243744f3a8752429bad518f8749'},
 '67085c902c65567e81845fa9d162bff568bdcd59df67bfe1dd90dd6bf8ea0ba5': {'AddressOfEntryPoint': 4416,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'SHLWAPI.dll': 'PathFileExistsA',
                                                                                      'USER32.dll': 'wvsprintfA',
                                                                                      'imagehlp.dll': 'CheckSumMappedFile'},
                                                                      'ImportedFunctions': ['CheckSumMappedFile',
                                                                                            'PathFileExistsA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'lstrlenA',
                                                                                            'GetCommandLineA',
                                                                                            'ExitProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'IsBadReadPtr',
                                                                                            'CloseHandle',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'DeleteFileA',
                                                                                            'CopyFileA',
                                                                                            'MoveFileExA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrcpyA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'lstrcatA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersion',
                                                                                            'HeapFree',
                                                                                            'ReadConsoleA',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'CreateProcessA',
                                                                                            'wsprintfA',
                                                                                            'wvsprintfA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 39,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1592,
                                                                      'SectionNames': {'.data\x00\x00\x00': 0,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/67085c902c65567e81845fa9d162bff568bdcd59df67bfe1dd90dd6bf8ea0ba5'},
 '6744cee15755896a14f23ecad9f789932097f61f3af9e863cd9563818bd52f3c': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/6744cee15755896a14f23ecad9f789932097f61f3af9e863cd9563818bd52f3c'},
 '679185dfe9116ec51311577155282272f97eff304d230e6d087b5fa4f83b1ddf': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1413500,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1413632,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/679185dfe9116ec51311577155282272f97eff304d230e6d087b5fa4f83b1ddf'},
 '67afdd03734db788bb2e027f60b5e4f341a644db5fce057fe16fb6994ff0e460': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 512988,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 513024,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/67afdd03734db788bb2e027f60b5e4f341a644db5fce057fe16fb6994ff0e460'},
 '68142e058d6123c0e2e6a623189eb5d7ccfe59dae52dca751db5c5600d31e446': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 440012,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 440320,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/68142e058d6123c0e2e6a623189eb5d7ccfe59dae52dca751db5c5600d31e446'},
 '68a48964f3f010ebee03d061919bb25ac8b39cdabaa0e8f854306e7a607a60f4': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 159180,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 159232,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/68a48964f3f010ebee03d061919bb25ac8b39cdabaa0e8f854306e7a607a60f4'},
 '68ba25079b1394986f7208d6dabc272ae35d6578b9525d7470fe9560159ff943': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 189700,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 189952,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/68ba25079b1394986f7208d6dabc272ae35d6578b9525d7470fe9560159ff943'},
 '68d003ae15085663b50f6fccd4df7cad70798bcc61b5f30ef670c2fbbb4084dc': {'AddressOfEntryPoint': 1074646353,
                                                                      'DebugRVA': 7344,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'UnmapViewOfFile',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SETUPAPI.dll': 'SetupCloseFileQueue',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'DrawTextExW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'msvcrt.dll': 'memcmp',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'IsTextUnicode',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetEntriesInAclW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'StartServiceW',
                                                                                            'RegDeleteValueW',
                                                                                            'CheckTokenMembership',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetFilePointer',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'CreateMutexW',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'ReadConsoleOutputW',
                                                                                            'FillConsoleOutputCharacterW',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'ReleaseMutex',
                                                                                            'FreeLibrary',
                                                                                            'WriteConsoleOutputW',
                                                                                            'WriteConsoleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'IsValidLocale',
                                                                                            'VirtualProtect',
                                                                                            'Sleep',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'RaiseException',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'FindFirstFileW',
                                                                                            'CopyFileW',
                                                                                            'lstrlenW',
                                                                                            'SetFileAttributesW',
                                                                                            'FormatMessageW',
                                                                                            'GetTempFileNameW',
                                                                                            'MapViewOfFile',
                                                                                            'FreeConsole',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileSize',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'SetEndOfFile',
                                                                                            'LocalReAlloc',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetShortPathNameW',
                                                                                            'RemoveDirectoryW',
                                                                                            'MoveFileExW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'SearchPathW',
                                                                                            'SetLastError',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryExW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetStartupInfoW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CompareStringW',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'CreateThread',
                                                                                            'SetThreadLocale',
                                                                                            'GetThreadLocale',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'LocalFree',
                                                                                            'FindResourceW',
                                                                                            'GlobalFree',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LocalAlloc',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExW',
                                                                                            'GetCommandLineW',
                                                                                            'CloseHandle',
                                                                                            'GetLocalTime',
                                                                                            'FindResourceExW',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'UnmapViewOfFile',
                                                                                            'SelectObject',
                                                                                            'CreateBitmap',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'SetLayout',
                                                                                            'CreateCompatibleDC',
                                                                                            'EndPage',
                                                                                            'StartPage',
                                                                                            'EndDoc',
                                                                                            'StartDocW',
                                                                                            'GetTextMetricsW',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'MessageBoxW',
                                                                                            'CreateIconIndirect',
                                                                                            'DrawIconEx',
                                                                                            'GetIconInfo',
                                                                                            'LoadIconW',
                                                                                            'LoadBitmapW',
                                                                                            'PostQuitMessage',
                                                                                            'SendMessageW',
                                                                                            'CharPrevW',
                                                                                            'CharLowerW',
                                                                                            'UnregisterClassA',
                                                                                            'DefWindowProcW',
                                                                                            'EndDialog',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'ShowWindow',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetDlgItem',
                                                                                            'DestroyIcon',
                                                                                            'ReleaseDC',
                                                                                            'InvalidateRect',
                                                                                            'SetWindowTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'PostMessageW',
                                                                                            'GetParent',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSysColor',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckDlgButton',
                                                                                            'SetFocus',
                                                                                            'CallWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SystemParametersInfoW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'DrawTextExW',
                                                                                            '_resetstkoflw',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            '_wcsupr',
                                                                                            '_wcslwr',
                                                                                            '_errno',
                                                                                            '__CxxFrameHandler',
                                                                                            'fread',
                                                                                            'feof',
                                                                                            'realloc',
                                                                                            'fclose',
                                                                                            '_wfopen',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            '_vscwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            '_CxxThrowException',
                                                                                            'mbtowc',
                                                                                            '__mb_cur_max',
                                                                                            'isleadbyte',
                                                                                            '_iob',
                                                                                            '_snprintf',
                                                                                            'ferror',
                                                                                            '__badioinfo',
                                                                                            '__pioinfo',
                                                                                            '_fileno',
                                                                                            '_lseeki64',
                                                                                            '_write',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcsncmp',
                                                                                            'bsearch',
                                                                                            '?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                            'iswalpha',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'wcschr',
                                                                                            'wcspbrk',
                                                                                            'wcsrchr',
                                                                                            'iswdigit',
                                                                                            '_isatty',
                                                                                            'fwprintf',
                                                                                            '_itoa',
                                                                                            'memcmp',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlCaptureContext',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SetupFindNextLine',
                                                                                            'pSetupSetGlobalFlags',
                                                                                            'pSetupGetGlobalFlags',
                                                                                            'SetupInstallServicesFromInfSectionW',
                                                                                            'SetupInstallFromInfSectionW',
                                                                                            'SetupGetTargetPathW',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupOpenFileQueue',
                                                                                            'SetupDiGetSelectedDriverW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupFindNextMatchLineW',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetActualSectionToInstallW',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'SetupCommitFileQueueW',
                                                                                            'SetupInitDefaultQueueCallbackEx',
                                                                                            'CMP_WaitNoPendingInstallEvents',
                                                                                            'SetupDiOpenClassRegKey',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupGetLineCountW',
                                                                                            'SetupOpenAppendInfFileW',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetIntField',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupInstallFilesFromInfSectionW',
                                                                                            'SetupPromptReboot',
                                                                                            'CM_Get_Device_ID_ListW',
                                                                                            'CM_Get_Device_ID_List_SizeW',
                                                                                            'CM_Locate_DevNodeW',
                                                                                            'CM_Query_And_Remove_SubTreeW',
                                                                                            'CM_Setup_DevNode',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'CM_Enumerate_Classes',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupQueueCopyW',
                                                                                            'SetupCloseFileQueue',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'WinVerifyTrust',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'ImageList_SetBkColor',
                                                                                            'PropertySheetW',
                                                                                            'ImageList_Create',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'PrintDlgExW',
                                                                                            'GetSaveFileNameW',
                                                                                            'CertFreeCTLContext',
                                                                                            'CertGetCTLContextProperty',
                                                                                            'CryptQueryObject',
                                                                                            'CertFreeCertificateContext',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 353,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 356820,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/68d003ae15085663b50f6fccd4df7cad70798bcc61b5f30ef670c2fbbb4084dc'},
 '69422bbcff151cbc45d6f45a203c12a0042eb281f72b4a059cd2ebdae291227b': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 314028,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 314368,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/69422bbcff151cbc45d6f45a203c12a0042eb281f72b4a059cd2ebdae291227b'},
 '694d2a24f641ab5379049d579f8d382904bc400c7915e44aa8c0cb95b0957d1c': {'AddressOfEntryPoint': 8310,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'OpenEventW'},
                                                                      'ImportedFunctions': ['GetCommandLineW',
                                                                                            'Thread32First',
                                                                                            'OpenMutexA',
                                                                                            'Thread32Next',
                                                                                            'OpenEventA',
                                                                                            'ExitVDM',
                                                                                            'VirtualAlloc',
                                                                                            'Process32NextW',
                                                                                            'SleepEx',
                                                                                            'OpenEventW'],
                                                                      'LinkerVersion': 4,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 10,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 28160,
                                                                                       '.data\x00\x00\x00': 60416,
                                                                                       '.idata\x00\x00': 20992,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/694d2a24f641ab5379049d579f8d382904bc400c7915e44aa8c0cb95b0957d1c'},
 '69bfb20f7c1756426db121ae0f57f6e421f434b79eb13e4b81fbaeaa7a713053': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 284684,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 285184,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/69bfb20f7c1756426db121ae0f57f6e421f434b79eb13e4b81fbaeaa7a713053'},
 '69c21aa33067e98e331dfef3e7b36d338abb09e3395c177850a68ee4401b939d': {'AddressOfEntryPoint': 62976,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'Secur32.dll': 'LsaEnumerateLogonSessions',
                                                                                      'WS2_32.dll': 'htonl'},
                                                                      'ImportedFunctions': ['AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'NotifyChangeEventLog',
                                                                                            'OpenEventLogA',
                                                                                            'GetNumberOfEventLogRecords',
                                                                                            'GetOldestEventLogRecord',
                                                                                            'ReadEventLogA',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptCreateHash',
                                                                                            'CryptAcquireContextA',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatus',
                                                                                            'CreateServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'DeleteService',
                                                                                            'OpenServiceA',
                                                                                            'StartServiceA',
                                                                                            'ControlService',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'OpenThreadToken',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'LsaGetLogonSessionData',
                                                                                            'LsaEnumerateLogonSessions',
                                                                                            'ntohl',
                                                                                            'ntohs',
                                                                                            'htonl',
                                                                                            'CreateFileW',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'DeleteFileA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'Sleep',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetVersionExA',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameA',
                                                                                            'Process32Next',
                                                                                            'CloseHandle',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'ReadProcessMemory',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateRemoteThread',
                                                                                            'VirtualFreeEx',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateFileA',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'FreeResource',
                                                                                            'ResetEvent',
                                                                                            'GetLastError',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemWindowsDirectoryA',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'WaitNamedPipeA',
                                                                                            'WriteFile',
                                                                                            'DisconnectNamedPipe',
                                                                                            'FlushFileBuffers',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeA',
                                                                                            'WideCharToMultiByte',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCurrentThread',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 148,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 55408,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 16896,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 55808,
                                                                                       '.text\x00\x00\x00': 116224},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/69c21aa33067e98e331dfef3e7b36d338abb09e3395c177850a68ee4401b939d'},
 '69e084e17f3256766031cf1de87950f700339ec7e7de02fd8c80e8e13cf1ce06': {'AddressOfEntryPoint': 24542,
                                                                      'DebugRVA': 7104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseThreadWaitChainSession',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'CreatePen',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'SHLWAPI.dll': 'StrStrW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'DestroyIcon',
                                                                                      'UxTheme.dll': 'SetWindowTheme',
                                                                                      'credui.dll': 'CredUIPromptForCredentialsW',
                                                                                      'msvcrt.dll': 'towlower',
                                                                                      'ntdll.dll': 'NtClose',
                                                                                      'pcwum.dll': 'PcwCreateQuery',
                                                                                      'wevtapi.dll': 'EvtClose'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'EventWrite',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RevertToSelf',
                                                                                            'GetTokenInformation',
                                                                                            'CreateWellKnownSid',
                                                                                            'IsValidSid',
                                                                                            'SetTokenInformation',
                                                                                            'EnumServicesStatusExW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceConfigW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'StartServiceW',
                                                                                            'ControlService',
                                                                                            'OpenThreadWaitChainSession',
                                                                                            'GetThreadWaitChain',
                                                                                            'CloseThreadWaitChainSession',
                                                                                            'CallbackMayRunLong',
                                                                                            'OpenProcess',
                                                                                            'TrySubmitThreadpoolCallback',
                                                                                            'IsWow64Process',
                                                                                            'GetPriorityClass',
                                                                                            'GetTimeFormatW',
                                                                                            'GetExitCodeThread',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileW',
                                                                                            'DuplicateHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'LocalFree',
                                                                                            'GetLogicalProcessorInformationEx',
                                                                                            'GetNumaHighestNodeNumber',
                                                                                            'SetEvent',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Thread32First',
                                                                                            'OpenThread',
                                                                                            'Thread32Next',
                                                                                            'Sleep',
                                                                                            'lstrcmpW',
                                                                                            'GetComputerNameW',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ReadProcessMemory',
                                                                                            'lstrcmpiW',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'GetTickCount',
                                                                                            'HeapSize',
                                                                                            'MulDiv',
                                                                                            'HeapReAlloc',
                                                                                            'FormatMessageW',
                                                                                            'CloseThreadpoolCleanupGroup',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'CreateEventW',
                                                                                            'CreateThreadpoolCleanupGroup',
                                                                                            'GetErrorMode',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcessId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'SetPriorityClass',
                                                                                            'DeviceIoControl',
                                                                                            'SetLastError',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'HeapSetInformation',
                                                                                            'CreateMutexW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'ReleaseMutex',
                                                                                            'CloseThreadpoolCleanupGroupMembers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'SetBkMode',
                                                                                            'GetCurrentObject',
                                                                                            'GetObjectW',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetCharWidth32W',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SetBkColor',
                                                                                            'DeleteDC',
                                                                                            'CreateCompatibleDC',
                                                                                            'SetTextColor',
                                                                                            'GetDeviceCaps',
                                                                                            'Rectangle',
                                                                                            'BitBlt',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'CreatePen',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetProcessDPIAware',
                                                                                            'RegisterWindowMessageW',
                                                                                            'MessageBoxW',
                                                                                            'CreateDialogParamW',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadMenuW',
                                                                                            'RemoveMenu',
                                                                                            'DestroyMenu',
                                                                                            'CreateWindowExW',
                                                                                            'DrawTextW',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetSysColor',
                                                                                            'GetDlgCtrlID',
                                                                                            'EnableMenuItem',
                                                                                            'AppendMenuW',
                                                                                            'DialogBoxParamW',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollPos',
                                                                                            'EndDialog',
                                                                                            'GetSystemMetrics',
                                                                                            'GetGuiResources',
                                                                                            'EnableWindow',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetWindowTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'IsHungAppWindow',
                                                                                            'SetThreadDesktop',
                                                                                            'IsWindowVisible',
                                                                                            'EndTask',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'EnumDesktopsW',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'EnumDesktopWindows',
                                                                                            'CloseDesktop',
                                                                                            'GetWindow',
                                                                                            'InternalGetWindowText',
                                                                                            'ShowWindowAsync',
                                                                                            'SetMenuDefaultItem',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindow',
                                                                                            'SwitchToThisWindow',
                                                                                            'TileWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'CascadeWindows',
                                                                                            'PeekMessageW',
                                                                                            'GetCursorPos',
                                                                                            'CheckDlgButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'SetRect',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'FindWindowW',
                                                                                            'SetFocus',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetClassNameW',
                                                                                            'GetFocus',
                                                                                            'GetParent',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'LoadAcceleratorsW',
                                                                                            'PostQuitMessage',
                                                                                            'MessageBeep',
                                                                                            'RedrawWindow',
                                                                                            'MoveWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'DefWindowProcW',
                                                                                            'GetMenuItemID',
                                                                                            'GetSubMenu',
                                                                                            'IsZoomed',
                                                                                            'IsIconic',
                                                                                            'SetForegroundWindow',
                                                                                            'OpenIcon',
                                                                                            'KillTimer',
                                                                                            'DestroyWindow',
                                                                                            'PostMessageW',
                                                                                            'LoadImageW',
                                                                                            'EndDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'ShowWindow',
                                                                                            'GetShellWindow',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetTimer',
                                                                                            'LoadIconW',
                                                                                            'GetThreadDesktop',
                                                                                            'GetDialogBaseUnits',
                                                                                            'GetWindowRect',
                                                                                            'PostThreadMessageW',
                                                                                            'GetForegroundWindow',
                                                                                            'SendMessageW',
                                                                                            'MapWindowPoints',
                                                                                            'GetDlgItem',
                                                                                            'SetMenu',
                                                                                            'SetWindowPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuItem',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenu',
                                                                                            'SetWindowTextW',
                                                                                            'LoadStringW',
                                                                                            'RegisterClassW',
                                                                                            'GetClassInfoW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetKeyState',
                                                                                            'CallWindowProcW',
                                                                                            'GetSysColorBrush',
                                                                                            'FillRect',
                                                                                            'GetClientRect',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'HungWindowFromGhostWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'DestroyIcon',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_wtol',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'swscanf_s',
                                                                                            'memmove',
                                                                                            '_ui64tow_s',
                                                                                            'wcsstr',
                                                                                            '_i64tow_s',
                                                                                            '_wcsicmp',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsdup',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            '_exit',
                                                                                            'memcpy',
                                                                                            'free',
                                                                                            'towlower',
                                                                                            'GetIfEntry2',
                                                                                            'NhGetInterfaceNameFromDeviceGuid',
                                                                                            'GetAdaptersAddresses',
                                                                                            'CreateStatusWindowW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_SetIconSize',
                                                                                            'ImageList_Create',
                                                                                            'PcwCollectData',
                                                                                            'PcwAddQueryItem',
                                                                                            'PcwCreateQuery',
                                                                                            'StrFormatByteSizeW',
                                                                                            'PathAddExtensionW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathAppendW',
                                                                                            'StrStrW',
                                                                                            'ShellAboutW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHParseDisplayName',
                                                                                            'SHOpenFolderAndSelectItems',
                                                                                            'CommandLineToArgvW',
                                                                                            'DuplicateIcon',
                                                                                            'Shell_NotifyIconW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlTryEnterCriticalSection',
                                                                                            'NtSetInformationFile',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtOpenFile',
                                                                                            'RtlTimeToElapsedTimeFields',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'NtQueryInformationProcess',
                                                                                            'NtQueryTimerResolution',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlDeleteCriticalSection',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'NtQuerySystemInformation',
                                                                                            'WinSqmAddToStream',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtClose',
                                                                                            'GetUserNameExW',
                                                                                            'IsThemeActive',
                                                                                            'SetWindowTheme',
                                                                                            'EvtSubscribe',
                                                                                            'EvtClose',
                                                                                            'CredUIPromptForCredentialsW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 334,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 91600,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 91648,
                                                                                       '.text\x00\x00\x00': 156160},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/69e084e17f3256766031cf1de87950f700339ec7e7de02fd8c80e8e13cf1ce06'},
 '69e6ac5e7a648b547e0513821aefdff286918fec9a17bdc604c798dd38dc1863': {'AddressOfEntryPoint': 884844,
                                                                      'DebugRVA': 346340,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 856064,
                                                                      'ExportSize': 16727,
                                                                      'IATRVA': 348160,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 17,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 75612,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.edata\x00\x00': 16896,
                                                                                       '.guids\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 39424,
                                                                                       '.rdata\x00\x00': 53760,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 75776,
                                                                                       '.text\x00\x00\x00': 342528,
                                                                                       'INIT\x00\x00\x00\x00': 23040,
                                                                                       'PAGE\x00\x00\x00\x00': 83968,
                                                                                       'PAGEDATA': 5632,
                                                                                       'PAGENDCO': 20992,
                                                                                       'PAGENDSE': 7680,
                                                                                       'PAGENDSM': 92160,
                                                                                       'PAGENDSP': 33280,
                                                                                       'PAGENDST': 7168,
                                                                                       'PAGENPNP': 128512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/69e6ac5e7a648b547e0513821aefdff286918fec9a17bdc604c798dd38dc1863'},
 '6a059810c40bf6534540ceb5305fdc08213541da786085c1a637d5fbfa5ef9b2': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 292964,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 293376,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6a059810c40bf6534540ceb5305fdc08213541da786085c1a637d5fbfa5ef9b2'},
 '6a3cd9c3d2b5a1d61652085c1a3b172fba70413bd2297ff3f503ac05fd953f3c': {'AddressOfEntryPoint': 212768,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 323584,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetSystemInfo',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'SETUPAPI.dll': 'CM_Get_DevNode_Status_Ex',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'SHLWAPI.dll': 'PathIsUNCA',
                                                                                      'USER32.dll': 'ValidateRect',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterA',
                                                                                      'comdlg32.dll': 'GetFileTitleA',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA',
                                                                                      'ole32.dll': 'CoRevokeClassObject'},
                                                                      'ImportedFunctions': ['SetupDiRemoveDevice',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupFindFirstLineA',
                                                                                            'SetupGetStringFieldA',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupCopyOEMInfA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiGetDeviceInfoListDetailA',
                                                                                            'CM_Get_DevNode_Status_Ex',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GlobalFlags',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSize',
                                                                                            'GetThreadLocale',
                                                                                            'DuplicateHandle',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileTime',
                                                                                            'GetTickCount',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'GetACP',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalFindAtomA',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeResource',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAddAtomA',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrcmpA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'FormatMessageA',
                                                                                            'MulDiv',
                                                                                            'SetLastError',
                                                                                            'CreateThread',
                                                                                            'lstrcpyA',
                                                                                            'SetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetVersionExA',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemInfo',
                                                                                            'IsRectEmpty',
                                                                                            'SetRect',
                                                                                            'InvalidateRect',
                                                                                            'InvalidateRgn',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MessageBeep',
                                                                                            'UnregisterClassA',
                                                                                            'DestroyMenu',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'PostThreadMessageA',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpA',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'GetClassLongA',
                                                                                            'GetClassNameA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'SetForegroundWindow',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'PtInRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowLongA',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetWindow',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CopyRect',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'CharUpperA',
                                                                                            'DrawIcon',
                                                                                            'SendMessageA',
                                                                                            'EndDialog',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageA',
                                                                                            'GetCursorPos',
                                                                                            'CharNextA',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetSysColorBrush',
                                                                                            'EndPaint',
                                                                                            'MapWindowPoints',
                                                                                            'BeginPaint',
                                                                                            'IsIconic',
                                                                                            'GetClientRect',
                                                                                            'LoadIconA',
                                                                                            'EnableWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuState',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'ModifyMenuA',
                                                                                            'GetParent',
                                                                                            'GetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'ValidateRect',
                                                                                            'SetMapMode',
                                                                                            'ExtSelectClipRgn',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetMapMode',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'DeleteObject',
                                                                                            'GetFileTitleA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathStripToRootA',
                                                                                            'SHDeleteKeyA',
                                                                                            'PathIsUNCA',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoGetClassObject',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'OleFlushClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRevokeClassObject',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 364,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 879304,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 24064,
                                                                                       '.rdata\x00\x00': 113664,
                                                                                       '.rsrc\x00\x00\x00': 923136,
                                                                                       '.text\x00\x00\x00': 315904},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6a3cd9c3d2b5a1d61652085c1a3b172fba70413bd2297ff3f503ac05fd953f3c'},
 '6a508ee7fa8102b82ab051446a98a069350e2f480f2e7fb8001386babb968fdd': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 217600,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6a508ee7fa8102b82ab051446a98a069350e2f480f2e7fb8001386babb968fdd'},
 '6a51f33c24a49eda081c319fe9ddc15b735531a1d847d9b0128e36a357898feb': {'AddressOfEntryPoint': 217088,
                                                                      'DebugRVA': 46864,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 0,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 127328,
                                                                      'SectionNames': {},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6a51f33c24a49eda081c319fe9ddc15b735531a1d847d9b0128e36a357898feb'},
 '6a645668f630f05072da573a2ee6de2c8b56068e24ee117e6c6078d4bf2c76f3': {'AddressOfEntryPoint': 1528126,
                                                                      'DebugRVA': 251600,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 249856,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'MSVCR80.dll': '_chdir',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'WS2_32.dll': 'getsockname',
                                                                                      'iphlpapi.dll': 'GetAdaptersInfo'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '__lconv_init',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_atoi64',
                                                                                            '_putenv',
                                                                                            '_fullpath',
                                                                                            'bsearch',
                                                                                            'perror',
                                                                                            'getc',
                                                                                            '_finite',
                                                                                            'abort',
                                                                                            'memchr',
                                                                                            'strftime',
                                                                                            'strerror',
                                                                                            'toupper',
                                                                                            'vsprintf',
                                                                                            '_vsnprintf_s',
                                                                                            '_fstat64i32',
                                                                                            'memcmp',
                                                                                            'memmove',
                                                                                            '_purecall',
                                                                                            'rand',
                                                                                            'remove',
                                                                                            '_strdup',
                                                                                            'asctime',
                                                                                            '_vsnprintf',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'strtol',
                                                                                            '_beginthreadex',
                                                                                            '_endthreadex',
                                                                                            'strstr',
                                                                                            '_strnicmp',
                                                                                            '_fmode',
                                                                                            'getenv',
                                                                                            'strcat_s',
                                                                                            'sprintf_s',
                                                                                            'strtoul',
                                                                                            'strncpy_s',
                                                                                            'strcpy_s',
                                                                                            'strspn',
                                                                                            'strpbrk',
                                                                                            '_getpid',
                                                                                            '_ftime64',
                                                                                            '_splitpath',
                                                                                            '_errno',
                                                                                            'calloc',
                                                                                            'strncat',
                                                                                            'memcpy',
                                                                                            'realloc',
                                                                                            '_stricmp',
                                                                                            'qsort',
                                                                                            'strrchr',
                                                                                            'fwrite',
                                                                                            'fread',
                                                                                            'memset',
                                                                                            'exit',
                                                                                            'strtok',
                                                                                            'strchr',
                                                                                            'strncmp',
                                                                                            'fgets',
                                                                                            'fseek',
                                                                                            'malloc',
                                                                                            'fopen',
                                                                                            'free',
                                                                                            'fclose',
                                                                                            'strncpy',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            'atoi',
                                                                                            'sprintf',
                                                                                            '_time64',
                                                                                            '_ctime64',
                                                                                            '_set_invalid_parameter_handler',
                                                                                            'fputc',
                                                                                            '_localtime64',
                                                                                            '_CxxThrowException',
                                                                                            '_fileno',
                                                                                            '_chdir',
                                                                                            'VariantClear',
                                                                                            'SetThreadAffinityMask',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'WideCharToMultiByte',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetHandleInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeThread',
                                                                                            'IsDebuggerPresent',
                                                                                            'DuplicateHandle',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcessId',
                                                                                            'SleepEx',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetCurrentThread',
                                                                                            'CloseHandle',
                                                                                            'TerminateProcess',
                                                                                            'GetLastError',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'GetComputerNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'gethostname',
                                                                                            'WSAStartup',
                                                                                            'WSAEnumProtocolsA',
                                                                                            'WSASetLastError',
                                                                                            'WSACleanup',
                                                                                            'getservbyport',
                                                                                            'gethostbyaddr',
                                                                                            'getservbyname',
                                                                                            'gethostbyname',
                                                                                            'htons',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'WSASocketA',
                                                                                            'bind',
                                                                                            'send',
                                                                                            'WSASend',
                                                                                            'recv',
                                                                                            'ioctlsocket',
                                                                                            'inet_addr',
                                                                                            'WSAGetLastError',
                                                                                            'htonl',
                                                                                            'inet_ntoa',
                                                                                            'WSADuplicateSocketA',
                                                                                            'select',
                                                                                            'getsockopt',
                                                                                            'getpeername',
                                                                                            'ntohs',
                                                                                            'getsockname',
                                                                                            'GetAdaptersInfo'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 174,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 70656,
                                                                                       '.pdata\x00\x00': 10752,
                                                                                       '.rdata\x00\x00': 506368,
                                                                                       '.reloc\x00\x00': 24576,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 244224,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 33554432,
                                                                      'filename': './data/malware/6a645668f630f05072da573a2ee6de2c8b56068e24ee117e6c6078d4bf2c76f3'},
 '6aa26aa6216320589a41ac14af447ab611d500783017afefbc0bb0206d860bad': {'AddressOfEntryPoint': 217088,
                                                                      'DebugRVA': 46864,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 0,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 127328,
                                                                      'SectionNames': {},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6aa26aa6216320589a41ac14af447ab611d500783017afefbc0bb0206d860bad'},
 '6abb95578c8f3341ea170e2184e56235644889281700a841e61d65fe45b80519': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6abb95578c8f3341ea170e2184e56235644889281700a841e61d65fe45b80519'},
 '6ac80a063b8606daf2e4975983b142e44ce7e9861815a11ad3b2c7cb853d73d3': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 153688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 154112,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6ac80a063b8606daf2e4975983b142e44ce7e9861815a11ad3b2c7cb853d73d3'},
 '6ad07f6615e9de8713b14fb4e12c95960fa24731a94a6e1e540e4f354e842b25': {'AddressOfEntryPoint': 180536,
                                                                      'DebugRVA': 756104,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 757760,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'GDI32.dll': 'ExtTextOutW',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'POWRPROF.dll': 'GetPwrCapabilities',
                                                                                      'PROPSYS.dll': 'PropVariantToStringAlloc',
                                                                                      'RPCRT4.dll': 'RpcBindingFromStringBindingW',
                                                                                      'SHELL32.dll': 'SHCreateItemFromParsingName',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'GetClassNameW',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'dwmapi.dll': 'DwmUnregisterThumbnail',
                                                                                      'gdiplus.dll': 'GdipSetCompositingMode',
                                                                                      'msvcrt.dll': 'sin',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess',
                                                                                      'ole32.dll': 'CoCreateFreeThreadedMarshaler',
                                                                                      'slc.dll': 'SLGetWindowsInformationDWORD'},
                                                                      'ImportedFunctions': ['RegCreateKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'EventWrite',
                                                                                            'EventEnabled',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegQueryValueExW',
                                                                                            'GetLengthSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'TraceMessage',
                                                                                            'RegOpenKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'LsaOpenPolicy',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'LsaClose',
                                                                                            'IsValidSid',
                                                                                            'LsaFreeMemory',
                                                                                            'StartTraceW',
                                                                                            'EnableTraceEx',
                                                                                            'StopTraceW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'StartServiceW',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegEnumKeyExW',
                                                                                            'GetSidSubAuthority',
                                                                                            'LsaLookupSids',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CheckTokenMembership',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenThreadToken',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LoadLibraryExA',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'FlushInstructionCache',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'OpenThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleW',
                                                                                            'OpenEventW',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetLongPathNameW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetStartupInfoW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'VirtualFree',
                                                                                            'lstrcmpiW',
                                                                                            'CompareStringOrdinal',
                                                                                            'FindFirstFileW',
                                                                                            'SetErrorMode',
                                                                                            'CreateEventW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WaitForSingleObject',
                                                                                            'SetTermsrvAppInstallMode',
                                                                                            'GetFileAttributesW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MulDiv',
                                                                                            'GetTickCount64',
                                                                                            'GetThreadPriority',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetTickCount',
                                                                                            'GetUserDefaultLangID',
                                                                                            'ExitProcess',
                                                                                            'HeapDestroy',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'GetDynamicTimeZoneInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetBinaryTypeW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueueUserWorkItem',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProductInfo',
                                                                                            'TerminateThread',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'LoadLibraryA',
                                                                                            'DeleteFileW',
                                                                                            'GetProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'lstrcmpA',
                                                                                            'CompareFileTime',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'CreateFileMappingW',
                                                                                            'ResetEvent',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalFree',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetComputerNameW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateProcessW',
                                                                                            'lstrlenW',
                                                                                            'OpenProcess',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'QueryInformationJobObject',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetPriorityClass',
                                                                                            'ResumeThread',
                                                                                            'AssignProcessToJobObject',
                                                                                            'SetInformationJobObject',
                                                                                            'GetLastError',
                                                                                            'CreateJobObjectW',
                                                                                            'CloseHandle',
                                                                                            'LPtoDP',
                                                                                            'GetRgnBox',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'GetStockObject',
                                                                                            'GdiFlush',
                                                                                            'CombineRgn',
                                                                                            'OffsetRgn',
                                                                                            'SetLayout',
                                                                                            'SetWindowOrgEx',
                                                                                            'StretchBlt',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreatePen',
                                                                                            'Polyline',
                                                                                            'GetRegionData',
                                                                                            'GetTextColor',
                                                                                            'GetLayout',
                                                                                            'GetTextMetricsW',
                                                                                            'ExtCreateRegion',
                                                                                            'SetDIBits',
                                                                                            'SelectClipRgn',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetViewportOrgEx',
                                                                                            'IntersectClipRect',
                                                                                            'GetClipRgn',
                                                                                            'CreateRectRgn',
                                                                                            'GetBkColor',
                                                                                            'PatBlt',
                                                                                            'CreateBitmap',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetTextExtentPointW',
                                                                                            'GetClipBox',
                                                                                            'GetObjectW',
                                                                                            'GdiAlphaBlend',
                                                                                            'BitBlt',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'ExtTextOutW',
                                                                                            'CopyRect',
                                                                                            'SetRect',
                                                                                            'CreateWindowExW',
                                                                                            'DialogBoxParamW',
                                                                                            'GetClassInfoW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemCount',
                                                                                            'DefWindowProcW',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'GetCursorPos',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuStringW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'InsertMenuItemW',
                                                                                            'IsChild',
                                                                                            'IsWinEventHookInstalled',
                                                                                            'IsProcessDPIAware',
                                                                                            'IsRectEmpty',
                                                                                            'UnionRect',
                                                                                            'GetClassLongW',
                                                                                            'SetClassLongW',
                                                                                            'GetGUIThreadInfo',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MoveWindow',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'GetWindowDC',
                                                                                            'CharUpperW',
                                                                                            'UnregisterClassW',
                                                                                            'FrameRect',
                                                                                            'WindowFromDC',
                                                                                            'SendMessageCallbackW',
                                                                                            'UpdateLayeredWindow',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'ShowWindowAsync',
                                                                                            'BringWindowToTop',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetIconInfo',
                                                                                            'RegisterShellHookWindow',
                                                                                            'DeregisterShellHookWindow',
                                                                                            'FlashWindowEx',
                                                                                            'SetThreadDesktop',
                                                                                            'EndTask',
                                                                                            'OpenInputDesktop',
                                                                                            'CloseDesktop',
                                                                                            'GetMenuState',
                                                                                            'IsZoomed',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollPos',
                                                                                            'InternalGetWindowText',
                                                                                            'GetWindowInfo',
                                                                                            'GetCaretBlinkTime',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'GetLayeredWindowAttributes',
                                                                                            'GetUpdateRect',
                                                                                            'SetWindowsHookExW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'CallNextHookEx',
                                                                                            'SetFocus',
                                                                                            'GetAncestor',
                                                                                            'ReleaseCapture',
                                                                                            'GetDoubleClickTime',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetRectEmpty',
                                                                                            'EnumDisplayMonitors',
                                                                                            'InflateRect',
                                                                                            'EqualRect',
                                                                                            'UpdateWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'MonitorFromRect',
                                                                                            'CharPrevW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetMenuDefaultItem',
                                                                                            'SendNotifyMessageW',
                                                                                            'LockSetForegroundWindow',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'IntersectRect',
                                                                                            'MonitorFromWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetForegroundWindow',
                                                                                            'EnumWindows',
                                                                                            'GetParent',
                                                                                            'IsWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'WaitMessage',
                                                                                            'GetWindowTextW',
                                                                                            'GetClientRect',
                                                                                            'TrackPopupMenuEx',
                                                                                            'SetActiveWindow',
                                                                                            'GetKeyState',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SubtractRect',
                                                                                            'RedrawWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'InvalidateRect',
                                                                                            'OffsetRect',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetWindowRgn',
                                                                                            'UpdateLayeredWindowIndirect',
                                                                                            'GetWindowRgnBox',
                                                                                            'LoadImageW',
                                                                                            'GetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetLastInputInfo',
                                                                                            'RemovePropW',
                                                                                            'GetLastActivePopup',
                                                                                            'SwitchToThisWindow',
                                                                                            'MessageBeep',
                                                                                            'GetActiveWindow',
                                                                                            'GetFocus',
                                                                                            'SetCursor',
                                                                                            'UnregisterHotKey',
                                                                                            'RegisterHotKey',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'GetAsyncKeyState',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursorPos',
                                                                                            'GetMessagePos',
                                                                                            'BeginPaint',
                                                                                            'FillRect',
                                                                                            'DrawEdge',
                                                                                            'EndPaint',
                                                                                            'GetSystemMenu',
                                                                                            'EnableMenuItem',
                                                                                            'ExitWindowsEx',
                                                                                            'LoadIconW',
                                                                                            'DestroyIcon',
                                                                                            'IsIconic',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuItem',
                                                                                            'ModifyMenuW',
                                                                                            'WindowFromPoint',
                                                                                            'ClientToScreen',
                                                                                            'TrackPopupMenu',
                                                                                            'IsHungAppWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AppendMenuW',
                                                                                            'CascadeWindows',
                                                                                            'TileWindows',
                                                                                            'LockWorkStation',
                                                                                            'ScreenToClient',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'NotifyWinEvent',
                                                                                            'GetSysColor',
                                                                                            'DrawFocusRect',
                                                                                            'AdjustWindowRectEx',
                                                                                            'CopyIcon',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SetWinEventHook',
                                                                                            'RegisterClassExW',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemInt',
                                                                                            'SetDlgItemInt',
                                                                                            'IsDlgButtonChecked',
                                                                                            'IsWindowEnabled',
                                                                                            'CheckDlgButton',
                                                                                            'CallWindowProcW',
                                                                                            'SetCapture',
                                                                                            'DrawTextW',
                                                                                            'AdjustWindowRect',
                                                                                            'CalculatePopupWindowPosition',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetCapture',
                                                                                            'SetGestureConfig',
                                                                                            'DrawIconEx',
                                                                                            'RemoveMenu',
                                                                                            'SetMenuDefaultItem',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'LoadAcceleratorsW',
                                                                                            'TrackMouseEvent',
                                                                                            'CharNextW',
                                                                                            'GetWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'GetPropW',
                                                                                            'HungWindowFromGhostWindow',
                                                                                            'SetWindowCompositionAttribute',
                                                                                            'GetWindowLongW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'EnumChildWindows',
                                                                                            'SendMessageW',
                                                                                            'PtInRect',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetWindowRect',
                                                                                            'DestroyMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'ShowWindow',
                                                                                            'MapWindowPoints',
                                                                                            'SetTimer',
                                                                                            'SetPropW',
                                                                                            'KillTimer',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowLongPtrW',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DestroyWindow',
                                                                                            'ShutdownBlockReasonCreate',
                                                                                            'LoadStringW',
                                                                                            'PostMessageW',
                                                                                            'PeekMessageW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'FindWindowW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetShellWindow',
                                                                                            'GetClassNameW',
                                                                                            '_vsnwprintf',
                                                                                            'free',
                                                                                            'wcsstr',
                                                                                            'iswalpha',
                                                                                            'wcschr',
                                                                                            'realloc',
                                                                                            '_wcsicmp',
                                                                                            'cosf',
                                                                                            '_wtoi',
                                                                                            'memcmp',
                                                                                            'sqrt',
                                                                                            'ceil',
                                                                                            'bsearch',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_fmode',
                                                                                            'malloc',
                                                                                            'sin',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'NtSetSystemInformation',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmEventEnabled',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlGetProductInfo',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwEventWrite',
                                                                                            'NtQueryInformationProcess',
                                                                                            'StrStrIW',
                                                                                            'AssocQueryStringW',
                                                                                            'PathQuoteSpacesW',
                                                                                            'SHDeleteKeyW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'PathIsNetworkPathW',
                                                                                            'SHOpenRegStream2W',
                                                                                            'SHRegGetBoolUSValueW',
                                                                                            'SHStrDupW',
                                                                                            'StrChrIW',
                                                                                            'PathFileExistsW',
                                                                                            'PathGetDriveNumberW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsDirectoryW',
                                                                                            'SHRegGetValueW',
                                                                                            'ChrCmpIW',
                                                                                            'AssocQueryKeyW',
                                                                                            'PathStripPathW',
                                                                                            'PathIsRootW',
                                                                                            'PathParseIconLocationW',
                                                                                            'StrCmpIW',
                                                                                            'StrCmpW',
                                                                                            'PathIsPrefixW',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'SHQueryInfoKeyW',
                                                                                            'StrCmpNW',
                                                                                            'StrTrimW',
                                                                                            'PathStripToRootW',
                                                                                            'StrRetToBufW',
                                                                                            'PathCommonPrefixW',
                                                                                            'SHStrDupA',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathIsFileSpecW',
                                                                                            'AssocCreate',
                                                                                            'StrRetToStrW',
                                                                                            'StrToIntW',
                                                                                            'StrChrW',
                                                                                            'PathCombineW',
                                                                                            'SHCreateThreadRef',
                                                                                            'SHSetThreadRef',
                                                                                            'SHGetValueW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveArgsW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'StrCmpNIW',
                                                                                            'PathGetArgsW',
                                                                                            'SHSetValueW',
                                                                                            'SHDeleteValueW',
                                                                                            'PathAppendW',
                                                                                            'PathFindExtensionW',
                                                                                            'SHCreateDataObject',
                                                                                            'SHGetLocalizedName',
                                                                                            'Shell_GetCachedImageIndexW',
                                                                                            'SHGetStockIconInfo',
                                                                                            'SHGetPropertyStoreForWindow',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHCreateItemWithParent',
                                                                                            'SHBindToFolderIDListParent',
                                                                                            'SHBindToFolderIDListParentEx',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHParseDisplayName',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBindToObject',
                                                                                            'SHGetKnownFolderIDList',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetNameFromIDList',
                                                                                            'SHCreateShellItem',
                                                                                            'SHChangeNotifyRegisterThread',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'SHUpdateRecycleBinIcon',
                                                                                            'SHBindToParent',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'ShellExecuteW',
                                                                                            'SHEnableServiceObject',
                                                                                            'SHGetIDListFromObject',
                                                                                            'SHCreateItemFromIDList',
                                                                                            'SHAddToRecentDocs',
                                                                                            'Shell_NotifyIconW',
                                                                                            'Shell_NotifyIconGetRect',
                                                                                            'ExtractIconExW',
                                                                                            'SHEvaluateSystemCommandTemplate',
                                                                                            'SHCreateShellItemArrayFromIDLists',
                                                                                            'DragQueryFileW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'SHCreateShellItemArrayFromShellItem',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromString',
                                                                                            'CoGetMalloc',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'RevokeDragDrop',
                                                                                            'RegisterDragDrop',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'StringFromGUID2',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'ReleaseStgMedium',
                                                                                            'PropVariantClear',
                                                                                            'CreateBindCtx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'GetThemeBackgroundExtent',
                                                                                            'GetThemeBackgroundRegion',
                                                                                            'GetThemeColor',
                                                                                            'IsThemePartDefined',
                                                                                            'GetThemeRect',
                                                                                            'DrawThemeIcon',
                                                                                            'GetBufferedPaintBits',
                                                                                            'BufferedPaintClear',
                                                                                            'IsAppThemed',
                                                                                            'IsCompositionActive',
                                                                                            'OpenThemeData',
                                                                                            'CloseThemeData',
                                                                                            'SetWindowTheme',
                                                                                            'GetThemeMetric',
                                                                                            'DrawThemeBackground',
                                                                                            'GetThemeTextExtent',
                                                                                            'DrawThemeText',
                                                                                            'GetThemeBool',
                                                                                            'DrawThemeParentBackground',
                                                                                            'GetWindowTheme',
                                                                                            'GetThemeBackgroundContentRect',
                                                                                            'GetThemePartSize',
                                                                                            'BeginBufferedPaint',
                                                                                            'DrawThemeTextEx',
                                                                                            'EndBufferedPaint',
                                                                                            'GetThemeMargins',
                                                                                            'BufferedPaintInit',
                                                                                            'BufferedPaintUnInit',
                                                                                            'IsThemeActive',
                                                                                            'CallNtPowerInformation',
                                                                                            'PowerDeterminePlatformRole',
                                                                                            'GetPwrCapabilities',
                                                                                            'DwmEnableBlurBehindWindow',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'DwmIsCompositionEnabled',
                                                                                            'DwmQueryThumbnailSourceSize',
                                                                                            'DwmUpdateThumbnailProperties',
                                                                                            'DwmUnregisterThumbnail',
                                                                                            'SLGetWindowsInformationDWORD',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCloneImage',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipSetCompositingMode',
                                                                                            'GetUserNameExW',
                                                                                            'NdrClientCall3',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'PSCreateMemoryPropertyStore',
                                                                                            'VariantToStringAlloc',
                                                                                            'VariantToStringWithDefault',
                                                                                            'PropVariantToString',
                                                                                            'VariantToBooleanWithDefault',
                                                                                            'PropVariantToInt64',
                                                                                            'VariantToInt32WithDefault',
                                                                                            'PropVariantToBoolean',
                                                                                            'PropVariantToUInt64',
                                                                                            'PropVariantToUInt32',
                                                                                            'PropVariantToStringAlloc'],
                                                                      'LinkerVersion': 187,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 703,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1846912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14848,
                                                                                       '.pdata\x00\x00': 52736,
                                                                                       '.rdata\x00\x00': 191488,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 1847296,
                                                                                       '.text\x00\x00\x00': 752128},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6ad07f6615e9de8713b14fb4e12c95960fa24731a94a6e1e540e4f354e842b25'},
 '6ae6183b55c18e6ace0216cd0903f3cef52ae00f2dbf0461fc4c66e6e7249854': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3440,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 346624,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6ae6183b55c18e6ace0216cd0903f3cef52ae00f2dbf0461fc4c66e6e7249854'},
 '6b2a17901118712076fc578b12cb46b892d2824f6935297d919af61763ef8608': {'AddressOfEntryPoint': 8912,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 15872,
                                                                                       '.text\x00\x00\x00': 44032},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6b2a17901118712076fc578b12cb46b892d2824f6935297d919af61763ef8608'},
 '6b7b54a29b8ab08b35d1a0d83b49249741526e4f2153c7192b06ee90c443a9d1': {'AddressOfEntryPoint': 95629,
                                                                      'DebugRVA': 400492,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 401408,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'gdiplus.dll': 'GdipGetImageGraphicsContext',
                                                                                      'msvcrt.dll': '_wcsrev',
                                                                                      'ntdll.dll': 'NtQueryLicenseValue',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SHGetSpecialFolderPathW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellAboutW',
                                                                                            'ShellExecuteExW',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipCloneBitmapAreaI',
                                                                                            'GdipSetPageUnit',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDrawArcI',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'QueryServiceConfigW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'EventWrite',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'IsThemeActive',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Add',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'PropertySheetW',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'NtQueryLicenseValue',
                                                                                            'lstrlenA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemTime',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'CloseHandle',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'MulDiv',
                                                                                            'GlobalFindAtomW',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetLocaleInfoW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetLocaleInfoEx',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'GetVersionExW',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'IsWow64Process',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'GetProfileStringW',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'RegisterApplicationRecoveryCallback',
                                                                                            'ApplicationRecoveryInProgress',
                                                                                            'Sleep',
                                                                                            'ApplicationRecoveryFinished',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetTempFileNameW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnableWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'PostMessageW',
                                                                                            'IsWindowEnabled',
                                                                                            'CharNextA',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetMenuState',
                                                                                            'GetFocus',
                                                                                            'OpenClipboard',
                                                                                            'GetClipboardData',
                                                                                            'InvalidateRect',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'InsertMenuItemW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageExtraInfo',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetKeyState',
                                                                                            'IsDialogMessageW',
                                                                                            'GetClassNameW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowLongW',
                                                                                            'DrawTextW',
                                                                                            'EnumChildWindows',
                                                                                            'SetPropW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetWindowPlacement',
                                                                                            'UpdateWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'MoveWindow',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'SetClassLongW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'OffsetRect',
                                                                                            'EqualRect',
                                                                                            'MonitorFromRect',
                                                                                            'GetClassWord',
                                                                                            'EnumDesktopWindows',
                                                                                            'EnumDisplayMonitors',
                                                                                            'IntersectRect',
                                                                                            'CopyRect',
                                                                                            'CreateDialogParamW',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'CreatePopupMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'GetAncestor',
                                                                                            'FindWindowW',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckMenuItem',
                                                                                            'GetSysColor',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetClassLongPtrW',
                                                                                            'EndDialog',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'SendMessageW',
                                                                                            'MessageBeep',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'DrawMenuBar',
                                                                                            'SetMenuItemInfoW',
                                                                                            'AppendMenuW',
                                                                                            'LoadStringW',
                                                                                            'GetSubMenu',
                                                                                            'RemoveMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'SetFocus',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'GetParent',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'LoadImageW',
                                                                                            'UnregisterClassA',
                                                                                            'FillRect',
                                                                                            'SetWindowTextW',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CheckRadioButton',
                                                                                            'DestroyWindow',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'timeGetTime',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'CreatePatternBrush',
                                                                                            'DeleteObject',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPointW',
                                                                                            'DeleteDC',
                                                                                            'GetRgnBox',
                                                                                            'CreateSolidBrush',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'ExtCreatePen',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateRectRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'EqualRgn',
                                                                                            'CreateDIBSection',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            '_wcsdup',
                                                                                            '_i64tow_s',
                                                                                            '_wtoi64',
                                                                                            'sprintf_s',
                                                                                            '_strtoi64',
                                                                                            '_strtoui64',
                                                                                            'memchr',
                                                                                            'strcspn',
                                                                                            'wcsrchr',
                                                                                            'wcstoul',
                                                                                            'isalpha',
                                                                                            'time',
                                                                                            'difftime',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '__CxxFrameHandler3',
                                                                                            'setlocale',
                                                                                            '__pctype_func',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            'localeconv',
                                                                                            '_errno',
                                                                                            '___mb_cur_max_func',
                                                                                            '__mb_cur_max',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__crtLCMapStringW',
                                                                                            '__uncaught_exception',
                                                                                            'tolower',
                                                                                            'isspace',
                                                                                            'abort',
                                                                                            'isalnum',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'iswalpha',
                                                                                            'iswdigit',
                                                                                            '_wcslwr_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcsncmp',
                                                                                            '_itow_s',
                                                                                            'calloc',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_itoa',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'wcstol',
                                                                                            'mbstowcs_s',
                                                                                            'exit',
                                                                                            'isdigit',
                                                                                            'isxdigit',
                                                                                            'toupper',
                                                                                            '_purecall',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            '_wcsrev'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 370,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 403352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 19968,
                                                                                       '.pdata\x00\x00': 26112,
                                                                                       '.rdata\x00\x00': 69632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 403456,
                                                                                       '.text\x00\x00\x00': 396800},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6b7b54a29b8ab08b35d1a0d83b49249741526e4f2153c7192b06ee90c443a9d1'},
 '6bb4f7b217fa108f6d218aa8acf1c7ca741577073009ed5d265003f05fc09fcd': {'AddressOfEntryPoint': 1381712,
                                                                      'DebugRVA': 1555264,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1548288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 364580,
                                                                      'SectionNames': {'.data\x00\x00\x00': 32768,
                                                                                       '.pdata\x00\x00': 77824,
                                                                                       '.rdata\x00\x00': 552960,
                                                                                       '.reloc\x00\x00': 78336,
                                                                                       '.rsrc\x00\x00\x00': 365056,
                                                                                       '.text\x00\x00\x00': 1540608,
                                                                                       'data\x00\x00\x00\x00': 2048,
                                                                                       'text\x00\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6bb4f7b217fa108f6d218aa8acf1c7ca741577073009ed5d265003f05fc09fcd'},
 '6bd17fc3a63470b20bba539be198ea59d800ced03b8362484fce9291e8c22928': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 263180,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 263680,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6bd17fc3a63470b20bba539be198ea59d800ced03b8362484fce9291e8c22928'},
 '6be1e343201b56ea7491d6f5be72ac9d4bf41a16920804d7e0f04cefd562d028': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 427200,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 427520,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6be1e343201b56ea7491d6f5be72ac9d4bf41a16920804d7e0f04cefd562d028'},
 '6bedfe4ecf7dd924c6374437f1d6e4199b121531cdf20df007c828999198b8bb': {'AddressOfEntryPoint': 4096,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 42980,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'SetPixel',
                                                                                      'KERNEL32.dll': 'ReleaseSemaphore',
                                                                                      'OLE32.dll': 'RevokeDragDrop',
                                                                                      'USER32.dll': 'DestroyIcon',
                                                                                      'msvcrt.dll': '_vsnwprintf'},
                                                                      'ImportedFunctions': ['memset',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcscmp',
                                                                                            'wcsncmp',
                                                                                            'fclose',
                                                                                            'fabs',
                                                                                            'ceil',
                                                                                            'floor',
                                                                                            'wcslen',
                                                                                            'memmove',
                                                                                            '_vsnwprintf',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'ExitProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'Sleep',
                                                                                            'FreeLibrary',
                                                                                            'HeapFree',
                                                                                            'LoadLibraryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetProcAddress',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'HeapReAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'DuplicateHandle',
                                                                                            'CreateSemaphoreA',
                                                                                            'ReleaseSemaphore',
                                                                                            'CoInitialize',
                                                                                            'RevokeDragDrop',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'IsWindowVisible',
                                                                                            'IsWindowEnabled',
                                                                                            'GetForegroundWindow',
                                                                                            'EnableWindow',
                                                                                            'EnumWindows',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowTextW',
                                                                                            'ShowWindow',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'CreateWindowExW',
                                                                                            'SendMessageW',
                                                                                            'RedrawWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'CallWindowProcW',
                                                                                            'RemovePropW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'SetActiveWindow',
                                                                                            'UnregisterClassW',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'SetTimer',
                                                                                            'IsZoomed',
                                                                                            'IsIconic',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetMessageW',
                                                                                            'GetActiveWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursorPos',
                                                                                            'LoadImageW',
                                                                                            'SetCursor',
                                                                                            'MapWindowPoints',
                                                                                            'MoveWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetKeyState',
                                                                                            'SetCapture',
                                                                                            'PostMessageW',
                                                                                            'GetCursorPos',
                                                                                            'ReleaseCapture',
                                                                                            'SetFocus',
                                                                                            'GetFocus',
                                                                                            'IsChild',
                                                                                            'GetClassNameW',
                                                                                            'EnumChildWindows',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DefFrameProcW',
                                                                                            'DestroyIcon',
                                                                                            'GetStockObject',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteObject',
                                                                                            'GetObjectType',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDIBits',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'CreateBitmap',
                                                                                            'SetPixel',
                                                                                            'InitCommonControls',
                                                                                            'InitCommonControlsEx'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 125,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1612,
                                                                      'SectionNames': {'.code\x00\x00\x00': 3584,
                                                                                       '.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 23040},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6bedfe4ecf7dd924c6374437f1d6e4199b121531cdf20df007c828999198b8bb'},
 '6c98b9d6d3b9680c0f0ad39b3fdfc59cbd45a668041bf2dfdc53ee0bf121fcd9': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 330636,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 330752,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6c98b9d6d3b9680c0f0ad39b3fdfc59cbd45a668041bf2dfdc53ee0bf121fcd9'},
 '6cb6c44e78447e34cd2815aa187381922067de877f0b267534603e7a1d8c84ea': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 195980,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 196096,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6cb6c44e78447e34cd2815aa187381922067de877f0b267534603e7a1d8c84ea'},
 '6cdf96b602ec10e4a9a713e471711c4fed02af7d40d435c484d9e55a045e6ba0': {'AddressOfEntryPoint': 1073901021,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'USER32.dll': 'AppendMenuA',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'hccutils.DLL': 'LoadBITMAP'},
                                                                      'ImportedFunctions': ['timeGetTime',
                                                                                            'lstrcatA',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'HeapReAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'IsBadCodePtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'HeapSize',
                                                                                            'SetFilePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'RaiseException',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'TlsAlloc',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpiA',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrcpynA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetUserDefaultLangID',
                                                                                            'lstrcpyA',
                                                                                            'FreeLibrary',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ExitProcess',
                                                                                            'GetTickCount',
                                                                                            'CreatePopupMenu',
                                                                                            'EnumDisplayMonitors',
                                                                                            'DrawMenuBar',
                                                                                            'ModifyMenuA',
                                                                                            'SetTimer',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'ClipCursor',
                                                                                            'RedrawWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'wsprintfA',
                                                                                            'GetSubMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadIconA',
                                                                                            'RegisterClassA',
                                                                                            'LoadMenuA',
                                                                                            'LoadAcceleratorsA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'SetWindowLongA',
                                                                                            'SetWindowPos',
                                                                                            'EndDialog',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'CreateWindowExA',
                                                                                            'RegisterClassExA',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'DrawFocusRect',
                                                                                            'SetCursor',
                                                                                            'InflateRect',
                                                                                            'FrameRect',
                                                                                            'LoadCursorA',
                                                                                            'GetSystemMetrics',
                                                                                            'DeleteMenu',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'KillTimer',
                                                                                            'CopyRect',
                                                                                            'CreateMenu',
                                                                                            'DefWindowProcA',
                                                                                            'GetWindowLongA',
                                                                                            'AdjustWindowRect',
                                                                                            'TrackPopupMenu',
                                                                                            'PostMessageA',
                                                                                            'IsRectEmpty',
                                                                                            'GetMenu',
                                                                                            'GetMenuItemInfoA',
                                                                                            'PeekMessageA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetCursorPos',
                                                                                            'SetRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'FindWindowA',
                                                                                            'SetForegroundWindow',
                                                                                            'WindowFromPoint',
                                                                                            'ScreenToClient',
                                                                                            'SetRectEmpty',
                                                                                            'MessageBoxA',
                                                                                            'SendMessageA',
                                                                                            'GetCursorInfo',
                                                                                            'GetIconInfo',
                                                                                            'DrawIconEx',
                                                                                            'DestroyCursor',
                                                                                            'GetClientRect',
                                                                                            'ClientToScreen',
                                                                                            'OffsetRect',
                                                                                            'PtInRect',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'LoadStringA',
                                                                                            'AppendMenuA',
                                                                                            'GetObjectA',
                                                                                            'GetDIBColorTable',
                                                                                            'GetStockObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'StretchBlt',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'CreateSolidBrush',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'FindResources',
                                                                                            'LoadBITMAP'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 174,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 6360,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6cdf96b602ec10e4a9a713e471711c4fed02af7d40d435c484d9e55a045e6ba0'},
 '6d475b148222e98a20f165c4868e212788247a4f8e0028afaf5f128c4d0aa715': {'AddressOfEntryPoint': 1013552,
                                                                      'DebugRVA': 542972,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 991232,
                                                                      'ExportSize': 836,
                                                                      'IATRVA': 544768,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'NDIS.SYS': 'NdisCopyBuffer',
                                                                                      'TDI.SYS': 'TdiMapUserRequest',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['MmIsThisAnNtAsSystem',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'ExLocalTimeToSystemTime',
                                                                                            'RtlTimeToTimeFields',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'KeReadStateEvent',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeReleaseMutex',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'wcsncpy',
                                                                                            'ZwSetInformationThread',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'KeSetEvent',
                                                                                            'MmLockPagableSectionByHandle',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'KeDelayExecutionThread',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExAcquireFastMutex',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ZwOpenKey',
                                                                                            'IoIs32bitProcess',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwSetValueKey',
                                                                                            'IoGetCurrentProcess',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'IoGetFileObjectGenericMapping',
                                                                                            'RtlMapGenericMask',
                                                                                            'SeExports',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'ObGetObjectSecurity',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'SeSetSecurityDescriptorInfo',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'IofCallDriver',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlGetAce',
                                                                                            'RtlAddAce',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'RtlGetGroupSecurityDescriptor',
                                                                                            'RtlGetSaclSecurityDescriptor',
                                                                                            'RtlSelfRelativeToAbsoluteSD',
                                                                                            'ObSetSecurityObjectByPointer',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'ExNotifyCallback',
                                                                                            'ExCreateCallback',
                                                                                            'KeInitializeTimerEx',
                                                                                            'ExGetCurrentProcessorCounts',
                                                                                            'DbgBreakPoint',
                                                                                            'KeSetTargetProcessorDpc',
                                                                                            'KeBugCheck',
                                                                                            'ObfReferenceObject',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'PsGetCurrentProcess',
                                                                                            'KeInsertQueueDpc',
                                                                                            'IoAllocateMdl',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoFileObjectType',
                                                                                            'MmUnlockPages',
                                                                                            'MmProbeAndLockPages',
                                                                                            'ObDereferenceSecurityDescriptor',
                                                                                            'SeLockSubjectContext',
                                                                                            'SeAccessCheck',
                                                                                            'SeAppendPrivileges',
                                                                                            'SeFreePrivileges',
                                                                                            'SeUnlockSubjectContext',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ProbeForWrite',
                                                                                            'SeAssignSecurity',
                                                                                            'ObLogSecurityDescriptor',
                                                                                            'RtlSetBit',
                                                                                            'KeInitializeMutex',
                                                                                            'IoDeleteDevice',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoCreateDevice',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeReleaseInStackQueuedSpinLockFromDpcLevel',
                                                                                            'KeAcquireInStackQueuedSpinLockAtDpcLevel',
                                                                                            'KeReleaseInStackQueuedSpinLock',
                                                                                            'KeAcquireInStackQueuedSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmQuerySystemSize',
                                                                                            'ZwClose',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlSetBits',
                                                                                            'RtlClearAllBits',
                                                                                            'RtlInitializeBitMap',
                                                                                            'RtlAreBitsSet',
                                                                                            'RtlFindClearRuns',
                                                                                            'RtlClearBits',
                                                                                            'RtlFindClearBitsAndSet',
                                                                                            'DbgPrint',
                                                                                            'ZwLoadDriver',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'KeResetEvent',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IoAcquireCancelSpinLock',
                                                                                            'ExInterlockedAddUlong',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoFreeMdl',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'MmUnlockPagableImageSection',
                                                                                            'MmLockPagableDataSection',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'KeClearEvent',
                                                                                            'KeCancelTimer',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlPrefetchMemoryNonTemporal',
                                                                                            'MmMapLockedPages',
                                                                                            'IoRaiseInformationalHardError',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeTestSpinLock',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'ExFreePoolWithTag',
                                                                                            'KeInitializeEvent',
                                                                                            'ExAllocatePoolWithTagPriority',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeNumberProcessors',
                                                                                            'ObReleaseObjectSecurity',
                                                                                            'KeBugCheckEx',
                                                                                            'InitializeSListHead',
                                                                                            'ZwCreateFile',
                                                                                            'ZwDeviceIoControlFile',
                                                                                            '__C_specific_handler',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'NdisRequest',
                                                                                            'NdisUnchainBufferAtFront',
                                                                                            'NdisFreePacket',
                                                                                            'NdisAllocatePacket',
                                                                                            'NdisCloseAdapter',
                                                                                            'NdisCancelSendPackets',
                                                                                            'NdisGetReceivedPacket',
                                                                                            'NdisCompletePnPEvent',
                                                                                            'NdisQueryAdapterInstanceName',
                                                                                            'NdisFreeMemory',
                                                                                            'NdisRegisterProtocol',
                                                                                            'NdisFreePacketPool',
                                                                                            'NdisAllocatePacketPoolEx',
                                                                                            'NdisOpenAdapter',
                                                                                            'NdisGetDriverHandle',
                                                                                            'NdisAllocateBuffer',
                                                                                            'NdisReturnPackets',
                                                                                            'NdisSetPacketPoolProtocolId',
                                                                                            'NdisCompleteBindAdapter',
                                                                                            'NdisReEnumerateProtocolBindings',
                                                                                            'NdisAllocateBufferPool',
                                                                                            'NdisFreeBufferPool',
                                                                                            'NdisDestroyBlockPool',
                                                                                            'NdisGetVersion',
                                                                                            'NdisGetRoutineAddress',
                                                                                            'NdisCopyBuffer',
                                                                                            'CTEBlockWithTracker',
                                                                                            'CTESystemUpTime',
                                                                                            'CTEBlock',
                                                                                            'CTEInitEvent',
                                                                                            'CTEScheduleDelayedEvent',
                                                                                            'CTESignal',
                                                                                            'CTEStartTimer',
                                                                                            'CTELogEvent',
                                                                                            'CTEInitTimer',
                                                                                            'TdiRegisterNetAddress',
                                                                                            'TdiDeregisterNetAddress',
                                                                                            'TdiProviderReady',
                                                                                            'TdiRegisterDeviceObject',
                                                                                            'TdiDeregisterDeviceObject',
                                                                                            'CTEInitialize',
                                                                                            'CTEScheduleEvent',
                                                                                            'TdiRegisterProvider',
                                                                                            'TdiDeregisterProvider',
                                                                                            'TdiPnPPowerRequest',
                                                                                            'TdiCopyMdlChainToMdlChain',
                                                                                            'TdiInitialize',
                                                                                            'TdiDeregisterPnPHandlers',
                                                                                            'TdiCopyBufferToMdlWithReservedMappingAtDpcLevel',
                                                                                            'TdiRegisterPnPHandlers',
                                                                                            'TdiCopyBufferToMdl',
                                                                                            'CTEInsertBlockTracker',
                                                                                            'CTERemoveBlockTracker',
                                                                                            'TdiMapUserRequest'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 204,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.edata\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 99840,
                                                                                       '.rdata\x00\x00': 96768,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 539136,
                                                                                       'INIT\x00\x00\x00\x00': 41472,
                                                                                       'PAGE\x00\x00\x00\x00': 11264,
                                                                                       'PAGEIPMc': 15360,
                                                                                       'PAGELK\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/6d475b148222e98a20f165c4868e212788247a4f8e0028afaf5f128c4d0aa715'},
 '6d5aa16e97689af6d6464aee85edd7160a929a2f0c351b43104eacd0adf1c042': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 647384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 647680,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6d5aa16e97689af6d6464aee85edd7160a929a2f0c351b43104eacd0adf1c042'},
 '6d7ea30f0b4a32dd8a6d26d3ff062317253bf0966c02be782b5b73e7b1149e5b': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/6d7ea30f0b4a32dd8a6d26d3ff062317253bf0966c02be782b5b73e7b1149e5b'},
 '6da809b7eba9044a0f1f764c5436e0de8a0c5a7fe810b8adad4dff4812d99fd9': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/6da809b7eba9044a0f1f764c5436e0de8a0c5a7fe810b8adad4dff4812d99fd9'},
 '6daccdfab365667009132e7c938a6dceab09dbf11d9df8678cc7dcfe8abc3973': {'AddressOfEntryPoint': 1074947281,
                                                                      'DebugRVA': 851744,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 847872,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'COMDLG32.dll': 'ChooseFontW',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetLogicalDrives',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'BeginPaint',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'CreateStatusWindowW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_AddMasked',
                                                                                            'PropertySheetW',
                                                                                            'StrCmpLogicalW',
                                                                                            'SHAutoComplete',
                                                                                            'IsAppThemed',
                                                                                            'IsThemeActive',
                                                                                            'ReadFile',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileAttributesW',
                                                                                            'MoveFileA',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'RemoveDirectoryW',
                                                                                            'RemoveDirectoryA',
                                                                                            'DeviceIoControl',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'Sleep',
                                                                                            'GetVersionExW',
                                                                                            'CompareFileTime',
                                                                                            'FindCloseChangeNotification',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'GetProcessAffinityMask',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'CopyFileW',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'UpdateResourceW',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'EndUpdateResourceW',
                                                                                            'EnumResourceNamesW',
                                                                                            'BeginUpdateResourceW',
                                                                                            'CompareStringA',
                                                                                            'SetPriorityClass',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetVolumeInformationW',
                                                                                            'CreateFileA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'ResumeThread',
                                                                                            'SuspendThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetLocalTime',
                                                                                            'GetThreadPriority',
                                                                                            'GetPriorityClass',
                                                                                            'SetErrorMode',
                                                                                            'MulDiv',
                                                                                            'FindNextChangeNotification',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'DeleteCriticalSection',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'ExitProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'SetStdHandle',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'HeapReAlloc',
                                                                                            'GetFileType',
                                                                                            'GetFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFileTime',
                                                                                            'BackupSeek',
                                                                                            'BackupRead',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentProcess',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MoveFileW',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'GetLastError',
                                                                                            'GlobalSize',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'WriteConsoleW',
                                                                                            'GetVersionExA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateFileMappingW',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindNextFileW',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'GetTempPathA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetDriveTypeW',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'FindFirstFileW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'FindClose',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLogicalDrives',
                                                                                            'LoadIconW',
                                                                                            'PtInRect',
                                                                                            'ScrollWindowEx',
                                                                                            'SetScrollPos',
                                                                                            'CreateDialogParamW',
                                                                                            'PostThreadMessageW',
                                                                                            'IsChild',
                                                                                            'GetLastActivePopup',
                                                                                            'GetMenuItemID',
                                                                                            'GetClipboardData',
                                                                                            'SetMenu',
                                                                                            'InsertMenuW',
                                                                                            'LoadMenuW',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetMenuState',
                                                                                            'GetMessageW',
                                                                                            'CopyRect',
                                                                                            'ValidateRect',
                                                                                            'GetSysColor',
                                                                                            'CopyImage',
                                                                                            'FillRect',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperA',
                                                                                            'CharLowerA',
                                                                                            'DrawIconEx',
                                                                                            'LoadStringW',
                                                                                            'GetWindow',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetSystemMenu',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'SystemParametersInfoW',
                                                                                            'RedrawWindow',
                                                                                            'GetComboBoxInfo',
                                                                                            'SetScrollRange',
                                                                                            'IsCharAlphaW',
                                                                                            'CharLowerW',
                                                                                            'OpenClipboard',
                                                                                            'TranslateMessage',
                                                                                            'SetClipboardData',
                                                                                            'CharToOemA',
                                                                                            'CloseClipboard',
                                                                                            'MessageBeep',
                                                                                            'PeekMessageW',
                                                                                            'CharUpperW',
                                                                                            'GetFocus',
                                                                                            'EnableMenuItem',
                                                                                            'MoveWindow',
                                                                                            'CheckMenuItem',
                                                                                            'LoadBitmapW',
                                                                                            'InsertMenuItemW',
                                                                                            'LoadImageW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetClientRect',
                                                                                            'UpdateWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'AppendMenuW',
                                                                                            'DrawMenuBar',
                                                                                            'GetMenu',
                                                                                            'GetSubMenu',
                                                                                            'DeleteMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemInfoW',
                                                                                            'CharToOemBuffW',
                                                                                            'ScreenToClient',
                                                                                            'ClientToScreen',
                                                                                            'CreatePopupMenu',
                                                                                            'SetWindowLongPtrW',
                                                                                            'TrackPopupMenu',
                                                                                            'DestroyMenu',
                                                                                            'CallWindowProcW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'GetKeyState',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'BringWindowToTop',
                                                                                            'SetWindowPlacement',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetIconInfo',
                                                                                            'CreateIconIndirect',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'SetPropW',
                                                                                            'FindWindowW',
                                                                                            'GetForegroundWindow',
                                                                                            'RegisterWindowMessageW',
                                                                                            'FindWindowExW',
                                                                                            'EnumWindows',
                                                                                            'CreateIcon',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetDlgItemTextA',
                                                                                            'FlashWindow',
                                                                                            'IsCharUpperW',
                                                                                            'RegisterClassExW',
                                                                                            'SendMessageW',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'DefWindowProcW',
                                                                                            'CreateWindowExW',
                                                                                            'DestroyWindow',
                                                                                            'SetDlgItemTextW',
                                                                                            'EndDialog',
                                                                                            'EmptyClipboard',
                                                                                            'DispatchMessageW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'WindowFromPoint',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetDesktopWindow',
                                                                                            'GetCursorPos',
                                                                                            'GetWindowLongPtrW',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'IsIconic',
                                                                                            'GetWindowPlacement',
                                                                                            'GetSystemMetrics',
                                                                                            'IsWindowEnabled',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'IsDlgButtonChecked',
                                                                                            'PostMessageW',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetWindowRect',
                                                                                            'MapWindowPoints',
                                                                                            'SetWindowPos',
                                                                                            'InvalidateRect',
                                                                                            'GetParent',
                                                                                            'CheckDlgButton',
                                                                                            'MessageBoxW',
                                                                                            'IsWindowVisible',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemBuffA',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyIcon',
                                                                                            'GetDlgItem',
                                                                                            'SendDlgItemMessageW',
                                                                                            'OemToCharA',
                                                                                            'GetDlgItemTextW',
                                                                                            'BeginPaint',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'Rectangle',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreatePatternBrush',
                                                                                            'TextOutA',
                                                                                            'SetMapMode',
                                                                                            'DPtoLP',
                                                                                            'CreateBitmap',
                                                                                            'SetPixel',
                                                                                            'GetMapMode',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'StretchBlt',
                                                                                            'SetBkColor',
                                                                                            'ExtTextOutW',
                                                                                            'BitBlt',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'TextOutW',
                                                                                            'Polygon',
                                                                                            'Polyline',
                                                                                            'SelectObject',
                                                                                            'GetTextFaceW',
                                                                                            'GetTextMetricsW',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'CommDlgExtendedError',
                                                                                            'ChooseFontW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'SetFileSecurityA',
                                                                                            'SetFileSecurityW',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'GetFileSecurityA',
                                                                                            'GetFileSecurityW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'IsTextUnicode',
                                                                                            'RegEnumValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'FindExecutableW',
                                                                                            'DragFinish',
                                                                                            'DragQueryFileW',
                                                                                            'DragAcceptFiles',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHAddToRecentDocs',
                                                                                            'SHFileOperationW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromString',
                                                                                            'OleSetClipboard',
                                                                                            'DoDragDrop',
                                                                                            'CoInitializeEx',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 432,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 210880,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6daccdfab365667009132e7c938a6dceab09dbf11d9df8678cc7dcfe8abc3973'},
 '6dbcb3b1dc7a5dc10a2440241c192039bc0b5fc552ce4997bbb5f927dae816ab': {'AddressOfEntryPoint': 1074380493,
                                                                      'DebugRVA': 473136,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 471040,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'LCMapStringW',
                                                                                      'SETUPAPI.dll': 'SetupGetSourceFileLocationW',
                                                                                      'SHELL32.dll': 'SHCreateDirectoryExW',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyW',
                                                                                      'USER32.dll': 'ExitWindowsEx',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['SetupIterateCabinetW',
                                                                                            'SetupOpenFileQueue',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'SetupInitDefaultQueueCallbackEx',
                                                                                            'SetupCommitFileQueueW',
                                                                                            'SetupScanFileQueueW',
                                                                                            'SetupGetFileCompressionInfoW',
                                                                                            'SetupDecompressOrCopyFileW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupCloseFileQueue',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupGetBinaryField',
                                                                                            'SetupGetIntField',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupFindNextMatchLineW',
                                                                                            'SetupGetLineTextW',
                                                                                            'SetupGetLineByIndexW',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetLineCountW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupCloseInfFile',
                                                                                            'CM_Locate_DevNodeW',
                                                                                            'CM_Reenumerate_DevNode',
                                                                                            'CMP_WaitNoPendingInstallEvents',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'CM_Get_DevNode_Registry_PropertyW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupGetTargetPathW',
                                                                                            'SetupGetSourceFileLocationW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'WinVerifyTrust',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetACP',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrcpyW',
                                                                                            'lstrcatW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetCommandLineW',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'Sleep',
                                                                                            'Module32NextW',
                                                                                            'Module32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'SetThreadLocale',
                                                                                            'GetThreadLocale',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'RtlUnwindEx',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'DuplicateHandle',
                                                                                            'CreatePipe',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcessId',
                                                                                            'OutputDebugStringW',
                                                                                            'OutputDebugStringA',
                                                                                            'MoveFileExW',
                                                                                            'SetFileAttributesW',
                                                                                            'CopyFileW',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleA',
                                                                                            'GetStdHandle',
                                                                                            'MoveFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExW',
                                                                                            'GetVersionExA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'GetUserDefaultLangID',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'HeapReAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'WriteFile',
                                                                                            'GetStringTypeA',
                                                                                            'LoadLibraryA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'GetStartupInfoA',
                                                                                            'SetHandleCount',
                                                                                            'FatalAppExitA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'LCMapStringW',
                                                                                            'GetClassNameW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'UnregisterClassA',
                                                                                            'EnumWindows',
                                                                                            'ExitWindowsEx',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImpersonateSelf',
                                                                                            'OpenThreadToken',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'AccessCheck',
                                                                                            'RevertToSelf',
                                                                                            'FreeSid',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegUnLoadKeyW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBindToParent',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetMalloc',
                                                                                            'SHSetLocalizedName',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'SHDeleteKeyW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 230,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 992,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6dbcb3b1dc7a5dc10a2440241c192039bc0b5fc552ce4997bbb5f927dae816ab'},
 '6dbcf9b55a03cbbfd3009f53e292cc5975ffb1ad136ed00c725356772f09d4b7': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 119084,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 119296,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6dbcf9b55a03cbbfd3009f53e292cc5975ffb1ad136ed00c725356772f09d4b7'},
 '6dc8848c6775b59b0e17fccc7e89ddb71473fa1472d3fa4044e02a228bfd0968': {'AddressOfEntryPoint': 71560,
                                                                      'DebugRVA': 25232,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NDIS.SYS': 'NdisDeregisterProtocol',
                                                                                      'ntoskrnl.exe': 'ZwOpenKey'},
                                                                      'ImportedFunctions': ['KeBugCheckEx',
                                                                                            '_wcsnicmp',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'MmLockPagableDataSection',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'IoDeleteDevice',
                                                                                            'ExQueryDepthSList',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'IofCompleteRequest',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'RtlGUIDFromString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ExFreePoolWithTag',
                                                                                            'KeReleaseSpinLock',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'ZwClose',
                                                                                            'ZwSetSecurityObject',
                                                                                            'IoCreateDevice',
                                                                                            'IoDeviceObjectType',
                                                                                            'ObOpenObjectByPointer',
                                                                                            '_snwprintf',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'SeCaptureSecurityDescriptor',
                                                                                            'RtlGetSaclSecurityDescriptor',
                                                                                            'RtlGetGroupSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'wcschr',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'IoHsWdmVersionAvailable',
                                                                                            'SeExports',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'NdisAcquireReadWriteLock',
                                                                                            'NdisCmCloseAddressFamilyComplete',
                                                                                            'NdisCmDispatchIncomingCloseCall',
                                                                                            'NdisClCloseCall',
                                                                                            'NdisInitializeTimer',
                                                                                            'NdisClRegisterSap',
                                                                                            'NdisCoGetTapiCallId',
                                                                                            'NdisCmDispatchCallConnected',
                                                                                            'NdisCmDispatchIncomingCall',
                                                                                            'NdisClIncomingCallComplete',
                                                                                            'NdisClMakeCall',
                                                                                            'NdisCoDeleteVc',
                                                                                            'NdisCoCreateVc',
                                                                                            'NdisReleaseReadWriteLock',
                                                                                            'NdisInitializeReadWriteLock',
                                                                                            'NdisReadConfiguration',
                                                                                            'NdisOpenConfigurationKeyByName',
                                                                                            'NdisOpenProtocolConfiguration',
                                                                                            'NdisRegisterProtocol',
                                                                                            'NdisSetTimer',
                                                                                            'NdisCancelTimer',
                                                                                            'NdisClDeregisterSap',
                                                                                            'NdisInitializeEvent',
                                                                                            'NdisWaitEvent',
                                                                                            'NdisSetEvent',
                                                                                            'NdisCmCloseCallComplete',
                                                                                            'NdisOpenAdapter',
                                                                                            'NdisRequest',
                                                                                            'NdisCloseAdapter',
                                                                                            'NdisClOpenAddressFamily',
                                                                                            'NdisCmRegisterAddressFamily',
                                                                                            'NdisClCloseAddressFamily',
                                                                                            'NdisDeregisterProtocol'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 17920,
                                                                                       'INIT\x00\x00\x00\x00': 5120,
                                                                                       'PAGE\x00\x00\x00\x00': 6144,
                                                                                       'PAGENDPx': 19456},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/6dc8848c6775b59b0e17fccc7e89ddb71473fa1472d3fa4044e02a228bfd0968'},
 '6dd17eb2564bc0263516ce985a02b345974dd624152ac9f87225f85ac040dc88': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 629992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 630272,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6dd17eb2564bc0263516ce985a02b345974dd624152ac9f87225f85ac040dc88'},
 '6df712028446af021b9ca5090778b3cc0af63616691cdcd50ba94d97df021b60': {'AddressOfEntryPoint': 929792,
                                                                      'DebugRVA': 400492,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 401408,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 0,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 403352,
                                                                      'SectionNames': {},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/6df712028446af021b9ca5090778b3cc0af63616691cdcd50ba94d97df021b60'},
 '6edfe6ef35a7f7908e6a887b054b5aa697f00d1537a332675e6218ffd7a02071': {'AddressOfEntryPoint': 52864,
                                                                      'DebugRVA': 91472,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 100176,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'lstrcmpiA',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetNumberFormatA',
                                                                                            'GetProcAddress',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetTempPathA',
                                                                                            'MoveFileExA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCommandLineA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileA',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'FindWindowExA',
                                                                                            'GetClassNameA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSysColor',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'LoadIconA',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'wvsprintfA',
                                                                                            'SetWindowLongA',
                                                                                            'CharUpperA',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'MessageBoxA',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringA',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongA',
                                                                                            'OemToCharBuffA',
                                                                                            'GetMessageA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetOpenFileNameA',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetSaveFileNameA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ShellExecuteExA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHChangeNotify',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 13324,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 86016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6edfe6ef35a7f7908e6a887b054b5aa697f00d1537a332675e6218ffd7a02071'},
 '6ef69ff379dd2987fb1b88f2f82623c98a92fe41f71d05f00f96d179d3909ebd': {'AddressOfEntryPoint': 168368,
                                                                      'DebugRVA': 317168,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1468,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 16384,
                                                                                       '.rdata\x00\x00': 110080,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 310784},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/6ef69ff379dd2987fb1b88f2f82623c98a92fe41f71d05f00f96d179d3909ebd'},
 '709401e49372ea0405b9d1ac37daea5ed499469c245012baa3d77e6b3864cfb3': {'AddressOfEntryPoint': 167652,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'HeapCreate',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'strncpy',
                                                                                            'memmove',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'memset',
                                                                                            'RtlCaptureContext',
                                                                                            'GetACP',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetOEMCP',
                                                                                            'GetVersionExA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'HeapReAlloc',
                                                                                            'ReadFile',
                                                                                            'SetStdHandle',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'LoadLibraryA',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'CloseHandle',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LoadIconA',
                                                                                            'wsprintfA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 27648,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/709401e49372ea0405b9d1ac37daea5ed499469c245012baa3d77e6b3864cfb3'},
 '70baf02e96ef1a515db921c1a3c466696af75a6fe51d8f1bf78e9e9d2964bd5a': {'AddressOfEntryPoint': 125112,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 598016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LogonUserW',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocDescriptorEx',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetReadFile',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['WSACleanup',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'select',
                                                                                            'accept',
                                                                                            '__WSAFDIsSet',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetConnectW',
                                                                                            'FtpOpenFileW',
                                                                                            'HttpQueryInfoW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetOpenW',
                                                                                            'InternetReadFile',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'CreatePipe',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'IsCharUpperW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'CharUpperBuffW',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursor',
                                                                                            'WindowFromPoint',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'EnumThreadWindows',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'FindWindowW',
                                                                                            'CloseClipboard',
                                                                                            'DestroyWindow',
                                                                                            'RoundRect',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'GetDIBits',
                                                                                            'DeleteDC',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'SetBkMode',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'GetAce',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'GetAclInformation',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetVartype',
                                                                                            'OleLoadPicture',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayAllocDescriptorEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 506,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 92856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 25600,
                                                                                       '.rdata\x00\x00': 86528,
                                                                                       '.rsrc\x00\x00\x00': 93184,
                                                                                       '.text\x00\x00\x00': 590848},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/70baf02e96ef1a515db921c1a3c466696af75a6fe51d8f1bf78e9e9d2964bd5a'},
 '7116d03a7d857b18fd970c1e3dabfc953188e64269640eb757b3e7fc1e50c4cd': {'AddressOfEntryPoint': 1073780189,
                                                                      'DebugRVA': 4896,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualQuery',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceInstallParamsA',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcatA',
                                                                                            'lstrlenA',
                                                                                            'lstrcpyA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'GetFullPathNameA',
                                                                                            'FindFirstFileA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcpynA',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'DeleteFileA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemWindowsDirectoryA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'Sleep',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'EnumWindows',
                                                                                            'GetWindowTextA',
                                                                                            'SendMessageA',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'ShowWindow',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupGetInfInformationA',
                                                                                            'SetupQueryInfVersionInformationA',
                                                                                            'CM_Locate_DevNodeA',
                                                                                            'CM_Reenumerate_DevNode',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'SHGetFolderPathA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 86,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1760,
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/7116d03a7d857b18fd970c1e3dabfc953188e64269640eb757b3e7fc1e50c4cd'},
 '7118f44277e560fb597c02d33d0fe4eb1ff69204b49da88e526c5f1e63bd0adc': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 206084,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 133632,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7118f44277e560fb597c02d33d0fe4eb1ff69204b49da88e526c5f1e63bd0adc'},
 '71408dc0a8a68a5e457a25d9f39c967a6ed0488180ff3c63b081decb2e126cd2': {'AddressOfEntryPoint': 186024,
                                                                      'DebugRVA': 197408,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 196608,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NETIO.SYS': 'WskDeregister',
                                                                                      'TDI.SYS': 'TdiDeregisterPnPHandlers',
                                                                                      'ntoskrnl.exe': 'RtlInitUnicodeString',
                                                                                      'storport.sys': 'StorPortInitialize'},
                                                                      'ImportedFunctions': ['KeInitializeSpinLock',
                                                                                            'IoInitializeTimer',
                                                                                            'PsGetCurrentProcess',
                                                                                            'IoStartTimer',
                                                                                            'MmLockPagableDataSection',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'MmUnlockPagableImageSection',
                                                                                            'IoStopTimer',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoQueueWorkItem',
                                                                                            'KeSetEvent',
                                                                                            'KeDelayExecutionThread',
                                                                                            'IoReuseIrp',
                                                                                            'PsCreateSystemThread',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            'ObfDereferenceObject',
                                                                                            'InitializeSListHead',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'IoAllocateWorkItem',
                                                                                            'KeWaitForSingleObject',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlQueryRegistryValuesEx',
                                                                                            'ZwClose',
                                                                                            'wcsncmp',
                                                                                            'wcschr',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwDeleteKey',
                                                                                            'ZwCreateKey',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'IoCancelIrp',
                                                                                            'KeSetBasePriorityThread',
                                                                                            'PsTerminateSystemThread',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'KeInitializeEvent',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoFreeIrp',
                                                                                            'IoFreeMdl',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoOpenDeviceRegistryKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'IofCallDriver',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            'IoAllocateMdl',
                                                                                            'ExQueryDepthSList',
                                                                                            'ExAcquireFastMutex',
                                                                                            'ExReleaseFastMutex',
                                                                                            '_itoa',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            '_vsnprintf',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'IoBuildPartialMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ObfReferenceObject',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoGetDeviceInterfaces',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'atoi',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'IoRegisterBootDriverReinitialization',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'IoReportRootDevice',
                                                                                            'RtlCompareMemory',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'RtlInitUnicodeString',
                                                                                            'StorPortPauseDevice',
                                                                                            'StorPortResumeDevice',
                                                                                            'StorPortNotification',
                                                                                            'StorPortExtendedFunction',
                                                                                            'StorPortInitialize',
                                                                                            'TdiRegisterPnPHandlers',
                                                                                            'TdiDeregisterPnPHandlers',
                                                                                            'WskCaptureProviderNPI',
                                                                                            'WskReleaseProviderNPI',
                                                                                            'WskRegister',
                                                                                            'WskDeregister'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9728,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 190976,
                                                                                       'INIT\x00\x00\x00\x00': 4096,
                                                                                       'PAGE\x00\x00\x00\x00': 1536,
                                                                                       'PAGELK\x00\x00': 45568},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/71408dc0a8a68a5e457a25d9f39c967a6ed0488180ff3c63b081decb2e126cd2'},
 '71a42d2c0d2b9aac8a7a572ae3163e8d69b2df700e174190e2ded475c7b71ca6': {'AddressOfEntryPoint': 28772,
                                                                      'DebugRVA': 16720,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'KeBugCheckEx'},
                                                                      'ImportedFunctions': ['ExFreePoolWithTag',
                                                                                            'ExAllocatePool',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeClearEvent',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'KeInitializeMutex',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            '_wcsnicmp',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'wcsncpy',
                                                                                            'KeInitializeEvent',
                                                                                            'IoFreeMdl',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'KeReleaseMutex',
                                                                                            'ObQueryNameString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IofCompleteRequest',
                                                                                            'IoGetDeviceAttachmentBaseRef',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'MmProbeAndLockPages',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'IoAllocateIrp',
                                                                                            'CmRegisterCallback',
                                                                                            'MmUnlockPages',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'PsGetCurrentThreadId',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoCreateDevice',
                                                                                            'CmUnRegisterCallback',
                                                                                            'KeStackAttachProcess',
                                                                                            'IoAllocateMdl',
                                                                                            'IofCallDriver',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 41,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 11264,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/71a42d2c0d2b9aac8a7a572ae3163e8d69b2df700e174190e2ded475c7b71ca6'},
 '72259a3704916c9c60a055321313a70e190dd7662beea77c3c63bc1380abc0c3': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 13096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/72259a3704916c9c60a055321313a70e190dd7662beea77c3c63bc1380abc0c3'},
 '72542d9a736877019ba23be25276e47375cb4d442796c44f6ade1b6104e8fc53': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'libgimp-2.0-0.dll': 'gimp_tile_width',
                                                                                      'libgimpbase-2.0-0.dll': 'gimp_locale_directory',
                                                                                      'libgimpui-2.0-0.dll': 'gimp_window_set_transient',
                                                                                      'libgimpwidgets-2.0-0.dll': 'gimp_toggle_button_update',
                                                                                      'libglib-2.0-0.dll': 'g_random_int_range',
                                                                                      'libgobject-2.0-0.dll': 'g_type_check_instance_cast',
                                                                                      'libgtk-win32-2.0-0.dll': 'gtk_window_get_type',
                                                                                      'libintl-8.dll': 'libintl_textdomain',
                                                                                      'msvcrt.dll': 'strlen'},
                                                                      'ImportedFunctions': ['gimp_drawable_preview_new',
                                                                                            'gimp_ui_init',
                                                                                            'gimp_window_set_transient',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'cos',
                                                                                            'exit',
                                                                                            'exp',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'signal',
                                                                                            'sin',
                                                                                            'sqrt',
                                                                                            'strlen',
                                                                                            'g_free',
                                                                                            'g_log',
                                                                                            'g_malloc',
                                                                                            'g_random_double',
                                                                                            'g_random_int_range',
                                                                                            'g_signal_connect_data',
                                                                                            'g_type_check_instance_cast',
                                                                                            'gtk_box_get_type',
                                                                                            'gtk_box_pack_start',
                                                                                            'gtk_check_button_new_with_mnemonic',
                                                                                            'gtk_container_add',
                                                                                            'gtk_container_get_type',
                                                                                            'gtk_container_set_border_width',
                                                                                            'gtk_dialog_get_type',
                                                                                            'gtk_dialog_set_alternative_button_order',
                                                                                            'gtk_hbox_new',
                                                                                            'gtk_table_get_type',
                                                                                            'gtk_table_new',
                                                                                            'gtk_table_set_col_spacings',
                                                                                            'gtk_table_set_row_spacings',
                                                                                            'gtk_toggle_button_get_type',
                                                                                            'gtk_toggle_button_set_active',
                                                                                            'gtk_vbox_new',
                                                                                            'gtk_widget_destroy',
                                                                                            'gtk_widget_show',
                                                                                            'gtk_window_get_type',
                                                                                            'libintl_bind_textdomain_codeset',
                                                                                            'libintl_bindtextdomain',
                                                                                            'libintl_gettext',
                                                                                            'libintl_textdomain',
                                                                                            'gimp_context_get_background',
                                                                                            'gimp_context_get_foreground',
                                                                                            'gimp_displays_flush',
                                                                                            'gimp_drawable_detach',
                                                                                            'gimp_drawable_flush',
                                                                                            'gimp_drawable_get',
                                                                                            'gimp_drawable_get_color_uchar',
                                                                                            'gimp_drawable_is_gray',
                                                                                            'gimp_drawable_is_rgb',
                                                                                            'gimp_drawable_mask_bounds',
                                                                                            'gimp_drawable_merge_shadow',
                                                                                            'gimp_drawable_update',
                                                                                            'gimp_install_procedure',
                                                                                            'gimp_main',
                                                                                            'gimp_pixel_rgn_get_col',
                                                                                            'gimp_pixel_rgn_get_pixel',
                                                                                            'gimp_pixel_rgn_get_row',
                                                                                            'gimp_pixel_rgn_init',
                                                                                            'gimp_pixel_rgn_set_col',
                                                                                            'gimp_pixel_rgn_set_pixel',
                                                                                            'gimp_pixel_rgn_set_row',
                                                                                            'gimp_pixel_rgns_process',
                                                                                            'gimp_pixel_rgns_register',
                                                                                            'gimp_plugin_menu_register',
                                                                                            'gimp_procedural_db_get_data',
                                                                                            'gimp_procedural_db_set_data',
                                                                                            'gimp_progress_init',
                                                                                            'gimp_progress_update',
                                                                                            'gimp_tile_cache_ntiles',
                                                                                            'gimp_tile_width',
                                                                                            'gimp_locale_directory',
                                                                                            'gimp_dialog_get_type',
                                                                                            'gimp_dialog_new',
                                                                                            'gimp_dialog_run',
                                                                                            'gimp_double_adjustment_update',
                                                                                            'gimp_int_combo_box_connect',
                                                                                            'gimp_int_combo_box_get_active',
                                                                                            'gimp_int_combo_box_get_type',
                                                                                            'gimp_int_combo_box_new',
                                                                                            'gimp_preview_draw_buffer',
                                                                                            'gimp_preview_get_position',
                                                                                            'gimp_preview_get_size',
                                                                                            'gimp_preview_invalidate',
                                                                                            'gimp_scale_entry_new',
                                                                                            'gimp_standard_help_func',
                                                                                            'gimp_table_attach_aligned',
                                                                                            'gimp_toggle_button_update'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 126,
                                                                      'NumberOfSections': 15,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 38912,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '/19\x00\x00\x00\x00\x00': 2048,
                                                                                       '/35\x00\x00\x00\x00\x00': 25600,
                                                                                       '/4\x00\x00\x00\x00\x00\x00': 1024,
                                                                                       '/47\x00\x00\x00\x00\x00': 4096,
                                                                                       '/61\x00\x00\x00\x00\x00': 4096,
                                                                                       '/73\x00\x00\x00\x00\x00': 1024,
                                                                                       '/84\x00\x00\x00\x00\x00': 4096,
                                                                                       '/95\x00\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/malware/72542d9a736877019ba23be25276e47375cb4d442796c44f6ade1b6104e8fc53'},
 '72a1639c4d0c53e0d73610a6af4277ce6cfa751aefa5eb1b6a121f090d599721': {'AddressOfEntryPoint': 10916,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'MSVCR90.dll': 'memset',
                                                                                      'USER32.dll': 'SetWindowTextW',
                                                                                      'ntdll.dll': 'ZwQueryObject'},
                                                                      'ImportedFunctions': ['TerminateProcess',
                                                                                            'GetProcAddress',
                                                                                            'VirtualAllocEx',
                                                                                            'Process32FirstW',
                                                                                            'GetExitCodeThread',
                                                                                            'Process32NextW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'CloseHandle',
                                                                                            'WriteProcessMemory',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'MessageBoxW',
                                                                                            'FlashWindow',
                                                                                            'FindWindowExW',
                                                                                            'ShowWindow',
                                                                                            'EndDialog',
                                                                                            'GetWindowTextW',
                                                                                            'SetParent',
                                                                                            'DialogBoxParamW',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowTextW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'wcsncpy',
                                                                                            'wcscat_s',
                                                                                            'wcsncmp',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '_wcsrev',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memset',
                                                                                            'RtlCaptureContext',
                                                                                            'ZwCreateThread',
                                                                                            'ZwResumeThread',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'NtOpenProcess',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwClose',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwGetContextThread',
                                                                                            'ZwQueryObject'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/72a1639c4d0c53e0d73610a6af4277ce6cfa751aefa5eb1b6a121f090d599721'},
 '72a2ae423d8c804cbaba16510b11fc00268ae98ff9b89f2839d9fd0043b3028d': {'AddressOfEntryPoint': 208904,
                                                                      'DebugRVA': 139488,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'KeQueryTimeIncrement',
                                                                                      'storport.sys': 'ScsiPortNotification'},
                                                                      'ImportedFunctions': ['ExSystemTimeToLocalTime',
                                                                                            'KeBugCheckEx',
                                                                                            'DbgPrint',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortNotification',
                                                                                            'StorPortDeviceReady',
                                                                                            'StorPortResumeDevice',
                                                                                            'StorPortBusy',
                                                                                            'StorPortResume',
                                                                                            'StorPortReady',
                                                                                            'StorPortDeviceBusy',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortPauseDevice',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortLogError',
                                                                                            'StorPortPause',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortValidateRange',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'ScsiPortNotification'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 25,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2200,
                                                                      'SectionNames': {'\x00\x1a\x02\x00oc\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 133632,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/72a2ae423d8c804cbaba16510b11fc00268ae98ff9b89f2839d9fd0043b3028d'},
 '72d410fda343e2f90e1bbf7b7d283f82bfa04b2b2a063546e9e01e72a9d4d62f': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/72d410fda343e2f90e1bbf7b7d283f82bfa04b2b2a063546e9e01e72a9d4d62f'},
 '72e6fa2b84dece16c7e0a1ab93e1b551228005380fa1e90591a996592ec6daa5': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 171852,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 172032,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/72e6fa2b84dece16c7e0a1ab93e1b551228005380fa1e90591a996592ec6daa5'},
 '73042ec92014fd226e9254c5cc03dae59b097834f05e70f70b571860420da8a8': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 31920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 32256,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/73042ec92014fd226e9254c5cc03dae59b097834f05e70f70b571860420da8a8'},
 '7316d366eec3da9f0757bceeacccbb4c8595bf08288bfa9db6b8ae2228899df4': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 449024,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7316d366eec3da9f0757bceeacccbb4c8595bf08288bfa9db6b8ae2228899df4'},
 '733c43ff38b7c341f2a0f064ef3f0bc4200a33c9533b9fc558a4fe35cd39d3eb': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 16936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 17408,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/733c43ff38b7c341f2a0f064ef3f0bc4200a33c9533b9fc558a4fe35cd39d3eb'},
 '739b028044f47f6bb25d3488bd131bdea62d5dd3111ebf6cb9716c2cd55393be': {'AddressOfEntryPoint': 1073923549,
                                                                      'DebugRVA': 107664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'KERNEL32.dll': 'GetExitCodeProcess',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'WSOCK32.dll': 'ntohs',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['WideCharToMultiByte',
                                                                                            'GlobalAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetHandleInformation',
                                                                                            'CreatePipe',
                                                                                            'CreateDirectoryA',
                                                                                            'GetSystemWindowsDirectoryA',
                                                                                            '__C_specific_handler',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'GetThreadLocale',
                                                                                            'GetShortPathNameA',
                                                                                            'GetLastError',
                                                                                            'CreateFileA',
                                                                                            'lstrlenW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDriveTypeA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetLongPathNameA',
                                                                                            'FreeLibrary',
                                                                                            'HeapReAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'RtlUnwindEx',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'ExitProcess',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileType',
                                                                                            'GetCommandLineA',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'DeleteCriticalSection',
                                                                                            'WriteFile',
                                                                                            'SetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'Sleep',
                                                                                            'GetFileAttributesA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetExitCodeProcess',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'SetTimer',
                                                                                            'CreateWindowExA',
                                                                                            'RegisterClassA',
                                                                                            'LoadCursorA',
                                                                                            'DefWindowProcA',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'GetMessageA',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'listen',
                                                                                            'getsockname',
                                                                                            'accept',
                                                                                            'recv',
                                                                                            'bind',
                                                                                            'socket',
                                                                                            'ioctlsocket',
                                                                                            'htons',
                                                                                            'connect',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'WSAAsyncSelect',
                                                                                            'ntohs'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 127,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 32304,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/739b028044f47f6bb25d3488bd131bdea62d5dd3111ebf6cb9716c2cd55393be'},
 '73a6f060f3e62c8067e29563a1d27f2419d760a4f1a7ffc1579e307f5f4a58f1': {'AddressOfEntryPoint': 82217,
                                                                      'DebugRVA': 507360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 503808,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'PrintDlgA',
                                                                                      'GDI32.dll': 'RestoreDC',
                                                                                      'KERNEL32.dll': 'GetEnvironmentStringsW',
                                                                                      'MPR.dll': 'WNetGetConnectionA',
                                                                                      'OLEAUT32.dll': 'SafeArrayUnaccessData',
                                                                                      'SHELL32.dll': 'SHGetFileInfoA',
                                                                                      'USER32.dll': 'SetTimer',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'WS2_32.dll': 'htonl',
                                                                                      'credui.dll': 'CredUIPromptForCredentialsA',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['getservbyport',
                                                                                            'WSAStartup',
                                                                                            'htons',
                                                                                            'ntohs',
                                                                                            'ntohl',
                                                                                            'gethostbyaddr',
                                                                                            'htonl',
                                                                                            'WNetGetConnectionA',
                                                                                            'CreateToolbarEx',
                                                                                            'CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_DrawEx',
                                                                                            'ImageList_Destroy',
                                                                                            'InitCommonControlsEx',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'CredUIPromptForCredentialsA',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'CreateFileA',
                                                                                            'SetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'CreateEventA',
                                                                                            'OpenEventA',
                                                                                            'GetTickCount',
                                                                                            'lstrcatA',
                                                                                            'HeapFree',
                                                                                            'lstrcpyA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetDateFormatA',
                                                                                            'ReadProcessMemory',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'MulDiv',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'SearchPathA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetNumberFormatA',
                                                                                            'lstrcpynA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'VirtualQueryEx',
                                                                                            'OpenProcess',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ResetEvent',
                                                                                            'LoadLibraryW',
                                                                                            'UnmapViewOfFile',
                                                                                            'IsBadReadPtr',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'PulseEvent',
                                                                                            'GlobalMemoryStatus',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'SetPriorityClass',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalReAlloc',
                                                                                            'DeleteFileA',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetComputerNameW',
                                                                                            'SizeofResource',
                                                                                            'IsWow64Process',
                                                                                            'GetProcessId',
                                                                                            'Sleep',
                                                                                            'DeviceIoControl',
                                                                                            'GetDriveTypeA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFileTime',
                                                                                            'GetExitCodeThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessAffinityMask',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetThreadContext',
                                                                                            'GetProcessWorkingSetSize',
                                                                                            'MultiByteToWideChar',
                                                                                            'GlobalAddAtomA',
                                                                                            'GetSystemInfo',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'HeapSize',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'ResumeThread',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitThread',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'RaiseException',
                                                                                            'LockResource',
                                                                                            'GetCurrentProcess',
                                                                                            'IsBadStringPtrA',
                                                                                            'lstrlenA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DeleteCriticalSection',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTimeFormatA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleA',
                                                                                            'WaitForSingleObject',
                                                                                            'TerminateThread',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Module32First',
                                                                                            'CloseHandle',
                                                                                            'Module32Next',
                                                                                            'GetVersion',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'FormatMessageA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'DrawMenuBar',
                                                                                            'RemoveMenu',
                                                                                            'CreateMenu',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageTimeoutA',
                                                                                            'GetWindow',
                                                                                            'GetUserObjectSecurity',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetKeyState',
                                                                                            'CheckRadioButton',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'ScrollWindowEx',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'IntersectRect',
                                                                                            'GetClassLongPtrA',
                                                                                            'GetUpdateRgn',
                                                                                            'ReleaseCapture',
                                                                                            'GetDlgItemTextA',
                                                                                            'CheckMenuRadioItem',
                                                                                            'CheckMenuItem',
                                                                                            'PostQuitMessage',
                                                                                            'DrawIconEx',
                                                                                            'LoadMenuA',
                                                                                            'InsertMenuA',
                                                                                            'TrackPopupMenu',
                                                                                            'GetCapture',
                                                                                            'ExitWindowsEx',
                                                                                            'DrawEdge',
                                                                                            'wsprintfA',
                                                                                            'ShowWindowAsync',
                                                                                            'SetForegroundWindow',
                                                                                            'FindWindowExA',
                                                                                            'IsIconic',
                                                                                            'GetWindowDC',
                                                                                            'SetMenuItemInfoA',
                                                                                            'SetClassLongA',
                                                                                            'FillRect',
                                                                                            'EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowTextA',
                                                                                            'DeleteMenu',
                                                                                            'EnableWindow',
                                                                                            'CheckDlgButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetWindowPlacement',
                                                                                            'ModifyMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetMenu',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'EnableMenuItem',
                                                                                            'DestroyIcon',
                                                                                            'FrameRect',
                                                                                            'GetDoubleClickTime',
                                                                                            'InvalidateRgn',
                                                                                            'MessageBoxA',
                                                                                            'SetFocus',
                                                                                            'WindowFromPoint',
                                                                                            'RedrawWindow',
                                                                                            'LoadAcceleratorsA',
                                                                                            'GetMessageA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'SetCapture',
                                                                                            'CreateDialogParamA',
                                                                                            'KillTimer',
                                                                                            'LoadStringA',
                                                                                            'LoadIconA',
                                                                                            'LoadImageA',
                                                                                            'RegisterClassExA',
                                                                                            'RegisterClassA',
                                                                                            'FindWindowA',
                                                                                            'SetWindowPlacement',
                                                                                            'UpdateWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'SetWindowTextA',
                                                                                            'InflateRect',
                                                                                            'DefFrameProcA',
                                                                                            'DefMDIChildProcA',
                                                                                            'DefDlgProcA',
                                                                                            'ClientToScreen',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateIconIndirect',
                                                                                            'MapWindowPoints',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'IsWindowVisible',
                                                                                            'GetFocus',
                                                                                            'DrawTextA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'PostMessageA',
                                                                                            'SendMessageA',
                                                                                            'ShowWindow',
                                                                                            'GetCursorPos',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowLongA',
                                                                                            'IsZoomed',
                                                                                            'PtInRect',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'DrawFrameControl',
                                                                                            'CallWindowProcA',
                                                                                            'CopyRect',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EnumChildWindows',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'OffsetRect',
                                                                                            'UnionRect',
                                                                                            'GetParent',
                                                                                            'GetClassNameA',
                                                                                            'GetWindowLongA',
                                                                                            'DeferWindowPos',
                                                                                            'ScreenToClient',
                                                                                            'DefWindowProcA',
                                                                                            'DialogBoxParamA',
                                                                                            'EndDialog',
                                                                                            'ChildWindowFromPoint',
                                                                                            'GetDlgItem',
                                                                                            'InvalidateRect',
                                                                                            'SetCursor',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'LoadCursorA',
                                                                                            'SetTimer',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'GetTextMetricsA',
                                                                                            'Polyline',
                                                                                            'GetBkColor',
                                                                                            'SelectClipRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'RectInRegion',
                                                                                            'CreateRectRgn',
                                                                                            'SaveDC',
                                                                                            'SetROP2',
                                                                                            'CreatePen',
                                                                                            'Rectangle',
                                                                                            'GetStockObject',
                                                                                            'GetObjectA',
                                                                                            'SetTextAlign',
                                                                                            'CreateFontIndirectA',
                                                                                            'ExtTextOutA',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'CreateSolidBrush',
                                                                                            'GetDeviceCaps',
                                                                                            'SetMapMode',
                                                                                            'StartDocA',
                                                                                            'StartPage',
                                                                                            'EndPage',
                                                                                            'EndDoc',
                                                                                            'SetBkColor',
                                                                                            'BitBlt',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'ChooseFontA',
                                                                                            'GetOpenFileNameA',
                                                                                            'ChooseColorA',
                                                                                            'GetSaveFileNameA',
                                                                                            'FindTextA',
                                                                                            'PrintDlgA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'ShellExecuteExA',
                                                                                            'Shell_NotifyIconA',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetFileInfoA',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SafeArrayGetElement',
                                                                                            'VariantChangeType',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayUnaccessData'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 393,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 197896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 24576,
                                                                                       '.pdata\x00\x00': 22528,
                                                                                       '.rdata\x00\x00': 113152,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 198144,
                                                                                       '.text\x00\x00\x00': 497664},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/73a6f060f3e62c8067e29563a1d27f2419d760a4f1a7ffc1579e307f5f4a58f1'},
 '73d807dcf7103b8dfadd56db747508cbe258081a8a900989285679999bad11cc': {'AddressOfEntryPoint': 8544,
                                                                      'DebugRVA': 16544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'PsSetCreateProcessNotifyRoutine'},
                                                                      'ImportedFunctions': ['KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeReleaseSpinLock',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwClose',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'ZwOpenProcess',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'KeDelayExecutionThread',
                                                                                            'KeInsertQueueApc',
                                                                                            'KeInitializeApc',
                                                                                            'PsSetLoadImageNotifyRoutine',
                                                                                            'PsSetCreateProcessNotifyRoutine'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 19,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 14848,
                                                                                       '.text\x00\x00\x00': 11264,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/73d807dcf7103b8dfadd56db747508cbe258081a8a900989285679999bad11cc'},
 '73dbf71fbc42b1cb2354b12d3c4c10ca80929bc34100eac6c1db390b6df79a8c': {'AddressOfEntryPoint': 1073896413,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'KERNEL32.dll': 'GetSystemInfo',
                                                                                      'USER32.dll': 'LoadIconA'},
                                                                      'ImportedFunctions': ['lstrcpyA',
                                                                                            'lstrcpynA',
                                                                                            'CreateProcessA',
                                                                                            'VirtualQuery',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapCreate',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'SetStdHandle',
                                                                                            'ReadFile',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'LoadIconA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 43784,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/73dbf71fbc42b1cb2354b12d3c4c10ca80929bc34100eac6c1db390b6df79a8c'},
 '73dfab2cc9307fb34cf75930b930963cc02be23f9e8b87cd87d50e2476cb74d7': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 385608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 386048,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/73dfab2cc9307fb34cf75930b930963cc02be23f9e8b87cd87d50e2476cb74d7'},
 '73f22d8dea968b0f417f88d7fb4a7be4ce7e5109583b36a6eab798072e6fe832': {'AddressOfEntryPoint': 1074055889,
                                                                      'DebugRVA': 231184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 229376,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                      'KERNEL32.dll': 'FlsGetValue',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceInstallParamsA',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'WS2_32.dll': 'htons'},
                                                                      'ImportedFunctions': ['PathFileExistsA',
                                                                                            'PathAppendA',
                                                                                            'PathFileExistsW',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'htonl',
                                                                                            'htons',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'CM_Get_Device_IDA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'CM_Get_Parent',
                                                                                            'SetupDiGetDeviceInterfaceDetailA',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'CM_Reenumerate_DevNode',
                                                                                            'CM_Locate_DevNodeA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'GetProcessHeap',
                                                                                            'Sleep',
                                                                                            'CreateProcessA',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32First',
                                                                                            'ProcessIdToSessionId',
                                                                                            'Process32Next',
                                                                                            'OpenProcess',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoA',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'CopyFileW',
                                                                                            'FindClose',
                                                                                            'CreateDirectoryA',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetLogicalDriveStringsA',
                                                                                            'GetDriveTypeA',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'DeviceIoControl',
                                                                                            'GetCommandLineA',
                                                                                            'lstrcmpiA',
                                                                                            'OutputDebugStringA',
                                                                                            'CreateSemaphoreA',
                                                                                            'LocalFree',
                                                                                            'SetEvent',
                                                                                            'LocalAlloc',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateThread',
                                                                                            'GetTickCount',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ResetEvent',
                                                                                            'FindFirstFileA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'TerminateProcess',
                                                                                            'GetLocalTime',
                                                                                            'GetTempPathA',
                                                                                            'GetFileSize',
                                                                                            'DeleteFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'Thread32First',
                                                                                            'Thread32Next',
                                                                                            'GetVolumeNameForVolumeMountPointA',
                                                                                            'lstrlenA',
                                                                                            'FindNextFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'CreateFileA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetEndOfFile',
                                                                                            'CreateEventA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapReAlloc',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'CharNextA',
                                                                                            'GetMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'PostThreadMessageA',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'wsprintfA',
                                                                                            'RegCreateKeyExA',
                                                                                            'GetUserNameA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'QueryServiceStatus',
                                                                                            'UnlockServiceDatabase',
                                                                                            'ChangeServiceConfigA',
                                                                                            'QueryServiceLockStatusA',
                                                                                            'LockServiceDatabase',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegisterServiceCtrlHandlerExA',
                                                                                            'SetServiceStatus',
                                                                                            'CloseServiceHandle',
                                                                                            'DeleteService',
                                                                                            'ControlService',
                                                                                            'StartServiceA',
                                                                                            'ChangeServiceConfig2A',
                                                                                            'CreateServiceA',
                                                                                            'QueryServiceConfigA',
                                                                                            'OpenServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'CreateProcessAsUserA',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'SetTokenInformation',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                            'ShellExecuteA',
                                                                                            'SHCreateDirectoryExA',
                                                                                            'SHGetFolderPathA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 191,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1736,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/73f22d8dea968b0f417f88d7fb4a7be4ce7e5109583b36a6eab798072e6fe832'},
 '743b1b48a92948d3a9e3f813d97f028f270d5bb5c7e1a535ec54fc3fa954014b': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1021300,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1021440,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/743b1b48a92948d3a9e3f813d97f028f270d5bb5c7e1a535ec54fc3fa954014b'},
 '74499aa52ed87c6a9a90e990236d7aeab061cfa0f12397689b2d0ee12410932e': {'AddressOfEntryPoint': 121744,
                                                                      'DebugRVA': 95104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90112,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/74499aa52ed87c6a9a90e990236d7aeab061cfa0f12397689b2d0ee12410932e'},
 '74c3c9a4e6728191382470d0d70fdc8eeb74e5a2ed941cc34e9f7146a527480c': {'AddressOfEntryPoint': 35308,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 59392},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/74c3c9a4e6728191382470d0d70fdc8eeb74e5a2ed941cc34e9f7146a527480c'},
 '74cdd7e59b3abd27e56d06139287b79ecc92ac6a1dcdc13d34ae65f89860ec95': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 275856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 275968,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/74cdd7e59b3abd27e56d06139287b79ecc92ac6a1dcdc13d34ae65f89860ec95'},
 '74e16a62ee0983797f4ee5d2b04164d1cc90448269807dc1105e11a591279108': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 734916,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 735232,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/74e16a62ee0983797f4ee5d2b04164d1cc90448269807dc1105e11a591279108'},
 '75384515682b641bed4b3cc09157f9c16d1a4742a0f08bab5c250d616582ef8a': {'AddressOfEntryPoint': 1074246441,
                                                                      'DebugRVA': 275872,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 274432,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'LoadKeyboardLayoutW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'OutputDebugStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCurrentProcess',
                                                                                            'MoveFileExW',
                                                                                            'GetTickCount',
                                                                                            'CopyFileW',
                                                                                            'SetLastError',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetUserDefaultLangID',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'DeleteFileW',
                                                                                            'LocalFree',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'CloseHandle',
                                                                                            'CreateDirectoryW',
                                                                                            'WriteFile',
                                                                                            'GetTempPathW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetErrorMode',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleW',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStartupInfoW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'HeapReAlloc',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CloseDesktop',
                                                                                            'OpenDesktopW',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'SystemParametersInfoW',
                                                                                            'UnloadKeyboardLayout',
                                                                                            'LoadStringW',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetEntriesInAclW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'RegOpenKeyW',
                                                                                            'GetUserNameW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'FreeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHFileOperationW',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromIID',
                                                                                            'IIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SHDeleteKeyW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathAppendW',
                                                                                            'ImmInstallIMEW',
                                                                                            'ImmSetHotKey',
                                                                                            'ImmDisableIME'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 167864,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/75384515682b641bed4b3cc09157f9c16d1a4742a0f08bab5c250d616582ef8a'},
 '75420d9f3fa29fb6e99c4affbf6adcc03fc2b375034e443db88f4b7c0b622125': {'AddressOfEntryPoint': 225512,
                                                                      'DebugRVA': 238368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 237568,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionBind',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoCancelIrp',
                                                                                            'PoSetPowerState',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IoDetachDevice',
                                                                                            'wcsstr',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 968,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 231936,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/75420d9f3fa29fb6e99c4affbf6adcc03fc2b375034e443db88f4b7c0b622125'},
 '75430d49c67c6b69ac562d1a7455e38e32755a85919a9dbdbf4882d4dad70f96': {'AddressOfEntryPoint': 41632,
                                                                      'DebugRVA': 103184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'DIFXAPI.dll': 'DriverPackageInstallW',
                                                                                      'KERNEL32.dll': 'GetLocaleInfoW'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'DriverPackageGetPathW',
                                                                                            'DriverPackagePreinstallW',
                                                                                            'DriverPackageUninstallW',
                                                                                            'DriverPackageInstallW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCPInfo',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 32256,
                                                                                       '.text\x00\x00\x00': 98304},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/75430d49c67c6b69ac562d1a7455e38e32755a85919a9dbdbf4882d4dad70f96'},
 '75561c8830f865f2816ee896c15c20a0188be2bbbd6cb89db12637435c489fc3': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1714596,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1714688,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/75561c8830f865f2816ee896c15c20a0188be2bbbd6cb89db12637435c489fc3'},
 '755a80e0353fce89db01f79067d3fe185c2ef1757494c6f98e15618e95916e7b': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1138860,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1139200,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/755a80e0353fce89db01f79067d3fe185c2ef1757494c6f98e15618e95916e7b'},
 '7560e4554d08d0123b38ea06136c212354eb37245bb31fe6d92a2ea12c687169': {'AddressOfEntryPoint': 8760,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 58400,
                                                                      'ExportSize': 85,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers'},
                                                                      'ImportedFunctions': ['GetExitCodeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateRemoteThread',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'WriteProcessMemory',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSize',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7560e4554d08d0123b38ea06136c212354eb37245bb31fe6d92a2ea12c687169'},
 '75a2b1e6231ff9b7dcdb8069aabb0f6c84d9db620714f52f24c1be3c409b9e68': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3440,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 346624,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/75a2b1e6231ff9b7dcdb8069aabb0f6c84d9db620714f52f24c1be3c409b9e68'},
 '76437993f28048cb0461ee1d622e853460791ec0cdc97b156a4789143f4692bf': {'AddressOfEntryPoint': 45040,
                                                                      'DebugRVA': 55040,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetUserNameA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'MSVCP90.dll': '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                      'MSVCR90.dll': '_unlock',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'gdiplus.dll': 'GdipCloneImage'},
                                                                      'ImportedFunctions': ['FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ReadFile',
                                                                                            'CreateFileA',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateRemoteThread',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'Process32NextW',
                                                                                            'OpenProcess',
                                                                                            'FindNextFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteFileW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FindClose',
                                                                                            'GetComputerNameA',
                                                                                            'GetLogicalDriveStringsA',
                                                                                            'GetDriveTypeA',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32First',
                                                                                            'Process32Next',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CopyFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'Process32FirstW',
                                                                                            'CloseHandle',
                                                                                            'GetWindowDC',
                                                                                            'GetWindowRect',
                                                                                            'GetDesktopWindow',
                                                                                            'PostMessageA',
                                                                                            'FindWindowA',
                                                                                            'MessageBoxA',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'DeleteDC',
                                                                                            'SaveDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'RestoreDC',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'GetUserNameA',
                                                                                            'ShellExecuteA',
                                                                                            '?endl@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD_K@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@AEBV12@@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD@Z',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAAEBD_K@Z',
                                                                                            '?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KXZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ',
                                                                                            '?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z',
                                                                                            '??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@H@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@PEBD@Z',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAPEBDXZ',
                                                                                            '??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ',
                                                                                            '??Bios_base@std@@QEBAPEAXXZ',
                                                                                            '??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAEAV?$basic_istream@DU?$char_traits@D@std@@@0@AEAV10@AEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z',
                                                                                            '??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAD_K@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV12@_K0@Z',
                                                                                            '?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2_KB',
                                                                                            '?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@0@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBD@Z',
                                                                                            '?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z',
                                                                                            '?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@0@AEAV10@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QEAA@PEBDHH@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBD@Z',
                                                                                            '?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_NXZ',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBDAEBV10@@Z',
                                                                                            '?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QEAAXPEBDHH@Z',
                                                                                            '??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QEAA@XZ',
                                                                                            '?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z',
                                                                                            '?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KXZ',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z',
                                                                                            '?width@ios_base@std@@QEAA_J_J@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z',
                                                                                            '?eq_int_type@?$char_traits@D@std@@SA_NAEBH0@Z',
                                                                                            '?eof@?$char_traits@D@std@@SAHXZ',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ',
                                                                                            '?flags@ios_base@std@@QEBAHXZ',
                                                                                            '?width@ios_base@std@@QEBA_JXZ',
                                                                                            '?length@?$char_traits@D@std@@SA_KPEBD@Z',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ',
                                                                                            '?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?good@ios_base@std@@QEBA_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            'InternetWriteFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlA',
                                                                                            'InternetOpenA',
                                                                                            'InternetConnectA',
                                                                                            'HttpOpenRequestA',
                                                                                            'HttpSendRequestExA',
                                                                                            'InternetReadFile',
                                                                                            'HttpEndRequestA',
                                                                                            'InternetSetOptionA',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'GdipGetImageEncodersSize',
                                                                                            'GdipGetImageEncoders',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipSaveImageToFile',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '_encode_pointer',
                                                                                            '__dllonexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_stat64i32',
                                                                                            'tolower',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'mbstowcs',
                                                                                            'getenv',
                                                                                            'atoi',
                                                                                            '_CxxThrowException',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '_unlock'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 203,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 8952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 24576,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 9216,
                                                                                       '.text\x00\x00\x00': 49152},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/76437993f28048cb0461ee1d622e853460791ec0cdc97b156a4789143f4692bf'},
 '767a72c288c1c59ad66cfde80ee8a9f87c1e19c7366742d92930ec3b8e9dbf30': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1436,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 47616},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/767a72c288c1c59ad66cfde80ee8a9f87c1e19c7366742d92930ec3b8e9dbf30'},
 '76de637a182f73a2f5d07dcbec95eba0b36bde8e0368281f0a8884aef390418b': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/76de637a182f73a2f5d07dcbec95eba0b36bde8e0368281f0a8884aef390418b'},
 '76ea5fed87f149064150f91dd51d7bba3cf7907715f24bbc3b15458d6acd3a0f': {'AddressOfEntryPoint': 1073987849,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStringTypeA',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceRegistryPropertyW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['SetupDiDestroyDeviceInfoList',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'FlsSetValue',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'HeapReAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'wsprintfW',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathRenameExtensionW',
                                                                                            'SHGetValueW',
                                                                                            'PathCombineW',
                                                                                            'PathAppendW',
                                                                                            'PathFileExistsW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1316,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/76ea5fed87f149064150f91dd51d7bba3cf7907715f24bbc3b15458d6acd3a0f'},
 '77293255d2e6c1d3ceaeed6739073a6844b976ff8497924a4695318f0f61f993': {'AddressOfEntryPoint': 26400,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'CreateCompatibleDC',
                                                                                      'KERNEL32.dll': 'IsValidCodePage',
                                                                                      'USER32.dll': 'ScreenToClient',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'comdlg32.dll': 'ChooseColorW'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'timeGetTime',
                                                                                            'GetVersionExA',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'HeapReAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'Sleep',
                                                                                            'LCMapStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'FlsAlloc',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FreeLibrary',
                                                                                            'GlobalUnlock',
                                                                                            'GetProcAddress',
                                                                                            'GlobalLock',
                                                                                            'GetModuleHandleW',
                                                                                            'GlobalAlloc',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CloseHandle',
                                                                                            'FlsSetValue',
                                                                                            'ReadProcessMemory',
                                                                                            'OpenProcess',
                                                                                            'GetVersionExW',
                                                                                            'MulDiv',
                                                                                            'FlsGetValue',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetLastError',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'SetWindowTextW',
                                                                                            'GetDC',
                                                                                            'GetWindowRect',
                                                                                            'GetForegroundWindow',
                                                                                            'GetCursorPos',
                                                                                            'CloseClipboard',
                                                                                            'MoveWindow',
                                                                                            'GetParent',
                                                                                            'GetDesktopWindow',
                                                                                            'SetClipboardData',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'AttachThreadInput',
                                                                                            'SendMessageTimeoutW',
                                                                                            'ReleaseCapture',
                                                                                            'SendDlgItemMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'SetCapture',
                                                                                            'TranslateMessage',
                                                                                            'GetWindowDC',
                                                                                            'SetCursor',
                                                                                            'IsDialogMessageW',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetMessageW',
                                                                                            'DeferWindowPos',
                                                                                            'SetTimer',
                                                                                            'BeginDeferWindowPos',
                                                                                            'ShowWindow',
                                                                                            'DefWindowProcW',
                                                                                            'GetClientRect',
                                                                                            'SetWindowPos',
                                                                                            'WindowFromPoint',
                                                                                            'GetMenu',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'CheckMenuItem',
                                                                                            'DestroyWindow',
                                                                                            'LoadCursorW',
                                                                                            'KillTimer',
                                                                                            'LoadImageW',
                                                                                            'PostQuitMessage',
                                                                                            'IsWindowVisible',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursor',
                                                                                            'GetWindowPlacement',
                                                                                            'ClientToScreen',
                                                                                            'SendMessageW',
                                                                                            'EnumChildWindows',
                                                                                            'CreateWindowExW',
                                                                                            'GetWindowTextW',
                                                                                            'RegisterClassExW',
                                                                                            'GetDlgCtrlID',
                                                                                            'LoadIconW',
                                                                                            'EnableWindow',
                                                                                            'DestroyIcon',
                                                                                            'RedrawWindow',
                                                                                            'GetWindowLongW',
                                                                                            'InvalidateRect',
                                                                                            'ReleaseDC',
                                                                                            'GetClassNameW',
                                                                                            'ScreenToClient',
                                                                                            'Rectangle',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'CreatePen',
                                                                                            'DeleteDC',
                                                                                            'BitBlt',
                                                                                            'LineTo',
                                                                                            'DeleteObject',
                                                                                            'MoveToEx',
                                                                                            'GetPixel',
                                                                                            'SetROP2',
                                                                                            'CreateFontW',
                                                                                            'StretchBlt',
                                                                                            'PatBlt',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'ChooseColorW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 173,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 30472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 22016,
                                                                                       '.rsrc\x00\x00\x00': 30720,
                                                                                       '.text\x00\x00\x00': 80384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/77293255d2e6c1d3ceaeed6739073a6844b976ff8497924a4695318f0f61f993'},
 '77b33050c0b300f64858371f2fdb46e56c721cceecaacc40b0b5d16b0846be18': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 462968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 463360,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/77b33050c0b300f64858371f2fdb46e56c721cceecaacc40b0b5d16b0846be18'},
 '77b438e42357321350d2a7c0b543f15f817991958364d7d3c3688b9aeb28e623': {'AddressOfEntryPoint': 1610629053,
                                                                      'DebugRVA': 15200,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 952,
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/77b438e42357321350d2a7c0b543f15f817991958364d7d3c3688b9aeb28e623'},
 '77eb4a110d4a18546bb537af46d5dd3d73036a0b90d5d0b63f30c164550596f1': {'AddressOfEntryPoint': 290824,
                                                                      'DebugRVA': 188688,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 188416,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'SCSIPORT.SYS': 'ScsiPortNotification',
                                                                                      'ntoskrnl.exe': 'ExSystemTimeToLocalTime'},
                                                                      'ImportedFunctions': ['RtlQueryRegistryValues',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'KeWaitForSingleObject',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'KeInitializeEvent',
                                                                                            'ObfDereferenceObject',
                                                                                            'ExCreateCallback',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'IofCallDriver',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'swprintf',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ExUnregisterCallback',
                                                                                            'DbgPrint',
                                                                                            'MmMapIoSpace',
                                                                                            'MmUnmapIoSpace',
                                                                                            'KeBugCheckEx',
                                                                                            'ExRegisterCallback',
                                                                                            'ExSystemTimeToLocalTime',
                                                                                            'ScsiPortGetUncachedExtension',
                                                                                            'ScsiPortInitialize',
                                                                                            'ScsiPortLogError',
                                                                                            'ScsiPortGetDeviceBase',
                                                                                            'ScsiPortValidateRange',
                                                                                            'ScsiPortGetBusData',
                                                                                            'ScsiPortGetPhysicalAddress',
                                                                                            'ScsiPortStallExecution',
                                                                                            'ScsiPortNotification'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 31,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 184320,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/77eb4a110d4a18546bb537af46d5dd3d73036a0b90d5d0b63f30c164550596f1'},
 '78403bfde2a779dc530d623820d17e6d050c316d7f68dba980b49e7b9d5856cc': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 722800,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 722944,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/78403bfde2a779dc530d623820d17e6d050c316d7f68dba980b49e7b9d5856cc'},
 '785bf15195704996029556f7926a27e0a77a579d723e2a8b2e85648d230bd676': {'AddressOfEntryPoint': 499081,
                                                                      'DebugRVA': 300928,
                                                                      'DebugSize': 56,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 303104,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'API-MS-Win-Core-Debug-L1-1-0.dll': 'OutputDebugStringA',
                                                                                      'API-MS-Win-Core-ErrorHandling-L1-1-0.dll': 'UnhandledExceptionFilter',
                                                                                      'API-MS-Win-Core-File-L1-1-0.dll': 'CreateFileW',
                                                                                      'API-MS-Win-Core-Handle-L1-1-0.dll': 'DuplicateHandle',
                                                                                      'API-MS-Win-Core-Heap-L1-1-0.dll': 'GetProcessHeap',
                                                                                      'API-MS-Win-Core-LibraryLoader-L1-1-0.dll': 'LoadLibraryExW',
                                                                                      'API-MS-Win-Core-Misc-L1-1-0.dll': 'LocalFree',
                                                                                      'API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'API-MS-Win-Core-ProcessThreads-L1-1-0.dll': 'OpenThreadToken',
                                                                                      'API-MS-Win-Core-Profile-L1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'API-MS-Win-Core-Synch-L1-1-0.dll': 'CreateEventW',
                                                                                      'API-MS-Win-Core-SysInfo-L1-1-0.dll': 'SystemTimeToFileTime',
                                                                                      'API-MS-Win-Core-ThreadPool-L1-1-0.dll': 'CreateTimerQueueTimer',
                                                                                      'API-MS-Win-Security-Base-L1-1-0.dll': 'AddAce',
                                                                                      'KERNEL32.dll': 'GetCurrentDirectoryW',
                                                                                      'OLEAUT32.dll': 'SysReAllocString',
                                                                                      'RPCRT4.dll': 'RpcStringBindingComposeW',
                                                                                      'USER32.dll': 'EnumThreadWindows',
                                                                                      'ktmw32.dll': 'RollbackTransaction',
                                                                                      'msvcrt.dll': '?what@exception@@UEBAPEBDXZ',
                                                                                      'ntdll.dll': 'NtSetInformationProcess',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'wevtapi.dll': 'EvtClose'},
                                                                      'ImportedFunctions': ['LoadStringW',
                                                                                            'ShutdownBlockReasonCreate',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DestroyWindow',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'SetCursor',
                                                                                            'GetThreadDesktop',
                                                                                            'LoadCursorW',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostQuitMessage',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'GetUserObjectInformationW',
                                                                                            'EnableWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'PostMessageW',
                                                                                            'MessageBoxW',
                                                                                            'EnumThreadWindows',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_vsnwprintf',
                                                                                            'iswdigit',
                                                                                            '_wtol',
                                                                                            '_wcsicmp',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'fflush',
                                                                                            'fopen_s',
                                                                                            'fclose',
                                                                                            'calloc',
                                                                                            '_wcsnicmp',
                                                                                            '_wsplitpath_s',
                                                                                            'wcsrchr',
                                                                                            'srand',
                                                                                            '_wtoi',
                                                                                            '_ltow_s',
                                                                                            'wcscat_s',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '_purecall',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'wcsncmp',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'rand_s',
                                                                                            'fputws',
                                                                                            'memcpy',
                                                                                            'wcschr',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwEventActivityIdControl',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventUnregister',
                                                                                            'RtlCaptureContext',
                                                                                            'EtwEventWriteTransfer',
                                                                                            'EtwEventWrite',
                                                                                            'NtSetInformationProcess',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringA',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'FileTimeToSystemTime',
                                                                                            'DeleteFileW',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'HeapCreate',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'Sleep',
                                                                                            'lstrlenW',
                                                                                            'LocalFree',
                                                                                            'SearchPathW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ResumeThread',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'OpenProcessToken',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetThreadPriority',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetStartupInfoW',
                                                                                            'OpenThreadToken',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetWaitableTimer',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'CancelWaitableTimer',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'EnterCriticalSection',
                                                                                            'ResetEvent',
                                                                                            'OpenProcess',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'CreateEventW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetDynamicTimeZoneInformation',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'TzSpecificLocalTimeToSystemTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTickCount',
                                                                                            'SystemTimeToFileTime',
                                                                                            'ChangeTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'CheckTokenMembership',
                                                                                            'CreateWellKnownSid',
                                                                                            'GetLengthSid',
                                                                                            'EqualSid',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'IsWellKnownSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'GetAclInformation',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'MakeAbsoluteSD',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'IsValidSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'InitializeSid',
                                                                                            'AddAce',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitializeEx',
                                                                                            'CoMarshalInterface',
                                                                                            'CoDisconnectObject',
                                                                                            'CoImpersonateClient',
                                                                                            'CoRevertToSelf',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoEnableCallCancellation',
                                                                                            'CoCancelCall',
                                                                                            'CoDisableCallCancellation',
                                                                                            'CoCreateGuid',
                                                                                            'IIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysReAllocString',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'Ndr64AsyncClientCall',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcAsyncCancelCall',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'DeleteAtom',
                                                                                            'CreateWaitableTimerW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetComputerNameW',
                                                                                            'UnregisterWait',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'DeleteFileTransactedW',
                                                                                            'DebugBreak',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateTransaction',
                                                                                            'CommitTransaction',
                                                                                            'RollbackTransaction',
                                                                                            'EvtClose'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 253,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 51200,
                                                                                       '.pdata\x00\x00': 20480,
                                                                                       '.rdata\x00\x00': 90112,
                                                                                       '.reloc\x00\x00': 29184,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 296960,
                                                                                       'hultkjl\x00': 0},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/785bf15195704996029556f7926a27e0a77a579d723e2a8b2e85648d230bd676'},
 '78ad88d90b7be0504aa97e796e712084cfa8e29316e73c801fbf99d3c4cb80ba': {'AddressOfEntryPoint': 1073954269,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 151552,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHSetLocalizedName',
                                                                                      'SHLWAPI.dll': 'StrCpyW',
                                                                                      'TAPI32.dll': 'lineGetTranslateCapsW',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['lineGetCountryW',
                                                                                            'lineGetTranslateCapsW',
                                                                                            'StrCatW',
                                                                                            'StrCmpW',
                                                                                            'StrStrIW',
                                                                                            'StrRChrW',
                                                                                            'StrTrimW',
                                                                                            'StrPBrkW',
                                                                                            'StrCmpNIW',
                                                                                            'PathMakeSystemFolderW',
                                                                                            'StrCmpIW',
                                                                                            'StrChrW',
                                                                                            'StrCpyNW',
                                                                                            'StrCpyW',
                                                                                            'GetStringTypeW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'GetGeoInfoW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetModuleFileNameW',
                                                                                            'TzSpecificLocalTimeToSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'LocalAlloc',
                                                                                            'GetUserGeoID',
                                                                                            'lstrlenA',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'FindNextFileW',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'EnumUILanguagesW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetVersionExW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetLocalTime',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetLocaleInfoA',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'CreateFileA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'HeapSize',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetHandleCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemMetrics',
                                                                                            'RegQueryValueExW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ShellExecuteW',
                                                                                            'SHChangeNotify',
                                                                                            'SHFileOperationW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHSetLocalizedName',
                                                                                            'StringFromCLSID',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateGuid',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3852,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/78ad88d90b7be0504aa97e796e712084cfa8e29316e73c801fbf99d3c4cb80ba'},
 '78efc5995178177035e59357d306eeea3c6bbc36dedc5a5be980aa57e74dabf0': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9628,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 15453184,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/78efc5995178177035e59357d306eeea3c6bbc36dedc5a5be980aa57e74dabf0'},
 '799e53bf46b012ed9bb28e2007bd830333bb70b62134210e5967e5a2416665b6': {'AddressOfEntryPoint': 86700,
                                                                      'DebugRVA': 686356,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 785988,
                                                                      'ExportSize': 89,
                                                                      'IATRVA': 688128,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 517168,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12800,
                                                                                       '.pdata\x00\x00': 47616,
                                                                                       '.rdata\x00\x00': 202752,
                                                                                       '.reloc\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 517632,
                                                                                       '.text\x00\x00\x00': 682496},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/799e53bf46b012ed9bb28e2007bd830333bb70b62134210e5967e5a2416665b6'},
 '79aa829a6dac8d25f453ccebb063f7f080c3abc922031f4c7a5dfb4dec8036d8': {'AddressOfEntryPoint': 46976,
                                                                      'DebugRVA': 5184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'SHLWAPI.dll': 'PathFileExistsA',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'LoadLibraryA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'FormatMessageA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RtlUnwindEx',
                                                                                            'IsDebuggerPresent',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetLocalTime',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'HeapReAlloc',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'LoadStringA',
                                                                                            'MessageBoxA',
                                                                                            'SHDeleteKeyA',
                                                                                            'PathFileExistsA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 100,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 139776},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/79aa829a6dac8d25f453ccebb063f7f080c3abc922031f4c7a5dfb4dec8036d8'},
 '79dba6c641b4be28a7888f625e1c1faa849893c682256a8406026d22e9b2c8d3': {'AddressOfEntryPoint': 30076,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36664,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'hal.dll': 'HalMakeBeep',
                                                                                      'ntoskrnl.exe': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['ExAllocatePoolWithTag',
                                                                                            'ExFreePoolWithTag',
                                                                                            'RtlInitUnicodeString',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'IoDriverObjectType',
                                                                                            'IofCompleteRequest',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfDereferenceObject',
                                                                                            'ObReferenceObjectByName',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'IoGetDeviceProperty',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeBugCheckEx',
                                                                                            'DbgPrint',
                                                                                            'IoAllocateMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmUnlockPages',
                                                                                            'IoFreeMdl',
                                                                                            'ExAllocatePool',
                                                                                            'ExFreePool',
                                                                                            'NtQuerySystemInformation',
                                                                                            'HalMakeBeep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 24,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 1536,
                                                                                       '.vmp0\x00\x00\x00': 4096,
                                                                                       '.vmp1\x00\x00\x00': 16896,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/79dba6c641b4be28a7888f625e1c1faa849893c682256a8406026d22e9b2c8d3'},
 '79ff017c232af6dff43cc336cb17293cd9ab7281e85391d8282daaa670e2d368': {'AddressOfEntryPoint': 4664,
                                                                      'DebugRVA': 20992,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'HalGetProcessorIdByNtNumber',
                                                                                      'WDFLDR.SYS': 'WdfVersionBindClass',
                                                                                      'ntoskrnl.exe': 'RtlCopyUnicodeString'},
                                                                      'ImportedFunctions': ['ZwQuerySystemInformation',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoQueueWorkItem',
                                                                                            'KeSetSystemGroupAffinityThread',
                                                                                            'IoUninitializeWorkItem',
                                                                                            'ZwPowerInformation',
                                                                                            'KeInitializeDpc',
                                                                                            'KeSetTimerEx',
                                                                                            'EmClientQueryRuleState',
                                                                                            'IoSetDevicePropertyData',
                                                                                            'KeProcessorGroupAffinity',
                                                                                            'IoInitializeWorkItem',
                                                                                            'KeInitializeTimerEx',
                                                                                            'KeCancelTimer',
                                                                                            'IoSizeofWorkItem',
                                                                                            'KeRevertToUserGroupAffinityThread',
                                                                                            'EtwUnregister',
                                                                                            'KeGetProcessorNumberFromIndex',
                                                                                            'IoGetDevicePropertyData',
                                                                                            'EtwRegister',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwWrite',
                                                                                            'MmAllocateContiguousNodeMemory',
                                                                                            'RtlQueryRegistryValuesEx',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeCountSetBitsAffinityEx',
                                                                                            'KeAddProcessorAffinityEx',
                                                                                            'KeAddGroupAffinityEx',
                                                                                            'NtQuerySystemInformationEx',
                                                                                            'KeRemoveProcessorAffinityEx',
                                                                                            'KeInitializeEnumerationContext',
                                                                                            'KeEnumerateNextProcessor',
                                                                                            'KeOrAffinityEx',
                                                                                            'KeQueryActiveProcessorCountEx',
                                                                                            'KeCopyAffinityEx',
                                                                                            'KeCheckProcessorAffinityEx',
                                                                                            'KeCheckProcessorGroupAffinity',
                                                                                            'PoFxActivateComponent',
                                                                                            'KeAddProcessorGroupAffinity',
                                                                                            'ZwClose',
                                                                                            'KeBugCheckEx',
                                                                                            'PoFxStartDevicePowerManagement',
                                                                                            'PoFxRegisterDevice',
                                                                                            'PoFxProcessorNotification',
                                                                                            'KeInitializeEnumerationContextFromGroup',
                                                                                            'HvlGetLpIndexFromApicId',
                                                                                            'HvlQueryActiveProcessors',
                                                                                            'HvlQueryProcessorTopology',
                                                                                            'RtlCompareMemory',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeQueryActiveProcessorAffinity',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'KeInitializeAffinityEx',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'HalGetProcessorIdByNtNumber',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionUnbindClass',
                                                                                            'WdfVersionBindClass'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 60,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 13488,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 13824,
                                                                                       'INIT\x00\x00\x00\x00': 5120,
                                                                                       'PAGE\x00\x00\x00\x00': 45056},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/79ff017c232af6dff43cc336cb17293cd9ab7281e85391d8282daaa670e2d368'},
 '7a31bfc29c25edad1c5ed7546ce03b09e8c7cd55080d639678349d81499fc1e1': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 482816,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7a31bfc29c25edad1c5ed7546ce03b09e8c7cd55080d639678349d81499fc1e1'},
 '7a420da87dbca02d188e2ffdc62b016dd1adb737be705f86ec35fce55f1b42f5': {'AddressOfEntryPoint': 32776,
                                                                      'DebugRVA': 20656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'PCIIDEX.SYS': 'AtaPortWriteRegisterUlong'},
                                                                      'ImportedFunctions': ['AtaPortGetPhysicalAddress',
                                                                                            'AtaPortReadRegisterUlong',
                                                                                            'AtaPortInitializeEx',
                                                                                            'AtaPortDeviceStateChange',
                                                                                            'AtaPortMoveMemory',
                                                                                            'AtaPortGetBusData',
                                                                                            'AtaPortRegistryRead',
                                                                                            'AtaPortRegistryAllocateBuffer',
                                                                                            'AtaPortRequestCallback',
                                                                                            'AtaPortReadRegisterUchar',
                                                                                            'AtaPortBuildRequestSenseIrb',
                                                                                            'AtaPortStallExecution',
                                                                                            'AtaPortReleaseRequestSenseIrb',
                                                                                            'AtaPortCompleteRequest',
                                                                                            'AtaPortNotification',
                                                                                            'AtaPortGetDeviceBase',
                                                                                            'AtaPortGetScatterGatherList',
                                                                                            'AtaPortGetUnCachedExtension',
                                                                                            'AtaPortWriteRegisterUlong',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 20,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 15360,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/7a420da87dbca02d188e2ffdc62b016dd1adb737be705f86ec35fce55f1b42f5'},
 '7b21ee388157d64dbcc44d263ba6e62d633bdd64458a4452d1b5743636684231': {'AddressOfEntryPoint': 21520,
                                                                      'DebugRVA': 116064,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'LoadTypeLibEx',
                                                                                      'RPCRT4.dll': 'UuidCreateSequential',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'SetWindowPos',
                                                                                      'WS2_32.dll': 'WSARecv',
                                                                                      'ntdll.dll': '__chkstk',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ZwCreateSection',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'LdrFindEntryForAddress',
                                                                                            'RtlImageNtHeader',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'sprintf',
                                                                                            'ZwMapViewOfSection',
                                                                                            'RtlInitUnicodeString',
                                                                                            'wcscpy',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'memcmp',
                                                                                            'ZwFlushKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'ZwOpenTimer',
                                                                                            'ZwSetTimer',
                                                                                            'ZwDeleteFile',
                                                                                            'memcpy',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'ZwWriteFile',
                                                                                            'strtoul',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'memset',
                                                                                            'LdrUnloadDll',
                                                                                            'LdrAddRefDll',
                                                                                            'ZwRaiseHardError',
                                                                                            'wcsstr',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'LdrLoadDll',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwClose',
                                                                                            'ZwQueryKey',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'ZwOpenKey',
                                                                                            'RtlComputeCrc32',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenProcess',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'ZwSetInformationToken',
                                                                                            'ZwDuplicateToken',
                                                                                            'ZwAdjustPrivilegesToken',
                                                                                            'ZwOpenThreadTokenEx',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwReadVirtualMemory',
                                                                                            'wcschr',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlGetCurrentPeb',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'strlen',
                                                                                            'ZwSetInformationFile',
                                                                                            '__chkstk',
                                                                                            'ExitThread',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'WideCharToMultiByte',
                                                                                            'CopyFileW',
                                                                                            'CreateProcessW',
                                                                                            'SetThreadLocale',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersion',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'MD5Update',
                                                                                            'MD5Final',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'MD5Init',
                                                                                            'DialogBoxParamW',
                                                                                            'PostMessageW',
                                                                                            'FindWindowW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SendMessageW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetClientRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExW',
                                                                                            'AdjustWindowRect',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'OpenDesktopW',
                                                                                            'SetThreadDesktop',
                                                                                            'DestroyIcon',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetMessageW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'SetWindowPos',
                                                                                            'UuidCreateSequential',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'LoadTypeLibEx',
                                                                                            'WSARecvFrom',
                                                                                            'WSASendTo',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSASocketW',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'WSAIoctl',
                                                                                            'WSASend',
                                                                                            'WSARecv'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 10104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 109568},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7b21ee388157d64dbcc44d263ba6e62d633bdd64458a4452d1b5743636684231'},
 '7b4870390dbbfd1467cb4554ecfc88704b82551f31ba065093199d8d1f16ebd5': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 189212,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 189440,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7b4870390dbbfd1467cb4554ecfc88704b82551f31ba065093199d8d1f16ebd5'},
 '7b605f40a203a30ba6bced92b1b731601470f92a64c7cf92f078376661ac43a4': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1598272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1598464,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7b605f40a203a30ba6bced92b1b731601470f92a64c7cf92f078376661ac43a4'},
 '7bcf1cf72fc56121779116e4e11f9a7f4b96a5dd04b6427e0bb70374bf1a898f': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 430928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 431104,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7bcf1cf72fc56121779116e4e11f9a7f4b96a5dd04b6427e0bb70374bf1a898f'},
 '7c23c35d46cec1b80daa31cae3e40784970dd812c32a4c0e043c75a06a0477f5': {'AddressOfEntryPoint': 9392,
                                                                      'DebugRVA': 12960,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'MSVCR80.dll': '__CxxFrameHandler3',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameW',
                                                                                      'USER32.dll': 'LoadStringW'},
                                                                      'ImportedFunctions': ['OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'ReadProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetLastError',
                                                                                            'WriteProcessMemory',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'RaiseException',
                                                                                            'TerminateProcess',
                                                                                            'UnregisterClassA',
                                                                                            'InvalidateRect',
                                                                                            'LoadStringW',
                                                                                            'PathFindFileNameW',
                                                                                            'EnumProcessModules',
                                                                                            'EnumProcesses',
                                                                                            'GetProcessImageFileNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'free',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            'system',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            'wscanf_s',
                                                                                            'wprintf',
                                                                                            'memcpy_s',
                                                                                            '_wcsicmp',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7c23c35d46cec1b80daa31cae3e40784970dd812c32a4c0e043c75a06a0477f5'},
 '7c48c1c26bdab0759787e130d6e0caefc70c7ea14be9856f385af422cd9d9f3f': {'AddressOfEntryPoint': 262252,
                                                                      'DebugRVA': 175160,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 176128,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NDIS.SYS': 'NdisSetThreadObjectCompartmentId',
                                                                                      'NETIO.SYS': 'NsiDeregisterChangeNotification',
                                                                                      'TDI.SYS': 'TdiGet9FTriageBlock',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoAllocateIrp',
                                                                                            'IoFreeIrp',
                                                                                            'strchr',
                                                                                            'RtlInitString',
                                                                                            'RtlOemStringToUnicodeString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlAppendStringToString',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeCancelTimer',
                                                                                            'ZwClose',
                                                                                            'ZwCancelTimer',
                                                                                            'ZwCreateTimer',
                                                                                            'ZwSetTimer',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'ObfReferenceObject',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'IofCallDriver',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeSetTimer',
                                                                                            'KeInitializeTimer',
                                                                                            'IoWMIWriteEvent',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'ExDeleteResourceLite',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'KeClearEvent',
                                                                                            'KeDelayExecutionThread',
                                                                                            'IoDeleteDevice',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'memchr',
                                                                                            'ZwQueryInformationFile',
                                                                                            'RtlIpv4StringToAddressA',
                                                                                            'ZwCreateFile',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoFileObjectType',
                                                                                            'IoSetShareAccess',
                                                                                            'SeAssignSecurity',
                                                                                            'IoRemoveShareAccess',
                                                                                            'SeAccessCheck',
                                                                                            'IoCheckShareAccess',
                                                                                            'MmUserProbeAddress',
                                                                                            'ZwCreateEvent',
                                                                                            'ZwDeviceIoControlFile',
                                                                                            'NtWaitForSingleObject',
                                                                                            'ZwCreateKey',
                                                                                            'ExInterlockedPushEntryList',
                                                                                            'ExQueueWorkItem',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInsertQueueDpc',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoCancelIrp',
                                                                                            'RtlCompareUnicodeString',
                                                                                            '_vsnprintf',
                                                                                            'RtlGUIDFromString',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'RtlIpv4AddressToStringW',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoBuildPartialMdl',
                                                                                            'MmUnmapLockedPages',
                                                                                            'MmLockPagableDataSection',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlFreeOemString',
                                                                                            'RtlUpcaseUnicodeStringToOemString',
                                                                                            'IofCompleteRequest',
                                                                                            'SeDeassignSecurity',
                                                                                            'ObfDereferenceObject',
                                                                                            'KeResetEvent',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeSetEvent',
                                                                                            '_stricmp',
                                                                                            'KeDetachProcess',
                                                                                            'KeAttachProcess',
                                                                                            'PsGetCurrentProcess',
                                                                                            'IoFreeMdl',
                                                                                            'ExInterlockedInsertHeadList',
                                                                                            'IoAllocateMdl',
                                                                                            'KeInitializeSemaphore',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'strrchr',
                                                                                            'RtlGetVersion',
                                                                                            'ExInitializeResourceLite',
                                                                                            'KeInitializeEvent',
                                                                                            'ExSystemTimeToLocalTime',
                                                                                            'RtlCompareMemory',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            'ExReleaseResourceLite',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IoAcquireCancelSpinLock',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'strncmp',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ZwReadFile',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ZwSetSecurityObject',
                                                                                            'IoCreateDevice',
                                                                                            'IoDeviceObjectType',
                                                                                            'ObOpenObjectByPointer',
                                                                                            '_snwprintf',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'SeCaptureSecurityDescriptor',
                                                                                            'RtlGetSaclSecurityDescriptor',
                                                                                            'RtlGetGroupSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlAbsoluteToSelfRelativeSD',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'SeExports',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'ZwSetValueKey',
                                                                                            '__C_specific_handler',
                                                                                            'TdiPnPPowerRequest',
                                                                                            'TdiPnPPowerComplete',
                                                                                            'TdiEnumerateAddresses',
                                                                                            'TdiDeregisterDeviceObject',
                                                                                            'TdiDeregisterNetAddress',
                                                                                            'TdiRegisterNetAddress',
                                                                                            'TdiRegisterDeviceObject',
                                                                                            'TdiProviderReady',
                                                                                            'TdiDeregisterPnPHandlers',
                                                                                            'TdiMapUserRequest',
                                                                                            'TdiDeregisterProvider',
                                                                                            'TdiRegisterPnPHandlers',
                                                                                            'TdiRegisterProvider',
                                                                                            'TdiInitialize',
                                                                                            'TdiDefaultRcvExpeditedHandler',
                                                                                            'TdiDefaultSendPossibleHandler',
                                                                                            'TdiDefaultReceiveHandler',
                                                                                            'TdiDefaultErrorHandler',
                                                                                            'TdiDefaultConnectHandler',
                                                                                            'TdiCopyMdlToBuffer',
                                                                                            'TdiCopyBufferToMdl',
                                                                                            'TdiDefaultRcvDatagramHandler',
                                                                                            'TdiBuildNetbiosAddress',
                                                                                            'TdiGet9FTriageBlock',
                                                                                            'NsiRegisterChangeNotification',
                                                                                            'NsiSetAllParameters',
                                                                                            'NsiGetParameter',
                                                                                            'NsiFreeTable',
                                                                                            'NsiAllocateAndGetTable',
                                                                                            'NsiGetAllParameters',
                                                                                            'NsiDeregisterChangeNotification',
                                                                                            'NdisGetThreadObjectCompartmentId',
                                                                                            'NdisSetThreadObjectCompartmentId'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 170,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1488,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 11776,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 171520,
                                                                                       'INIT\x00\x00\x00\x00': 9216,
                                                                                       'PAGE\x00\x00\x00\x00': 48128,
                                                                                       'PAGENBT\x00': 2560},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/7c48c1c26bdab0759787e130d6e0caefc70c7ea14be9856f385af422cd9d9f3f'},
 '7c70e55ab01df14bec956cc869223f3ce231fb3828c2ac08996c4a9953ef02f4': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 449024,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7c70e55ab01df14bec956cc869223f3ce231fb3828c2ac08996c4a9953ef02f4'},
 '7c77aad390fde87d0b8a8a4c3a2d5e2c15d890189003312f75a8a444ad47fa40': {'AddressOfEntryPoint': 339976,
                                                                      'DebugRVA': 315552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortDebugPrint'},
                                                                      'ImportedFunctions': ['StorPortGetLogicalUnit',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortNotification',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortReady',
                                                                                            'StorPortLogError',
                                                                                            'StorPortPauseDevice',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortSetDeviceQueueDepth',
                                                                                            'StorPortBusy',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortDebugPrint',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 309760,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/7c77aad390fde87d0b8a8a4c3a2d5e2c15d890189003312f75a8a444ad47fa40'},
 '7c86e0403bfd8bb5b397786a3443f5f483beca2167b339cad01baa6ec8e4e91b': {'AddressOfEntryPoint': 48392,
                                                                      'DebugRVA': 87360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 96768,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'DosDateTimeToFileTime',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalAlloc',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'wvsprintfA',
                                                                                            'wvsprintfW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClassNameW',
                                                                                            'DialogBoxParamW',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'LoadBitmapW',
                                                                                            'LoadIconW',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'CharUpperA',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharToOemBuffW',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'CharUpperW',
                                                                                            'FindWindowExW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteExW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 25520,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 89088,
                                                                                       '.text\x00\x00\x00': 79872},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7c86e0403bfd8bb5b397786a3443f5f483beca2167b339cad01baa6ec8e4e91b'},
 '7c9b51c03611d6ee1fdb2b9b27bc57acd6a7690c0f4bb354d918522f2a2a10a6': {'AddressOfEntryPoint': 74760,
                                                                      'DebugRVA': 41680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CreateProcessAsUserW',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'USER32.dll': 'wsprintfW'},
                                                                      'ImportedFunctions': ['LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'lstrcpyW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'lstrcatW',
                                                                                            'lstrlenW',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'wsprintfW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateProcessAsUserW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 13312,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 33280},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7c9b51c03611d6ee1fdb2b9b27bc57acd6a7690c0f4bb354d918522f2a2a10a6'},
 '7cf8392bef146ce128f871541f92dbd23686c417ce5c061e4b7e5678f152a382': {'AddressOfEntryPoint': 114952,
                                                                      'DebugRVA': 109104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 8192,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 108416,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WMILIB.SYS': 'WmiSystemControl',
                                                                                      'ntoskrnl.exe': 'KeReleaseSpinLock'},
                                                                      'ImportedFunctions': ['ExFreePoolWithTag',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'IofCompleteRequest',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'sprintf',
                                                                                            'IoFreeIrp',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'IofCallDriver',
                                                                                            'PsTerminateSystemThread',
                                                                                            'IoSetDeviceInterfaceState',
                                                                                            'ZwClose',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeSetPriorityThread',
                                                                                            'KeWaitForSingleObject',
                                                                                            'ExGetPreviousMode',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'ObfDereferenceObject',
                                                                                            'KeWaitForMultipleObjects',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'IoAllocateIrp',
                                                                                            'RtlCompareMemory',
                                                                                            'IoReuseIrp',
                                                                                            'IoOpenDeviceRegistryKey',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'PoSetPowerState',
                                                                                            'IoCreateUnprotectedSymbolicLink',
                                                                                            'IoCancelIrp',
                                                                                            'isprint',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInitializeTimer',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoAcquireCancelSpinLock',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'strstr',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'KeCancelTimer',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'KeSetTimer',
                                                                                            'KeReadStateTimer',
                                                                                            'KeQueryPriorityThread',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'PoCallDriver',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'KeReadStateEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoAllocateWorkItem',
                                                                                            'KeBugCheckEx',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'DbgPrint',
                                                                                            'RtlDeleteRegistryValue',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ZwOpenKey',
                                                                                            'KeReleaseSpinLock',
                                                                                            'USBD_CreateConfigurationRequestEx',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WmiCompleteRequest',
                                                                                            'WmiSystemControl'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1280,
                                                                                       '.pdata\x00\x00': 2176,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 256,
                                                                                       '.rsrc\x00\x00\x00': 1664,
                                                                                       '.text\x00\x00\x00': 107648,
                                                                                       'INIT\x00\x00\x00\x00': 2816},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/7cf8392bef146ce128f871541f92dbd23686c417ce5c061e4b7e5678f152a382'},
 '7d000acb7f5a4d390cc1481a44635d5692585a11ed1b6ba752b45ed2e256689b': {'AddressOfEntryPoint': 68192,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'SHLWAPI.dll': 'PathIsDirectoryA',
                                                                                      'USER32.dll': 'GetWindowThreadProcessId',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiGetINFClassA',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiEnumDriverInfoA',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsA',
                                                                                            'SetupDiRegisterDeviceInfo',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiCreateDeviceInfoA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiGetDriverInfoDetailA',
                                                                                            'SetupDiRemoveDevice',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'PathAppendA',
                                                                                            'PathIsDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetLastError',
                                                                                            'FindFirstFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GetComputerNameA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetCurrentProcess',
                                                                                            'ReleaseMutex',
                                                                                            'CreateDirectoryA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateMutexA',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetTimeFormatA',
                                                                                            'GetLocalTime',
                                                                                            'OutputDebugStringA',
                                                                                            'MoveFileExA',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'FreeLibrary',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'Module32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32Next',
                                                                                            'Process32First',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'CopyFileA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'RemoveDirectoryA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'RtlVirtualUnwind',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'LCMapStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringA',
                                                                                            'RtlCaptureContext',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'SetStdHandle',
                                                                                            'FlsGetValue',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'WinExec',
                                                                                            'GetLastError',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetConsoleCP',
                                                                                            'GlobalFree',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'ReadFile',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'SetEndOfFile',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'ExitProcess',
                                                                                            'HeapFree',
                                                                                            'EndDeferWindowPos',
                                                                                            'LoadImageA',
                                                                                            'UpdateWindow',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'GetWindowRect',
                                                                                            'ShowWindow',
                                                                                            'DeferWindowPos',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'SendMessageA',
                                                                                            'CopyRect',
                                                                                            'GetParent',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'IsDlgButtonChecked',
                                                                                            'LoadBitmapA',
                                                                                            'EnumWindows',
                                                                                            'DialogBoxParamA',
                                                                                            'GetWindowInfo',
                                                                                            'ExitWindowsEx',
                                                                                            'CreateWindowExA',
                                                                                            'OffsetRect',
                                                                                            'GetDesktopWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'RegEnumValueA',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceA',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'CloseServiceHandle',
                                                                                            'ImpersonateSelf',
                                                                                            'OpenThreadToken',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'AccessCheck',
                                                                                            'RevertToSelf',
                                                                                            'FreeSid',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegSetValueExA',
                                                                                            'GetUserNameA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'SHGetFolderPathA',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 220,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 292080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 52224,
                                                                                       '.rsrc\x00\x00\x00': 292352,
                                                                                       '.text\x00\x00\x00': 133120},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7d000acb7f5a4d390cc1481a44635d5692585a11ed1b6ba752b45ed2e256689b'},
 '7d1bfaff177d8793dbc6f76eca5487b338f69c9d3c84e8e1601cc77e59a3d07b': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 112292,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 112640,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7d1bfaff177d8793dbc6f76eca5487b338f69c9d3c84e8e1601cc77e59a3d07b'},
 '7d2022518de508a988bbf7495cdb27d4af9666c4f93d5bdf9aff979622255f68': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 730524,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 728576,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7d2022518de508a988bbf7495cdb27d4af9666c4f93d5bdf9aff979622255f68'},
 '7d7f1860850f539a5fdf2374f8c1b0cdb77500892f5d0f7e4a39c629b7d4c16d': {'AddressOfEntryPoint': 1611209453,
                                                                      'DebugRVA': 529096,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 69344,
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/7d7f1860850f539a5fdf2374f8c1b0cdb77500892f5d0f7e4a39c629b7d4c16d'},
 '7e4dfa13677374119405398ca669bf86e6c34449e7bd5396579c9460cef800e4': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['ZwQueryVolumeInformationFile',
                                                                                            'ZwQueryKey',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwWriteFile',
                                                                                            'ZwSetValueKey',
                                                                                            'wcstoul',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwResumeThread',
                                                                                            'ZwSetContextThread',
                                                                                            'sprintf',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwCreateKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'HeapAlloc',
                                                                                            'GetVersion',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 71,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7e4dfa13677374119405398ca669bf86e6c34449e7bd5396579c9460cef800e4'},
 '7e6a30dd68215546a890b21ef57bad0fb15a6b7ac64e3400c265c0e0f6ffa70b': {'AddressOfEntryPoint': 4100,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 483328,
                                                                      'ExportSize': 2028,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4295442432,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 4,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 467968},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7e6a30dd68215546a890b21ef57bad0fb15a6b7ac64e3400c265c0e0f6ffa70b'},
 '7e701144072b13f33270aeed3ea9eeeb2823840bb36286146c73d86df9221d1e': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7e701144072b13f33270aeed3ea9eeeb2823840bb36286146c73d86df9221d1e'},
 '7e7192e906c44301c0a0801e0479de5451b27c4de42a41cde2b4df15ed3d71c1': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 426248,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 415232,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7e7192e906c44301c0a0801e0479de5451b27c4de42a41cde2b4df15ed3d71c1'},
 '7e78819f722261855ee6893500b68d2aa84e975b00cdce68c34bca821f8cad47': {'AddressOfEntryPoint': 108396,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 593920,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AddAce',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'PolyDraw',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'CreateDispTypeInfo',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindowVisible',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'WSACleanup',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'ioctlsocket',
                                                                                            'WSAGetLastError',
                                                                                            'accept',
                                                                                            'select',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'lstrlenW',
                                                                                            'lstrcpyW',
                                                                                            'lstrcmpiW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'ClientToScreen',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetMessageW',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'GetCursorPos',
                                                                                            'BlockInput',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'SystemParametersInfoW',
                                                                                            'PeekMessageW',
                                                                                            'IsWindowVisible',
                                                                                            'DeleteObject',
                                                                                            'BeginPath',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'GetDeviceCaps',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'PolyDraw',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'RegCloseKey',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AddAce',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'ProgIDFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayDestroyData',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'CreateStdDispatch',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayAccessData',
                                                                                            'CreateDispTypeInfo'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 514,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 303328,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28160,
                                                                                       '.rdata\x00\x00': 87552,
                                                                                       '.rsrc\x00\x00\x00': 303616,
                                                                                       '.text\x00\x00\x00': 589824,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/7e78819f722261855ee6893500b68d2aa84e975b00cdce68c34bca821f8cad47'},
 '7ed0eacdb5e1cf0797178e509d167d9c1215a1c1ebd6725cdb70b51d64aa0d43': {'AddressOfEntryPoint': 123248,
                                                                      'DebugRVA': 57952,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'IoAllocateDriverObjectExtension'},
                                                                      'ImportedFunctions': ['KeSetEvent',
                                                                                            'swprintf',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'PsCreateSystemThread',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ZwClose',
                                                                                            'IofCompleteRequest',
                                                                                            'RtlRandom',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'DbgPrintEx',
                                                                                            'IofCallDriver',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmAllocatePagesForMdlEx',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ExAcquireFastMutex',
                                                                                            'NtQuerySystemInformation',
                                                                                            'ExIsProcessorFeaturePresent',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlGetVersion',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmFreePagesFromMdl',
                                                                                            'MmGetPhysicalMemoryRanges',
                                                                                            'IoAllocateMdl',
                                                                                            'KeClearEvent',
                                                                                            'KeReleaseInStackQueuedSpinLock',
                                                                                            '_wcsnicmp',
                                                                                            'ZwReadFile',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'KeAcquireInStackQueuedSpinLock',
                                                                                            'ZwSetInformationFile',
                                                                                            'KeDelayExecutionThread',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwCreateFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwDeleteFile',
                                                                                            'ObfDereferenceObject',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwWriteFile',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'IoSetDeviceInterfaceState',
                                                                                            'IoDeleteDevice',
                                                                                            'IoDetachDevice',
                                                                                            'PoSetPowerState',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'ObfReferenceObject',
                                                                                            'IoCreateDevice',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'KeResetEvent',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'towupper',
                                                                                            'KeSetPriorityThread',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'ZwOpenKey',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'ZwCreateKey',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ZwDeleteValueKey',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'IoOpenDeviceRegistryKey',
                                                                                            'KeBugCheckEx',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'IoAllocateDriverObjectExtension'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 9576,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 9728,
                                                                                       '.text\x00\x00\x00': 50176,
                                                                                       'INIT\x00\x00\x00\x00': 3072,
                                                                                       'PAGE\x00\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/7ed0eacdb5e1cf0797178e509d167d9c1215a1c1ebd6725cdb70b51d64aa0d43'},
 '7f403c32de153a769d54a7144dc94c03e6b32aa8549d34e727649cbf0646db08': {'AddressOfEntryPoint': 22268,
                                                                      'DebugRVA': 124304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'LoadTypeLibEx',
                                                                                      'RPCRT4.dll': 'UuidCreateSequential',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'SetWindowTextW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'ntdll.dll': '__chkstk',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ZwCreateSection',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'LdrFindEntryForAddress',
                                                                                            'RtlImageNtHeader',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwFlushKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'memcmp',
                                                                                            'ZwOpenTimer',
                                                                                            'ZwSetTimer',
                                                                                            'ZwDeleteFile',
                                                                                            'memcpy',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'memset',
                                                                                            'ZwWriteFile',
                                                                                            'strtoul',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetInformationFile',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'RtlGetCurrentPeb',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'LdrUnloadDll',
                                                                                            'LdrAddRefDll',
                                                                                            'sprintf',
                                                                                            'strlen',
                                                                                            'ZwRaiseHardError',
                                                                                            'wcsstr',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'LdrLoadDll',
                                                                                            'RtlInitUnicodeString',
                                                                                            'wcscpy',
                                                                                            'ZwClose',
                                                                                            'ZwQueryKey',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenKey',
                                                                                            'RtlComputeCrc32',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenProcess',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'ZwSetInformationToken',
                                                                                            'ZwDuplicateToken',
                                                                                            'ZwAdjustPrivilegesToken',
                                                                                            'ZwOpenThreadTokenEx',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwReadVirtualMemory',
                                                                                            'wcschr',
                                                                                            '__chkstk',
                                                                                            'SetThreadLocale',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'WideCharToMultiByte',
                                                                                            'CopyFileW',
                                                                                            'CreateProcessW',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'Sleep',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersion',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'MD5Update',
                                                                                            'MD5Final',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'MD5Init',
                                                                                            'GetWindowLongW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowPos',
                                                                                            'LoadIconW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DialogBoxParamW',
                                                                                            'PostMessageW',
                                                                                            'EndDialog',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'FindWindowW',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxW',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExW',
                                                                                            'AdjustWindowRect',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'OpenDesktopW',
                                                                                            'SetThreadDesktop',
                                                                                            'DestroyIcon',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetMessageW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SetWindowTextW',
                                                                                            'UuidCreateSequential',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'LoadTypeLibEx',
                                                                                            'WSAStartup',
                                                                                            'WSASocketW',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'WSAIoctl',
                                                                                            'WSARecv',
                                                                                            'WSASend',
                                                                                            'setsockopt',
                                                                                            'WSASendTo',
                                                                                            'WSARecvFrom',
                                                                                            'WSACleanup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 162,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 10104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 14336,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 115200},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7f403c32de153a769d54a7144dc94c03e6b32aa8549d34e727649cbf0646db08'},
 '7f4a849f041fc0c4b8fb8dc789ac3dd72d8de922515360326c890b96a099b57d': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 262900,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 263168,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7f4a849f041fc0c4b8fb8dc789ac3dd72d8de922515360326c890b96a099b57d'},
 '7f549769ae36cacca1f331dd0b6123dedf4ba10badfcb798c46d810b2ebd5471': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 588208,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 588288,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/7f549769ae36cacca1f331dd0b6123dedf4ba10badfcb798c46d810b2ebd5471'},
 '7fdcdc9bbf1dbd3343c9f0e2706b84c580189e0f42005b0cc53ebee3cd885c87': {'AddressOfEntryPoint': 34304,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'KERNEL32.dll': 'WriteConsoleW',
                                                                                      'USER32.dll': 'wsprintfW'},
                                                                      'ImportedFunctions': ['lstrlenW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCPInfo',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'GetLastError',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'wsprintfW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 44840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 24576,
                                                                                       '.rsrc\x00\x00\x00': 45056,
                                                                                       '.text\x00\x00\x00': 82432},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/7fdcdc9bbf1dbd3343c9f0e2706b84c580189e0f42005b0cc53ebee3cd885c87'},
 '805374ff33c185bc2b5191a8c1b4c19fff4f774856dd1b9fff0189ff0bc9a989': {'AddressOfEntryPoint': 77296,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'gdi32.dll': 'SetTextColor',
                                                                                      'kernel32.dll': 'WriteFile',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'shell32.dll': 'FindExecutableA',
                                                                                      'user32.dll': 'TranslateMessage'},
                                                                      'ImportedFunctions': ['CreateSolidBrush',
                                                                                            'DeleteObject',
                                                                                            'IntersectClipRect',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'CloseHandle',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateEventA',
                                                                                            'CreateFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'DuplicateHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'EnumCalendarInfoA',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'EnumResourceNamesA',
                                                                                            'EnumResourceTypesA',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindResourceA',
                                                                                            'FindResourceExA',
                                                                                            'FormatMessageA',
                                                                                            'FreeLibrary',
                                                                                            'FreeResource',
                                                                                            'GetCommandLineA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetDateFormatA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetFileTime',
                                                                                            'GetFileType',
                                                                                            'GetLastError',
                                                                                            'GetLocalTime',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'GetStdHandle',
                                                                                            'GetThreadLocale',
                                                                                            'GetThreadPriority',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LoadResource',
                                                                                            'LocalAlloc',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'LocalFree',
                                                                                            'LockResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'ReadProcessMemory',
                                                                                            'RemoveDirectoryA',
                                                                                            'ResetEvent',
                                                                                            'ResumeThread',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetErrorMode',
                                                                                            'SetEvent',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'SetLastError',
                                                                                            'SetThreadPriority',
                                                                                            'SizeofResource',
                                                                                            'Sleep',
                                                                                            'SuspendThread',
                                                                                            'SystemTimeToFileTime',
                                                                                            'TerminateThread',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TryEnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'FindExecutableA',
                                                                                            'CharLowerA',
                                                                                            'CharLowerBuffA',
                                                                                            'CharLowerBuffW',
                                                                                            'CharNextA',
                                                                                            'CharPrevA',
                                                                                            'CharUpperA',
                                                                                            'CharUpperBuffA',
                                                                                            'CharUpperBuffW',
                                                                                            'CreateDialogParamA',
                                                                                            'DeleteMenu',
                                                                                            'DestroyWindow',
                                                                                            'DispatchMessageA',
                                                                                            'DrawTextA',
                                                                                            'FillRect',
                                                                                            'GetActiveWindow',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'GetDesktopWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetParent',
                                                                                            'GetSysColor',
                                                                                            'GetSystemMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'IsDialogMessageA',
                                                                                            'IsIconic',
                                                                                            'IsWindow',
                                                                                            'MessageBeep',
                                                                                            'MessageBoxA',
                                                                                            'MoveWindow',
                                                                                            'OemToCharA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'SendMessageA',
                                                                                            'ShowWindow',
                                                                                            'TranslateMessage'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 7536,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 34456,
                                                                                       '.idata\x00\x00': 5556,
                                                                                       '.rsrc\x00\x00\x00': 7536,
                                                                                       '.text\x00\x00\x00': 231424,
                                                                                       '/4\x00\x00\x00\x00\x00\x00': 16},
                                                                      'StackReserveSize': 16777216,
                                                                      'filename': './data/malware/805374ff33c185bc2b5191a8c1b4c19fff4f774856dd1b9fff0189ff0bc9a989'},
 '80747893a1c549f9efac06401a24938b12f71a60694d26c7953d06a2fb8a6c79': {'AddressOfEntryPoint': 2282128,
                                                                      'DebugRVA': 2437920,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2433024,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'AVIFIL32.dll': 'AVIStreamReadFormat',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetStretchBltMode',
                                                                                      'KERNEL32.dll': 'GetEnvironmentStrings',
                                                                                      'MSACM32.dll': 'acmFormatDetailsA',
                                                                                      'MSVFW32.dll': 'ICInfo',
                                                                                      'OLEAUT32.dll': 'OleCreatePropertyFrame',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'EndDeferWindowPos',
                                                                                      'WINMM.dll': 'DefDriverProc',
                                                                                      'comdlg32.dll': 'ChooseColorA',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['waveInGetDevCapsA',
                                                                                            'mixerOpen',
                                                                                            'mixerGetLineInfoA',
                                                                                            'mixerGetLineControlsA',
                                                                                            'mixerGetControlDetailsA',
                                                                                            'waveInOpen',
                                                                                            'waveInPrepareHeader',
                                                                                            'waveInAddBuffer',
                                                                                            'waveInStart',
                                                                                            'waveInReset',
                                                                                            'waveInUnprepareHeader',
                                                                                            'waveInClose',
                                                                                            'mixerSetControlDetails',
                                                                                            'mixerClose',
                                                                                            'waveOutReset',
                                                                                            'waveOutUnprepareHeader',
                                                                                            'waveOutClose',
                                                                                            'waveOutOpen',
                                                                                            'waveOutPrepareHeader',
                                                                                            'waveOutPause',
                                                                                            'waveOutGetPosition',
                                                                                            'waveOutWrite',
                                                                                            'waveOutRestart',
                                                                                            'timeGetTime',
                                                                                            'timeBeginPeriod',
                                                                                            'timeSetEvent',
                                                                                            'timeEndPeriod',
                                                                                            'timeKillEvent',
                                                                                            'timeGetDevCaps',
                                                                                            'waveOutGetDevCapsA',
                                                                                            'waveOutGetNumDevs',
                                                                                            'DefDriverProc',
                                                                                            'ICImageDecompress',
                                                                                            'ICDecompress',
                                                                                            'ICCompress',
                                                                                            'ICRemove',
                                                                                            'ICGetInfo',
                                                                                            'ICSendMessage',
                                                                                            'ICOpen',
                                                                                            'ICClose',
                                                                                            'ICInfo',
                                                                                            'AVIFileInit',
                                                                                            'AVIFileExit',
                                                                                            'AVIFileOpenA',
                                                                                            'AVIFileGetStream',
                                                                                            'AVIFileRelease',
                                                                                            'AVIStreamBeginStreaming',
                                                                                            'AVIStreamEndStreaming',
                                                                                            'AVIStreamInfoA',
                                                                                            'AVIStreamFindSample',
                                                                                            'AVIStreamRead',
                                                                                            'AVIStreamStart',
                                                                                            'AVIStreamLength',
                                                                                            'AVIStreamReadFormat',
                                                                                            'acmStreamOpen',
                                                                                            'acmStreamUnprepareHeader',
                                                                                            'acmStreamConvert',
                                                                                            'acmStreamPrepareHeader',
                                                                                            'acmStreamSize',
                                                                                            'acmDriverID',
                                                                                            'acmStreamClose',
                                                                                            'acmMetrics',
                                                                                            'acmDriverEnum',
                                                                                            'acmDriverOpen',
                                                                                            'acmFormatTagEnumA',
                                                                                            'acmDriverClose',
                                                                                            'acmDriverDetailsA',
                                                                                            'acmFormatEnumA',
                                                                                            'acmFormatSuggest',
                                                                                            'acmFormatDetailsA',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_Create',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetVersionExA',
                                                                                            'ExitProcess',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'SetFilePointer',
                                                                                            'GetStdHandle',
                                                                                            'SetPriorityClass',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'GetComputerNameA',
                                                                                            'OpenProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateFileW',
                                                                                            'GetLocalTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCommandLineW',
                                                                                            'DeleteFileA',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcessTimes',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindResourceExA',
                                                                                            'CreateProcessW',
                                                                                            'DeleteFileW',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'UnmapViewOfFile',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetThreadPriority',
                                                                                            'GetPriorityClass',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'OutputDebugStringA',
                                                                                            'SuspendThread',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateSemaphoreA',
                                                                                            'GetThreadContext',
                                                                                            'CreateEventA',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetLastError',
                                                                                            'FormatMessageA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindNextFileW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetDriveTypeW',
                                                                                            'SetEndOfFile',
                                                                                            'FindCloseChangeNotification',
                                                                                            'FindNextChangeNotification',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'GetOverlappedResult',
                                                                                            'FlushInstructionCache',
                                                                                            'EnumResourceNamesA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'SetStdHandle',
                                                                                            'HeapSize',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'RtlCaptureContext',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'FlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcessHeap',
                                                                                            'GetCommandLineA',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'HeapReAlloc',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'CreateFileMappingA',
                                                                                            'ResumeThread',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetSystemInfo',
                                                                                            'ReadProcessMemory',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'RtlVirtualUnwind',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'WriteFile',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'CloseHandle',
                                                                                            'VirtualQuery',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetFullPathNameA',
                                                                                            '__C_specific_handler',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'MoveFileW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'MulDiv',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'FreeResource',
                                                                                            'RaiseException',
                                                                                            'GetEnvironmentStrings',
                                                                                            'SetCapture',
                                                                                            'GetMessagePos',
                                                                                            'GetDialogBaseUnits',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'ScrollWindow',
                                                                                            'HideCaret',
                                                                                            'ShowCaret',
                                                                                            'SetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'SetCaretPos',
                                                                                            'DestroyCaret',
                                                                                            'CreateCaret',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetFocus',
                                                                                            'ShowCursor',
                                                                                            'SetCursorPos',
                                                                                            'IsWindowEnabled',
                                                                                            'GetDCEx',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetForegroundWindow',
                                                                                            'AppendMenuW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'CallWindowProcW',
                                                                                            'DrawTextW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetCapture',
                                                                                            'InvertRect',
                                                                                            'GetNextDlgTabItem',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'GetKeyNameTextA',
                                                                                            'GetKeyNameTextW',
                                                                                            'MapVirtualKeyA',
                                                                                            'CreateAcceleratorTableA',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'DefDlgProcA',
                                                                                            'DefDlgProcW',
                                                                                            'GetClassLongA',
                                                                                            'DrawFrameControl',
                                                                                            'GetWindowTextA',
                                                                                            'ScrollWindowEx',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'GetSystemMenu',
                                                                                            'CreateMenu',
                                                                                            'SetRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'GetAsyncKeyState',
                                                                                            'CreatePopupMenu',
                                                                                            'ReleaseCapture',
                                                                                            'SetMenu',
                                                                                            'GetKeyState',
                                                                                            'CheckMenuRadioItem',
                                                                                            'IsWindowUnicode',
                                                                                            'GetMenu',
                                                                                            'GetMenuItemInfoA',
                                                                                            'RemoveMenu',
                                                                                            'InsertMenuItemA',
                                                                                            'InsertMenuItemW',
                                                                                            'DrawMenuBar',
                                                                                            'GetMenuItemCount',
                                                                                            'DeleteMenu',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'EnumDisplaySettingsA',
                                                                                            'RedrawWindow',
                                                                                            'GetMessageA',
                                                                                            'OpenClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'InflateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SendMessageW',
                                                                                            'GetDlgItemTextA',
                                                                                            'PostThreadMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'WaitMessage',
                                                                                            'CreateWindowExW',
                                                                                            'DialogBoxParamW',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'TranslateAcceleratorA',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'SetWindowTextW',
                                                                                            'LoadImageA',
                                                                                            'IsZoomed',
                                                                                            'GetWindowPlacement',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPlacement',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'IsWindow',
                                                                                            'IsDialogMessageA',
                                                                                            'AdjustWindowRectEx',
                                                                                            'PtInRect',
                                                                                            'ClientToScreen',
                                                                                            'TrackMouseEvent',
                                                                                            'GetSysColor',
                                                                                            'LoadAcceleratorsA',
                                                                                            'DrawTextA',
                                                                                            'GetClassLongPtrA',
                                                                                            'LoadStringA',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindow',
                                                                                            'SetCursor',
                                                                                            'GetCursorPos',
                                                                                            'RegisterHotKey',
                                                                                            'DrawEdge',
                                                                                            'UnregisterHotKey',
                                                                                            'SetMenuItemInfoA',
                                                                                            'CallWindowProcA',
                                                                                            'GetIconInfo',
                                                                                            'SendDlgItemMessageW',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'AdjustWindowRect',
                                                                                            'CreateWindowExA',
                                                                                            'UnregisterClassA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'MapWindowPoints',
                                                                                            'CreateDialogParamW',
                                                                                            'IsIconic',
                                                                                            'ScreenToClient',
                                                                                            'CreateDialogParamA',
                                                                                            'KillTimer',
                                                                                            'SetWindowLongA',
                                                                                            'MapDialogRect',
                                                                                            'ScrollDC',
                                                                                            'ReleaseDC',
                                                                                            'IntersectRect',
                                                                                            'DestroyWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PostQuitMessage',
                                                                                            'wvsprintfA',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'MessageBeep',
                                                                                            'GetSubMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'LoadMenuA',
                                                                                            'DestroyMenu',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'CheckDlgButton',
                                                                                            'SetTimer',
                                                                                            'SetFocus',
                                                                                            'GetParent',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'IsDlgButtonChecked',
                                                                                            'EnableWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'OffsetRect',
                                                                                            'UnionRect',
                                                                                            'InvalidateRect',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SendMessageA',
                                                                                            'UpdateWindow',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'EnumChildWindows',
                                                                                            'LoadIconA',
                                                                                            'FillRect',
                                                                                            'DrawIcon',
                                                                                            'SetWindowLongPtrA',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'PostMessageA',
                                                                                            'GetWindowLongA',
                                                                                            'ShowWindow',
                                                                                            'EndDeferWindowPos',
                                                                                            'ExcludeClipRect',
                                                                                            'SaveDC',
                                                                                            'StretchDIBits',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'SetTextAlign',
                                                                                            'GetTextMetricsA',
                                                                                            'Polygon',
                                                                                            'TextOutA',
                                                                                            'RestoreDC',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'CreateSolidBrush',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'GetClipBox',
                                                                                            'ExtTextOutW',
                                                                                            'RectVisible',
                                                                                            'GetTextExtentExPointW',
                                                                                            'Ellipse',
                                                                                            'PolylineTo',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetObjectA',
                                                                                            'ExtSelectClipRgn',
                                                                                            'OffsetClipRgn',
                                                                                            'SetDIBitsToDevice',
                                                                                            'CreateBitmap',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'PolyPolyline',
                                                                                            'CreatePalette',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'GetDIBits',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'ExtTextOutA',
                                                                                            'CreateFontA',
                                                                                            'GdiFlush',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'StretchBlt',
                                                                                            'SwapBuffers',
                                                                                            'SetPixelFormat',
                                                                                            'ChoosePixelFormat',
                                                                                            'Polyline',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'CreatePen',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetBkColor',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'BitBlt',
                                                                                            'SetStretchBltMode',
                                                                                            'GetSaveFileNameA',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'CommDlgExtendedError',
                                                                                            'ChooseColorA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueA',
                                                                                            'RegSetValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'DragQueryFileW',
                                                                                            'DragQueryFileA',
                                                                                            'DragFinish',
                                                                                            'ShellExecuteA',
                                                                                            'DragAcceptFiles',
                                                                                            'SHGetMalloc',
                                                                                            'CreateItemMoniker',
                                                                                            'GetRunningObjectTable',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoGetObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'SysFreeString',
                                                                                            'OleCreatePropertyFrame'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 504,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 305210,
                                                                      'SectionNames': {'.const\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 153088,
                                                                                       '.rdata\x00\x00': 634368,
                                                                                       '.rsrc\x00\x00\x00': 305664,
                                                                                       '.text\x00\x00\x00': 2421760,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/80747893a1c549f9efac06401a24938b12f71a60694d26c7953d06a2fb8a6c79'},
 '808e02f8878ac4091078fd6fc59dca4cb12cec2f626fe3ab335ac880db213494': {'AddressOfEntryPoint': 1074003813,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'CRYPT32.dll': 'CertOpenStore',
                                                                                      'KERNEL32.dll': 'GetConsoleMode',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'USER32.dll': 'DdeUninitialize',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINTRUST.dll': 'WTHelperProvDataFromStateData',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['DdeCreateStringHandleW',
                                                                                            'DdeDisconnect',
                                                                                            'DdeGetLastError',
                                                                                            'DdeClientTransaction',
                                                                                            'DdeFreeStringHandle',
                                                                                            'DdeInitializeW',
                                                                                            'WaitForInputIdle',
                                                                                            'DdeConnect',
                                                                                            'DdeUninitialize',
                                                                                            'ShellExecuteExW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'StrStrIW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'GetLongPathNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetProcAddress',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'Sleep',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpA',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'GetSystemTime',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetACP',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'OpenThread',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertGetNameStringW',
                                                                                            'CertGetNameStringA',
                                                                                            'CryptMsgClose',
                                                                                            'CertCloseStore',
                                                                                            'CryptMsgUpdate',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CertOpenStore'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 148,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15664,
                                                                      'SectionNames': {'!\x19\x04\x00c\x00\x00\x00': 15872,
                                                                                       '.data\x00\x00\x00': 8192,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 47104,
                                                                                       '.text\x00\x00\x00': 173056},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/808e02f8878ac4091078fd6fc59dca4cb12cec2f626fe3ab335ac880db213494'},
 '80915284b9414f25b362b51db88d38b8fb42724b433681061cb7b211244c748d': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7314104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 7314432,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/80915284b9414f25b362b51db88d38b8fb42724b433681061cb7b211244c748d'},
 '8120f39e256c0869fa09e0569430b23a27ce59c37e1d7bd54b17f06ed0292fe7': {'AddressOfEntryPoint': 57112,
                                                                      'DebugRVA': 99728,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 109888,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 98304,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'DosDateTimeToFileTime',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalAlloc',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileW',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'wvsprintfA',
                                                                                            'wvsprintfW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClassNameW',
                                                                                            'DialogBoxParamW',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'LoadBitmapW',
                                                                                            'LoadIconW',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'CharUpperA',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharToOemBuffW',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'CharUpperW',
                                                                                            'FindWindowExW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetSaveFileNameW',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegOpenKeyExW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteExW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 282024,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 282112,
                                                                                       '.text\x00\x00\x00': 92160},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8120f39e256c0869fa09e0569430b23a27ce59c37e1d7bd54b17f06ed0292fe7'},
 '81f35dcd965dff4faaaa775075d80da22a5fdaaa4ff5d40188cd5341be6c778f': {'AddressOfEntryPoint': 65520,
                                                                      'DebugRVA': 244908,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 245760,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LogonUserExExW',
                                                                                      'KERNEL32.dll': 'HeapSetInformation',
                                                                                      'NCObjAPI.DLL': 'WmiEventSourceConnect',
                                                                                      'RPCRT4.dll': 'NdrServerCallAll',
                                                                                      'SCESRV.dll': 'ScesrvTerminateServer',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'ntdll.dll': 'NtFlushKey'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTokenInformation',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RevertToSelf',
                                                                                            'OpenThreadToken',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaLookupSids',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaClose',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'EqualSid',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegGetKeySecurity',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'InitializeAcl',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegLoadMUIStringW',
                                                                                            'LsaManageSidNameMapping',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'LsaLookupNames',
                                                                                            'LsaStorePrivateData',
                                                                                            'AllocateLocallyUniqueId',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetTokenInformation',
                                                                                            'LsaEnumeratePrivileges',
                                                                                            'RegOpenKeyW',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'SystemFunction005',
                                                                                            'SystemFunction029',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'ControlTraceW',
                                                                                            'EnableTrace',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'StartTraceW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'CheckTokenMembership',
                                                                                            'LogonUserExExW',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetOverlappedResult',
                                                                                            'CancelIo',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThread',
                                                                                            'CreateFileW',
                                                                                            'DeviceIoControl',
                                                                                            'GetCurrentProcessId',
                                                                                            'ResumeThread',
                                                                                            'GetProcessId',
                                                                                            'GetDriveTypeW',
                                                                                            'OpenEventW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'HeapCreate',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'ExitThread',
                                                                                            'CompareStringW',
                                                                                            'SetThreadPriority',
                                                                                            'GetProcessTimes',
                                                                                            'OpenProcess',
                                                                                            'IsWow64Process',
                                                                                            'LoadLibraryA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetExitCodeThread',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FindFirstFileW',
                                                                                            'MoveFileExW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'lstrlenW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'CreateProcessW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemTime',
                                                                                            'HeapSetInformation',
                                                                                            'RegisterServicesProcess',
                                                                                            'BroadcastSystemMessageW',
                                                                                            'LoadStringW',
                                                                                            '_itow',
                                                                                            '_vsnwprintf',
                                                                                            '_wcslwr',
                                                                                            'wcsrchr',
                                                                                            'time',
                                                                                            '_ltow',
                                                                                            'wcscspn',
                                                                                            'wcschr',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_wcsnicmp',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcstoul',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            'wcsncmp',
                                                                                            '_ultow',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_XcptFilter',
                                                                                            'I_RpcSessionStrictContextHandle',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'RpcServerInqBindingHandle',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcRevertToSelf',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerSubscribeForNotification',
                                                                                            'RpcServerUnsubscribeForNotification',
                                                                                            'UuidEqual',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'UuidCreate',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcAsyncAbortCall',
                                                                                            'RpcServerRegisterIf',
                                                                                            'RpcServerUnregisterIfEx',
                                                                                            'RpcServerListen',
                                                                                            'RpcMgmtWaitServerListen',
                                                                                            'RpcMgmtStopServerListening',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcEpResolveBinding',
                                                                                            'RpcBindingFree',
                                                                                            'NdrClientCall3',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'Ndr64AsyncClientCall',
                                                                                            'Ndr64AsyncServerCallAll',
                                                                                            'RpcServerInqCallAttributesA',
                                                                                            'UuidFromStringW',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'NdrServerCall2',
                                                                                            'NdrAsyncServerCall',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'UuidCreateNil',
                                                                                            'NdrServerCallAll',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtSetInformationThread',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtFilterToken',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'NtDeleteFile',
                                                                                            'NtQueryDirectoryFile',
                                                                                            'NtWaitForSingleObject',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'NtSetInformationFile',
                                                                                            'NtQueryInformationFile',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtSetEvent',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlQueueApcWow64Thread',
                                                                                            'NtQueueApcThread',
                                                                                            'NtOpenThread',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlAreAllAccessesGranted',
                                                                                            'NtDuplicateToken',
                                                                                            'NtAccessCheckAndAuditAlarm',
                                                                                            'NtAccessCheck',
                                                                                            'NtPrivilegeObjectAuditAlarm',
                                                                                            'NtPrivilegeCheck',
                                                                                            'RtlMapGenericMask',
                                                                                            'RtlSetSecurityObject',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'NtCloseObjectAuditAlarm',
                                                                                            'RtlDeregisterWait',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlQueueWorkItem',
                                                                                            'RtlDeleteSecurityObject',
                                                                                            'RtlCopyLuid',
                                                                                            'NtQueryKey',
                                                                                            'NtShutdownSystem',
                                                                                            'NtInitializeRegistry',
                                                                                            'NtSetSystemEnvironmentValue',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlQuerySecurityObject',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'NtDeleteKey',
                                                                                            'NtEnumerateKey',
                                                                                            'NtDeleteValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenKey',
                                                                                            'NtCreateKey',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlConvertExclusiveToShared',
                                                                                            'RtlConvertSharedToExclusive',
                                                                                            'RtlCreateServiceSid',
                                                                                            'RtlRegisterWait',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlCopySid',
                                                                                            'RtlLengthSid',
                                                                                            'NtUnloadDriver',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'NtLoadDriver',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'NtOpenFile',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlAddAce',
                                                                                            'RtlNewSecurityObject',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'NtDeleteObjectAuditAlarm',
                                                                                            'NtFlushKey',
                                                                                            'LoadUserProfileW',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'ScesrvInitializeServer',
                                                                                            'ScesrvTerminateServer',
                                                                                            'WmiCreateObjectWithFormat',
                                                                                            'WmiSetAndCommitObject',
                                                                                            'WmiEventSourceConnect'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 326,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 18432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9728,
                                                                                       '.pdata\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 97792,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 18432,
                                                                                       '.text\x00\x00\x00': 241152},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/81f35dcd965dff4faaaa775075d80da22a5fdaaa4ff5d40188cd5341be6c778f'},
 '8215ca9e02357b4a0019f8813a658a26adbbce59ae3bafb963bfbe0cec81db57': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1250888,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1165312,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8215ca9e02357b4a0019f8813a658a26adbbce59ae3bafb963bfbe0cec81db57'},
 '821d5b54191fa82573243f746b1dd746fcf1c8271914d1f654bf742ed565ca0a': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 183040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 183296,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/821d5b54191fa82573243f746b1dd746fcf1c8271914d1f654bf742ed565ca0a'},
 '8233bbc061c7bec9a7fac1b87922847f9a2ace0f950a7f6cd404c76addfc65db': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 15872,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/8233bbc061c7bec9a7fac1b87922847f9a2ace0f950a7f6cd404c76addfc65db'},
 '82961145087458fe8e5de95016722e9bc676f7a5a6a0886262de67b5f6859b6c': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 6872860,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 6873088,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/82961145087458fe8e5de95016722e9bc676f7a5a6a0886262de67b5f6859b6c'},
 '8336d53004c6e7021f9be107134239099e0eafd977692c39ed00a79649ae9523': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2975416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2975744,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8336d53004c6e7021f9be107134239099e0eafd977692c39ed00a79649ae9523'},
 '835a520db6ad05bd9e5f307c23c6db2929c45ca32bd09d6c5a14fa51a1b0866e': {'AddressOfEntryPoint': 1074726561,
                                                                      'DebugRVA': 686736,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 930528,
                                                                      'ExportSize': 520,
                                                                      'IATRVA': 684032,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptCreateHash',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'USER32.dll': 'CreateWindowStationW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'send',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryInformationJobObject',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQueryEx',
                                                                                            'CreateFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'RtlCaptureContext',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetThreadContext',
                                                                                            'SuspendThread',
                                                                                            'WaitNamedPipeW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateEventW',
                                                                                            'GetTickCount',
                                                                                            'ReleaseMutex',
                                                                                            'SetLastError',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'SetInformationJobObject',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleInformation',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'TerminateProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'QueryDosDeviceW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'LocalAlloc',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'GetModuleHandleExW',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'FlushInstructionCache',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemInfo',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'VirtualQuery',
                                                                                            'CallMsgFilterW',
                                                                                            'PostQuitMessage',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'PostMessageW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'TranslateMessage',
                                                                                            'WaitForInputIdle',
                                                                                            'GetProcessWindowStation',
                                                                                            'CreateDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'DispatchMessageW',
                                                                                            'KillTimer',
                                                                                            'PeekMessageW',
                                                                                            'MessageBoxW',
                                                                                            'wsprintfW',
                                                                                            'CharUpperW',
                                                                                            'CreateWindowStationW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptSetHashParam',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'GetProfileType',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'accept',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'gethostbyname',
                                                                                            'WSAGetLastError',
                                                                                            'ntohs',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'socket',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetDevCaps',
                                                                                            'timeGetTime',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 295,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1484,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13312,
                                                                                       '.pdata\x00\x00': 39424,
                                                                                       '.rdata\x00\x00': 247296,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 677376,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '] \x0f\x00oc\x00\x00': 13312,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/835a520db6ad05bd9e5f307c23c6db2929c45ca32bd09d6c5a14fa51a1b0866e'},
 '8416770393cfc2367ec5cf05871e059501d4e177bfd3a95796a880b3bb0b7f67': {'AddressOfEntryPoint': 129992,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 614400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'HttpQueryInfoW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['WSACleanup',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'select',
                                                                                            'accept',
                                                                                            '__WSAFDIsSet',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'HttpQueryInfoW',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'LoadUserProfileW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'HeapFree',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'PulseEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleFileNameA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'CreatePipe',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'IsCharUpperW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetClipboardData',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'CopyRect',
                                                                                            'CharUpperBuffW',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ReleaseDC',
                                                                                            'EnumThreadWindows',
                                                                                            'GetDC',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'IsIconic',
                                                                                            'GetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'GetPixel',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'GetDIBits',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'DeleteDC',
                                                                                            'GetObjectW',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'AddAce',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'SafeArrayDestroyData',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetVartype',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 512,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 92760,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 27136,
                                                                                       '.rdata\x00\x00': 88576,
                                                                                       '.rsrc\x00\x00\x00': 93184,
                                                                                       '.text\x00\x00\x00': 608256},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/8416770393cfc2367ec5cf05871e059501d4e177bfd3a95796a880b3bb0b7f67'},
 '844e86dbaf12dcb82fc0129e9f7c8e59889f5548120a6f1824c4c2de139c4c23': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/844e86dbaf12dcb82fc0129e9f7c8e59889f5548120a6f1824c4c2de139c4c23'},
 '84797885eba607c4d597cbcd7dd3b9af4b9ac436be2a069b1df2e3662dcdea78': {'AddressOfEntryPoint': 5220,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 729364,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 729600,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/84797885eba607c4d597cbcd7dd3b9af4b9ac436be2a069b1df2e3662dcdea78'},
 '8568f814e03594d9a352607e26caa6b10fd9ab17fc2e529946246917e48f88a1': {'AddressOfEntryPoint': 84396,
                                                                      'DebugRVA': 103552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                      'KERNEL32.dll': 'GetCommandLineA',
                                                                                      'MSVCP90.dll': '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                      'MSVCR90.dll': 'memcpy',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'GetMessageA'},
                                                                      'ImportedFunctions': ['WriteFile',
                                                                                            'OpenProcess',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeA',
                                                                                            'ResetEvent',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcessId',
                                                                                            'PeekNamedPipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'CreateSemaphoreA',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'LocalAlloc',
                                                                                            'TlsGetValue',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'SHGetFileInfoW',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'strtok_s',
                                                                                            '_wsplitpath_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wcslwr_s',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            '_strdup',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcstok_s',
                                                                                            'memcpy',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 30208,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 94720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8568f814e03594d9a352607e26caa6b10fd9ab17fc2e529946246917e48f88a1'},
 '85c0b53691d27e2edc76975df9d03a9182c7212f56da8539e3066127cf57b6cf': {'AddressOfEntryPoint': 41624,
                                                                      'DebugRVA': 4944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetThreadStackGuarantee',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'MoveFileExA',
                                                                                            'LoadResource',
                                                                                            'GetTickCount',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'WriteFile',
                                                                                            'GlobalAlloc',
                                                                                            'SizeofResource',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateProcessA',
                                                                                            'TerminateProcess',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LockResource',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'CloseHandle',
                                                                                            'GetTempPathA',
                                                                                            'LocalFree',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlUnwindEx',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'MessageBoxA',
                                                                                            'GetDesktopWindow',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'CoTaskMemFree'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 88,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 986224,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 986624,
                                                                                       '.text\x00\x00\x00': 75776},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/85c0b53691d27e2edc76975df9d03a9182c7212f56da8539e3066127cf57b6cf'},
 '85cb89dc3eb35b4088013d404979718ef2767cabcfce5269335126c89e80edd5': {'AddressOfEntryPoint': 125112,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 598016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LogonUserW',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocDescriptorEx',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetReadFile',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['WSACleanup',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'select',
                                                                                            'accept',
                                                                                            '__WSAFDIsSet',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetConnectW',
                                                                                            'FtpOpenFileW',
                                                                                            'HttpQueryInfoW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetOpenW',
                                                                                            'InternetReadFile',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'UnloadUserProfile',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'CreatePipe',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'IsCharUpperW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'CharUpperBuffW',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursor',
                                                                                            'WindowFromPoint',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'EnumThreadWindows',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'FindWindowW',
                                                                                            'CloseClipboard',
                                                                                            'DestroyWindow',
                                                                                            'RoundRect',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'GetDIBits',
                                                                                            'DeleteDC',
                                                                                            'CloseFigure',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'SetBkMode',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'GetAce',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'GetAclInformation',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetVartype',
                                                                                            'OleLoadPicture',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'VarR8FromDec',
                                                                                            'SafeArrayAllocDescriptorEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 506,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 14168,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 25600,
                                                                                       '.rdata\x00\x00': 86528,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 590848},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/85cb89dc3eb35b4088013d404979718ef2767cabcfce5269335126c89e80edd5'},
 '85f4715ee748efac042d3dda901d39c539d02b7e592e62a2501547c0a7da0b10': {'AddressOfEntryPoint': 343552,
                                                                      'DebugRVA': 186944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'ExtTextOutA',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'DragQueryFileA',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionA',
                                                                                      'USER32.dll': 'EnableMenuItem',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter'},
                                                                      'ImportedFunctions': ['HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'Sleep',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapQueryInformation',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStartupInfoA',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleHandleW',
                                                                                            'SetErrorMode',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'FormatMessageA',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFlags',
                                                                                            'GlobalFree',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'lstrlenA',
                                                                                            'GlobalUnlock',
                                                                                            'GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalFindAtomA',
                                                                                            'SetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpW',
                                                                                            'GetVersionExA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringA',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalLock',
                                                                                            'lstrcmpA',
                                                                                            'GlobalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'CreateProcessA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetLastError',
                                                                                            'GetWindowDC',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'FillRect',
                                                                                            'SetWindowTextA',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'LoadMenuA',
                                                                                            'DestroyMenu',
                                                                                            'ReleaseCapture',
                                                                                            'LoadAcceleratorsA',
                                                                                            'InvalidateRect',
                                                                                            'InsertMenuItemA',
                                                                                            'CreatePopupMenu',
                                                                                            'SetRectEmpty',
                                                                                            'BringWindowToTop',
                                                                                            'ShowWindow',
                                                                                            'TranslateAcceleratorA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'IsWindowEnabled',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetCursor',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'ValidateRect',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapA',
                                                                                            'ModifyMenuA',
                                                                                            'GetMenuState',
                                                                                            'CheckMenuItem',
                                                                                            'RegisterWindowMessageA',
                                                                                            'WinHelpA',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassLongA',
                                                                                            'GetClassNameA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'GetFocus',
                                                                                            'IsWindow',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'SetActiveWindow',
                                                                                            'DispatchMessageA',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageA',
                                                                                            'MapWindowPoints',
                                                                                            'TrackPopupMenu',
                                                                                            'FindWindowA',
                                                                                            'LoadIconA',
                                                                                            'LoadCursorA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetKeyState',
                                                                                            'SetMenu',
                                                                                            'EnableWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'IsWindowVisible',
                                                                                            'UpdateWindow',
                                                                                            'GetClientRect',
                                                                                            'GetSubMenu',
                                                                                            'UnregisterClassA',
                                                                                            'GetSysColorBrush',
                                                                                            'GetMenuItemInfoA',
                                                                                            'InflateRect',
                                                                                            'GetCursorPos',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'GetWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowPlacement',
                                                                                            'IsIconic',
                                                                                            'SystemParametersInfoA',
                                                                                            'IntersectRect',
                                                                                            'OffsetRect',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'GetMenu',
                                                                                            'CallWindowProcA',
                                                                                            'DefWindowProcA',
                                                                                            'SendMessageA',
                                                                                            'GetDlgCtrlID',
                                                                                            'PtInRect',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'MessageBoxA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetParent',
                                                                                            'ScreenToClient',
                                                                                            'EqualRect',
                                                                                            'DeferWindowPos',
                                                                                            'CopyRect',
                                                                                            'EnableMenuItem',
                                                                                            'DeleteDC',
                                                                                            'CreatePatternBrush',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'TextOutA',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetPixel',
                                                                                            'BitBlt',
                                                                                            'DeleteObject',
                                                                                            'SetMapMode',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBitmap',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'ExtTextOutA',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA',
                                                                                            'ClosePrinter',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'DragFinish',
                                                                                            'DragQueryFileA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathFindExtensionA',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 283,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 40348,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 13312,
                                                                                       '.rdata\x00\x00': 62976,
                                                                                       '.rsrc\x00\x00\x00': 47104,
                                                                                       '.text\x00\x00\x00': 177664},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/85f4715ee748efac042d3dda901d39c539d02b7e592e62a2501547c0a7da0b10'},
 '865b2dbe4bfa34663444dd508655860778332f228c52088ecb681538406270f3': {'AddressOfEntryPoint': 139180,
                                                                      'DebugRVA': 6512,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 27416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 20992,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 27648,
                                                                                       '.text\x00\x00\x00': 443392},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/865b2dbe4bfa34663444dd508655860778332f228c52088ecb681538406270f3'},
 '86cf13cfd08d945dc516114939d559c9450bdd1867d94fa64757f1aff8d86911': {'AddressOfEntryPoint': 405692,
                                                                      'DebugRVA': 4912,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 68728,
                                                                      'SectionNames': {'.npdata\x00': 1024,
                                                                                       '.pdata\x00\x00': 17408,
                                                                                       '.rdata\x00\x00': 40448,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 69120,
                                                                                       'INIT\x00\x00\x00\x00': 3584,
                                                                                       'PAGE\x00\x00\x00\x00': 301056,
                                                                                       'PAGED\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/86cf13cfd08d945dc516114939d559c9450bdd1867d94fa64757f1aff8d86911'},
 '86f217a88e15aba7dfb24193e4d86648c8e2da19336b38fa8502f47d724b2cd4': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 640760,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 641024,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/86f217a88e15aba7dfb24193e4d86648c8e2da19336b38fa8502f47d724b2cd4'},
 '88150367aa119b5392050799a6e9d2aa135d37a0b26d7055adac03c1e1b9b2ad': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 196296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 196608,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/88150367aa119b5392050799a6e9d2aa135d37a0b26d7055adac03c1e1b9b2ad'},
 '88cfe05358c1c44a7cc5ff09b30e0fe58c73e58becc724b04aceb9e4988cf920': {'AddressOfEntryPoint': 44128,
                                                                      'DebugRVA': 83200,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 91232,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'lstrcmpiA',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetNumberFormatA',
                                                                                            'GetProcAddress',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetTempPathA',
                                                                                            'MoveFileExA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCommandLineA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileA',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'FindWindowExA',
                                                                                            'GetClassNameA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSysColor',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'LoadIconA',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'wvsprintfA',
                                                                                            'SetWindowLongA',
                                                                                            'CharUpperA',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'MessageBoxA',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringA',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongA',
                                                                                            'OemToCharBuffA',
                                                                                            'GetMessageA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'ShellExecuteExA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHChangeNotify',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 25040,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 9728,
                                                                                       '.rsrc\x00\x00\x00': 25088,
                                                                                       '.text\x00\x00\x00': 74240},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/88cfe05358c1c44a7cc5ff09b30e0fe58c73e58becc724b04aceb9e4988cf920'},
 '891e34f023cec5106828ebd13f76bbe5eb03c142da9c8ee14484403ae5fe2a07': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/891e34f023cec5106828ebd13f76bbe5eb03c142da9c8ee14484403ae5fe2a07'},
 '898de47d1976e3cfa2743dc6446126110cfcb057109ea775db5e4da535cc5549': {'AddressOfEntryPoint': 45156,
                                                                      'DebugRVA': 33056,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'TDI.SYS': 'TdiMapUserRequest',
                                                                                      'ntoskrnl.exe': 'ExAllocatePoolWithTag'},
                                                                      'ImportedFunctions': ['KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoCreateDevice',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoDeleteDevice',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IofCompleteRequest',
                                                                                            'swprintf',
                                                                                            'IoDetachDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'IofCallDriver',
                                                                                            'IoFreeMdl',
                                                                                            'IoAllocateMdl',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'ExFreePoolWithTag',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInitializeTimer',
                                                                                            'KeRemoveQueueDpc',
                                                                                            'KeCancelTimer',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoFreeIrp',
                                                                                            'IoAllocateIrp',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'KeSetTimer',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'KeBugCheckEx',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'TdiMapUserRequest'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 34,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 27136,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/898de47d1976e3cfa2743dc6446126110cfcb057109ea775db5e4da535cc5549'},
 '8991d57126ce4fb3eb9c77651aa50e640f99e39e546671bae8a8d84d7c9b72b5': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 746436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 746496,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8991d57126ce4fb3eb9c77651aa50e640f99e39e546671bae8a8d84d7c9b72b5'},
 '8a2a17170695e4e86965805df82c692804d1ed4335f504411fecc4101a109092': {'AddressOfEntryPoint': 1073995937,
                                                                      'DebugRVA': 203040,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 200704,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'KERNEL32.dll': 'GetVersionExA',
                                                                                      'NETAPI32.dll': 'NetWkstaGetInfo',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'USERENV.dll': 'UnloadUserProfile',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['GetSecurityDescriptorLength',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'TraceEvent',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'GetSidSubAuthority',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'GetLengthSid',
                                                                                            'MakeAbsoluteSD',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'IsValidSid',
                                                                                            'OpenProcessToken',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'GetAce',
                                                                                            'GetAclInformation',
                                                                                            'GetTokenInformation',
                                                                                            'AddAce',
                                                                                            'InitializeSid',
                                                                                            'InitializeAcl',
                                                                                            'GetSidLengthRequired',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeLibrary',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'MoveFileExW',
                                                                                            'GetFileTime',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesExW',
                                                                                            'CreateDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'RemoveDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LocalFree',
                                                                                            'ReleaseMutex',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForSingleObject',
                                                                                            'DuplicateHandle',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'HeapDestroy',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'OpenProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'GetTempPathW',
                                                                                            'VirtualQuery',
                                                                                            'ResetEvent',
                                                                                            'TryEnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetVersionExW',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'ReadProcessMemory',
                                                                                            'lstrcpynW',
                                                                                            'GetThreadLocale',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'CreateThread',
                                                                                            'GetProcessTimes',
                                                                                            'UnregisterWait',
                                                                                            'QueueUserWorkItem',
                                                                                            'DisconnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetOverlappedResult',
                                                                                            'GetComputerNameExW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'LockResource',
                                                                                            'DeleteFileW',
                                                                                            'GetLastError',
                                                                                            'FindResourceExW',
                                                                                            'SizeofResource',
                                                                                            'RaiseException',
                                                                                            'FindResourceW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrlenW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'WaitNamedPipeW',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'LoadResource',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeviceIoControl',
                                                                                            'GetVersionExA',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'EnumWindows',
                                                                                            'IsWindowVisible',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'MessageBoxW',
                                                                                            'wsprintfW',
                                                                                            'CharUpperW',
                                                                                            'GetMessageW',
                                                                                            'PeekMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharLowerW',
                                                                                            'wvsprintfW',
                                                                                            'UnregisterClassA',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'SHGetFolderPathW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetWkstaGetInfo',
                                                                                            'PathIsRelativeW',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathAppendW',
                                                                                            'PathStripPathW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'SHQueryValueExW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'UnloadUserProfile',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 227,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12528,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8a2a17170695e4e86965805df82c692804d1ed4335f504411fecc4101a109092'},
 '8a60b820f87182605953df77025ed1b8274a6a7a505243ba9e09feeb359cb536': {'AddressOfEntryPoint': 61920,
                                                                      'DebugRVA': 311888,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 317280,
                                                                      'ExportSize': 7400,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 23040,
                                                                                       '.rdata\x00\x00': 204800,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 308224},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/8a60b820f87182605953df77025ed1b8274a6a7a505243ba9e09feeb359cb536'},
 '8b12eef74fb877629679504b030117f4fedeb38d645e578bc8382441fe96572c': {'AddressOfEntryPoint': 262700,
                                                                      'DebugRVA': 275248,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 274432,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionUnbindClass',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ZwEnumerateKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'IoDetachDevice',
                                                                                            'wcsstr',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'PoSetPowerState',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'strstr',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'RtlQueryRegistryValues',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionBindClass',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionUnbindClass'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 960,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 19968,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 270336,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/8b12eef74fb877629679504b030117f4fedeb38d645e578bc8382441fe96572c'},
 '8b4518ded714b28dab43e8c4cdc97611e074841d26daf6759a0dc613285eab0c': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8b4518ded714b28dab43e8c4cdc97611e074841d26daf6759a0dc613285eab0c'},
 '8b806500dee38824b854e9d5d4ca7d5df244a8653dc45bfec538c5dc28a5a15f': {'AddressOfEntryPoint': 299808,
                                                                      'DebugRVA': 496612,
                                                                      'DebugSize': 56,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 687100,
                                                                      'ExportSize': 81,
                                                                      'IATRVA': 499712,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 342824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 219648,
                                                                                       '.pdata\x00\x00': 37888,
                                                                                       '.rdata\x00\x00': 272896,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 343040,
                                                                                       '.text\x00\x00\x00': 493056},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8b806500dee38824b854e9d5d4ca7d5df244a8653dc45bfec538c5dc28a5a15f'},
 '8baa06d7d12f114b97e7fa41cedacbc6ea43b8ba506eec76328eee1c56c8f9d0': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 3248,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 4153856},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/8baa06d7d12f114b97e7fa41cedacbc6ea43b8ba506eec76328eee1c56c8f9d0'},
 '8bb2546c2dda690d3540d78ce745a99b335882ef2dc48a7474580006d9cfaf79': {'AddressOfEntryPoint': 139464,
                                                                      'DebugRVA': 4912,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1016,
                                                                      'SectionNames': {'.npdata\x00': 1024,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       'INIT\x00\x00\x00\x00': 3584,
                                                                                       'PAGE\x00\x00\x00\x00': 2048,
                                                                                       'PAGEdata': 512,
                                                                                       'PAGEtext': 99328},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/8bb2546c2dda690d3540d78ce745a99b335882ef2dc48a7474580006d9cfaf79'},
 '8c398acc63b54549f470f7f83f2593ad2b9a091e4deef29ebbb51efb095c04ba': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 76072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 76288,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8c398acc63b54549f470f7f83f2593ad2b9a091e4deef29ebbb51efb095c04ba'},
 '8c452e159752e25efbb945f66af6ba563a5b14d1874b33814acb4d11d2e30981': {'AddressOfEntryPoint': 142236,
                                                                      'DebugRVA': 7104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseThreadWaitChainSession',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'CreatePen',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'SHLWAPI.dll': 'StrStrW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'DestroyIcon',
                                                                                      'UxTheme.dll': 'SetWindowTheme',
                                                                                      'credui.dll': 'CredUIPromptForCredentialsW',
                                                                                      'msvcrt.dll': 'towlower',
                                                                                      'ntdll.dll': 'NtClose',
                                                                                      'pcwum.dll': 'PcwCreateQuery',
                                                                                      'wevtapi.dll': 'EvtClose'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'EventWrite',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RevertToSelf',
                                                                                            'GetTokenInformation',
                                                                                            'CreateWellKnownSid',
                                                                                            'IsValidSid',
                                                                                            'SetTokenInformation',
                                                                                            'EnumServicesStatusExW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceConfigW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'StartServiceW',
                                                                                            'ControlService',
                                                                                            'OpenThreadWaitChainSession',
                                                                                            'GetThreadWaitChain',
                                                                                            'CloseThreadWaitChainSession',
                                                                                            'CallbackMayRunLong',
                                                                                            'OpenProcess',
                                                                                            'TrySubmitThreadpoolCallback',
                                                                                            'IsWow64Process',
                                                                                            'GetPriorityClass',
                                                                                            'GetTimeFormatW',
                                                                                            'GetExitCodeThread',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileW',
                                                                                            'DuplicateHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'LocalFree',
                                                                                            'GetLogicalProcessorInformationEx',
                                                                                            'GetNumaHighestNodeNumber',
                                                                                            'SetEvent',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Thread32First',
                                                                                            'OpenThread',
                                                                                            'Thread32Next',
                                                                                            'Sleep',
                                                                                            'lstrcmpW',
                                                                                            'GetComputerNameW',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ReadProcessMemory',
                                                                                            'lstrcmpiW',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'GetTickCount',
                                                                                            'HeapSize',
                                                                                            'MulDiv',
                                                                                            'HeapReAlloc',
                                                                                            'FormatMessageW',
                                                                                            'CloseThreadpoolCleanupGroup',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'CreateEventW',
                                                                                            'CreateThreadpoolCleanupGroup',
                                                                                            'GetErrorMode',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcessId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'SetPriorityClass',
                                                                                            'DeviceIoControl',
                                                                                            'SetLastError',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'HeapSetInformation',
                                                                                            'CreateMutexW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'ReleaseMutex',
                                                                                            'CloseThreadpoolCleanupGroupMembers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'SetBkMode',
                                                                                            'GetCurrentObject',
                                                                                            'GetObjectW',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetCharWidth32W',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SetBkColor',
                                                                                            'DeleteDC',
                                                                                            'CreateCompatibleDC',
                                                                                            'SetTextColor',
                                                                                            'GetDeviceCaps',
                                                                                            'Rectangle',
                                                                                            'BitBlt',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'CreatePen',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetProcessDPIAware',
                                                                                            'RegisterWindowMessageW',
                                                                                            'MessageBoxW',
                                                                                            'CreateDialogParamW',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadMenuW',
                                                                                            'RemoveMenu',
                                                                                            'DestroyMenu',
                                                                                            'CreateWindowExW',
                                                                                            'DrawTextW',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetSysColor',
                                                                                            'GetDlgCtrlID',
                                                                                            'EnableMenuItem',
                                                                                            'AppendMenuW',
                                                                                            'DialogBoxParamW',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollPos',
                                                                                            'EndDialog',
                                                                                            'GetSystemMetrics',
                                                                                            'GetGuiResources',
                                                                                            'EnableWindow',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetWindowTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'IsHungAppWindow',
                                                                                            'SetThreadDesktop',
                                                                                            'IsWindowVisible',
                                                                                            'EndTask',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'EnumDesktopsW',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'EnumDesktopWindows',
                                                                                            'CloseDesktop',
                                                                                            'GetWindow',
                                                                                            'InternalGetWindowText',
                                                                                            'ShowWindowAsync',
                                                                                            'SetMenuDefaultItem',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindow',
                                                                                            'SwitchToThisWindow',
                                                                                            'TileWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'CascadeWindows',
                                                                                            'PeekMessageW',
                                                                                            'GetCursorPos',
                                                                                            'CheckDlgButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'SetRect',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'FindWindowW',
                                                                                            'SetFocus',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetClassNameW',
                                                                                            'GetFocus',
                                                                                            'GetParent',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'LoadAcceleratorsW',
                                                                                            'PostQuitMessage',
                                                                                            'MessageBeep',
                                                                                            'RedrawWindow',
                                                                                            'MoveWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'DefWindowProcW',
                                                                                            'GetMenuItemID',
                                                                                            'GetSubMenu',
                                                                                            'IsZoomed',
                                                                                            'IsIconic',
                                                                                            'SetForegroundWindow',
                                                                                            'OpenIcon',
                                                                                            'KillTimer',
                                                                                            'DestroyWindow',
                                                                                            'PostMessageW',
                                                                                            'LoadImageW',
                                                                                            'EndDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'ShowWindow',
                                                                                            'GetShellWindow',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetTimer',
                                                                                            'LoadIconW',
                                                                                            'GetThreadDesktop',
                                                                                            'GetDialogBaseUnits',
                                                                                            'GetWindowRect',
                                                                                            'PostThreadMessageW',
                                                                                            'GetForegroundWindow',
                                                                                            'SendMessageW',
                                                                                            'MapWindowPoints',
                                                                                            'GetDlgItem',
                                                                                            'SetMenu',
                                                                                            'SetWindowPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuItem',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenu',
                                                                                            'SetWindowTextW',
                                                                                            'LoadStringW',
                                                                                            'RegisterClassW',
                                                                                            'GetClassInfoW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetKeyState',
                                                                                            'CallWindowProcW',
                                                                                            'GetSysColorBrush',
                                                                                            'FillRect',
                                                                                            'GetClientRect',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'HungWindowFromGhostWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'DestroyIcon',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_wtol',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'swscanf_s',
                                                                                            'memmove',
                                                                                            '_ui64tow_s',
                                                                                            'wcsstr',
                                                                                            '_i64tow_s',
                                                                                            '_wcsicmp',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsdup',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            '_exit',
                                                                                            'memcpy',
                                                                                            'free',
                                                                                            'towlower',
                                                                                            'GetIfEntry2',
                                                                                            'NhGetInterfaceNameFromDeviceGuid',
                                                                                            'GetAdaptersAddresses',
                                                                                            'CreateStatusWindowW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_SetIconSize',
                                                                                            'ImageList_Create',
                                                                                            'PcwCollectData',
                                                                                            'PcwAddQueryItem',
                                                                                            'PcwCreateQuery',
                                                                                            'StrFormatByteSizeW',
                                                                                            'PathAddExtensionW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathAppendW',
                                                                                            'StrStrW',
                                                                                            'ShellAboutW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHParseDisplayName',
                                                                                            'SHOpenFolderAndSelectItems',
                                                                                            'CommandLineToArgvW',
                                                                                            'DuplicateIcon',
                                                                                            'Shell_NotifyIconW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlTryEnterCriticalSection',
                                                                                            'NtSetInformationFile',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtOpenFile',
                                                                                            'RtlTimeToElapsedTimeFields',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'NtQueryInformationProcess',
                                                                                            'NtQueryTimerResolution',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlDeleteCriticalSection',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'NtQuerySystemInformation',
                                                                                            'WinSqmAddToStream',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtClose',
                                                                                            'GetUserNameExW',
                                                                                            'IsThemeActive',
                                                                                            'SetWindowTheme',
                                                                                            'EvtSubscribe',
                                                                                            'EvtClose',
                                                                                            'CredUIPromptForCredentialsW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 334,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 91600,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 91648,
                                                                                       '.text\x00\x00\x00': 156160},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8c452e159752e25efbb945f66af6ba563a5b14d1874b33814acb4d11d2e30981'},
 '8c4b8684f7fbef3e4cab7a47039f8c972af5b73c01f39bf9f4adeb0d5653ad8e': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3440,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 785920,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8c4b8684f7fbef3e4cab7a47039f8c972af5b73c01f39bf9f4adeb0d5653ad8e'},
 '8c5a0e5ebe5061a358b706986a818ef98ee724f1e3d978f3a1d85f4882e28957': {'AddressOfEntryPoint': 51316,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 184896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 185344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8c5a0e5ebe5061a358b706986a818ef98ee724f1e3d978f3a1d85f4882e28957'},
 '8ca39c796aef656f65fa0b87ce6fc3cd3ace91585b3459f0d2443b3ae6ea16fa': {'AddressOfEntryPoint': 12176,
                                                                      'DebugRVA': 4640,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'DIFXAPI.dll': 'DIFXAPISetLogCallbackW',
                                                                                      'KERNEL32.dll': 'RtlLookupFunctionEntry',
                                                                                      'SETUPAPI.dll': 'SetupDiGetClassDevsW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'msvcrt.dll': 'wcsstr'},
                                                                      'ImportedFunctions': ['fwprintf',
                                                                                            '_wcsnicmp',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'wcsncpy',
                                                                                            '_wtoi',
                                                                                            'swprintf',
                                                                                            '_wfopen',
                                                                                            'fgetws',
                                                                                            'fclose',
                                                                                            'memset',
                                                                                            '_wcsupr',
                                                                                            'wcsstr',
                                                                                            'RtlCaptureContext',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'MessageBoxW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'DriverPackageUninstallW',
                                                                                            'DriverPackageInstallW',
                                                                                            'DIFXAPISetLogCallbackW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiClassGuidsFromNameW',
                                                                                            'SetupDiGetClassDevsW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 56,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 15360,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8ca39c796aef656f65fa0b87ce6fc3cd3ace91585b3459f0d2443b3ae6ea16fa'},
 '8cb63c682f24b058f474a0d6237ab2ce5f303103e1356bc33958456e185ef61b': {'AddressOfEntryPoint': 1074484945,
                                                                      'DebugRVA': 496944,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 499712,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetUserNameW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'FormatMessageW',
                                                                                      'OLEACC.dll': 'LresultFromObject',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHSetLocalizedName',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'MonitorFromWindow',
                                                                                      'USP10.dll': 'ScriptItemize',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WTSAPI32.dll': 'WTSUnRegisterSessionNotification',
                                                                                      'XINPUT9_1_0.dll': 'XInputGetState',
                                                                                      'd3d9.dll': 'Direct3DCreate9',
                                                                                      'gdiplus.dll': 'GdipDrawImageRectRectI',
                                                                                      'msvcrt.dll': 'sqrtf',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'slc.dll': 'SLGetWindowsInformationDWORD'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetDateFormatW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetTickCount',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleW',
                                                                                            'LocalFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'OutputDebugStringA',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CreateThread',
                                                                                            'GetTickCount64',
                                                                                            'FreeResource',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'CreateMutexW',
                                                                                            'GetCommandLineW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'OutputDebugStringW',
                                                                                            'SleepEx',
                                                                                            'FlushInstructionCache',
                                                                                            'MulDiv',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'MoveFileExW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadLibraryExW',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'RegCloseKey',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'DebugBreak',
                                                                                            'GetFileType',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FindResourceExW',
                                                                                            'GetThreadLocale',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'GetGlyphOutlineA',
                                                                                            'GetTextMetricsW',
                                                                                            'MoveToEx',
                                                                                            'GetCharacterPlacementW',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetFontLanguageInfo',
                                                                                            'SetMapMode',
                                                                                            'GetCharacterPlacementA',
                                                                                            'GetTextMetricsA',
                                                                                            'SetTextAlign',
                                                                                            'GetBkColor',
                                                                                            'RemoveFontResourceW',
                                                                                            'AddFontResourceW',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontW',
                                                                                            'CreateRoundRectRgn',
                                                                                            'GetObjectA',
                                                                                            'GetTextColor',
                                                                                            'ExtTextOutA',
                                                                                            'Rectangle',
                                                                                            'CreatePen',
                                                                                            'DeleteDC',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'PatBlt',
                                                                                            'ExcludeClipRect',
                                                                                            'BitBlt',
                                                                                            'CreateBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'ExtTextOutW',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'CreateSolidBrush',
                                                                                            'GetStockObject',
                                                                                            'EnableWindow',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckDlgButton',
                                                                                            'LoadStringW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetWindowLongW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'ShowCursor',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'BringWindowToTop',
                                                                                            'SetForegroundWindow',
                                                                                            'RegisterRawInputDevices',
                                                                                            'LoadAcceleratorsW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'IsZoomed',
                                                                                            'GetWindowPlacement',
                                                                                            'SetWindowPlacement',
                                                                                            'ScreenToClient',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'ReleaseDC',
                                                                                            'InvalidateRect',
                                                                                            'IsWindowVisible',
                                                                                            'RedrawWindow',
                                                                                            'SetCapture',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetCursor',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'SetMenuInfo',
                                                                                            'CallNextHookEx',
                                                                                            'GetCursorPos',
                                                                                            'TrackPopupMenu',
                                                                                            'GetSysColorBrush',
                                                                                            'RegisterClassW',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetPropW',
                                                                                            'GetSubMenu',
                                                                                            'GetKeyState',
                                                                                            'GetMonitorInfoW',
                                                                                            'LoadMenuW',
                                                                                            'GetDlgItemTextW',
                                                                                            'FillRect',
                                                                                            'GetFocus',
                                                                                            'GetForegroundWindow',
                                                                                            'GetRawInputData',
                                                                                            'IntersectRect',
                                                                                            'IsRectEmpty',
                                                                                            'TrackMouseEvent',
                                                                                            'ReleaseCapture',
                                                                                            'PtInRect',
                                                                                            'DefWindowProcW',
                                                                                            'UnionRect',
                                                                                            'EqualRect',
                                                                                            'OffsetRect',
                                                                                            'EnumDisplayMonitors',
                                                                                            'MonitorFromRect',
                                                                                            'SendInput',
                                                                                            'SetRect',
                                                                                            'GetDoubleClickTime',
                                                                                            'NotifyWinEvent',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DrawTextW',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'GetIconInfo',
                                                                                            'GetParent',
                                                                                            'AdjustWindowRect',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'MessageBoxW',
                                                                                            'GetWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetFocus',
                                                                                            'DialogBoxParamW',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetClassNameW',
                                                                                            'IsDialogMessageW',
                                                                                            'EndDialog',
                                                                                            'SetWindowRgn',
                                                                                            'EnumChildWindows',
                                                                                            'GetWindowTextW',
                                                                                            'IsWindowEnabled',
                                                                                            'DrawEdge',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'SendMessageW',
                                                                                            'ShowWindow',
                                                                                            'DestroyMenu',
                                                                                            'GetMenu',
                                                                                            'SetMenu',
                                                                                            'DrawMenuBar',
                                                                                            'LoadIconW',
                                                                                            'SetWindowTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'GetWindowRect',
                                                                                            'GetDlgItem',
                                                                                            'DestroyWindow',
                                                                                            'DrawFrameControl',
                                                                                            'CreateDialogParamW',
                                                                                            'SystemParametersInfoW',
                                                                                            'PostQuitMessage',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterClassA',
                                                                                            'MonitorFromWindow',
                                                                                            'wcscspn',
                                                                                            'wcsspn',
                                                                                            'wcstoul',
                                                                                            'strncmp',
                                                                                            '_vscwprintf',
                                                                                            '_localtime64_s',
                                                                                            '_snwprintf_s',
                                                                                            '_errno',
                                                                                            '_wcsnicmp',
                                                                                            'memmove_s',
                                                                                            'powf',
                                                                                            'logf',
                                                                                            'memmove',
                                                                                            'wcsncmp',
                                                                                            'wcstol',
                                                                                            'qsort',
                                                                                            '_wcsicmp',
                                                                                            'atanf',
                                                                                            'atan2f',
                                                                                            '_wcstoui64',
                                                                                            'wcstod',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler3',
                                                                                            'floorf',
                                                                                            '?_set_new_mode@@YAHH@Z',
                                                                                            '?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z',
                                                                                            'wcscat_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'cosf',
                                                                                            'sinf',
                                                                                            'acosf',
                                                                                            'memcmp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_time64',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            'srand',
                                                                                            'time',
                                                                                            'rand',
                                                                                            'swprintf_s',
                                                                                            '_purecall',
                                                                                            '_wtoi',
                                                                                            'wcsncpy_s',
                                                                                            'realloc',
                                                                                            'free',
                                                                                            '_finite',
                                                                                            '_strdup',
                                                                                            'setlocale',
                                                                                            'iswalpha',
                                                                                            'iswspace',
                                                                                            'iswpunct',
                                                                                            'iswdigit',
                                                                                            'memcpy',
                                                                                            'sqrtf',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'ShellExecuteW',
                                                                                            'ShellAboutW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHSetLocalizedName',
                                                                                            'GetUserNameW',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'PathCombineW',
                                                                                            'PathFileExistsW',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'InitCommonControlsEx',
                                                                                            'GdipImageRotateFlip',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipDeleteRegion',
                                                                                            'GdipCreateRegionHrgn',
                                                                                            'GdipSetClipRegion',
                                                                                            'GdipSetClipRectI',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipSetStringFormatFlags',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipDrawString',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipLoadImageFromStream',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateImageAttributes',
                                                                                            'GdipDisposeImageAttributes',
                                                                                            'GdipSetImageAttributesWrapMode',
                                                                                            'GdipCreateLineBrushFromRectI',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDeletePen',
                                                                                            'GdipSetPenDashStyle',
                                                                                            'GdipSetStringFormatHotkeyPrefix',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipGetDC',
                                                                                            'GdipReleaseDC',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipDrawRectangle',
                                                                                            'GdipDrawRectangleI',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipFillRegion',
                                                                                            'GdipMeasureString',
                                                                                            'GdipDrawImagePointRectI',
                                                                                            'GdipDrawImageRectRectI',
                                                                                            'GetUserNameExW',
                                                                                            'Direct3DCreate9',
                                                                                            'timeEndPeriod',
                                                                                            'timeBeginPeriod',
                                                                                            'timeGetTime',
                                                                                            'AccessibleChildren',
                                                                                            'CreateStdAccessibleProxyW',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'LresultFromObject',
                                                                                            'XInputGetState',
                                                                                            'WTSRegisterSessionNotification',
                                                                                            'WTSUnRegisterSessionNotification',
                                                                                            'SLGetWindowsInformationDWORD',
                                                                                            'ScriptBreak',
                                                                                            'ScriptItemize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 432,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 84960,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14848,
                                                                                       '.pdata\x00\x00': 25088,
                                                                                       '.rdata\x00\x00': 146432,
                                                                                       '.rsrc\x00\x00\x00': 84992,
                                                                                       '.text\x00\x00\x00': 493056,
                                                                                       '[k\x0b\x00oc\x00\x00': 2560},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8cb63c682f24b058f474a0d6237ab2ce5f303103e1356bc33958456e185ef61b'},
 '8ce91d16ec31d8bc1672cb396ff8311008e127f5ee3c3f7978c599daae67f93e': {'AddressOfEntryPoint': 9268,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'FsRtlIsNameInExpression'},
                                                                      'ImportedFunctions': ['KeWaitForSingleObject',
                                                                                            'IofCallDriver',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'KeInitializeEvent',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IofCompleteRequest',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'PsCreateSystemThread',
                                                                                            'KeSetEvent',
                                                                                            'KeDelayExecutionThread',
                                                                                            'PsSetLoadImageNotifyRoutine',
                                                                                            'PsSetCreateProcessNotifyRoutine',
                                                                                            'ExAllocatePool',
                                                                                            'strlen',
                                                                                            'ZwClose',
                                                                                            'ObfDereferenceObject',
                                                                                            'wcscmp',
                                                                                            'IoGetLowerDeviceObject',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoCreateFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PsGetVersion',
                                                                                            'ExInitializeResourceLite',
                                                                                            '_stricmp',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlImageNtHeader',
                                                                                            'ZwCreateFile',
                                                                                            'wcslen',
                                                                                            'RtlImageDirectoryEntryToData',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'strcmp',
                                                                                            'IoGetCurrentProcess',
                                                                                            'IoFreeIrp',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'KeInsertQueueApc',
                                                                                            'KeInitializeApc',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'PsGetProcessImageFileName',
                                                                                            'wcscat',
                                                                                            '_wcsupr',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'ExReleaseResourceLite',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'strcat',
                                                                                            'IoFreeMdl',
                                                                                            'MmUnlockPages',
                                                                                            'MmUnmapLockedPages',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            'IoFileObjectType',
                                                                                            'strchr',
                                                                                            'MmProbeAndLockPages',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoAllocateMdl',
                                                                                            'MmIsAddressValid',
                                                                                            'PsGetCurrentThreadId',
                                                                                            'FsRtlIsNameInExpression'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8ce91d16ec31d8bc1672cb396ff8311008e127f5ee3c3f7978c599daae67f93e'},
 '8d024914617c100051c788a950b3f5aedfe18152cd705f53eb6b53f6718be2b0': {'AddressOfEntryPoint': 32240,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'WININET.dll': 'InternetOpenUrlW',
                                                                                      'WS2_32.dll': 'WSACleanup'},
                                                                      'ImportedFunctions': ['InternetOpenW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlW',
                                                                                            'gethostname',
                                                                                            'gethostbyname',
                                                                                            'inet_ntoa',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'GetOEMCP',
                                                                                            'SetEndOfFile',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'CreateProcessA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'LoadLibraryW',
                                                                                            'GetTickCount',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'HeapFree',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetACP',
                                                                                            'GetProcessHeap',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 94,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 6144,
                                                                                       '.rdata\x00\x00': 32256,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 104448},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8d024914617c100051c788a950b3f5aedfe18152cd705f53eb6b53f6718be2b0'},
 '8d0fe069c2619751dbc3310506c28afbe45288e37e4b92b51818e200d03a80b3': {'AddressOfEntryPoint': 22352,
                                                                      'DebugRVA': 43216,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 301989888,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'Common.dll': '?append@String@pcd@@QEAAAEAV12@PEBD@Z',
                                                                                      'Dapi5.dll': '?setDiscoverDevicesCallback@SysInfoModule@dapi5@@SAXP6AXXZ@Z',
                                                                                      'HID.DLL': 'HidD_GetAttributes',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCR90.dll': '_commode',
                                                                                      'Matrix.dll': '?description@CapabilityImp@pcd@@QEBA?AVString@2@XZ',
                                                                                      'OSWindows.dll': '?getOsLocator@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                      'Sysinfo.dll': '?initPrinters@libSysinfo@@YA_NXZ',
                                                                                      'libModuleCommon.dll': '?GetDriver@CEnumDriver@@SAXAEBVWindowsRegistryKey@@AEBVString@pcd@@AEAV34@222@Z',
                                                                                      'libSynaptics.dll': '??0SynapticsEnumerator@@QEAA@PEAVSysInfoDevice@dapi5@@@Z',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['?getPriority@LogFactory@pcd@@SA?AW4LOGGER_PRIORITY@LoggerPriority@2@XZ',
                                                                                            '?createLogger@LogFactory@pcd@@SAXPEBDAEAPEAVLogger@2@@Z',
                                                                                            '??1TraceLogger@pcd@@QEAA@XZ',
                                                                                            '??0TraceLogger@pcd@@QEAA@PEAVLogger@1@PEBD1H@Z',
                                                                                            '?SprintfFormat@pcd@@YA?AVString@1@PEBDZZ',
                                                                                            '?logAssert@AssertionFailure@pcd@@SAXPEBD_K0@Z',
                                                                                            '?logAssert@AssertionFailure@pcd@@SAXPEBD_K0AEBVString@2@@Z',
                                                                                            '?getSystemErrorMsg@System@pcd@@SA?AVString@2@K@Z',
                                                                                            '?getSystemError@System@pcd@@SAKXZ',
                                                                                            '??0Exception@pcd@@QEAA@AEBV01@@Z',
                                                                                            '??HString@pcd@@QEBA?AV01@AEBV01@@Z',
                                                                                            '??9String@pcd@@QEBA_NAEBV01@@Z',
                                                                                            '?trim@String@pcd@@QEAAAEAV12@XZ',
                                                                                            '?toUpper@String@pcd@@QEAAAEAV12@XZ',
                                                                                            '?find@String@pcd@@QEBAIAEBV12@I@Z',
                                                                                            '?getUTF8String@String@pcd@@QEBA?AVCString@2@XZ',
                                                                                            '?size@String@pcd@@QEBAIXZ',
                                                                                            '??4String@pcd@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??1String@pcd@@QEAA@XZ',
                                                                                            '??0String@pcd@@QEAA@XZ',
                                                                                            '??0String@pcd@@QEAA@PEBD@Z',
                                                                                            '??0String@pcd@@QEAA@AEBV01@@Z',
                                                                                            '??0String@pcd@@QEAA@PEBG@Z',
                                                                                            '?EMPTY@String@pcd@@SAAEBV12@XZ',
                                                                                            '??BCString@pcd@@QEBAPEBDXZ',
                                                                                            '??1CString@pcd@@QEAA@XZ',
                                                                                            '??1SerializationFailed@pcd@@UEAA@XZ',
                                                                                            '??0SerializationFailed@pcd@@QEAA@AEBVString@1@@Z',
                                                                                            '??0SerializationFailed@pcd@@QEAA@AEBV01@@Z',
                                                                                            '?deserializeEnd@Serializable@pcd@@MEAAXXZ',
                                                                                            '?deserializeBegin@Serializable@pcd@@MEAAXPEBVXmlElement@2@@Z',
                                                                                            '?getSerializedXML@Serializable@pcd@@MEAAXAEAVString@2@@Z',
                                                                                            '?serializeEnd@Serializable@pcd@@MEAAXXZ',
                                                                                            '?serializeBegin@Serializable@pcd@@MEAAXAEBVString@2@@Z',
                                                                                            '?deserializeUtf8@Serializable@pcd@@UEAAXPEBD@Z',
                                                                                            '?deserialize@Serializable@pcd@@UEAAXAEBVString@2@@Z',
                                                                                            '?doSerialization@Serializable@pcd@@UEAAXAEBVString@2@AEAV32@@Z',
                                                                                            '??1Serializable@pcd@@UEAA@XZ',
                                                                                            '??0Serializable@pcd@@QEAA@XZ',
                                                                                            '??1LoggerStream@pcd@@QEAA@XZ',
                                                                                            '??0LoggerStream@pcd@@QEAA@XZ',
                                                                                            '?log@Logger@pcd@@QEAA_NW4LOGGER_PRIORITY@LoggerPriority@2@AEBVLoggerStream@2@@Z',
                                                                                            '?resolvePriority@Logger@pcd@@QEBA?AW4LOGGER_PRIORITY@LoggerPriority@2@XZ',
                                                                                            '??Hpcd@@YA?AVString@0@PEBDAEBV10@@Z',
                                                                                            '?open@FileHandleResManager@pcd@@CAPEAXAEBVCreateFileOpenArgs@2@@Z',
                                                                                            '?destroy@FileHandleResManager@pcd@@CAXAEAPEAX@Z',
                                                                                            '?toString@PCDValue@pcd@@QEBA?AVString@2@I@Z',
                                                                                            '?nilValue@PCDValue@pcd@@SAIXZ',
                                                                                            '??1PCDValue@pcd@@UEAA@XZ',
                                                                                            '??0PCDValue@pcd@@QEAA@XZ',
                                                                                            '??0PCDValue@pcd@@QEAA@AEBI@Z',
                                                                                            '??0PCDValue@pcd@@QEAA@AEBVString@1@@Z',
                                                                                            '??1WindowsRegistryKey@@QEAA@XZ',
                                                                                            '??0WindowsRegistryKey@@QEAA@PEAUHKEY__@@@Z',
                                                                                            '??6LoggerStream@pcd@@QEAAAEAV01@AEBVString@1@@Z',
                                                                                            '??HLoggerStream@pcd@@QEAAAEAV01@AEBVString@1@@Z',
                                                                                            '??HLoggerStream@pcd@@QEAAAEAV01@PEBD@Z',
                                                                                            '??1Exception@pcd@@UEAA@XZ',
                                                                                            '?toString@Exception@pcd@@QEBA?AVString@2@XZ',
                                                                                            '?getDistribution@OperatingSystem@pcd@@QEBAAEBVOperatingSystemDistribution@2@XZ',
                                                                                            '?getMajor@OperatingSystem@pcd@@QEBAAEBVOperatingSystemMajorVersion@2@XZ',
                                                                                            '?getCurrentOperatingSystem@OperatingSystem@pcd@@SA?AV12@XZ',
                                                                                            '??1OperatingSystem@pcd@@UEAA@XZ',
                                                                                            '??1StructuredException@pcd@@QEAA@XZ',
                                                                                            '??1OperatingSystemDistribution@pcd@@UEAA@XZ',
                                                                                            '?WIN_PE@OperatingSystemDistribution@pcd@@SA?AV12@XZ',
                                                                                            '??1OperatingSystemMajorVersion@pcd@@UEAA@XZ',
                                                                                            '?WIN_2000@OperatingSystemMajorVersion@pcd@@SA?AV12@XZ',
                                                                                            '??6LoggerStream@pcd@@QEAAAEAV01@J@Z',
                                                                                            '?append@String@pcd@@QEAAAEAV12@PEBD@Z',
                                                                                            '?capsWithHighestPriority@CapabilityImp@pcd@@QEBA?AV12@XZ',
                                                                                            '??1CapabilityImp@pcd@@UEAA@XZ',
                                                                                            '?description@CapabilityImp@pcd@@QEBA?AVString@2@XZ',
                                                                                            '?createGeneric@SysInfoDevice@dapi5@@SAPEAV12@AEBVDeviceCapability@2@0AEBVDapiString@2@111@Z',
                                                                                            '?STRINGARRAY@DataType@dapi5@@SAAEBV12@XZ',
                                                                                            '?STRING@DataType@dapi5@@SAAEBV12@XZ',
                                                                                            '?imp@DeviceCapability@dapi5@@QEAAAEAVCapabilityImp@pcd@@XZ',
                                                                                            '??8DeviceCapability@dapi5@@QEBA_NAEBV01@@Z',
                                                                                            '?toString@DeviceCapability@dapi5@@QEBAAEBVDapiString@2@XZ',
                                                                                            '??1DeviceCapability@dapi5@@QEAA@XZ',
                                                                                            '??4DeviceCapability@dapi5@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0DeviceCapability@dapi5@@QEAA@XZ',
                                                                                            '?WiMouseTest@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?Mouse@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?WiMouse@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?WiKeyboard@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?Keyboard@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?NIL@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?toPCDString@Value@dapi5@@QEBAAEBVString@pcd@@XZ',
                                                                                            '?getStringInArray@Value@dapi5@@QEBAAEBVDapiString@2@I@Z',
                                                                                            '?stringArraySize@Value@dapi5@@QEBAIXZ',
                                                                                            '?valueString@Value@dapi5@@QEBAAEBVDapiString@2@XZ',
                                                                                            '??1Value@dapi5@@QEAA@XZ',
                                                                                            '??0Value@dapi5@@QEAA@AEBVString@pcd@@@Z',
                                                                                            '?pcdString@DapiString@dapi5@@QEBAAEBVString@pcd@@XZ',
                                                                                            '??1DapiString@dapi5@@QEAA@XZ',
                                                                                            '??0DapiString@dapi5@@QEAA@PEBD@Z',
                                                                                            '?value@Parameter@dapi5@@QEBA?AVValue@2@XZ',
                                                                                            '?createParameter@SysInfoModule@dapi5@@SAPEAVParameter@2@AEBVDapiString@2@AEBVDataType@2@0_N2@Z',
                                                                                            '?property@SysInfoDevice@dapi5@@QEBAPEAVDeviceProperty@2@AEBVDapiString@2@@Z',
                                                                                            '?deviceCapabilities@SysInfoDevice@dapi5@@QEBA?AVDeviceCapability@2@XZ',
                                                                                            '?setName@SysInfoDevice@dapi5@@QEAAPEAV12@AEBVDapiString@2@@Z',
                                                                                            '?addDeviceCapability@SysInfoDevice@dapi5@@QEAAPEAV12@AEBVDeviceCapability@2@@Z',
                                                                                            '?addProperty@SysInfoDevice@dapi5@@QEAAPEAV12@PEBVDeviceProperty@2@@Z',
                                                                                            '?createUnknown@SysInfoDevice@dapi5@@SAPEAV12@AEBVDeviceCapability@2@0AEBVDapiString@2@111@Z',
                                                                                            '?setValue@DeviceProperty@dapi5@@QEAAPEAV12@AEBVValue@2@@Z',
                                                                                            '?value@DeviceProperty@dapi5@@QEBA?AVValue@2@XZ',
                                                                                            '?BOOLEAN@DataType@dapi5@@SAAEBV12@XZ',
                                                                                            '?UINT32@DataType@dapi5@@SAAEBV12@XZ',
                                                                                            '??UDeviceCapability@dapi5@@QEBA?AV01@AEBV01@@Z',
                                                                                            '?KeyboardTest@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?MouseTest@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?Joystick@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?Printer@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '??0Value@dapi5@@QEAA@J@Z',
                                                                                            '??0Value@dapi5@@QEAA@I@Z',
                                                                                            '??0Value@dapi5@@QEAA@K@Z',
                                                                                            '??0Value@dapi5@@QEAA@_N@Z',
                                                                                            '??0Value@dapi5@@QEAA@PEBG@Z',
                                                                                            '??UPropertyCategory@dapi5@@QEBA?AV01@AEBV01@@Z',
                                                                                            '??1PropertyCategory@dapi5@@QEAA@XZ',
                                                                                            '?Tier3@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Tier2@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Tier1@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Profile@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Summary@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Internal@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?RequiredForTests@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Key@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?SysInfo@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?localizedString@LocalizedString@dapi5@@QEBAAEBVDapiString@2@XZ',
                                                                                            '?registerLibrary@DiagModule@dapi5@@SAXAEBVDapiString@2@@Z',
                                                                                            '?addDevice@SysInfoModule@dapi5@@SAXPEAVSysInfoDevice@2@@Z',
                                                                                            '?createLocalizedString@SysInfoModule@dapi5@@SAPEAVLocalizedString@2@AEBVDapiString@2@@Z',
                                                                                            '?createDeviceProperty@SysInfoModule@dapi5@@SAPEAVDeviceProperty@2@AEBVDapiString@2@AEBVPropertyCategory@2@AEBVDataType@2@AEBVDeviceCapability@2@@Z',
                                                                                            '?start@SysInfoModule@dapi5@@SAHXZ',
                                                                                            '?addModuleEnumerationRequirement@SysInfoModule@dapi5@@SAXAEBVString@pcd@@_N@Z',
                                                                                            '?setModuleCapabilities@SysInfoModule@dapi5@@SAXAEBVDeviceCapability@2@@Z',
                                                                                            '?setCmdLineArgs@SysInfoModule@dapi5@@SAXHQEAPEBD@Z',
                                                                                            '?setVersion@SysInfoModule@dapi5@@SAXIIAEBVDapiString@2@@Z',
                                                                                            '?setModuleInitCallback@SysInfoModule@dapi5@@SAXP6AXXZ@Z',
                                                                                            '?setDiscoverDevicesCallback@SysInfoModule@dapi5@@SAXP6AXXZ@Z',
                                                                                            'HidD_GetHidGuid',
                                                                                            'HidD_GetManufacturerString',
                                                                                            'HidD_GetAttributes',
                                                                                            '?enumeratePrinters@libSysinfo@@YA_NXZ',
                                                                                            '?pDriverVersion@CommonProperties@libSysinfo@@2PEAVDeviceProperty@dapi5@@EA',
                                                                                            '?pDriver@CommonProperties@libSysinfo@@2PEAVDeviceProperty@dapi5@@EA',
                                                                                            '?pDescription@CommonProperties@libSysinfo@@2PEAVDeviceProperty@dapi5@@EA',
                                                                                            '?pDriverProvider@CommonProperties@libSysinfo@@2PEAVDeviceProperty@dapi5@@EA',
                                                                                            '?initPrinters@libSysinfo@@YA_NXZ',
                                                                                            '?GetDriver@CEnumDriver@@SAXAEBVWindowsRegistryKey@@AEBVString@pcd@@AEAV34@222@Z',
                                                                                            '?enumerate@SynapticsEnumerator@@QEAA_NAEAV?$Array@PEAVSysInfoDevice@dapi5@@@pcd@@@Z',
                                                                                            '??1SynapticsEnumerator@@QEAA@XZ',
                                                                                            '??0SynapticsEnumerator@@QEAA@PEAVSysInfoDevice@dapi5@@@Z',
                                                                                            '?isDecendentOf@WindowsDevice@libOSWindows@@QEBA_NAEBV12@PEAI@Z',
                                                                                            '?getDescription@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                            '?getDisplayName@WindowsDevice@libOSWindows@@QEBAXAEAVString@pcd@@AEBV34@@Z',
                                                                                            '?getServiceName@WindowsDevice@libOSWindows@@QEBA_NAEAVString@pcd@@@Z',
                                                                                            '?getDeviceInstanceId@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                            '?getEnumerator@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                            '??0WindowsDevice@libOSWindows@@QEAA@AEBVString@pcd@@@Z',
                                                                                            '?getStringRegistryProperty@WindowsDevice@libOSWindows@@QEBA_NKAEAVString@pcd@@W4RegPropType@2@@Z',
                                                                                            '?openRegistryKey@WindowsDevice@libOSWindows@@QEBAPEAUHKEY__@@W4RegKeyType@2@@Z',
                                                                                            '??0WindowsDeviceSet@libOSWindows@@QEAA@PEBU_GUID@@0I@Z',
                                                                                            '?size@WindowsDeviceSet@libOSWindows@@QEBAIXZ',
                                                                                            '??AWindowsDeviceSet@libOSWindows@@QEAAAEAVWindowsDevice@1@I@Z',
                                                                                            '??1WindowsDevice@libOSWindows@@QEAA@XZ',
                                                                                            '??1WindowsDeviceSet@libOSWindows@@QEAA@XZ',
                                                                                            '?getOsLocator@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                            '_amsg_exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            'printf',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'sprintf',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_CxxThrowException',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcessId',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RaiseException',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 225,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1704,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 30720,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 34304},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8d0fe069c2619751dbc3310506c28afbe45288e37e4b92b51818e200d03a80b3'},
 '8d1c9039f23e3a53e848567cefebcf8009f5218984c9c741aff363bfce102476': {'AddressOfEntryPoint': 1073769949,
                                                                      'DebugRVA': 4720,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualQuery',
                                                                                      'SETUPAPI.dll': 'SetupDiGetINFClassA',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA'},
                                                                      'ImportedFunctions': ['SetLastError',
                                                                                            'GetLastError',
                                                                                            'lstrlenA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiCreateDeviceInfoA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiGetINFClassA',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1064,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8d1c9039f23e3a53e848567cefebcf8009f5218984c9c741aff363bfce102476'},
 '8d235cf40112e6b419fa1437913bc903f9a90b17a24ec4872ff17f469b1a8589': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 751848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 752128,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8d235cf40112e6b419fa1437913bc903f9a90b17a24ec4872ff17f469b1a8589'},
 '8d45c03081c64663abe1f83220e5efeca5661fe6f9ab564a74f3ec7e01aead7f': {'AddressOfEntryPoint': 35148,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8d45c03081c64663abe1f83220e5efeca5661fe6f9ab564a74f3ec7e01aead7f'},
 '8d621fadea6da7a8b77a64f287f37c9ce4cd8c685599b3ff66ebca898a90555f': {'AddressOfEntryPoint': 484736,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 585728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'GetActiveObject',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'SetKeyboardState',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'listen',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'listen',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'waveOutSetVolume',
                                                                                            'timeGetTime',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Remove',
                                                                                            'WNetUseConnectionW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenProcess',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'SetSystemPowerState',
                                                                                            'SetFileTime',
                                                                                            'FindResourceW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadResource',
                                                                                            'FindFirstFileW',
                                                                                            'LockResource',
                                                                                            'FindClose',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'CreatePipe',
                                                                                            'GetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'VirtualFree',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'DeviceIoControl',
                                                                                            'SetErrorMode',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'GetShortPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'Beep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileSize',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'HeapFree',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'PtInRect',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowDC',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateMenu',
                                                                                            'GetSysColor',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetActiveWindow',
                                                                                            'InflateRect',
                                                                                            'CharNextW',
                                                                                            'DrawFocusRect',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CountClipboardFormats',
                                                                                            'CharLowerBuffW',
                                                                                            'UnregisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'FillRect',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'IsCharLowerW',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'GetCursor',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'GetAsyncKeyState',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'CopyRect',
                                                                                            'BeginPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'DrawFrameControl',
                                                                                            'FrameRect',
                                                                                            'RedrawWindow',
                                                                                            'DrawTextW',
                                                                                            'wsprintfW',
                                                                                            'FlashWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'IsZoomed',
                                                                                            'GetCaretPos',
                                                                                            'GetSubMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetMenuStringW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharUpperW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetKeyboardState',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DestroyIcon',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetDC',
                                                                                            'WindowFromPoint',
                                                                                            'SetClipboardData',
                                                                                            'VkKeyScanA',
                                                                                            'EmptyClipboard',
                                                                                            'SetKeyboardState',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CloseFigure',
                                                                                            'SetPixel',
                                                                                            'EndPath',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'ExtCreatePen',
                                                                                            'PolyBezierTo',
                                                                                            'SetViewportOrgEx',
                                                                                            'Rectangle',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'SHFileOperationW',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'GetActiveObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 459,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 14264,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.pdata\x00\x00': 19456,
                                                                                       '.rdata\x00\x00': 81920,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 580096},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/8d621fadea6da7a8b77a64f287f37c9ce4cd8c685599b3ff66ebca898a90555f'},
 '8d8bc961be5ce00d10d7b4840d72885701cc20bfe08cda04c66f74d1a7706e67': {'AddressOfEntryPoint': 4100,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 692224,
                                                                      'ExportSize': 2028,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4295651328,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 4,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 676112},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8d8bc961be5ce00d10d7b4840d72885701cc20bfe08cda04c66f74d1a7706e67'},
 '8db369f1944a2bceff930181fd861603129a94f5b5febbe5fc20df8eb09520fd': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 556876,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 557056,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8db369f1944a2bceff930181fd861603129a94f5b5febbe5fc20df8eb09520fd'},
 '8dc6f38e8dd0746c1295609d7ecd5ddce04fb49549613eaf6603739a514a9e82': {'AddressOfEntryPoint': 79840,
                                                                      'DebugRVA': 83760,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGetHashParam',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'GetFocus',
                                                                                      'comdlg32.dll': 'FindTextA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CreateToolbarEx',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__setusermatherr',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            'strncmp',
                                                                                            '_purecall',
                                                                                            'qsort',
                                                                                            '_strlwr',
                                                                                            '_mbschr',
                                                                                            '_mbsicmp',
                                                                                            '_itoa',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '__C_specific_handler',
                                                                                            'free',
                                                                                            'modf',
                                                                                            '_memicmp',
                                                                                            'atoi',
                                                                                            'strrchr',
                                                                                            '_strcmpi',
                                                                                            'strchr',
                                                                                            'strtoul',
                                                                                            'malloc',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'memcmp',
                                                                                            'strcmp',
                                                                                            'memset',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'WaitForSingleObject',
                                                                                            'ResumeThread',
                                                                                            'WriteProcessMemory',
                                                                                            'EnumResourceTypesA',
                                                                                            'GetStartupInfoA',
                                                                                            'CreateRemoteThread',
                                                                                            'OpenProcess',
                                                                                            'ExitProcess',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GlobalLock',
                                                                                            'SizeofResource',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'ReadFile',
                                                                                            'FormatMessageA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'LockResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'WriteFile',
                                                                                            'GetTempPathA',
                                                                                            'GlobalUnlock',
                                                                                            'LoadResource',
                                                                                            'GlobalAlloc',
                                                                                            'FindFirstFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'EnumResourceNamesA',
                                                                                            'GetStdHandle',
                                                                                            'DeleteFileA',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcess',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentProcessId',
                                                                                            'BeginDeferWindowPos',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'SetDlgItemInt',
                                                                                            'SetDlgItemTextA',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetWindowPos',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'RegisterClassA',
                                                                                            'LoadIconA',
                                                                                            'LoadImageA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'InvalidateRect',
                                                                                            'SetFocus',
                                                                                            'GetClientRect',
                                                                                            'MoveWindow',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuStringA',
                                                                                            'CheckMenuItem',
                                                                                            'GetCursorPos',
                                                                                            'GetMenu',
                                                                                            'GetSysColor',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'GetSubMenu',
                                                                                            'SetClipboardData',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'MapWindowPoints',
                                                                                            'EmptyClipboard',
                                                                                            'EnableMenuItem',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'GetMenuItemInfoA',
                                                                                            'GetWindowTextA',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'LoadStringA',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'EnumChildWindows',
                                                                                            'DestroyWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'DeferWindowPos',
                                                                                            'PostQuitMessage',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'DrawTextExA',
                                                                                            'GetMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetFocus',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'GetSaveFileNameA',
                                                                                            'FindTextA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'CryptDecrypt',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptDeriveKey',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptReleaseContext',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'CryptGetHashParam',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'ShellExecuteA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 210,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 14912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 16384,
                                                                                       '.rsrc\x00\x00\x00': 15360,
                                                                                       '.text\x00\x00\x00': 76800},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8dc6f38e8dd0746c1295609d7ecd5ddce04fb49549613eaf6603739a514a9e82'},
 '8dd98370dea2233f53a97942b187460f23ba0520fea092c00e9fe8bfe63e7356': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 84864,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 84992,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8dd98370dea2233f53a97942b187460f23ba0520fea092c00e9fe8bfe63e7356'},
 '8ded3a26fc6a148a20965f13d6aaa936a04d0105472e8b10ed1461d3b0673e14': {'AddressOfEntryPoint': 114572,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 21045720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14336,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 61440,
                                                                                       '.reloc\x00\x00': 13312,
                                                                                       '.rsrc\x00\x00\x00': 21045760,
                                                                                       '.text\x00\x00\x00': 174080},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8ded3a26fc6a148a20965f13d6aaa936a04d0105472e8b10ed1461d3b0673e14'},
 '8e5e76d065e6339a183c4f15f66e17e79beed735cdebc166eb4f3e5371d780b1': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8e5e76d065e6339a183c4f15f66e17e79beed735cdebc166eb4f3e5371d780b1'},
 '8e65b8b0637a89688524906d9a58b4d6bb275b0f37f4a115745fa428a4a59e9c': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 414420,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 414720,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8e65b8b0637a89688524906d9a58b4d6bb275b0f37f4a115745fa428a4a59e9c'},
 '8e777183a21aa9c1238a306550e3656d3825d91cad569a210b3170aba1a12cd1': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 215096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 215552,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8e777183a21aa9c1238a306550e3656d3825d91cad569a210b3170aba1a12cd1'},
 '8e8eeadfa03d31ebc8e00a181bd95404c223594ce15c0871b8861bdc89a81cbf': {'AddressOfEntryPoint': 1074584785,
                                                                      'DebugRVA': 8240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetUserNameW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'GetTextMetricsW',
                                                                                      'KERNEL32.dll': 'CreateThread',
                                                                                      'OLEACC.dll': 'CreateStdAccessibleProxyW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'SetMenuItemInfoW',
                                                                                      'USP10.dll': 'ScriptItemize',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WTSAPI32.dll': 'WTSUnRegisterSessionNotification',
                                                                                      'XINPUT9_1_0.dll': 'XInputSetState',
                                                                                      'd3d9.dll': 'Direct3DCreate9',
                                                                                      'gdiplus.dll': 'GdipDrawImagePointRectI',
                                                                                      'msvcrt.dll': 'sqrtf',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'slc.dll': 'SLGetWindowsInformationDWORD'},
                                                                      'ImportedFunctions': ['DelayLoadFailureHook',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetTickCount',
                                                                                            'CloseHandle',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'OutputDebugStringA',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateFileW',
                                                                                            'lstrcmpW',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleW',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'MultiByteToWideChar',
                                                                                            'ExitProcess',
                                                                                            'CreateMutexW',
                                                                                            'GetCommandLineW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'OutputDebugStringW',
                                                                                            'SleepEx',
                                                                                            'FlushInstructionCache',
                                                                                            'MulDiv',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'MoveFileExW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTickCount64',
                                                                                            'FindResourceExW',
                                                                                            'GetThreadLocale',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'RegCloseKey',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'DebugBreak',
                                                                                            'GetFileType',
                                                                                            'SizeofResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetDateFormatW',
                                                                                            'FreeResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateThread',
                                                                                            'SetDlgItemInt',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SendMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'GetKeyState',
                                                                                            'LoadStringW',
                                                                                            'SystemParametersInfoW',
                                                                                            'InvalidateRect',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDoubleClickTime',
                                                                                            'GetCursorPos',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'NotifyWinEvent',
                                                                                            'MonitorFromWindow',
                                                                                            'SetRect',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'DestroyWindow',
                                                                                            'ShowCursor',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'SetWindowPos',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'BringWindowToTop',
                                                                                            'SetForegroundWindow',
                                                                                            'RegisterRawInputDevices',
                                                                                            'LoadAcceleratorsW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'IsZoomed',
                                                                                            'GetWindowPlacement',
                                                                                            'SetWindowPlacement',
                                                                                            'ScreenToClient',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'IsWindowVisible',
                                                                                            'RedrawWindow',
                                                                                            'SetCapture',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetCursor',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItem',
                                                                                            'CallNextHookEx',
                                                                                            'GetFocus',
                                                                                            'GetSysColorBrush',
                                                                                            'RegisterClassW',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetPropW',
                                                                                            'GetSubMenu',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetSysColor',
                                                                                            'FillRect',
                                                                                            'DrawFrameControl',
                                                                                            'GetForegroundWindow',
                                                                                            'GetRawInputData',
                                                                                            'IntersectRect',
                                                                                            'IsRectEmpty',
                                                                                            'TrackMouseEvent',
                                                                                            'ReleaseCapture',
                                                                                            'PtInRect',
                                                                                            'DefWindowProcW',
                                                                                            'UnionRect',
                                                                                            'EqualRect',
                                                                                            'OffsetRect',
                                                                                            'EnumDisplayMonitors',
                                                                                            'MonitorFromRect',
                                                                                            'SendInput',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DrawTextW',
                                                                                            'CallWindowProcW',
                                                                                            'AdjustWindowRect',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'GetIconInfo',
                                                                                            'MessageBoxW',
                                                                                            'GetWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetFocus',
                                                                                            'DialogBoxParamW',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'CreateDialogParamW',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetClassNameW',
                                                                                            'IsDialogMessageW',
                                                                                            'EndDialog',
                                                                                            'SetWindowRgn',
                                                                                            'EnumChildWindows',
                                                                                            'MapWindowPoints',
                                                                                            'GetWindowTextW',
                                                                                            'IsWindowEnabled',
                                                                                            'DrawEdge',
                                                                                            'PostMessageW',
                                                                                            'LoadIconW',
                                                                                            'GetParent',
                                                                                            'PostQuitMessage',
                                                                                            'DrawMenuBar',
                                                                                            'SetMenuInfo',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SetMenu',
                                                                                            'GetMenu',
                                                                                            'DestroyMenu',
                                                                                            'LoadMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'CheckDlgButton',
                                                                                            'TrackPopupMenu',
                                                                                            'EnableWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'UnregisterClassA',
                                                                                            'SetMenuItemInfoW',
                                                                                            'strncmp',
                                                                                            '_errno',
                                                                                            '_snwprintf_s',
                                                                                            '_vscwprintf',
                                                                                            'wcscspn',
                                                                                            'wcsspn',
                                                                                            'wcsncmp',
                                                                                            'memmove',
                                                                                            '?_set_new_mode@@YAHH@Z',
                                                                                            '?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z',
                                                                                            '_localtime64_s',
                                                                                            'cosf',
                                                                                            '__CxxFrameHandler3',
                                                                                            'logf',
                                                                                            'wcscat_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'qsort',
                                                                                            'sinf',
                                                                                            'acosf',
                                                                                            'floorf',
                                                                                            '_wcsnicmp',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            'atan2f',
                                                                                            'memcmp',
                                                                                            'sqrt',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'srand',
                                                                                            'wcstombs_s',
                                                                                            'mbstowcs_s',
                                                                                            '_wcstoui64',
                                                                                            '_wcsicmp',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            'swprintf_s',
                                                                                            '_wtoi',
                                                                                            'wcsncpy_s',
                                                                                            '_purecall',
                                                                                            '_time64',
                                                                                            'rand',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            'time',
                                                                                            'realloc',
                                                                                            'free',
                                                                                            '_finite',
                                                                                            '_strdup',
                                                                                            'setlocale',
                                                                                            'iswalpha',
                                                                                            'iswspace',
                                                                                            'iswpunct',
                                                                                            'iswdigit',
                                                                                            'memcpy',
                                                                                            'sqrtf',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHSetLocalizedName',
                                                                                            'ShellExecuteW',
                                                                                            'ShellAboutW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'CommandLineToArgvW',
                                                                                            'GetUserNameW',
                                                                                            'GetCharacterPlacementA',
                                                                                            'SetMapMode',
                                                                                            'GetObjectW',
                                                                                            'CreateFontIndirectA',
                                                                                            'CreateDIBSection',
                                                                                            'GetCharacterPlacementW',
                                                                                            'GetGlyphOutlineA',
                                                                                            'GetTextMetricsA',
                                                                                            'SetTextAlign',
                                                                                            'ExtTextOutA',
                                                                                            'GetDeviceCaps',
                                                                                            'AddFontResourceW',
                                                                                            'RemoveFontResourceW',
                                                                                            'GetFontLanguageInfo',
                                                                                            'CreateRoundRectRgn',
                                                                                            'GetObjectA',
                                                                                            'GetTextColor',
                                                                                            'GetBkColor',
                                                                                            'Rectangle',
                                                                                            'CreatePen',
                                                                                            'DeleteDC',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'PatBlt',
                                                                                            'ExcludeClipRect',
                                                                                            'BitBlt',
                                                                                            'CreateBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'ExtTextOutW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'CreateSolidBrush',
                                                                                            'GetStockObject',
                                                                                            'CreateFontW',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'MoveToEx',
                                                                                            'GetTextMetricsW',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'PathCombineW',
                                                                                            'PathFileExistsW',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'InitCommonControlsEx',
                                                                                            'GdipImageRotateFlip',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipDeleteRegion',
                                                                                            'GdipCreateRegionHrgn',
                                                                                            'GdipSetClipRegion',
                                                                                            'GdipSetClipRectI',
                                                                                            'GdipDrawImageRectRectI',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipSetStringFormatFlags',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipDrawString',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipLoadImageFromStream',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateImageAttributes',
                                                                                            'GdipDisposeImageAttributes',
                                                                                            'GdipSetImageAttributesWrapMode',
                                                                                            'GdipCreateLineBrushFromRectI',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDeletePen',
                                                                                            'GdipSetPenDashStyle',
                                                                                            'GdipSetStringFormatHotkeyPrefix',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipGetDC',
                                                                                            'GdipReleaseDC',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipDrawRectangle',
                                                                                            'GdipDrawRectangleI',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipFillRegion',
                                                                                            'GdipMeasureString',
                                                                                            'GdipDrawImagePointRectI',
                                                                                            'GetUserNameExW',
                                                                                            'Direct3DCreate9',
                                                                                            'timeEndPeriod',
                                                                                            'timeBeginPeriod',
                                                                                            'timeGetTime',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'LresultFromObject',
                                                                                            'AccessibleChildren',
                                                                                            'CreateStdAccessibleProxyW',
                                                                                            'XInputGetState',
                                                                                            'XInputSetState',
                                                                                            'WTSRegisterSessionNotification',
                                                                                            'WTSUnRegisterSessionNotification',
                                                                                            'SLGetWindowsInformationDWORD',
                                                                                            'ScriptBreak',
                                                                                            'ScriptItemize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 435,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 156752,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8e8eeadfa03d31ebc8e00a181bd95404c223594ce15c0871b8861bdc89a81cbf'},
 '8ed1dde2831d3cc57194785d805cbfc7c20dcf3feaf5f171be7b507daa8433f5': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 454560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 454656,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8ed1dde2831d3cc57194785d805cbfc7c20dcf3feaf5f171be7b507daa8433f5'},
 '8ef3a0b2620fff9b616db2e7e77e3a07137748d9c05cb26d6dd946983b06b849': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 296700,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 296960,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8ef3a0b2620fff9b616db2e7e77e3a07137748d9c05cb26d6dd946983b06b849'},
 '8f6554e78cfb6d1d3898dca8d8f14757784a167fec5438ba3e3227fcff9463b8': {'AddressOfEntryPoint': 46976,
                                                                      'DebugRVA': 5184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 139776},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/8f6554e78cfb6d1d3898dca8d8f14757784a167fec5438ba3e3227fcff9463b8'},
 '8f759b877c2adfcb5a18dd58b755a1c0899e00d4d3296aa382138dec89749ba3': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 470604,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 471040,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8f759b877c2adfcb5a18dd58b755a1c0899e00d4d3296aa382138dec89749ba3'},
 '8f904518fd655a1ee57248ebede2ea0a45bc9daf63181692589216ff873d504d': {'AddressOfEntryPoint': 135680,
                                                                      'DebugRVA': 5264,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 28528,
                                                                      'ExportSize': 1614,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitiateShutdownW',
                                                                                      'BDEUI.dll': '?ResumeStatusRefreshing@BuiVolume@@QEAAXXZ',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'USER32.dll': 'DefWindowProcW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'slc.dll': 'SLGetWindowsInformationDWORD'},
                                                                      'ImportedFunctions': ['AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'RegGetValueW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateShutdownW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetCommandLineW',
                                                                                            'CloseHandle',
                                                                                            'CreateMutexW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateFileW',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            'BitBlt',
                                                                                            'ExtTextOutW',
                                                                                            'SetBkColor',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadImageW',
                                                                                            'SetMenuInfo',
                                                                                            'SetMenuItemInfoW',
                                                                                            'DestroyIcon',
                                                                                            'GetIconInfo',
                                                                                            'DrawIconEx',
                                                                                            'CreateIconIndirect',
                                                                                            'LoadStringW',
                                                                                            'ShowWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'SendMessageW',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'MoveWindow',
                                                                                            'GetCursorPos',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'EnableMenuItem',
                                                                                            'TrackPopupMenu',
                                                                                            'PostMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetDC',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'DefWindowProcW',
                                                                                            'memset',
                                                                                            'towupper',
                                                                                            'wcstol',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_vsnwprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memcpy',
                                                                                            'ImageList_Destroy',
                                                                                            'HIMAGELIST_QueryInterface',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            '??1BuiVolume@@QEAA@XZ',
                                                                                            '?Init@BuiVolume@@QEAAJPEAG@Z',
                                                                                            '??0BuiVolume@@QEAA@_N@Z',
                                                                                            '?DeleteVolumeList@BuiVolume@@SAXPEAPEAU_BuiVolumeNode@@@Z',
                                                                                            '?GetAllVolumes@BuiVolume@@SAJPEAPEAU_BuiVolumeNode@@@Z',
                                                                                            '?ResetStatusRefreshing@BuiVolume@@QEAAXXZ',
                                                                                            '?RefreshStatus@BuiVolume@@QEAAJ_N@Z',
                                                                                            '?GetConvertedPercent@BuiVolume@@QEAANXZ',
                                                                                            '?RequiresElevation@BuiVolume@@QEAA_NXZ',
                                                                                            '?BuisCreateElevatedProxyObject@@YAJPEAUHWND__@@PEAPEAUIDispatch@@@Z',
                                                                                            '?BuisCreateProxyObject@@YAJPEAPEAUIDispatch@@@Z',
                                                                                            '?SetProxyObject@BuiVolume@@QEAAXPEAUIDispatch@@@Z',
                                                                                            '?ImplicitPauseConversion@BuiVolume@@QEAAJXZ',
                                                                                            '?ResumeConversion@BuiVolume@@QEAAJXZ',
                                                                                            '?BuisIsHardwareReadyForConversion@@YAJXZ',
                                                                                            '?SuspendStatusRefreshing@BuiVolume@@QEAAXXZ',
                                                                                            '?ResumeStatusRefreshing@BuiVolume@@QEAAXXZ',
                                                                                            'SLGetWindowsInformationDWORD'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 126,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 91032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 8704,
                                                                                       '.rsrc\x00\x00\x00': 91136,
                                                                                       '.text\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8f904518fd655a1ee57248ebede2ea0a45bc9daf63181692589216ff873d504d'},
 '8fc2784ac119e5bd441218c7e43268977c6a5d63697d43ea9a21a929ac3ab76c': {'AddressOfEntryPoint': 28680,
                                                                      'DebugRVA': 16720,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'XENUTIL.SYS': 'XmSpawnThread',
                                                                                      'ntoskrnl.exe': 'IoAcquireRemoveLockEx',
                                                                                      'xevtchn.sys': 'EvtchnSetupDebugCallback'},
                                                                      'ImportedFunctions': ['ExDeleteNPagedLookasideList',
                                                                                            'IofCallDriver',
                                                                                            'KeInitializeEvent',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IoDetachDevice',
                                                                                            'PoSetPowerState',
                                                                                            'InitSafeBootMode',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'KeSetEvent',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmGetPhysicalAddress',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeBugCheckEx',
                                                                                            'IoDeleteDevice',
                                                                                            'IoCreateDevice',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'IoAllocateIrp',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'PoCallDriver',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'EvtchnReleaseDebugCallback',
                                                                                            'EvtchnSetupDebugCallback',
                                                                                            '_XmAssertFail',
                                                                                            '___XenTrace',
                                                                                            'XmThreadWait',
                                                                                            '_XmBug',
                                                                                            'XmKillThread',
                                                                                            'XmFreeMemory',
                                                                                            '_XmAllocateMemory',
                                                                                            '_XmBugCheck',
                                                                                            'XmSpawnThread'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 39,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 8704,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/8fc2784ac119e5bd441218c7e43268977c6a5d63697d43ea9a21a929ac3ab76c'},
 '8fc4dd78f6a1414aeb523bea862a08acedb942e16cb43e823d4196f6a3745a11': {'AddressOfEntryPoint': 339976,
                                                                      'DebugRVA': 315552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortDebugPrint'},
                                                                      'ImportedFunctions': ['StorPortGetLogicalUnit',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortNotification',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortReady',
                                                                                            'StorPortLogError',
                                                                                            'StorPortPauseDevice',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortSetDeviceQueueDepth',
                                                                                            'StorPortBusy',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortDebugPrint',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 309760,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/8fc4dd78f6a1414aeb523bea862a08acedb942e16cb43e823d4196f6a3745a11'},
 '8fe59abc18708967e5a5a0c7d331bcfa3898159b2789572dd695953322914d70': {'AddressOfEntryPoint': 55440,
                                                                      'DebugRVA': 58944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'lstrcpyA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'TrackPopupMenu',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'comdlg32.dll': 'GetSaveFileNameA',
                                                                                      'msvcrt.dll': 'sprintf'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__setusermatherr',
                                                                                            '__dllonexit',
                                                                                            '_strlwr',
                                                                                            '_mbsicmp',
                                                                                            '_purecall',
                                                                                            'qsort',
                                                                                            '_itoa',
                                                                                            'free',
                                                                                            'modf',
                                                                                            'memcmp',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_onexit',
                                                                                            'strcmp',
                                                                                            '_memicmp',
                                                                                            'atoi',
                                                                                            'strrchr',
                                                                                            '_strcmpi',
                                                                                            'strtoul',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            'strchr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'strlen',
                                                                                            'memcpy',
                                                                                            '_stricmp',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_SetImageCount',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'ReadProcessMemory',
                                                                                            'DeleteFileA',
                                                                                            'EnumResourceNamesA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GlobalAlloc',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'GlobalLock',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTimeFormatA',
                                                                                            'CreateFileA',
                                                                                            'GetFileTime',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FormatMessageA',
                                                                                            'GetVersionExA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrlenA',
                                                                                            'GetDateFormatA',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'GlobalUnlock',
                                                                                            'GetTempPathA',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'lstrcpyA',
                                                                                            'GetMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'SetTimer',
                                                                                            'IsDialogMessageA',
                                                                                            'DeferWindowPos',
                                                                                            'TranslateMessage',
                                                                                            'BeginDeferWindowPos',
                                                                                            'PostQuitMessage',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'SetDlgItemInt',
                                                                                            'RegisterClassA',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetWindowPos',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'LoadIconA',
                                                                                            'LoadImageA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'InvalidateRect',
                                                                                            'GetClientRect',
                                                                                            'MoveWindow',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuStringA',
                                                                                            'CheckMenuItem',
                                                                                            'GetCursorPos',
                                                                                            'GetMenu',
                                                                                            'GetClassNameA',
                                                                                            'GetSysColor',
                                                                                            'CloseClipboard',
                                                                                            'GetDC',
                                                                                            'GetSubMenu',
                                                                                            'SetClipboardData',
                                                                                            'EnableWindow',
                                                                                            'MapWindowPoints',
                                                                                            'EmptyClipboard',
                                                                                            'EnableMenuItem',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'EnumChildWindows',
                                                                                            'DestroyWindow',
                                                                                            'GetMenuItemInfoA',
                                                                                            'GetWindowTextA',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'LoadStringA',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'GetFocus',
                                                                                            'EndDeferWindowPos',
                                                                                            'KillTimer',
                                                                                            'TrackPopupMenu',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'FindTextA',
                                                                                            'GetSaveFileNameA',
                                                                                            'RegDeleteKeyA',
                                                                                            'ShellExecuteExA',
                                                                                            'ShellExecuteA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 180,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 10528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 10752,
                                                                                       '.text\x00\x00\x00': 52736},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8fe59abc18708967e5a5a0c7d331bcfa3898159b2789572dd695953322914d70'},
 '8fefab350799a00a43005745bffb8f9bae3d1a8bd6d4861b886b930b0f6112a3': {'AddressOfEntryPoint': 54212,
                                                                      'DebugRVA': 103840,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 114304,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'GetLocaleInfoW',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'GetWindowLongW',
                                                                                      'ole32.dll': 'OleInitialize'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetTickCount',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetFileAttributesW',
                                                                                            'GetNumberFormatW',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileMappingW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'GlobalAlloc',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'MoveFileW',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClassNameW',
                                                                                            'DialogBoxParamW',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'LoadBitmapW',
                                                                                            'LoadIconW',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'IsWindow',
                                                                                            'CopyRect',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadCursorW',
                                                                                            'UpdateWindow',
                                                                                            'CreateWindowExW',
                                                                                            'MapWindowPoints',
                                                                                            'SendDlgItemMessageW',
                                                                                            'FindWindowExW',
                                                                                            'DispatchMessageW',
                                                                                            'wvsprintfW',
                                                                                            'wvsprintfA',
                                                                                            'CharUpperA',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'SetWindowLongW',
                                                                                            'CharUpperW',
                                                                                            'CharToOemBuffW',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'OemToCharBuffA',
                                                                                            'DestroyIcon',
                                                                                            'EndDialog',
                                                                                            'SetFocus',
                                                                                            'SetDlgItemTextW',
                                                                                            'SendMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'GetParent',
                                                                                            'TranslateMessage',
                                                                                            'GetWindowLongW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetSaveFileNameW',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegOpenKeyExW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteExW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CLSIDFromString',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleInitialize',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 170,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 29460,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 95744},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/8fefab350799a00a43005745bffb8f9bae3d1a8bd6d4861b886b930b0f6112a3'},
 '8fff4ea5fc319a00a920005ede04c4eec837259208d1927a6c18cce6d9b38175': {'AddressOfEntryPoint': 45156,
                                                                      'DebugRVA': 33056,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'TDI.SYS': 'TdiMapUserRequest',
                                                                                      'ntoskrnl.exe': 'ExAllocatePoolWithTag'},
                                                                      'ImportedFunctions': ['KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoCreateDevice',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoDeleteDevice',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IofCompleteRequest',
                                                                                            'IoDetachDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'IofCallDriver',
                                                                                            'IoFreeMdl',
                                                                                            'IoAllocateMdl',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'ExFreePoolWithTag',
                                                                                            'KeInitializeTimer',
                                                                                            'KeRemoveQueueDpc',
                                                                                            'KeCancelTimer',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoFreeIrp',
                                                                                            'IoAllocateIrp',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'KeSetTimer',
                                                                                            'swprintf',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'KeBugCheckEx',
                                                                                            'KeInitializeDpc',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'TdiMapUserRequest'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 34,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 27136,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/8fff4ea5fc319a00a920005ede04c4eec837259208d1927a6c18cce6d9b38175'},
 '8ffff484598e90767e96e7fcdfca37c82d1808bb5ea30d281ce8784ee164eb55': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 717100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 717312,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/8ffff484598e90767e96e7fcdfca37c82d1808bb5ea30d281ce8784ee164eb55'},
 '90355b0723ab41d99642fa4bad2ee77ed1cb2a92cb2c1fe45c2f3869727df08c': {'AddressOfEntryPoint': 90212,
                                                                      'DebugRVA': 73808,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'KeBugCheckEx'},
                                                                      'ImportedFunctions': ['ExAllocatePoolWithTag',
                                                                                            'ExFreePoolWithTag',
                                                                                            'RtlInitUnicodeString',
                                                                                            'WmiQueryTraceInformation',
                                                                                            'RtlGetVersion',
                                                                                            'RtlHashUnicodeString',
                                                                                            'ZwDeleteKey',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 8,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 68608,
                                                                                       'INIT\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/90355b0723ab41d99642fa4bad2ee77ed1cb2a92cb2c1fe45c2f3869727df08c'},
 '90428d61c592805fecd4dc0188e144591120c84e3fb89bd012116034a77d5340': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 287816,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 288256,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/90428d61c592805fecd4dc0188e144591120c84e3fb89bd012116034a77d5340'},
 '90457f123fcca3b43ec0ab962e2c186074d37776304d3996c3be1af6912a701c': {'AddressOfEntryPoint': 70080,
                                                                      'DebugRVA': 75424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'CreateFontIndirectA',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'OLEAUT32.dll': 'LoadTypeLib',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'RegisterWindowMessageA',
                                                                                      'comdlg32.dll': 'FindTextA',
                                                                                      'msvcrt.dll': 'strncat',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CreateToolbarEx',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_strlwr',
                                                                                            '_mbsicmp',
                                                                                            'strrchr',
                                                                                            '__C_specific_handler',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memcmp',
                                                                                            'strtoul',
                                                                                            'strcmp',
                                                                                            '_stricmp',
                                                                                            '_memicmp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            'atol',
                                                                                            '_strcmpi',
                                                                                            'qsort',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memcpy',
                                                                                            'strlen',
                                                                                            '_purecall',
                                                                                            '_snprintf',
                                                                                            'atoi',
                                                                                            '_itoa',
                                                                                            'strchr',
                                                                                            'strcpy',
                                                                                            'memset',
                                                                                            'strcat',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'sprintf',
                                                                                            'strncat',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LocalFree',
                                                                                            'GetTempPathA',
                                                                                            'GetStartupInfoA',
                                                                                            'OpenProcess',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeleteFileA',
                                                                                            'GetStdHandle',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'EnumResourceNamesA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FindNextFileA',
                                                                                            'GetFileSize',
                                                                                            'GlobalUnlock',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryExA',
                                                                                            'SetFilePointer',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GlobalAlloc',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GlobalLock',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'SetDlgItemInt',
                                                                                            'BeginPaint',
                                                                                            'GetWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetClientRect',
                                                                                            'DrawFrameControl',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetFocus',
                                                                                            'GetSystemMetrics',
                                                                                            'DeferWindowPos',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowRect',
                                                                                            'EndDialog',
                                                                                            'GetDlgItemInt',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'EndPaint',
                                                                                            'InvalidateRect',
                                                                                            'RegisterClassA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowPlacement',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageA',
                                                                                            'LoadImageA',
                                                                                            'LoadIconA',
                                                                                            'DispatchMessageA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'EndDeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'GetMenu',
                                                                                            'GetCursorPos',
                                                                                            'MoveWindow',
                                                                                            'GetDC',
                                                                                            'CheckMenuItem',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'EnableWindow',
                                                                                            'EnableMenuItem',
                                                                                            'MapWindowPoints',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'SetWindowTextA',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'EnumChildWindows',
                                                                                            'GetMenuItemInfoA',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'TrackPopupMenu',
                                                                                            'PostQuitMessage',
                                                                                            'IsDialogMessageA',
                                                                                            'GetMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetSaveFileNameA',
                                                                                            'FindTextA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'ShellExecuteExA',
                                                                                            'ShellExecuteA',
                                                                                            'DragQueryFileA',
                                                                                            'DragAcceptFiles',
                                                                                            'DragFinish',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'LoadTypeLib'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 191,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 13812,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 67072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/90457f123fcca3b43ec0ab962e2c186074d37776304d3996c3be1af6912a701c'},
 '90546d4bda78b91c8296207505e5d5475c4d350646906b2d6f593391cb34e0e7': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 166712,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 166912,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/90546d4bda78b91c8296207505e5d5475c4d350646906b2d6f593391cb34e0e7'},
 '9065cac7e0a4b70534c12165e2f2d5c6df3e60625addd6a372b539f3efaa49cf': {'AddressOfEntryPoint': 1392640,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 327680,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetSystemInfo',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'SETUPAPI.dll': 'CM_Get_DevNode_Status_Ex',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'SHLWAPI.dll': 'PathIsUNCA',
                                                                                      'USER32.dll': 'ValidateRect',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterA',
                                                                                      'comdlg32.dll': 'GetFileTitleA',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA',
                                                                                      'ole32.dll': 'CoRevokeClassObject'},
                                                                      'ImportedFunctions': ['SetupDiRemoveDevice',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupFindFirstLineA',
                                                                                            'SetupGetStringFieldA',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupCopyOEMInfA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiGetDeviceInfoListDetailA',
                                                                                            'CM_Get_DevNode_Status_Ex',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GlobalFlags',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSize',
                                                                                            'GetThreadLocale',
                                                                                            'DuplicateHandle',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileTime',
                                                                                            'GetTickCount',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'GetACP',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalFindAtomA',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeResource',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAddAtomA',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrcmpA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'FormatMessageA',
                                                                                            'MulDiv',
                                                                                            'SetLastError',
                                                                                            'CreateThread',
                                                                                            'lstrcpyA',
                                                                                            'SetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetVersionExA',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemInfo',
                                                                                            'IsRectEmpty',
                                                                                            'SetRect',
                                                                                            'InvalidateRect',
                                                                                            'InvalidateRgn',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MessageBeep',
                                                                                            'UnregisterClassA',
                                                                                            'DestroyMenu',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'PostThreadMessageA',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpA',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'GetClassLongA',
                                                                                            'GetClassNameA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'SetForegroundWindow',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'PtInRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowLongA',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetWindow',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CopyRect',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'CharUpperA',
                                                                                            'DrawIcon',
                                                                                            'SendMessageA',
                                                                                            'EndDialog',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageA',
                                                                                            'GetCursorPos',
                                                                                            'CharNextA',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetSysColorBrush',
                                                                                            'EndPaint',
                                                                                            'MapWindowPoints',
                                                                                            'BeginPaint',
                                                                                            'IsIconic',
                                                                                            'GetClientRect',
                                                                                            'LoadIconA',
                                                                                            'EnableWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuState',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'ModifyMenuA',
                                                                                            'GetParent',
                                                                                            'GetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'ValidateRect',
                                                                                            'SetMapMode',
                                                                                            'ExtSelectClipRgn',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetMapMode',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'DeleteObject',
                                                                                            'GetFileTitleA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathStripToRootA',
                                                                                            'SHDeleteKeyA',
                                                                                            'PathIsUNCA',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoGetClassObject',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'OleFlushClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRevokeClassObject',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 364,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 882344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 24064,
                                                                                       '.rdata\x00\x00': 114688,
                                                                                       '.rsrc\x00\x00\x00': 882688,
                                                                                       '.text\x00\x00\x00': 320512,
                                                                                       '.virus\x00\x00': 18944},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9065cac7e0a4b70534c12165e2f2d5c6df3e60625addd6a372b539f3efaa49cf'},
 '9127e176fa15d685992b36d6781d79dee5c5994431a021d13f78f3328168cd04': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 409516,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 409600,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9127e176fa15d685992b36d6781d79dee5c5994431a021d13f78f3328168cd04'},
 '928dca2a8beb02fc52cc5e82bf47d7cc7c14f394ecd4d976b75a9d9a24131bb5': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 216808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 217088,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/928dca2a8beb02fc52cc5e82bf47d7cc7c14f394ecd4d976b75a9d9a24131bb5'},
 '933c748e8708d6b463b04b1d9abaecfd32f514a364ba9e216f82940a5e813a70': {'AddressOfEntryPoint': 35260,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'MultiByteToWideChar',
                                                                                      'PSAPI.DLL': 'EnumProcessModules'},
                                                                      'ImportedFunctions': ['GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'EnumProcessModules',
                                                                                            'GetStringTypeW',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'CreateThread',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/933c748e8708d6b463b04b1d9abaecfd32f514a364ba9e216f82940a5e813a70'},
 '93adec15e6e1bffa3fbcac246ffd42eaf34c0d815677e6de2444bd876a2b4680': {'AddressOfEntryPoint': 1073960802,
                                                                      'DebugRVA': 53984,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CreateFileA',
                                                                                      'USER32.dll': 'SetTimer'},
                                                                      'ImportedFunctions': ['WaitForSingleObject',
                                                                                            'OpenProcess',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'ReadFile',
                                                                                            'HeapSize',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleA',
                                                                                            'CreateFileA',
                                                                                            'GetMessageW',
                                                                                            'KillTimer',
                                                                                            'PeekMessageW',
                                                                                            'SetTimer'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 129160,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/93adec15e6e1bffa3fbcac246ffd42eaf34c0d815677e6de2444bd876a2b4680'},
 '93cfce739ea094b074d5e4fe11193ea8ed49946c83ddff480cdf5660a75eb689': {'AddressOfEntryPoint': 60064,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyA',
                                                                                      'COMCTL32.dll': 'CreateToolbarEx',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'lstrcpyA',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'KillTimer',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'comdlg32.dll': 'GetSaveFileNameA',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ole32.dll': 'GetHGlobalFromStream'},
                                                                      'ImportedFunctions': ['VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'CreateToolbarEx',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_strlwr',
                                                                                            '_itoa',
                                                                                            'atoi',
                                                                                            'strcmp',
                                                                                            '_memicmp',
                                                                                            'strchr',
                                                                                            'strrchr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'modf',
                                                                                            'memcmp',
                                                                                            'strtoul',
                                                                                            '_ultoa',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            'strcpy',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_purecall',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            '_strcmpi',
                                                                                            'memcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'OpenProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteProcessMemory',
                                                                                            'GetStartupInfoA',
                                                                                            'FreeLibrary',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'DeleteFileA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'EnumResourceNamesA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'WriteFile',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalUnlock',
                                                                                            'GetProcAddress',
                                                                                            'GlobalLock',
                                                                                            'LoadLibraryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryExA',
                                                                                            'GlobalAlloc',
                                                                                            'GetTempFileNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetTempPathA',
                                                                                            'CreateFileA',
                                                                                            'GetNumberFormatA',
                                                                                            'LocalFree',
                                                                                            'GetFileSize',
                                                                                            'FormatMessageA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'UpdateWindow',
                                                                                            'LoadImageA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetMessageA',
                                                                                            'SetTimer',
                                                                                            'ReleaseCapture',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowPlacement',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'EndDeferWindowPos',
                                                                                            'PostQuitMessage',
                                                                                            'TrackPopupMenu',
                                                                                            'SetCapture',
                                                                                            'RegisterClassA',
                                                                                            'BeginDeferWindowPos',
                                                                                            'CreateWindowExA',
                                                                                            'EndDialog',
                                                                                            'SendMessageA',
                                                                                            'LoadCursorA',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextA',
                                                                                            'ChildWindowFromPoint',
                                                                                            'GetSysColorBrush',
                                                                                            'SetCursor',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowTextA',
                                                                                            'GetClassNameA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'EnumWindows',
                                                                                            'IsWindowVisible',
                                                                                            'RegisterWindowMessageA',
                                                                                            'LoadIconA',
                                                                                            'EnumChildWindows',
                                                                                            'SendMessageTimeoutA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'InvalidateRect',
                                                                                            'SetDlgItemInt',
                                                                                            'SetFocus',
                                                                                            'SetClipboardData',
                                                                                            'EnableWindow',
                                                                                            'EmptyClipboard',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'GetClientRect',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'GetWindowRect',
                                                                                            'ScreenToClient',
                                                                                            'CloseClipboard',
                                                                                            'GetMenuItemCount',
                                                                                            'MoveWindow',
                                                                                            'GetMenuStringA',
                                                                                            'GetSubMenu',
                                                                                            'GetMenu',
                                                                                            'GetCursorPos',
                                                                                            'CheckMenuItem',
                                                                                            'GetDC',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'LoadStringA',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'GetMenuItemInfoA',
                                                                                            'SetWindowPos',
                                                                                            'DestroyIcon',
                                                                                            'DeferWindowPos',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageA',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'ShowWindow',
                                                                                            'LoadAcceleratorsA',
                                                                                            'GetSysColor',
                                                                                            'GetFocus',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'KillTimer',
                                                                                            'PatBlt',
                                                                                            'SelectObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'SetTextColor',
                                                                                            'CreateSolidBrush',
                                                                                            'FindTextA',
                                                                                            'GetSaveFileNameA',
                                                                                            'RegDeleteKeyA',
                                                                                            'ExtractIconExA',
                                                                                            'ShellExecuteA',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitialize',
                                                                                            'GetHGlobalFromStream',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 191,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 13380,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/93cfce739ea094b074d5e4fe11193ea8ed49946c83ddff480cdf5660a75eb689'},
 '9402d333af81d07ddb8c9d90b722fa32a03f2a06e921139e56e4ab4d16e516e0': {'AddressOfEntryPoint': 6144,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'USER32.dll': 'wvsprintfA'},
                                                                      'ImportedFunctions': ['GetModuleFileNameA',
                                                                                            'lstrcatA',
                                                                                            'lstrlenA',
                                                                                            'CopyFileA',
                                                                                            'DeleteFileA',
                                                                                            'lstrcpyA',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapSize',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'wvsprintfA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 612,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 28160},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9402d333af81d07ddb8c9d90b722fa32a03f2a06e921139e56e4ab4d16e516e0'},
 '9441032d923e580327c87c44a1258726267a2c556ad5660b058409df0c37234c': {'AddressOfEntryPoint': 51316,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 145576,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 145920,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9441032d923e580327c87c44a1258726267a2c556ad5660b058409df0c37234c'},
 '945e189c3ddac1d8300925b3faf553e8c3185cee0518e670089ff4d114672bcc': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 235472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 235520,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/945e189c3ddac1d8300925b3faf553e8c3185cee0518e670089ff4d114672bcc'},
 '95106629b0db072f44822dfa15d2f838a7142880f82eb6b6faedca4f12a56a66': {'AddressOfEntryPoint': 1459328,
                                                                      'DebugRVA': 1602464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1597440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetFileTitleW',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'lstrcmpA',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'SafeArrayDestroy',
                                                                                      'PROPSYS.dll': 'PropVariantToUInt32',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathIsUNCW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'UxTheme.dll': 'OpenThemeData',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mmioAdvance',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'gdiplus.dll': 'GdipDrawImageI',
                                                                                      'ole32.dll': 'CoRevokeClassObject',
                                                                                      'oledlg.dll': 'OleUIBusyW'},
                                                                      'ImportedFunctions': ['SetupDiGetClassDevsW',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'mmioClose',
                                                                                            'mmioCreateChunk',
                                                                                            'mmioGetInfo',
                                                                                            'mmioRead',
                                                                                            'mmioSetInfo',
                                                                                            'mmioWrite',
                                                                                            'mmioSeek',
                                                                                            'mmioAscend',
                                                                                            'mmioOpenW',
                                                                                            'mmioDescend',
                                                                                            'mmioAdvance',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'PropVariantToString',
                                                                                            'PropVariantCompareEx',
                                                                                            'PropVariantToUInt32',
                                                                                            'CloseThemeData',
                                                                                            'DrawThemeBackground',
                                                                                            'OpenThemeData',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipCreatePath',
                                                                                            'GdipDeletePath',
                                                                                            'GdipSetPathGradientCenterColor',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipSetPathGradientSurroundColorsWithCount',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipAlloc',
                                                                                            'GdipGetPathGradientPointCount',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipAddPathPie',
                                                                                            'GdipFillPath',
                                                                                            'GdipAddPathEllipse',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipFree',
                                                                                            'GdipCreatePathGradientFromPath',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipDrawImageI',
                                                                                            'ImmDisableIME',
                                                                                            'CreateMutexW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'ReleaseMutex',
                                                                                            'lstrcpyW',
                                                                                            'GetSystemPowerStatus',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileSize',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'SetFilePointer',
                                                                                            'SetThreadPriority',
                                                                                            'GetVersionExA',
                                                                                            'lstrcmpW',
                                                                                            'LoadLibraryA',
                                                                                            'CompareStringW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetModuleHandleA',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentProcessId',
                                                                                            'VirtualProtect',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'SuspendThread',
                                                                                            'IsBadReadPtr',
                                                                                            'CompareStringA',
                                                                                            'GetLocaleInfoW',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetCurrentThread',
                                                                                            'GetTickCount',
                                                                                            'GlobalFlags',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalHandle',
                                                                                            'TlsSetValue',
                                                                                            'LocalReAlloc',
                                                                                            'TlsFree',
                                                                                            'GetThreadLocale',
                                                                                            'FileTimeToSystemTime',
                                                                                            'ReadFile',
                                                                                            'FlushFileBuffers',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'SetEndOfFile',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'VirtualQuery',
                                                                                            'ExitThread',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'HeapReAlloc',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'DeleteFileW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindResourceExW',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetSystemDirectoryW',
                                                                                            'VirtualAlloc',
                                                                                            'FreeLibrary',
                                                                                            'CreateThread',
                                                                                            'CompareFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'CreateDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemInfo',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentThreadId',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'CreateProcessW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetCPInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeResource',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenA',
                                                                                            'IsWow64Process',
                                                                                            'lstrlenW',
                                                                                            'LeaveCriticalSection',
                                                                                            'SearchPathW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeThread',
                                                                                            'SetEvent',
                                                                                            'ResumeThread',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'ResetEvent',
                                                                                            'lstrcmpA',
                                                                                            'GetClassInfoExW',
                                                                                            'CreateWindowExW',
                                                                                            'MessageBoxW',
                                                                                            'GetMenu',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollPos',
                                                                                            'GetScrollRange',
                                                                                            'GetKeyState',
                                                                                            'TrackPopupMenuEx',
                                                                                            'ScrollWindow',
                                                                                            'MapWindowPoints',
                                                                                            'GetMessagePos',
                                                                                            'GetMessageTime',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetTopWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'RemovePropW',
                                                                                            'GetPropW',
                                                                                            'SetPropW',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetClassNameW',
                                                                                            'IsChild',
                                                                                            'WinHelpW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'ClientToScreen',
                                                                                            'GetWindowDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetMenuStringW',
                                                                                            'GetAsyncKeyState',
                                                                                            'DestroyMenu',
                                                                                            'ValidateRect',
                                                                                            'GetMessageW',
                                                                                            'SetRectEmpty',
                                                                                            'WindowFromPoint',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'SetWindowContextHelpId',
                                                                                            'UnregisterClassW',
                                                                                            'ReleaseCapture',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'IsRectEmpty',
                                                                                            'InvalidateRgn',
                                                                                            'SetCapture',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MessageBeep',
                                                                                            'CharUpperW',
                                                                                            'SetParent',
                                                                                            'GetDCEx',
                                                                                            'LockWindowUpdate',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetActiveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'DestroyWindow',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'SetFocus',
                                                                                            'IsWindowEnabled',
                                                                                            'MoveWindow',
                                                                                            'IsWindow',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetClassInfoW',
                                                                                            'GetDlgItem',
                                                                                            'IntersectRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'FindWindowW',
                                                                                            'SetProcessDPIAware',
                                                                                            'SetCursor',
                                                                                            'TrackMouseEvent',
                                                                                            'FrameRect',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'PtInRect',
                                                                                            'ShowScrollBar',
                                                                                            'AdjustWindowRect',
                                                                                            'GetFocus',
                                                                                            'LoadCursorW',
                                                                                            'WindowFromDC',
                                                                                            'OffsetRect',
                                                                                            'ScreenToClient',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'DrawFocusRect',
                                                                                            'InflateRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetShellWindow',
                                                                                            'CallNextHookEx',
                                                                                            'TranslateMessage',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'EnumThreadWindows',
                                                                                            'AttachThreadInput',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'ShowWindow',
                                                                                            'EqualRect',
                                                                                            'FindWindowExW',
                                                                                            'UnionRect',
                                                                                            'MapDialogRect',
                                                                                            'GetWindow',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'DispatchMessageW',
                                                                                            'UpdateWindow',
                                                                                            'GetWindowRect',
                                                                                            'GetSubMenu',
                                                                                            'CreateMenu',
                                                                                            'AppendMenuW',
                                                                                            'ReleaseDC',
                                                                                            'DrawEdge',
                                                                                            'GetSysColorBrush',
                                                                                            'FillRect',
                                                                                            'GetMenuItemID',
                                                                                            'GetDC',
                                                                                            'GetDesktopWindow',
                                                                                            'GetMenuState',
                                                                                            'GrayStringW',
                                                                                            'DestroyIcon',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'DrawIconEx',
                                                                                            'LoadBitmapW',
                                                                                            'SystemParametersInfoW',
                                                                                            'TabbedTextOutW',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemCount',
                                                                                            'GetCursorPos',
                                                                                            'RegisterWindowMessageW',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'SetMenuDefaultItem',
                                                                                            'CreatePopupMenu',
                                                                                            'InvalidateRect',
                                                                                            'GetParent',
                                                                                            'PostMessageW',
                                                                                            'CopyRect',
                                                                                            'RedrawWindow',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'GetCapture',
                                                                                            'GetWindowLongW',
                                                                                            'IsWindowVisible',
                                                                                            'SetWindowLongW',
                                                                                            'SetRect',
                                                                                            'DrawIcon',
                                                                                            'SendMessageW',
                                                                                            'IsIconic',
                                                                                            'GetSystemMetrics',
                                                                                            'GetClientRect',
                                                                                            'LoadIconW',
                                                                                            'EnableWindow',
                                                                                            'GetSysColor',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'DeferWindowPos',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'ModifyMenuW',
                                                                                            'UnregisterClassA',
                                                                                            'RectVisible',
                                                                                            'CreateFontW',
                                                                                            'ExtFloodFill',
                                                                                            'GetMapMode',
                                                                                            'SetDIBColorTable',
                                                                                            'StretchBlt',
                                                                                            'SetBkColor',
                                                                                            'CreateRectRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'CreatePatternBrush',
                                                                                            'CreateBitmap',
                                                                                            'GetObjectW',
                                                                                            'GetClipBox',
                                                                                            'SetTextColor',
                                                                                            'SaveDC',
                                                                                            'RestoreDC',
                                                                                            'SetBkMode',
                                                                                            'Escape',
                                                                                            'Ellipse',
                                                                                            'DeleteObject',
                                                                                            'PtVisible',
                                                                                            'CreateSolidBrush',
                                                                                            'PatBlt',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreatePen',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExcludeClipRect',
                                                                                            'SelectClipRgn',
                                                                                            'SetViewportOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ExtSelectClipRgn',
                                                                                            'GetCharWidthW',
                                                                                            'StretchDIBits',
                                                                                            'GetTextMetricsW',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'SetMapMode',
                                                                                            'CreateDIBSection',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'IntersectClipRect',
                                                                                            'GetBkMode',
                                                                                            'ExtTextOutW',
                                                                                            'GetDeviceCaps',
                                                                                            'SetPixel',
                                                                                            'TextOutW',
                                                                                            'GetPixel',
                                                                                            'GetViewportExtEx',
                                                                                            'GetWindowExtEx',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'AlphaBlend',
                                                                                            'GetFileTitleW',
                                                                                            'OpenPrinterW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'CloseServiceHandle',
                                                                                            'StartServiceW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteExW',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_GetIconSize',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathStripToRootW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFindExtensionW',
                                                                                            'SHStrDupW',
                                                                                            'PathIsUNCW',
                                                                                            'OleUIBusyW',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CLSIDFromString',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'PropVariantClear',
                                                                                            'CoGetClassObject',
                                                                                            'CLSIDFromProgID',
                                                                                            'OleInitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'PropVariantCopy',
                                                                                            'FreePropVariantArray',
                                                                                            'CoFreeUnusedLibrariesEx',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'CoRevokeClassObject',
                                                                                            'SysAllocString',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantChangeType',
                                                                                            'SysFreeString',
                                                                                            'VariantCopy',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroy'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 541,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 6031692,
                                                                      'SectionNames': {'.data\x00\x00\x00': 46592,
                                                                                       '.pdata\x00\x00': 113152,
                                                                                       '.rdata\x00\x00': 516608,
                                                                                       '.rsrc\x00\x00\x00': 6031872,
                                                                                       '.text\x00\x00\x00': 1590272},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/95106629b0db072f44822dfa15d2f838a7142880f82eb6b6faedca4f12a56a66'},
 '95a2bb0edbb1bf20d3a561f2df135e568353eae813ce6c1eed909d04900d416f': {'AddressOfEntryPoint': 69872,
                                                                      'DebugRVA': 75424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'CreateFontIndirectA',
                                                                                      'KERNEL32.dll': 'GlobalLock',
                                                                                      'OLEAUT32.dll': 'LoadTypeLib',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'comdlg32.dll': 'FindTextA',
                                                                                      'msvcrt.dll': 'strncat',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['ImageList_AddMasked',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_Create',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_strlwr',
                                                                                            '_itoa',
                                                                                            '_mbsicmp',
                                                                                            '__C_specific_handler',
                                                                                            'free',
                                                                                            'memcmp',
                                                                                            'strtoul',
                                                                                            'strcmp',
                                                                                            '_stricmp',
                                                                                            '_memicmp',
                                                                                            'strrchr',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            'atol',
                                                                                            'malloc',
                                                                                            'qsort',
                                                                                            '_strcmpi',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memcpy',
                                                                                            '_purecall',
                                                                                            '_snprintf',
                                                                                            'atoi',
                                                                                            'strchr',
                                                                                            'strlen',
                                                                                            'strcpy',
                                                                                            'memset',
                                                                                            'strcat',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'sprintf',
                                                                                            'strncat',
                                                                                            'CloseHandle',
                                                                                            'GetStartupInfoA',
                                                                                            'OpenProcess',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeleteFileA',
                                                                                            'GetStdHandle',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'EnumResourceNamesA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'ReadFile',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FindNextFileA',
                                                                                            'GetFileSize',
                                                                                            'GlobalUnlock',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryExA',
                                                                                            'SetFilePointer',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GlobalAlloc',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GlobalLock',
                                                                                            'OpenClipboard',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'SetDlgItemInt',
                                                                                            'BeginPaint',
                                                                                            'GetWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetClientRect',
                                                                                            'DrawFrameControl',
                                                                                            'GetDlgItemTextA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetSystemMetrics',
                                                                                            'DeferWindowPos',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowRect',
                                                                                            'EndDialog',
                                                                                            'GetDlgItemInt',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'EndPaint',
                                                                                            'InvalidateRect',
                                                                                            'RegisterClassA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowPlacement',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageA',
                                                                                            'LoadImageA',
                                                                                            'LoadIconA',
                                                                                            'DispatchMessageA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'EndDeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'GetMenu',
                                                                                            'GetCursorPos',
                                                                                            'MoveWindow',
                                                                                            'GetDC',
                                                                                            'CheckMenuItem',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'EnableWindow',
                                                                                            'EnableMenuItem',
                                                                                            'MapWindowPoints',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowTextA',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'EnumChildWindows',
                                                                                            'GetMenuItemInfoA',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'GetFocus',
                                                                                            'TrackPopupMenu',
                                                                                            'PostQuitMessage',
                                                                                            'IsDialogMessageA',
                                                                                            'GetMessageA',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetSaveFileNameA',
                                                                                            'FindTextA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'ShellExecuteExA',
                                                                                            'ShellExecuteA',
                                                                                            'DragQueryFileA',
                                                                                            'DragAcceptFiles',
                                                                                            'DragFinish',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'LoadTypeLib'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 191,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 13812,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 67072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/95a2bb0edbb1bf20d3a561f2df135e568353eae813ce6c1eed909d04900d416f'},
 '95e71beb42bf1c7c0ef0f08b57c9ace1b58c07661eebaf41e9b5607f9129afd0': {'AddressOfEntryPoint': 4316,
                                                                      'DebugRVA': 20992,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'HalGetProcessorIdByNtNumber',
                                                                                      'WDFLDR.SYS': 'WdfVersionBindClass',
                                                                                      'ntoskrnl.exe': 'RtlCopyUnicodeString'},
                                                                      'ImportedFunctions': ['ZwQuerySystemInformation',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoQueueWorkItem',
                                                                                            'KeSetSystemGroupAffinityThread',
                                                                                            'IoUninitializeWorkItem',
                                                                                            'ZwPowerInformation',
                                                                                            'KeInitializeDpc',
                                                                                            'KeSetTimerEx',
                                                                                            'EmClientQueryRuleState',
                                                                                            'IoSetDevicePropertyData',
                                                                                            'KeProcessorGroupAffinity',
                                                                                            'IoInitializeWorkItem',
                                                                                            'KeInitializeTimerEx',
                                                                                            'KeCancelTimer',
                                                                                            'IoSizeofWorkItem',
                                                                                            'KeRevertToUserGroupAffinityThread',
                                                                                            'EtwUnregister',
                                                                                            'KeGetProcessorNumberFromIndex',
                                                                                            'IoGetDevicePropertyData',
                                                                                            'EtwRegister',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwWrite',
                                                                                            'MmAllocateContiguousNodeMemory',
                                                                                            'RtlQueryRegistryValuesEx',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeCountSetBitsAffinityEx',
                                                                                            'KeAddProcessorAffinityEx',
                                                                                            'KeAddGroupAffinityEx',
                                                                                            'NtQuerySystemInformationEx',
                                                                                            'KeRemoveProcessorAffinityEx',
                                                                                            'KeInitializeEnumerationContext',
                                                                                            'KeEnumerateNextProcessor',
                                                                                            'KeOrAffinityEx',
                                                                                            'KeQueryActiveProcessorCountEx',
                                                                                            'KeCopyAffinityEx',
                                                                                            'KeCheckProcessorAffinityEx',
                                                                                            'KeCheckProcessorGroupAffinity',
                                                                                            'PoFxActivateComponent',
                                                                                            'KeAddProcessorGroupAffinity',
                                                                                            'ZwClose',
                                                                                            'KeBugCheckEx',
                                                                                            'PoFxStartDevicePowerManagement',
                                                                                            'PoFxRegisterDevice',
                                                                                            'PoFxProcessorNotification',
                                                                                            'KeInitializeEnumerationContextFromGroup',
                                                                                            'HvlGetLpIndexFromApicId',
                                                                                            'HvlQueryActiveProcessors',
                                                                                            'HvlQueryProcessorTopology',
                                                                                            'RtlCompareMemory',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeQueryActiveProcessorAffinity',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'KeInitializeAffinityEx',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'HalGetProcessorIdByNtNumber',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionUnbindClass',
                                                                                            'WdfVersionBindClass'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 60,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 13496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 13312,
                                                                                       'INIT\x00\x00\x00\x00': 5120,
                                                                                       'PAGE\x00\x00\x00\x00': 45056},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/95e71beb42bf1c7c0ef0f08b57c9ace1b58c07661eebaf41e9b5607f9129afd0'},
 '9604293e5c87e7f97b778699e129f19e6f19c9b8a4f307329c6ce1fa31436e65': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 449024,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9604293e5c87e7f97b778699e129f19e6f19c9b8a4f307329c6ce1fa31436e65'},
 '960eef6b284f5f03c8e358419ab7e9694ae0aefd5a923d9a6202a0764361c84c': {'AddressOfEntryPoint': 51316,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 40828,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 40960,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/960eef6b284f5f03c8e358419ab7e9694ae0aefd5a923d9a6202a0764361c84c'},
 '9613f2048b7c2609e03830d5f32c5395fc2181d5e96ca80fd76826488fd00f7c': {'AddressOfEntryPoint': 42556,
                                                                      'DebugRVA': 4816,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'GetModuleHandleA',
                                                                                      'USER32.dll': 'EnumDisplayDevicesA'},
                                                                      'ImportedFunctions': ['DeleteService',
                                                                                            'OpenServiceA',
                                                                                            'CloseServiceHandle',
                                                                                            'CreateServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerExA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'GetModuleFileNameA',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'CreateEventA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateDCA',
                                                                                            'ExtEscape',
                                                                                            'DeleteDC',
                                                                                            'EnumDisplaySettingsA',
                                                                                            'CloseDesktop',
                                                                                            'ChangeDisplaySettingsExA',
                                                                                            'SetThreadDesktop',
                                                                                            'OpenInputDesktop',
                                                                                            'GetThreadDesktop',
                                                                                            'EnumDisplayDevicesA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9613f2048b7c2609e03830d5f32c5395fc2181d5e96ca80fd76826488fd00f7c'},
 '9655a5a20c18928a2d883b1bec10e1d443ec9a152efd4ecf008b88f886b967d4': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9655a5a20c18928a2d883b1bec10e1d443ec9a152efd4ecf008b88f886b967d4'},
 '96676dbb157049f54c35275c960dfb087d1ff119e7709bc5b11074b45e997e07': {'AddressOfEntryPoint': 1086252,
                                                                      'DebugRVA': 2435168,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2433024,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 4320740,
                                                                      'SectionNames': {'.data\x00\x00\x00': 64000,
                                                                                       '.pdata\x00\x00': 126976,
                                                                                       '.rdata\x00\x00': 690688,
                                                                                       '.reloc\x00\x00': 32256,
                                                                                       '.rsrc\x00\x00\x00': 4320768,
                                                                                       '.text\x00\x00\x00': 2428928,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/96676dbb157049f54c35275c960dfb087d1ff119e7709bc5b11074b45e997e07'},
 '9675bd6f09ee4488c0e0d90851d4c5ace8cd4cc7de084d3741028400808530b2': {'AddressOfEntryPoint': 34012,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['GetModuleBaseNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'GetStringTypeW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetLastError',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'lstrcpyW',
                                                                                            'FlsGetValue',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'MessageBoxW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 17920,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 57856},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9675bd6f09ee4488c0e0d90851d4c5ace8cd4cc7de084d3741028400808530b2'},
 '968985829bec5c795c8e9729ef2d3e66a2c5d189f43a4c6c3a2b474c206c1c1e': {'AddressOfEntryPoint': 484736,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 585728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'GetActiveObject',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'SetKeyboardState',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'listen',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'listen',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'waveOutSetVolume',
                                                                                            'timeGetTime',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Remove',
                                                                                            'WNetUseConnectionW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenProcess',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'SetSystemPowerState',
                                                                                            'SetFileTime',
                                                                                            'FindResourceW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadResource',
                                                                                            'FindFirstFileW',
                                                                                            'LockResource',
                                                                                            'FindClose',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'CreatePipe',
                                                                                            'GetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'VirtualFree',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'DeviceIoControl',
                                                                                            'SetErrorMode',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'GetShortPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'Beep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileSize',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'HeapFree',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'PtInRect',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowDC',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateMenu',
                                                                                            'GetSysColor',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetActiveWindow',
                                                                                            'InflateRect',
                                                                                            'CharNextW',
                                                                                            'DrawFocusRect',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CountClipboardFormats',
                                                                                            'CharLowerBuffW',
                                                                                            'UnregisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'FillRect',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'IsCharLowerW',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'GetCursor',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'GetAsyncKeyState',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'CopyRect',
                                                                                            'BeginPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'DrawFrameControl',
                                                                                            'FrameRect',
                                                                                            'RedrawWindow',
                                                                                            'DrawTextW',
                                                                                            'wsprintfW',
                                                                                            'FlashWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'IsZoomed',
                                                                                            'GetCaretPos',
                                                                                            'GetSubMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetMenuStringW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharUpperW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetKeyboardState',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DestroyIcon',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetDC',
                                                                                            'WindowFromPoint',
                                                                                            'SetClipboardData',
                                                                                            'VkKeyScanA',
                                                                                            'EmptyClipboard',
                                                                                            'SetKeyboardState',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CloseFigure',
                                                                                            'SetPixel',
                                                                                            'EndPath',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'ExtCreatePen',
                                                                                            'PolyBezierTo',
                                                                                            'SetViewportOrgEx',
                                                                                            'Rectangle',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'SHFileOperationW',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'GetActiveObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 459,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 14272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.pdata\x00\x00': 19456,
                                                                                       '.rdata\x00\x00': 81920,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 580096},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/968985829bec5c795c8e9729ef2d3e66a2c5d189f43a4c6c3a2b474c206c1c1e'},
 '96cc76f7ef8e8e533d17fe5c34fdd944e1e3e21723b54a1d8ee6df97a2a29346': {'AddressOfEntryPoint': 127596,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 626688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 22580,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17920,
                                                                                       '.pdata\x00\x00': 27136,
                                                                                       '.rdata\x00\x00': 87040,
                                                                                       '.rsrc\x00\x00\x00': 23040,
                                                                                       '.text\x00\x00\x00': 620544},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/96cc76f7ef8e8e533d17fe5c34fdd944e1e3e21723b54a1d8ee6df97a2a29346'},
 '96e5a790c6a549a44ca45fc96f4bbd6d927ff67d782df1232ddac6d9b32274d2': {'AddressOfEntryPoint': 713824,
                                                                      'DebugRVA': 863888,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 860160,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 425908,
                                                                      'SectionNames': {'.data\x00\x00\x00': 75776,
                                                                                       '.pdata\x00\x00': 61440,
                                                                                       '.rdata\x00\x00': 260608,
                                                                                       '.rsrc\x00\x00\x00': 425984,
                                                                                       '.text\x00\x00\x00': 853504},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/96e5a790c6a549a44ca45fc96f4bbd6d927ff67d782df1232ddac6d9b32274d2'},
 '9701f4f2068929dea4185c6c9c9be9f509eac6f53ee15e584f47974a0b96fe14': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 343452,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 343552,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9701f4f2068929dea4185c6c9c9be9f509eac6f53ee15e584f47974a0b96fe14'},
 '9739b574cf04d593fc3984a467a33512fa153c0c8330bb1fd929a8e951956775': {'AddressOfEntryPoint': 90553,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ControlService',
                                                                                      'KERNEL32.dll': 'GetACP',
                                                                                      'SETUPAPI.dll': 'SetupCloseInfFile',
                                                                                      'USER32.dll': 'wsprintfA'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegFlushKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceConfigA',
                                                                                            'OpenServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'StartServiceA',
                                                                                            'CreateServiceA',
                                                                                            'DeleteService',
                                                                                            'QueryServiceStatus',
                                                                                            'ControlService',
                                                                                            'wsprintfA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupInstallServicesFromInfSectionA',
                                                                                            'SetupCloseInfFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'GetOEMCP',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'GetVersionExA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetModuleHandleA',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetFilePointer',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetCPInfo',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetACP'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 92,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 21504,
                                                                                       '.text\x00\x00\x00': 35840},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9739b574cf04d593fc3984a467a33512fa153c0c8330bb1fd929a8e951956775'},
 '977a6d01cd81c628d89f6f0f7df7689a5eb3519b76fc4257a9dfcc2d96cf2878': {'AddressOfEntryPoint': 736810,
                                                                      'DebugRVA': 347168,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 344064,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptHashData',
                                                                                      'KERNEL32.dll': 'RaiseException',
                                                                                      'MSVCP100.dll': '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ',
                                                                                      'MSVCR100.dll': '_acmdln',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathIsDirectoryW',
                                                                                      'USER32.dll': 'EndDialog',
                                                                                      'WININET.dll': 'InternetGetConnectedState',
                                                                                      'WSOCK32.dll': 'ioctlsocket',
                                                                                      'iphlpapi.dll': 'GetRTTAndHopCount'},
                                                                      'ImportedFunctions': ['FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemInfo',
                                                                                            'LocalFree',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetDriveTypeW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'CreateEventA',
                                                                                            'SetEvent',
                                                                                            'CopyFileW',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'FormatMessageW',
                                                                                            'VirtualQuery',
                                                                                            'IsBadWritePtr',
                                                                                            'GetCurrentThread',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryW',
                                                                                            'ReadFile',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'WaitNamedPipeW',
                                                                                            'FreeLibrary',
                                                                                            'lstrlenW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DeleteFileW',
                                                                                            'SetThreadPriority',
                                                                                            'SuspendThread',
                                                                                            'ResumeThread',
                                                                                            'CreateEventW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'OutputDebugStringW',
                                                                                            'OpenMutexW',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RaiseException',
                                                                                            'wvsprintfW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'SendMessageW',
                                                                                            'MessageBoxW',
                                                                                            'InvalidateRect',
                                                                                            'GetDlgItem',
                                                                                            'SetDlgItemTextW',
                                                                                            'DefWindowProcW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'EndDialog',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptDecrypt',
                                                                                            'CryptDeriveKey',
                                                                                            'CryptEncrypt',
                                                                                            'CryptDestroyKey',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'StartServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptHashData',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'ShellExecuteExW',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_N@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ',
                                                                                            '??Bios_base@std@@QEBAPEAXXZ',
                                                                                            '?_Orphan_all@_Container_base0@std@@QEAAXXZ',
                                                                                            '?fail@ios_base@std@@QEBA_NXZ',
                                                                                            '?endl@std@@YAAEAV?$basic_ostream@GU?$char_traits@G@std@@@1@AEAV21@@Z',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@J@Z',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z',
                                                                                            '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                            '?_Xout_of_range@std@@YAXPEBD@Z',
                                                                                            '?_Decref@facet@locale@std@@QEAAPEAV123@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ',
                                                                                            '?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXXZ',
                                                                                            '?always_noconv@codecvt_base@std@@QEBA_NXZ',
                                                                                            '??1_Lockit@std@@QEAA@XZ',
                                                                                            '?_Incref@facet@locale@std@@QEAAXXZ',
                                                                                            '?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z',
                                                                                            '??Bid@locale@std@@QEAA_KXZ',
                                                                                            '?id@?$ctype@G@std@@2V0locale@2@A',
                                                                                            '??0_Lockit@std@@QEAA@H@Z',
                                                                                            '?_Getcat@?$codecvt@GDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z',
                                                                                            '?id@?$codecvt@GDH@std@@2V0locale@2@A',
                                                                                            '?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ',
                                                                                            '?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ',
                                                                                            '?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ',
                                                                                            '?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ',
                                                                                            '?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ',
                                                                                            '?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z',
                                                                                            '?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z',
                                                                                            '?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ',
                                                                                            '?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ',
                                                                                            '?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEBA?AVlocale@2@XZ',
                                                                                            '?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z',
                                                                                            '?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z',
                                                                                            '?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z',
                                                                                            '?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z',
                                                                                            '?widen@?$ctype@G@std@@QEBAGD@Z',
                                                                                            '?getloc@ios_base@std@@QEBA?AVlocale@2@XZ',
                                                                                            '?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z',
                                                                                            '??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ',
                                                                                            '?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@',
                                                                                            '??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ',
                                                                                            '??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z',
                                                                                            '?in@?$codecvt@GDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAG3AEAPEAG@Z',
                                                                                            '?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z',
                                                                                            '?unshift@?$codecvt@GDH@std@@QEBAHAEAHPEAD1AEAPEAD@Z',
                                                                                            '?out@?$codecvt@GDH@std@@QEBAHAEAHPEBG1AEAPEBGPEAD3AEAPEAD@Z',
                                                                                            '??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z',
                                                                                            '??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ',
                                                                                            '??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z',
                                                                                            '??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@',
                                                                                            '?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z',
                                                                                            '?width@ios_base@std@@QEAA_J_J@Z',
                                                                                            '?flags@ios_base@std@@QEBAHXZ',
                                                                                            '?width@ios_base@std@@QEBA_JXZ',
                                                                                            '?good@ios_base@std@@QEBA_NXZ',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z',
                                                                                            '?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z',
                                                                                            '?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@PEAG_J@Z',
                                                                                            '??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z',
                                                                                            '?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z',
                                                                                            '?sync_with_stdio@ios_base@std@@SA_N_N@Z',
                                                                                            '??7ios_base@std@@QEBA_NXZ',
                                                                                            '??1_Locinfo@std@@QEAA@XZ',
                                                                                            '?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z',
                                                                                            '?_Xruntime_error@std@@YAXPEBD@Z',
                                                                                            '?_Getname@_Locinfo@std@@QEBAPEBDXZ',
                                                                                            '??0_Locinfo@std@@QEAA@HPEBD@Z',
                                                                                            '?_Init@locale@std@@CAPEAV_Locimp@12@XZ',
                                                                                            '??0_Locimp@locale@std@@AEAA@_N@Z',
                                                                                            '??1_Locimp@locale@std@@MEAA@XZ',
                                                                                            '??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z',
                                                                                            '?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ',
                                                                                            '?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z',
                                                                                            '?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z',
                                                                                            '?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ',
                                                                                            '?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ',
                                                                                            '?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z',
                                                                                            '?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ',
                                                                                            '?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ',
                                                                                            '?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ',
                                                                                            '?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z',
                                                                                            '?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ',
                                                                                            '?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z',
                                                                                            '??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ',
                                                                                            '??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'vswprintf_s',
                                                                                            'memset',
                                                                                            '??0bad_cast@std@@QEAA@PEBD@Z',
                                                                                            '??1bad_cast@std@@UEAA@XZ',
                                                                                            '??0bad_cast@std@@QEAA@AEBV01@@Z',
                                                                                            'fgetwc',
                                                                                            'fputwc',
                                                                                            'ungetwc',
                                                                                            '_lock_file',
                                                                                            '_unlock_file',
                                                                                            'fflush',
                                                                                            'setvbuf',
                                                                                            'ungetc',
                                                                                            'memcpy_s',
                                                                                            'fgetc',
                                                                                            'fwrite',
                                                                                            'fgetpos',
                                                                                            '_fseeki64',
                                                                                            'fsetpos',
                                                                                            'fclose',
                                                                                            '_beginthreadex',
                                                                                            '_access',
                                                                                            '_waccess',
                                                                                            '_wchmod',
                                                                                            'wcslen',
                                                                                            '_wrmdir',
                                                                                            'wcscmp',
                                                                                            '_wstat64i32',
                                                                                            'strlen',
                                                                                            '_wmkdir',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'towupper',
                                                                                            'towlower',
                                                                                            'wcsrchr',
                                                                                            '_commode',
                                                                                            'free',
                                                                                            'fread',
                                                                                            'malloc',
                                                                                            '_wfopen_s',
                                                                                            'strcmp',
                                                                                            'rewind',
                                                                                            'ftell',
                                                                                            'fseek',
                                                                                            '_wtoi',
                                                                                            'wcstoul',
                                                                                            'isspace',
                                                                                            'wcsncpy_s',
                                                                                            'mbstowcs_s',
                                                                                            'wcstombs_s',
                                                                                            '_itoa_s',
                                                                                            'fopen_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'putc',
                                                                                            '__iob_func',
                                                                                            '_wtof',
                                                                                            'wcsncmp',
                                                                                            '_wtol',
                                                                                            'wcscpy_s',
                                                                                            'wcschr',
                                                                                            'wcsstr',
                                                                                            '_wstrdate_s',
                                                                                            '_wstrtime_s',
                                                                                            '__RTDynamicCast',
                                                                                            'isalpha',
                                                                                            'printf',
                                                                                            '_memicmp',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            'PathIsDirectoryW',
                                                                                            'InternetCheckConnectionW',
                                                                                            'InternetAttemptConnect',
                                                                                            'InternetGetConnectedState',
                                                                                            'gethostbyaddr',
                                                                                            'gethostbyname',
                                                                                            'inet_addr',
                                                                                            'WSACleanup',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'GetRTTAndHopCount'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 330,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 106664,
                                                                      'SectionNames': {'.data\x00\x00\x00': 56320,
                                                                                       '.pdata\x00\x00': 22016,
                                                                                       '.rdata\x00\x00': 177664,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 107008,
                                                                                       '.text\x00\x00\x00': 339968},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/977a6d01cd81c628d89f6f0f7df7689a5eb3519b76fc4257a9dfcc2d96cf2878'},
 '97b39ac28794a7610ed83ad65e28c605397ea7be878109c35228c126d43e2f46': {'AddressOfEntryPoint': 8912,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers',
                                                                                      'lsremora64.dll': 'SetAccessPriv'},
                                                                      'ImportedFunctions': ['SetAccessPriv',
                                                                                            'LoadLibraryA',
                                                                                            'VirtualFreeEx',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcAddress',
                                                                                            'WriteProcessMemory',
                                                                                            'GetLastError',
                                                                                            'VirtualAllocEx',
                                                                                            'GetModuleFileNameA',
                                                                                            'OpenProcess',
                                                                                            'FreeLibrary',
                                                                                            'CreateRemoteThread',
                                                                                            'FlsSetValue',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 15872,
                                                                                       '.text\x00\x00\x00': 44032},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/97b39ac28794a7610ed83ad65e28c605397ea7be878109c35228c126d43e2f46'},
 '99052b0c9c4b47c853e0ef9c20ab4c8f4cf234d16b350b79f7c91dae506ce34e': {'AddressOfEntryPoint': 47868,
                                                                      'DebugRVA': 87376,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 96784,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'GetDateFormatW',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalAlloc',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetDateFormatW',
                                                                                            'wvsprintfA',
                                                                                            'wvsprintfW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClassNameW',
                                                                                            'DialogBoxParamW',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'SetMenu',
                                                                                            'LoadBitmapW',
                                                                                            'LoadIconW',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'CharUpperA',
                                                                                            'FindWindowExW',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharToOemBuffW',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'CharUpperW',
                                                                                            'GetWindowRect',
                                                                                            'DestroyWindow',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteExW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 159,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 23672,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 24064,
                                                                                       '.text\x00\x00\x00': 79872},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/99052b0c9c4b47c853e0ef9c20ab4c8f4cf234d16b350b79f7c91dae506ce34e'},
 '994ae2c68ba7f1ad9c9fbdb6b8c70156af9455baf82a5f6bd474b280a2180c2c': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 434120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 434176,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/994ae2c68ba7f1ad9c9fbdb6b8c70156af9455baf82a5f6bd474b280a2180c2c'},
 '9a0d9c3e6340c7bb8c593b318b8bbbeb98e1cf71a57d7442930bdcdb0345d912': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7301320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 7219200,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9a0d9c3e6340c7bb8c593b318b8bbbeb98e1cf71a57d7442930bdcdb0345d912'},
 '9a29f1de2628a368849c25cd605c4db409b2b8ddcb8287cf45e23926eea49e53': {'AddressOfEntryPoint': 484124,
                                                                      'DebugRVA': 633440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 836864,
                                                                      'ExportSize': 483,
                                                                      'IATRVA': 630784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptDestroyHash',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'USER32.dll': 'CreateDesktopW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'send'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileW',
                                                                                            'RtlCaptureContext',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'SetInformationJobObject',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'SetHandleInformation',
                                                                                            'GetSystemInfo',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'CloseHandle',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetThreadContext',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualProtectEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'FlushInstructionCache',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'RtlPcToFileHeader',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'PeekMessageW',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'PostQuitMessage',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CallMsgFilterW',
                                                                                            'TranslateMessage',
                                                                                            'CreateWindowStationW',
                                                                                            'DispatchMessageW',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'KillTimer',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CreateDesktopW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'ntohs',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'timeGetDevCaps',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 290,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 36864,
                                                                                       '.rdata\x00\x00': 206848,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 626688,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9a29f1de2628a368849c25cd605c4db409b2b8ddcb8287cf45e23926eea49e53'},
 '9a2fe26b7cd6e7bbcb176e2c91893e2061ae9c094a225ed979cfe04c487b8f52': {'AddressOfEntryPoint': 484124,
                                                                      'DebugRVA': 633440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 836864,
                                                                      'ExportSize': 483,
                                                                      'IATRVA': 630784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptDestroyHash',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'USER32.dll': 'CreateDesktopW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'send'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileW',
                                                                                            'RtlCaptureContext',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'SetInformationJobObject',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'SetHandleInformation',
                                                                                            'GetSystemInfo',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'CloseHandle',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetThreadContext',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualProtectEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'FlushInstructionCache',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'RtlPcToFileHeader',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'PeekMessageW',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'PostQuitMessage',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CallMsgFilterW',
                                                                                            'TranslateMessage',
                                                                                            'CreateWindowStationW',
                                                                                            'DispatchMessageW',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'KillTimer',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CreateDesktopW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'ntohs',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'timeGetDevCaps',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 290,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 36864,
                                                                                       '.rdata\x00\x00': 206848,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 626688,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9a2fe26b7cd6e7bbcb176e2c91893e2061ae9c094a225ed979cfe04c487b8f52'},
 '9a51eeddcba8cabab631b00ac3f324dd4e1c0b330e06ce6a79c724feb5118bb5': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3735864,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3736064,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9a51eeddcba8cabab631b00ac3f324dd4e1c0b330e06ce6a79c724feb5118bb5'},
 '9a989717d12a3027343c842b2d72c023da7099d97639cfbd39041c1dfd0308a0': {'AddressOfEntryPoint': 1524529,
                                                                      'DebugRVA': 685848,
                                                                      'DebugSize': 56,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 785812,
                                                                      'ExportSize': 89,
                                                                      'IATRVA': 688128,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'DeregisterEventSource',
                                                                                      'CRYPT32.dll': 'CryptMsgClose',
                                                                                      'CRYPTUI.dll': 'CryptUIDlgViewCertificateW',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'OLEAUT32.dll': 'LoadTypeLib',
                                                                                      'SHELL32.dll': 'DragAcceptFiles',
                                                                                      'SHLWAPI.dll': 'SHCreateStreamOnFileW',
                                                                                      'USER32.dll': 'LoadImageW',
                                                                                      'UxTheme.dll': 'DrawThemeBackground',
                                                                                      'dwmapi.dll': 'DwmUpdateThumbnailProperties',
                                                                                      'gdiplus.dll': 'GdipPathIterNextSubpath',
                                                                                      'msvcrt.dll': 'fmod',
                                                                                      'ntdll.dll': 'WinSqmIsOptedIn',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'sfc_os.dll': 'SfcIsFileProtected',
                                                                                      'urlmon.dll': 'CreateURLMoniker'},
                                                                      'ImportedFunctions': ['EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventWrite',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'IsTextUnicode',
                                                                                            'RegQueryValueExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'RegDeleteKeyW',
                                                                                            'CryptGetHashParam',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'EventEnabled',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'Sleep',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetTickCount',
                                                                                            'DeleteFileW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'QueryDepthSList',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenThread',
                                                                                            'GetModuleHandleW',
                                                                                            'TlsSetValue',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CompareStringOrdinal',
                                                                                            'CreateFileW',
                                                                                            'GetFileSizeEx',
                                                                                            'ReadFile',
                                                                                            'lstrcmpiW',
                                                                                            'CopyFileW',
                                                                                            'WriteFile',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateMutexW',
                                                                                            'GetThreadPreferredUILanguages',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrcmpW',
                                                                                            'SetFileAttributesW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'SetFilePointer',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CreateDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'SearchPathW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ResetEvent',
                                                                                            'TlsGetValue',
                                                                                            'GlobalFree',
                                                                                            'SetFilePointerEx',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'FindResourceExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'GetStartupInfoW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'TlsAlloc',
                                                                                            'CompareStringW',
                                                                                            'HeapSetInformation',
                                                                                            'SetErrorMode',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineW',
                                                                                            'lstrlenW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDynamicTimeZoneInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SetVolumeLabelW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetLogicalDrives',
                                                                                            'GetVolumeInformationW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'QueueUserAPC',
                                                                                            'InterlockedFlushSList',
                                                                                            'InitializeSListHead',
                                                                                            'GetFileSize',
                                                                                            'OutputDebugStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'RaiseException',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetSystemPowerStatus',
                                                                                            'GetSystemInfo',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetComputerNameW',
                                                                                            'CompareFileTime',
                                                                                            'GetFileAttributesExW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteAtom',
                                                                                            'GetTickCount64',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'TlsFree',
                                                                                            'CancelWaitableTimer',
                                                                                            'SetWaitableTimer',
                                                                                            'CreateWaitableTimerW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'RegLoadMUIStringW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetFileTime',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'FormatMessageW',
                                                                                            'MulDiv',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetClipBox',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'SetLayout',
                                                                                            'CreateDIBSection',
                                                                                            'CreateFontIndirectW',
                                                                                            'GdiGetBatchLimit',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetWindowOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetStretchBltMode',
                                                                                            'StretchBlt',
                                                                                            'RestoreDC',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetPath',
                                                                                            'ExtTextOutW',
                                                                                            'SetBkColor',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDIBits',
                                                                                            'GetObjectW',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'SaveDC',
                                                                                            'LineDDA',
                                                                                            'GetTextExtentExPointW',
                                                                                            'SetTextColor',
                                                                                            'GdiAlphaBlend',
                                                                                            'SetBkMode',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'CharNextW',
                                                                                            'CharPrevW',
                                                                                            'KillTimer',
                                                                                            'DestroyIcon',
                                                                                            'GetShellWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'CharUpperW',
                                                                                            'RegisterPowerSettingNotification',
                                                                                            'SetWinEventHook',
                                                                                            'CloseDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'CharUpperBuffW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'SendMessageW',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'FindWindowW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'InsertMenuItemW',
                                                                                            'SetRectEmpty',
                                                                                            'MessageBeep',
                                                                                            'OpenInputDesktop',
                                                                                            'GetThreadDesktop',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'PostMessageW',
                                                                                            'UnregisterPowerSettingNotification',
                                                                                            'InflateRect',
                                                                                            'DrawTextExW',
                                                                                            'GetIconInfo',
                                                                                            'SwitchToThisWindow',
                                                                                            'PtInRect',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'GetCursorPos',
                                                                                            'GetForegroundWindow',
                                                                                            'SetWindowPos',
                                                                                            'SetTimer',
                                                                                            'OffsetRect',
                                                                                            'GetWindowRect',
                                                                                            'ScreenToClient',
                                                                                            'SetFocus',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'UnhookWinEvent',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetWindowLongW',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'RemoveMenu',
                                                                                            'DestroyMenu',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindow',
                                                                                            'GetMenuItemCount',
                                                                                            'DeleteMenu',
                                                                                            'SetRect',
                                                                                            'FillRect',
                                                                                            'GetParent',
                                                                                            'BeginPaint',
                                                                                            'MapWindowPoints',
                                                                                            'EndPaint',
                                                                                            'RemovePropW',
                                                                                            'GetPropW',
                                                                                            'SetPropW',
                                                                                            'DefWindowProcW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            'CreateDialogParamW',
                                                                                            'GetKeyState',
                                                                                            'GetDoubleClickTime',
                                                                                            'UpdateLayeredWindow',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'GetFocus',
                                                                                            'RedrawWindow',
                                                                                            'GetMessagePos',
                                                                                            'SetCursor',
                                                                                            'IsIconic',
                                                                                            'NotifyWinEvent',
                                                                                            'GetMessageTime',
                                                                                            'GetKeyboardState',
                                                                                            'RegisterHotKey',
                                                                                            'SetParent',
                                                                                            'SetWindowLongPtrW',
                                                                                            'MonitorFromPoint',
                                                                                            'IntersectRect',
                                                                                            'IsWindowVisible',
                                                                                            'IsHungAppWindow',
                                                                                            'GetWindowTextW',
                                                                                            'UnregisterHotKey',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetSysColor',
                                                                                            'SystemParametersInfoW',
                                                                                            'CheckMenuItem',
                                                                                            'TrackPopupMenu',
                                                                                            'EnumDisplayMonitors',
                                                                                            'MonitorFromWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'CloseGestureInfoHandle',
                                                                                            'PrintWindow',
                                                                                            'CopyRect',
                                                                                            'RegisterShellHookWindow',
                                                                                            'DeregisterShellHookWindow',
                                                                                            'GetWindowInfo',
                                                                                            'IsDialogMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'EqualRect',
                                                                                            'SetActiveWindow',
                                                                                            'IsChild',
                                                                                            'LoadIconW',
                                                                                            'AppendMenuW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'CreatePopupMenu',
                                                                                            'SetWindowTextW',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'GetAsyncKeyState',
                                                                                            'DrawFrameControl',
                                                                                            'LoadImageW',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'exp',
                                                                                            'memcmp',
                                                                                            'sqrt',
                                                                                            'ceil',
                                                                                            'floor',
                                                                                            'sin',
                                                                                            'cos',
                                                                                            '_CxxThrowException',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'cosf',
                                                                                            'sinf',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'free',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'memmove',
                                                                                            'malloc',
                                                                                            'wcsspn',
                                                                                            'wcstok',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            'realloc',
                                                                                            '_purecall',
                                                                                            '_open',
                                                                                            '_read',
                                                                                            '_write',
                                                                                            '_close',
                                                                                            '_lseek',
                                                                                            'strtok',
                                                                                            'strrchr',
                                                                                            'bsearch',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_wcsicmp',
                                                                                            '_itow_s',
                                                                                            '_wtof',
                                                                                            '_wtol',
                                                                                            'wcsrchr',
                                                                                            'wcschr',
                                                                                            'iswalpha',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            'wcsstr',
                                                                                            'fmod',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmSetDWORD',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlIpv6AddressToStringExW',
                                                                                            'RtlIpv4AddressToStringExW',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'CoCreateGuid',
                                                                                            'ReleaseStgMedium',
                                                                                            'PropVariantClear',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateBindCtx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromProgID',
                                                                                            'GetHGlobalFromStream',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CLSIDFromString',
                                                                                            'CoInitialize',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'VariantCopy',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'SafeArrayCreateVector',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLibEx',
                                                                                            'CreateErrorInfo',
                                                                                            'GetErrorInfo',
                                                                                            'LoadTypeLib',
                                                                                            'GdipSaveImageToStream',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCreateHatchBrush',
                                                                                            'GdipSetTextureTransform',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipCreateTexture2',
                                                                                            'GdipSetPathGradientGammaCorrection',
                                                                                            'GdipSetPathGradientLinearBlend',
                                                                                            'GdipSetPathGradientSigmaBlend',
                                                                                            'GdipSetPathGradientSurroundColorsWithCount',
                                                                                            'GdipSetPathGradientCenterColor',
                                                                                            'GdipSetPathGradientWrapMode',
                                                                                            'GdipCreatePathGradientFromPath',
                                                                                            'GdipSetPathGradientFocusScales',
                                                                                            'GdipSetPathGradientCenterPoint',
                                                                                            'GdipSetPathGradientPresetBlend',
                                                                                            'GdipMultiplyLineTransform',
                                                                                            'GdipSetLineLinearBlend',
                                                                                            'GdipSetLineSigmaBlend',
                                                                                            'GdipSetLineGammaCorrection',
                                                                                            'GdipCreateLineBrush',
                                                                                            'GdipSetSolidFillColor',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipSetLinePresetBlend',
                                                                                            'GdipFillPath',
                                                                                            'GdipDeletePathIter',
                                                                                            'GdipDeleteCustomLineCap',
                                                                                            'GdipSetPenMode',
                                                                                            'GdipSetPenCustomEndCap',
                                                                                            'GdipSetPenCustomStartCap',
                                                                                            'GdipSetCustomLineCapStrokeCaps',
                                                                                            'GdipCreateCustomLineCap',
                                                                                            'GdipAddPathLine2',
                                                                                            'GdipStartPathFigure',
                                                                                            'GdipSetPenEndCap',
                                                                                            'GdipSetPenStartCap',
                                                                                            'GdipSetPenCompoundArray',
                                                                                            'GdipSetPenDashCap197819',
                                                                                            'GdipSetPenDashArray',
                                                                                            'GdipSetPenMiterLimit',
                                                                                            'GdipSetPenLineJoin',
                                                                                            'GdipClonePen',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipCreateMatrix',
                                                                                            'GdipDeleteMatrix',
                                                                                            'GdipCreateMatrix2',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipSetStringFormatFlags',
                                                                                            'GdipDrawString',
                                                                                            'GdipSetWorldTransform',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipSetPenDashStyle',
                                                                                            'GdipDrawRectangle',
                                                                                            'GdipSetPenColor',
                                                                                            'GdipDeletePen',
                                                                                            'GdipSaveGraphics',
                                                                                            'GdipTranslateWorldTransform',
                                                                                            'GdipIsVisibleRect',
                                                                                            'GdipCreateRegion',
                                                                                            'GdipGetClip',
                                                                                            'GdipSetClipRect',
                                                                                            'GdipCreateImageAttributes',
                                                                                            'GdipSetImageAttributesColorMatrix',
                                                                                            'GdipDrawImageRectRect',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipSetClipRegion',
                                                                                            'GdipRestoreGraphics',
                                                                                            'GdipDisposeImageAttributes',
                                                                                            'GdipDeleteRegion',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipSetPixelOffsetMode',
                                                                                            'GdipDrawImageRectRectI',
                                                                                            'GdipDrawRectangleI',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipAddPathLine',
                                                                                            'GdipLoadImageFromStream',
                                                                                            'GdipLoadImageFromStreamICM',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipSetImageAttributesColorKeys',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipFillRectangle',
                                                                                            'GdipImageRotateFlip',
                                                                                            'GdipCreateBitmapFromHICON',
                                                                                            'GdipGetImageEncodersSize',
                                                                                            'GdipGetImageEncoders',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipGetPointCount',
                                                                                            'GdipGetPathTypes',
                                                                                            'GdipGetPathPoints',
                                                                                            'GdipRecordMetafile',
                                                                                            'GdipDrawLine',
                                                                                            'GdipImageGetFrameCount',
                                                                                            'GdipGetPropertyItemSize',
                                                                                            'GdipGetPropertyItem',
                                                                                            'GdipLoadImageFromFileICM',
                                                                                            'GdipGetImageHorizontalResolution',
                                                                                            'GdipGetImageVerticalResolution',
                                                                                            'GdipImageSelectActiveFrame',
                                                                                            'GdipGetImageRawFormat',
                                                                                            'GdipSetMatrixElements',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipSetPageUnit',
                                                                                            'GdipResetWorldTransform',
                                                                                            'GdipGetInterpolationMode',
                                                                                            'GdipGetCompositingQuality',
                                                                                            'GdipSetCompositingQuality',
                                                                                            'GdipGetCompositingMode',
                                                                                            'GdipSetCompositingMode',
                                                                                            'GdipCreateFromHWND',
                                                                                            'GdipGetVisibleClipBoundsI',
                                                                                            'GdipGetDC',
                                                                                            'GdipBitmapSetResolution',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreatePath',
                                                                                            'GdipAddPathRectangleI',
                                                                                            'GdipSetClipHrgn',
                                                                                            'GdipSetClipRectI',
                                                                                            'GdipCreateFontFamilyFromName',
                                                                                            'GdipCreateFont',
                                                                                            'GdipDeleteFontFamily',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipReleaseDC',
                                                                                            'GdipDeletePath',
                                                                                            'GdipGetPenMode',
                                                                                            'GdipGetPenWidth',
                                                                                            'GdipClonePath',
                                                                                            'GdipFlattenPath',
                                                                                            'GdipIsVisiblePathPoint',
                                                                                            'GdipWidenPath',
                                                                                            'GdipDrawPath',
                                                                                            'GdipGetPenColor',
                                                                                            'GdipTransformPath',
                                                                                            'GdipSetClipPath',
                                                                                            'GdipGetImageBounds',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipMeasureString',
                                                                                            'GdipResetPath',
                                                                                            'GdipClosePathFigure',
                                                                                            'GdipAddPathBezier',
                                                                                            'GdipAddPathPath',
                                                                                            'GdipAddPathEllipse',
                                                                                            'GdipAddPathRectangle',
                                                                                            'GdipCreatePathIter',
                                                                                            'GdipPathIterNextSubpath',
                                                                                            'UrlUnescapeW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathCombineW',
                                                                                            'PathIsRelativeW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsURLW',
                                                                                            'PathCanonicalizeW',
                                                                                            'UrlEscapeW',
                                                                                            'StrStrNIW',
                                                                                            'StrStrNW',
                                                                                            'PathIsPrefixW',
                                                                                            'PathCommonPrefixW',
                                                                                            'StrToIntExW',
                                                                                            'PathGetArgsW',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'PathGetDriveNumberW',
                                                                                            'AssocQueryStringW',
                                                                                            'UrlIsW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathCreateFromUrlW',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'SHCreateItemWithParent',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHBindToObject',
                                                                                            'SHCreateItemFromIDList',
                                                                                            'SHParseDisplayName',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFolderPathAndSubDirW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'DragQueryFileW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'ShellExecuteExW',
                                                                                            'DragFinish',
                                                                                            'DragQueryPoint',
                                                                                            'DragAcceptFiles',
                                                                                            'URLOpenBlockingStreamW',
                                                                                            'CoInternetGetSession',
                                                                                            'CreateURLMoniker',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CryptQueryObject',
                                                                                            'CryptMsgGetParam',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertGetNameStringW',
                                                                                            'CryptDecodeObject',
                                                                                            'CryptMsgClose',
                                                                                            'SfcIsFileProtected',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'DwmUpdateThumbnailProperties',
                                                                                            'CryptUIDlgViewCertificateW',
                                                                                            'SetWindowThemeAttribute',
                                                                                            'CloseThemeData',
                                                                                            'DrawThemeTextEx',
                                                                                            'IsThemeActive',
                                                                                            'OpenThemeData',
                                                                                            'DrawThemeBackground'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 649,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 517160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12800,
                                                                                       '.pdata\x00\x00': 47616,
                                                                                       '.rdata\x00\x00': 202752,
                                                                                       '.reloc\x00\x00': 38400,
                                                                                       '.rsrc\x00\x00\x00': 517632,
                                                                                       '.text\x00\x00\x00': 681984,
                                                                                       'hazmrie\x00': 0},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9a989717d12a3027343c842b2d72c023da7099d97639cfbd39041c1dfd0308a0'},
 '9abf6f9bd611fc58a61fe989df1a4a20eb670d8b1bc6a300bfbc76d1c5d9d193': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3492,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9abf6f9bd611fc58a61fe989df1a4a20eb670d8b1bc6a300bfbc76d1c5d9d193'},
 '9ae1fb3abafca43545340aca63a736c4d0fab1fd8d4fbbd9f212f4e228220077': {'AddressOfEntryPoint': 8760,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 58400,
                                                                      'ExportSize': 85,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers'},
                                                                      'ImportedFunctions': ['GetExitCodeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateRemoteThread',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'WriteProcessMemory',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSize',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9ae1fb3abafca43545340aca63a736c4d0fab1fd8d4fbbd9f212f4e228220077'},
 '9b0ad8cb11583974eac461d138ce1c344b4d0238e70713ee79768186ff00903d': {'AddressOfEntryPoint': 49252,
                                                                      'DebugRVA': 33056,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'TDI.SYS': 'TdiMapUserRequest',
                                                                                      'ntoskrnl.exe': 'ExAllocatePoolWithTag'},
                                                                      'ImportedFunctions': ['KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoCreateDevice',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoDeleteDevice',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IofCompleteRequest',
                                                                                            'IoDetachDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'IofCallDriver',
                                                                                            'IoFreeMdl',
                                                                                            'IoAllocateMdl',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'ExFreePoolWithTag',
                                                                                            'KeInitializeTimer',
                                                                                            'KeRemoveQueueDpc',
                                                                                            'KeCancelTimer',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoFreeIrp',
                                                                                            'IoAllocateIrp',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'KeSetTimer',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'swprintf',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'KeBugCheckEx',
                                                                                            'KeInitializeDpc',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'TdiMapUserRequest'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 34,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 27136,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/9b0ad8cb11583974eac461d138ce1c344b4d0238e70713ee79768186ff00903d'},
 '9b2ef34f6784d0d375f45e7ab97341f861e7943f7dc7320db4ded27f237969be': {'AddressOfEntryPoint': 5220,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'CloseHandle',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetCommandLineW',
                                                                                            'TerminateProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'SizeofResource',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 44,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 185072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 185344,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9b2ef34f6784d0d375f45e7ab97341f861e7943f7dc7320db4ded27f237969be'},
 '9b38ba90836003bf5cc67f75769be3991227fe5ef58b367a4a2bf0ea0d1556f3': {'AddressOfEntryPoint': 4159,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualAlloc'},
                                                                      'ImportedFunctions': ['ExitVDM',
                                                                                            'OpenMutexW',
                                                                                            'VirtualAlloc'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 3,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.edata\x00\x00': 32256,
                                                                                       '.idata\x00\x00': 20480,
                                                                                       '.rdata\x00\x00': 51200,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 57856},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9b38ba90836003bf5cc67f75769be3991227fe5ef58b367a4a2bf0ea0d1556f3'},
 '9b53be1f8b1a550ec9a8d99af5e6ce6f3adcbfe6747a6020b2ffb0db005e482a': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 785920,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9b53be1f8b1a550ec9a8d99af5e6ce6f3adcbfe6747a6020b2ffb0db005e482a'},
 '9b53c66e950f469105cee4b5c653e3f50e1650e5ac9616a9df7a6a8ff87e3be8': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 77824,
                                                                      'ExportSize': 12984088,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetVolumeInformationA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileA',
                                                                                            '_lclose',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetProcAddress',
                                                                                            '_llseek',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CompareStringA',
                                                                                            'LoadLibraryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetPrivateProfileIntA',
                                                                                            '_lopen',
                                                                                            'GetShortPathNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WriteFile',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVersionExA',
                                                                                            'SetFilePointer',
                                                                                            'GetVersion',
                                                                                            'FreeResource',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CreateDirectoryA',
                                                                                            'TerminateThread',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'LockResource',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetEvent',
                                                                                            'ReadFile',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetDeviceCaps',
                                                                                            'CallWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextA',
                                                                                            'DispatchMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDC',
                                                                                            'SetWindowPos',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'EndDialog',
                                                                                            'CharNextA',
                                                                                            'GetDesktopWindow',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'LoadStringA',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12985100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 12985344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9b53c66e950f469105cee4b5c653e3f50e1650e5ac9616a9df7a6a8ff87e3be8'},
 '9b68998fde3e1b362ddede54bd76a6288f8c4286b5ee8a2761a5e3acfd21a022': {'AddressOfEntryPoint': 38320,
                                                                      'DebugRVA': 5392,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'LocalFileTimeToFileTime',
                                                                                      'USER32.dll': 'ReleaseDC',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__set_app_type',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'FreeSid',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoA',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetCurrentProcessId',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpyA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetShortPathNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcmpiA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'lstrcatA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'GetTickCount',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'LoadLibraryExA',
                                                                                            'lstrcpynA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FormatMessageA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'TerminateThread',
                                                                                            'GetDriveTypeA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDC',
                                                                                            'GetWindowRect',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBeep',
                                                                                            'SetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'GetDesktopWindow',
                                                                                            'EndDialog',
                                                                                            'ExitWindowsEx',
                                                                                            'wsprintfA',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'CharPrevA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'CallWindowProcA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendMessageA',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 149,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 136116,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 135680,
                                                                                       '.text\x00\x00\x00': 64512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9b68998fde3e1b362ddede54bd76a6288f8c4286b5ee8a2761a5e3acfd21a022'},
 '9b72465f522eadbbbef1ad0d4b44ea6d4f5d554a157a2b8dd779172b7454be18': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3002924,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3003392,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9b72465f522eadbbbef1ad0d4b44ea6d4f5d554a157a2b8dd779172b7454be18'},
 '9b88a79837067b2b1495e54df55218df8a6a55c4898b3d37bf56bdc0b9d5bb1d': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 625436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 625664,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9b88a79837067b2b1495e54df55218df8a6a55c4898b3d37bf56bdc0b9d5bb1d'},
 '9bd02fa85c6ca4ecb91508e87f476d3acaadce24c0c9c8a0a6e10fd03d71a37a': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 282204,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 282624,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9bd02fa85c6ca4ecb91508e87f476d3acaadce24c0c9c8a0a6e10fd03d71a37a'},
 '9c0f5c51f85733cb4d5b47c467ce9f787f8d6f446a03fd6317445d86a73d1b38': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwWriteFile',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwResumeThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetValueKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'HeapAlloc',
                                                                                            'GetVersion',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9c0f5c51f85733cb4d5b47c467ce9f787f8d6f446a03fd6317445d86a73d1b38'},
 '9c0f7d20a3b7b9a3266f3a9f1ea8857d416a0af23e81029a7db549e8df3217c4': {'AddressOfEntryPoint': 6992,
                                                                      'DebugRVA': 37632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorSacl',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'USER32.dll': 'GetMessageW'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'lstrlenW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcatW',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetSecurityDescriptorSacl'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 29696},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9c0f7d20a3b7b9a3266f3a9f1ea8857d416a0af23e81029a7db549e8df3217c4'},
 '9c790e52f85186e54147c1bc6dd5aa324107979d88f482b26514dcb3a280dd68': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 388604,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 388608,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9c790e52f85186e54147c1bc6dd5aa324107979d88f482b26514dcb3a280dd68'},
 '9d05f358cac118b158f311719670427ff0746133e37f07972db6a2d7f1e5e27f': {'AddressOfEntryPoint': 36964,
                                                                      'DebugRVA': 24768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'PCIIDEX.SYS': 'AtaPortWriteRegisterUlong'},
                                                                      'ImportedFunctions': ['AtaPortCopyMemory',
                                                                                            'AtaPortGetPhysicalAddress',
                                                                                            'AtaPortReadRegisterUlong',
                                                                                            'AtaPortInitializeEx',
                                                                                            'AtaPortDeviceStateChange',
                                                                                            'AtaPortEtwTraceLog',
                                                                                            'AtaPortRegistryFreeBuffer',
                                                                                            'AtaPortGetBusData',
                                                                                            'AtaPortRegistryRead',
                                                                                            'AtaPortRequestCallback',
                                                                                            'AtaPortStallExecution',
                                                                                            'AtaPortGetUnCachedExtension',
                                                                                            'AtaPortReadRegisterUchar',
                                                                                            'AtaPortBuildRequestSenseIrb',
                                                                                            'AtaPortReleaseRequestSenseIrb',
                                                                                            'AtaPortCompleteRequest',
                                                                                            'AtaPortNotification',
                                                                                            'AtaPortGetDeviceBase',
                                                                                            'AtaPortGetScatterGatherList',
                                                                                            'AtaPortRegistryAllocateBuffer',
                                                                                            'AtaPortWriteRegisterUlong',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 22,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 17408,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/9d05f358cac118b158f311719670427ff0746133e37f07972db6a2d7f1e5e27f'},
 '9dc0a77f4a26df00b6f2578826852b98266dd7c6ceafaf498415337873bd9aee': {'AddressOfEntryPoint': 113440,
                                                                      'DebugRVA': 182672,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_AddMasked',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'WriteConsoleW',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHCreateDirectoryExW',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyW',
                                                                                      'USER32.dll': 'GetParent',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'imagehlp.dll': 'BindImageEx',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'BindImageEx',
                                                                                            'UuidCreate',
                                                                                            'GetTempPathW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetTempFileNameW',
                                                                                            'LoadLibraryW',
                                                                                            'LockResource',
                                                                                            'GetProcAddress',
                                                                                            'SetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateThread',
                                                                                            'FindResourceExW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetVersionExW',
                                                                                            'Process32FirstW',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'lstrcmpiW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Process32NextW',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateMutexW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'OpenMutexW',
                                                                                            'GetLastError',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetDriveTypeW',
                                                                                            'LocalFree',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateEventW',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileMappingW',
                                                                                            'GetSystemInfo',
                                                                                            'MoveFileExW',
                                                                                            'FlushInstructionCache',
                                                                                            'lstrcpyW',
                                                                                            'DuplicateHandle',
                                                                                            'MultiByteToWideChar',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'InitializeCriticalSection',
                                                                                            'FindResourceW',
                                                                                            'LCMapStringA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'UnmapViewOfFile',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'GetModuleHandleA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlCaptureContext',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetThreadLocale',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetACP',
                                                                                            'GetVersionExA',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'CompareStringW',
                                                                                            'FindClose',
                                                                                            'CopyFileW',
                                                                                            'FindNextFileW',
                                                                                            'GetFileSize',
                                                                                            'LoadLibraryA',
                                                                                            'SetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcmpW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'lstrlenA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FindFirstFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'RaiseException',
                                                                                            'ReadFile',
                                                                                            'SetLastError',
                                                                                            'MulDiv',
                                                                                            'WaitForMultipleObjects',
                                                                                            'MapViewOfFile',
                                                                                            'LoadLibraryExW',
                                                                                            'lstrlenW',
                                                                                            'WaitForSingleObject',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'CreateFileA',
                                                                                            'GetStringTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateWindowExW',
                                                                                            'SetFocus',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'UnregisterClassA',
                                                                                            'GetDC',
                                                                                            'SetWindowLongW',
                                                                                            'ShowWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'SetTimer',
                                                                                            'GetClientRect',
                                                                                            'DispatchMessageW',
                                                                                            'EndDialog',
                                                                                            'DefWindowProcW',
                                                                                            'TranslateMessage',
                                                                                            'SetCapture',
                                                                                            'MessageBeep',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'EnableWindow',
                                                                                            'GetFocus',
                                                                                            'GetCapture',
                                                                                            'OffsetRect',
                                                                                            'ReleaseDC',
                                                                                            'GetActiveWindow',
                                                                                            'GetDlgItem',
                                                                                            'LoadBitmapW',
                                                                                            'DrawFocusRect',
                                                                                            'GetSysColorBrush',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'BeginPaint',
                                                                                            'CharNextW',
                                                                                            'GetWindow',
                                                                                            'GetSysColor',
                                                                                            'GetClassNameW',
                                                                                            'ExitWindowsEx',
                                                                                            'InvalidateRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'LoadCursorW',
                                                                                            'EndPaint',
                                                                                            'CallWindowProcW',
                                                                                            'KillTimer',
                                                                                            'WaitForInputIdle',
                                                                                            'CreateDialogParamW',
                                                                                            'DialogBoxParamW',
                                                                                            'SendMessageW',
                                                                                            'SetRectEmpty',
                                                                                            'PtInRect',
                                                                                            'ScreenToClient',
                                                                                            'FillRect',
                                                                                            'SetCursor',
                                                                                            'GetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'IsWindow',
                                                                                            'GetCursorPos',
                                                                                            'MessageBoxW',
                                                                                            'LoadImageW',
                                                                                            'DrawTextW',
                                                                                            'GetMessagePos',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'DestroyWindow',
                                                                                            'ReleaseCapture',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetParent',
                                                                                            'GetStockObject',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'SelectObject',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CloseServiceHandle',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemRealloc',
                                                                                            'StringFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'VarUI4FromStr',
                                                                                            'SHDeleteEmptyKeyW',
                                                                                            'PathAddBackslashW',
                                                                                            'PathGetCharTypeW',
                                                                                            'SHDeleteKeyW',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Create',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_AddMasked'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 263,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 231576,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9dc0a77f4a26df00b6f2578826852b98266dd7c6ceafaf498415337873bd9aee'},
 '9de51643e99b08e56e076401abe53a099e9590c7083d140464f6f6fc91b14d98': {'AddressOfEntryPoint': 4096,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['MessageBoxA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.rdata\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9de51643e99b08e56e076401abe53a099e9590c7083d140464f6f6fc91b14d98'},
 '9e1df835855965e562bdad9c3f75de9713de2d219c880fc9c457806293daef1e': {'AddressOfEntryPoint': 60448,
                                                                      'DebugRVA': 136464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 135168,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetServiceStatus',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'OLEAUT32.dll': 'SafeArrayAccessData',
                                                                                      'SETUPAPI.dll': 'SetupDiGetClassDevsW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINMM.dll': 'timeEndPeriod',
                                                                                      'ole32.dll': 'CoInitializeSecurity'},
                                                                      'ImportedFunctions': ['SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'CM_Get_Next_Res_Des',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'CM_Get_First_Log_Conf',
                                                                                            'CM_Free_Res_Des_Handle',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'CM_Get_Parent',
                                                                                            'CM_Get_Res_Des_Data_Size',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'CM_Get_Res_Des_Data',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'SizeofResource',
                                                                                            'CloseHandle',
                                                                                            'FindResourceExW',
                                                                                            'DeviceIoControl',
                                                                                            'FindResourceW',
                                                                                            'CreateFileW',
                                                                                            'GetExitCodeThread',
                                                                                            'LoadResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'WaitForMultipleObjects',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'LocalAlloc',
                                                                                            'CreateWaitableTimerW',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWaitableTimer',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalFree',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'lstrlenA',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LockResource',
                                                                                            'GetACP',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetVersionExA',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetThreadLocale',
                                                                                            'RtlUnwindEx',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTickCount',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'UnregisterClassA',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'SetServiceStatus',
                                                                                            'StringFromGUID2',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'VariantInit',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'VariantChangeType',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayAccessData'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 35840,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 131072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9e1df835855965e562bdad9c3f75de9713de2d219c880fc9c457806293daef1e'},
 '9e27dc85bb110d11d762b594f5d6843c06fbbd3762a3eb4b94b968c5e5a2a21d': {'AddressOfEntryPoint': 51316,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 184896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 185344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9e27dc85bb110d11d762b594f5d6843c06fbbd3762a3eb4b94b968c5e5a2a21d'},
 '9e73b9588d3b21bd8ed27ecb57c6381c63b4a6d55b9ea5a668ee21b85d35cbd3': {'AddressOfEntryPoint': 112701,
                                                                      'DebugRVA': 4576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueA',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA'},
                                                                      'ImportedFunctions': ['RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapCreate',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'SetFilePointer',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'CloseHandle',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 25088,
                                                                                       'iivdggn\x00': 0,
                                                                                       'nmkxinj\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/9e73b9588d3b21bd8ed27ecb57c6381c63b4a6d55b9ea5a668ee21b85d35cbd3'},
 '9edba1829cde6a6ccd3ba286126a8115d2e0d416cba5bd86c3bbf431f580e2cc': {'AddressOfEntryPoint': 44128,
                                                                      'DebugRVA': 83200,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 91232,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'lstrcmpiA',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetNumberFormatA',
                                                                                            'GetProcAddress',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetTempPathA',
                                                                                            'MoveFileExA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCommandLineA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileA',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'FindWindowExA',
                                                                                            'GetClassNameA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSysColor',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'LoadIconA',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'wvsprintfA',
                                                                                            'SetWindowLongA',
                                                                                            'CharUpperA',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'MessageBoxA',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringA',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongA',
                                                                                            'OemToCharBuffA',
                                                                                            'GetMessageA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'ShellExecuteExA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHChangeNotify',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 25040,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 9728,
                                                                                       '.rsrc\x00\x00\x00': 25088,
                                                                                       '.text\x00\x00\x00': 74240},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9edba1829cde6a6ccd3ba286126a8115d2e0d416cba5bd86c3bbf431f580e2cc'},
 '9ee4a88c8e0594299d9d019dc0db5bfabb54fbad97aaff066fa866b1bb894f91': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/9ee4a88c8e0594299d9d019dc0db5bfabb54fbad97aaff066fa866b1bb894f91'},
 '9f9c723f70673656a68ba5f47778757d7a27bfe6f21bc78005107e19e737ab5e': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 132564,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 132608,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9f9c723f70673656a68ba5f47778757d7a27bfe6f21bc78005107e19e737ab5e'},
 '9fbb168a5cd5922e85ef5c8ee8e895f1a666991be6585a440c11bcadd84c93fe': {'AddressOfEntryPoint': 1822736,
                                                                      'DebugRVA': 310332,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 1798144,
                                                                      'ExportSize': 15928,
                                                                      'IATRVA': 311296,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'HalTranslateBusAddress',
                                                                                      'NETIO.SYS': 'NsiSetObjectSecurity',
                                                                                      'ntoskrnl.exe': '__chkstk'},
                                                                      'ImportedFunctions': ['KeInitializeEvent',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'ExUuidCreate',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlGUIDFromString',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ZwSetValueKey',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInsertQueue',
                                                                                            'WmiGetClock',
                                                                                            'DbgPrintEx',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoGetDmaAdapter',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'IoFreeMdl',
                                                                                            'IoAllocateMdl',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'MmSizeOfMdl',
                                                                                            'MmUnmapLockedPages',
                                                                                            'IoBuildPartialMdl',
                                                                                            'DbgPrint',
                                                                                            'ExAllocatePoolWithTagPriority',
                                                                                            'ExInitializeLookasideListEx',
                                                                                            'ExDeleteLookasideListEx',
                                                                                            'IoWMIWriteEvent',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'IofCompleteRequest',
                                                                                            'IofCallDriver',
                                                                                            'KeQueryActiveProcessorCount',
                                                                                            'IoCreateDevice',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'ExInitializeResourceLite',
                                                                                            'KeInitializeQueue',
                                                                                            'PsCreateSystemThread',
                                                                                            'NtClose',
                                                                                            'ExCreateCallback',
                                                                                            'PoRegisterPowerSettingCallback',
                                                                                            'ZwPowerInformation',
                                                                                            'IoRegisterBootDriverReinitialization',
                                                                                            'KeInitializeDpc',
                                                                                            'KeSetImportanceDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeQueryDpcWatchdogInformation',
                                                                                            'IoRegisterDriverReinitialization',
                                                                                            'ObfReferenceObject',
                                                                                            'KeRemoveQueue',
                                                                                            'IoIs32bitProcess',
                                                                                            'RtlUpcaseUnicodeString',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ExNotifyCallback',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlImageDirectoryEntryToData',
                                                                                            'DbgBreakPoint',
                                                                                            'NtTraceControl',
                                                                                            'WmiQueryTraceInformation',
                                                                                            'IoOpenDeviceRegistryKey',
                                                                                            'ZwClose',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNumberOfSetBitsUlongPtr',
                                                                                            'ZwOpenKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'RtlCharToInteger',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'IoSetDeviceInterfaceState',
                                                                                            'MmLockPagableDataSection',
                                                                                            'MmUnlockPagableImageSection',
                                                                                            'MmLockPagableSectionByHandle',
                                                                                            'MmAllocateNonCachedMemory',
                                                                                            'MmAllocateContiguousMemory',
                                                                                            'MmFreeNonCachedMemory',
                                                                                            'MmFreeContiguousMemory',
                                                                                            'InitializeSListHead',
                                                                                            'MmMapLockedPages',
                                                                                            'MmMapIoSpace',
                                                                                            'MmUnmapIoSpace',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwReadFile',
                                                                                            'KeQueryMaximumProcessorCount',
                                                                                            'ExGetCurrentProcessorCpuUsage',
                                                                                            'ExGetCurrentProcessorCounts',
                                                                                            'KeResetEvent',
                                                                                            'ObfDereferenceObject',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeSetTimerEx',
                                                                                            'KeInitializeTimerEx',
                                                                                            'KeSetTimer',
                                                                                            'ExInterlockedInsertHeadList',
                                                                                            'ExInterlockedAddLargeInteger',
                                                                                            '_vsnwprintf',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'ExInterlockedAddUlong',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'ExInterlockedPushEntryList',
                                                                                            'ExInterlockedPopEntryList',
                                                                                            'IoAcquireCancelSpinLock',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCancelIrp',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTargetProcessorDpc',
                                                                                            'KeFlushQueuedDpcs',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'MmIsDriverVerifying',
                                                                                            'IoDeleteDevice',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            'ExReleaseResourceLite',
                                                                                            'HalPrivateDispatchTable',
                                                                                            'KeRegisterBugCheckCallback',
                                                                                            'KeDeregisterBugCheckCallback',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoDetachDevice',
                                                                                            'KeGetRecommendedSharedDataAlignment',
                                                                                            'IoAllocateIrp',
                                                                                            'IoFreeIrp',
                                                                                            'IoGetDevicePropertyData',
                                                                                            'IoConnectInterruptEx',
                                                                                            'IoDisconnectInterruptEx',
                                                                                            'KeSynchronizeExecution',
                                                                                            'KeSetSystemAffinityThreadEx',
                                                                                            'KeRevertToUserAffinityThreadEx',
                                                                                            'ZwLoadDriver',
                                                                                            'KeClearEvent',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'PoCallDriver',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'PoSetPowerState',
                                                                                            'IoWMIOpenBlock',
                                                                                            'ObSetSecurityObjectByPointer',
                                                                                            'RtlInitAnsiString',
                                                                                            'IoWMIDeviceObjectToProviderId',
                                                                                            'MmIsVerifierEnabled',
                                                                                            'MmAddVerifierThunks',
                                                                                            'IoGetFileObjectGenericMapping',
                                                                                            'RtlMapGenericMask',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlGetAce',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'ObGetObjectSecurity',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'RtlGetGroupSecurityDescriptor',
                                                                                            'RtlGetSaclSecurityDescriptor',
                                                                                            'RtlSelfRelativeToAbsoluteSD',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'ObReleaseObjectSecurity',
                                                                                            'SeExports',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'SeSetSecurityDescriptorInfo',
                                                                                            'SeLockSubjectContext',
                                                                                            'SeAccessCheck',
                                                                                            'SeAppendPrivileges',
                                                                                            'SeFreePrivileges',
                                                                                            'SeUnlockSubjectContext',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'PsReferenceImpersonationToken',
                                                                                            'SeQueryInformationToken',
                                                                                            'PsDereferenceImpersonationToken',
                                                                                            'PsGetThreadSessionId',
                                                                                            'PsGetCurrentProcessSessionId',
                                                                                            'PsGetThreadId',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'MmAllocateContiguousMemorySpecifyCache',
                                                                                            'MmGetPhysicalAddress',
                                                                                            'MmFreeContiguousMemorySpecifyCache',
                                                                                            'RtlPrefetchMemoryNonTemporal',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeSetEvent',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'KeInitializeMutex',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ExFreePoolWithTag',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoUnregisterShutdownNotification',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ZwSetSecurityObject',
                                                                                            'IoDeviceObjectType',
                                                                                            'ObOpenObjectByPointer',
                                                                                            '_snwprintf',
                                                                                            'SeCaptureSecurityDescriptor',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'RtlAbsoluteToSelfRelativeSD',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'ZwCreateKey',
                                                                                            'ZwQueryValueKey',
                                                                                            '__C_specific_handler',
                                                                                            '__chkstk',
                                                                                            'HalTranslateBusAddress',
                                                                                            'NsiGetParameterEx',
                                                                                            'NsiGetAllParametersEx',
                                                                                            'NsiSetAllParametersEx',
                                                                                            'NsiEnumerateObjectsAllParametersEx',
                                                                                            'NsiSetParameterEx',
                                                                                            'NsiRegisterChangeNotificationEx',
                                                                                            'NmrRegisterProvider',
                                                                                            'NmrWaitForProviderDeregisterComplete',
                                                                                            'NmrDeregisterProvider',
                                                                                            'NsiSetObjectSecurity'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 238,
                                                                      'NumberOfSections': 17,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.edata\x00\x00': 16384,
                                                                                       '.guids\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 33792,
                                                                                       '.rdata\x00\x00': 46080,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 306688,
                                                                                       'INIT\x00\x00\x00\x00': 13312,
                                                                                       'PAGE\x00\x00\x00\x00': 4608,
                                                                                       'PAGENDCO': 23040,
                                                                                       'PAGENDSE': 9728,
                                                                                       'PAGENDSM': 71680,
                                                                                       'PAGENDSP': 30720,
                                                                                       'PAGENDST': 8192,
                                                                                       'PAGENPNP': 146944},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/9fbb168a5cd5922e85ef5c8ee8e895f1a666991be6585a440c11bcadd84c93fe'},
 '9fc2af1fcfe6f7edbc0580a7fec662c095871ae1bef9faaadf36a1e737939eb2': {'AddressOfEntryPoint': 79400,
                                                                      'DebugRVA': 4464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'msvcrt.dll': 'printf'},
                                                                      'ImportedFunctions': ['__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'atoi',
                                                                                            'printf',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiClassGuidsFromNameW',
                                                                                            'SetupDiDestroyDeviceInfoList'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 37,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 4096,
                                                                                       'lmihghi\x00': 31232,
                                                                                       'rwzxtse\x00': 0},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9fc2af1fcfe6f7edbc0580a7fec662c095871ae1bef9faaadf36a1e737939eb2'},
 '9fd050b81dc2c947a7dc91be54232a34dab8149c4f59269f4164b42af73747e0': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 77824,
                                                                      'ExportSize': 12984088,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetVolumeInformationA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileA',
                                                                                            '_lclose',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetProcAddress',
                                                                                            '_llseek',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CompareStringA',
                                                                                            'LoadLibraryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetPrivateProfileIntA',
                                                                                            '_lopen',
                                                                                            'GetShortPathNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'WriteFile',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVersionExA',
                                                                                            'SetFilePointer',
                                                                                            'GetVersion',
                                                                                            'FreeResource',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CreateDirectoryA',
                                                                                            'TerminateThread',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'LockResource',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetEvent',
                                                                                            'ReadFile',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetDeviceCaps',
                                                                                            'CallWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextA',
                                                                                            'DispatchMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDC',
                                                                                            'SetWindowPos',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'EndDialog',
                                                                                            'CharNextA',
                                                                                            'GetDesktopWindow',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'LoadStringA',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12985100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 12985344,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/9fd050b81dc2c947a7dc91be54232a34dab8149c4f59269f4164b42af73747e0'},
 'a038bd815a7c04ee3f6ab38cd2c97156b07da76fe1e3497370cb29bfea6f065a': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwWriteFile',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwResumeThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetValueKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'HeapAlloc',
                                                                                            'GetVersion',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a038bd815a7c04ee3f6ab38cd2c97156b07da76fe1e3497370cb29bfea6f065a'},
 'a08e9e2b0032a4a13a01af974d8489137dc3a3058b758e8478a21f4f5c140c38': {'AddressOfEntryPoint': 48392,
                                                                      'DebugRVA': 87360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 96768,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'DosDateTimeToFileTime',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalAlloc',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'wvsprintfA',
                                                                                            'wvsprintfW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClassNameW',
                                                                                            'DialogBoxParamW',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'LoadBitmapW',
                                                                                            'LoadIconW',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'CharUpperA',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharToOemBuffW',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'CharUpperW',
                                                                                            'FindWindowExW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteExW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 25520,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 89088,
                                                                                       '.text\x00\x00\x00': 79872},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a08e9e2b0032a4a13a01af974d8489137dc3a3058b758e8478a21f4f5c140c38'},
 'a0a55f7390c91afe5764662e5476b2917e5963bbf25364528aea66f2dfbf7594': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 15872,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/a0a55f7390c91afe5764662e5476b2917e5963bbf25364528aea66f2dfbf7594'},
 'a0b4baff4a545b01f9e18d1aa963cea21d29b4fe10657d2457b6b9afdefd9165': {'AddressOfEntryPoint': 413847,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 417792,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueA',
                                                                                      'COMCTL32.dll': 'CreatePropertySheetPageA',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconA',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINMM.dll': 'timeGetDevCaps',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'comdlg32.dll': 'GetSaveFileNameA',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'timeKillEvent',
                                                                                            'timeEndPeriod',
                                                                                            'timeBeginPeriod',
                                                                                            'timeSetEvent',
                                                                                            'timeGetDevCaps',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'lstrcmpA',
                                                                                            'FindResourceExA',
                                                                                            'GetProcessVersion',
                                                                                            'GlobalFlags',
                                                                                            'LocalAlloc',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalHandle',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'LocalReAlloc',
                                                                                            'TlsFree',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'GetFileTime',
                                                                                            'SetFileAttributesA',
                                                                                            'SetErrorMode',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'MulDiv',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'ExitThread',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadCodePtr',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'ReleaseMutex',
                                                                                            'GetFullPathNameA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'lstrcpyA',
                                                                                            'WriteFile',
                                                                                            'DuplicateHandle',
                                                                                            'GetThreadLocale',
                                                                                            'DeleteFileA',
                                                                                            'MoveFileA',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'SuspendThread',
                                                                                            'ResumeThread',
                                                                                            'SetThreadPriority',
                                                                                            'SetLastError',
                                                                                            'FreeResource',
                                                                                            'GetVersion',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'lstrcmpiA',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalFindAtomA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'lstrcatA',
                                                                                            'VirtualProtect',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'OpenMutexA',
                                                                                            'CreateMutexA',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Module32First',
                                                                                            'Module32Next',
                                                                                            'Process32First',
                                                                                            'Process32Next',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadStringPtrA',
                                                                                            'lstrlenA',
                                                                                            'CreatePipe',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrcpynA',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'SetPriorityClass',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameA',
                                                                                            'CopyFileA',
                                                                                            'CreateFileA',
                                                                                            'CreateProcessA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleHandleA',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'CreateThread',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'WaitForMultipleObjects',
                                                                                            'DeviceIoControl',
                                                                                            'GetLastError',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'CreateEventA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualQuery',
                                                                                            'CharNextA',
                                                                                            'SetRect',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MessageBeep',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'PostThreadMessageA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetClassNameA',
                                                                                            'GetSysColorBrush',
                                                                                            'SetWindowContextHelpId',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CharUpperA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'ValidateRect',
                                                                                            'GetCursorPos',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'EndDialog',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetNextDlgTabItem',
                                                                                            'ModifyMenuA',
                                                                                            'GetMenuState',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapA',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'CreateWindowExA',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassLongA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'IsChild',
                                                                                            'GetWindowLongPtrA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetTopWindow',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowVisible',
                                                                                            'MapWindowPoints',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'ScreenToClient',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowLongA',
                                                                                            'OffsetRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'IsIconic',
                                                                                            'GetWindowPlacement',
                                                                                            'GetSystemMetrics',
                                                                                            'CopyRect',
                                                                                            'GetWindow',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'GetCapture',
                                                                                            'GetActiveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetFocus',
                                                                                            'SetFocus',
                                                                                            'DestroyMenu',
                                                                                            'WinHelpA',
                                                                                            'PtInRect',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongA',
                                                                                            'GetParent',
                                                                                            'GetDlgItem',
                                                                                            'IsWindowEnabled',
                                                                                            'GetForegroundWindow',
                                                                                            'UpdateWindow',
                                                                                            'RegisterWindowMessageA',
                                                                                            'LoadIconA',
                                                                                            'MessageBoxA',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyIcon',
                                                                                            'FindWindowA',
                                                                                            'SendNotifyMessageA',
                                                                                            'GetCursor',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadStringA',
                                                                                            'SendMessageA',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'wsprintfA',
                                                                                            'CreateDialogParamA',
                                                                                            'PostMessageA',
                                                                                            'DestroyWindow',
                                                                                            'PostQuitMessage',
                                                                                            'IsWindow',
                                                                                            'EnableWindow',
                                                                                            'AdjustWindowRectEx',
                                                                                            'UnregisterClassA',
                                                                                            'EnumFontFamiliesExA',
                                                                                            'GetMapMode',
                                                                                            'DPtoLP',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextColor',
                                                                                            'LPtoDP',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'Escape',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetMapMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'CreateBitmap',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'GetBkColor',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'DeleteObject',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetFileTitleA',
                                                                                            'GetSaveFileNameA',
                                                                                            'OpenPrinterA',
                                                                                            'DocumentPropertiesA',
                                                                                            'ClosePrinter',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'Shell_NotifyIconA',
                                                                                            'PropertySheetA',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'CreatePropertySheetPageA',
                                                                                            'OleInitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleUninitialize',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoBuildVersion',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoGetClassObject',
                                                                                            'CoTaskMemAlloc',
                                                                                            'VariantCopy',
                                                                                            'VariantChangeType',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'OleCreateFontIndirect',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringLen'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 379,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 187360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11776,
                                                                                       '.pdata\x00\x00': 32256,
                                                                                       '.rdata\x00\x00': 193536,
                                                                                       '.rsrc\x00\x00\x00': 207360,
                                                                                       '.text\x00\x00\x00': 410112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a0b4baff4a545b01f9e18d1aa963cea21d29b4fe10657d2457b6b9afdefd9165'},
 'a0ce718c6ffa64758bd705863fa40374d57504f8e327d7dad45b7fe0992fc25f': {'AddressOfEntryPoint': 1073860209,
                                                                      'DebugRVA': 103552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                      'KERNEL32.dll': 'GetCommandLineA',
                                                                                      'MSVCP90.dll': '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                      'MSVCR90.dll': 'memcpy',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'GetMessageA'},
                                                                      'ImportedFunctions': ['WriteFile',
                                                                                            'OpenProcess',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeA',
                                                                                            'ResetEvent',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcessId',
                                                                                            'PeekNamedPipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'CreateSemaphoreA',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'LocalAlloc',
                                                                                            'TlsGetValue',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'SHGetFileInfoW',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'strtok_s',
                                                                                            '_wsplitpath_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wcslwr_s',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            '_strdup',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcstok_s',
                                                                                            'memcpy',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 688,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a0ce718c6ffa64758bd705863fa40374d57504f8e327d7dad45b7fe0992fc25f'},
 'a163a205c9d2f6ab9b1231d509e88c852ad53fdd78ef0cd80664bf2b43dd4772': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 889740,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1089024,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/a163a205c9d2f6ab9b1231d509e88c852ad53fdd78ef0cd80664bf2b43dd4772'},
 'a18937267aa0b97fa0fddcbb9b5ff1bb5995000103db3f4f3633acb6c44c674a': {'AddressOfEntryPoint': 78928,
                                                                      'DebugRVA': 209592,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 212992,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 6376,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14336,
                                                                                       '.pdata\x00\x00': 13824,
                                                                                       '.rdata\x00\x00': 96768,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 6656,
                                                                                       '.text\x00\x00\x00': 205824},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/a18937267aa0b97fa0fddcbb9b5ff1bb5995000103db3f4f3633acb6c44c674a'},
 'a193b194595166df6fca3c960514d9e269de66d671119736f7a3336342fd5297': {'AddressOfEntryPoint': 5220,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2562300,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2562560,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/a193b194595166df6fca3c960514d9e269de66d671119736f7a3336342fd5297'},
 'a1b23923eab57d5007399c955164ef55b5e6274f3a9f9b2584b8d2844d99cc9e': {'AddressOfEntryPoint': 9912,
                                                                      'DebugRVA': 17512,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NDIS.SYS': 'NdisCompleteBindAdapterEx',
                                                                                      'NETIO.SYS': 'NetioFreeMdl',
                                                                                      'fwpkclnt.sys': 'FwpmFilterDeleteById0',
                                                                                      'ntoskrnl.exe': 'ExQueueWorkItem'},
                                                                      'ImportedFunctions': ['RtlCompareMemory',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoFreeWorkItem',
                                                                                            'ZwOpenKey',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'IoAcquireCancelSpinLock',
                                                                                            'MmLockPagableDataSection',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IofCompleteRequest',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'ZwClose',
                                                                                            'ZwQueryValueKey',
                                                                                            'KeDelayExecutionThread',
                                                                                            'IoDeleteDevice',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'ExQueryDepthSList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeInitializeSpinLock',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'KeLowerIrql',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'KeReleaseSpinLock',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'ZwSetSecurityObject',
                                                                                            'IoCreateDevice',
                                                                                            'IoDeviceObjectType',
                                                                                            'ObOpenObjectByPointer',
                                                                                            '_snwprintf',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'SeCaptureSecurityDescriptor',
                                                                                            'RtlGetSaclSecurityDescriptor',
                                                                                            'RtlGetGroupSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlAbsoluteToSelfRelativeSD',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'SeExports',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'KeInitializeEvent',
                                                                                            'KeSetEvent',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlUpcaseUnicodeString',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExQueueWorkItem',
                                                                                            'NetioAllocateMdl',
                                                                                            'NetioAllocateAndReferenceCopyNetBufferListEx',
                                                                                            'NetioInitializeNetBufferListContext',
                                                                                            'NetioCompleteCopyNetBufferListChain',
                                                                                            'NetioDereferenceNetBufferList',
                                                                                            'RtlCopyBufferToMdl',
                                                                                            'NmrClientAttachProvider',
                                                                                            'NetioAdvanceNetBufferList',
                                                                                            'NmrWaitForClientDeregisterComplete',
                                                                                            'NmrDeregisterClient',
                                                                                            'NmrRegisterClient',
                                                                                            'NmrClientDetachProviderComplete',
                                                                                            'NmrWaitForProviderDeregisterComplete',
                                                                                            'NmrProviderDetachClientComplete',
                                                                                            'NmrDeregisterProvider',
                                                                                            'NmrRegisterProvider',
                                                                                            'NetioDereferenceNetBufferListChain',
                                                                                            'NetioRetreatNetBufferList',
                                                                                            'NetioAllocateAndReferenceCloneNetBufferList',
                                                                                            'NetioFreeMdl',
                                                                                            'NdisCompleteUnbindAdapterEx',
                                                                                            'NdisOpenAdapterEx',
                                                                                            'NdisIfDeregisterInterface',
                                                                                            'NdisCloseAdapterEx',
                                                                                            'NdisOidRequest',
                                                                                            'NdisIfRegisterInterface',
                                                                                            'NdisSetEvent',
                                                                                            'NdisReturnNetBufferLists',
                                                                                            'NdisAdjustNetBufferCurrentMdl',
                                                                                            'NdisSendNetBufferLists',
                                                                                            'NdisGetDataBuffer',
                                                                                            'NdisAllocateNetBufferListContext',
                                                                                            'NdisCancelSendNetBufferLists',
                                                                                            'NdisRetreatNetBufferDataStart',
                                                                                            'NdisFreeNetBufferListContext',
                                                                                            'NdisAdvanceNetBufferDataStart',
                                                                                            'NdisIfRegisterProvider',
                                                                                            'NdisIfDeregisterProvider',
                                                                                            'NdisRegisterProtocolDriver',
                                                                                            'NdisIfAllocateNetLuidIndex',
                                                                                            'NdisIfFreeNetLuidIndex',
                                                                                            'NdisDeregisterProtocolDriver',
                                                                                            'NdisIfGetNetLuidFromInterfaceIndex',
                                                                                            'NdisCompleteBindAdapterEx',
                                                                                            'FwpmEngineClose0',
                                                                                            'FwpiCalloutUnregisterAndDeleteByKey0',
                                                                                            'FwpmFilterAdd0',
                                                                                            'FwpmEngineOpen0',
                                                                                            'FwpiCalloutRegisterAndAddWithoutDevice0',
                                                                                            'FwpmFilterDeleteById0'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 112,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 13824,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 10240,
                                                                                       'PAGEWArp': 34304},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/a1b23923eab57d5007399c955164ef55b5e6274f3a9f9b2584b8d2844d99cc9e'},
 'a295b2ba638cbc488c0bc9faec2bac82b720a525ccee5a9becdca312480ea4c4': {'AddressOfEntryPoint': 56000,
                                                                      'DebugRVA': 58960,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetTimeFormatA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'comdlg32.dll': 'GetSaveFileNameA',
                                                                                      'msvcrt.dll': 'sprintf'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_onexit',
                                                                                            '__setusermatherr',
                                                                                            '_mbsicmp',
                                                                                            '_purecall',
                                                                                            'qsort',
                                                                                            '_strlwr',
                                                                                            'strcmp',
                                                                                            'malloc',
                                                                                            'strtoul',
                                                                                            'memset',
                                                                                            '_snprintf',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '__dllonexit',
                                                                                            'free',
                                                                                            'atoi',
                                                                                            'modf',
                                                                                            '_strcmpi',
                                                                                            'memcmp',
                                                                                            '_memicmp',
                                                                                            'strrchr',
                                                                                            'strchr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'strlen',
                                                                                            'memcpy',
                                                                                            '_itoa',
                                                                                            '_stricmp',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GetCurrentProcessId',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentProcess',
                                                                                            'DeleteFileA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'EnumResourceNamesA',
                                                                                            'ExitProcess',
                                                                                            'OpenProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'lstrlenA',
                                                                                            'GlobalUnlock',
                                                                                            'GetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetModuleFileNameA',
                                                                                            'LocalFree',
                                                                                            'GetDateFormatA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetSystemDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetTimeFormatA',
                                                                                            'TranslateMessage',
                                                                                            'DeferWindowPos',
                                                                                            'IsDialogMessageA',
                                                                                            'SetTimer',
                                                                                            'BeginDeferWindowPos',
                                                                                            'PostQuitMessage',
                                                                                            'TrackPopupMenu',
                                                                                            'KillTimer',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetFocus',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'SetDlgItemInt',
                                                                                            'RegisterClassA',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetWindowPos',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'LoadIconA',
                                                                                            'LoadImageA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'InvalidateRect',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'GetClassNameA',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'EnableWindow',
                                                                                            'GetCursorPos',
                                                                                            'MapWindowPoints',
                                                                                            'GetClientRect',
                                                                                            'GetSysColor',
                                                                                            'MoveWindow',
                                                                                            'OpenClipboard',
                                                                                            'GetMenu',
                                                                                            'CheckMenuItem',
                                                                                            'EmptyClipboard',
                                                                                            'EnableMenuItem',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetMenuItemCount',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'EnumChildWindows',
                                                                                            'DestroyWindow',
                                                                                            'GetMenuItemInfoA',
                                                                                            'GetWindowTextA',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'LoadStringA',
                                                                                            'DialogBoxParamA',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'FindTextA',
                                                                                            'GetSaveFileNameA',
                                                                                            'RegDeleteKeyA',
                                                                                            'ShellExecuteExA',
                                                                                            'ShellExecuteA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 181,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 10568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 10752,
                                                                                       '.text\x00\x00\x00': 53248},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a295b2ba638cbc488c0bc9faec2bac82b720a525ccee5a9becdca312480ea4c4'},
 'a2c7be5350a73331778681b5491c2258ec3ea99897f725c23110adea6bdad832': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/a2c7be5350a73331778681b5491c2258ec3ea99897f725c23110adea6bdad832'},
 'a2dd820f6ec0e2dc19691b35aa3ae72d3a0e499950b6d54b880a141496d5dd8d': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 672320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 672768,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/a2dd820f6ec0e2dc19691b35aa3ae72d3a0e499950b6d54b880a141496d5dd8d'},
 'a2de7686de9ffffdde12a4f13b467bd1899a4860353db0b36ddb6ef1c029ff7c': {'AddressOfEntryPoint': 1074003813,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'CRYPT32.dll': 'CertOpenStore',
                                                                                      'KERNEL32.dll': 'GetConsoleMode',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'USER32.dll': 'DdeUninitialize',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINTRUST.dll': 'WTHelperProvDataFromStateData',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['DdeCreateStringHandleW',
                                                                                            'DdeDisconnect',
                                                                                            'DdeGetLastError',
                                                                                            'DdeClientTransaction',
                                                                                            'DdeFreeStringHandle',
                                                                                            'DdeInitializeW',
                                                                                            'WaitForInputIdle',
                                                                                            'DdeConnect',
                                                                                            'DdeUninitialize',
                                                                                            'ShellExecuteExW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'StrStrIW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'GetLongPathNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetProcAddress',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'Sleep',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpA',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'GetSystemTime',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetACP',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'OpenThread',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertGetNameStringW',
                                                                                            'CertGetNameStringA',
                                                                                            'CryptMsgClose',
                                                                                            'CertCloseStore',
                                                                                            'CryptMsgUpdate',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CertOpenStore'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 148,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15664,
                                                                      'SectionNames': {'!\x19\x04\x00c\x00\x00\x00': 15872,
                                                                                       '.data\x00\x00\x00': 8192,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 47104,
                                                                                       '.text\x00\x00\x00': 173056},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a2de7686de9ffffdde12a4f13b467bd1899a4860353db0b36ddb6ef1c029ff7c'},
 'a39ef11b53db39a1c4e81071a0676688706f17ca3667a98c065560a4612e804a': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlTimeToTimeFields',
                                                                                            'RtlComputeCrc32',
                                                                                            'sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwWriteFile',
                                                                                            'ZwSetValueKey',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwCreateKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a39ef11b53db39a1c4e81071a0676688706f17ca3667a98c065560a4612e804a'},
 'a3d0f51fcf455dbdb766f9f8994140da762dd1d8c4d139c748fce970ddc4991f': {'AddressOfEntryPoint': 96328,
                                                                      'DebugRVA': 53780,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12120,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 40960,
                                                                                       '.text\x00\x00\x00': 49152},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/a3d0f51fcf455dbdb766f9f8994140da762dd1d8c4d139c748fce970ddc4991f'},
 'a46f94a4d86c8f9c97f2b1e283515f27a0bb3c849977aa05007eab525f4cf036': {'AddressOfEntryPoint': 177312,
                                                                      'DebugRVA': 298272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 294912,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 598656,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14336,
                                                                                       '.pdata\x00\x00': 22016,
                                                                                       '.rdata\x00\x00': 99328,
                                                                                       '.rsrc\x00\x00\x00': 599040,
                                                                                       '.text\x00\x00\x00': 288768},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a46f94a4d86c8f9c97f2b1e283515f27a0bb3c849977aa05007eab525f4cf036'},
 'a4c65a75662efeb5149fbf7cab8e73ffe6422040ed6d0c8a57f27b2ad3007998': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9636,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 12794368,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/a4c65a75662efeb5149fbf7cab8e73ffe6422040ed6d0c8a57f27b2ad3007998'},
 'a514d3f6498c98d2a3c4f1bba802be59eabb5de066355bc6c477f5a6172255f9': {'AddressOfEntryPoint': 36964,
                                                                      'DebugRVA': 24768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'PCIIDEX.SYS': 'AtaPortWriteRegisterUlong'},
                                                                      'ImportedFunctions': ['AtaPortCopyMemory',
                                                                                            'AtaPortGetPhysicalAddress',
                                                                                            'AtaPortReadRegisterUlong',
                                                                                            'AtaPortInitializeEx',
                                                                                            'AtaPortDeviceStateChange',
                                                                                            'AtaPortEtwTraceLog',
                                                                                            'AtaPortRegistryFreeBuffer',
                                                                                            'AtaPortGetBusData',
                                                                                            'AtaPortRegistryRead',
                                                                                            'AtaPortRequestCallback',
                                                                                            'AtaPortStallExecution',
                                                                                            'AtaPortGetUnCachedExtension',
                                                                                            'AtaPortReadRegisterUchar',
                                                                                            'AtaPortBuildRequestSenseIrb',
                                                                                            'AtaPortReleaseRequestSenseIrb',
                                                                                            'AtaPortCompleteRequest',
                                                                                            'AtaPortNotification',
                                                                                            'AtaPortGetDeviceBase',
                                                                                            'AtaPortGetScatterGatherList',
                                                                                            'AtaPortRegistryAllocateBuffer',
                                                                                            'AtaPortWriteRegisterUlong',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 22,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 17408,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/a514d3f6498c98d2a3c4f1bba802be59eabb5de066355bc6c477f5a6172255f9'},
 'a543d660352d9e6c21a8b3c830ff682a3b42e43e2bc881e03787c64b83cf31aa': {'AddressOfEntryPoint': 1074276836,
                                                                      'DebugRVA': 346016,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 344064,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetCurrentHwProfileA',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'RtlUnwindEx',
                                                                                      'POWRPROF.dll': 'PowerWritePossibleFriendlyName',
                                                                                      'SETUPAPI.dll': 'CM_Reenumerate_DevNode',
                                                                                      'SHLWAPI.dll': 'wnsprintfW',
                                                                                      'USER32.dll': 'RegisterClassA',
                                                                                      'USERENV.dll': 'LoadUserProfileA',
                                                                                      'WTSAPI32.dll': 'WTSRegisterSessionNotification',
                                                                                      'dwmapi.dll': 'DwmIsCompositionEnabled'},
                                                                      'ImportedFunctions': ['DefWindowProcA',
                                                                                            'PostQuitMessage',
                                                                                            'BroadcastSystemMessageA',
                                                                                            'DestroyWindow',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'ChangeWindowMessageFilter',
                                                                                            'RegisterWindowMessageA',
                                                                                            'CreateWindowExA',
                                                                                            'UnregisterPowerSettingNotification',
                                                                                            'RegisterPowerSettingNotification',
                                                                                            'SystemParametersInfoA',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'PostThreadMessageA',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'GetThreadDesktop',
                                                                                            'OpenInputDesktop',
                                                                                            'SetThreadDesktop',
                                                                                            'CloseDesktop',
                                                                                            'GetForegroundWindow',
                                                                                            'EnumDisplaySettingsExA',
                                                                                            'EnumWindows',
                                                                                            'GetPropA',
                                                                                            'RedrawWindow',
                                                                                            'EnumDisplayDevicesA',
                                                                                            'SendInput',
                                                                                            'EnumDisplaySettingsA',
                                                                                            'ChangeDisplaySettingsExA',
                                                                                            'PostMessageA',
                                                                                            'GetMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'RegisterClassA',
                                                                                            'D3DKMTOpenAdapterFromHdc',
                                                                                            'D3DKMTPollDisplayChildren',
                                                                                            'D3DKMTQueryAdapterInfo',
                                                                                            'D3DKMTInvalidateActiveVidPn',
                                                                                            'D3DKMTEscape',
                                                                                            'D3DKMTCloseAdapter',
                                                                                            'SetDeviceGammaRamp',
                                                                                            'CreateDCA',
                                                                                            'DeleteDC',
                                                                                            'RegQueryValueExA',
                                                                                            'RegisterEventSourceA',
                                                                                            'ReportEventA',
                                                                                            'RegOpenCurrentUser',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegGetValueW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegGetValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'RevertToSelf',
                                                                                            'GetCurrentHwProfileA',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileA',
                                                                                            'WTSQueryUserToken',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSQuerySessionInformationA',
                                                                                            'WTSRegisterSessionNotification',
                                                                                            'PowerWriteACDefaultIndex',
                                                                                            'PowerEnumerate',
                                                                                            'PowerWriteDCDefaultIndex',
                                                                                            'PowerCreatePossibleSetting',
                                                                                            'PowerWriteFriendlyName',
                                                                                            'PowerCreateSetting',
                                                                                            'PowerRemovePowerSetting',
                                                                                            'PowerSetActiveScheme',
                                                                                            'PowerGetActiveScheme',
                                                                                            'PowerWriteSettingAttributes',
                                                                                            'PowerReadSettingAttributes',
                                                                                            'PowerReadDCValueIndex',
                                                                                            'PowerReadACValueIndex',
                                                                                            'PowerSettingAccessCheck',
                                                                                            'PowerWriteDCValueIndex',
                                                                                            'PowerWriteACValueIndex',
                                                                                            'PowerWritePossibleValue',
                                                                                            'PowerWritePossibleFriendlyName',
                                                                                            'CM_Locate_DevNodeA',
                                                                                            'CM_Get_Parent',
                                                                                            'CM_Request_Eject_PC',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetHwProfileList',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiOpenDeviceInfoA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'CM_Get_Device_ID_ExA',
                                                                                            'CM_Get_Child_Ex',
                                                                                            'CM_Get_Device_IDA',
                                                                                            'CM_Reenumerate_DevNode',
                                                                                            'DwmIsCompositionEnabled',
                                                                                            'EnumSystemLocalesA',
                                                                                            'WriteConsoleW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'IsValidLocale',
                                                                                            'GetDateFormatA',
                                                                                            'GetStringTypeW',
                                                                                            'IsValidCodePage',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'LoadLibraryExA',
                                                                                            'SetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateFileA',
                                                                                            'GetTimeFormatA',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetLocaleInfoA',
                                                                                            'MultiByteToWideChar',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetFilePointer',
                                                                                            'FatalAppExitA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LCMapStringW',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'HeapAlloc',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'HeapFree',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExW',
                                                                                            'GetCommandLineA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'Sleep',
                                                                                            'OutputDebugStringA',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'LocalFree',
                                                                                            'CreateProcessA',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'OpenProcess',
                                                                                            'lstrlenW',
                                                                                            'GetLocalTime',
                                                                                            'GetTickCount',
                                                                                            'GetExitCodeThread',
                                                                                            'GetSystemPowerStatus',
                                                                                            'CreateEventA',
                                                                                            'OpenEventA',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateMutexA',
                                                                                            'OpenMutexA',
                                                                                            'ReleaseMutex',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'WinExec',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'wnsprintfW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 219,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1468,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13312,
                                                                                       '.pdata\x00\x00': 18432,
                                                                                       '.rdata\x00\x00': 123392,
                                                                                       '.text\x00\x00\x00': 336896,
                                                                                       '3;\x08\x00c\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a543d660352d9e6c21a8b3c830ff682a3b42e43e2bc881e03787c64b83cf31aa'},
 'a54aa248a163a22590ea330022d373fde4919b7af92aa71f63293ff1028ebf49': {'AddressOfEntryPoint': 178064,
                                                                      'DebugRVA': 756296,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 757760,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'GDI32.dll': 'ExtTextOutW',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'POWRPROF.dll': 'GetPwrCapabilities',
                                                                                      'PROPSYS.dll': 'PropVariantToStringAlloc',
                                                                                      'RPCRT4.dll': 'RpcBindingFromStringBindingW',
                                                                                      'SHELL32.dll': 'SHCreateItemFromParsingName',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'GetClassNameW',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'dwmapi.dll': 'DwmUnregisterThumbnail',
                                                                                      'gdiplus.dll': 'GdipSetCompositingMode',
                                                                                      'msvcrt.dll': 'sin',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess',
                                                                                      'ole32.dll': 'CoCreateFreeThreadedMarshaler',
                                                                                      'slc.dll': 'SLGetWindowsInformationDWORD'},
                                                                      'ImportedFunctions': ['RegCreateKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'EventWrite',
                                                                                            'EventEnabled',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegQueryValueExW',
                                                                                            'GetLengthSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'EventRegister',
                                                                                            'RegDeleteKeyExW',
                                                                                            'EventUnregister',
                                                                                            'TraceMessage',
                                                                                            'RegOpenKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'LsaOpenPolicy',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'LsaClose',
                                                                                            'IsValidSid',
                                                                                            'LsaFreeMemory',
                                                                                            'StartTraceW',
                                                                                            'EnableTraceEx',
                                                                                            'StopTraceW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'StartServiceW',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegEnumKeyExW',
                                                                                            'GetSidSubAuthority',
                                                                                            'LsaLookupSids',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CheckTokenMembership',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenThreadToken',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LoadLibraryExA',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'FlushInstructionCache',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'OpenThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleW',
                                                                                            'OpenEventW',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetLongPathNameW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetStartupInfoW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'VirtualFree',
                                                                                            'RtlCaptureContext',
                                                                                            'lstrcmpiW',
                                                                                            'CompareStringOrdinal',
                                                                                            'FindFirstFileW',
                                                                                            'SetErrorMode',
                                                                                            'CreateEventW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WaitForSingleObject',
                                                                                            'SetTermsrvAppInstallMode',
                                                                                            'GetFileAttributesW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MulDiv',
                                                                                            'GetTickCount64',
                                                                                            'GetThreadPriority',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetTickCount',
                                                                                            'GetUserDefaultLangID',
                                                                                            'ExitProcess',
                                                                                            'HeapDestroy',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'GetDynamicTimeZoneInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetBinaryTypeW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueueUserWorkItem',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProductInfo',
                                                                                            'TerminateThread',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'LoadLibraryA',
                                                                                            'DeleteFileW',
                                                                                            'GetProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'lstrcmpA',
                                                                                            'CompareFileTime',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'CreateFileMappingW',
                                                                                            'ResetEvent',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalFree',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetComputerNameW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateProcessW',
                                                                                            'lstrlenW',
                                                                                            'OpenProcess',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'QueryInformationJobObject',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetPriorityClass',
                                                                                            'ResumeThread',
                                                                                            'AssignProcessToJobObject',
                                                                                            'SetInformationJobObject',
                                                                                            'GetLastError',
                                                                                            'CreateJobObjectW',
                                                                                            'CloseHandle',
                                                                                            'LPtoDP',
                                                                                            'GetRgnBox',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'GetStockObject',
                                                                                            'GdiFlush',
                                                                                            'CombineRgn',
                                                                                            'OffsetRgn',
                                                                                            'SetLayout',
                                                                                            'SetWindowOrgEx',
                                                                                            'StretchBlt',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreatePen',
                                                                                            'Polyline',
                                                                                            'GetRegionData',
                                                                                            'GetTextColor',
                                                                                            'GetLayout',
                                                                                            'GetTextMetricsW',
                                                                                            'ExtCreateRegion',
                                                                                            'SetDIBits',
                                                                                            'SelectClipRgn',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetViewportOrgEx',
                                                                                            'IntersectClipRect',
                                                                                            'GetClipRgn',
                                                                                            'CreateRectRgn',
                                                                                            'GetBkColor',
                                                                                            'PatBlt',
                                                                                            'CreateBitmap',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetTextExtentPointW',
                                                                                            'GetClipBox',
                                                                                            'GetObjectW',
                                                                                            'GdiAlphaBlend',
                                                                                            'BitBlt',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'ExtTextOutW',
                                                                                            'CopyRect',
                                                                                            'SetRect',
                                                                                            'CreateWindowExW',
                                                                                            'DialogBoxParamW',
                                                                                            'GetClassInfoW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemCount',
                                                                                            'DefWindowProcW',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'GetCursorPos',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuStringW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'InsertMenuItemW',
                                                                                            'IsChild',
                                                                                            'IsWinEventHookInstalled',
                                                                                            'IsProcessDPIAware',
                                                                                            'IsRectEmpty',
                                                                                            'UnionRect',
                                                                                            'GetClassLongW',
                                                                                            'SetClassLongW',
                                                                                            'GetGUIThreadInfo',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MoveWindow',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'GetWindowDC',
                                                                                            'CharUpperW',
                                                                                            'UnregisterClassW',
                                                                                            'FrameRect',
                                                                                            'WindowFromDC',
                                                                                            'SendMessageCallbackW',
                                                                                            'UpdateLayeredWindow',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'ShowWindowAsync',
                                                                                            'BringWindowToTop',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetIconInfo',
                                                                                            'RegisterShellHookWindow',
                                                                                            'DeregisterShellHookWindow',
                                                                                            'FlashWindowEx',
                                                                                            'SetThreadDesktop',
                                                                                            'EndTask',
                                                                                            'OpenInputDesktop',
                                                                                            'CloseDesktop',
                                                                                            'GetMenuState',
                                                                                            'IsZoomed',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollPos',
                                                                                            'InternalGetWindowText',
                                                                                            'GetWindowInfo',
                                                                                            'GetCaretBlinkTime',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'GetLayeredWindowAttributes',
                                                                                            'GetUpdateRect',
                                                                                            'SetWindowsHookExW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'CallNextHookEx',
                                                                                            'SetFocus',
                                                                                            'GetAncestor',
                                                                                            'ReleaseCapture',
                                                                                            'GetDoubleClickTime',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetRectEmpty',
                                                                                            'EnumDisplayMonitors',
                                                                                            'InflateRect',
                                                                                            'EqualRect',
                                                                                            'UpdateWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'MonitorFromRect',
                                                                                            'CharPrevW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetMenuDefaultItem',
                                                                                            'SendNotifyMessageW',
                                                                                            'LockSetForegroundWindow',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'IntersectRect',
                                                                                            'MonitorFromWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetForegroundWindow',
                                                                                            'EnumWindows',
                                                                                            'GetParent',
                                                                                            'IsWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'WaitMessage',
                                                                                            'GetWindowTextW',
                                                                                            'GetClientRect',
                                                                                            'TrackPopupMenuEx',
                                                                                            'SetActiveWindow',
                                                                                            'GetKeyState',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SubtractRect',
                                                                                            'RedrawWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'InvalidateRect',
                                                                                            'OffsetRect',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetWindowRgn',
                                                                                            'UpdateLayeredWindowIndirect',
                                                                                            'GetWindowRgnBox',
                                                                                            'LoadImageW',
                                                                                            'GetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetLastInputInfo',
                                                                                            'RemovePropW',
                                                                                            'GetLastActivePopup',
                                                                                            'SwitchToThisWindow',
                                                                                            'MessageBeep',
                                                                                            'GetActiveWindow',
                                                                                            'GetFocus',
                                                                                            'SetCursor',
                                                                                            'UnregisterHotKey',
                                                                                            'RegisterHotKey',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'GetAsyncKeyState',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursorPos',
                                                                                            'GetMessagePos',
                                                                                            'BeginPaint',
                                                                                            'FillRect',
                                                                                            'DrawEdge',
                                                                                            'EndPaint',
                                                                                            'GetSystemMenu',
                                                                                            'EnableMenuItem',
                                                                                            'ExitWindowsEx',
                                                                                            'LoadIconW',
                                                                                            'DestroyIcon',
                                                                                            'IsIconic',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuItem',
                                                                                            'ModifyMenuW',
                                                                                            'WindowFromPoint',
                                                                                            'ClientToScreen',
                                                                                            'TrackPopupMenu',
                                                                                            'IsHungAppWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AppendMenuW',
                                                                                            'CascadeWindows',
                                                                                            'TileWindows',
                                                                                            'LockWorkStation',
                                                                                            'ScreenToClient',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'NotifyWinEvent',
                                                                                            'GetSysColor',
                                                                                            'DrawFocusRect',
                                                                                            'AdjustWindowRectEx',
                                                                                            'CopyIcon',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SetWinEventHook',
                                                                                            'RegisterClassExW',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemInt',
                                                                                            'SetDlgItemInt',
                                                                                            'IsDlgButtonChecked',
                                                                                            'IsWindowEnabled',
                                                                                            'CheckDlgButton',
                                                                                            'CallWindowProcW',
                                                                                            'SetCapture',
                                                                                            'DrawTextW',
                                                                                            'AdjustWindowRect',
                                                                                            'CalculatePopupWindowPosition',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetCapture',
                                                                                            'SetGestureConfig',
                                                                                            'DrawIconEx',
                                                                                            'RemoveMenu',
                                                                                            'SetMenuDefaultItem',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'LoadAcceleratorsW',
                                                                                            'TrackMouseEvent',
                                                                                            'CharNextW',
                                                                                            'GetWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'GetPropW',
                                                                                            'HungWindowFromGhostWindow',
                                                                                            'SetWindowCompositionAttribute',
                                                                                            'GetWindowLongW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'EnumChildWindows',
                                                                                            'SendMessageW',
                                                                                            'PtInRect',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetWindowRect',
                                                                                            'DestroyMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'ShowWindow',
                                                                                            'MapWindowPoints',
                                                                                            'SetTimer',
                                                                                            'SetPropW',
                                                                                            'KillTimer',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowLongPtrW',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DestroyWindow',
                                                                                            'ShutdownBlockReasonCreate',
                                                                                            'LoadStringW',
                                                                                            'PostMessageW',
                                                                                            'PeekMessageW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'FindWindowW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetShellWindow',
                                                                                            'GetClassNameW',
                                                                                            '_vsnwprintf',
                                                                                            'free',
                                                                                            'wcsstr',
                                                                                            'iswalpha',
                                                                                            'wcschr',
                                                                                            'realloc',
                                                                                            '_wcsicmp',
                                                                                            'cosf',
                                                                                            '_wtoi',
                                                                                            'memcmp',
                                                                                            'sqrt',
                                                                                            'ceil',
                                                                                            'bsearch',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_fmode',
                                                                                            'malloc',
                                                                                            'sin',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'NtSetSystemInformation',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmEventEnabled',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlGetProductInfo',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwEventWrite',
                                                                                            'NtQueryInformationProcess',
                                                                                            'StrStrIW',
                                                                                            'AssocQueryStringW',
                                                                                            'PathQuoteSpacesW',
                                                                                            'SHDeleteKeyW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'PathIsNetworkPathW',
                                                                                            'SHOpenRegStream2W',
                                                                                            'SHRegGetBoolUSValueW',
                                                                                            'SHStrDupW',
                                                                                            'StrChrIW',
                                                                                            'PathFileExistsW',
                                                                                            'PathGetDriveNumberW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsDirectoryW',
                                                                                            'SHRegGetValueW',
                                                                                            'ChrCmpIW',
                                                                                            'AssocQueryKeyW',
                                                                                            'PathStripPathW',
                                                                                            'PathIsRootW',
                                                                                            'PathParseIconLocationW',
                                                                                            'StrCmpIW',
                                                                                            'StrCmpW',
                                                                                            'PathIsPrefixW',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'SHQueryInfoKeyW',
                                                                                            'StrCmpNW',
                                                                                            'StrTrimW',
                                                                                            'PathStripToRootW',
                                                                                            'StrRetToBufW',
                                                                                            'PathCommonPrefixW',
                                                                                            'SHStrDupA',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathIsFileSpecW',
                                                                                            'AssocCreate',
                                                                                            'StrRetToStrW',
                                                                                            'StrToIntW',
                                                                                            'StrChrW',
                                                                                            'PathCombineW',
                                                                                            'SHCreateThreadRef',
                                                                                            'SHSetThreadRef',
                                                                                            'SHGetValueW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveArgsW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'StrCmpNIW',
                                                                                            'PathGetArgsW',
                                                                                            'SHSetValueW',
                                                                                            'SHDeleteValueW',
                                                                                            'PathAppendW',
                                                                                            'PathFindExtensionW',
                                                                                            'SHCreateDataObject',
                                                                                            'SHGetLocalizedName',
                                                                                            'Shell_GetCachedImageIndexW',
                                                                                            'SHGetStockIconInfo',
                                                                                            'SHGetPropertyStoreForWindow',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHCreateItemWithParent',
                                                                                            'SHBindToFolderIDListParent',
                                                                                            'SHBindToFolderIDListParentEx',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHParseDisplayName',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBindToObject',
                                                                                            'SHGetKnownFolderIDList',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetNameFromIDList',
                                                                                            'SHCreateShellItem',
                                                                                            'SHChangeNotifyRegisterThread',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'SHUpdateRecycleBinIcon',
                                                                                            'SHBindToParent',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'ShellExecuteW',
                                                                                            'SHEnableServiceObject',
                                                                                            'SHGetIDListFromObject',
                                                                                            'SHCreateItemFromIDList',
                                                                                            'SHAddToRecentDocs',
                                                                                            'Shell_NotifyIconW',
                                                                                            'Shell_NotifyIconGetRect',
                                                                                            'ExtractIconExW',
                                                                                            'SHEvaluateSystemCommandTemplate',
                                                                                            'SHCreateShellItemArrayFromIDLists',
                                                                                            'DragQueryFileW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'SHCreateShellItemArrayFromShellItem',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromString',
                                                                                            'CoGetMalloc',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'RevokeDragDrop',
                                                                                            'RegisterDragDrop',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'StringFromGUID2',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'ReleaseStgMedium',
                                                                                            'PropVariantClear',
                                                                                            'CreateBindCtx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'GetThemeBackgroundExtent',
                                                                                            'GetThemeBackgroundRegion',
                                                                                            'GetThemeColor',
                                                                                            'IsThemePartDefined',
                                                                                            'GetThemeRect',
                                                                                            'DrawThemeIcon',
                                                                                            'GetBufferedPaintBits',
                                                                                            'BufferedPaintClear',
                                                                                            'IsAppThemed',
                                                                                            'IsCompositionActive',
                                                                                            'OpenThemeData',
                                                                                            'CloseThemeData',
                                                                                            'SetWindowTheme',
                                                                                            'GetThemeMetric',
                                                                                            'DrawThemeBackground',
                                                                                            'GetThemeTextExtent',
                                                                                            'DrawThemeText',
                                                                                            'GetThemeBool',
                                                                                            'DrawThemeParentBackground',
                                                                                            'GetWindowTheme',
                                                                                            'GetThemeBackgroundContentRect',
                                                                                            'GetThemePartSize',
                                                                                            'BeginBufferedPaint',
                                                                                            'DrawThemeTextEx',
                                                                                            'EndBufferedPaint',
                                                                                            'GetThemeMargins',
                                                                                            'BufferedPaintInit',
                                                                                            'BufferedPaintUnInit',
                                                                                            'IsThemeActive',
                                                                                            'CallNtPowerInformation',
                                                                                            'PowerDeterminePlatformRole',
                                                                                            'GetPwrCapabilities',
                                                                                            'DwmEnableBlurBehindWindow',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'DwmIsCompositionEnabled',
                                                                                            'DwmQueryThumbnailSourceSize',
                                                                                            'DwmUpdateThumbnailProperties',
                                                                                            'DwmUnregisterThumbnail',
                                                                                            'SLGetWindowsInformationDWORD',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCloneImage',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipSetCompositingMode',
                                                                                            'GetUserNameExW',
                                                                                            'NdrClientCall3',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'PSCreateMemoryPropertyStore',
                                                                                            'VariantToStringAlloc',
                                                                                            'VariantToStringWithDefault',
                                                                                            'PropVariantToString',
                                                                                            'VariantToBooleanWithDefault',
                                                                                            'PropVariantToInt64',
                                                                                            'VariantToInt32WithDefault',
                                                                                            'PropVariantToBoolean',
                                                                                            'PropVariantToUInt64',
                                                                                            'PropVariantToUInt32',
                                                                                            'PropVariantToStringAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 704,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1846828,
                                                                      'SectionNames': {'.data\x00\x00\x00': 15360,
                                                                                       '.pdata\x00\x00': 53248,
                                                                                       '.rdata\x00\x00': 192000,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 1847296,
                                                                                       '.text\x00\x00\x00': 752640},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/a54aa248a163a22590ea330022d373fde4919b7af92aa71f63293ff1028ebf49'},
 'a5832b8f7a014354a6c570094226500aefc7d3fc804379a3ff79dcd8cc719b45': {'AddressOfEntryPoint': 435232,
                                                                      'DebugRVA': 440032,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 473376,
                                                                      'ExportSize': 120,
                                                                      'IATRVA': 438272,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterEventSourceA',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'MSVCR80.dll': '_exit',
                                                                                      'USER32.dll': 'IsWindowEnabled',
                                                                                      'WSOCK32.dll': 'select'},
                                                                      'ImportedFunctions': ['WaitForMultipleObjects',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'ExitThread',
                                                                                            'ReadFile',
                                                                                            'CreateMailslotA',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetThreadLocale',
                                                                                            'GetWindowsDirectoryA',
                                                                                            '_lclose',
                                                                                            '_lopen',
                                                                                            'lstrcatA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'CreateEventA',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileA',
                                                                                            'GetVersion',
                                                                                            'GetTempFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'GetEnvironmentStrings',
                                                                                            'lstrcpyA',
                                                                                            'lstrlenA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FormatMessageA',
                                                                                            'GetModuleHandleA',
                                                                                            'VirtualQuery',
                                                                                            'FlushFileBuffers',
                                                                                            'IsBadWritePtr',
                                                                                            'GetCurrentThread',
                                                                                            'OutputDebugStringA',
                                                                                            'RaiseException',
                                                                                            'GetFileType',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetLogicalDrives',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'FreeConsole',
                                                                                            'OpenEventA',
                                                                                            'SetEvent',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetVersionExA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCurrentThreadId',
                                                                                            'wsprintfA',
                                                                                            'IsWindowVisible',
                                                                                            'GetClassNameA',
                                                                                            'SetForegroundWindow',
                                                                                            'PostMessageA',
                                                                                            'IsIconic',
                                                                                            'EnumWindows',
                                                                                            'CharUpperBuffA',
                                                                                            'OemToCharA',
                                                                                            'CharUpperA',
                                                                                            'wvsprintfA',
                                                                                            'IsWindowEnabled',
                                                                                            'RegQueryValueExA',
                                                                                            'ReportEventA',
                                                                                            'DeregisterEventSource',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'GetUserNameA',
                                                                                            'RegisterEventSourceA',
                                                                                            'setsockopt',
                                                                                            'bind',
                                                                                            'WSASetLastError',
                                                                                            'ntohs',
                                                                                            'getservbyport',
                                                                                            'gethostbyaddr',
                                                                                            'WSACleanup',
                                                                                            'getservbyname',
                                                                                            'htonl',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'closesocket',
                                                                                            '__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'listen',
                                                                                            'shutdown',
                                                                                            'inet_ntoa',
                                                                                            'socket',
                                                                                            'getprotobyname',
                                                                                            'WSAStartup',
                                                                                            'htons',
                                                                                            'select',
                                                                                            '_close',
                                                                                            '_strupr',
                                                                                            '_stricmp',
                                                                                            '_strdup',
                                                                                            '_read',
                                                                                            '_unlink',
                                                                                            '_write',
                                                                                            '_access',
                                                                                            '_sopen',
                                                                                            '__crt_debugger_hook',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_ctime32',
                                                                                            '_time32',
                                                                                            '__set_app_type',
                                                                                            '_putenv',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            '_cexit',
                                                                                            'memmove',
                                                                                            '_errno',
                                                                                            '__iob_func',
                                                                                            'setvbuf',
                                                                                            'fflush',
                                                                                            'vfprintf',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'sprintf',
                                                                                            'atoi',
                                                                                            'strchr',
                                                                                            'strrchr',
                                                                                            'memset',
                                                                                            'strncmp',
                                                                                            'strtok',
                                                                                            '_stat64i32',
                                                                                            '_searchenv',
                                                                                            '__p___argv',
                                                                                            '__p___argc',
                                                                                            'qsort',
                                                                                            'atol',
                                                                                            'strncpy',
                                                                                            'getenv',
                                                                                            'strstr',
                                                                                            'exit',
                                                                                            'longjmp',
                                                                                            '_ftime64',
                                                                                            'free',
                                                                                            'strcpy_s',
                                                                                            'calloc',
                                                                                            'strncpy_s',
                                                                                            'strtoul',
                                                                                            'sprintf_s',
                                                                                            'strcat_s',
                                                                                            'memcpy',
                                                                                            'malloc',
                                                                                            'mbstowcs',
                                                                                            'memcmp',
                                                                                            'isprint',
                                                                                            '_splitpath',
                                                                                            '_fullpath',
                                                                                            'realloc',
                                                                                            'isalpha',
                                                                                            '_lseeki64',
                                                                                            '_open_osfhandle',
                                                                                            '_time64',
                                                                                            'fprintf',
                                                                                            'strncat',
                                                                                            '_localtime64',
                                                                                            '__argv',
                                                                                            '__argc',
                                                                                            'asctime',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_getpid',
                                                                                            '_ctime64',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 207,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 428,
                                                                      'SectionNames': {'.data\x00\x00\x00': 64000,
                                                                                       '.pdata\x00\x00': 16896,
                                                                                       '.rdata\x00\x00': 35328,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 433152,
                                                                                       'ccread_d': 3072,
                                                                                       'ccxlate_': 4096,
                                                                                       'dblang_d': 1024,
                                                                                       'drargs_d': 14336,
                                                                                       'drmsg_da': 2560},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a5832b8f7a014354a6c570094226500aefc7d3fc804379a3ff79dcd8cc719b45'},
 'a63b12be457d884f289c74dc54e9e056d2040e0bb921b1cccc888db4c8fd9ed8': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 411472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 411648,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/a63b12be457d884f289c74dc54e9e056d2040e0bb921b1cccc888db4c8fd9ed8'},
 'a652ccbc910dfb92e89705532c627b82f5590a71462627715b2562072c25dcbb': {'AddressOfEntryPoint': 41372,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['GetModuleBaseNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'GetStringTypeW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetLastError',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'lstrcpyW',
                                                                                            'FlsGetValue',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'MessageBoxW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 65024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a652ccbc910dfb92e89705532c627b82f5590a71462627715b2562072c25dcbb'},
 'a6734d12c46d70539f43aef735c0de7e9f80e7e39f925b8c3c1a0a000f43f7b5': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9660,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2481664,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/a6734d12c46d70539f43aef735c0de7e9f80e7e39f925b8c3c1a0a000f43f7b5'},
 'a6f4774156de36bc935597ef020c65f2d6e24cd48be08b6e7f98b19555ee3b4f': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 345792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 346112,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/a6f4774156de36bc935597ef020c65f2d6e24cd48be08b6e7f98b19555ee3b4f'},
 'a747ab0ad442e17582607bdb5850644a17b7a058de6b9e5a2205a6a6569ff8db': {'AddressOfEntryPoint': 84396,
                                                                      'DebugRVA': 103552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                      'KERNEL32.dll': 'GetCommandLineA',
                                                                                      'MSVCP90.dll': '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                      'MSVCR90.dll': 'memcpy',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'GetMessageA'},
                                                                      'ImportedFunctions': ['WriteFile',
                                                                                            'OpenProcess',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeA',
                                                                                            'ResetEvent',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcessId',
                                                                                            'PeekNamedPipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'CreateSemaphoreA',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'LocalAlloc',
                                                                                            'TlsGetValue',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'SHGetFileInfoW',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'strtok_s',
                                                                                            '_wsplitpath_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wcslwr_s',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            '_strdup',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcstok_s',
                                                                                            'memcpy',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 30208,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 94720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a747ab0ad442e17582607bdb5850644a17b7a058de6b9e5a2205a6a6569ff8db'},
 'a8187a33f878d4e526ad8284e6209e4f25d89ced88ca7a2efc7ef7fd6c3e7cee': {'AddressOfEntryPoint': 1074888788,
                                                                      'DebugRVA': 657856,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 655360,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetLocaleInfoA',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'RPCRT4.dll': 'CStdStubBuffer_DebugServerRelease',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameW',
                                                                                      'ole32.dll': 'CoCreateInstanceEx'},
                                                                      'ImportedFunctions': ['CStdStubBuffer_Invoke',
                                                                                            'CStdStubBuffer_Disconnect',
                                                                                            'CStdStubBuffer_Connect',
                                                                                            'CStdStubBuffer_AddRef',
                                                                                            'CStdStubBuffer_QueryInterface',
                                                                                            'IUnknown_Release_Proxy',
                                                                                            'IUnknown_AddRef_Proxy',
                                                                                            'CStdStubBuffer_IsIIDSupported',
                                                                                            'NdrOleFree',
                                                                                            'NdrOleAllocate',
                                                                                            'NdrCStdStubBuffer_Release',
                                                                                            'CStdStubBuffer_CountRefs',
                                                                                            'CStdStubBuffer_DebugServerQueryInterface',
                                                                                            'IUnknown_QueryInterface_Proxy',
                                                                                            'CStdStubBuffer_DebugServerRelease',
                                                                                            'PathFindFileNameW',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrlenW',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateFileW',
                                                                                            'GetProcessTimes',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateThread',
                                                                                            'OpenEventW',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThreadId',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateEventA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateMutexW',
                                                                                            'OutputDebugStringW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'ReleaseMutex',
                                                                                            'GetFileSizeEx',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCommandLineW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetLocaleInfoW',
                                                                                            'LocalFree',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'MoveFileW',
                                                                                            'ReadFile',
                                                                                            'FormatMessageA',
                                                                                            'ExitThread',
                                                                                            'SizeofResource',
                                                                                            'GetFileAttributesW',
                                                                                            'ResumeThread',
                                                                                            'TlsSetValue',
                                                                                            'ResetEvent',
                                                                                            'OpenEventA',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'LoadLibraryW',
                                                                                            'GetTickCount',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'InitializeCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'LocalAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'GetStartupInfoW',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoTaskMemFree',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoResumeClassObjects',
                                                                                            'StringFromGUID2',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoCreateInstanceEx',
                                                                                            'VarUI4FromStr',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 155624,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a8187a33f878d4e526ad8284e6209e4f25d89ced88ca7a2efc7ef7fd6c3e7cee'},
 'a81f2938aee35ef632759531af1cbc2f9e744e3155e0fbf9537509ad17fca273': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 352944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 353280,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/a81f2938aee35ef632759531af1cbc2f9e744e3155e0fbf9537509ad17fca273'},
 'a8669e9cfbb19572be0eba1a6f59d24a3155b01f6546ddded4c69898d6ae600c': {'AddressOfEntryPoint': 66488,
                                                                      'DebugRVA': 33392,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltStartFiltering',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['ExAllocatePool',
                                                                                            'IoGetCurrentProcess',
                                                                                            'ZwClose',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'ZwDuplicateObject',
                                                                                            'RtlFreeAnsiString',
                                                                                            'ZwOpenProcess',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'MmIsAddressValid',
                                                                                            'ObfDereferenceObject',
                                                                                            'FsRtlIsDbcsInExpression',
                                                                                            'RtlInitAnsiString',
                                                                                            '_strupr',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'PsLookupThreadByThreadId',
                                                                                            'strncmp',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'IoFileObjectType',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'ZwTerminateProcess',
                                                                                            'KeStackAttachProcess',
                                                                                            'ProbeForRead',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            'wcsncpy',
                                                                                            '_wcslwr',
                                                                                            'ExAcquireResourceSharedLite',
                                                                                            'ExReleaseResourceLite',
                                                                                            'ExDeleteResourceLite',
                                                                                            'ExInitializeResourceLite',
                                                                                            'KeBugCheckEx',
                                                                                            'ObQueryNameString',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PsSetCreateProcessNotifyRoutine',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ExInterlockedPopEntryList',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'PsSetCreateThreadNotifyRoutine',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'RtlInitUnicodeString',
                                                                                            '_wcsnicmp',
                                                                                            'NtBuildNumber',
                                                                                            'PsSetLoadImageNotifyRoutine',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeInitializeMutex',
                                                                                            'ExFreePoolWithTag',
                                                                                            'IoThreadToProcess',
                                                                                            '_stricmp',
                                                                                            '__C_specific_handler',
                                                                                            'FltParseFileNameInformation',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltRegisterFilter',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltAllocateContext',
                                                                                            'FltReleaseContext',
                                                                                            'FltQueryInformationFile',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltCloseClientPort',
                                                                                            'FltCancelFileOpen',
                                                                                            'FltSetStreamHandleContext',
                                                                                            'FltSendMessage',
                                                                                            'FltGetStreamHandleContext',
                                                                                            'FltStartFiltering'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9728,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 28672,
                                                                                       'INIT\x00\x00\x00\x00': 3584,
                                                                                       'PAGE\x00\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/a8669e9cfbb19572be0eba1a6f59d24a3155b01f6546ddded4c69898d6ae600c'},
 'a8b2cd0b25847b92220f60786ebeead8e47df8fdf737d0676a82335445bf7d62': {'AddressOfEntryPoint': 1789960,
                                                                      'DebugRVA': 1524288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1523712,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 896,
                                                                      'SectionNames': {'.aot\x00\x00\x00\x00': 47616,
                                                                                       '.data\x00\x00\x00': 53760,
                                                                                       '.pdata\x00\x00': 50688,
                                                                                       '.rdata\x00\x00': 153088,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 1458688,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'init\x00\x00\x00\x00': 512,
                                                                                       'page\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/a8b2cd0b25847b92220f60786ebeead8e47df8fdf737d0676a82335445bf7d62'},
 'a8ce807548d49e2cfe83c04fe00521289426bac3579a8400fbde6fa6a3da6f22': {'AddressOfEntryPoint': 242704,
                                                                      'DebugRVA': 493328,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 590784,
                                                                      'ExportSize': 17916,
                                                                      'IATRVA': 491520,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'TlsFree',
                                                                                      'NetInst.dll': '?DllGetClassFactoryObject@@YAJPEAPEAVISysProberInterfaceFactory@@@Z',
                                                                                      'OLEAUT32.dll': 'CreateErrorInfo',
                                                                                      'USER32.dll': 'SetTimer',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['?DllGetClassFactoryObject@@YAJPEAPEAVIDriverInstallInterfaceFactory@@@Z',
                                                                                            '?DllGetClassFactoryObject@@YAJPEAPEAVISysProberInterfaceFactory@@@Z',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'RegCreateKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'inet_addr',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'FatalAppExitA',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'CreateThread',
                                                                                            'GetConsoleCP',
                                                                                            'WriteFile',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetLocalTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetACP',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrlenA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'DeviceIoControl',
                                                                                            'SetLastError',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetCurrentProcess',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentThread',
                                                                                            'GetShortPathNameA',
                                                                                            'FindNextFileA',
                                                                                            'ReadFile',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'LoadResource',
                                                                                            'FindResourceExA',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'CreateMutexA',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetFileType',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'SetEndOfFile',
                                                                                            'HeapReAlloc',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'IsValidCodePage',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'HeapSize',
                                                                                            'Sleep',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetFullPathNameA',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetThreadLocale',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeA',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'FlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetWindowTextA',
                                                                                            'LoadStringA',
                                                                                            'wsprintfA',
                                                                                            'ExitWindowsEx',
                                                                                            'MessageBoxA',
                                                                                            'SetDlgItemTextA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'DefDlgProcA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'FindWindowA',
                                                                                            'CreateDialogParamA',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDlgItem',
                                                                                            'KillTimer',
                                                                                            'GetMessageA',
                                                                                            'DestroyWindow',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'EnableWindow',
                                                                                            'ShowWindow',
                                                                                            'SetTimer',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'VarBstrCat',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'VariantClear',
                                                                                            'GetErrorInfo',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocString',
                                                                                            'CreateErrorInfo'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 194,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 14928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 29184,
                                                                                       '.rdata\x00\x00': 117248,
                                                                                       '.rsrc\x00\x00\x00': 15360,
                                                                                       '.text\x00\x00\x00': 484864},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a8ce807548d49e2cfe83c04fe00521289426bac3579a8400fbde6fa6a3da6f22'},
 'a8d16e74db0f5a450c32a2f67394b6456ee1a415ba4a1c4a76735a9d9fb53f74': {'AddressOfEntryPoint': 1349750,
                                                                      'DebugRVA': 1002080,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 1218928,
                                                                      'ExportSize': 251,
                                                                      'IATRVA': 999424,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CopySid',
                                                                                      'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'PSAPI.DLL': 'GetMappedFileNameW',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'DestroyEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeEndPeriod'},
                                                                      'ImportedFunctions': ['PathRemoveFileSpecW',
                                                                                            'SHDeleteKeyW',
                                                                                            'SHStrDupW',
                                                                                            'UrlCanonicalizeW',
                                                                                            'PathFileExistsW',
                                                                                            'GetTickCount',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetInformationJobObject',
                                                                                            'WaitForSingleObject',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSection',
                                                                                            'TerminateJobObject',
                                                                                            'SetEvent',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'ResetEvent',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'DeleteCriticalSection',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetHandleInformation',
                                                                                            'GetProcessHandleCount',
                                                                                            'GetUserDefaultLangID',
                                                                                            'VirtualFree',
                                                                                            'ResumeThread',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'WriteProcessMemory',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetThreadContext',
                                                                                            'AssignProcessToJobObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'VirtualProtectEx',
                                                                                            'GetLongPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateFileW',
                                                                                            'QueryDosDeviceW',
                                                                                            'CreateJobObjectW',
                                                                                            'CreateMutexW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateNamedPipeW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'VirtualQuery',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetStdHandle',
                                                                                            'AllocConsole',
                                                                                            'AttachConsole',
                                                                                            'OpenProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetProcessIoCounters',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'SetPriorityClass',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'GetProcessHeaps',
                                                                                            'GetProcessId',
                                                                                            'GetSystemInfo',
                                                                                            'ReadFile',
                                                                                            'CreatePipe',
                                                                                            'GetProcessTimes',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ReleaseMutex',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringA',
                                                                                            'FormatMessageA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'UnmapViewOfFile',
                                                                                            'CompareFileTime',
                                                                                            'MoveFileExW',
                                                                                            'ReplaceFileW',
                                                                                            'CopyFileW',
                                                                                            'GetFileAttributesExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindClose',
                                                                                            'CreateDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFileSize',
                                                                                            'VirtualAlloc',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'IsDebuggerPresent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TryEnterCriticalSection',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'LocalAlloc',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'TzSpecificLocalTimeToSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointerEx',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitNamedPipeW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'GetDateFormatW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapFree',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetFullPathNameW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetCPInfo',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleFileNameA',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'TlsAlloc',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FatalAppExitA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'LoadLibraryA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetFullPathNameA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetTempPathW',
                                                                                            'LocalFree',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCommandLineW',
                                                                                            'GetProcAddress',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'UserHandleGrantAccess',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'CreateWindowStationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'CreateDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'DestroyWindow',
                                                                                            'GetUserObjectInformationW',
                                                                                            'MessageBoxW',
                                                                                            'CharUpperW',
                                                                                            'GetKeyState',
                                                                                            'SystemParametersInfoW',
                                                                                            'wsprintfW',
                                                                                            'WaitForInputIdle',
                                                                                            'SetForegroundWindow',
                                                                                            'MoveWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'CreateWindowExW',
                                                                                            'GetDesktopWindow',
                                                                                            'SHFileOperationW',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHChangeNotify',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'QueryWorkingSet',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'GetMappedFileNameW',
                                                                                            'timeBeginPeriod',
                                                                                            'timeGetTime',
                                                                                            'timeEndPeriod',
                                                                                            'RegCloseKey',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'RevertToSelf',
                                                                                            'SetSecurityInfo',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenProcessToken',
                                                                                            'SetThreadToken',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegCreateKeyExW',
                                                                                            'CreateRestrictedToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'DuplicateToken',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'TraceEvent',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 297,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2004,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 70144,
                                                                                       '.rdata\x00\x00': 220160,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 993280,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a8d16e74db0f5a450c32a2f67394b6456ee1a415ba4a1c4a76735a9d9fb53f74'},
 'a8d2184d31ac2f84559b98aacff6352447dfb4fbff77f1ee1b8c3e4eae7c2afc': {'AddressOfEntryPoint': 1074284285,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 399936,
                                                                      'ExportSize': 251,
                                                                      'IATRVA': 327680,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_BeginDrag',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'TlsAlloc',
                                                                                      'MSVCRT.dll': 'strlen',
                                                                                      'SETUPAPI.dll': 'SetupDiCallClassInstaller',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SetClipboardData',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'comdlg32.dll': 'ChooseColorA',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['closesocket',
                                                                                            'socket',
                                                                                            'setsockopt',
                                                                                            'bind',
                                                                                            'recv',
                                                                                            'WSAStartup',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'mktime',
                                                                                            '_mbsnbcpy',
                                                                                            '_mbsnbcat',
                                                                                            '_mbschr',
                                                                                            '_purecall',
                                                                                            'strrchr',
                                                                                            'fputc',
                                                                                            '_ftime',
                                                                                            '_strdup',
                                                                                            'atoi',
                                                                                            '_mbscmp',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'fflush',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_strupr',
                                                                                            'memcpy',
                                                                                            'isxdigit',
                                                                                            'strstr',
                                                                                            'isdigit',
                                                                                            'toupper',
                                                                                            'strncmp',
                                                                                            'fgetc',
                                                                                            'strtoul',
                                                                                            'isspace',
                                                                                            'sscanf',
                                                                                            'memcmp',
                                                                                            'srand',
                                                                                            'fprintf',
                                                                                            'vsprintf',
                                                                                            '_stricmp',
                                                                                            'fgets',
                                                                                            'strcmp',
                                                                                            'fseek',
                                                                                            '_splitpath',
                                                                                            'fopen',
                                                                                            'fclose',
                                                                                            'rand',
                                                                                            '__CxxFrameHandler',
                                                                                            'memset',
                                                                                            'localtime',
                                                                                            'asctime',
                                                                                            'gmtime',
                                                                                            'strcpy',
                                                                                            'sprintf',
                                                                                            'strcat',
                                                                                            'strncpy',
                                                                                            '_endthread',
                                                                                            '_beginthreadex',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_setmbcp',
                                                                                            'strlen',
                                                                                            'GetTickCount',
                                                                                            'GetStartupInfoA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetLocaleInfoA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'CreateProcessA',
                                                                                            'MulDiv',
                                                                                            'ClearCommError',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetOverlappedResult',
                                                                                            'SetupComm',
                                                                                            'GetCommState',
                                                                                            'SetCommState',
                                                                                            'SetCommTimeouts',
                                                                                            'SetCommMask',
                                                                                            'EscapeCommFunction',
                                                                                            'PurgeComm',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CopyFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetComputerNameA',
                                                                                            'GetLocalTime',
                                                                                            'CreateThread',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'CreateMutexA',
                                                                                            'OpenProcess',
                                                                                            'ReleaseMutex',
                                                                                            'TerminateThread',
                                                                                            'ResetEvent',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'TlsSetValue',
                                                                                            'CreateEventA',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'LoadBitmapA',
                                                                                            'GetWindowRect',
                                                                                            'LoadIconA',
                                                                                            'CharNextA',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'FindWindowA',
                                                                                            'CheckMenuItem',
                                                                                            'GetSubMenu',
                                                                                            'UpdateWindow',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'RemoveMenu',
                                                                                            'LoadMenuA',
                                                                                            'GetMenu',
                                                                                            'SetMenu',
                                                                                            'IsZoomed',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongA',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'SetWindowTextA',
                                                                                            'GetSysColorBrush',
                                                                                            'SystemParametersInfoA',
                                                                                            'EndDeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'FillRect',
                                                                                            'GetClassLongPtrA',
                                                                                            'GetKeyState',
                                                                                            'wsprintfA',
                                                                                            'IsRectEmpty',
                                                                                            'PtInRect',
                                                                                            'InflateRect',
                                                                                            'OffsetRect',
                                                                                            'ClientToScreen',
                                                                                            'GetDCEx',
                                                                                            'LoadCursorA',
                                                                                            'OpenClipboard',
                                                                                            'GetParent',
                                                                                            'GetLastActivePopup',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetClientRect',
                                                                                            'PostMessageA',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'CopyRect',
                                                                                            'EmptyClipboard',
                                                                                            'CloseClipboard',
                                                                                            'IsMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetSysColor',
                                                                                            'EnableWindow',
                                                                                            'GetWindow',
                                                                                            'RedrawWindow',
                                                                                            'SendMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SetClipboardData',
                                                                                            'CreateFontA',
                                                                                            'PatBlt',
                                                                                            'GetTextColor',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetObjectA',
                                                                                            'SelectObject',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetTextMetricsA',
                                                                                            'GetDeviceCaps',
                                                                                            'ChooseColorA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_BeginDrag',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 241,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 52648,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a8d2184d31ac2f84559b98aacff6352447dfb4fbff77f1ee1b8c3e4eae7c2afc'},
 'a98b27f54fdc7b542d0c2ff11dc9a0b78c425071620dfdf071ec59b431ecb8a6': {'AddressOfEntryPoint': 6992,
                                                                      'DebugRVA': 37632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorSacl',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'USER32.dll': 'GetMessageW'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'lstrlenW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcatW',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetSecurityDescriptorSacl'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 29696},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a98b27f54fdc7b542d0c2ff11dc9a0b78c425071620dfdf071ec59b431ecb8a6'},
 'a9932f82d9992e82f4dd46434c84834677a5d83d56c8339449cf12d5281f0fd9': {'AddressOfEntryPoint': 1074631401,
                                                                      'DebugRVA': 633440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 836864,
                                                                      'ExportSize': 483,
                                                                      'IATRVA': 630784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptDestroyHash',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'USER32.dll': 'CreateDesktopW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'send'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileW',
                                                                                            'RtlCaptureContext',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'SetInformationJobObject',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'SetHandleInformation',
                                                                                            'GetSystemInfo',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'CloseHandle',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetThreadContext',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualProtectEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'FlushInstructionCache',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'RtlPcToFileHeader',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'PeekMessageW',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'PostQuitMessage',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CallMsgFilterW',
                                                                                            'TranslateMessage',
                                                                                            'CreateWindowStationW',
                                                                                            'DispatchMessageW',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'KillTimer',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CreateDesktopW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'ntohs',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'timeGetDevCaps',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 290,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a9932f82d9992e82f4dd46434c84834677a5d83d56c8339449cf12d5281f0fd9'},
 'a9ad1e7b242cf084c621f046e9d2ecb0251afeceb39adbfb6dfd96057d0368bd': {'AddressOfEntryPoint': 484124,
                                                                      'DebugRVA': 633440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 836864,
                                                                      'ExportSize': 483,
                                                                      'IATRVA': 630784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptDestroyHash',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'USER32.dll': 'CreateDesktopW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'send'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileW',
                                                                                            'RtlCaptureContext',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'SetInformationJobObject',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'SetHandleInformation',
                                                                                            'GetSystemInfo',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'CloseHandle',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetThreadContext',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualProtectEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'FlushInstructionCache',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'RtlPcToFileHeader',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'PeekMessageW',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'PostQuitMessage',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CallMsgFilterW',
                                                                                            'TranslateMessage',
                                                                                            'CreateWindowStationW',
                                                                                            'DispatchMessageW',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'KillTimer',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CreateDesktopW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'ntohs',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'timeGetDevCaps',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 290,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 36864,
                                                                                       '.rdata\x00\x00': 206848,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 626688,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/a9ad1e7b242cf084c621f046e9d2ecb0251afeceb39adbfb6dfd96057d0368bd'},
 'aa4f391dcc0de9fc1c27c93ff94f47e1a5185c046bbadd4d9fe5f868d24793e3': {'AddressOfEntryPoint': 1073806141,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'DispatchMessageA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'CreateMutexA',
                                                                                            'FreeLibrary',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetVersionExA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'GetStringTypeA',
                                                                                            'GetLocaleInfoA',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapFree',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'wsprintfA',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcA',
                                                                                            'LoadIconA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetStockObject',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'ShellExecuteExA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2160,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/aa4f391dcc0de9fc1c27c93ff94f47e1a5185c046bbadd4d9fe5f868d24793e3'},
 'ab050900a8e10fb104a514c6047762d0c37da2a5e95779fb385a9cc8c289d6ee': {'AddressOfEntryPoint': 6992,
                                                                      'DebugRVA': 37632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorSacl',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'USER32.dll': 'GetMessageW'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'lstrlenW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcatW',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetSecurityDescriptorSacl'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 29696},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ab050900a8e10fb104a514c6047762d0c37da2a5e95779fb385a9cc8c289d6ee'},
 'ab59fbbf1752f23332541f4470160f63fac267fafd501f1fd9a249f86467eccd': {'AddressOfEntryPoint': 480640,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 581632,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'GetActiveObject',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetMenuItemCount',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'listen',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'listen',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'waveOutSetVolume',
                                                                                            'timeGetTime',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Remove',
                                                                                            'WNetUseConnectionW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SetSystemPowerState',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindResourceW',
                                                                                            'FindFirstFileW',
                                                                                            'LoadResource',
                                                                                            'FindClose',
                                                                                            'LockResource',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetVolumeLabelW',
                                                                                            'DeviceIoControl',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'SetErrorMode',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'CreatePipe',
                                                                                            'DuplicateHandle',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'PeekNamedPipe',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryExW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcessHeap',
                                                                                            'GetVersionExA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ResumeThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteCriticalSection',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'CreateFileMappingW',
                                                                                            'OpenProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'ReadProcessMemory',
                                                                                            'WriteProcessMemory',
                                                                                            'MapViewOfFile',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemInfo',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'Beep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetActiveWindow',
                                                                                            'InflateRect',
                                                                                            'CharNextW',
                                                                                            'DrawFocusRect',
                                                                                            'wsprintfW',
                                                                                            'DrawTextW',
                                                                                            'RedrawWindow',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DrawMenuBar',
                                                                                            'SubtractRect',
                                                                                            'OffsetRect',
                                                                                            'GetClassWord',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetWindow',
                                                                                            'IsChild',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'ReleaseDC',
                                                                                            'GetCursor',
                                                                                            'GetDC',
                                                                                            'WindowFromPoint',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CharLowerBuffW',
                                                                                            'UnregisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'SetWindowLongPtrW',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CreateIcon',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetWindowLongW',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'OpenClipboard',
                                                                                            'keybd_event',
                                                                                            'VkKeyScanA',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'CopyRect',
                                                                                            'BeginPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'GetSysColor',
                                                                                            'SetClassLongPtrW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowDC',
                                                                                            'SetMenu',
                                                                                            'SetCursor',
                                                                                            'CreateMenu',
                                                                                            'DestroyMenu',
                                                                                            'FlashWindow',
                                                                                            'SetMenuDefaultItem',
                                                                                            'SetWindowLongW',
                                                                                            'ScreenToClient',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'CreatePopupMenu',
                                                                                            'MessageBoxA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'IsZoomed',
                                                                                            'GetCaretPos',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringW',
                                                                                            'IsCharUpperW',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'CountClipboardFormats',
                                                                                            'SetWindowPos',
                                                                                            'CloseClipboard',
                                                                                            'CopyImage',
                                                                                            'GetClipboardData',
                                                                                            'SetForegroundWindow',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'DestroyIcon',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'GetKeyState',
                                                                                            'RegisterHotKey',
                                                                                            'GetMenuItemCount',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'PolyBezierTo',
                                                                                            'ExtCreatePen',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'Ellipse',
                                                                                            'MoveToEx',
                                                                                            'AngleArc',
                                                                                            'LineTo',
                                                                                            'CloseFigure',
                                                                                            'SetPixel',
                                                                                            'EndPath',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VarR4FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'GetActiveObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 462,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 148648,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16384,
                                                                                       '.pdata\x00\x00': 18432,
                                                                                       '.rdata\x00\x00': 80896,
                                                                                       '.rsrc\x00\x00\x00': 148992,
                                                                                       '.text\x00\x00\x00': 575488},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/ab59fbbf1752f23332541f4470160f63fac267fafd501f1fd9a249f86467eccd'},
 'abfc0216cb1db3c9345ae4ce7f685a569e9be9b90fa391cc09ee0f7a40112fa4': {'AddressOfEntryPoint': 380594,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 288336,
                                                                      'ExportSize': 33691,
                                                                      'IATRVA': 196608,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetUserNameA',
                                                                                      'KERNEL32.dll': 'RtlCaptureContext',
                                                                                      'MSVCP80.dll': '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z',
                                                                                      'MSVCR80.dll': '_lock',
                                                                                      'WS2_32.dll': '__WSAFDIsSet'},
                                                                      'ImportedFunctions': ['recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'bind',
                                                                                            'inet_addr',
                                                                                            'WSAStringToAddressA',
                                                                                            'WSASetLastError',
                                                                                            'recv',
                                                                                            'WSASocketA',
                                                                                            'WSAIoctl',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'getaddrinfo',
                                                                                            'getnameinfo',
                                                                                            'freeaddrinfo',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'ioctlsocket',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAGetLastError',
                                                                                            'gethostname',
                                                                                            'setsockopt',
                                                                                            'select',
                                                                                            '__WSAFDIsSet',
                                                                                            'GetUserNameA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'GetLastError',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'FormatMessageA',
                                                                                            'GetTickCount',
                                                                                            'RtlCaptureContext',
                                                                                            '?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z',
                                                                                            '??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@0@AEAV10@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z',
                                                                                            '?endl@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K1@Z',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K1@Z',
                                                                                            '?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2_KB',
                                                                                            '?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K1@Z',
                                                                                            '?_Lock@_Mutex@std@@QEAAXXZ',
                                                                                            '?_Unlock@_Mutex@std@@QEAAXXZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'printf',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            'memcpy',
                                                                                            '??4exception@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_wassert',
                                                                                            'strpbrk',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '_CxxThrowException',
                                                                                            'malloc',
                                                                                            'realloc',
                                                                                            'atoi',
                                                                                            'strchr',
                                                                                            '_snprintf',
                                                                                            '_purecall',
                                                                                            'isalpha',
                                                                                            'strerror',
                                                                                            '_errno',
                                                                                            'getenv',
                                                                                            '_vsnprintf',
                                                                                            'strncpy',
                                                                                            'strspn',
                                                                                            'memset',
                                                                                            'sprintf',
                                                                                            'atof',
                                                                                            '_time64',
                                                                                            'sscanf',
                                                                                            'fprintf',
                                                                                            'vfprintf',
                                                                                            '__iob_func',
                                                                                            '_ftime64',
                                                                                            'strftime',
                                                                                            '_localtime64',
                                                                                            'isspace',
                                                                                            'fputs',
                                                                                            'memcmp',
                                                                                            'strrchr',
                                                                                            '_stat64i32',
                                                                                            'rename',
                                                                                            '_localtime64_s',
                                                                                            'atol',
                                                                                            'memmove_s',
                                                                                            '_getcwd',
                                                                                            '_rmdir',
                                                                                            '_chmod',
                                                                                            '_access',
                                                                                            '_close',
                                                                                            '?_open@@YAHPEBDHH@Z',
                                                                                            '_unlink',
                                                                                            '_mkdir',
                                                                                            'toupper',
                                                                                            '??8type_info@@QEBA_NAEBV0@@Z',
                                                                                            'feof',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'fseek',
                                                                                            'ferror',
                                                                                            'fwrite',
                                                                                            'fread',
                                                                                            'getc',
                                                                                            'putc',
                                                                                            '_stricmp',
                                                                                            '_write',
                                                                                            '_read',
                                                                                            '_strdup',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 181,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 20992,
                                                                                       '.rdata\x00\x00': 125440,
                                                                                       '.rsrc\x00\x00\x00': 25600,
                                                                                       '.text\x00\x00\x00': 189440,
                                                                                       'nrlnbus\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/abfc0216cb1db3c9345ae4ce7f685a569e9be9b90fa391cc09ee0f7a40112fa4'},
 'ac4f4a07170dfabf06e0c23733ea3068f992e4093f81afdfbc147b2f5ae919a2': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 17369088,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/ac4f4a07170dfabf06e0c23733ea3068f992e4093f81afdfbc147b2f5ae919a2'},
 'ac5883f82889de7303a2383e323f9055b304b692a457f3aba05e962a127337ab': {'AddressOfEntryPoint': 78608,
                                                                      'DebugRVA': 252508,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 253952,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'API-MS-Win-Core-ErrorHandling-L1-1-0.dll': 'UnhandledExceptionFilter',
                                                                                      'API-MS-Win-Core-File-L1-1-0.dll': 'FindNextFileW',
                                                                                      'API-MS-Win-Core-Handle-L1-1-0.dll': 'CloseHandle',
                                                                                      'API-MS-Win-Core-Heap-L1-1-0.dll': 'HeapSetInformation',
                                                                                      'API-MS-Win-Core-IO-L1-1-0.dll': 'DeviceIoControl',
                                                                                      'API-MS-Win-Core-LibraryLoader-L1-1-0.dll': 'LoadStringW',
                                                                                      'API-MS-Win-Core-LocalRegistry-L1-1-0.dll': 'RegSetValueExW',
                                                                                      'API-MS-Win-Core-Misc-L1-1-0.dll': 'lstrlenW',
                                                                                      'API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'API-MS-Win-Core-ProcessThreads-L1-1-0.dll': 'GetProcessTimes',
                                                                                      'API-MS-Win-Core-Profile-L1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'API-MS-Win-Core-String-L1-1-0.dll': 'CompareStringW',
                                                                                      'API-MS-Win-Core-Synch-L1-1-0.dll': 'OpenProcess',
                                                                                      'API-MS-Win-Core-SysInfo-L1-1-0.dll': 'GetSystemTime',
                                                                                      'API-MS-Win-Security-Base-L1-1-0.dll': 'SetTokenInformation',
                                                                                      'API-MS-Win-Security-LSALookup-L1-1-0.dll': 'LsaLookupOpenLocalPolicy',
                                                                                      'API-MS-Win-Security-SDDL-L1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'CRYPTBASE.dll': 'SystemFunction005',
                                                                                      'RPCRT4.dll': 'RpcAsyncAbortCall',
                                                                                      'SspiCli.dll': 'LogonUserExExW',
                                                                                      'msvcrt.dll': '_ultow',
                                                                                      'ntdll.dll': 'RtlUnicodeStringToInteger'},
                                                                      'ImportedFunctions': ['_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_ltow',
                                                                                            'wcscspn',
                                                                                            '__getmainargs',
                                                                                            '_ltow_s',
                                                                                            'wcschr',
                                                                                            '_wcslwr',
                                                                                            '_ultow_s',
                                                                                            'time',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            'wcstoul',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            'wcsncmp',
                                                                                            '_ultow',
                                                                                            'UuidCreate',
                                                                                            'UuidCreateNil',
                                                                                            'UuidEqual',
                                                                                            'RpcServerUnsubscribeForNotification',
                                                                                            'RpcServerSubscribeForNotification',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcServerInqBindingHandle',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'I_RpcSessionStrictContextHandle',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'NdrServerCall2',
                                                                                            'NdrAsyncServerCall',
                                                                                            'UuidFromStringW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcServerInqCallAttributesA',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcAsyncAbortCall',
                                                                                            'LogonUserExExW',
                                                                                            'RtlLengthSid',
                                                                                            'EtwTraceMessage',
                                                                                            'NtTraceControl',
                                                                                            'RtlSetLastWin32Error',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtOpenThread',
                                                                                            'NtQueueApcThread',
                                                                                            'RtlQueueApcWow64Thread',
                                                                                            'EvtIntReportEventAndSourceAsync',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventRegister',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlFreeHeap',
                                                                                            'NtSetEvent',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtOpenProcessToken',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtQueryDirectoryFile',
                                                                                            'NtDeleteFile',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'NtFilterToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtSetInformationThread',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtDuplicateToken',
                                                                                            'NtAccessCheckAndAuditAlarm',
                                                                                            'NtAccessCheck',
                                                                                            'NtPrivilegeObjectAuditAlarm',
                                                                                            'NtPrivilegeCheck',
                                                                                            'RtlMapGenericMask',
                                                                                            'RtlSetSecurityObject',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'RtlQuerySecurityObject',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'NtDeleteKey',
                                                                                            'NtEnumerateKey',
                                                                                            'NtDeleteValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenKey',
                                                                                            'NtCreateKey',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlConvertExclusiveToShared',
                                                                                            'RtlConvertSharedToExclusive',
                                                                                            'RtlCreateServiceSid',
                                                                                            'RtlRegisterWait',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlCopySid',
                                                                                            'NtUnloadDriver',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'NtLoadDriver',
                                                                                            'DbgPrintEx',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlInitializeSRWLock',
                                                                                            'NtOpenFile',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlReleaseSRWLockShared',
                                                                                            'NtDeleteObjectAuditAlarm',
                                                                                            'RtlAcquireSRWLockShared',
                                                                                            'NtFlushKey',
                                                                                            'RtlAreAllAccessesGranted',
                                                                                            'NtCloseObjectAuditAlarm',
                                                                                            'RtlReleaseSRWLockExclusive',
                                                                                            'RtlAcquireSRWLockExclusive',
                                                                                            'RtlDeregisterWait',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlQueueWorkItem',
                                                                                            'RtlDeleteSecurityObject',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlCopyLuid',
                                                                                            'NtQueryKey',
                                                                                            'NtShutdownSystem',
                                                                                            'NtInitializeRegistry',
                                                                                            'NtSetSystemEnvironmentValue',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlNewSecurityObject',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'LsaLookupTranslateSids',
                                                                                            'LsaLookupFreeMemory',
                                                                                            'LsaLookupClose',
                                                                                            'LsaLookupManageSidNameMapping',
                                                                                            'LsaLookupGetDomainInfo',
                                                                                            'LsaLookupTranslateNames',
                                                                                            'LsaLookupOpenLocalPolicy',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'SystemFunction029',
                                                                                            'SystemFunction005',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetFileInformationByHandle',
                                                                                            'CreateDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeviceIoControl',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'LoadStringW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegLoadMUIStringW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'IsWow64Process',
                                                                                            'lstrlenW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetProcessId',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateProcessAsUserW',
                                                                                            'ResumeThread',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'ExitThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetProcessTimes',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CompareStringW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'ResetEvent',
                                                                                            'OpenEventW',
                                                                                            'OpenProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemTime',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'CheckTokenMembership',
                                                                                            'GetTokenInformation',
                                                                                            'InitializeAcl',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AllocateLocallyUniqueId',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetTokenInformation'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 293,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 19112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 39936,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 248832},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/ac5883f82889de7303a2383e323f9055b304b692a457f3aba05e962a127337ab'},
 'ac6fcad140c294b035b03cd4d15c14122b3a34f74800382f1dd8db1f545540cb': {'AddressOfEntryPoint': 84396,
                                                                      'DebugRVA': 103552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                      'KERNEL32.dll': 'GetCommandLineA',
                                                                                      'MSVCP90.dll': '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                      'MSVCR90.dll': 'memcpy',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'GetMessageA'},
                                                                      'ImportedFunctions': ['WriteFile',
                                                                                            'OpenProcess',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeA',
                                                                                            'ResetEvent',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcessId',
                                                                                            'PeekNamedPipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'CreateSemaphoreA',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'LocalAlloc',
                                                                                            'TlsGetValue',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'SHGetFileInfoW',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'strtok_s',
                                                                                            '_wsplitpath_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wcslwr_s',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            '_strdup',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcstok_s',
                                                                                            'memcpy',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 30208,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 94720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ac6fcad140c294b035b03cd4d15c14122b3a34f74800382f1dd8db1f545540cb'},
 'acd9dddb835b32baf47cce03ae93ea8635967e10305acf00e7eb0b12bbcce901': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1675184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1675264,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/acd9dddb835b32baf47cce03ae93ea8635967e10305acf00e7eb0b12bbcce901'},
 'ad9d39e35f76538955913d9ca5cae6351b6a59f90396fec211c6ffbc2745a33f': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 856084,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 856576,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/ad9d39e35f76538955913d9ca5cae6351b6a59f90396fec211c6ffbc2745a33f'},
 'adc09c295222b90c4eb25a3badfa88976b5d9313a35e4023e8ea146ab4369f1c': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1452848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1453056,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/adc09c295222b90c4eb25a3badfa88976b5d9313a35e4023e8ea146ab4369f1c'},
 'adc82f423ab22f6fe031d3a80683db642b5a92cfb748c41ced4d0b2b1e4a04de': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 190532,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 190976,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/adc82f423ab22f6fe031d3a80683db642b5a92cfb748c41ced4d0b2b1e4a04de'},
 'adf7d4b104224a9e4eb6e96aadc69c9782661530b33e2d46c3cd9ec1b2076f27': {'AddressOfEntryPoint': 8760,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 58400,
                                                                      'ExportSize': 85,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers'},
                                                                      'ImportedFunctions': ['GetExitCodeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateRemoteThread',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'WriteProcessMemory',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSize',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/adf7d4b104224a9e4eb6e96aadc69c9782661530b33e2d46c3cd9ec1b2076f27'},
 'ae090428cb05c1d951e1641d0471b6533a5bda75db1c557cca057a3372d0336b': {'AddressOfEntryPoint': 17588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'ntoskrnl.exe': '_wcsicmp'},
                                                                      'ImportedFunctions': ['RtlEqualUnicodeString',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwOpenFile',
                                                                                            'ZwCreateFile',
                                                                                            'ZwReadFile',
                                                                                            'ZwWriteFile',
                                                                                            'ZwClose',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePool',
                                                                                            'PsCreateSystemThread',
                                                                                            'IoDeleteDevice',
                                                                                            'IoDetachDevice',
                                                                                            'IofCompleteRequest',
                                                                                            'IofCallDriver',
                                                                                            'KeReleaseInStackQueuedSpinLock',
                                                                                            'KeAcquireInStackQueuedSpinLock',
                                                                                            'IoQueryFileInformation',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoAttachDeviceToDeviceStackSafe',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'PsTerminateSystemThread',
                                                                                            'KeDelayExecutionThread',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'PsGetProcessImageFileName',
                                                                                            'IoGetCurrentProcess',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeIrp',
                                                                                            'IoFreeMdl',
                                                                                            'KeWaitForSingleObject',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeInitializeEvent',
                                                                                            'IoAllocateMdl',
                                                                                            'IoAllocateIrp',
                                                                                            'PsGetProcessId',
                                                                                            'IoGetRequestorProcess',
                                                                                            'IoAttachDevice',
                                                                                            'ZwTerminateProcess',
                                                                                            'ObOpenObjectByPointer',
                                                                                            'PsProcessType',
                                                                                            'PsInitialSystemProcess',
                                                                                            '__C_specific_handler',
                                                                                            'ObfReferenceObject',
                                                                                            'PsDereferencePrimaryToken',
                                                                                            'PsReferencePrimaryToken',
                                                                                            'ZwSetInformationProcess',
                                                                                            'ZwDuplicateToken',
                                                                                            'SeTokenObjectType',
                                                                                            'RtlGetVersion',
                                                                                            'RtlRandom',
                                                                                            'ZwOpenKey',
                                                                                            'ZwCreateKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'wcsncpy',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'PsGetVersion',
                                                                                            '_wcsnicmp',
                                                                                            'ZwFlushKey',
                                                                                            'swprintf',
                                                                                            'wcsncmp',
                                                                                            'ZwLoadDriver',
                                                                                            'sprintf',
                                                                                            'KeBugCheck',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IoThreadToProcess',
                                                                                            '_stricmp',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'KeReleaseMutex',
                                                                                            'qsort',
                                                                                            'wcschr',
                                                                                            'ObFindHandleForObject',
                                                                                            'CmRegisterCallback',
                                                                                            'PsThreadType',
                                                                                            'KeInitializeMutex',
                                                                                            'ExReleaseFastMutex',
                                                                                            'ExAcquireFastMutex',
                                                                                            'towlower',
                                                                                            '_snwprintf',
                                                                                            'ZwQueryDirectoryFile',
                                                                                            'MmUnlockPages',
                                                                                            'MmUnmapLockedPages',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'MmProbeAndLockPages',
                                                                                            'wcsstr',
                                                                                            'MmHighestUserAddress',
                                                                                            'PsSetLoadImageNotifyRoutine',
                                                                                            'PsLookupProcessByProcessId',
                                                                                            '_wcsicmp',
                                                                                            'KeQueryPerformanceCounter'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 8192,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 26624,
                                                                                       'INIT\x00\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/ae090428cb05c1d951e1641d0471b6533a5bda75db1c557cca057a3372d0336b'},
 'ae1c10480e7bc7c94bd038bcb1e33a7ebde7d84261d8317eb00a864726f0a37c': {'AddressOfEntryPoint': 84396,
                                                                      'DebugRVA': 103552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                      'KERNEL32.dll': 'GetCommandLineA',
                                                                                      'MSVCP90.dll': '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                      'MSVCR90.dll': 'memcpy',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'GetMessageA'},
                                                                      'ImportedFunctions': ['WriteFile',
                                                                                            'OpenProcess',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeA',
                                                                                            'ResetEvent',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcessId',
                                                                                            'PeekNamedPipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'CreateSemaphoreA',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'LocalAlloc',
                                                                                            'TlsGetValue',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'SHGetFileInfoW',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'strtok_s',
                                                                                            '_wsplitpath_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wcslwr_s',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            '_strdup',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcstok_s',
                                                                                            'memcpy',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 30208,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 94720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ae1c10480e7bc7c94bd038bcb1e33a7ebde7d84261d8317eb00a864726f0a37c'},
 'ae39e62466f163d1ddb80fcfef7e30fdb7412b56f54578c809acb3e52e42abfc': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 679204,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 679424,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/ae39e62466f163d1ddb80fcfef7e30fdb7412b56f54578c809acb3e52e42abfc'},
 'ae87afb90767f3a8fc43c0e2bb569be0056222a1f9632c350154bce16e44c11c': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1230228,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1230336,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/ae87afb90767f3a8fc43c0e2bb569be0056222a1f9632c350154bce16e44c11c'},
 'aeaa2be9d0f3793ef20f834c039d57cf9d9fc5f68e5e4cc470d93f954a102bc3': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 242284,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 242688,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/aeaa2be9d0f3793ef20f834c039d57cf9d9fc5f68e5e4cc470d93f954a102bc3'},
 'aeb53cb28bf5d26c2234c12e1bd4ec85570f8420e94da1a111bc962f2fe608d9': {'AddressOfEntryPoint': 90477,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'ExtEscape',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'FreeLibrary',
                                                                                            'CopyFileA',
                                                                                            'WinExec',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemDirectoryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'FindClose',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetLastError',
                                                                                            'FindFirstFileA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlUnwindEx',
                                                                                            'Sleep',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetTimeZoneInformation',
                                                                                            'HeapReAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetCPInfo',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'wsprintfA',
                                                                                            'CreateDCA',
                                                                                            'DeleteDC',
                                                                                            'ExtEscape',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 30208,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.text\x00\x00\x00': 35840,
                                                                                       'manxpzk\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/aeb53cb28bf5d26c2234c12e1bd4ec85570f8420e94da1a111bc962f2fe608d9'},
 'aeb9b9b6e3b380aa117c4fa7d9482119b231c629c0ffc1e6eb3c0c5d066e28af': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 619956,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 620032,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/aeb9b9b6e3b380aa117c4fa7d9482119b231c629c0ffc1e6eb3c0c5d066e28af'},
 'af0af11fbb7a9b77927a2da1da65f1016b455e517fcbd223d42bea56bc6da442': {'AddressOfEntryPoint': 1074231261,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'CFGMGR32.dll': 'CM_Reenumerate_DevNode',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'FileTimeToSystemTime',
                                                                                      'OLEAUT32.dll': 'SystemTimeToVariantTime',
                                                                                      'SETUPAPI.dll': 'SetupDiGetClassDevsA',
                                                                                      'SHLWAPI.dll': 'StrRStrIA',
                                                                                      'USER32.dll': 'SetWindowsHookExA',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'comdlg32.dll': 'GetFileTitleA',
                                                                                      'ole32.dll': 'CoRegisterMessageFilter'},
                                                                      'ImportedFunctions': ['CM_Locate_DevNodeA',
                                                                                            'CM_Reenumerate_DevNode',
                                                                                            'SetupFindFirstLineA',
                                                                                            'SetupGetStringFieldA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupFindNextLine',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiRemoveDevice',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'StrToIntA',
                                                                                            'PathIsUNCA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathStripToRootA',
                                                                                            'StrRStrIA',
                                                                                            'GlobalFlags',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSize',
                                                                                            'DuplicateHandle',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFullPathNameA',
                                                                                            'CreateFileA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'SetErrorMode',
                                                                                            'GetFileTime',
                                                                                            'GetTickCount',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'GetCommandLineA',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDriveTypeA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'lstrlenA',
                                                                                            'lstrcpyA',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetFileAttributesA',
                                                                                            'lstrcatA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLCID',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'Sleep',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetVersionExA',
                                                                                            'MulDiv',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetThreadLocale',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleFileNameW',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalFindAtomA',
                                                                                            'lstrcmpW',
                                                                                            'FreeResource',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAddAtomA',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetModuleHandleA',
                                                                                            'FindFirstFileA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MessageBeep',
                                                                                            'UnregisterClassA',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'PostThreadMessageA',
                                                                                            'InvalidateRgn',
                                                                                            'InvalidateRect',
                                                                                            'SetRect',
                                                                                            'IsRectEmpty',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'CharNextA',
                                                                                            'DestroyMenu',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'ClientToScreen',
                                                                                            'LoadCursorA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSysColorBrush',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'RegisterWindowMessageA',
                                                                                            'LoadIconA',
                                                                                            'WinHelpA',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'GetClassLongA',
                                                                                            'GetClassNameA',
                                                                                            'GetClassLongPtrA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'MapWindowPoints',
                                                                                            'SetForegroundWindow',
                                                                                            'GetClientRect',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'CopyRect',
                                                                                            'PtInRect',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'IsIconic',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowPos',
                                                                                            'SetFocus',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'GetMenu',
                                                                                            'SendMessageA',
                                                                                            'UpdateWindow',
                                                                                            'PostMessageA',
                                                                                            'IsWindow',
                                                                                            'ExitWindowsEx',
                                                                                            'SetWindowLongA',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'SetCursor',
                                                                                            'LoadImageA',
                                                                                            'MessageBoxA',
                                                                                            'EnableWindow',
                                                                                            'CharUpperA',
                                                                                            'FindWindowA',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuState',
                                                                                            'PostQuitMessage',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'ModifyMenuA',
                                                                                            'GetParent',
                                                                                            'GetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'ValidateRect',
                                                                                            'GetCursorPos',
                                                                                            'PeekMessageA',
                                                                                            'GetKeyState',
                                                                                            'IsWindowVisible',
                                                                                            'GetActiveWindow',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageA',
                                                                                            'CallNextHookEx',
                                                                                            'SetWindowsHookExA',
                                                                                            'SetMapMode',
                                                                                            'GetViewportExtEx',
                                                                                            'GetWindowExtEx',
                                                                                            'PtVisible',
                                                                                            'RectVisible',
                                                                                            'TextOutA',
                                                                                            'ExtTextOutA',
                                                                                            'Escape',
                                                                                            'SelectObject',
                                                                                            'SetViewportOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ExtSelectClipRgn',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetRgnBox',
                                                                                            'GetMapMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'DeleteObject',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'CreateBitmap',
                                                                                            'ScaleWindowExtEx',
                                                                                            'GetDeviceCaps',
                                                                                            'GetFileTitleA',
                                                                                            'OpenPrinterA',
                                                                                            'DocumentPropertiesA',
                                                                                            'ClosePrinter',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoGetClassObject',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'OleFlushClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'SysAllocString',
                                                                                            'OleCreateFontIndirect',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 364,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 28424,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/af0af11fbb7a9b77927a2da1da65f1016b455e517fcbd223d42bea56bc6da442'},
 'af6a6786793afcaf681887ddb812cb14562d73d6bd6214ba99bef5ae379e1bbf': {'AddressOfEntryPoint': 357824,
                                                                      'DebugRVA': 465760,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 462848,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'WriteEncryptedFileRaw',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'RpcRaiseException',
                                                                                      'SHELL32.dll': 'SHGetDesktopFolder',
                                                                                      'USER32.dll': 'SendMessageW',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegSetValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'LookupAccountSidW',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'OpenThreadToken',
                                                                                            'RegQueryValueExW',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateLocallyUniqueId',
                                                                                            'RegSetValueExW',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'LogonUserW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'SetTokenInformation',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'RegCreateKeyExW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'RegDeleteValueW',
                                                                                            'OpenProcessToken',
                                                                                            'IsValidSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'LookupPrivilegeNameW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegDeleteKeyW',
                                                                                            'QueryServiceConfigW',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'StartServiceA',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'RegEnumValueW',
                                                                                            'GetUserNameW',
                                                                                            'SetFileSecurityW',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetFileSecurityW',
                                                                                            'DecryptFileW',
                                                                                            'EncryptFileW',
                                                                                            'SetThreadToken',
                                                                                            'CloseEncryptedFileRaw',
                                                                                            'OpenEncryptedFileRawW',
                                                                                            'ReadEncryptedFileRaw',
                                                                                            'WriteEncryptedFileRaw',
                                                                                            'TerminateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            'lstrcmpiW',
                                                                                            'GetVersion',
                                                                                            'ReadProcessMemory',
                                                                                            'OpenProcess',
                                                                                            'lstrcmpiA',
                                                                                            'GetCurrentThread',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetDiskFreeSpaceExA',
                                                                                            'SetLastError',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetComputerNameW',
                                                                                            '__C_specific_handler',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetModuleHandleA',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ResetEvent',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleFileNameW',
                                                                                            'LocalAlloc',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetFullPathNameW',
                                                                                            'OutputDebugStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'SetComputerNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetNumberFormatW',
                                                                                            'WriteConsoleW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'FindClose',
                                                                                            'GetDriveTypeA',
                                                                                            'GetLogicalDrives',
                                                                                            'SetErrorMode',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetCurrentThreadId',
                                                                                            'FindCloseChangeNotification',
                                                                                            'FindNextChangeNotification',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'LockFileEx',
                                                                                            'UnlockFileEx',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GetProcessWorkingSetSize',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileTime',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'CompareStringW',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'CreateHardLinkW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'ExitThread',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'EnumResourceNamesW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'BackupRead',
                                                                                            'BackupSeek',
                                                                                            'BackupWrite',
                                                                                            'GetFileTime',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetLocaleInfoA',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'HeapReAlloc',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'HeapSize',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetEvent',
                                                                                            'CloseHandle',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'CreateThread',
                                                                                            'ExitProcess',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'RtlUnwindEx',
                                                                                            'GetVersionExA',
                                                                                            'GetCommandLineA',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'wsprintfW',
                                                                                            'RegisterClassExW',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'RegisterClassExA',
                                                                                            'CreateWindowExA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'CharUpperBuffW',
                                                                                            'WinHelpW',
                                                                                            'VkKeyScanExW',
                                                                                            'VkKeyScanW',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetWindowTextW',
                                                                                            'ModifyMenuW',
                                                                                            'AppendMenuW',
                                                                                            'GetClipboardFormatNameW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'PostMessageW',
                                                                                            'SendNotifyMessageW',
                                                                                            'SendMessageW',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'GetTextMetricsW',
                                                                                            'CreateFontIndirectW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'WNetAddConnection3W',
                                                                                            'WNetGetUniversalNameW',
                                                                                            'WNetOpenEnumW',
                                                                                            'WNetEnumResourceW',
                                                                                            'WNetCloseEnum',
                                                                                            'WNetCancelConnection2W',
                                                                                            'CoUninitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoInitialize',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'I_RpcGetBuffer',
                                                                                            'NdrConformantArrayBufferSize',
                                                                                            'NdrConformantArrayUnmarshall',
                                                                                            'NdrConvert',
                                                                                            'NdrServerInitializeNew',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcServerListen',
                                                                                            'RpcServerRegisterIf',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcServerUseProtseqEpA',
                                                                                            'NdrConformantArrayMarshall',
                                                                                            'RpcRaiseException'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 302,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1184,
                                                                      'SectionNames': {'\x00T\t\x00oc\x00\x00': 5632,
                                                                                       '.data\x00\x00\x00': 10240,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 118272,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 458752},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/af6a6786793afcaf681887ddb812cb14562d73d6bd6214ba99bef5ae379e1bbf'},
 'af8a50427ba526a7fd34ba42f6c457dcd6d54f744987eeb120c3dc074a8cd7b5': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3820364,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3820544,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/af8a50427ba526a7fd34ba42f6c457dcd6d54f744987eeb120c3dc074a8cd7b5'},
 'afb33f868c27a7722629436707bd7ae6fe9e11fd9c9200ba073772e638ba0266': {'AddressOfEntryPoint': 5328,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 576156,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualQuery',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'WS2_32.dll': 'socket',
                                                                                      'libblkmaker-0.1-0.dll': 'blktmpl_get_longpoll',
                                                                                      'libblkmaker_jansson-0.1-0.dll': 'blktmpl_request_jansson',
                                                                                      'libcurl-4.dll': 'curl_version_info',
                                                                                      'libjansson-4.dll': 'json_string_value',
                                                                                      'libusb-1.0.dll': 'libusb_unref_device',
                                                                                      'msvcrt.dll': 'wcstombs',
                                                                                      'pdcurses.dll': 'wresize',
                                                                                      'pthreadGC2.dll': 'ptw32_push_cleanup'},
                                                                      'ImportedFunctions': ['CreateFileA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FormatMessageA',
                                                                                            'FreeLibrary',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetStdHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'PurgeComm',
                                                                                            'QueryDosDeviceA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetCommConfig',
                                                                                            'SetCommTimeouts',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'SleepEx',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            '_access',
                                                                                            '_close',
                                                                                            '_execv',
                                                                                            '_fdopen',
                                                                                            '_fileno',
                                                                                            '_isatty',
                                                                                            '_read',
                                                                                            '_strdup',
                                                                                            '_write',
                                                                                            '__C_specific_handler',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__iob_func',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_exit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_localtime64',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_open_osfhandle',
                                                                                            '_stat64',
                                                                                            '_stricmp',
                                                                                            '_strnicmp',
                                                                                            '_time64',
                                                                                            '_unlock',
                                                                                            '_vsnprintf',
                                                                                            'abort',
                                                                                            'atof',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'ceil',
                                                                                            'div',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'feof',
                                                                                            'fflush',
                                                                                            'floor',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'fputs',
                                                                                            'fread',
                                                                                            'free',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'isalpha',
                                                                                            'islower',
                                                                                            'isspace',
                                                                                            'isupper',
                                                                                            'ldiv',
                                                                                            'localeconv',
                                                                                            'log10',
                                                                                            'malloc',
                                                                                            'mbstowcs',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'perror',
                                                                                            'printf',
                                                                                            'puts',
                                                                                            'raise',
                                                                                            'rand',
                                                                                            'realloc',
                                                                                            'rewind',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'sprintf',
                                                                                            'srand',
                                                                                            'sscanf',
                                                                                            'strcat',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strcspn',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncat',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'strpbrk',
                                                                                            'strrchr',
                                                                                            'strspn',
                                                                                            'strstr',
                                                                                            'strtok',
                                                                                            'strtol',
                                                                                            'tolower',
                                                                                            'toupper',
                                                                                            'vfprintf',
                                                                                            'vprintf',
                                                                                            'vsprintf',
                                                                                            'wcstombs',
                                                                                            'MessageBoxA',
                                                                                            'WSAGetLastError',
                                                                                            'WSAIoctl',
                                                                                            '__WSAFDIsSet',
                                                                                            'accept',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'getsockname',
                                                                                            'htonl',
                                                                                            'htons',
                                                                                            'inet_addr',
                                                                                            'inet_ntoa',
                                                                                            'listen',
                                                                                            'recv',
                                                                                            'select',
                                                                                            'send',
                                                                                            'setsockopt',
                                                                                            'shutdown',
                                                                                            'socket',
                                                                                            'curl_easy_cleanup',
                                                                                            'curl_easy_getinfo',
                                                                                            'curl_easy_init',
                                                                                            'curl_easy_perform',
                                                                                            'curl_easy_reset',
                                                                                            'curl_easy_setopt',
                                                                                            'curl_global_cleanup',
                                                                                            'curl_global_init',
                                                                                            'curl_multi_add_handle',
                                                                                            'curl_multi_cleanup',
                                                                                            'curl_multi_fdset',
                                                                                            'curl_multi_info_read',
                                                                                            'curl_multi_init',
                                                                                            'curl_multi_perform',
                                                                                            'curl_multi_remove_handle',
                                                                                            'curl_multi_setopt',
                                                                                            'curl_slist_append',
                                                                                            'curl_slist_free_all',
                                                                                            'curl_version_info',
                                                                                            'json_array',
                                                                                            'json_array_append_new',
                                                                                            'json_array_get',
                                                                                            'json_array_size',
                                                                                            'json_deep_copy',
                                                                                            'json_delete',
                                                                                            'json_dumps',
                                                                                            'json_integer_value',
                                                                                            'json_load_file',
                                                                                            'json_loadb',
                                                                                            'json_loads',
                                                                                            'json_number_value',
                                                                                            'json_object',
                                                                                            'json_object_get',
                                                                                            'json_object_set_new',
                                                                                            'json_real_value',
                                                                                            'json_string',
                                                                                            'json_string_value',
                                                                                            'pthread_cancel',
                                                                                            'pthread_cond_broadcast',
                                                                                            'pthread_cond_destroy',
                                                                                            'pthread_cond_init',
                                                                                            'pthread_cond_signal',
                                                                                            'pthread_cond_timedwait',
                                                                                            'pthread_cond_wait',
                                                                                            'pthread_create',
                                                                                            'pthread_detach',
                                                                                            'pthread_mutex_destroy',
                                                                                            'pthread_mutex_init',
                                                                                            'pthread_mutex_lock',
                                                                                            'pthread_mutex_trylock',
                                                                                            'pthread_mutex_unlock',
                                                                                            'pthread_rwlock_init',
                                                                                            'pthread_rwlock_rdlock',
                                                                                            'pthread_rwlock_unlock',
                                                                                            'pthread_rwlock_wrlock',
                                                                                            'pthread_self',
                                                                                            'pthread_setcancelstate',
                                                                                            'pthread_setcanceltype',
                                                                                            'ptw32_pop_cleanup',
                                                                                            'ptw32_push_cleanup',
                                                                                            'libusb_bulk_transfer',
                                                                                            'libusb_claim_interface',
                                                                                            'libusb_close',
                                                                                            'libusb_control_transfer',
                                                                                            'libusb_detach_kernel_driver',
                                                                                            'libusb_error_name',
                                                                                            'libusb_exit',
                                                                                            'libusb_free_config_descriptor',
                                                                                            'libusb_free_device_list',
                                                                                            'libusb_get_bus_number',
                                                                                            'libusb_get_config_descriptor',
                                                                                            'libusb_get_device_address',
                                                                                            'libusb_get_device_descriptor',
                                                                                            'libusb_get_device_list',
                                                                                            'libusb_get_string_descriptor_ascii',
                                                                                            'libusb_init',
                                                                                            'libusb_open',
                                                                                            'libusb_ref_device',
                                                                                            'libusb_release_interface',
                                                                                            'libusb_reset_device',
                                                                                            'libusb_set_configuration',
                                                                                            'libusb_unref_device',
                                                                                            'LINES',
                                                                                            'cbreak',
                                                                                            'delwin',
                                                                                            'echo',
                                                                                            'endwin',
                                                                                            'erase',
                                                                                            'getmaxx',
                                                                                            'getmaxy',
                                                                                            'halfdelay',
                                                                                            'idlok',
                                                                                            'immedok',
                                                                                            'initscr',
                                                                                            'keypad',
                                                                                            'leaveok',
                                                                                            'mvwhline',
                                                                                            'mvwin',
                                                                                            'mvwprintw',
                                                                                            'newwin',
                                                                                            'nocbreak',
                                                                                            'noecho',
                                                                                            'scrollok',
                                                                                            'stdscr',
                                                                                            'touchwin',
                                                                                            'vw_printw',
                                                                                            'waddstr',
                                                                                            'wattroff',
                                                                                            'wattron',
                                                                                            'wclear',
                                                                                            'wclrtoeol',
                                                                                            'wgetch',
                                                                                            'wgetnstr',
                                                                                            'wmove',
                                                                                            'wprintw',
                                                                                            'wrefresh',
                                                                                            'wresize',
                                                                                            'blkmk_address_to_script',
                                                                                            'blkmk_append_coinbase_safe',
                                                                                            'blkmk_get_data',
                                                                                            'blkmk_init_generation2',
                                                                                            'blkmk_sha256_impl',
                                                                                            'blkmk_time_left',
                                                                                            'blkmk_work_left',
                                                                                            'blktmpl_addcaps',
                                                                                            'blktmpl_create',
                                                                                            'blktmpl_free',
                                                                                            'blktmpl_get_longpoll',
                                                                                            'blkmk_submit_jansson',
                                                                                            'blktmpl_add_jansson',
                                                                                            'blktmpl_request_jansson'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 295,
                                                                      'NumberOfSections': 17,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 13312,
                                                                                       '.idata\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 17408,
                                                                                       '.rdata\x00\x00': 67584,
                                                                                       '.text\x00\x00\x00': 414208,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.xdata\x00\x00': 15872,
                                                                                       '/19\x00\x00\x00\x00\x00': 493056,
                                                                                       '/31\x00\x00\x00\x00\x00': 18432,
                                                                                       '/4\x00\x00\x00\x00\x00\x00': 1536,
                                                                                       '/45\x00\x00\x00\x00\x00': 59392,
                                                                                       '/57\x00\x00\x00\x00\x00': 57344,
                                                                                       '/70\x00\x00\x00\x00\x00': 10240,
                                                                                       '/81\x00\x00\x00\x00\x00': 134144,
                                                                                       '/92\x00\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/malware/afb33f868c27a7722629436707bd7ae6fe9e11fd9c9200ba073772e638ba0266'},
 'afb936117a51446680827f2964dbdb34f2dffb782ab9929f7ec992725096f6e8': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2315924,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2316288,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/afb936117a51446680827f2964dbdb34f2dffb782ab9929f7ec992725096f6e8'},
 'b0c507b096c8975f9bcd5270b9e142596ecd5deb940c51622d1f4987a5c92879': {'AddressOfEntryPoint': 17859276,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 377008,
                                                                      'ExportSize': 251,
                                                                      'IATRVA': 307200,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_BeginDrag',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'MSVCRT.dll': 'strlen',
                                                                                      'SETUPAPI.dll': 'SetupDiEnumDeviceInfo',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderA',
                                                                                      'USER32.dll': 'CopyRect',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'comdlg32.dll': 'ChooseColorA',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['socket',
                                                                                            'setsockopt',
                                                                                            'bind',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'WSAStartup',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiClassGuidsFromNameA',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'mktime',
                                                                                            '_mbsnbcpy',
                                                                                            '_mbsnbcat',
                                                                                            '_mbschr',
                                                                                            '_purecall',
                                                                                            'strrchr',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'fputc',
                                                                                            '_ftime',
                                                                                            'ctime',
                                                                                            '_strdup',
                                                                                            'atoi',
                                                                                            '_mbscmp',
                                                                                            'fflush',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memcpy',
                                                                                            'isxdigit',
                                                                                            'strstr',
                                                                                            'isdigit',
                                                                                            'toupper',
                                                                                            'strncmp',
                                                                                            'fgetc',
                                                                                            'strtoul',
                                                                                            '_stricmp',
                                                                                            'isspace',
                                                                                            'sscanf',
                                                                                            'memcmp',
                                                                                            'srand',
                                                                                            'fprintf',
                                                                                            'vsprintf',
                                                                                            'fgets',
                                                                                            'strcmp',
                                                                                            'fseek',
                                                                                            '_splitpath',
                                                                                            'fopen',
                                                                                            'fclose',
                                                                                            'rand',
                                                                                            '__CxxFrameHandler',
                                                                                            'memset',
                                                                                            'localtime',
                                                                                            'asctime',
                                                                                            'strcpy',
                                                                                            'gmtime',
                                                                                            'sprintf',
                                                                                            'strcat',
                                                                                            'strncpy',
                                                                                            '_endthread',
                                                                                            '_beginthreadex',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_setmbcp',
                                                                                            '_strupr',
                                                                                            'strlen',
                                                                                            'SetCommTimeouts',
                                                                                            'GetStartupInfoA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetLocaleInfoA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'CreateProcessA',
                                                                                            'MulDiv',
                                                                                            'ClearCommError',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetOverlappedResult',
                                                                                            'SetupComm',
                                                                                            'GetCommState',
                                                                                            'SetCommState',
                                                                                            'TlsAlloc',
                                                                                            'SetCommMask',
                                                                                            'EscapeCommFunction',
                                                                                            'PurgeComm',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CopyFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetComputerNameA',
                                                                                            'CreateThread',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CreateMutexA',
                                                                                            'OpenProcess',
                                                                                            'ReleaseMutex',
                                                                                            'TerminateThread',
                                                                                            'ResetEvent',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'TlsSetValue',
                                                                                            'CreateEventA',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetTickCount',
                                                                                            'FindWindowA',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'CheckMenuItem',
                                                                                            'GetSubMenu',
                                                                                            'UpdateWindow',
                                                                                            'OpenClipboard',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'RemoveMenu',
                                                                                            'LoadMenuA',
                                                                                            'GetMenu',
                                                                                            'SetMenu',
                                                                                            'IsZoomed',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongA',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'SetWindowTextA',
                                                                                            'GetSysColorBrush',
                                                                                            'SystemParametersInfoA',
                                                                                            'EndDeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'FillRect',
                                                                                            'GetClassLongPtrA',
                                                                                            'GetKeyState',
                                                                                            'wsprintfA',
                                                                                            'IsRectEmpty',
                                                                                            'PtInRect',
                                                                                            'InflateRect',
                                                                                            'OffsetRect',
                                                                                            'ClientToScreen',
                                                                                            'GetDCEx',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'CharNextA',
                                                                                            'LoadIconA',
                                                                                            'GetWindowRect',
                                                                                            'LoadBitmapA',
                                                                                            'LoadCursorA',
                                                                                            'GetParent',
                                                                                            'GetLastActivePopup',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetClientRect',
                                                                                            'PostMessageA',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'IsMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetSysColor',
                                                                                            'EnableWindow',
                                                                                            'GetWindow',
                                                                                            'RedrawWindow',
                                                                                            'SendMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'CopyRect',
                                                                                            'CreateFontA',
                                                                                            'PatBlt',
                                                                                            'GetTextColor',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetObjectA',
                                                                                            'SelectObject',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetTextMetricsA',
                                                                                            'GetDeviceCaps',
                                                                                            'ChooseColorA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_BeginDrag',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 238,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 51920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 62464,
                                                                                       '.pdata\x00\x00': 14848,
                                                                                       '.rdata\x00\x00': 70144,
                                                                                       '.rsrc\x00\x00\x00': 79872,
                                                                                       '.text\x00\x00\x00': 302080,
                                                                                       'oyiyzej\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/b0c507b096c8975f9bcd5270b9e142596ecd5deb940c51622d1f4987a5c92879'},
 'b0de112a27c4b64f71137c19428243627f7187f62d092c04b3352aafe26f218d': {'AddressOfEntryPoint': 5008,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3226840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3227136,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b0de112a27c4b64f71137c19428243627f7187f62d092c04b3352aafe26f218d'},
 'b132ea55ec4bc8cbfe95f72691d4ab3c49fb6b49603961ade03e9eb276cc9794': {'AddressOfEntryPoint': 3221288207,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualQuery'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'CopyFileA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapCreate',
                                                                                            'Sleep',
                                                                                            'LoadLibraryA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 44,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 18944,
                                                                                       '^\x06\x01\x00ta\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/b132ea55ec4bc8cbfe95f72691d4ab3c49fb6b49603961ade03e9eb276cc9794'},
 'b16f45eecf032b997d3ffb7354b8c4f546f6dd792b6083ccc5fd1faadc8c284a': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 401296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 401408,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b16f45eecf032b997d3ffb7354b8c4f546f6dd792b6083ccc5fd1faadc8c284a'},
 'b1aae702bb095a17fa479fdfb66fa1168619638fe4f070de441a3297976be2d4': {'AddressOfEntryPoint': 339976,
                                                                      'DebugRVA': 315552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortDebugPrint'},
                                                                      'ImportedFunctions': ['StorPortGetLogicalUnit',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortNotification',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortReady',
                                                                                            'StorPortLogError',
                                                                                            'StorPortPauseDevice',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortSetDeviceQueueDepth',
                                                                                            'StorPortBusy',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortDebugPrint',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 309760,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/b1aae702bb095a17fa479fdfb66fa1168619638fe4f070de441a3297976be2d4'},
 'b26ded71cf8b913756047e1dc0719bc5e2c37905ae5819005b29f13099e6efed': {'AddressOfEntryPoint': 1074057821,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 286832,
                                                                      'ExportSize': 6235,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemInfo',
                                                                                      'MSVCP100.dll': '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z',
                                                                                      'MSVCR100.dll': '_lock_file',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'gdiplus.dll': 'GdiplusShutdown',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['ceil',
                                                                                            '??0bad_cast@std@@QEAA@PEBD@Z',
                                                                                            '??1bad_cast@std@@UEAA@XZ',
                                                                                            '??0bad_cast@std@@QEAA@AEBV01@@Z',
                                                                                            'memcmp',
                                                                                            'fgetc',
                                                                                            'fputc',
                                                                                            'ungetc',
                                                                                            '__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'fsetpos',
                                                                                            '_fseeki64',
                                                                                            'fgetpos',
                                                                                            'fwrite',
                                                                                            'setvbuf',
                                                                                            '_unlock_file',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'pow',
                                                                                            'fgets',
                                                                                            'fscanf',
                                                                                            'printf',
                                                                                            'fprintf',
                                                                                            'sqrt',
                                                                                            'malloc',
                                                                                            '_ctime64',
                                                                                            '_localtime64',
                                                                                            '_time64',
                                                                                            '_localtime64_s',
                                                                                            'wcstombs',
                                                                                            'clock',
                                                                                            'strtol',
                                                                                            'strftime',
                                                                                            'log10',
                                                                                            'strstr',
                                                                                            'getchar',
                                                                                            'abort',
                                                                                            'vfprintf',
                                                                                            'fflush',
                                                                                            '__iob_func',
                                                                                            'vprintf',
                                                                                            'free',
                                                                                            'strncpy',
                                                                                            'vsprintf',
                                                                                            'calloc',
                                                                                            'sscanf',
                                                                                            'swscanf',
                                                                                            '_purecall',
                                                                                            '__CxxFrameHandler3',
                                                                                            'rand',
                                                                                            'sin',
                                                                                            'memcpy',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            'memmove',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            'memset',
                                                                                            'srand',
                                                                                            'sprintf',
                                                                                            '_mktime64',
                                                                                            'memcpy_s',
                                                                                            '_wtoi',
                                                                                            '_wtof',
                                                                                            '_lock_file',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersionExW',
                                                                                            'GetVolumeInformationW',
                                                                                            'CreateFileW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'DeleteFileW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetSystemTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBoxW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitializeEx',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z',
                                                                                            '?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z',
                                                                                            '??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ',
                                                                                            '?ends@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                            '?_Xout_of_range@std@@YAXPEBD@Z',
                                                                                            '?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ',
                                                                                            '?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z',
                                                                                            '?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z',
                                                                                            '??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ',
                                                                                            '?ends@std@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AEAV21@@Z',
                                                                                            '??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z',
                                                                                            '??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z',
                                                                                            '?_Decref@facet@locale@std@@QEAAPEAV123@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ',
                                                                                            '?always_noconv@codecvt_base@std@@QEBA_NXZ',
                                                                                            '??1_Lockit@std@@QEAA@XZ',
                                                                                            '?_Incref@facet@locale@std@@QEAAXXZ',
                                                                                            '?_Getcat@?$codecvt@DDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z',
                                                                                            '??Bid@locale@std@@QEAA_KXZ',
                                                                                            '?id@?$codecvt@DDH@std@@2V0locale@2@A',
                                                                                            '??0_Lockit@std@@QEAA@H@Z',
                                                                                            '?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ',
                                                                                            '?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z',
                                                                                            '?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z',
                                                                                            '?in@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z',
                                                                                            '?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z',
                                                                                            '?unshift@?$codecvt@DDH@std@@QEBAHAEAHPEAD1AEAPEAD@Z',
                                                                                            '?out@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z',
                                                                                            '?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ',
                                                                                            '??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z',
                                                                                            '?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z',
                                                                                            '?id@?$ctype@_W@std@@2V0locale@2@A',
                                                                                            '??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ',
                                                                                            '?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ',
                                                                                            '?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ',
                                                                                            '?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ',
                                                                                            '?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z',
                                                                                            '??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ',
                                                                                            '?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z',
                                                                                            '?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z',
                                                                                            '?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ',
                                                                                            '?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z',
                                                                                            '?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z',
                                                                                            '?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ',
                                                                                            '?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ',
                                                                                            '?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z',
                                                                                            '?widen@?$ctype@_W@std@@QEBA_WD@Z',
                                                                                            '?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z',
                                                                                            '?getloc@ios_base@std@@QEBA?AVlocale@2@XZ',
                                                                                            '?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z',
                                                                                            '??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ',
                                                                                            '??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@',
                                                                                            '??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@',
                                                                                            '?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ',
                                                                                            '??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z',
                                                                                            'GdiplusShutdown'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 229,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1424,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/b26ded71cf8b913756047e1dc0719bc5e2c37905ae5819005b29f13099e6efed'},
 'b30503fb0eb8ffb6711df39dd5e2c8b305ea8c1d60cc81df51affa2f8e4a0713': {'AddressOfEntryPoint': 49252,
                                                                      'DebugRVA': 33056,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'TDI.SYS': 'TdiMapUserRequest',
                                                                                      'ntoskrnl.exe': 'ExAllocatePoolWithTag'},
                                                                      'ImportedFunctions': ['KeAcquireSpinLockRaiseToDpc',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoCreateDevice',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoDeleteDevice',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IofCompleteRequest',
                                                                                            'IoDetachDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'IofCallDriver',
                                                                                            'IoFreeMdl',
                                                                                            'IoAllocateMdl',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'ExFreePoolWithTag',
                                                                                            'KeInitializeTimer',
                                                                                            'KeRemoveQueueDpc',
                                                                                            'KeCancelTimer',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoFreeIrp',
                                                                                            'IoAllocateIrp',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'KeSetTimer',
                                                                                            'swprintf',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'KeBugCheckEx',
                                                                                            'KeInitializeDpc',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'TdiMapUserRequest'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 34,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 27136,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/b30503fb0eb8ffb6711df39dd5e2c8b305ea8c1d60cc81df51affa2f8e4a0713'},
 'b382d2387250fcf4d3ad86324e48ccf0288ce78d439ed06acbdcade44997f3d2': {'AddressOfEntryPoint': 8286,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualAlloc'},
                                                                      'ImportedFunctions': ['ExitVDM',
                                                                                            'OpenProcess',
                                                                                            'OpenThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'VirtualAlloc'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 5,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 544,
                                                                      'SectionNames': {'.data\x00\x00\x00': 62464,
                                                                                       '.idata\x00\x00': 54272,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/b382d2387250fcf4d3ad86324e48ccf0288ce78d439ed06acbdcade44997f3d2'},
 'b3debb87cda70761f234387c0bde1dcbc2f97d1da454ccdd3fcfd78626bbcb58': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlTimeToTimeFields',
                                                                                            'RtlComputeCrc32',
                                                                                            'sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwWriteFile',
                                                                                            'ZwSetValueKey',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwCreateKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/b3debb87cda70761f234387c0bde1dcbc2f97d1da454ccdd3fcfd78626bbcb58'},
 'b4a8b4a9662e20f74c888ef27a0940b7fb6af2572d3d01d51bed97ac49680a87': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 166348,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 166400,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b4a8b4a9662e20f74c888ef27a0940b7fb6af2572d3d01d51bed97ac49680a87'},
 'b4d2adf74b34ca61114473dc6a10338881d702797239a337886e205a246f0cac': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 320060,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 320512,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b4d2adf74b34ca61114473dc6a10338881d702797239a337886e205a246f0cac'},
 'b4ed50833256dd30497430ab7ae859e3902e72a3dc202dff6168f941666af334': {'AddressOfEntryPoint': 5220,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'CloseHandle',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetCommandLineW',
                                                                                            'TerminateProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'SizeofResource',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 44,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1955420,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1955840,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b4ed50833256dd30497430ab7ae859e3902e72a3dc202dff6168f941666af334'},
 'b5e99027aa834d9ca2380f2f3d95be48a3a22781c022f61f5a346972bb509aef': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 379696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 379904,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b5e99027aa834d9ca2380f2f3d95be48a3a22781c022f61f5a346972bb509aef'},
 'b5f5fce7b9eb7c338b29ed4a152703a949c9f2092a1db3ae121c195687e31e1a': {'AddressOfEntryPoint': 242652,
                                                                      'DebugRVA': 254768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 253952,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'KeQueryPerformanceCounter',
                                                                                      'USBD.SYS': 'USBD_ParseConfigurationDescriptorEx',
                                                                                      'WDFLDR.SYS': 'WdfVersionUnbindClass',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoGetDeviceObjectPointer',
                                                                                            'IoStartNextPacket',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoFreeIrp',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterShutdownNotification',
                                                                                            'RtlCheckRegistryKey',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'ZwEnumerateValueKey',
                                                                                            'IoGetDeviceProperty',
                                                                                            'RtlCreateRegistryKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'KeClearEvent',
                                                                                            'KeInitializeMutex',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeReleaseMutex',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoAllocateIrp',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoInitializeIrp',
                                                                                            'IoCreateSynchronizationEvent',
                                                                                            'ZwClose',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoRegisterPlugPlayNotification',
                                                                                            'IoDetachDevice',
                                                                                            'PoSetPowerState',
                                                                                            'IoUnregisterPlugPlayNotification',
                                                                                            'towlower',
                                                                                            'ZwOpenKey',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'KeInitializeDpc',
                                                                                            'KeInsertQueueDpc',
                                                                                            'KeSynchronizeExecution',
                                                                                            'MmUnmapLockedPages',
                                                                                            'ExFreePoolWithTag',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'swprintf',
                                                                                            'PoRequestPowerIrp',
                                                                                            'IoCreateNotificationEvent',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'ZwCreateSection',
                                                                                            'ExQueueWorkItem',
                                                                                            'KeInitializeTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimerEx',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'KeDelayExecutionThread',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ZwCreateFile',
                                                                                            'ZwWriteFile',
                                                                                            'KeBugCheckEx',
                                                                                            'IoCancelIrp',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'PoRegisterSystemState',
                                                                                            'PoUnregisterSystemState',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'sprintf',
                                                                                            'wcsstr',
                                                                                            '_purecall',
                                                                                            '__C_specific_handler',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'USBD_ParseConfigurationDescriptorEx',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionBindClass',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionUnbindClass'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 960,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 249344,
                                                                                       'INIT\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/b5f5fce7b9eb7c338b29ed4a152703a949c9f2092a1db3ae121c195687e31e1a'},
 'b608dddd151c96f7c15fc780b4fc1109095dbc80e356598297d81207419d5b70': {'AddressOfEntryPoint': 24676,
                                                                      'DebugRVA': 12560,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoDeleteSymbolicLink',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'IofCompleteRequest',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoCreateDevice',
                                                                                            'swprintf',
                                                                                            'KeDelayExecutionThread',
                                                                                            'PsCreateSystemThread',
                                                                                            'ZwClose',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'ZwDeleteKey',
                                                                                            'RtlDeleteRegistryValue',
                                                                                            'ZwOpenKey',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoGetLowerDeviceObject',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ExFreePoolWithTag',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'KeInitializeEvent',
                                                                                            'ZwOpenSymbolicLinkObject',
                                                                                            'KeSetTimerEx',
                                                                                            'IoDriverObjectType',
                                                                                            'ZwCreateFile',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeWaitForSingleObject',
                                                                                            'ObfDereferenceObject',
                                                                                            'ObReferenceObjectByName',
                                                                                            'KeInitializeTimerEx',
                                                                                            'IofCallDriver',
                                                                                            'KeBugCheckEx',
                                                                                            '__C_specific_handler'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 33,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 7168,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/b608dddd151c96f7c15fc780b4fc1109095dbc80e356598297d81207419d5b70'},
 'b6315a036afd83d623ee31d4f6d9983237f7d7628a9c85faaf3fef76a818ac63': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 644436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 644608,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b6315a036afd83d623ee31d4f6d9983237f7d7628a9c85faaf3fef76a818ac63'},
 'b64ca63aa4083316896ba5ee578788843859fc81953d629c81a8a5f39b0cf9d9': {'AddressOfEntryPoint': 484736,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 585728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'GetActiveObject',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'SetKeyboardState',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'listen',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'listen',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'waveOutSetVolume',
                                                                                            'timeGetTime',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Remove',
                                                                                            'WNetUseConnectionW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenProcess',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'SetSystemPowerState',
                                                                                            'SetFileTime',
                                                                                            'FindResourceW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadResource',
                                                                                            'FindFirstFileW',
                                                                                            'LockResource',
                                                                                            'FindClose',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'CreatePipe',
                                                                                            'GetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'VirtualFree',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'DeviceIoControl',
                                                                                            'SetErrorMode',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'GetShortPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'Beep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileSize',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'HeapFree',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'PtInRect',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowDC',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateMenu',
                                                                                            'GetSysColor',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetActiveWindow',
                                                                                            'InflateRect',
                                                                                            'CharNextW',
                                                                                            'DrawFocusRect',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CountClipboardFormats',
                                                                                            'CharLowerBuffW',
                                                                                            'UnregisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'FillRect',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'IsCharLowerW',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'GetCursor',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'GetAsyncKeyState',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'CopyRect',
                                                                                            'BeginPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'DrawFrameControl',
                                                                                            'FrameRect',
                                                                                            'RedrawWindow',
                                                                                            'DrawTextW',
                                                                                            'wsprintfW',
                                                                                            'FlashWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'IsZoomed',
                                                                                            'GetCaretPos',
                                                                                            'GetSubMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetMenuStringW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharUpperW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetKeyboardState',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DestroyIcon',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetDC',
                                                                                            'WindowFromPoint',
                                                                                            'SetClipboardData',
                                                                                            'VkKeyScanA',
                                                                                            'EmptyClipboard',
                                                                                            'SetKeyboardState',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CloseFigure',
                                                                                            'SetPixel',
                                                                                            'EndPath',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'ExtCreatePen',
                                                                                            'PolyBezierTo',
                                                                                            'SetViewportOrgEx',
                                                                                            'Rectangle',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'SHFileOperationW',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'GetActiveObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 459,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 37568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.pdata\x00\x00': 19456,
                                                                                       '.rdata\x00\x00': 81920,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 580096},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/b64ca63aa4083316896ba5ee578788843859fc81953d629c81a8a5f39b0cf9d9'},
 'b65c03b9325bbf1118ad00b4bb42d2db0570a89c865fdeb6217e76b4d3bd233a': {'AddressOfEntryPoint': 1074570336,
                                                                      'DebugRVA': 8000,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetUserNameW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'CreateFontW',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'OLEACC.dll': 'LresultFromObject',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHSetLocalizedName',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'SetWindowsHookExW',
                                                                                      'USP10.dll': 'ScriptItemize',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WTSAPI32.dll': 'WTSUnRegisterSessionNotification',
                                                                                      'XINPUT9_1_0.dll': 'XInputGetState',
                                                                                      'd3d9.dll': 'Direct3DCreate9',
                                                                                      'gdiplus.dll': 'GdipDrawImageRectRectI',
                                                                                      'msvcrt.dll': 'floorf',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'slc.dll': 'SLGetWindowsInformationDWORD'},
                                                                      'ImportedFunctions': ['DelayLoadFailureHook',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'OutputDebugStringA',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'CreateMutexW',
                                                                                            'GetCommandLineW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'OutputDebugStringW',
                                                                                            'SleepEx',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'MultiByteToWideChar',
                                                                                            'FlushInstructionCache',
                                                                                            'MulDiv',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'MoveFileExW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadLibraryExW',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'RegCloseKey',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'DebugBreak',
                                                                                            'GetFileType',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FreeResource',
                                                                                            'FindResourceExW',
                                                                                            'GetThreadLocale',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'GetTickCount64',
                                                                                            'CreateThread',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetTickCount',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'InitializeCriticalSection',
                                                                                            'DestroyWindow',
                                                                                            'ShowCursor',
                                                                                            'ShowWindow',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'BringWindowToTop',
                                                                                            'SetForegroundWindow',
                                                                                            'RegisterRawInputDevices',
                                                                                            'LoadAcceleratorsW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'MonitorFromWindow',
                                                                                            'InvalidateRect',
                                                                                            'SetRect',
                                                                                            'GetKeyState',
                                                                                            'GetCursorPos',
                                                                                            'GetClientRect',
                                                                                            'NotifyWinEvent',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'IsZoomed',
                                                                                            'GetWindowPlacement',
                                                                                            'SetWindowPlacement',
                                                                                            'ScreenToClient',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'IsWindowVisible',
                                                                                            'RedrawWindow',
                                                                                            'SetCapture',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetCursor',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'SetMenuInfo',
                                                                                            'CallNextHookEx',
                                                                                            'TrackPopupMenu',
                                                                                            'GetSysColorBrush',
                                                                                            'RegisterClassW',
                                                                                            'LoadMenuW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetSubMenu',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowTextW',
                                                                                            'FillRect',
                                                                                            'DrawFrameControl',
                                                                                            'GetForegroundWindow',
                                                                                            'GetRawInputData',
                                                                                            'IntersectRect',
                                                                                            'IsRectEmpty',
                                                                                            'TrackMouseEvent',
                                                                                            'ReleaseCapture',
                                                                                            'PostQuitMessage',
                                                                                            'PtInRect',
                                                                                            'DefWindowProcW',
                                                                                            'UnionRect',
                                                                                            'EqualRect',
                                                                                            'OffsetRect',
                                                                                            'EnumDisplayMonitors',
                                                                                            'MonitorFromRect',
                                                                                            'SendInput',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DrawTextW',
                                                                                            'CallWindowProcW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetIconInfo',
                                                                                            'GetParent',
                                                                                            'AdjustWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'GetWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'DialogBoxParamW',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'CreateDialogParamW',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetClassNameW',
                                                                                            'IsDialogMessageW',
                                                                                            'EndDialog',
                                                                                            'SetWindowRgn',
                                                                                            'EnumChildWindows',
                                                                                            'MapWindowPoints',
                                                                                            'GetWindowTextW',
                                                                                            'IsWindowEnabled',
                                                                                            'DrawEdge',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'GetFocus',
                                                                                            'DestroyMenu',
                                                                                            'GetMenu',
                                                                                            'SetMenu',
                                                                                            'DrawMenuBar',
                                                                                            'LoadIconW',
                                                                                            'SetDlgItemInt',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SetPropW',
                                                                                            'SetFocus',
                                                                                            'IsDlgButtonChecked',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'LoadStringW',
                                                                                            'PostMessageW',
                                                                                            'GetSysColor',
                                                                                            'SetGestureConfig',
                                                                                            'SystemParametersInfoW',
                                                                                            'EnableMenuItem',
                                                                                            'GetDoubleClickTime',
                                                                                            'UnregisterClassA',
                                                                                            'SetWindowsHookExW',
                                                                                            'wcscspn',
                                                                                            'wcstoul',
                                                                                            'strncmp',
                                                                                            'wcsspn',
                                                                                            '_errno',
                                                                                            'memmove',
                                                                                            'wcstod',
                                                                                            'qsort',
                                                                                            '_wcsicmp',
                                                                                            '?_set_new_mode@@YAHH@Z',
                                                                                            '?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z',
                                                                                            'wcscat_s',
                                                                                            '_wcsnicmp',
                                                                                            'memmove_s',
                                                                                            '_vscwprintf',
                                                                                            '__CxxFrameHandler3',
                                                                                            'powf',
                                                                                            'logf',
                                                                                            'atanf',
                                                                                            'cosf',
                                                                                            'memset',
                                                                                            '_vsnwprintf_s',
                                                                                            'atan2f',
                                                                                            'sinf',
                                                                                            'acosf',
                                                                                            'memcmp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_snwprintf_s',
                                                                                            'wcsncmp',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            'time',
                                                                                            'srand',
                                                                                            'swprintf_s',
                                                                                            '_purecall',
                                                                                            '_wtoi',
                                                                                            'wcsncpy_s',
                                                                                            'wcstol',
                                                                                            'realloc',
                                                                                            'free',
                                                                                            'rand',
                                                                                            '_finite',
                                                                                            '_strdup',
                                                                                            'setlocale',
                                                                                            'iswalpha',
                                                                                            'iswspace',
                                                                                            'iswpunct',
                                                                                            'iswdigit',
                                                                                            'memcpy',
                                                                                            'sqrtf',
                                                                                            'floorf',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'ShellExecuteW',
                                                                                            'ShellAboutW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHSetLocalizedName',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime',
                                                                                            'GetUserNameW',
                                                                                            'CreateSolidBrush',
                                                                                            'GetStockObject',
                                                                                            'ExtTextOutA',
                                                                                            'SetTextAlign',
                                                                                            'RemoveFontResourceW',
                                                                                            'AddFontResourceW',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'SetTextColor',
                                                                                            'GetTextMetricsA',
                                                                                            'CreateRoundRectRgn',
                                                                                            'GetObjectA',
                                                                                            'GetTextColor',
                                                                                            'GetBkColor',
                                                                                            'Rectangle',
                                                                                            'CreatePen',
                                                                                            'DeleteDC',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'PatBlt',
                                                                                            'ExcludeClipRect',
                                                                                            'BitBlt',
                                                                                            'CreateBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'ExtTextOutW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'MoveToEx',
                                                                                            'GetTextMetricsW',
                                                                                            'GetGlyphOutlineA',
                                                                                            'GetCharacterPlacementW',
                                                                                            'CreateDIBSection',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetFontLanguageInfo',
                                                                                            'SetMapMode',
                                                                                            'GetCharacterPlacementA',
                                                                                            'GetObjectW',
                                                                                            'CreateFontW',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'PathCombineW',
                                                                                            'PathFileExistsW',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'InitCommonControlsEx',
                                                                                            'GdipSetImageAttributesWrapMode',
                                                                                            'GdipImageRotateFlip',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipDeleteRegion',
                                                                                            'GdipCreateRegionHrgn',
                                                                                            'GdipSetClipRegion',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipSetStringFormatFlags',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipDrawString',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipLoadImageFromStream',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipSetClipRectI',
                                                                                            'GdipCreateImageAttributes',
                                                                                            'GdipDisposeImageAttributes',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateLineBrushFromRectI',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDeletePen',
                                                                                            'GdipSetPenDashStyle',
                                                                                            'GdipSetStringFormatHotkeyPrefix',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipGetDC',
                                                                                            'GdipReleaseDC',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipDrawRectangle',
                                                                                            'GdipDrawRectangleI',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipFillRegion',
                                                                                            'GdipMeasureString',
                                                                                            'GdipDrawImagePointRectI',
                                                                                            'GdipDrawImageRectRectI',
                                                                                            'GetUserNameExW',
                                                                                            'Direct3DCreate9',
                                                                                            'AccessibleChildren',
                                                                                            'CreateStdAccessibleProxyW',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'LresultFromObject',
                                                                                            'XInputGetState',
                                                                                            'WTSRegisterSessionNotification',
                                                                                            'WTSUnRegisterSessionNotification',
                                                                                            'SLGetWindowsInformationDWORD',
                                                                                            'ScriptBreak',
                                                                                            'ScriptItemize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 428,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 113976,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b65c03b9325bbf1118ad00b4bb42d2db0570a89c865fdeb6217e76b4d3bd233a'},
 'b69544a8f8136e0292d56c5150a2cef176488cac5c2ba2daa4cb613034098a93': {'AddressOfEntryPoint': 8192,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 256,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.DLL': 'RegCreateKeyA',
                                                                                      'KERNEL32.DLL': 'GetModuleFileNameA'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyA'],
                                                                      'LinkerVersion': 1,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 7,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.code\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 512},
                                                                      'StackReserveSize': 4096,
                                                                      'filename': './data/malware/b69544a8f8136e0292d56c5150a2cef176488cac5c2ba2daa4cb613034098a93'},
 'b74493860b294233f324e97349ee9b51838fab3171d4a1f33cd67a3dae47eb97': {'AddressOfEntryPoint': 27936,
                                                                      'DebugRVA': 228812,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 258048,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 34480,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 18944,
                                                                                       '.rdata\x00\x00': 26112,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 34816,
                                                                                       '.text\x00\x00\x00': 225280,
                                                                                       'FE_TEXT\x00': 26112},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/b74493860b294233f324e97349ee9b51838fab3171d4a1f33cd67a3dae47eb97'},
 'b772ce40f992b0948e3c858b03d132377e62fb95568a7e100f56fbe64739b55b': {'AddressOfEntryPoint': 3221271622,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['GetWindowsDirectoryA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'WinExec',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'wsprintfA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/b772ce40f992b0948e3c858b03d132377e62fb95568a7e100f56fbe64739b55b'},
 'b78038b0f8943d5ab243462f7b9d0e99eb1b0eadb1737d8cb65f595e8733e2d3': {'AddressOfEntryPoint': 484124,
                                                                      'DebugRVA': 633440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 836864,
                                                                      'ExportSize': 483,
                                                                      'IATRVA': 630784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptDestroyHash',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'USER32.dll': 'CreateDesktopW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'send'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileW',
                                                                                            'RtlCaptureContext',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'SetInformationJobObject',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'SetHandleInformation',
                                                                                            'GetSystemInfo',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'CloseHandle',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetThreadContext',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualProtectEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'FlushInstructionCache',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'RtlPcToFileHeader',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'PeekMessageW',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'PostQuitMessage',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CallMsgFilterW',
                                                                                            'TranslateMessage',
                                                                                            'CreateWindowStationW',
                                                                                            'DispatchMessageW',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'KillTimer',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CreateDesktopW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'ntohs',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'timeGetDevCaps',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 290,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.pdata\x00\x00': 36864,
                                                                                       '.rdata\x00\x00': 206848,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 626688,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/b78038b0f8943d5ab243462f7b9d0e99eb1b0eadb1737d8cb65f595e8733e2d3'},
 'b781bce08d62ee8ca17be3dbb1842012a32532c3e71ab69e22cdef60259a3464': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 192532,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 193024,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b781bce08d62ee8ca17be3dbb1842012a32532c3e71ab69e22cdef60259a3464'},
 'b7d657a61556fdf6f964a600d7cd918cfb24ec33f3a67ae5a6587fc10dcb26d9': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 996724,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 996864,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b7d657a61556fdf6f964a600d7cd918cfb24ec33f3a67ae5a6587fc10dcb26d9'},
 'b8c1bb5014dde0701b424b0e16770f1f14a0806f353ac5aece75b49ca51eafd0': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 21608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 22016,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/b8c1bb5014dde0701b424b0e16770f1f14a0806f353ac5aece75b49ca51eafd0'},
 'b9027e7744cc79f86d3a2c734031fdecc84eb99e3c7f8c2e6fcc7022dc8c40b4': {'AddressOfEntryPoint': 62750,
                                                                      'DebugRVA': 33376,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LCMapStringW'},
                                                                      'ImportedFunctions': ['WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 9728,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 28160,
                                                                                       'hevuxhr\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/b9027e7744cc79f86d3a2c734031fdecc84eb99e3c7f8c2e6fcc7022dc8c40b4'},
 'b90c45b593caa67d5c686b4c0ae43364be4fedcaf801c57cd08b39c8f66bc1ab': {'AddressOfEntryPoint': 23584,
                                                                      'DebugRVA': 29456,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'FlsSetValue',
                                                                                      'PSAPI.DLL': 'EnumProcesses',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'SHLWAPI.dll': 'wnsprintfW',
                                                                                      'WININET.dll': 'InternetSetOptionW',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind'},
                                                                      'ImportedFunctions': ['PathAddBackslashW',
                                                                                            'StrCatW',
                                                                                            'wnsprintfW',
                                                                                            'InternetOpenW',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetSetOptionW',
                                                                                            'GetModuleFileNameExA',
                                                                                            'EnumProcesses',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapFree',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTickCount',
                                                                                            'CopyFileW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenW',
                                                                                            'GetTempPathW',
                                                                                            'lstrlenA',
                                                                                            'GetTempFileNameW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateRemoteThread',
                                                                                            'OpenProcess',
                                                                                            'VirtualFreeEx',
                                                                                            'TerminateProcess',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualAllocEx',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'WriteProcessMemory',
                                                                                            'ExitProcess',
                                                                                            'MoveFileExW',
                                                                                            'GetVersionExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringA',
                                                                                            'CreateFileW',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyW',
                                                                                            'GetTokenInformation',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'OpenProcessToken',
                                                                                            'RegSetValueExW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlVirtualUnwind'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 80,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 16,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1210368,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 20992},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/b90c45b593caa67d5c686b4c0ae43364be4fedcaf801c57cd08b39c8f66bc1ab'},
 'b95a5e2ae5653e4de504a1d230857b40b1c251c5b832057a3f3ac67ec4cdb408': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 520844,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 476672,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/b95a5e2ae5653e4de504a1d230857b40b1c251c5b832057a3f3ac67ec4cdb408'},
 'baa0f9e799a3d46ccb04c9d4520a69e58383b2d88aad8746f9214eaa8d3a06f3': {'AddressOfEntryPoint': 69936,
                                                                      'DebugRVA': 75520,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'MPR.dll': 'WNetEnumResourceA',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderA',
                                                                                      'USER32.dll': 'DeferWindowPos',
                                                                                      'WS2_32.dll': 'gethostbyname',
                                                                                      'comdlg32.dll': 'GetOpenFileNameA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['WNetOpenEnumA',
                                                                                            'WNetCloseEnum',
                                                                                            'WNetEnumResourceA',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_mbsicmp',
                                                                                            '_purecall',
                                                                                            'qsort',
                                                                                            '_strlwr',
                                                                                            '_itoa',
                                                                                            'strtoul',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'strcmp',
                                                                                            'strchr',
                                                                                            '_memicmp',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'strlen',
                                                                                            'atoi',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'memcpy',
                                                                                            'strrchr',
                                                                                            '_strcmpi',
                                                                                            'atof',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            'ImageList_SetImageCount',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'gethostbyname',
                                                                                            'DeleteFileA',
                                                                                            'GetCurrentProcessId',
                                                                                            'ExitProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetStdHandle',
                                                                                            'EnumResourceNamesA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadProcessMemory',
                                                                                            'OpenProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'GetLogicalDrives',
                                                                                            'GlobalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareFileTime',
                                                                                            'GetComputerNameA',
                                                                                            'GetDriveTypeA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GlobalLock',
                                                                                            'CloseHandle',
                                                                                            'GetTimeFormatA',
                                                                                            'ReadFile',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetFileSize',
                                                                                            'GlobalUnlock',
                                                                                            'GetDateFormatA',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryExA',
                                                                                            'FindFirstFileA',
                                                                                            'GetMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetFocus',
                                                                                            'EndDeferWindowPos',
                                                                                            'DispatchMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'SetDlgItemInt',
                                                                                            'SetDlgItemTextA',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetWindowPos',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'RegisterClassA',
                                                                                            'LoadIconA',
                                                                                            'LoadImageA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'OpenClipboard',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'GetMenu',
                                                                                            'GetCursorPos',
                                                                                            'MoveWindow',
                                                                                            'GetDC',
                                                                                            'GetSysColor',
                                                                                            'CheckMenuItem',
                                                                                            'SetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'EmptyClipboard',
                                                                                            'EnableWindow',
                                                                                            'EnableMenuItem',
                                                                                            'MapWindowPoints',
                                                                                            'ReleaseDC',
                                                                                            'EnumChildWindows',
                                                                                            'DestroyWindow',
                                                                                            'GetMenuItemInfoA',
                                                                                            'GetWindowTextA',
                                                                                            'LoadMenuA',
                                                                                            'GetParent',
                                                                                            'ModifyMenuA',
                                                                                            'LoadStringA',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'TrackPopupMenu',
                                                                                            'BeginDeferWindowPos',
                                                                                            'PostQuitMessage',
                                                                                            'TranslateMessage',
                                                                                            'DeferWindowPos',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'FindTextA',
                                                                                            'GetSaveFileNameA',
                                                                                            'GetOpenFileNameA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegConnectRegistryA',
                                                                                            'RegLoadKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegUnLoadKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 202,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 13028,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 67072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/baa0f9e799a3d46ccb04c9d4520a69e58383b2d88aad8746f9214eaa8d3a06f3'},
 'bababe21a23c67430c69484ec92c24710f561c20c3e8bc7a75a7cc6d9478a659': {'AddressOfEntryPoint': 1073796357,
                                                                      'DebugRVA': 37584,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'USER32.dll': 'FindWindowW'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'Sleep',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'WideCharToMultiByte',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'PostMessageW',
                                                                                            'FindWindowW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1408,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bababe21a23c67430c69484ec92c24710f561c20c3e8bc7a75a7cc6d9478a659'},
 'bad817ee87e1ed7ac1318a47f723a7f502938aba6f111f1cb0223a0952dd4474': {'AddressOfEntryPoint': 188536,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 25944,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 3,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualAlloc'},
                                                                      'ImportedFunctions': ['VirtualAlloc'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 22016,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 3072,
                                                                                       'CRT\x00\x00\x00\x00\x00': 11776,
                                                                                       'INIT\x00\x00\x00\x00': 10752},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bad817ee87e1ed7ac1318a47f723a7f502938aba6f111f1cb0223a0952dd4474'},
 'bb0471c1357a1552cdaa0c94bac293cad20e2838ba91036ae9fcdf815c2db5d3': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 215096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 215552,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/bb0471c1357a1552cdaa0c94bac293cad20e2838ba91036ae9fcdf815c2db5d3'},
 'bb64b57454f11dc0ea90eb5734b74ec5701a2d079080d4251a041050a5b47167': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bb64b57454f11dc0ea90eb5734b74ec5701a2d079080d4251a041050a5b47167'},
 'bb77ff371efba8dbbd55072487171eafa446be95f970683c67de7d19b07c3c0b': {'AddressOfEntryPoint': 8760,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 58400,
                                                                      'ExportSize': 85,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers'},
                                                                      'ImportedFunctions': ['GetExitCodeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateRemoteThread',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'WriteProcessMemory',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSize',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bb77ff371efba8dbbd55072487171eafa446be95f970683c67de7d19b07c3c0b'},
 'bbb7ae83a9922299538e33465a22fdc54ec6c15d6e9f0637c09d24c748848762': {'AddressOfEntryPoint': 506012,
                                                                      'DebugRVA': 670320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 906656,
                                                                      'ExportSize': 483,
                                                                      'IATRVA': 667648,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptHashData',
                                                                                      'KERNEL32.dll': 'GetProcAddress',
                                                                                      'USER32.dll': 'CreateDesktopW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'send',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileW',
                                                                                            'RtlCaptureContext',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'SetInformationJobObject',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleInformation',
                                                                                            'GetSystemInfo',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'GetThreadContext',
                                                                                            'VirtualProtectEx',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SuspendThread',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'FlushInstructionCache',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'PostQuitMessage',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'CreateWindowStationW',
                                                                                            'CallMsgFilterW',
                                                                                            'KillTimer',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'PeekMessageW',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CreateDesktopW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptGetHashParam',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'GetProfileType',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'accept',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'gethostbyname',
                                                                                            'recv',
                                                                                            'closesocket',
                                                                                            'ntohs',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'socket',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'timeGetDevCaps',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime',
                                                                                            'CoTaskMemFree'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 290,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1484,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13312,
                                                                                       '.pdata\x00\x00': 38400,
                                                                                       '.rdata\x00\x00': 239616,
                                                                                       '.reloc\x00\x00': 13312,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 661504,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'data\x00\x00\x00\x00': 8704,
                                                                                       'text\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bbb7ae83a9922299538e33465a22fdc54ec6c15d6e9f0637c09d24c748848762'},
 'bbdf1900774f4d6c1ee4fbe0afec71f571e1ed8084f863916df1ba286b083824': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/bbdf1900774f4d6c1ee4fbe0afec71f571e1ed8084f863916df1ba286b083824'},
 'bc1ea7fa981b02acfce1d92555d5e4d52f61be7b1b11c95a83d6555ac50aac9b': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 229600,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 229888,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/bc1ea7fa981b02acfce1d92555d5e4d52f61be7b1b11c95a83d6555ac50aac9b'},
 'bc5e01e8165907b958dfab9853b533b7c0e8a1f6baa1db56dc6a7a3ae2150e78': {'AddressOfEntryPoint': 1789960,
                                                                      'DebugRVA': 1524288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1523712,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 896,
                                                                      'SectionNames': {'.aot\x00\x00\x00\x00': 47616,
                                                                                       '.data\x00\x00\x00': 53760,
                                                                                       '.pdata\x00\x00': 50688,
                                                                                       '.rdata\x00\x00': 153088,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 1458688,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'init\x00\x00\x00\x00': 512,
                                                                                       'page\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/bc5e01e8165907b958dfab9853b533b7c0e8a1f6baa1db56dc6a7a3ae2150e78'},
 'bc90bd9af3a38846f1f167db751f16b3a26a90bd6de2a20c48a75bb3b23b0547': {'AddressOfEntryPoint': 29492,
                                                                      'DebugRVA': 8624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltGetDeviceObject',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['KeAcquireSpinLockRaiseToDpc',
                                                                                            'ExAllocatePool',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeBugCheckEx',
                                                                                            'IoThreadToProcess',
                                                                                            'IofCallDriver',
                                                                                            'IoRegisterFsRegistrationChange',
                                                                                            'ExQueueWorkItem',
                                                                                            'IoDetachDevice',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'KeReleaseSpinLock',
                                                                                            'PsGetProcessId',
                                                                                            'IoUnregisterFsRegistrationChange',
                                                                                            'ZwWriteFile',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoFreeWorkItem',
                                                                                            'IoCreateDevice',
                                                                                            'IoDeleteDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwReadFile',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'IoAttachDeviceToDeviceStackSafe',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'IoAllocateWorkItem',
                                                                                            '__C_specific_handler',
                                                                                            'FltObjectDereference',
                                                                                            'FltStartFiltering',
                                                                                            'FltGetVolumeFromDeviceObject',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltRegisterFilter',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltEnumerateVolumes',
                                                                                            'FltGetVolumeName',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltCloseClientPort',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltCancelFileOpen',
                                                                                            'FltGetBottomInstance',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltGetVolumeFromName',
                                                                                            'FltClose',
                                                                                            'FltAttachVolume',
                                                                                            'FltCreateFile',
                                                                                            'FltSendMessage',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltGetDeviceObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 52,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 3072,
                                                                                       'INIT\x00\x00\x00\x00': 3072,
                                                                                       'PAGE\x00\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/bc90bd9af3a38846f1f167db751f16b3a26a90bd6de2a20c48a75bb3b23b0547'},
 'bcffc6796f0043c354635b9b961798239b1c8f0c0cae3b910b45dc67a35c397d': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bcffc6796f0043c354635b9b961798239b1c8f0c0cae3b910b45dc67a35c397d'},
 'bd3b15859fa38d34fdc27ae5f08cb8962accdf28dfa3172a9f42d04222c2689f': {'AddressOfEntryPoint': 1074418509,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 491520,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'GetLocaleInfoA',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'BeginPaint',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WTSAPI32.dll': 'WTSQuerySessionInformationW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ImmGetIMEFileNameW',
                                                                                            'ImmInstallIMEW',
                                                                                            'ImmDisableIME',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSQuerySessionInformationW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GlobalAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'DeleteCriticalSection',
                                                                                            'lstrcmpiW',
                                                                                            'EnterCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'LeaveCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'InitializeCriticalSection',
                                                                                            'GlobalFree',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadResource',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'SetFilePointer',
                                                                                            'VirtualQuery',
                                                                                            'CreateProcessW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentThread',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'CreateFileW',
                                                                                            'GetLocalTime',
                                                                                            'lstrcatW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'lstrcpyW',
                                                                                            'GetTempPathW',
                                                                                            'ExitThread',
                                                                                            'SetLastError',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'DuplicateHandle',
                                                                                            'CreateThread',
                                                                                            'FindFirstFileW',
                                                                                            'MoveFileExW',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'CopyFileW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LocalAlloc',
                                                                                            'GetFileSize',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateMutexW',
                                                                                            'OpenMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'OpenFileMappingW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'EnumResourceNamesW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetLocaleInfoW',
                                                                                            'EnumSystemLocalesW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LoadLibraryA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LoadStringW',
                                                                                            'LoadIconW',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'SetWindowTextW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateDialogParamW',
                                                                                            'EndDialog',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyWindow',
                                                                                            'EndPaint',
                                                                                            'CharNextW',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'MessageBoxW',
                                                                                            'GetSystemMetrics',
                                                                                            'wvsprintfW',
                                                                                            'UnloadKeyboardLayout',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'BeginPaint',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'BuildExplicitAccessWithNameW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSidLengthRequired',
                                                                                            'GetTokenInformation',
                                                                                            'LookupAccountSidW',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegLoadKeyW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegFlushKey',
                                                                                            'RegEnumValueW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'LookupAccountNameW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegCreateKeyW',
                                                                                            'OpenProcessToken',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetSecurityInfo',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'InitializeAcl',
                                                                                            'RegDeleteKeyW',
                                                                                            'SHFileOperationW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'VarUI4FromStr',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 212,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2432,
                                                                      'SectionNames': {'\tm\n\x00c\x00\x00\x00': 2560,
                                                                                       '.data\x00\x00\x00': 13312,
                                                                                       '.pdata\x00\x00': 32768,
                                                                                       '.rdata\x00\x00': 136192,
                                                                                       '.text\x00\x00\x00': 485376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bd3b15859fa38d34fdc27ae5f08cb8962accdf28dfa3172a9f42d04222c2689f'},
 'bd6cab093b5451b4cc85b4528dc0251c97a3d11cb3c1493d25f37b06f8cd2238': {'AddressOfEntryPoint': 111328,
                                                                      'DebugRVA': 69984,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'KeBugCheckEx'},
                                                                      'ImportedFunctions': ['ZwOpenSymbolicLinkObject',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'KeSetEvent',
                                                                                            'ZwClose',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoDeleteDevice',
                                                                                            'PsCreateSystemThread',
                                                                                            'KeInitializeEvent',
                                                                                            'IoCreateDevice',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'RtlInitUnicodeString',
                                                                                            'SeTokenType',
                                                                                            'ObfDereferenceObject',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IofCompleteRequest',
                                                                                            'RtlCopyUnicodeString',
                                                                                            '__C_specific_handler',
                                                                                            'ProbeForWrite',
                                                                                            'IoIs32bitProcess',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'ZwOpenProcessToken',
                                                                                            'RtlCompareMemory',
                                                                                            'ZwReadFile',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'PsRevertToSelf',
                                                                                            'SeImpersonateClient',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'SeCreateClientSecurity',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwCreateFile',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 43,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16384,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 65024,
                                                                                       'INIT\x00\x00\x00\x00': 8704,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/bd6cab093b5451b4cc85b4528dc0251c97a3d11cb3c1493d25f37b06f8cd2238'},
 'bf00fe376b2daed5c7b648bde4bf013c1a6840be2b054ff4a7d3248543690a07': {'AddressOfEntryPoint': 1074582040,
                                                                      'DebugRVA': 608400,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 606208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CreateProcessAsUserW',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathAddBackslashW',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'WTSAPI32.dll': 'WTSEnumerateSessionsW',
                                                                                      'nvWmiShim.dll': '?setMonitorPower@ApiShim@@SA_NJ@Z',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['?setMonitorHwnd@ApiShim@@SA_NPEAUHWND__@@@Z',
                                                                                            '??1ApiShim@@QEAA@XZ',
                                                                                            '?getDisplays@ApiShim@@QEBAQEAPEAVIDisplayShim@@XZ',
                                                                                            '?getDisplayCount@ApiShim@@QEBAKXZ',
                                                                                            '??0ApiShim@@QEAA@XZ',
                                                                                            '?getDisplaySourceCount@ApiShim@@QEBAKXZ',
                                                                                            '?getDisplayGridManager@ApiShim@@QEBAPEAVIDisplayGridManager@@XZ',
                                                                                            '?setnView@ApiShim@@SAX_N@Z',
                                                                                            '?getnView@ApiShim@@SA_NXZ',
                                                                                            '?getGpuCount@ApiShim@@QEBAKXZ',
                                                                                            '?getGsyncCount@ApiShim@@QEBAKXZ',
                                                                                            '?getDisplayPathInfo@ApiShim@@QEBAPEAVIDisplayPathShim@@XZ',
                                                                                            '?getDisplayDriverVer@ApiShim@@QEBAKXZ',
                                                                                            '?getGpus@ApiShim@@QEBAQEAPEAVIGpuShim@@XZ',
                                                                                            '?getGsyncDevices@ApiShim@@QEBAQEAPEAVIGSyncShim@@XZ',
                                                                                            '?getSdiDevices@ApiShim@@QEBAQEAPEAVISdiShim@@XZ',
                                                                                            '?getDrs@ApiShim@@QEBAPEBVIDrsShim@@XZ',
                                                                                            '?getCooler@ApiShim@@QEBAQEAPEAVICoolerShim@@XZ',
                                                                                            '?getThermal@ApiShim@@QEBAQEAPEAVIThermalShim@@XZ',
                                                                                            '?getBoards@ApiShim@@QEBAQEAPEAVIBoardShim@@XZ',
                                                                                            '?getBoardCount@ApiShim@@QEBAKXZ',
                                                                                            '?registerEvents@@YA?AW4NvWMI_Status@@AEAUSCallbackTable@@@Z',
                                                                                            '?unregisterEvents@@YA?AW4NvWMI_Status@@XZ',
                                                                                            '?getDisplayTargetCount@ApiShim@@QEBAKI@Z',
                                                                                            '?getSdiCount@ApiShim@@QEBAKXZ',
                                                                                            '?getDrsMutable@ApiShim@@QEAAPEAVIDrsShim@@XZ',
                                                                                            '?setMonitorPower@ApiShim@@SA_NJ@Z',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'ReadFile',
                                                                                            'ReleaseMutex',
                                                                                            'SetEvent',
                                                                                            'OpenEventW',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'SignalObjectAndWait',
                                                                                            'ResetEvent',
                                                                                            'OpenProcess',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemDirectoryW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'GetModuleHandleW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersionExW',
                                                                                            'FormatMessageW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'CompareStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FatalAppExitA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'LoadLibraryW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapReAlloc',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'lstrlenA',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'OutputDebugStringW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'DefWindowProcW',
                                                                                            'LoadStringW',
                                                                                            'DestroyWindow',
                                                                                            'PostMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'GetMessageW',
                                                                                            'ShowWindow',
                                                                                            'DeleteService',
                                                                                            'QueryServiceStatus',
                                                                                            'ControlService',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'CreateServiceW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'SetTokenInformation',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysStringByteLen',
                                                                                            'VariantChangeType',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayCreateVector',
                                                                                            'GetErrorInfo',
                                                                                            'PathAppendW',
                                                                                            'PathAddBackslashW',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSEnumerateSessionsW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 189,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1464,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bf00fe376b2daed5c7b648bde4bf013c1a6840be2b054ff4a7d3248543690a07'},
 'bf06b816fe16e915592447c042bbb529cfc6ac382a4fc62010e10f15d3252ef6': {'AddressOfEntryPoint': 52904,
                                                                      'DebugRVA': 95600,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 104464,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'DosDateTimeToFileTime',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'USER32.dll': 'DispatchMessageA',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetNumberFormatA',
                                                                                            'lstrcmpiA',
                                                                                            'GetProcAddress',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetTempPathA',
                                                                                            'MoveFileExA',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'OpenFileMappingA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileA',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FindWindowExA',
                                                                                            'GetClassNameA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSysColor',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'LoadIconA',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'wvsprintfA',
                                                                                            'SetWindowLongA',
                                                                                            'CharUpperA',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DestroyWindow',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'MessageBoxA',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringA',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongA',
                                                                                            'OemToCharBuffA',
                                                                                            'DispatchMessageA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetOpenFileNameA',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetSaveFileNameA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ShellExecuteExA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHChangeNotify',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 164,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 27012,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 27136,
                                                                                       '.text\x00\x00\x00': 86528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bf06b816fe16e915592447c042bbb529cfc6ac382a4fc62010e10f15d3252ef6'},
 'bf2a030e812b0af137a649bf53e310c9752e0172ff6e873ec77a2e8b3db256c2': {'AddressOfEntryPoint': 6480,
                                                                      'DebugRVA': 29280,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'Process32Next',
                                                                                            'GetCurrentProcessId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 49192,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 49664,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bf2a030e812b0af137a649bf53e310c9752e0172ff6e873ec77a2e8b3db256c2'},
 'bf60b1c50ae9598d289a5b9e2223cbb09c2227552ff83a490491d6d74f840f9d': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/bf60b1c50ae9598d289a5b9e2223cbb09c2227552ff83a490491d6d74f840f9d'},
 'bf9ef43f775cf2f049af6d24061ecad790e88a64725974f26f9cccc3b07e18f3': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 482816,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/bf9ef43f775cf2f049af6d24061ecad790e88a64725974f26f9cccc3b07e18f3'},
 'bfcc7f99c4e6087f216494fe50b5c4169c2ec3126573a81e26154c500a979e5f': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/bfcc7f99c4e6087f216494fe50b5c4169c2ec3126573a81e26154c500a979e5f'},
 'bfe14df209ae1ce3e58bc6974573594e5ec092eefb2b9eb70c7e24280acd62ed': {'AddressOfEntryPoint': 1789960,
                                                                      'DebugRVA': 1524288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1523712,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 896,
                                                                      'SectionNames': {'.aot\x00\x00\x00\x00': 47616,
                                                                                       '.data\x00\x00\x00': 53760,
                                                                                       '.pdata\x00\x00': 50688,
                                                                                       '.rdata\x00\x00': 153088,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 1458688,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'init\x00\x00\x00\x00': 512,
                                                                                       'page\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/bfe14df209ae1ce3e58bc6974573594e5ec092eefb2b9eb70c7e24280acd62ed'},
 'c00a16cd22e54538300ce78ae97c8f5d865de8edec22c02acaab67286b53ca19': {'AddressOfEntryPoint': 52864,
                                                                      'DebugRVA': 91472,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 100176,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'lstrcmpiA',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetNumberFormatA',
                                                                                            'GetProcAddress',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetTempPathA',
                                                                                            'MoveFileExA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCommandLineA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileA',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'FindWindowExA',
                                                                                            'GetClassNameA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSysColor',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'LoadIconA',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'wvsprintfA',
                                                                                            'SetWindowLongA',
                                                                                            'CharUpperA',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'MessageBoxA',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringA',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongA',
                                                                                            'OemToCharBuffA',
                                                                                            'GetMessageA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetOpenFileNameA',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetSaveFileNameA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ShellExecuteExA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHChangeNotify',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 13324,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 86016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c00a16cd22e54538300ce78ae97c8f5d865de8edec22c02acaab67286b53ca19'},
 'c01fe9f01b40633db53e458c170996a5bdd8cd2f6513c4a054e1514fde661829': {'AddressOfEntryPoint': 1074217541,
                                                                      'DebugRVA': 257024,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 253952,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'FlsFree',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SETUPAPI.dll': 'SetupDiGetClassDevsW',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'gdiplus.dll': 'GdipDrawImageI',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal'},
                                                                      'ImportedFunctions': ['SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetThreadLocale',
                                                                                            'lstrlenA',
                                                                                            'TlsFree',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'GlobalFlags',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetCurrentThread',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetVersion',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'lstrcmpA',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCurrentProcessId',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrlenW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeResource',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryA',
                                                                                            'SetLastError',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindResourceExW',
                                                                                            'MulDiv',
                                                                                            'EnterCriticalSection',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'LeaveCriticalSection',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'FlsFree',
                                                                                            'SetCursor',
                                                                                            'PostQuitMessage',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'ReleaseDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'TabbedTextOutW',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'ValidateRect',
                                                                                            'GetActiveWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'IsWindowEnabled',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendDlgItemMessageW',
                                                                                            'WinHelpW',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'IsWindow',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetLastActivePopup',
                                                                                            'DispatchMessageW',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageW',
                                                                                            'MapWindowPoints',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetKeyState',
                                                                                            'IsWindowVisible',
                                                                                            'GetMenu',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ScreenToClient',
                                                                                            'CopyRect',
                                                                                            'PtInRect',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapW',
                                                                                            'GetFocus',
                                                                                            'GetMenuState',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'DestroyIcon',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetCursorPos',
                                                                                            'LoadMenuW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'UnregisterClassW',
                                                                                            'RemoveMenu',
                                                                                            'ModifyMenuW',
                                                                                            'LoadCursorW',
                                                                                            'DestroyMenu',
                                                                                            'SetPropW',
                                                                                            'ShowWindow',
                                                                                            'GetWindowLongW',
                                                                                            'LoadIconW',
                                                                                            'SetWindowPos',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'DrawIcon',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'GetSystemMetrics',
                                                                                            'SetActiveWindow',
                                                                                            'IsIconic',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'InvalidateRect',
                                                                                            'AttachThreadInput',
                                                                                            'GetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'UpdateWindow',
                                                                                            'GetClassInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'FindWindowExW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetDC',
                                                                                            'GetParent',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindow',
                                                                                            'GetWindowRect',
                                                                                            'MapDialogRect',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'PostMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'GetStockObject',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'Escape',
                                                                                            'ExtTextOutW',
                                                                                            'TextOutW',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'SetDIBColorTable',
                                                                                            'GetMapMode',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SetTextAlign',
                                                                                            'SetMapMode',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'CreateBitmap',
                                                                                            'GetViewportExtEx',
                                                                                            'GetWindowExtEx',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextExtentExPointW',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'GetObjectW',
                                                                                            'AlphaBlend',
                                                                                            'DocumentPropertiesW',
                                                                                            'OpenPrinterW',
                                                                                            'ClosePrinter',
                                                                                            'RegEnumKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFindExtensionW',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipCloneImage',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipFree',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipAlloc',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipDrawImageI'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 334,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 105136,
                                                                      'SectionNames': {'\x01\\\x07\x00c\x00\x00\x00': 105472,
                                                                                       '.data\x00\x00\x00': 12800,
                                                                                       '.pdata\x00\x00': 18944,
                                                                                       '.rdata\x00\x00': 83968,
                                                                                       '.text\x00\x00\x00': 246784},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c01fe9f01b40633db53e458c170996a5bdd8cd2f6513c4a054e1514fde661829'},
 'c06fc98500bfc6a56de88812254930a7e1466f00179750d19f66398ea0ba64d5': {'AddressOfEntryPoint': 23791,
                                                                      'DebugRVA': 5936,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'IsTextUnicode',
                                                                                      'COMCTL32.dll': 'CreateStatusWindowW',
                                                                                      'COMDLG32.dll': 'PrintDlgExW',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'DragAcceptFiles',
                                                                                      'SHLWAPI.dll': 'SHStrDupW',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegCloseKey',
                                                                                            'IsTextUnicode',
                                                                                            'GlobalAlloc',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindNLSString',
                                                                                            'FormatMessageW',
                                                                                            'UnmapViewOfFile',
                                                                                            'LocalReAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetEndOfFile',
                                                                                            'DeleteFileW',
                                                                                            'GetACP',
                                                                                            'WriteFile',
                                                                                            'SetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'LocalSize',
                                                                                            'GetFullPathNameW',
                                                                                            'FoldStringW',
                                                                                            'LocalUnlock',
                                                                                            'LocalLock',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'lstrcmpW',
                                                                                            'GetCurrentProcessId',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineW',
                                                                                            'lstrlenW',
                                                                                            'MulDiv',
                                                                                            'GetLocaleInfoW',
                                                                                            'GlobalFree',
                                                                                            'LocalAlloc',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetErrorMode',
                                                                                            'lstrcmpiW',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CreateDCW',
                                                                                            'StartPage',
                                                                                            'StartDocW',
                                                                                            'SetAbortProc',
                                                                                            'DeleteDC',
                                                                                            'EndDoc',
                                                                                            'AbortDoc',
                                                                                            'EndPage',
                                                                                            'GetTextMetricsW',
                                                                                            'SetBkMode',
                                                                                            'LPtoDP',
                                                                                            'SetWindowExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'SetMapMode',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'TextOutW',
                                                                                            'EnumFontsW',
                                                                                            'GetTextFaceW',
                                                                                            'SelectObject',
                                                                                            'GetObjectW',
                                                                                            'GetStockObject',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDeviceCaps',
                                                                                            'SetWindowTextW',
                                                                                            'GetMenuState',
                                                                                            'OpenClipboard',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'CloseClipboard',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgCtrlID',
                                                                                            'WinHelpW',
                                                                                            'GetCursorPos',
                                                                                            'ScreenToClient',
                                                                                            'ChildWindowFromPoint',
                                                                                            'GetParent',
                                                                                            'GetWindowPlacement',
                                                                                            'CharUpperW',
                                                                                            'GetSystemMenu',
                                                                                            'LoadAcceleratorsW',
                                                                                            'SetWindowLongW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadCursorW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowPlacement',
                                                                                            'LoadImageW',
                                                                                            'RegisterClassExW',
                                                                                            'UnhookWinEvent',
                                                                                            'UpdateWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'GetWindowTextW',
                                                                                            'EnableWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'DrawTextExW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetMessageW',
                                                                                            'SetWinEventHook',
                                                                                            'SetProcessDPIAware',
                                                                                            'CharNextW',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBeep',
                                                                                            'DestroyWindow',
                                                                                            'PostQuitMessage',
                                                                                            'IsIconic',
                                                                                            'DefWindowProcW',
                                                                                            'LoadStringW',
                                                                                            'SetActiveWindow',
                                                                                            'SetCursor',
                                                                                            'ReleaseDC',
                                                                                            'DispatchMessageW',
                                                                                            'SetScrollPos',
                                                                                            'TranslateMessage',
                                                                                            'ShowWindow',
                                                                                            'GetClientRect',
                                                                                            'CheckMenuItem',
                                                                                            'MessageBoxW',
                                                                                            'GetFocus',
                                                                                            'LoadIconW',
                                                                                            'DialogBoxParamW',
                                                                                            'SetFocus',
                                                                                            'GetSubMenu',
                                                                                            'EnableMenuItem',
                                                                                            'GetMenu',
                                                                                            'PostMessageW',
                                                                                            'SendMessageW',
                                                                                            'MoveWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetDC',
                                                                                            'memset',
                                                                                            '_vsnwprintf',
                                                                                            '_wtol',
                                                                                            'time',
                                                                                            'localtime',
                                                                                            'iswctype',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            'memcpy',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'ReplaceTextW',
                                                                                            'FindTextW',
                                                                                            'PageSetupDlgW',
                                                                                            'ChooseFontW',
                                                                                            'GetFileTitleW',
                                                                                            'PrintDlgExW',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'DragFinish',
                                                                                            'DragQueryFileW',
                                                                                            'ShellAboutW',
                                                                                            'DragAcceptFiles',
                                                                                            'ClosePrinter',
                                                                                            'GetPrinterDriverW',
                                                                                            'OpenPrinterW',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'PathIsFileSpecW',
                                                                                            'SHStrDupW',
                                                                                            'CreateStatusWindowW',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'WinSqmAddToStream'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 209,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 104984,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 105472,
                                                                                       '.text\x00\x00\x00': 58368},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c06fc98500bfc6a56de88812254930a7e1466f00179750d19f66398ea0ba64d5'},
 'c0b29888d722dec82e3b9bc2424e5e7fb32c3ede9647be5a1e8c501e912dabd9': {'AddressOfEntryPoint': 8912,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers',
                                                                                      'lsremora64.dll': 'SetAccessPriv'},
                                                                      'ImportedFunctions': ['SetAccessPriv',
                                                                                            'LoadLibraryA',
                                                                                            'VirtualFreeEx',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcAddress',
                                                                                            'WriteProcessMemory',
                                                                                            'GetLastError',
                                                                                            'VirtualAllocEx',
                                                                                            'GetModuleFileNameA',
                                                                                            'OpenProcess',
                                                                                            'FreeLibrary',
                                                                                            'CreateRemoteThread',
                                                                                            'FlsSetValue',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 15872,
                                                                                       '.text\x00\x00\x00': 44032},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c0b29888d722dec82e3b9bc2424e5e7fb32c3ede9647be5a1e8c501e912dabd9'},
 'c0be7a344a863894890127e61851838037bd9d076423bfc8296cfd6e01d66f6b': {'AddressOfEntryPoint': 72384,
                                                                      'DebugRVA': 79760,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegUnLoadKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'MPR.dll': 'WNetEnumResourceA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'WS2_32.dll': 'WSAGetLastError',
                                                                                      'comdlg32.dll': 'GetOpenFileNameA',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['WNetCloseEnum',
                                                                                            'WNetOpenEnumA',
                                                                                            'WNetEnumResourceA',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_mbsicmp',
                                                                                            '_purecall',
                                                                                            'qsort',
                                                                                            '_strlwr',
                                                                                            '_itoa',
                                                                                            '_c_exit',
                                                                                            'strtoul',
                                                                                            'strcmp',
                                                                                            '_memicmp',
                                                                                            'strchr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'strlen',
                                                                                            'atoi',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strcmpi',
                                                                                            'memcpy',
                                                                                            'atof',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'ImageList_Create',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'gethostbyname',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'connect',
                                                                                            'WSAAsyncSelect',
                                                                                            'gethostbyaddr',
                                                                                            'closesocket',
                                                                                            'WSASetLastError',
                                                                                            'htons',
                                                                                            'WSAGetLastError',
                                                                                            'OpenProcess',
                                                                                            'CreateThread',
                                                                                            'ResumeThread',
                                                                                            'ReadProcessMemory',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeleteFileA',
                                                                                            'SetErrorMode',
                                                                                            'GetStdHandle',
                                                                                            'EnumResourceNamesA',
                                                                                            'GetStartupInfoA',
                                                                                            'FormatMessageA',
                                                                                            'CreateFileA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GlobalAlloc',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryExA',
                                                                                            'FindFirstFileA',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetDateFormatA',
                                                                                            'GlobalUnlock',
                                                                                            'FindNextFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetFileSize',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareFileTime',
                                                                                            'GetLogicalDrives',
                                                                                            'GetComputerNameA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GlobalLock',
                                                                                            'GetTimeFormatA',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'BeginDeferWindowPos',
                                                                                            'TrackPopupMenu',
                                                                                            'KillTimer',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyMenu',
                                                                                            'PostQuitMessage',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'ModifyMenuA',
                                                                                            'LoadMenuA',
                                                                                            'GetWindowTextA',
                                                                                            'GetMenuItemInfoA',
                                                                                            'TranslateMessage',
                                                                                            'DeferWindowPos',
                                                                                            'IsDialogMessageA',
                                                                                            'SetTimer',
                                                                                            'DispatchMessageA',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetFocus',
                                                                                            'EndDeferWindowPos',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'SetDlgItemInt',
                                                                                            'SetDlgItemTextA',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetWindowPos',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'RegisterClassA',
                                                                                            'LoadImageA',
                                                                                            'LoadIconA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'InvalidateRect',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'GetParent',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'GetMenu',
                                                                                            'MoveWindow',
                                                                                            'GetCursorPos',
                                                                                            'GetDC',
                                                                                            'CheckMenuItem',
                                                                                            'GetSysColor',
                                                                                            'EnumChildWindows',
                                                                                            'SetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'EnableWindow',
                                                                                            'EmptyClipboard',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'DestroyWindow',
                                                                                            'GetMessageA',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'FindTextA',
                                                                                            'GetSaveFileNameA',
                                                                                            'GetOpenFileNameA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegConnectRegistryA',
                                                                                            'RegLoadKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegUnLoadKeyA',
                                                                                            'ShellExecuteA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 216,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 13264,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 70144},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c0be7a344a863894890127e61851838037bd9d076423bfc8296cfd6e01d66f6b'},
 'c10b0bc20c69fe389891addf684fcc5bff678c1de3da05d8c90f492d3d8df547': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 14364,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 14848,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/c10b0bc20c69fe389891addf684fcc5bff678c1de3da05d8c90f492d3d8df547'},
 'c11c5e4489f95b42753fb0e1e80020979b61f797255d61c31ce3094918f6c4e6': {'AddressOfEntryPoint': 1612010733,
                                                                      'DebugRVA': 1334988,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 58172,
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/c11c5e4489f95b42753fb0e1e80020979b61f797255d61c31ce3094918f6c4e6'},
 'c124f107d52fb1a85d1b5ccf3e6a4212a531f3dd4b2edccbcd04fcc83a0b9183': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c124f107d52fb1a85d1b5ccf3e6a4212a531f3dd4b2edccbcd04fcc83a0b9183'},
 'c1479eb8e0065857e0b9bde2c0c62b7bb3167b8455372af17e3274414a380d39': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 383668,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 384000,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c1479eb8e0065857e0b9bde2c0c62b7bb3167b8455372af17e3274414a380d39'},
 'c15fe5257c5fa068d21d321cbf11eb5db3cefb3b75000f232455bdbe84f98c33': {'AddressOfEntryPoint': 50088,
                                                                      'DebugRVA': 95568,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 105456,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 25792,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 26112,
                                                                                       '.text\x00\x00\x00': 90112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c15fe5257c5fa068d21d321cbf11eb5db3cefb3b75000f232455bdbe84f98c33'},
 'c1aac973b9050c9bd23dade59cc3e8c58bebb9a6229f6c06b5b58f3f487c138a': {'AddressOfEntryPoint': 178004,
                                                                      'DebugRVA': 756312,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 757760,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1846920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 15360,
                                                                                       '.pdata\x00\x00': 53248,
                                                                                       '.rdata\x00\x00': 191488,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 1847296,
                                                                                       '.text\x00\x00\x00': 752640},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c1aac973b9050c9bd23dade59cc3e8c58bebb9a6229f6c06b5b58f3f487c138a'},
 'c1b3329113be9495c5d52ac198521196abd95e10b43a0c7090aa192d66b89bab': {'AddressOfEntryPoint': 3923433,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 3892512,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterEventSourceW',
                                                                                      'GDI32.dll': 'CreateDCW',
                                                                                      'KERNEL32.dll': 'ExitProcess',
                                                                                      'MSVCP90.dll': '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z',
                                                                                      'MSVCR90.dll': '_initterm_e',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'PSAPI.DLL': 'GetMappedFileNameA',
                                                                                      'QtCore4.dll': '?grow@QVectorData@@SAHHHH_N@Z',
                                                                                      'QtGui4.dll': '?keyPressEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z',
                                                                                      'QtWebKit4.dll': '??1QWebView@@UEAA@XZ',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'WS2_32.dll': 'send',
                                                                                      'WireCore.dll': '?singleton@MatchHandler@@SAAEAV1@XZ',
                                                                                      'dbghelp.dll': 'SymInitialize',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['?staticMetaObject@QObject@@2UQMetaObject@@B',
                                                                                            '?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z',
                                                                                            '?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z',
                                                                                            '?qt_metacast@QObject@@UEAAPEAXPEBD@Z',
                                                                                            '?objectName@QObject@@QEBA?AVQString@@XZ',
                                                                                            '?fromUtf8@QString@@SA?AV1@PEBDH@Z',
                                                                                            '?setObjectName@QObject@@QEAAXAEBVQString@@@Z',
                                                                                            '??0QUrl@@QEAA@AEBVQString@@@Z',
                                                                                            '?connectSlotsByName@QMetaObject@@SAXPEAVQObject@@@Z',
                                                                                            '?isEmpty@QUrl@@QEBA_NXZ',
                                                                                            '??1QUrl@@QEAA@XZ',
                                                                                            '?translate@QCoreApplication@@SA?AVQString@@PEBD00W4Encoding@1@@Z',
                                                                                            '?shared_null@QString@@0UData@1@A',
                                                                                            '??4QString@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '??0QChar@@QEAA@UQLatin1Char@@@Z',
                                                                                            '?fromAscii_helper@QString@@CAPEAUData@1@PEBDH@Z',
                                                                                            '?arg@QString@@QEBA?AV1@VQChar@@HAEBV2@@Z',
                                                                                            '?arg@QString@@QEBA?AV1@AEBV1@HAEBVQChar@@@Z',
                                                                                            '?toNativeSeparators@QDir@@SA?AVQString@@AEBV2@@Z',
                                                                                            '?toStdWString@QString@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ',
                                                                                            '??0QObject@@QEAA@PEAV0@@Z',
                                                                                            '??0QMutex@@QEAA@W4RecursionMode@0@@Z',
                                                                                            '??1QObject@@UEAA@XZ',
                                                                                            '??1QMutex@@QEAA@XZ',
                                                                                            '??1QString@@QEAA@XZ',
                                                                                            '?connect@QObject@@SA_NPEBV1@PEBD01W4ConnectionType@Qt@@@Z',
                                                                                            '?start@QThread@@QEAAXW4Priority@1@@Z',
                                                                                            '?reallocate@QVectorData@@SAPEAU1@PEAU1@HHH@Z',
                                                                                            '?qMemSet@@YAPEAXPEAXH_K@Z',
                                                                                            '?registerType@QMetaType@@SAHPEBDP6AXPEAX@ZP6APEAXPEBX@Z@Z',
                                                                                            '?msleep@QThread@@KAXK@Z',
                                                                                            '?lock@QMutex@@QEAAXXZ',
                                                                                            '?unlock@QMutex@@QEAAXXZ',
                                                                                            '?disconnectNotify@QObject@@MEAAXPEBD@Z',
                                                                                            '?connectNotify@QObject@@MEAAXPEBD@Z',
                                                                                            '?customEvent@QObject@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z',
                                                                                            '?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z',
                                                                                            '?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z',
                                                                                            '?event@QObject@@UEAA_NPEAVQEvent@@@Z',
                                                                                            '?qt_metacall@QThread@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z',
                                                                                            '?qt_metacast@QThread@@UEAAPEAXPEBD@Z',
                                                                                            '?metaObject@QThread@@UEBAPEBUQMetaObject@@XZ',
                                                                                            '??0QThread@@QEAA@PEAVQObject@@@Z',
                                                                                            '??1QThread@@UEAA@XZ',
                                                                                            '?invokeMethod@QMetaObject@@SA_NPEAVQObject@@PEBDW4ConnectionType@Qt@@VQGenericReturnArgument@@VQGenericArgument@@444444444@Z',
                                                                                            '?toUtf8@QString@@QEBA?AVQByteArray@@XZ',
                                                                                            '?detach@QByteArray@@QEAAXXZ',
                                                                                            '??1QByteArray@@QEAA@XZ',
                                                                                            '?disconnect@QObject@@SA_NPEBV1@PEBD01@Z',
                                                                                            '?isRunning@QThread@@QEBA_NXZ',
                                                                                            '?terminate@QThread@@QEAAXXZ',
                                                                                            '?allocate@QVectorData@@SAPEAU1@HH@Z',
                                                                                            '?qBadAlloc@@YAXXZ',
                                                                                            '?free@QVectorData@@SAXPEAU1@H@Z',
                                                                                            '?shared_null@QVectorData@@2U1@A',
                                                                                            '?changeGuard@QMetaObject@@SAXPEAPEAVQObject@@PEAV2@@Z',
                                                                                            '?removeGuard@QMetaObject@@SAXPEAPEAVQObject@@@Z',
                                                                                            '?tr@QMetaObject@@QEBA?AVQString@@PEBD0@Z',
                                                                                            '?fromAscii@QString@@SA?AV1@PEBDH@Z',
                                                                                            '??0QString@@QEAA@AEBV0@@Z',
                                                                                            '?append@QString@@QEAAAEAV1@AEBV1@@Z',
                                                                                            '?grow@QVectorData@@SAHHHH_N@Z',
                                                                                            '?eventFilter@QDialog@@MEAA_NPEAVQObject@@PEAVQEvent@@@Z',
                                                                                            '?activateWindow@QWidget@@QEAAXXZ',
                                                                                            '?show@QWidget@@QEAAXXZ',
                                                                                            '??1QMessageBox@@UEAA@XZ',
                                                                                            '?exec@QDialog@@QEAAHXZ',
                                                                                            '?setStandardButtons@QMessageBox@@QEAAXV?$QFlags@W4StandardButton@QMessageBox@@@@@Z',
                                                                                            '?tabletEvent@QWidget@@MEAAXPEAVQTabletEvent@@@Z',
                                                                                            '?actionEvent@QWidget@@MEAAXPEAVQActionEvent@@@Z',
                                                                                            '?showEvent@QWidget@@MEAAXPEAVQShowEvent@@@Z',
                                                                                            '?hideEvent@QWidget@@MEAAXPEAVQHideEvent@@@Z',
                                                                                            '?winEvent@QWidget@@MEAA_NPEAUtagMSG@@PEAJ@Z',
                                                                                            '?styleChange@QWidget@@MEAAXAEAVQStyle@@@Z',
                                                                                            '?enabledChange@QWidget@@MEAAX_N@Z',
                                                                                            '?paletteChange@QWidget@@MEAAXAEBVQPalette@@@Z',
                                                                                            '?fontChange@QWidget@@MEAAXAEBVQFont@@@Z',
                                                                                            '?windowActivationChange@QWidget@@MEAAX_N@Z',
                                                                                            '?languageChange@QWidget@@MEAAXXZ',
                                                                                            '?devType@QWidget@@UEBAHXZ',
                                                                                            '?paintEngine@QWidget@@UEBAPEAVQPaintEngine@@XZ',
                                                                                            '?getDC@QWidget@@UEBAPEAUHDC__@@XZ',
                                                                                            '?releaseDC@QWidget@@UEBAXPEAUHDC__@@@Z',
                                                                                            '?setIcon@QMessageBox@@QEAAXW4Icon@1@@Z',
                                                                                            '?setText@QMessageBox@@QEAAXAEBVQString@@@Z',
                                                                                            '?setWindowTitle@QMessageBox@@QEAAXAEBVQString@@@Z',
                                                                                            '??0QMessageBox@@QEAA@PEAVQWidget@@@Z',
                                                                                            '?information@QMessageBox@@SA?AW4StandardButton@1@PEAVQWidget@@AEBVQString@@1V?$QFlags@W4StandardButton@QMessageBox@@@@W421@@Z',
                                                                                            '?setText@QLabel@@QEAAXAEBVQString@@@Z',
                                                                                            '?setWindowTitle@QWidget@@QEAAXAEBVQString@@@Z',
                                                                                            '?setMaximumHeight@QWidget@@QEAAXH@Z',
                                                                                            '?setMinimumHeight@QWidget@@QEAAXH@Z',
                                                                                            '?hide@QWidget@@QEAAXXZ',
                                                                                            '?setValue@QProgressBar@@QEAAXH@Z',
                                                                                            '?setRange@QProgressBar@@QEAAXHH@Z',
                                                                                            '?setMaximum@QProgressBar@@QEAAXH@Z',
                                                                                            '?maximum@QProgressBar@@QEBAHXZ',
                                                                                            '?value@QProgressBar@@QEBAHXZ',
                                                                                            '?openUrl@QDesktopServices@@SA_NAEBVQUrl@@@Z',
                                                                                            '??1QPalette@@QEAA@XZ',
                                                                                            '?setPalette@QWidget@@QEAAXAEBVQPalette@@@Z',
                                                                                            '??1QBrush@@QEAA@XZ',
                                                                                            '?setBrush@QPalette@@QEAAXW4ColorGroup@1@W4ColorRole@1@AEBVQBrush@@@Z',
                                                                                            '??0QBrush@@QEAA@AEBVQColor@@W4BrushStyle@Qt@@@Z',
                                                                                            '?color@QPalette@@QEBAAEBVQColor@@W4ColorRole@1@@Z',
                                                                                            '??0QPalette@@QEAA@AEBV0@@Z',
                                                                                            '?palette@QWidget@@QEBAAEBVQPalette@@XZ',
                                                                                            '??1QIcon@@QEAA@XZ',
                                                                                            '??0QProgressBar@@QEAA@PEAVQWidget@@@Z',
                                                                                            '??0QLabel@@QEAA@PEAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?addWidget@QBoxLayout@@QEAAXPEAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z',
                                                                                            '?setSizeConstraint@QLayout@@QEAAXW4SizeConstraint@1@@Z',
                                                                                            '?setSpacing@QBoxLayout@@QEAAXH@Z',
                                                                                            '??0QVBoxLayout@@QEAA@PEAVQWidget@@@Z',
                                                                                            '?setWindowIcon@QWidget@@QEAAXAEBVQIcon@@@Z',
                                                                                            '?addFile@QIcon@@QEAAXAEBVQString@@AEBVQSize@@W4Mode@1@W4State@1@@Z',
                                                                                            '??0QIcon@@QEAA@XZ',
                                                                                            '?setMaximumSize@QWidget@@QEAAXHH@Z',
                                                                                            '?setMinimumSize@QWidget@@QEAAXHH@Z',
                                                                                            '?setSizePolicy@QWidget@@QEAAXVQSizePolicy@@@Z',
                                                                                            '?sizePolicy@QWidget@@QEBA?AVQSizePolicy@@XZ',
                                                                                            '?resize@QWidget@@QEAAXAEBVQSize@@@Z',
                                                                                            '?metaObject@QVBoxLayout@@UEBAPEBUQMetaObject@@XZ',
                                                                                            '?qt_metacast@QVBoxLayout@@UEAAPEAXPEBD@Z',
                                                                                            '?qt_metacall@QVBoxLayout@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z',
                                                                                            '?childEvent@QLayout@@MEAAXPEAVQChildEvent@@@Z',
                                                                                            '?addItem@QBoxLayout@@UEAAXPEAVQLayoutItem@@@Z',
                                                                                            '?itemAt@QBoxLayout@@UEBAPEAVQLayoutItem@@H@Z',
                                                                                            '?takeAt@QBoxLayout@@UEAAPEAVQLayoutItem@@H@Z',
                                                                                            '?indexOf@QLayout@@UEBAHPEAVQWidget@@@Z',
                                                                                            '?count@QBoxLayout@@UEBAHXZ',
                                                                                            '?sizeHint@QBoxLayout@@UEBA?AVQSize@@XZ',
                                                                                            '?minimumSize@QBoxLayout@@UEBA?AVQSize@@XZ',
                                                                                            '?maximumSize@QBoxLayout@@UEBA?AVQSize@@XZ',
                                                                                            '?expandingDirections@QBoxLayout@@UEBA?AV?$QFlags@W4Orientation@Qt@@@@XZ',
                                                                                            '?setGeometry@QBoxLayout@@UEAAXAEBVQRect@@@Z',
                                                                                            '?geometry@QLayout@@UEBA?AVQRect@@XZ',
                                                                                            '?isEmpty@QLayout@@UEBA_NXZ',
                                                                                            '?hasHeightForWidth@QBoxLayout@@UEBA_NXZ',
                                                                                            '?heightForWidth@QBoxLayout@@UEBAHH@Z',
                                                                                            '?minimumHeightForWidth@QBoxLayout@@UEBAHH@Z',
                                                                                            '?invalidate@QBoxLayout@@UEAAXXZ',
                                                                                            '?widget@QLayoutItem@@UEAAPEAVQWidget@@XZ',
                                                                                            '?layout@QLayout@@UEAAPEAV1@XZ',
                                                                                            '?spacerItem@QLayoutItem@@UEAAPEAVQSpacerItem@@XZ',
                                                                                            '?setVisible@QWidget@@UEAAX_N@Z',
                                                                                            '?minimumSizeHint@QWidget@@UEBA?AVQSize@@XZ',
                                                                                            '?heightForWidth@QWidget@@UEBAHH@Z',
                                                                                            '?enterEvent@QWidget@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?leaveEvent@QWidget@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?moveEvent@QWidget@@MEAAXPEAVQMoveEvent@@@Z',
                                                                                            '?metric@QWidget@@MEBAHW4PaintDeviceMetric@QPaintDevice@@@Z',
                                                                                            '?metaObject@QLabel@@UEBAPEBUQMetaObject@@XZ',
                                                                                            '?qt_metacast@QLabel@@UEAAPEAXPEBD@Z',
                                                                                            '?qt_metacall@QLabel@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z',
                                                                                            '?event@QLabel@@MEAA_NPEAVQEvent@@@Z',
                                                                                            '?sizeHint@QLabel@@UEBA?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QLabel@@UEBA?AVQSize@@XZ',
                                                                                            '?heightForWidth@QLabel@@UEBAHH@Z',
                                                                                            '?mousePressEvent@QLabel@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QLabel@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseDoubleClickEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QLabel@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?wheelEvent@QWidget@@MEAAXPEAVQWheelEvent@@@Z',
                                                                                            '?keyPressEvent@QLabel@@MEAAXPEAVQKeyEvent@@@Z',
                                                                                            '?keyReleaseEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z',
                                                                                            '?focusInEvent@QLabel@@MEAAXPEAVQFocusEvent@@@Z',
                                                                                            '?closeEvent@QWidget@@MEAAXPEAVQCloseEvent@@@Z',
                                                                                            '?focusOutEvent@QLabel@@MEAAXPEAVQFocusEvent@@@Z',
                                                                                            '?paintEvent@QLabel@@MEAAXPEAVQPaintEvent@@@Z',
                                                                                            '?resizeEvent@QWidget@@MEAAXPEAVQResizeEvent@@@Z',
                                                                                            '?contextMenuEvent@QLabel@@MEAAXPEAVQContextMenuEvent@@@Z',
                                                                                            '?dragEnterEvent@QWidget@@MEAAXPEAVQDragEnterEvent@@@Z',
                                                                                            '?dragMoveEvent@QWidget@@MEAAXPEAVQDragMoveEvent@@@Z',
                                                                                            '?dragLeaveEvent@QWidget@@MEAAXPEAVQDragLeaveEvent@@@Z',
                                                                                            '?dropEvent@QWidget@@MEAAXPEAVQDropEvent@@@Z',
                                                                                            '?changeEvent@QLabel@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?inputMethodEvent@QWidget@@MEAAXPEAVQInputMethodEvent@@@Z',
                                                                                            '?inputMethodQuery@QWidget@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?focusNextPrevChild@QLabel@@MEAA_N_N@Z',
                                                                                            '?metaObject@QProgressBar@@UEBAPEBUQMetaObject@@XZ',
                                                                                            '?qt_metacast@QProgressBar@@UEAAPEAXPEBD@Z',
                                                                                            '?qt_metacall@QProgressBar@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z',
                                                                                            '?event@QProgressBar@@MEAA_NPEAVQEvent@@@Z',
                                                                                            '?sizeHint@QProgressBar@@UEBA?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QProgressBar@@UEBA?AVQSize@@XZ',
                                                                                            '?mousePressEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?exec@QApplication@@SAHXZ',
                                                                                            '?staticMetaObject@QDialog@@2UQMetaObject@@B',
                                                                                            '?qt_metacall@QDialog@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z',
                                                                                            '?qt_metacast@QDialog@@UEAAPEAXPEBD@Z',
                                                                                            '?reject@QDialog@@UEAAXXZ',
                                                                                            '?accept@QDialog@@UEAAXXZ',
                                                                                            '?done@QDialog@@UEAAXH@Z',
                                                                                            '?showEvent@QDialog@@MEAAXPEAVQShowEvent@@@Z',
                                                                                            '?contextMenuEvent@QDialog@@MEAAXPEAVQContextMenuEvent@@@Z',
                                                                                            '?closeEvent@QDialog@@MEAAXPEAVQCloseEvent@@@Z',
                                                                                            '?resizeEvent@QDialog@@MEAAXPEAVQResizeEvent@@@Z',
                                                                                            '?keyPressEvent@QDialog@@MEAAXPEAVQKeyEvent@@@Z',
                                                                                            '?minimumSizeHint@QDialog@@UEBA?AVQSize@@XZ',
                                                                                            '?sizeHint@QDialog@@UEBA?AVQSize@@XZ',
                                                                                            '?setVisible@QDialog@@UEAAX_N@Z',
                                                                                            '?mouseMoveEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?event@QWidget@@MEAA_NPEAVQEvent@@@Z',
                                                                                            '??0QDialog@@QEAA@PEAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?setMaximumWidth@QWidget@@QEAAXH@Z',
                                                                                            '??1QDialog@@UEAA@XZ',
                                                                                            '??1QWidget@@UEAA@XZ',
                                                                                            '??1QLabel@@UEAA@XZ',
                                                                                            '??1QVBoxLayout@@UEAA@XZ',
                                                                                            '?text@QProgressBar@@UEBA?AVQString@@XZ',
                                                                                            '?focusNextPrevChild@QWidget@@MEAA_N_N@Z',
                                                                                            '?changeEvent@QWidget@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?contextMenuEvent@QWidget@@MEAAXPEAVQContextMenuEvent@@@Z',
                                                                                            '?paintEvent@QProgressBar@@MEAAXPEAVQPaintEvent@@@Z',
                                                                                            '?focusOutEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z',
                                                                                            '?focusInEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z',
                                                                                            '?keyPressEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z',
                                                                                            '?dragEnterEvent@QWebView@@MEAAXPEAVQDragEnterEvent@@@Z',
                                                                                            '?load@QWebFrame@@QEAAXAEBVQUrl@@@Z',
                                                                                            '?currentFrame@QWebPage@@QEBAPEAVQWebFrame@@XZ',
                                                                                            '?page@QWebView@@QEBAPEAVQWebPage@@XZ',
                                                                                            '?setAttribute@QWebSettings@@QEAAXW4WebAttribute@1@_N@Z',
                                                                                            '?settings@QWebPage@@QEBAPEAVQWebSettings@@XZ',
                                                                                            '?setScrollBarPolicy@QWebFrame@@QEAAXW4Orientation@Qt@@W4ScrollBarPolicy@3@@Z',
                                                                                            '?setLinkDelegationPolicy@QWebPage@@QEAAXW4LinkDelegationPolicy@1@@Z',
                                                                                            '?setUrl@QWebView@@QEAAXAEBVQUrl@@@Z',
                                                                                            '??0QWebView@@QEAA@PEAVQWidget@@@Z',
                                                                                            '?metaObject@QWebView@@UEBAPEBUQMetaObject@@XZ',
                                                                                            '?qt_metacast@QWebView@@UEAAPEAXPEBD@Z',
                                                                                            '?qt_metacall@QWebView@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z',
                                                                                            '?event@QWebView@@UEAA_NPEAVQEvent@@@Z',
                                                                                            '?sizeHint@QWebView@@UEBA?AVQSize@@XZ',
                                                                                            '?mousePressEvent@QWebView@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QWebView@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseDoubleClickEvent@QWebView@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QWebView@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?wheelEvent@QWebView@@MEAAXPEAVQWheelEvent@@@Z',
                                                                                            '?keyPressEvent@QWebView@@MEAAXPEAVQKeyEvent@@@Z',
                                                                                            '?focusInEvent@QWebView@@MEAAXPEAVQFocusEvent@@@Z',
                                                                                            '?focusOutEvent@QWebView@@MEAAXPEAVQFocusEvent@@@Z',
                                                                                            '?paintEvent@QWebView@@MEAAXPEAVQPaintEvent@@@Z',
                                                                                            '?resizeEvent@QWebView@@MEAAXPEAVQResizeEvent@@@Z',
                                                                                            '?contextMenuEvent@QWebView@@MEAAXPEAVQContextMenuEvent@@@Z',
                                                                                            '?keyReleaseEvent@QWebView@@MEAAXPEAVQKeyEvent@@@Z',
                                                                                            '?dragMoveEvent@QWebView@@MEAAXPEAVQDragMoveEvent@@@Z',
                                                                                            '?dragLeaveEvent@QWebView@@MEAAXPEAVQDragLeaveEvent@@@Z',
                                                                                            '?dropEvent@QWebView@@MEAAXPEAVQDropEvent@@@Z',
                                                                                            '?changeEvent@QWebView@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?inputMethodEvent@QWebView@@MEAAXPEAVQInputMethodEvent@@@Z',
                                                                                            '?inputMethodQuery@QWebView@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?focusNextPrevChild@QWebView@@MEAA_N_N@Z',
                                                                                            '?createWindow@QWebView@@MEAAPEAV1@W4WebWindowType@QWebPage@@@Z',
                                                                                            '??1QWebView@@UEAA@XZ',
                                                                                            'xmlCheckVersion',
                                                                                            'xmlReadMemory',
                                                                                            'xmlCleanupParser',
                                                                                            'xmlDocGetRootElement',
                                                                                            'xmlFreeDoc',
                                                                                            '?localDataPath@WireApplication@@SA?AVQString@@XZ',
                                                                                            '?initWindowStyle@WireApplication@@SAXXZ',
                                                                                            '??0WireApplication@@QEAA@AEAHPEAPEADPEAUHWND__@@@Z',
                                                                                            '?setModuleState@MatchHandler@@QEAAXH@Z',
                                                                                            '?isFirstInstance@SingleInstanceApplication@@QEBA_NXZ',
                                                                                            '?popupFirstInstance@SingleInstanceApplication@@QEAAXXZ',
                                                                                            '??1WireApplication@@UEAA@XZ',
                                                                                            '?init@WireApplication@@QEAA_NXZ',
                                                                                            '?winWidget@WireApplication@@QEAAPEAVQWinWidget@@XZ',
                                                                                            '??0MainDialog@@QEAA@PEAVQWidget@@PEAUHWND__@@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?setMainDialog@WireApplication@@QEAAXPEAVMainDialog@@@Z',
                                                                                            '?initVisual@MainDialog@@QEAAXH@Z',
                                                                                            '?checkAutoUpdate@WireApplication@@QEAAXXZ',
                                                                                            '?installUpdate@WireApplication@@QEAAXXZ',
                                                                                            '??1MainDialog@@UEAA@XZ',
                                                                                            '?wndProc@WireApplication@@QEAA_JPEAUHWND__@@I_K_J@Z',
                                                                                            '?singleton@SponsoringNavInterface@@SAAEAV1@XZ',
                                                                                            '?url@SponsoringNavInterface@@QEBA?AVQUrl@@H@Z',
                                                                                            '?singleton@GameHandler@@SAAEAV1@XZ',
                                                                                            '?setLaunchResult@MatchHandler@@QEAAX_NAEBVQString@@1@Z',
                                                                                            '?singleton@SessionHandler@@SAAEAV1@XZ',
                                                                                            '?session@SessionHandler@@QEAAAEBV?$shared_ptr@Vsession@wire@@@boost@@XZ',
                                                                                            '?singleton@StatisticsHandler@@SAAEAV1@XZ',
                                                                                            '?startAnticheat@StatisticsHandler@@QEAAXXZ',
                                                                                            '?singleton@MatchHandler@@SAAEAV1@XZ',
                                                                                            'htons',
                                                                                            'shutdown',
                                                                                            'ioctlsocket',
                                                                                            'gethostname',
                                                                                            '__WSAFDIsSet',
                                                                                            'listen',
                                                                                            'accept',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'WSASetLastError',
                                                                                            'getaddrinfo',
                                                                                            'freeaddrinfo',
                                                                                            'setsockopt',
                                                                                            'getsockopt',
                                                                                            'bind',
                                                                                            'ntohs',
                                                                                            'getsockname',
                                                                                            'WSAGetLastError',
                                                                                            'connect',
                                                                                            'WSAStartup',
                                                                                            'inet_addr',
                                                                                            'select',
                                                                                            'WSACleanup',
                                                                                            'recv',
                                                                                            'socket',
                                                                                            'closesocket',
                                                                                            'gethostbyname',
                                                                                            'send',
                                                                                            'GetModuleFileNameExA',
                                                                                            'GetModuleFileNameExW',
                                                                                            'GetMappedFileNameA',
                                                                                            'MiniDumpWriteDump',
                                                                                            'SymGetModuleInfo64',
                                                                                            'SymGetSymFromAddr64',
                                                                                            'StackWalk64',
                                                                                            'SymFunctionTableAccess64',
                                                                                            'SymGetModuleBase64',
                                                                                            'SymInitialize',
                                                                                            'MoveFileA',
                                                                                            'FindFirstFileW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileW',
                                                                                            'GetLastError',
                                                                                            'CreateHardLinkA',
                                                                                            'CreateDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetDiskFreeSpaceExA',
                                                                                            'CreateFileA',
                                                                                            'GetFileAttributesExA',
                                                                                            'CreateHardLinkW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateWaitableTimerW',
                                                                                            'SetWaitableTimer',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SystemTimeToFileTime',
                                                                                            'TlsSetValue',
                                                                                            'ResetEvent',
                                                                                            'CreateMutexA',
                                                                                            'GetSystemInfo',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'ReleaseMutex',
                                                                                            'FormatMessageA',
                                                                                            'Sleep',
                                                                                            'CreateSemaphoreA',
                                                                                            'DuplicateHandle',
                                                                                            'ReleaseSemaphore',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrlenA',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'CopyFileA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'GetModuleFileNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalFree',
                                                                                            'FatalExit',
                                                                                            'GetCurrentThread',
                                                                                            'RtlCaptureContext',
                                                                                            'SuspendThread',
                                                                                            'GetThreadContext',
                                                                                            'ResumeThread',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcessAffinityMask',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'CloseHandle',
                                                                                            'CreateMutexW',
                                                                                            'TerminateThread',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FormatMessageW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GlobalMemoryStatus',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'ReadProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'OpenProcess',
                                                                                            'DeviceIoControl',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetLogicalDriveStringsA',
                                                                                            'VirtualQueryEx',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'WriteFile',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'GetFileTime',
                                                                                            'SetFileTime',
                                                                                            'FindNextFileW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeExW',
                                                                                            'GetStringTypeExA',
                                                                                            'FreeLibrary',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'LoadLibraryA',
                                                                                            'SleepEx',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'wsprintfW',
                                                                                            'LoadStringA',
                                                                                            'CreateWindowExW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'LoadStringW',
                                                                                            'DefWindowProcW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'GetObjectW',
                                                                                            'BitBlt',
                                                                                            'GetBitmapBits',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'CreateDCW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegisterEventSourceW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathA',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z',
                                                                                            '?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_K_J@Z',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ',
                                                                                            '?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ',
                                                                                            '?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z',
                                                                                            '?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z',
                                                                                            '?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@H@2@_JHH@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBD@Z',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBD@Z',
                                                                                            '??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@0@AEAV10@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@0@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBDAEBV10@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@PEBD@Z',
                                                                                            '??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z',
                                                                                            '?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@00@Z',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA?AV12@_K0@Z',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KG_K@Z',
                                                                                            '??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAG_K@Z',
                                                                                            '?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@_K0@Z',
                                                                                            '??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@H@Z',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_KD@Z',
                                                                                            '??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ',
                                                                                            '?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?_Decref@facet@locale@std@@QEAAPEAV123@XZ',
                                                                                            '?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z',
                                                                                            '?endl@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z',
                                                                                            '?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPEBDAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K1@Z',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K1@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K1@Z',
                                                                                            '?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K1@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD0@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@D@Z',
                                                                                            '??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_KD@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@AEBV12@@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD0@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAH_K0PEBD0@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_K0@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD_K@Z',
                                                                                            '??0locale@std@@QEAA@AEBV01@@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KAEBV12@_K@Z',
                                                                                            '??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ',
                                                                                            '?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXD@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z',
                                                                                            '??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@H@Z',
                                                                                            '?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@AEBV12@@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KD_K@Z',
                                                                                            '?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV12@_K0@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@_KD@Z',
                                                                                            '??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@PEBG@Z',
                                                                                            '?push_back@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAXG@Z',
                                                                                            '??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@G@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG0@Z',
                                                                                            '?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KG_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@H@2@V32@H@Z',
                                                                                            '??0?$codecvt@GDH@std@@QEAA@_K@Z',
                                                                                            '?id@?$numpunct@D@std@@2V0locale@2@A',
                                                                                            '?id@?$ctype@D@std@@2V0locale@2@A',
                                                                                            '??1_Lockit@std@@QEAA@XZ',
                                                                                            '??1?$codecvt@GDH@std@@MEAA@XZ',
                                                                                            '?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@PEBG@Z',
                                                                                            '??0_Lockit@std@@QEAA@H@Z',
                                                                                            '?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2_KB',
                                                                                            '?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0AEBV12@@Z',
                                                                                            '?_Getcat@?$numpunct@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z',
                                                                                            '?grouping@?$numpunct@D@std@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?thousands_sep@?$numpunct@D@std@@QEBADXZ',
                                                                                            '?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IEAAX_N_K@Z',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAAEBD_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD_K@Z',
                                                                                            '?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z',
                                                                                            '?tolower@?$ctype@D@std@@QEBADD@Z',
                                                                                            '?_Getfacet@locale@std@@QEBAPEBVfacet@12@_K@Z',
                                                                                            '??1locale@std@@QEAA@XZ',
                                                                                            '??0locale@std@@QEAA@XZ',
                                                                                            '?_Incref@facet@locale@std@@QEAAXXZ',
                                                                                            '??Bid@locale@std@@QEAA_KXZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ',
                                                                                            '?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z',
                                                                                            '??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ',
                                                                                            '?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2_KB',
                                                                                            '?construct@?$allocator@D@std@@QEAAXPEADAEBD@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?destroy@?$allocator@D@std@@QEAAXPEAD@Z',
                                                                                            '??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ',
                                                                                            '?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ',
                                                                                            '?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@_KG@Z',
                                                                                            '?allocate@?$allocator@D@std@@QEAAPEAD_K@Z',
                                                                                            '?deallocate@?$allocator@D@std@@QEAAXPEAD_K@Z',
                                                                                            '??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z',
                                                                                            '_getch',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_CxxThrowException',
                                                                                            'memmove',
                                                                                            '__C_specific_handler',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??1bad_cast@std@@UEAA@XZ',
                                                                                            '??0bad_cast@std@@QEAA@PEBD@Z',
                                                                                            '??0bad_cast@std@@QEAA@AEBV01@@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_gmtime64',
                                                                                            '??8type_info@@QEBA_NAEBV0@@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '_purecall',
                                                                                            'sprintf',
                                                                                            'vsprintf_s',
                                                                                            '_localtime64',
                                                                                            '_vscprintf',
                                                                                            '_time64',
                                                                                            'memmove_s',
                                                                                            'sscanf',
                                                                                            'atoi',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            'isspace',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'clock',
                                                                                            'rand',
                                                                                            'strerror',
                                                                                            'memcmp',
                                                                                            '_beginthreadex',
                                                                                            'tolower',
                                                                                            'toupper',
                                                                                            'towlower',
                                                                                            'towupper',
                                                                                            'calloc',
                                                                                            'realloc',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_stat64',
                                                                                            'strrchr',
                                                                                            'fclose',
                                                                                            'fread',
                                                                                            'fopen',
                                                                                            '__iob_func',
                                                                                            'strchr',
                                                                                            'fwrite',
                                                                                            'strtoul',
                                                                                            'strstr',
                                                                                            'isxdigit',
                                                                                            'strncpy',
                                                                                            'fseek',
                                                                                            'isdigit',
                                                                                            '_strtoi64',
                                                                                            'memchr',
                                                                                            'strncmp',
                                                                                            'fgets',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            'fputs',
                                                                                            'strtol',
                                                                                            'fputc',
                                                                                            'fflush',
                                                                                            '_errno',
                                                                                            'getenv',
                                                                                            'isalnum',
                                                                                            'isalpha',
                                                                                            '__sys_nerr',
                                                                                            '_stat64i32',
                                                                                            'qsort',
                                                                                            'wcsstr',
                                                                                            '_vsnwprintf',
                                                                                            'vfprintf',
                                                                                            '_exit',
                                                                                            'raise',
                                                                                            'strcmp',
                                                                                            '_strnicmp',
                                                                                            'ferror',
                                                                                            '_setmode',
                                                                                            '_fileno',
                                                                                            'ftell',
                                                                                            'feof',
                                                                                            '_stricmp',
                                                                                            'isupper',
                                                                                            'fprintf',
                                                                                            'signal',
                                                                                            '_strdup',
                                                                                            'sprintf_s',
                                                                                            'strlen',
                                                                                            'memcpy_s',
                                                                                            'wcslen',
                                                                                            'wcscpy_s',
                                                                                            'strcpy_s',
                                                                                            '_wcsicmp',
                                                                                            '_wsplitpath_s',
                                                                                            'strncpy_s',
                                                                                            'srand',
                                                                                            'wcscmp',
                                                                                            '_vsnprintf',
                                                                                            '_splitpath_s',
                                                                                            'abort',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            'MessageBoxW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 769,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 392728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 294912,
                                                                                       '.pdata\x00\x00': 121344,
                                                                                       '.rdata\x00\x00': 563712,
                                                                                       '.rsrc\x00\x00\x00': 393216,
                                                                                       '.text\x00\x00\x00': 1624576,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.vmp0\x00\x00\x00': 662016,
                                                                                       '.vmp1\x00\x00\x00': 90624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c1b3329113be9495c5d52ac198521196abd95e10b43a0c7090aa192d66b89bab'},
 'c1baa34573b5b257f50e4998bd4eae72c8359ea93971af6be31f7456236165b5': {'AddressOfEntryPoint': 1073865181,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'HeapCreate',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'strncpy',
                                                                                            'memmove',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'memset',
                                                                                            'RtlCaptureContext',
                                                                                            'GetACP',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetOEMCP',
                                                                                            'GetVersionExA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'HeapReAlloc',
                                                                                            'ReadFile',
                                                                                            'SetStdHandle',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'LoadLibraryA',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'CloseHandle',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LoadIconA',
                                                                                            'wsprintfA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1936,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c1baa34573b5b257f50e4998bd4eae72c8359ea93971af6be31f7456236165b5'},
 'c1f64acbaf96cb7d78b008fd5358f799d56960c8c393fd0c4d0902a80ae76bdd': {'AddressOfEntryPoint': 237688,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 83552,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualAlloc'},
                                                                      'ImportedFunctions': ['VirtualAlloc'],
                                                                      'LinkerVersion': 4,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.edata\x00\x00': 64000,
                                                                                       '.rdata\x00\x00': 31232,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 2560,
                                                                                       'DATA\x00\x00\x00\x00': 79872},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c1f64acbaf96cb7d78b008fd5358f799d56960c8c393fd0c4d0902a80ae76bdd'},
 'c233ce7dbdea82ef96aea61eabf8834d356435f6fb83db235bb46cfffb99b793': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 363944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 364032,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c233ce7dbdea82ef96aea61eabf8834d356435f6fb83db235bb46cfffb99b793'},
 'c2a029613bcdc032f9f653f765f10ece7930c8b9294386e3e1ce857494c09a8f': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1127968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1128448,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c2a029613bcdc032f9f653f765f10ece7930c8b9294386e3e1ce857494c09a8f'},
 'c399978c5882e926f83d44095687ff604d34ba588b217cfffe38a9e5b9765b91': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 242412,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 242688,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c399978c5882e926f83d44095687ff604d34ba588b217cfffe38a9e5b9765b91'},
 'c3c46fa3a2818518d22391b7ddd7910542da15e2ea5c608f3010e8dd7e6ffa75': {'AddressOfEntryPoint': 1074196996,
                                                                      'DebugRVA': 25440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCR90.dll': '__crt_debugger_hook',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'SetupUi.dll': '?Run@@YAKPEB_W0@Z',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'ole32.dll': 'CoTaskMemRealloc'},
                                                                      'ImportedFunctions': ['?Run@@YAKPEB_W0@Z',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLastError',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'LeaveCriticalSection',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'lstrlenW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MessageBoxW',
                                                                                            'CharNextW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'VarUI4FromStr',
                                                                                            'InitCommonControlsEx',
                                                                                            '_CxxThrowException',
                                                                                            'malloc',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'wcsncpy_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            'wcsstr',
                                                                                            '_recalloc',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '__crt_debugger_hook'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 89,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 420616,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 420864,
                                                                                       '.text\x00\x00\x00': 17920,
                                                                                       'S\x03\x07\x00oc\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c3c46fa3a2818518d22391b7ddd7910542da15e2ea5c608f3010e8dd7e6ffa75'},
 'c3c47f5b2983a580985735b0fa32d966c1925f248bb97ec6638209d2543b4cb3': {'AddressOfEntryPoint': 53248,
                                                                      'DebugRVA': 41520,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'NDIS.SYS': 'NdisAllocateBuffer',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['NdisIMGetDeviceContext',
                                                                                            'NdisFreePacket',
                                                                                            'NdisAllocatePacket',
                                                                                            'NdisFreePacketPool',
                                                                                            'NdisMIndicateStatusComplete',
                                                                                            'NdisMIndicateStatus',
                                                                                            'NdisReturnPackets',
                                                                                            'NdisResetEvent',
                                                                                            'NdisSetEvent',
                                                                                            'NdisUnchainBufferAtFront',
                                                                                            'NdisIMCopySendPerPacketInfo',
                                                                                            'NdisWaitEvent',
                                                                                            'NdisMSetAttributesEx',
                                                                                            'NdisDprFreePacket',
                                                                                            'NdisIMCopySendCompletePerPacketInfo',
                                                                                            'NdisIMGetCurrentPacketStack',
                                                                                            'NdisCancelSendPackets',
                                                                                            'NdisCloseAdapter',
                                                                                            'NdisRequest',
                                                                                            'NdisGetPoolFromPacket',
                                                                                            'NdisFreeMemory',
                                                                                            'NdisAllocateMemoryWithTag',
                                                                                            'NdisGetReceivedPacket',
                                                                                            'NdisIMInitializeDeviceInstanceEx',
                                                                                            'NdisMSleep',
                                                                                            'NdisIMDeInitializeDeviceInstance',
                                                                                            'NdisOpenProtocolConfiguration',
                                                                                            'NdisInitializeEvent',
                                                                                            'NdisIMNotifyPnPEvent',
                                                                                            'NdisCloseConfiguration',
                                                                                            'NdisReEnumerateProtocolBindings',
                                                                                            'NdisOpenAdapter',
                                                                                            'NdisIMCancelInitializeDeviceInstance',
                                                                                            'NdisDprAllocatePacket',
                                                                                            'NdisReadConfiguration',
                                                                                            'NdisAllocatePacketPoolEx',
                                                                                            'NdisDeregisterProtocol',
                                                                                            'NdisMRegisterUnloadHandler',
                                                                                            'NdisMRegisterDevice',
                                                                                            'NdisIMDeregisterLayeredMiniport',
                                                                                            'NdisInitializeWrapper',
                                                                                            'NdisRegisterProtocol',
                                                                                            'NdisMDeregisterDevice',
                                                                                            'NdisIMRegisterLayeredMiniport',
                                                                                            'NdisTerminateWrapper',
                                                                                            'NdisIMAssociateMiniport',
                                                                                            'NdisAllocateBuffer',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwClose',
                                                                                            'MmMapLockedPages',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoFreeMdl',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCompleteRequest',
                                                                                            'KeClearEvent',
                                                                                            'KeResetEvent',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'IoIs32bitProcess',
                                                                                            'PsCreateSystemThread',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoGetCurrentProcess',
                                                                                            'ExEventObjectType',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeWaitForSingleObject',
                                                                                            'ObfDereferenceObject',
                                                                                            '__C_specific_handler'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 67,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1196,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 35840,
                                                                                       'INIT\x00\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c3c47f5b2983a580985735b0fa32d966c1925f248bb97ec6638209d2543b4cb3'},
 'c4034813118d49aca0f8be68e264443521289c627ddfd5751bd5728a974bf0d5': {'AddressOfEntryPoint': 121744,
                                                                      'DebugRVA': 95104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90112,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/c4034813118d49aca0f8be68e264443521289c627ddfd5751bd5728a974bf0d5'},
 'c42596870b532f86a28660158f5ea35a79c8edd09ee34677c7f95d36c04b08d3': {'AddressOfEntryPoint': 19128,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHLWAPI.dll': 'StrCmpW'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'OpenProcess',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'StrCmpW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 42496},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c42596870b532f86a28660158f5ea35a79c8edd09ee34677c7f95d36c04b08d3'},
 'c4ae92b70d858b90547ecb897469e75fb264645bd1369a68520512cdfabbfd76': {'AddressOfEntryPoint': 8764,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RtlPcToFileHeader',
                                                                                      'SHELL32.dll': 'ShellExecuteExW'},
                                                                      'ImportedFunctions': ['VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'VirtualFreeEx',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'WaitForSingleObject',
                                                                                            'FreeLibrary',
                                                                                            'RaiseException',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'ShellExecuteExW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 712,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 13312,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 35328},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c4ae92b70d858b90547ecb897469e75fb264645bd1369a68520512cdfabbfd76'},
 'c4f1d59feb1a131b6fd99fb352ebd8f039a33524703bc5ecb68b1521f5b32097': {'AddressOfEntryPoint': 1074900037,
                                                                      'DebugRVA': 532240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 528384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetFileTitleW',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'FreeEnvironmentStringsA',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'PROPSYS.dll': 'PropVariantToString',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceInstanceIdW',
                                                                                      'SHELL32.dll': 'SHGetKnownFolderPath',
                                                                                      'SHLWAPI.dll': 'PathIsUNCW',
                                                                                      'USER32.dll': 'WinHelpW',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'WTSAPI32.dll': 'WTSUnRegisterSessionNotification',
                                                                                      'gdiplus.dll': 'GdipCreateBitmapFromScan0',
                                                                                      'ole32.dll': 'CoTaskMemAlloc',
                                                                                      'oledlg.dll': 'OleUIBusyW'},
                                                                      'ImportedFunctions': ['WTSRegisterSessionNotification',
                                                                                            'WTSUnRegisterSessionNotification',
                                                                                            'PropVariantToUInt32',
                                                                                            'PropVariantCompareEx',
                                                                                            'PropVariantToString',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'UnlockFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSize',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'LockFile',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GlobalFlags',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetThreadLocale',
                                                                                            'TlsFree',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'lstrlenA',
                                                                                            'GetCurrentThread',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetVersion',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'lstrcmpA',
                                                                                            'GetLocaleInfoW',
                                                                                            'CompareStringA',
                                                                                            'SuspendThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'FreeResource',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersionExA',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'FormatMessageW',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'Sleep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateMutexW',
                                                                                            'GetExitCodeThread',
                                                                                            'ResumeThread',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemInfo',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'lstrlenW',
                                                                                            'GetSystemDirectoryA',
                                                                                            'DeviceIoControl',
                                                                                            'GetCurrentThreadId',
                                                                                            'WideCharToMultiByte',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LockResource',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'IsRectEmpty',
                                                                                            'InvalidateRgn',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MessageBeep',
                                                                                            'CharUpperW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'PostThreadMessageW',
                                                                                            'ModifyMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'IsWindowEnabled',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendDlgItemMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongPtrW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetFocus',
                                                                                            'IsWindow',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetLastActivePopup',
                                                                                            'SetActiveWindow',
                                                                                            'DispatchMessageW',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageW',
                                                                                            'MapWindowPoints',
                                                                                            'GetKeyState',
                                                                                            'IsWindowVisible',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'PtInRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'OffsetRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'IsIconic',
                                                                                            'GetWindowPlacement',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'TabbedTextOutW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'IntersectRect',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'LoadIconW',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'ChangeWindowMessageFilter',
                                                                                            'CallNextHookEx',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'FindWindowExW',
                                                                                            'SetWindowPos',
                                                                                            'EnableWindow',
                                                                                            'DrawFocusRect',
                                                                                            'InflateRect',
                                                                                            'SetRect',
                                                                                            'CharNextW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CopyRect',
                                                                                            'RedrawWindow',
                                                                                            'UnregisterClassW',
                                                                                            'DestroyMenu',
                                                                                            'GetWindowLongPtrW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'DrawTextW',
                                                                                            'SendMessageW',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindow',
                                                                                            'GetParent',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageW',
                                                                                            'EnumThreadWindows',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'InvalidateRect',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'SetCursor',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'PostQuitMessage',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'EndDialog',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapW',
                                                                                            'GetMenu',
                                                                                            'WinHelpW',
                                                                                            'PtVisible',
                                                                                            'RectVisible',
                                                                                            'TextOutW',
                                                                                            'Escape',
                                                                                            'SetViewportOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ExtSelectClipRgn',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'GetClipBox',
                                                                                            'SetMapMode',
                                                                                            'GetViewportExtEx',
                                                                                            'GetWindowExtEx',
                                                                                            'GetStockObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBSection',
                                                                                            'GetObjectW',
                                                                                            'SetDIBColorTable',
                                                                                            'GetMapMode',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'DeleteDC',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'CreateBitmap',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetBkColor',
                                                                                            'ExtTextOutW',
                                                                                            'GetDeviceCaps',
                                                                                            'AlphaBlend',
                                                                                            'GetFileTitleW',
                                                                                            'OpenPrinterW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathFindFileNameW',
                                                                                            'PathStripToRootW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathIsUNCW',
                                                                                            'OleUIBusyW',
                                                                                            'PropVariantCopy',
                                                                                            'CoFreeUnusedLibrariesEx',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'StringFromGUID2',
                                                                                            'FreePropVariantArray',
                                                                                            'PropVariantClear',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoGetClassObject',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoTaskMemAlloc',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'OleCreateFontIndirect',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipFree',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCloneImage',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateBitmapFromScan0'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 417,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 409036,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c4f1d59feb1a131b6fd99fb352ebd8f039a33524703bc5ecb68b1521f5b32097'},
 'c535795438e9e6f1b5796c945b169ed1b442e481385e4a29ba745d1b6f06cbb6': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 269468,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 269824,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c535795438e9e6f1b5796c945b169ed1b442e481385e4a29ba745d1b6f06cbb6'},
 'c53af157120ddec348df431992662028c761b5b398989ee0f98694979d82980c': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2234100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2149888,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c53af157120ddec348df431992662028c761b5b398989ee0f98694979d82980c'},
 'c577b542762b3c4f3d981eb2e0839fa2d7e7cdd52916390d77a334d40737678d': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 434120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 348672,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c577b542762b3c4f3d981eb2e0839fa2d7e7cdd52916390d77a334d40737678d'},
 'c5c86b23cc0352cfee11e7062523d22557619a2b45f2f8ff9da0ba96c89934b1': {'AddressOfEntryPoint': 125112,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 598016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 14168,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.pdata\x00\x00': 25600,
                                                                                       '.rdata\x00\x00': 86528,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 590848},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/c5c86b23cc0352cfee11e7062523d22557619a2b45f2f8ff9da0ba96c89934b1'},
 'c5caefd19fe5b361a65d124a9318ae8d357bc300e66e6d34d030eaeef2b1ce3f': {'AddressOfEntryPoint': 3221242459,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['GetWindowsDirectoryA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'WinExec',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'wsprintfA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c5caefd19fe5b361a65d124a9318ae8d357bc300e66e6d34d030eaeef2b1ce3f'},
 'c611bb7eaa165bd6b85540f31dba08ecfa79076ee56187d28b126ace54bebe52': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/c611bb7eaa165bd6b85540f31dba08ecfa79076ee56187d28b126ace54bebe52'},
 'c641b11634f0f5319a153fea5ec9e4ae1c4c049c4898a55551f2df0ecae333b7': {'AddressOfEntryPoint': 134704,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 75264,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 272384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c641b11634f0f5319a153fea5ec9e4ae1c4c049c4898a55551f2df0ecae333b7'},
 'c65d2b1c916db909d4c2fb0f6893978e76b9c52d53e69f9e3a4a3c13ba1b87bd': {'AddressOfEntryPoint': 1399236,
                                                                      'DebugRVA': 1988576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1986560,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 4252492,
                                                                      'SectionNames': {'.data\x00\x00\x00': 61440,
                                                                                       '.pdata\x00\x00': 79872,
                                                                                       '.rdata\x00\x00': 694784,
                                                                                       '.reloc\x00\x00': 30720,
                                                                                       '.rsrc\x00\x00\x00': 4252672,
                                                                                       '.text\x00\x00\x00': 1981440,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c65d2b1c916db909d4c2fb0f6893978e76b9c52d53e69f9e3a4a3c13ba1b87bd'},
 'c68e9f3d0ff98f04b8c1e9ffd0c3a67781bf4b2984e8d17231822883e0f36df5': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1202344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1202688,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c68e9f3d0ff98f04b8c1e9ffd0c3a67781bf4b2984e8d17231822883e0f36df5'},
 'c6eb63781a87572ed1522bcb2cdd5a9e5e1916d2d840ded41cb6759ba3eebc01': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 482816,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c6eb63781a87572ed1522bcb2cdd5a9e5e1916d2d840ded41cb6759ba3eebc01'},
 'c7a4aa6db8e6c69e619ddb517a4fb963d45fd9df325fff1361ec6c0a5b13580e': {'AddressOfEntryPoint': 52864,
                                                                      'DebugRVA': 91472,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 100176,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'lstrcmpiA',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHChangeNotify',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetNumberFormatA',
                                                                                            'GetProcAddress',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetTempPathA',
                                                                                            'MoveFileExA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCommandLineA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileA',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'FindWindowExA',
                                                                                            'GetClassNameA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSysColor',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'LoadIconA',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'wvsprintfA',
                                                                                            'SetWindowLongA',
                                                                                            'CharUpperA',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'MessageBoxA',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringA',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongA',
                                                                                            'OemToCharBuffA',
                                                                                            'GetMessageA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetOpenFileNameA',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetSaveFileNameA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ShellExecuteExA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHChangeNotify',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 13324,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 86016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c7a4aa6db8e6c69e619ddb517a4fb963d45fd9df325fff1361ec6c0a5b13580e'},
 'c7f78db6d8d18bb2bb0663f2736599345be8978ac58fb4532025169ff340e752': {'AddressOfEntryPoint': 33196,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['GetModuleBaseNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'GetStringTypeW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetLastError',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'lstrcpyW',
                                                                                            'FlsGetValue',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'MessageBoxW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 17920,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 56832},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c7f78db6d8d18bb2bb0663f2736599345be8978ac58fb4532025169ff340e752'},
 'c80d55690277777de5bba0a0b52e4d9869f814829e5cf6bad0dd9ee3b9976993': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwWriteFile',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwResumeThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetValueKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'HeapAlloc',
                                                                                            'GetVersion',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/c80d55690277777de5bba0a0b52e4d9869f814829e5cf6bad0dd9ee3b9976993'},
 'c83263d852ec6c0c891bd2a281e45aaed3332dfd33d289eb78a55ec6f464337a': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 312180,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 312320,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c83263d852ec6c0c891bd2a281e45aaed3332dfd33d289eb78a55ec6f464337a'},
 'c8651e5b373efecda48ad2ec2f92307e6894d673f0e7d83ae60647a07a185a7d': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 472260,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 472576,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c8651e5b373efecda48ad2ec2f92307e6894d673f0e7d83ae60647a07a185a7d'},
 'c8da1a824306a596d3a0f4e84e1f492a3d7fbde77484a72d485f6deb9de32bbb': {'AddressOfEntryPoint': 4316,
                                                                      'DebugRVA': 20992,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'HAL.dll': 'HalGetProcessorIdByNtNumber',
                                                                                      'WDFLDR.SYS': 'WdfVersionBindClass',
                                                                                      'ntoskrnl.exe': 'RtlCopyUnicodeString'},
                                                                      'ImportedFunctions': ['ZwQuerySystemInformation',
                                                                                            'IoAllocateWorkItem',
                                                                                            'IoQueueWorkItem',
                                                                                            'KeSetSystemGroupAffinityThread',
                                                                                            'IoUninitializeWorkItem',
                                                                                            'ZwPowerInformation',
                                                                                            'KeInitializeDpc',
                                                                                            'KeSetTimerEx',
                                                                                            'EmClientQueryRuleState',
                                                                                            'IoSetDevicePropertyData',
                                                                                            'KeProcessorGroupAffinity',
                                                                                            'IoInitializeWorkItem',
                                                                                            'KeInitializeTimerEx',
                                                                                            'KeCancelTimer',
                                                                                            'IoSizeofWorkItem',
                                                                                            'KeRevertToUserGroupAffinityThread',
                                                                                            'EtwUnregister',
                                                                                            'KeGetProcessorNumberFromIndex',
                                                                                            'IoGetDevicePropertyData',
                                                                                            'EtwRegister',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwWrite',
                                                                                            'MmAllocateContiguousNodeMemory',
                                                                                            'RtlQueryRegistryValuesEx',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeCountSetBitsAffinityEx',
                                                                                            'KeAddProcessorAffinityEx',
                                                                                            'KeAddGroupAffinityEx',
                                                                                            'NtQuerySystemInformationEx',
                                                                                            'KeRemoveProcessorAffinityEx',
                                                                                            'KeInitializeEnumerationContext',
                                                                                            'KeEnumerateNextProcessor',
                                                                                            'KeOrAffinityEx',
                                                                                            'KeQueryActiveProcessorCountEx',
                                                                                            'KeCopyAffinityEx',
                                                                                            'KeCheckProcessorAffinityEx',
                                                                                            'KeCheckProcessorGroupAffinity',
                                                                                            'PoFxActivateComponent',
                                                                                            'KeAddProcessorGroupAffinity',
                                                                                            'ZwClose',
                                                                                            'KeBugCheckEx',
                                                                                            'PoFxStartDevicePowerManagement',
                                                                                            'PoFxRegisterDevice',
                                                                                            'PoFxProcessorNotification',
                                                                                            'KeInitializeEnumerationContextFromGroup',
                                                                                            'HvlGetLpIndexFromApicId',
                                                                                            'HvlQueryActiveProcessors',
                                                                                            'HvlQueryProcessorTopology',
                                                                                            'RtlCompareMemory',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'KeQueryActiveProcessorAffinity',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'KeInitializeAffinityEx',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'HalGetProcessorIdByNtNumber',
                                                                                            'WdfVersionUnbind',
                                                                                            'WdfVersionBind',
                                                                                            'WdfVersionUnbindClass',
                                                                                            'WdfVersionBindClass'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 60,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 13496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 13312,
                                                                                       'INIT\x00\x00\x00\x00': 5120,
                                                                                       'PAGE\x00\x00\x00\x00': 45056},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/c8da1a824306a596d3a0f4e84e1f492a3d7fbde77484a72d485f6deb9de32bbb'},
 'c936bcda2930341557ffff92fd68f0250903f2394d8ea7a0cdc265494d40a046': {'AddressOfEntryPoint': 1074099921,
                                                                      'DebugRVA': 6336,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'API-MS-Win-Core-Debug-L1-1-0.dll': 'OutputDebugStringA',
                                                                                      'API-MS-Win-Core-ErrorHandling-L1-1-0.dll': 'UnhandledExceptionFilter',
                                                                                      'API-MS-Win-Core-Heap-L1-1-0.dll': 'HeapSize',
                                                                                      'API-MS-Win-Core-Interlocked-L1-1-0.dll': 'InterlockedPopEntrySList',
                                                                                      'API-MS-Win-Core-Memory-L1-1-0.dll': 'VirtualAlloc',
                                                                                      'API-MS-Win-Core-ProcessThreads-L1-1-0.dll': 'TerminateProcess',
                                                                                      'API-MS-Win-Core-Profile-L1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'API-MS-Win-Core-Synch-L1-1-0.dll': 'EnterCriticalSection',
                                                                                      'API-MS-Win-Core-SysInfo-L1-1-0.dll': 'GetTickCount',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'GetCommandLineW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'RPCRT4.dll': 'UuidHash',
                                                                                      'SHLWAPI.dll': 'SHCreateStreamOnFileW',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'msvcrt.dll': 'strcspn',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'StringFromCLSID'},
                                                                      'ImportedFunctions': ['GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetStringTypeW',
                                                                                            'CancelIo',
                                                                                            'GetOverlappedResult',
                                                                                            'ReadFile',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'CreateFileMappingW',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'CompareFileTime',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'RegEnumValueW',
                                                                                            'SetThreadPriority',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'RegDeleteKeyExW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'RegQueryValueExW',
                                                                                            'RegGetValueW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'SetLastError',
                                                                                            'FlushInstructionCache',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LCMapStringW',
                                                                                            'LockResource',
                                                                                            'FormatMessageA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LoadLibraryExA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'ReleaseMutex',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'lstrcmpiW',
                                                                                            'CreateEventW',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetVersionExW',
                                                                                            'SizeofResource',
                                                                                            'Sleep',
                                                                                            'LoadLibraryW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentThread',
                                                                                            'GetModuleHandleW',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadResource',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceW',
                                                                                            'SetPriorityClass',
                                                                                            'CreateMutexW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetCommandLineW',
                                                                                            'OffsetRect',
                                                                                            'IsRectEmpty',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'DestroyWindow',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'LoadCursorW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterPowerSettingNotification',
                                                                                            'CharNextW',
                                                                                            'TranslateMessage',
                                                                                            'CharUpperW',
                                                                                            'GetSystemMetrics',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'PostMessageW',
                                                                                            'RegisterPowerSettingNotification',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SendMessageW',
                                                                                            'CallWindowProcW',
                                                                                            'DefWindowProcW',
                                                                                            'UnregisterClassA',
                                                                                            'GetMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            '_callnewh',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            '_fmode',
                                                                                            '_purecall',
                                                                                            '_resetstkoflw',
                                                                                            'malloc',
                                                                                            'calloc',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsicmp',
                                                                                            'memmove_s',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'memcmp',
                                                                                            'memcpy_s',
                                                                                            '__set_app_type',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            'setlocale',
                                                                                            '__uncaught_exception',
                                                                                            '__crtLCMapStringA',
                                                                                            '__pctype_func',
                                                                                            'isupper',
                                                                                            'memcpy',
                                                                                            'islower',
                                                                                            'abort',
                                                                                            '_wcmdln',
                                                                                            'swprintf_s',
                                                                                            '_vsnwprintf',
                                                                                            'wcstoul',
                                                                                            '_wtoi',
                                                                                            'wcstol',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '_itow',
                                                                                            'wcschr',
                                                                                            '_itow_s',
                                                                                            '_ui64tow_s',
                                                                                            '_i64tow_s',
                                                                                            '_wcstoi64',
                                                                                            '_wtoi64',
                                                                                            'wcspbrk',
                                                                                            '_wcsnicmp',
                                                                                            '_wfopen',
                                                                                            'fread',
                                                                                            '_wstat64',
                                                                                            'fclose',
                                                                                            'wcsrchr',
                                                                                            'iswspace',
                                                                                            'sprintf_s',
                                                                                            'memchr',
                                                                                            'localeconv',
                                                                                            'strcspn',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'OutputDebugStringA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetProcessHeap',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'ImmDisableTextFrameService',
                                                                                            'ImmDisableIME',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoRevokeClassObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CLSIDFromString',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoInitializeEx',
                                                                                            'StringFromCLSID',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreateVector',
                                                                                            'VarBstrCat',
                                                                                            'VarBstrFromI8',
                                                                                            'VarBstrCmp',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SysStringByteLen',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'RegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'PathAppendW',
                                                                                            'PathAddBackslashW',
                                                                                            'PathStripPathW',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'UuidCreateSequential',
                                                                                            'UuidHash',
                                                                                            'CreateXmlReader',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 242,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 58096,
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c936bcda2930341557ffff92fd68f0250903f2394d8ea7a0cdc265494d40a046'},
 'c9a75996d09b9f1365e665bc42640f03f2c506964a4abcbeac95a07a97d666a7': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3440,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 346624,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c9a75996d09b9f1365e665bc42640f03f2c506964a4abcbeac95a07a97d666a7'},
 'c9f177cb1800ef6ccc4b40cc9bc3de00745cd6b2b20ae49b6ce046d83b9e2b0f': {'AddressOfEntryPoint': 5080,
                                                                      'DebugRVA': 4496,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2804912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2805248,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/c9f177cb1800ef6ccc4b40cc9bc3de00745cd6b2b20ae49b6ce046d83b9e2b0f'},
 'ca0068ee2b92ebdd3fddf1914cf314da9564238dcf2144277701a7b41d45c307': {'AddressOfEntryPoint': 32776,
                                                                      'DebugRVA': 12640,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['ExFreePool',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAllocateIrp',
                                                                                            'MmUnlockPages',
                                                                                            'IofCallDriver',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'KeInitializeEvent',
                                                                                            'IoFreeMdl',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'IoDetachDevice',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'PoCallDriver',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            '_vsnprintf',
                                                                                            'ZwClose',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IofCompleteRequest',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'MmMapLockedPages',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoAllocateMdl',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoOpenDeviceRegistryKey',
                                                                                            'ZwSetValueKey',
                                                                                            'MmCreateMdl',
                                                                                            'IoCreateDevice',
                                                                                            'IoSetDeviceInterfaceState',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwOpenKey',
                                                                                            'KeBugCheckEx',
                                                                                            '__C_specific_handler'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 42,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 5632,
                                                                                       'INIT\x00\x00\x00\x00': 1536,
                                                                                       'PAGE\x00\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/ca0068ee2b92ebdd3fddf1914cf314da9564238dcf2144277701a7b41d45c307'},
 'ca230efa76a5f9899150133426f5065f46fc11ac58ead007e9758b870cd80e78': {'AddressOfEntryPoint': 43904,
                                                                      'DebugRVA': 79024,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'lstrcmpiA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'GetDlgItem',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFullPathNameA',
                                                                                            'DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetNumberFormatA',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetTempPathA',
                                                                                            'MoveFileExA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCommandLineA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'MoveFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'lstrcmpiA',
                                                                                            'GetWindowLongA',
                                                                                            'GetWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowPos',
                                                                                            'LoadStringA',
                                                                                            'CharToOemBuffA',
                                                                                            'wvsprintfA',
                                                                                            'FindWindowExA',
                                                                                            'GetClassNameA',
                                                                                            'SendMessageA',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'GetSysColor',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'SetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'LoadIconA',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'SetWindowLongA',
                                                                                            'CharUpperA',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExA',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassExA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetClientRect',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'MessageBoxA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'OemToCharBuffA',
                                                                                            'GetDlgItem',
                                                                                            'DeleteObject',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHFileOperationA',
                                                                                            'ShellExecuteExA',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'CLSIDFromString',
                                                                                            'OleUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 141,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 24408,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 24576,
                                                                                       '.text\x00\x00\x00': 72704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ca230efa76a5f9899150133426f5065f46fc11ac58ead007e9758b870cd80e78'},
 'ca5e87fb923947256bfe1fc1b92919a091c6da3ea7a3477871ea7210a01fb9b9': {'AddressOfEntryPoint': 5568,
                                                                      'DebugRVA': 37632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorSacl',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'USER32.dll': 'GetMessageW'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'lstrlenW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcatW',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetSecurityDescriptorSacl'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 19456,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 30208},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ca5e87fb923947256bfe1fc1b92919a091c6da3ea7a3477871ea7210a01fb9b9'},
 'ca61e148f167f4bbc2bd9ec709c2acebd2af0e0f939b05ce0e61f88106af991a': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4195360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 4195840,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/ca61e148f167f4bbc2bd9ec709c2acebd2af0e0f939b05ce0e61f88106af991a'},
 'ca8a48fb04c2af0d2ff09b880fa81a518b6caae6abf7b0e91eb402899687f8fd': {'AddressOfEntryPoint': 36964,
                                                                      'DebugRVA': 24768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'PCIIDEX.SYS': 'AtaPortWriteRegisterUlong'},
                                                                      'ImportedFunctions': ['AtaPortCopyMemory',
                                                                                            'AtaPortGetPhysicalAddress',
                                                                                            'AtaPortReadRegisterUlong',
                                                                                            'AtaPortInitializeEx',
                                                                                            'AtaPortDeviceStateChange',
                                                                                            'AtaPortEtwTraceLog',
                                                                                            'AtaPortRegistryFreeBuffer',
                                                                                            'AtaPortGetBusData',
                                                                                            'AtaPortRegistryRead',
                                                                                            'AtaPortRequestCallback',
                                                                                            'AtaPortStallExecution',
                                                                                            'AtaPortGetUnCachedExtension',
                                                                                            'AtaPortReadRegisterUchar',
                                                                                            'AtaPortBuildRequestSenseIrb',
                                                                                            'AtaPortReleaseRequestSenseIrb',
                                                                                            'AtaPortCompleteRequest',
                                                                                            'AtaPortNotification',
                                                                                            'AtaPortGetDeviceBase',
                                                                                            'AtaPortGetScatterGatherList',
                                                                                            'AtaPortRegistryAllocateBuffer',
                                                                                            'AtaPortWriteRegisterUlong',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 22,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 17408,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/ca8a48fb04c2af0d2ff09b880fa81a518b6caae6abf7b0e91eb402899687f8fd'},
 'ca9dbb4128a952aebe242c09120880a5001fc39b703560e3afc3ff5762c9f142': {'AddressOfEntryPoint': 484736,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 585728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'GetActiveObject',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'SetKeyboardState',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'listen',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'listen',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'waveOutSetVolume',
                                                                                            'timeGetTime',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Remove',
                                                                                            'WNetUseConnectionW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenProcess',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'SetSystemPowerState',
                                                                                            'SetFileTime',
                                                                                            'FindResourceW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadResource',
                                                                                            'FindFirstFileW',
                                                                                            'LockResource',
                                                                                            'FindClose',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'CreatePipe',
                                                                                            'GetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'VirtualFree',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'DeviceIoControl',
                                                                                            'SetErrorMode',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'GetShortPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'Beep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileSize',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'HeapFree',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'PtInRect',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowDC',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateMenu',
                                                                                            'GetSysColor',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetActiveWindow',
                                                                                            'InflateRect',
                                                                                            'CharNextW',
                                                                                            'DrawFocusRect',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CountClipboardFormats',
                                                                                            'CharLowerBuffW',
                                                                                            'UnregisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'FillRect',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'IsCharLowerW',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'GetCursor',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'GetAsyncKeyState',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'CopyRect',
                                                                                            'BeginPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'DrawFrameControl',
                                                                                            'FrameRect',
                                                                                            'RedrawWindow',
                                                                                            'DrawTextW',
                                                                                            'wsprintfW',
                                                                                            'FlashWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'IsZoomed',
                                                                                            'GetCaretPos',
                                                                                            'GetSubMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetMenuStringW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharUpperW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetKeyboardState',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DestroyIcon',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetDC',
                                                                                            'WindowFromPoint',
                                                                                            'SetClipboardData',
                                                                                            'VkKeyScanA',
                                                                                            'EmptyClipboard',
                                                                                            'SetKeyboardState',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CloseFigure',
                                                                                            'SetPixel',
                                                                                            'EndPath',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'ExtCreatePen',
                                                                                            'PolyBezierTo',
                                                                                            'SetViewportOrgEx',
                                                                                            'Rectangle',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'SHFileOperationW',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'GetActiveObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 459,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 61168,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.pdata\x00\x00': 19456,
                                                                                       '.rdata\x00\x00': 81920,
                                                                                       '.rsrc\x00\x00\x00': 61440,
                                                                                       '.text\x00\x00\x00': 580096},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/ca9dbb4128a952aebe242c09120880a5001fc39b703560e3afc3ff5762c9f142'},
 'cab869f98ba3fe1948d2b48fa76fa4767fa7f31e28f3be2b34572ab0c63f942a': {'AddressOfEntryPoint': 72272,
                                                                      'DebugRVA': 75664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegUnLoadKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'MPR.dll': 'WNetEnumResourceA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SetTimer',
                                                                                      'WS2_32.dll': 'WSASetLastError',
                                                                                      'comdlg32.dll': 'GetOpenFileNameA',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['WNetCloseEnum',
                                                                                            'WNetOpenEnumA',
                                                                                            'WNetEnumResourceA',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_mbsicmp',
                                                                                            '_purecall',
                                                                                            'qsort',
                                                                                            '_strlwr',
                                                                                            '_itoa',
                                                                                            '_c_exit',
                                                                                            'strtoul',
                                                                                            'strcmp',
                                                                                            'strchr',
                                                                                            '_memicmp',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'strlen',
                                                                                            'atoi',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strcmpi',
                                                                                            'memcpy',
                                                                                            'atof',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'ImageList_AddMasked',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'gethostbyname',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'htons',
                                                                                            'WSAGetLastError',
                                                                                            'connect',
                                                                                            'WSAAsyncSelect',
                                                                                            'gethostbyaddr',
                                                                                            'closesocket',
                                                                                            'WSASetLastError',
                                                                                            'OpenProcess',
                                                                                            'CreateThread',
                                                                                            'ResumeThread',
                                                                                            'ReadProcessMemory',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeleteFileA',
                                                                                            'SetErrorMode',
                                                                                            'GetStdHandle',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetStartupInfoA',
                                                                                            'FormatMessageA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'EnumResourceNamesA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'FindFirstFileA',
                                                                                            'LoadLibraryExA',
                                                                                            'WriteFile',
                                                                                            'GetModuleHandleA',
                                                                                            'GetDateFormatA',
                                                                                            'GlobalUnlock',
                                                                                            'GetFileSize',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FindNextFileA',
                                                                                            'CreateFileA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareFileTime',
                                                                                            'GetLogicalDrives',
                                                                                            'GetComputerNameA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GlobalAlloc',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GlobalLock',
                                                                                            'CloseHandle',
                                                                                            'GetTimeFormatA',
                                                                                            'GetTempPathA',
                                                                                            'ReadFile',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'KillTimer',
                                                                                            'GetFocus',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetDlgCtrlID',
                                                                                            'DialogBoxParamA',
                                                                                            'TrackPopupMenu',
                                                                                            'ModifyMenuA',
                                                                                            'GetParent',
                                                                                            'LoadMenuA',
                                                                                            'GetWindowTextA',
                                                                                            'GetMenuItemInfoA',
                                                                                            'DestroyWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'PostQuitMessage',
                                                                                            'TranslateMessage',
                                                                                            'DeferWindowPos',
                                                                                            'IsDialogMessageA',
                                                                                            'LoadStringA',
                                                                                            'GetCursorPos',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'SetDlgItemInt',
                                                                                            'SetDlgItemTextA',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetWindowPos',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'RegisterClassA',
                                                                                            'LoadImageA',
                                                                                            'LoadIconA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'InvalidateRect',
                                                                                            'SetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'EmptyClipboard',
                                                                                            'EnableWindow',
                                                                                            'EnableMenuItem',
                                                                                            'MapWindowPoints',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'GetMenu',
                                                                                            'EnumChildWindows',
                                                                                            'MoveWindow',
                                                                                            'GetDC',
                                                                                            'GetSysColor',
                                                                                            'CheckMenuItem',
                                                                                            'DestroyMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetSaveFileNameA',
                                                                                            'FindTextA',
                                                                                            'GetOpenFileNameA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegConnectRegistryA',
                                                                                            'RegLoadKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegUnLoadKeyA',
                                                                                            'ShellExecuteA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 216,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 13232,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 69632},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/cab869f98ba3fe1948d2b48fa76fa4767fa7f31e28f3be2b34572ab0c63f942a'},
 'caf50ae6b130dfccdba999fe9d93dbc3dc75066b499835715ddd42443c8d9786': {'AddressOfEntryPoint': 7792,
                                                                      'DebugRVA': 45680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlTimeToTimeFields',
                                                                                            'RtlComputeCrc32',
                                                                                            'sprintf',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwWriteFile',
                                                                                            'ZwSetValueKey',
                                                                                            'wcstoul',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwCreateFile',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwSetInformationFile',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'ZwClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenProcess',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            '_wtoi64',
                                                                                            'wcschr',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwOpenEvent',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwCreateKey',
                                                                                            'LdrFindEntryForAddress',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAIoctl',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSASocketW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/caf50ae6b130dfccdba999fe9d93dbc3dc75066b499835715ddd42443c8d9786'},
 'cb0103b3fcffdc166321a9ecb304368095c7b5d4e8219ac920cbe1b3e5b89ddf': {'AddressOfEntryPoint': 125908,
                                                                      'DebugRVA': 99200,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 98304,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90624,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/cb0103b3fcffdc166321a9ecb304368095c7b5d4e8219ac920cbe1b3e5b89ddf'},
 'cb2894f04f790e3f8be68278b6c80ff35f42f88b98137ea8fd3165cd09215ede': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 491296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 488960,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/cb2894f04f790e3f8be68278b6c80ff35f42f88b98137ea8fd3165cd09215ede'},
 'cb6512661e568c9b9326d915a74c809ccf71693f0afe196a9f3f068aeca646f1': {'AddressOfEntryPoint': 121744,
                                                                      'DebugRVA': 95104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CLASSPNP.SYS': 'ClassFindModePage',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['IoSetDeviceInterfaceState',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'IoFreeWorkItem',
                                                                                            'KeInitializeEvent',
                                                                                            'RtlInitAnsiString',
                                                                                            'PoRequestPowerIrp',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'PoSetPowerState',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcsstr',
                                                                                            'ZwQueryValueKey',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ZwClose',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'PoCallDriver',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoGetDeviceProperty',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'IoInvalidateDeviceState',
                                                                                            'ZwOpenKey',
                                                                                            'NlsMbCodePageTag',
                                                                                            'IoInitializeTimer',
                                                                                            'IoSetHardErrorOrVerifyDevice',
                                                                                            'IoStartTimer',
                                                                                            'IoIs32bitProcess',
                                                                                            'IoInvalidateDeviceRelations',
                                                                                            'IoFreeMdl',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'IoStopTimer',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoRegisterDeviceInterface',
                                                                                            'KeResetEvent',
                                                                                            'IoBuildSynchronousFsdRequest',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'IoGetConfigurationInformation',
                                                                                            'IoBuildDeviceIoControlRequest',
                                                                                            'ZwCreateKey',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoAllocateDriverObjectExtension',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'ZwCreateDirectoryObject',
                                                                                            'ZwSetValueKey',
                                                                                            'IoDetachDevice',
                                                                                            'MmUnmapIoSpace',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'MmMapIoSpace',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'IofCompleteRequest',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'IoCreateDevice',
                                                                                            'IoGetDriverObjectExtension',
                                                                                            'KeClearEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'ExInterlockedInsertTailList',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeBugCheckEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateMdl',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'ObfDereferenceObject',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'ExInterlockedRemoveHeadList',
                                                                                            'IoAllocateIrp',
                                                                                            'IoGetAttachedDeviceReference',
                                                                                            'ExQueryDepthSList',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'PoRegisterDeviceForIdleDetection',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'MmUnlockPages',
                                                                                            'DbgPrint',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            '__C_specific_handler',
                                                                                            'ClassInitializeSrbLookasideList',
                                                                                            'ClassClaimDevice',
                                                                                            'ClassDeviceControl',
                                                                                            'ClassSendDeviceIoControlSynchronous',
                                                                                            'ClassReadDriveCapacity',
                                                                                            'ClassCreateDeviceObject',
                                                                                            'ClassQueryTimeOutRegistryValue',
                                                                                            'ClassAcquireRemoveLockEx',
                                                                                            'ClassDeleteSrbLookasideList',
                                                                                            'ClassRemoveDevice',
                                                                                            'ClassReleaseRemoveLock',
                                                                                            'ClassCompleteRequest',
                                                                                            'ClassSendSrbSynchronous',
                                                                                            'ClassAsynchronousCompletion',
                                                                                            'ClassInitialize',
                                                                                            'ClassSendIrpSynchronous',
                                                                                            'ClassIoComplete',
                                                                                            'ClassFindModePage'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 90112,
                                                                                       'DUMPDATA': 26112,
                                                                                       'INIT\x00\x00\x00\x00': 6656,
                                                                                       'PAGE\x00\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/cb6512661e568c9b9326d915a74c809ccf71693f0afe196a9f3f068aeca646f1'},
 'cbc4cb1056b59d186ebc39de6647946e7b92ec1000872b0e4c9ec604c001ce06': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9660,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 4593664,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/cbc4cb1056b59d186ebc39de6647946e7b92ec1000872b0e4c9ec604c001ce06'},
 'cbc8c15a7c0237d403ef0b4caa6f3e7c8df61a8bdc34b03c155055cb267768ec': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 309248,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/cbc8c15a7c0237d403ef0b4caa6f3e7c8df61a8bdc34b03c155055cb267768ec'},
 'cc007c0f5f127e8c6340f548888cc7d7aae12c60e2c951e622b192b272ebc413': {'AddressOfEntryPoint': 12760,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHLWAPI.dll': 'StrCmpW'},
                                                                      'ImportedFunctions': ['LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'lstrcpyW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'OpenProcess',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'StrCmpW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 36352},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/cc007c0f5f127e8c6340f548888cc7d7aae12c60e2c951e622b192b272ebc413'},
 'cc1944c6e3d3ab0dcfe4e9323b1c6906ec699be7aabae9b34791c0286b39b663': {'AddressOfEntryPoint': 2117632,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'lstrcpy'},
                                                                      'ImportedFunctions': ['lstrcpy',
                                                                                            'InitCommonControls'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 2,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 592,
                                                                      'SectionNames': {'   \x00    ': 51200,
                                                                                       '        ': 512,
                                                                                       '.idata  ': 512,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       'bfeydzab': 870912,
                                                                                       'wiskrxol': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/cc1944c6e3d3ab0dcfe4e9323b1c6906ec699be7aabae9b34791c0286b39b663'},
 'cc6ebc65ece218c4d9ffbc72df1f96311f9e24b3af307491f33f3c72252b4730': {'AddressOfEntryPoint': 1789960,
                                                                      'DebugRVA': 1524288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1523712,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 896,
                                                                      'SectionNames': {'.aot\x00\x00\x00\x00': 47616,
                                                                                       '.data\x00\x00\x00': 53760,
                                                                                       '.pdata\x00\x00': 50688,
                                                                                       '.rdata\x00\x00': 153088,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 1458688,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'init\x00\x00\x00\x00': 512,
                                                                                       'page\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/cc6ebc65ece218c4d9ffbc72df1f96311f9e24b3af307491f33f3c72252b4730'},
 'cc78002044bab5b262705620b3af18d767ae46283ab6aa70562a580bc2867dc3': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 125224,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 125440,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/cc78002044bab5b262705620b3af18d767ae46283ab6aa70562a580bc2867dc3'},
 'cc7fed7020ba9aab671fa3278d4ad530d5046d69fe056d638691432f5936cd2e': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/cc7fed7020ba9aab671fa3278d4ad530d5046d69fe056d638691432f5936cd2e'},
 'ccb6f32b36f8d3dfd9ad6112ee763308d5e8cb6c0ee275ed5c329d07acfa88ec': {'AddressOfEntryPoint': 1074180625,
                                                                      'DebugRVA': 128736,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 126976,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameW',
                                                                                      'MSIMG32.dll': 'GradientFill',
                                                                                      'SHELL32.dll': 'SHAppBarMessage',
                                                                                      'USER32.dll': 'SetWindowLongPtrW'},
                                                                      'ImportedFunctions': ['GetClassNameW',
                                                                                            'UnionRect',
                                                                                            'SetRect',
                                                                                            'GetDC',
                                                                                            'EqualRect',
                                                                                            'GetDoubleClickTime',
                                                                                            'IsIconic',
                                                                                            'IsZoomed',
                                                                                            'InflateRect',
                                                                                            'IntersectRect',
                                                                                            'IsRectEmpty',
                                                                                            'OffsetRect',
                                                                                            'IsWindowVisible',
                                                                                            'FrameRect',
                                                                                            'DrawIconEx',
                                                                                            'GetSysColor',
                                                                                            'TrackPopupMenuEx',
                                                                                            'SetRectEmpty',
                                                                                            'InvalidateRgn',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetClientRect',
                                                                                            'GetWindowTextW',
                                                                                            'GetSysColorBrush',
                                                                                            'RegisterClassExW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'ReleaseCapture',
                                                                                            'MonitorFromPoint',
                                                                                            'SetCapture',
                                                                                            'SetCursor',
                                                                                            'PtInRect',
                                                                                            'GetWindow',
                                                                                            'DefWindowProcW',
                                                                                            'KillTimer',
                                                                                            'LoadStringW',
                                                                                            'LoadCursorW',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'DestroyWindow',
                                                                                            'GetCursorPos',
                                                                                            'ScreenToClient',
                                                                                            'GetSubMenu',
                                                                                            'CreatePopupMenu',
                                                                                            'DestroyMenu',
                                                                                            'LoadMenuW',
                                                                                            'DeleteMenu',
                                                                                            'ClientToScreen',
                                                                                            'TrackPopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SystemParametersInfoW',
                                                                                            'InsertMenuItemW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'IsWindow',
                                                                                            'GetWindowDC',
                                                                                            'ReleaseDC',
                                                                                            'CopyRect',
                                                                                            'GetWindowPlacement',
                                                                                            'OpenIcon',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'LockSetForegroundWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'SetActiveWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'BringWindowToTop',
                                                                                            'SetFocus',
                                                                                            'InvalidateRect',
                                                                                            'wsprintfW',
                                                                                            'SendMessageW',
                                                                                            'CopyIcon',
                                                                                            'GetClassLongPtrW',
                                                                                            'LoadIconW',
                                                                                            'LoadImageW',
                                                                                            'DestroyIcon',
                                                                                            'MapVirtualKeyW',
                                                                                            'GetKeyNameTextW',
                                                                                            'FindWindowW',
                                                                                            'PostMessageW',
                                                                                            'SetTimer',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'ExtractIconW',
                                                                                            'ExtractIconExW',
                                                                                            'SHAppBarMessage',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_SetOverlayImage',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'GradientFill',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoA',
                                                                                            'LoadLibraryA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapSize',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'FlsAlloc',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'HeapReAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'Sleep',
                                                                                            'lstrcpynW',
                                                                                            'lstrcmpiW',
                                                                                            'CreateSemaphoreW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'TerminateThread',
                                                                                            'GetTickCount',
                                                                                            'lstrlenW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'FreeResource',
                                                                                            'LocalAlloc',
                                                                                            'GlobalAlloc',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'GlobalFree',
                                                                                            'LocalFree',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'lstrcatW',
                                                                                            'LoadLibraryW',
                                                                                            'HeapFree',
                                                                                            'lstrcmpW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetModuleFileNameW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 202,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 286688,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ccb6f32b36f8d3dfd9ad6112ee763308d5e8cb6c0ee275ed5c329d07acfa88ec'},
 'cda12d1a94fecc9aacc41b95f9df7c0b3ba452496052c6c62d3e0b98347f9ae9': {'AddressOfEntryPoint': 16348,
                                                                      'DebugRVA': 78992,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceStatus',
                                                                                      'KERNEL32.dll': 'SetStdHandle',
                                                                                      'USER32.dll': 'wsprintfW'},
                                                                      'ImportedFunctions': ['CreateFileA',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'lstrcpyW',
                                                                                            'GetSystemTime',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'lstrlenW',
                                                                                            'CopyFileW',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapAlloc',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'lstrcmpiA',
                                                                                            'GetModuleFileNameW',
                                                                                            'TerminateThread',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrlenA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'wsprintfA',
                                                                                            'wsprintfW',
                                                                                            'OpenServiceW',
                                                                                            'RegUnLoadKeyW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'RegLoadKeyW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetLengthSid',
                                                                                            'AddAce',
                                                                                            'RegOpenKeyExW',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'SetFileSecurityW',
                                                                                            'GetAce',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LookupAccountNameW',
                                                                                            'GetFileSecurityW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegQueryValueExW',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetAclInformation',
                                                                                            'RegCreateKeyW',
                                                                                            'GetUserNameW',
                                                                                            'OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'ControlService',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'SetServiceStatus',
                                                                                            'CreateServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'DeleteService',
                                                                                            'OpenSCManagerW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'StartServiceW',
                                                                                            'QueryServiceStatus'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 128,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 23040,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 72704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/cda12d1a94fecc9aacc41b95f9df7c0b3ba452496052c6c62d3e0b98347f9ae9'},
 'ceac9a8c206ac4cebbfd3b5efd67b3b92ea13239d910bd65429db87cf65a5440': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 202956,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 203264,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/ceac9a8c206ac4cebbfd3b5efd67b3b92ea13239d910bd65429db87cf65a5440'},
 'ced21ce61a3c9150e46ad1f93ac225a5ee6116334d9da5ba443794db8708e156': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/ced21ce61a3c9150e46ad1f93ac225a5ee6116334d9da5ba443794db8708e156'},
 'cef4b489b037f6adec49906b58b67ac504a82b65c3187b46d906f9356c284394': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 212988,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 212992,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/cef4b489b037f6adec49906b58b67ac504a82b65c3187b46d906f9356c284394'},
 'cf2782ea0689ee6ad255a660f7f4ea13f487d6488c6b54c175d7cdb716826a2f': {'AddressOfEntryPoint': 33652,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltGetBottomInstance',
                                                                                      'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['RtlCompareUnicodeString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwOpenProcess',
                                                                                            'IoDeleteDevice',
                                                                                            'ZwReadFile',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeBugCheckEx',
                                                                                            'IoAttachDeviceToDeviceStackSafe',
                                                                                            'ZwClose',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IofCallDriver',
                                                                                            'IoAllocateWorkItem',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExAllocatePool',
                                                                                            'IoRegisterFsRegistrationChange',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'IoThreadToProcess',
                                                                                            'PsGetProcessId',
                                                                                            'IoUnregisterFsRegistrationChange',
                                                                                            'IoDetachDevice',
                                                                                            'ExQueueWorkItem',
                                                                                            'ZwWriteFile',
                                                                                            'KeReleaseSpinLock',
                                                                                            'IoQueueWorkItem',
                                                                                            'IoCreateDevice',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoFreeWorkItem',
                                                                                            'ZwQueryInformationProcess',
                                                                                            '__C_specific_handler',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltCancelFileOpen',
                                                                                            'FltClose',
                                                                                            'FltAttachVolume',
                                                                                            'FltCreateFile',
                                                                                            'FltGetVolumeFromName',
                                                                                            'FltSendMessage',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltStartFiltering',
                                                                                            'FltGetVolumeFromDeviceObject',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltRegisterFilter',
                                                                                            'FltGetDeviceObject',
                                                                                            'FltObjectDereference',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltGetVolumeName',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltEnumerateVolumes',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltCloseClientPort',
                                                                                            'FltGetBottomInstance'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 3072,
                                                                                       'INIT\x00\x00\x00\x00': 3072,
                                                                                       'PAGE\x00\x00\x00\x00': 11264},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/cf2782ea0689ee6ad255a660f7f4ea13f487d6488c6b54c175d7cdb716826a2f'},
 'cf301ae1dd3d8fdce27f624ac102a44349f2b9f24b25731db4406dadb103e884': {'AddressOfEntryPoint': 6992,
                                                                      'DebugRVA': 45920,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorSacl',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'USER32.dll': 'GetMessageW'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCurrentProcessId',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateMutexW',
                                                                                            'lstrlenW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcatW',
                                                                                            'LoadLibraryW',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'OpenMutexW',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetSecurityDescriptorSacl'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 92,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/cf301ae1dd3d8fdce27f624ac102a44349f2b9f24b25731db4406dadb103e884'},
 'cf3617f3a3ce58489034e48f9cd52d8e869089ef7d27cb171c7a84587ef24894': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 17568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 17920,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/cf3617f3a3ce58489034e48f9cd52d8e869089ef7d27cb171c7a84587ef24894'},
 'cf621637a0ad13ca415ebc77a6e6d90caf6391b9997f0cd0ad09c5e884035b82': {'AddressOfEntryPoint': 22268,
                                                                      'DebugRVA': 120208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 118784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'LoadTypeLibEx',
                                                                                      'RPCRT4.dll': 'UuidCreateSequential',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'SetWindowTextW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'ntdll.dll': '__chkstk',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ZwCreateSection',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'LdrFindEntryForAddress',
                                                                                            'RtlImageNtHeader',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'ZwMapViewOfSection',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwFlushKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'memcmp',
                                                                                            'ZwOpenTimer',
                                                                                            'ZwSetTimer',
                                                                                            'ZwDeleteFile',
                                                                                            'memcpy',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'memset',
                                                                                            'ZwWriteFile',
                                                                                            'strtoul',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'ZwSetInformationFile',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'RtlGetCurrentPeb',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'LdrUnloadDll',
                                                                                            'LdrAddRefDll',
                                                                                            'sprintf',
                                                                                            'strlen',
                                                                                            'ZwRaiseHardError',
                                                                                            'wcsstr',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'LdrLoadDll',
                                                                                            'RtlInitUnicodeString',
                                                                                            'wcscpy',
                                                                                            'ZwClose',
                                                                                            'ZwQueryKey',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwOpenThread',
                                                                                            'ZwOpenKey',
                                                                                            'RtlComputeCrc32',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwOpenProcess',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwResumeThread',
                                                                                            'ZwQueueApcThread',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'ZwSetInformationToken',
                                                                                            'ZwDuplicateToken',
                                                                                            'ZwAdjustPrivilegesToken',
                                                                                            'ZwOpenThreadTokenEx',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwReadVirtualMemory',
                                                                                            'wcschr',
                                                                                            '__chkstk',
                                                                                            'SetThreadLocale',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'WideCharToMultiByte',
                                                                                            'CopyFileW',
                                                                                            'CreateProcessW',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'Sleep',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersion',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'MD5Update',
                                                                                            'MD5Final',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'MD5Init',
                                                                                            'GetWindowLongW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowPos',
                                                                                            'LoadIconW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DialogBoxParamW',
                                                                                            'PostMessageW',
                                                                                            'EndDialog',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'FindWindowW',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxW',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExW',
                                                                                            'AdjustWindowRect',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'OpenDesktopW',
                                                                                            'SetThreadDesktop',
                                                                                            'DestroyIcon',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetMessageW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SetWindowTextW',
                                                                                            'UuidCreateSequential',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'LoadTypeLibEx',
                                                                                            'WSAStartup',
                                                                                            'WSASocketW',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'WSAIoctl',
                                                                                            'WSARecv',
                                                                                            'WSASend',
                                                                                            'setsockopt',
                                                                                            'WSASendTo',
                                                                                            'WSARecvFrom',
                                                                                            'WSACleanup'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 162,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 10104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 14336,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 112640},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/cf621637a0ad13ca415ebc77a6e6d90caf6391b9997f0cd0ad09c5e884035b82'},
 'cf663f070b61dc087ec5537c55a7d1727e7c4ed6e1dcdf8b20576ccf9de9c3b2': {'AddressOfEntryPoint': 39104,
                                                                      'DebugRVA': 9360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'FindFirstFileA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '__getmainargs',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'tolower',
                                                                                            'memcpy',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_stricmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'CreateEventA',
                                                                                            'SetFileAttributesA',
                                                                                            'CopyFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'FindFirstFileA',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'ShowWindow',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 18101248,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/cf663f070b61dc087ec5537c55a7d1727e7c4ed6e1dcdf8b20576ccf9de9c3b2'},
 'cf791914b2e3190945882c4c24ce8f44a653643c16a9399166c5b865f9664061': {'AddressOfEntryPoint': 107964,
                                                                      'DebugRVA': 210608,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 208896,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetUserNameA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'SetFilePointer',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'GetWindowDC',
                                                                                      'WININET.dll': 'InternetSetOptionA',
                                                                                      'gdiplus.dll': 'GdipFree'},
                                                                      'ImportedFunctions': ['FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ReadFile',
                                                                                            'CreateFileA',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateRemoteThread',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'Process32NextW',
                                                                                            'OpenProcess',
                                                                                            'FindNextFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteFileW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FindClose',
                                                                                            'GetComputerNameA',
                                                                                            'GetLogicalDriveStringsA',
                                                                                            'GetDriveTypeA',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32First',
                                                                                            'Process32Next',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CopyFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceA',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'Process32FirstW',
                                                                                            'CloseHandle',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetProcessHeap',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'HeapSize',
                                                                                            'FlushFileBuffers',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetLastError',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetFullPathNameA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetModuleHandleW',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetFilePointer',
                                                                                            'PostMessageA',
                                                                                            'FindWindowA',
                                                                                            'MessageBoxA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowDC',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'DeleteDC',
                                                                                            'SaveDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'RestoreDC',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'GetUserNameA',
                                                                                            'ShellExecuteA',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetConnectA',
                                                                                            'HttpOpenRequestA',
                                                                                            'HttpSendRequestExA',
                                                                                            'InternetWriteFile',
                                                                                            'HttpEndRequestA',
                                                                                            'InternetOpenUrlA',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'InternetReadFile',
                                                                                            'InternetOpenA',
                                                                                            'InternetSetOptionA',
                                                                                            'GdipGetImageEncodersSize',
                                                                                            'GdipGetImageEncoders',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipAlloc',
                                                                                            'GdipSaveImageToFile',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdipFree'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 8700,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8704,
                                                                                       '.pdata\x00\x00': 13312,
                                                                                       '.rdata\x00\x00': 48128,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 201216},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/cf791914b2e3190945882c4c24ce8f44a653643c16a9399166c5b865f9664061'},
 'd002b5d4e52f343bd5ff377ba374e5d3dce7bdf5d2919b134abfbead90386f1a': {'AddressOfEntryPoint': 41632,
                                                                      'DebugRVA': 103184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'DIFXAPI.dll': 'DriverPackageInstallW',
                                                                                      'KERNEL32.dll': 'GetLocaleInfoW'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'DriverPackageGetPathW',
                                                                                            'DriverPackagePreinstallW',
                                                                                            'DriverPackageUninstallW',
                                                                                            'DriverPackageInstallW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCPInfo',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 32256,
                                                                                       '.text\x00\x00\x00': 98304},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d002b5d4e52f343bd5ff377ba374e5d3dce7bdf5d2919b134abfbead90386f1a'},
 'd059c198f98d55898e15b4631e0e5eff55d0f699efc508e377c84e637b75db49': {'AddressOfEntryPoint': 314530,
                                                                      'DebugRVA': 7760,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitiateShutdownW',
                                                                                      'GDI32.dll': 'GetTextExtentPoint32W',
                                                                                      'KERNEL32.dll': 'FlushInstructionCache',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'USER32.dll': 'EnableWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'msvcrt.dll': '__setusermatherr',
                                                                                      'ntdll.dll': 'WinSqmIncrementDWORD',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'OpenSCManagerW',
                                                                                            'EnumServicesStatusW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ChangeServiceConfigW',
                                                                                            'QueryServiceConfigW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateShutdownW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GetSystemInfo',
                                                                                            'GetPhysicallyInstalledSystemMemory',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetCurrentProcess',
                                                                                            'FindFirstFileW',
                                                                                            'CopyFileW',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'HeapSetInformation',
                                                                                            'RegisterApplicationRestart',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineW',
                                                                                            'CompareStringW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateSemaphoreW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'FindClose',
                                                                                            'RtlCompareMemory',
                                                                                            'FindNextFileW',
                                                                                            'GetDateFormatW',
                                                                                            'QueryDosDeviceW',
                                                                                            'LocalAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetNativeSystemInfo',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLastError',
                                                                                            'FlushInstructionCache',
                                                                                            'GetTextMetricsW',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'GetFocus',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxW',
                                                                                            'IsWindowEnabled',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'SetFocus',
                                                                                            'SetWindowTextW',
                                                                                            'LoadStringW',
                                                                                            'GetActiveWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClientRect',
                                                                                            'SendMessageW',
                                                                                            'LoadIconW',
                                                                                            'CharNextW',
                                                                                            'FindWindowW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'GetLastActivePopup',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemInt',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetKeyState',
                                                                                            'CallWindowProcW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnableWindow',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'iswdigit',
                                                                                            'wcsrchr',
                                                                                            '_wtoi',
                                                                                            'memmove',
                                                                                            'calloc',
                                                                                            '_vsnwprintf',
                                                                                            '_wtol',
                                                                                            '_itow_s',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '_snwscanf_s',
                                                                                            '_wcsupr',
                                                                                            'wcsnlen',
                                                                                            'strncmp',
                                                                                            'wcsncpy_s',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_callnewh',
                                                                                            'memset',
                                                                                            '_ultow_s',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'wcstoul',
                                                                                            'swprintf_s',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            '_wcsicmp',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '_wcsicoll',
                                                                                            'wcstok',
                                                                                            'wcsstr',
                                                                                            '_wcslwr',
                                                                                            '_purecall',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '__setusermatherr',
                                                                                            'ShellExecuteW',
                                                                                            'SHEvaluateSystemCommandTemplate',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SysAllocString',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'WinSqmAddToStream',
                                                                                            'NtResetEvent',
                                                                                            'NtDeleteFile',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'LdrGetDllHandle',
                                                                                            'NtQueryInformationFile',
                                                                                            'RtlStringFromGUID',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlGUIDFromString',
                                                                                            'NtClose',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtOpenFile',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtCreateEvent',
                                                                                            'NtQueryKey',
                                                                                            'NtEnumerateKey',
                                                                                            'NtQueryAttributesFile',
                                                                                            'NtOpenKey',
                                                                                            'RtlCreateAcl',
                                                                                            'NtSaveKey',
                                                                                            'NtUnloadKey',
                                                                                            'RtlFreeSid',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'NtDeleteValueKey',
                                                                                            'NtLoadKey',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtCreateKey',
                                                                                            'NtCreateFile',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtSetSecurityObject',
                                                                                            'NtQueryValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtDeleteKey',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'NtAllocateUuids',
                                                                                            'RtlInitAnsiString',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'LdrGetProcedureAddress',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'WinSqmIncrementDWORD'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 253,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 75632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.reloc\x00\x00': 30208,
                                                                                       '.rsrc\x00\x00\x00': 75776,
                                                                                       '.text\x00\x00\x00': 208896,
                                                                                       'copxaoe\x00': 0},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/d059c198f98d55898e15b4631e0e5eff55d0f699efc508e377c84e637b75db49'},
 'd14f36b198b9d1fea5b09a0794d56d2959c6dfe2fc6b0830075f044fbb4f72aa': {'AddressOfEntryPoint': 1789960,
                                                                      'DebugRVA': 1524288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1523712,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 896,
                                                                      'SectionNames': {'.aot\x00\x00\x00\x00': 47616,
                                                                                       '.data\x00\x00\x00': 53760,
                                                                                       '.pdata\x00\x00': 50688,
                                                                                       '.rdata\x00\x00': 153088,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 1458688,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'init\x00\x00\x00\x00': 512,
                                                                                       'page\x00\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/d14f36b198b9d1fea5b09a0794d56d2959c6dfe2fc6b0830075f044fbb4f72aa'},
 'd21aae932a180cab1159fb9ecf0224bdbcbc90e54a6fb72edfb291f6b9b2cf17': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d21aae932a180cab1159fb9ecf0224bdbcbc90e54a6fb72edfb291f6b9b2cf17'},
 'd23bd82ae5878a946625d7a67921962e4e3304cdeda5bc47e402955a76aa8718': {'AddressOfEntryPoint': 5080,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'KERNEL32.dll': 'FlushInstructionCache'},
                                                                      'ImportedFunctions': ['Module32Next',
                                                                                            'lstrcmpA',
                                                                                            'Module32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'OpenProcess',
                                                                                            'Process32First',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'ExitProcess',
                                                                                            'ReadProcessMemory',
                                                                                            'CloseHandle',
                                                                                            'WriteProcessMemory',
                                                                                            'Process32Next',
                                                                                            'FlushInstructionCache',
                                                                                            'ImpersonateSelf',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenThreadToken'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 18,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d23bd82ae5878a946625d7a67921962e4e3304cdeda5bc47e402955a76aa8718'},
 'd286e34dff391567cabc6acadc28fb572b180d56b6cd40d43752af4100888340': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3141088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3141120,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/d286e34dff391567cabc6acadc28fb572b180d56b6cd40d43752af4100888340'},
 'd2fbfffcf8f621629e718eb7f82a1aec73e174b4fbbbadc1424f3b93c9dbe581': {'AddressOfEntryPoint': 52012,
                                                                      'DebugRVA': 140480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityInfo',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'OpenProcess',
                                                                                            'OpenEventA',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'SetWindowsHookExA',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityInfo'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 132096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d2fbfffcf8f621629e718eb7f82a1aec73e174b4fbbbadc1424f3b93c9dbe581'},
 'd33171bca09c4f40902144810399f44d3e8b73e2c6c635a020525004ba7ac53e': {'AddressOfEntryPoint': 4136,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 128232,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 2,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'OpenFileMappingW'},
                                                                      'ImportedFunctions': ['SleepEx',
                                                                                            'VirtualAlloc',
                                                                                            'OpenFileMappingW'],
                                                                      'LinkerVersion': 4,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 3,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.idata\x00\x00': 27648,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 81920,
                                                                                       'INIT\x00\x00\x00\x00': 10752},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d33171bca09c4f40902144810399f44d3e8b73e2c6c635a020525004ba7ac53e'},
 'd33e6b41a890d73d656e2bdd0663a9d28c75226796a069b861f63afe790d4ee2': {'AddressOfEntryPoint': 1073775069,
                                                                      'DebugRVA': 25712,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LookupAccountNameW',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR90.dll': '??_U@YAPEAX_K@Z',
                                                                                      'USER32.dll': 'RegisterWindowMessageW'},
                                                                      'ImportedFunctions': ['RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'IsDebuggerPresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'lstrlenW',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'OutputDebugStringW',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'TerminateProcess',
                                                                                            'SetErrorMode',
                                                                                            'CreateProcessW',
                                                                                            'SetEvent',
                                                                                            'lstrcpyW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'AllocConsole',
                                                                                            'GetStdHandle',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetVersionExW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'BroadcastSystemMessageW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LsaClose',
                                                                                            'RegCreateKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LsaStorePrivateData',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaAddAccountRights',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'StartServiceW',
                                                                                            'RegDeleteValueW',
                                                                                            'OpenServiceW',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'RegCreateKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenSCManagerW',
                                                                                            'CreateServiceW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'CloseServiceHandle',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'SetServiceStatus',
                                                                                            'GetUserNameW',
                                                                                            'IsValidSid',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LookupAccountNameW',
                                                                                            'memset',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'fwprintf',
                                                                                            '__iob_func',
                                                                                            'setvbuf',
                                                                                            '_fdopen',
                                                                                            '_open_osfhandle',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcsrchr',
                                                                                            'wcsstr',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_wcsdup',
                                                                                            '_wcsicmp',
                                                                                            'vswprintf_s',
                                                                                            '_wcslwr_s',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'wcsncat',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??_U@YAPEAX_K@Z'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 130,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 876,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d33e6b41a890d73d656e2bdd0663a9d28c75226796a069b861f63afe790d4ee2'},
 'd3b74d0a7cb512a60472d53d09a5ff4b9813d6a76ea8c6f8b926f83469537624': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 413880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 414208,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/d3b74d0a7cb512a60472d53d09a5ff4b9813d6a76ea8c6f8b926f83469537624'},
 'd3c41c9e301e8474c6eb8c1ce5d89f1ade602367e6fe08d879d4ff6363dc07ed': {'AddressOfEntryPoint': 61264,
                                                                      'DebugRVA': 5344,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 73728},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/d3c41c9e301e8474c6eb8c1ce5d89f1ade602367e6fe08d879d4ff6363dc07ed'},
 'd406fbc2107aaf9d7803865be129f490247f79efcd3de32e6f60a65923f4d5ba': {'AddressOfEntryPoint': 21176,
                                                                      'DebugRVA': 112000,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'MD5Init',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'LoadTypeLibEx',
                                                                                      'RPCRT4.dll': 'UuidCreateSequential',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'SetWindowPos',
                                                                                      'WS2_32.dll': 'WSARecv',
                                                                                      'ntdll.dll': '__chkstk',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ZwCreateSection',
                                                                                            'ZwOpenFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'LdrFindEntryForAddress',
                                                                                            'RtlImageNtHeader',
                                                                                            'LdrAccessResource',
                                                                                            'LdrFindResource_U',
                                                                                            'sprintf',
                                                                                            'ZwMapViewOfSection',
                                                                                            'RtlInitUnicodeString',
                                                                                            'wcscpy',
                                                                                            'ZwUnmapViewOfSection',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwFlushKey',
                                                                                            'memcmp',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'ZwOpenTimer',
                                                                                            'ZwSetTimer',
                                                                                            'ZwDeleteFile',
                                                                                            'memcpy',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlIpv4AddressToStringA',
                                                                                            'RtlIpv4StringToAddressA',
                                                                                            'ZwWriteFile',
                                                                                            'strtoul',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'memset',
                                                                                            'LdrUnloadDll',
                                                                                            'LdrAddRefDll',
                                                                                            'ZwRaiseHardError',
                                                                                            'wcsstr',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'LdrLoadDll',
                                                                                            'ZwOpenThreadTokenEx',
                                                                                            'ZwImpersonateThread',
                                                                                            'ZwClose',
                                                                                            'ZwQueryKey',
                                                                                            'ZwOpenThread',
                                                                                            'wcschr',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlGetCurrentPeb',
                                                                                            'ZwOpenKey',
                                                                                            'RtlComputeCrc32',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'ZwResumeThread',
                                                                                            'ZwSetContextThread',
                                                                                            'ZwProtectVirtualMemory',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwGetContextThread',
                                                                                            'RtlExitUserThread',
                                                                                            'RtlCreateUserThread',
                                                                                            'ZwDuplicateObject',
                                                                                            'ZwFreeVirtualMemory',
                                                                                            'ZwWriteVirtualMemory',
                                                                                            'ZwAllocateVirtualMemory',
                                                                                            'ZwOpenProcess',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'ZwSetInformationToken',
                                                                                            'ZwDuplicateToken',
                                                                                            'ZwAdjustPrivilegesToken',
                                                                                            'ZwOpenProcessToken',
                                                                                            'ZwQueryInformationProcess',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'strlen',
                                                                                            'ZwSetInformationFile',
                                                                                            '__chkstk',
                                                                                            'ExitThread',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'BindIoCompletionCallback',
                                                                                            'WideCharToMultiByte',
                                                                                            'CopyFileW',
                                                                                            'CreateProcessW',
                                                                                            'SetThreadLocale',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersion',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'MD5Update',
                                                                                            'MD5Final',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'MD5Init',
                                                                                            'DialogBoxParamW',
                                                                                            'PostMessageW',
                                                                                            'FindWindowW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SendMessageW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetClientRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExW',
                                                                                            'AdjustWindowRect',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'OpenDesktopW',
                                                                                            'SetThreadDesktop',
                                                                                            'DestroyIcon',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetMessageW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'SetWindowPos',
                                                                                            'UuidCreateSequential',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'LoadTypeLibEx',
                                                                                            'WSARecvFrom',
                                                                                            'WSASendTo',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSASocketW',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'WSAIoctl',
                                                                                            'WSASend',
                                                                                            'WSARecv'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 163,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 10104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 104448},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d406fbc2107aaf9d7803865be129f490247f79efcd3de32e6f60a65923f4d5ba'},
 'd447bc82825588ac76d7a582900d943886b9f8e39a7bf115ab2673868ae91f88': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1632368,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1632768,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/d447bc82825588ac76d7a582900d943886b9f8e39a7bf115ab2673868ae91f88'},
 'd45e0b77ce387170298c6adff9097cfdb68ed5a38529cecf5a51b6b642ccba36': {'AddressOfEntryPoint': 339976,
                                                                      'DebugRVA': 315552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortDebugPrint'},
                                                                      'ImportedFunctions': ['StorPortGetLogicalUnit',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortNotification',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortReady',
                                                                                            'StorPortLogError',
                                                                                            'StorPortPauseDevice',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortSetDeviceQueueDepth',
                                                                                            'StorPortBusy',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortDebugPrint',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 309760,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/d45e0b77ce387170298c6adff9097cfdb68ed5a38529cecf5a51b6b642ccba36'},
 'd47ef1b5ac5f5bdcdf43919733d7e3935f3c313ac36eacc45f0c875698114a03': {'AddressOfEntryPoint': 115088,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 244624,
                                                                      'ExportSize': 18438,
                                                                      'IATRVA': 192512,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Draw',
                                                                                      'KERNEL32.dll': 'FlsGetValue',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'SETUPAPI.dll': 'SetupDiEnumDeviceInfo',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            '__C_specific_handler',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'FindResourceExW',
                                                                                            'LockResource',
                                                                                            'FlushInstructionCache',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemDirectoryW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetLocalTime',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetACP',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExW',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'LeaveCriticalSection',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'LoadLibraryA',
                                                                                            'RaiseException',
                                                                                            'GetTickCount',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'SetHandleCount',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'HeapSize',
                                                                                            'Sleep',
                                                                                            'LocalAlloc',
                                                                                            'EnterCriticalSection',
                                                                                            'GetModuleFileNameA',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'FlsAlloc',
                                                                                            'SetLastError',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileA',
                                                                                            'FlsFree',
                                                                                            'TlsFree',
                                                                                            'FlsSetValue',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateFileW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'HeapFree',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetThreadLocale',
                                                                                            'GetVersionExA',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'DebugBreak',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsGetValue',
                                                                                            'GetWindowTextW',
                                                                                            'wsprintfW',
                                                                                            'LoadStringW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadBitmapW',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadImageW',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'GetWindowRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetClientRect',
                                                                                            'MapWindowPoints',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowLongW',
                                                                                            'SendMessageW',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'MessageBoxW',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DestroyWindow',
                                                                                            'CharNextW',
                                                                                            'UnregisterClassA',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'VarUI4FromStr',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Draw'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 203840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 13312,
                                                                                       '.rdata\x00\x00': 70656,
                                                                                       '.rsrc\x00\x00\x00': 204288,
                                                                                       '.text\x00\x00\x00': 187392},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d47ef1b5ac5f5bdcdf43919733d7e3935f3c313ac36eacc45f0c875698114a03'},
 'd48a02d1d7ada67611a777be64dbbaacd57924f9ff0a8eaad1972547f9569256': {'AddressOfEntryPoint': 6656,
                                                                      'DebugRVA': 8800,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorSacl',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCR80.dll': 'memset',
                                                                                      'USER32.dll': 'PostQuitMessage'},
                                                                      'ImportedFunctions': ['CreateFileMappingW',
                                                                                            'GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'wcsstr',
                                                                                            'memset'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 48484,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 48640,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d48a02d1d7ada67611a777be64dbbaacd57924f9ff0a8eaad1972547f9569256'},
 'd4922069f9bf68d2b950d0a7587b7334ffcb9d83cbc7e3fecac972e3ff8bdf1e': {'AddressOfEntryPoint': 22180,
                                                                      'DebugRVA': 86992,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CheckTokenMembership',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyA',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['RegEnumKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'GetModuleHandleA',
                                                                                            'FormatMessageA',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileW',
                                                                                            'HeapReAlloc',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'SetFilePointer',
                                                                                            'GetCommandLineA',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetLocalTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'ReadFile',
                                                                                            'PathFileExistsA',
                                                                                            'SHDeleteKeyA',
                                                                                            'LoadStringA',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 27648,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 81920},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d4922069f9bf68d2b950d0a7587b7334ffcb9d83cbc7e3fecac972e3ff8bdf1e'},
 'd60a769c000fd56bf4ad4728adf36afe46073337f4e8deafa2a834c0f8289fd5': {'AddressOfEntryPoint': 1074000701,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 176128,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExW',
                                                                                      'CRYPT32.dll': 'CryptMsgClose',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINTRUST.dll': 'WTHelperGetProvSignerFromChain',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ShellExecuteExW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyExW',
                                                                                            'StrStrIW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'CloseHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'GetLongPathNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpA',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'GetSystemTime',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetACP',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetProcAddress',
                                                                                            'OpenThread',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapFree',
                                                                                            'CertGetNameStringA',
                                                                                            'CertGetNameStringW',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertCloseStore',
                                                                                            'CryptMsgUpdate',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CertOpenStore',
                                                                                            'CryptMsgClose'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 139,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15664,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d60a769c000fd56bf4ad4728adf36afe46073337f4e8deafa2a834c0f8289fd5'},
 'd701d7d7db2536cc21ca3710872e9d86cba52d409eb4f88ae22b6c75ea924ecd': {'AddressOfEntryPoint': 28772,
                                                                      'DebugRVA': 16624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'KeBugCheckEx'},
                                                                      'ImportedFunctions': ['NtBuildNumber',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'IofCompleteRequest',
                                                                                            'IoCreateDevice',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExFreePoolWithTag',
                                                                                            'KeUnstackDetachProcess',
                                                                                            'KeDelayExecutionThread',
                                                                                            'IoDriverObjectType',
                                                                                            'IoGetCurrentProcess',
                                                                                            'MmIsAddressValid',
                                                                                            'ObfDereferenceObject',
                                                                                            'ObReferenceObjectByName',
                                                                                            'KeStackAttachProcess',
                                                                                            'MmUnmapLockedPages',
                                                                                            'MmBuildMdlForNonPagedPool',
                                                                                            'IoFreeMdl',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'IoAllocateMdl',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoGetDeviceObjectPointer',
                                                                                            'ZwOpenDirectoryObject',
                                                                                            'ZwClose',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'RtlUpcaseUnicodeChar',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 28,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 10240,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/d701d7d7db2536cc21ca3710872e9d86cba52d409eb4f88ae22b6c75ea924ecd'},
 'd73443f9b511a7d82e94e73fb91690778366f07be89f920184bc8fc50acb493b': {'AddressOfEntryPoint': 5160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'SetFileAttributesW',
                                                                                      'ntdll.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'HeapSetInformation',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'memset',
                                                                                            'DbgPrint',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 464428,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 464896,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/d73443f9b511a7d82e94e73fb91690778366f07be89f920184bc8fc50acb493b'},
 'd775ef79cd103752ae08187b28b73227546d0d7583b9ca4fd338931b334eff0b': {'AddressOfEntryPoint': 71902,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'FLTMGR.SYS': 'FltParseFileNameInformation',
                                                                                      'ntoskrnl.exe': 'MmIsAddressValid'},
                                                                      'ImportedFunctions': ['MmIsAddressValid',
                                                                                            'FltCloseClientPort',
                                                                                            'FltReleaseContext',
                                                                                            'FltSetVolumeContext',
                                                                                            'FltGetDiskDeviceObject',
                                                                                            'FltGetVolumeProperties',
                                                                                            'FltAllocateContext',
                                                                                            'FltStartFiltering',
                                                                                            'FltFreeSecurityDescriptor',
                                                                                            'FltCreateCommunicationPort',
                                                                                            'FltBuildDefaultSecurityDescriptor',
                                                                                            'FltUnregisterFilter',
                                                                                            'FltRegisterFilter',
                                                                                            'FltCloseCommunicationPort',
                                                                                            'FltObjectDereference',
                                                                                            'FltGetVolumeFromName',
                                                                                            'FltClose',
                                                                                            'FltFlushBuffers',
                                                                                            'FltQueryInformationFile',
                                                                                            'FltCreateFileEx',
                                                                                            'FltParseFileName',
                                                                                            'FltReleaseFileNameInformation',
                                                                                            'FltGetFileNameInformation',
                                                                                            'FltSetCallbackDataDirty',
                                                                                            'FltSetInformationFile',
                                                                                            'FltSendMessage',
                                                                                            'FltGetBottomInstance',
                                                                                            'FltFreePoolAlignedWithTag',
                                                                                            'FltDoCompletionProcessingWhenSafe',
                                                                                            'FltReadFile',
                                                                                            'FltGetRequestorProcess',
                                                                                            'FltLockUserBuffer',
                                                                                            'FltAllocatePoolAlignedWithTag',
                                                                                            'FltGetVolumeContext',
                                                                                            'FltGetFilterFromInstance',
                                                                                            'FltGetVolumeFromInstance',
                                                                                            'FltWriteFile',
                                                                                            'FltIsOperationSynchronous',
                                                                                            'FltFsControlFile',
                                                                                            'FltCompletePendedPreOperation',
                                                                                            'FltCancelIo',
                                                                                            'FltSetCancelCompletion',
                                                                                            'FltClearCancelCompletion',
                                                                                            'FltParseFileNameInformation'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 44,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4736,
                                                                                       '.init\x00\x00\x00': 4224,
                                                                                       '.pdata\x00\x00': 1664,
                                                                                       '.rdata\x00\x00': 4352,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 49792,
                                                                                       'INIT\x00\x00\x00\x00': 6016,
                                                                                       'PAGE\x00\x00\x00\x00': 2944},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/d775ef79cd103752ae08187b28b73227546d0d7583b9ca4fd338931b334eff0b'},
 'd784768937ea27ed673969a464b96798df3df80f9c79f5cbef4a8c62832e3f0b': {'AddressOfEntryPoint': 5840,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'GetExitCodeProcess',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'msvcp60.dll': '??0Init@ios_base@std@@QEAA@XZ',
                                                                                      'msvcrt.dll': '_c_exit',
                                                                                      'ntdll.dll': '__chkstk'},
                                                                      'ImportedFunctions': ['memset',
                                                                                            'strstr',
                                                                                            '_strnicmp',
                                                                                            'memcpy',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            '__C_specific_handler',
                                                                                            '__chkstk',
                                                                                            'GetStartupInfoA',
                                                                                            'lstrcpynA',
                                                                                            'lstrcpyA',
                                                                                            'CreateProcessA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'LoadIconA',
                                                                                            'TranslateMessage',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            '??0_Winit@std@@QEAA@XZ',
                                                                                            '??1_Winit@std@@QEAA@XZ',
                                                                                            '??1Init@ios_base@std@@QEAA@XZ',
                                                                                            '??0Init@ios_base@std@@QEAA@XZ',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_acmdln',
                                                                                            'strtok',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 43,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 43784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 45056,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d784768937ea27ed673969a464b96798df3df80f9c79f5cbef4a8c62832e3f0b'},
 'd7b0f9e0d738aa6926ec9af18686a6d512f8d1ab951c559a22481a2da905857a': {'AddressOfEntryPoint': 1073795678,
                                                                      'DebugRVA': 37456,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapReAlloc'},
                                                                      'ImportedFunctions': ['WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadProcessMemory',
                                                                                            'OpenProcess',
                                                                                            'WideCharToMultiByte',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetStringTypeW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'HeapReAlloc'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 61,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1432,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/d7b0f9e0d738aa6926ec9af18686a6d512f8d1ab951c559a22481a2da905857a'},
 'd7d2a2e15082d02b3be99bad6dd5ddf122dca716e204df7e01341b6fa36407ab': {'AddressOfEntryPoint': 4100,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 454656,
                                                                      'ExportSize': 2028,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4295413760,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 4,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 439296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/d7d2a2e15082d02b3be99bad6dd5ddf122dca716e204df7e01341b6fa36407ab'},
 'd86d9d0c314415ed5fba9ec59f0b42e1ab3c599f8b25d00a0d1e7e6416776d7a': {'AddressOfEntryPoint': 114808,
                                                                      'DebugRVA': 6352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CertVerifyCertificateChainPolicy',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameW',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHCreateDirectoryExW',
                                                                                      'SHLWAPI.dll': 'SHSetValueW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINTRUST.dll': 'WTHelperProvDataFromStateData',
                                                                                      'msvcrt.dll': '__getmainargs',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegDeleteKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatusEx',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetTempFileNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindResourceExW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CreateDirectoryW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetVersionExW',
                                                                                            'MoveFileW',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemDirectoryW',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateThread',
                                                                                            'lstrcmpiW',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'OpenProcess',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetLastError',
                                                                                            'GetLocalTime',
                                                                                            'MoveFileExW',
                                                                                            'GetTempPathW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'SetFileAttributesW',
                                                                                            'EnumResourceNamesW',
                                                                                            'LocalAlloc',
                                                                                            'GetLocaleInfoW',
                                                                                            'SizeofResource',
                                                                                            'EnumUILanguagesW',
                                                                                            'LockResource',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'MulDiv',
                                                                                            'RaiseException',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemInfo',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'CreateMutexW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'FindResourceW',
                                                                                            'ResumeThread',
                                                                                            'CreateFileMappingW',
                                                                                            'IsWow64Process',
                                                                                            'MapViewOfFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetStartupInfoW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'LoadResource',
                                                                                            'EnterCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'LoadIconW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'KillTimer',
                                                                                            'PostMessageW',
                                                                                            'LoadImageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'SetTimer',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'CopyRect',
                                                                                            'SetWindowPos',
                                                                                            'GetDesktopWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'BringWindowToTop',
                                                                                            'OffsetRect',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowRect',
                                                                                            'CharToOemW',
                                                                                            'ExitWindowsEx',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageW',
                                                                                            'UpdateWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'UnregisterClassA',
                                                                                            'DispatchMessageW',
                                                                                            'CharNextW',
                                                                                            'FindWindowW',
                                                                                            'LoadStringW',
                                                                                            '_XcptFilter',
                                                                                            '_fileno',
                                                                                            '_read',
                                                                                            '__pioinfo',
                                                                                            '__badioinfo',
                                                                                            'wcstombs',
                                                                                            'iswctype',
                                                                                            'ferror',
                                                                                            'wctomb',
                                                                                            '_itoa',
                                                                                            '_snprintf',
                                                                                            '_iob',
                                                                                            'localeconv',
                                                                                            'isxdigit',
                                                                                            'calloc',
                                                                                            'malloc',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'free',
                                                                                            '_exit',
                                                                                            '_errno',
                                                                                            '_wcsicmp',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_vsnwprintf',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'iswdigit',
                                                                                            '_wtol',
                                                                                            'iswalpha',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'isleadbyte',
                                                                                            '__mb_cur_max',
                                                                                            'mbtowc',
                                                                                            'isdigit',
                                                                                            '_initterm',
                                                                                            'ungetc',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_isatty',
                                                                                            '_write',
                                                                                            '_lseeki64',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            'realloc',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            'InitCommonControlsEx',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysReAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'PathIsRelativeW',
                                                                                            'SHDeleteKeyW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFileExistsW',
                                                                                            'PathFindExtensionW',
                                                                                            'SHRegSetUSValueW',
                                                                                            'SHGetValueW',
                                                                                            'PathStripPathW',
                                                                                            'StrChrW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'SHRegGetValueW',
                                                                                            'PathIsFileSpecW',
                                                                                            'StrCmpNIW',
                                                                                            'SHSetValueW',
                                                                                            'IsThemeActive',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WinVerifyTrust',
                                                                                            'WTHelperProvDataFromStateData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 249,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 36825308,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 36825600,
                                                                                       '.text\x00\x00\x00': 141824},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/d86d9d0c314415ed5fba9ec59f0b42e1ab3c599f8b25d00a0d1e7e6416776d7a'},
 'd87b37d5346312ccf3b629d2911c8c4802fffa4ad20bfb001ae85cff1186320d': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 230696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 150016,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/d87b37d5346312ccf3b629d2911c8c4802fffa4ad20bfb001ae85cff1186320d'},
 'd942c0a0b558d228e64ec19da22d0acf4cc2a0cf0d8771ef5752d311df6474b5': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 108424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 108544,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/d942c0a0b558d228e64ec19da22d0acf4cc2a0cf0d8771ef5752d311df6474b5'},
 'd9c44546221acb7ad6df7b7a5e361db4440ecaeb9758f912edb75f88cd05ffed': {'AddressOfEntryPoint': 159760,
                                                                      'DebugRVA': 131248,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 131072,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'SCSIPORT.SYS': 'ScsiPortStallExecution',
                                                                                      'ntoskrnl.exe': 'ExFreePoolWithTag'},
                                                                      'ImportedFunctions': ['KeBugCheckEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwClose',
                                                                                            'strncpy',
                                                                                            'MmGetPhysicalAddress',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ScsiPortGetUncachedExtension',
                                                                                            'ScsiPortInitialize',
                                                                                            'ScsiPortValidateRange',
                                                                                            'ScsiPortGetDeviceBase',
                                                                                            'ScsiPortSetBusDataByOffset',
                                                                                            'ScsiPortGetBusData',
                                                                                            'ScsiPortNotification',
                                                                                            'ScsiPortLogError',
                                                                                            'ScsiPortGetPhysicalAddress',
                                                                                            'ScsiPortStallExecution'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 19,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1048,
                                                                      'SectionNames': {'\x00"\x02\x00oc\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 14336,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 125952,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/d9c44546221acb7ad6df7b7a5e361db4440ecaeb9758f912edb75f88cd05ffed'},
 'da0a0ab047599de47b204359f9ffe81b307025ff53c233efeac32d4841a2ad60': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 864704,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 864768,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/da0a0ab047599de47b204359f9ffe81b307025ff53c233efeac32d4841a2ad60'},
 'db3e29051639b1b843821283c2c361044f5e8f169e0390839fdaff10ee8f9114': {'AddressOfEntryPoint': 1953900,
                                                                      'DebugRVA': 1324248,
                                                                      'DebugSize': 56,
                                                                      'Dll': 128,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1327104,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 129840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 53248,
                                                                                       '.pdata\x00\x00': 90624,
                                                                                       '.rdata\x00\x00': 159744,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 130048,
                                                                                       '.text\x00\x00\x00': 1320448,
                                                                                       'INIT\x00\x00\x00\x00': 22016,
                                                                                       'PAGE\x00\x00\x00\x00': 11264,
                                                                                       'PAGECONS': 512,
                                                                                       'PAGEIDP\x00': 11776,
                                                                                       'PAGEIPSE': 113152},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/db3e29051639b1b843821283c2c361044f5e8f169e0390839fdaff10ee8f9114'},
 'db65794f7ef7778c60f9a98f5a30e4a820c16d32ab033c3b7751d91e42f9549c': {'AddressOfEntryPoint': 774988,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 790528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1664,
                                                                      'SectionNames': {'.data\x00\x00\x00': 143360,
                                                                                       '.pdata\x00\x00': 45056,
                                                                                       '.rdata\x00\x00': 323072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 783360},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/db65794f7ef7778c60f9a98f5a30e4a820c16d32ab033c3b7751d91e42f9549c'},
 'db7b8bdbf3b2fd7953f4d4018ddb88fff79e8d337122ad3a571e47fb8ea5a537': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 195376,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 195584,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/db7b8bdbf3b2fd7953f4d4018ddb88fff79e8d337122ad3a571e47fb8ea5a537'},
 'dba7b30682401e40fea5a14bc858d934261459a0e274e274f38844a3ea36bd6e': {'AddressOfEntryPoint': 71700,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 131072,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'PSAPI.DLL': 'GetModuleInformation',
                                                                                      'Secur32.dll': 'LsaEnumerateLogonSessions',
                                                                                      'WS2_32.dll': 'htonl'},
                                                                      'ImportedFunctions': ['GetModuleInformation',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenThreadToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'NotifyChangeEventLog',
                                                                                            'OpenEventLogA',
                                                                                            'GetNumberOfEventLogRecords',
                                                                                            'GetOldestEventLogRecord',
                                                                                            'ReadEventLogA',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptCreateHash',
                                                                                            'CryptAcquireContextA',
                                                                                            'QueryServiceStatus',
                                                                                            'CreateServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'DeleteService',
                                                                                            'OpenServiceA',
                                                                                            'StartServiceA',
                                                                                            'ControlService',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'LsaGetLogonSessionData',
                                                                                            'LsaEnumerateLogonSessions',
                                                                                            'ntohl',
                                                                                            'ntohs',
                                                                                            'htonl',
                                                                                            'CreateEventA',
                                                                                            'CreateFileW',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'DeleteFileA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'Sleep',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetVersionExA',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'IsBadReadPtr',
                                                                                            'Process32Next',
                                                                                            'CloseHandle',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'ReadProcessMemory',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateRemoteThread',
                                                                                            'VirtualFreeEx',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetProcAddress',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateFileA',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'FreeResource',
                                                                                            'ResetEvent',
                                                                                            'GetLastError',
                                                                                            'ReadFile',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemWindowsDirectoryA',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'WriteFile',
                                                                                            'WaitNamedPipeA',
                                                                                            'FlushFileBuffers',
                                                                                            'DisconnectNamedPipe',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeA',
                                                                                            'WideCharToMultiByte',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCurrentThread',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 150,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 43120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 22528,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 43520,
                                                                                       '.text\x00\x00\x00': 124928},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/dba7b30682401e40fea5a14bc858d934261459a0e274e274f38844a3ea36bd6e'},
 'dbfc34f278a4e41267214e1fdcbbd28ec63d4054f546e01e5832cec3d334d135': {'AddressOfEntryPoint': 4797120,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 5363000,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'advapi32.dll': 'RegCloseKey',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'gdi32.dll': 'AbortDoc',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ole32.dll': 'IsEqualGUID',
                                                                                      'oleaut32.dll': 'SysFreeString',
                                                                                      'shell32.dll': 'Shell_NotifyIconW',
                                                                                      'user32.dll': 'MonitorFromWindow',
                                                                                      'version.dll': 'GetFileVersionInfoW',
                                                                                      'wininet.dll': 'DeleteUrlCacheEntryW',
                                                                                      'winspool.drv': 'GetDefaultPrinterW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'VirtualQuery',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersion',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'IsValidLocale',
                                                                                            'SetThreadLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetConsoleCP',
                                                                                            'GetACP',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'SwitchToThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'ReadFile',
                                                                                            'GetFileType',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'RaiseException',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetClassLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'CreateWindowExW',
                                                                                            'WindowFromPoint',
                                                                                            'WaitMessage',
                                                                                            'WaitForInputIdle',
                                                                                            'UpdateWindow',
                                                                                            'UnregisterClassW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'TranslateMessage',
                                                                                            'TranslateMDISysAccel',
                                                                                            'TrackPopupMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'ShowWindow',
                                                                                            'ShowScrollBar',
                                                                                            'ShowOwnedPopups',
                                                                                            'ShowCaret',
                                                                                            'SetWindowRgn',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowPlacement',
                                                                                            'SetTimer',
                                                                                            'SetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'SetScrollInfo',
                                                                                            'SetRect',
                                                                                            'SetPropW',
                                                                                            'SetParent',
                                                                                            'SetMenuItemInfoW',
                                                                                            'SetMenu',
                                                                                            'SetForegroundWindow',
                                                                                            'SetFocus',
                                                                                            'SetCursorPos',
                                                                                            'SetCursor',
                                                                                            'SetClipboardData',
                                                                                            'SetCapture',
                                                                                            'SetActiveWindow',
                                                                                            'SendMessageA',
                                                                                            'SendMessageW',
                                                                                            'ScrollWindow',
                                                                                            'ScreenToClient',
                                                                                            'RemovePropW',
                                                                                            'RemoveMenu',
                                                                                            'ReleaseDC',
                                                                                            'ReleaseCapture',
                                                                                            'RegisterWindowMessageW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'RegisterClassW',
                                                                                            'RedrawWindow',
                                                                                            'PtInRect',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageW',
                                                                                            'PeekMessageA',
                                                                                            'PeekMessageW',
                                                                                            'OpenClipboard',
                                                                                            'OffsetRect',
                                                                                            'OemToCharW',
                                                                                            'OemToCharBuffA',
                                                                                            'OemToCharA',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'MessageBeep',
                                                                                            'MapWindowPoints',
                                                                                            'MapVirtualKeyW',
                                                                                            'LoadStringW',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'KillTimer',
                                                                                            'IsZoomed',
                                                                                            'IsWindowVisible',
                                                                                            'IsWindowUnicode',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindow',
                                                                                            'IsRectEmpty',
                                                                                            'IsIconic',
                                                                                            'IsDialogMessageA',
                                                                                            'IsDialogMessageW',
                                                                                            'IsChild',
                                                                                            'InvalidateRect',
                                                                                            'IntersectRect',
                                                                                            'InsertMenuItemW',
                                                                                            'InsertMenuW',
                                                                                            'InflateRect',
                                                                                            'HideCaret',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowDC',
                                                                                            'GetTopWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSystemMenu',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'GetSubMenu',
                                                                                            'GetScrollRange',
                                                                                            'GetScrollPos',
                                                                                            'GetScrollInfo',
                                                                                            'GetScrollBarInfo',
                                                                                            'GetPropW',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetMenuStringW',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenu',
                                                                                            'GetLastActivePopup',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetKeyState',
                                                                                            'GetKeyNameTextW',
                                                                                            'GetIconInfo',
                                                                                            'GetForegroundWindow',
                                                                                            'GetFocus',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetDesktopWindow',
                                                                                            'GetDCEx',
                                                                                            'GetDC',
                                                                                            'GetCursorPos',
                                                                                            'GetCursor',
                                                                                            'GetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'GetClassNameW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'GetCapture',
                                                                                            'GetActiveWindow',
                                                                                            'FrameRect',
                                                                                            'FindWindowExW',
                                                                                            'FindWindowW',
                                                                                            'FillRect',
                                                                                            'EnumWindows',
                                                                                            'EnumThreadWindows',
                                                                                            'EnumChildWindows',
                                                                                            'EndPaint',
                                                                                            'EndMenu',
                                                                                            'EnableWindow',
                                                                                            'EnableScrollBar',
                                                                                            'EnableMenuItem',
                                                                                            'EmptyClipboard',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'DrawMenuBar',
                                                                                            'DrawIconEx',
                                                                                            'DrawIcon',
                                                                                            'DrawFrameControl',
                                                                                            'DrawFocusRect',
                                                                                            'DrawEdge',
                                                                                            'DispatchMessageA',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'DestroyMenu',
                                                                                            'DestroyIcon',
                                                                                            'DestroyCursor',
                                                                                            'DeleteMenu',
                                                                                            'DefWindowProcW',
                                                                                            'DefMDIChildProcW',
                                                                                            'DefFrameProcW',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateMenu',
                                                                                            'CreateIcon',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'CopyImage',
                                                                                            'CopyIcon',
                                                                                            'CloseClipboard',
                                                                                            'ClientToScreen',
                                                                                            'CheckMenuItem',
                                                                                            'CharUpperBuffW',
                                                                                            'CharUpperW',
                                                                                            'CharNextW',
                                                                                            'CharLowerBuffW',
                                                                                            'CharLowerW',
                                                                                            'CallWindowProcW',
                                                                                            'CallNextHookEx',
                                                                                            'BeginPaint',
                                                                                            'CharLowerBuffA',
                                                                                            'CharUpperBuffA',
                                                                                            'CharToOemBuffA',
                                                                                            'CharToOemA',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'UnrealizeObject',
                                                                                            'StretchDIBits',
                                                                                            'StretchBlt',
                                                                                            'StartPage',
                                                                                            'StartDocW',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetWinMetaFileBits',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetTextColor',
                                                                                            'SetStretchBltMode',
                                                                                            'SetROP2',
                                                                                            'SetPixel',
                                                                                            'SetMapMode',
                                                                                            'SetEnhMetaFileBits',
                                                                                            'SetDIBits',
                                                                                            'SetDIBColorTable',
                                                                                            'SetBrushOrgEx',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SetAbortProc',
                                                                                            'SelectPalette',
                                                                                            'SelectObject',
                                                                                            'SaveDC',
                                                                                            'RoundRect',
                                                                                            'RestoreDC',
                                                                                            'ResizePalette',
                                                                                            'Rectangle',
                                                                                            'RectVisible',
                                                                                            'RealizePalette',
                                                                                            'Polyline',
                                                                                            'Polygon',
                                                                                            'PolyBezierTo',
                                                                                            'PolyBezier',
                                                                                            'PlayEnhMetaFile',
                                                                                            'Pie',
                                                                                            'PatBlt',
                                                                                            'MoveToEx',
                                                                                            'MaskBlt',
                                                                                            'LineTo',
                                                                                            'LPtoDP',
                                                                                            'IntersectClipRect',
                                                                                            'GetWindowOrgEx',
                                                                                            'GetWinMetaFileBits',
                                                                                            'GetViewportOrgEx',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPointW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextColor',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'GetStockObject',
                                                                                            'GetRgnBox',
                                                                                            'GetPixel',
                                                                                            'GetPaletteEntries',
                                                                                            'GetObjectW',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'GetEnhMetaFilePaletteEntries',
                                                                                            'GetEnhMetaFileHeader',
                                                                                            'GetEnhMetaFileDescriptionW',
                                                                                            'GetEnhMetaFileBits',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDIBits',
                                                                                            'GetDIBColorTable',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetCurrentObject',
                                                                                            'GetClipBox',
                                                                                            'GetBrushOrgEx',
                                                                                            'GetBitmapBits',
                                                                                            'GdiFlush',
                                                                                            'FrameRgn',
                                                                                            'ExtTextOutW',
                                                                                            'ExtFloodFill',
                                                                                            'ExtCreateRegion',
                                                                                            'ExcludeClipRect',
                                                                                            'EnumFontsW',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'EndPage',
                                                                                            'EndDoc',
                                                                                            'Ellipse',
                                                                                            'DeleteObject',
                                                                                            'DeleteEnhMetaFile',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRoundRectRgn',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePenIndirect',
                                                                                            'CreatePalette',
                                                                                            'CreateICW',
                                                                                            'CreateHalftonePalette',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateEnhMetaFileW',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateDIBSection',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateBitmap',
                                                                                            'CopyEnhMetaFileW',
                                                                                            'CombineRgn',
                                                                                            'CloseEnhMetaFile',
                                                                                            'Chord',
                                                                                            'BitBlt',
                                                                                            'ArcTo',
                                                                                            'Arc',
                                                                                            'AngleArc',
                                                                                            'AbortDoc',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'VirtualQueryEx',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'UnmapViewOfFile',
                                                                                            'TryEnterCriticalSection',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetVolumeLabelW',
                                                                                            'SetThreadPriority',
                                                                                            'SetThreadLocale',
                                                                                            'SetLastError',
                                                                                            'SetFileTime',
                                                                                            'SetFilePointer',
                                                                                            'SetFileAttributesW',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResumeThread',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'QueryDosDeviceW',
                                                                                            'IsDebuggerPresent',
                                                                                            'MulDiv',
                                                                                            'MoveFileW',
                                                                                            'MapViewOfFile',
                                                                                            'LockResource',
                                                                                            'LocalFree',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'HeapAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTickCount',
                                                                                            'GetThreadPriority',
                                                                                            'GetThreadLocale',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetSystemTimes',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeThread',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetComputerNameW',
                                                                                            'GetCPInfoExW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'FreeResource',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FlushFileBuffers',
                                                                                            'FindResourceW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'EnumSystemLocalesW',
                                                                                            'EnumResourceNamesW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'CreatePipe',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CopyFileW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegSaveKeyW',
                                                                                            'RegRestoreKeyW',
                                                                                            'RegReplaceKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegFlushKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegCloseKey',
                                                                                            'Sleep',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'GetErrorInfo',
                                                                                            'GetActiveObject',
                                                                                            'SysFreeString',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleRegEnumVerbs',
                                                                                            'IsAccelerator',
                                                                                            'OleDraw',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'ProgIDFromCLSID',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateInstance',
                                                                                            'CoGetClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'IsEqualGUID',
                                                                                            'InitializeFlatSB',
                                                                                            'FlatSB_SetScrollProp',
                                                                                            'FlatSB_SetScrollPos',
                                                                                            'FlatSB_SetScrollInfo',
                                                                                            'FlatSB_GetScrollPos',
                                                                                            'FlatSB_GetScrollInfo',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_GetImageInfo',
                                                                                            'ImageList_SetIconSize',
                                                                                            'ImageList_GetIconSize',
                                                                                            'ImageList_Write',
                                                                                            'ImageList_Read',
                                                                                            'ImageList_GetDragImage',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_Copy',
                                                                                            'ImageList_LoadImageW',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_DrawEx',
                                                                                            'ImageList_Replace',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_SetOverlayImage',
                                                                                            'ImageList_GetBkColor',
                                                                                            'ImageList_SetBkColor',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControls',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'MonitorFromRect',
                                                                                            'MonitorFromWindow',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'Shell_NotifyIconW',
                                                                                            'InternetReadFile',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetOpenW',
                                                                                            'InternetCloseHandle',
                                                                                            'FindNextUrlCacheEntryW',
                                                                                            'FindFirstUrlCacheEntryW',
                                                                                            'DeleteUrlCacheEntryW',
                                                                                            'OpenPrinterW',
                                                                                            'EnumPrintersW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'GetDefaultPrinterW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 603,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 364032,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 425472,
                                                                                       '.didata\x00': 3584,
                                                                                       '.idata\x00\x00': 21504,
                                                                                       '.pdata\x00\x00': 229888,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 364032,
                                                                                       '.text\x00\x00\x00': 4793344,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/dbfc34f278a4e41267214e1fdcbbd28ec63d4054f546e01e5832cec3d334d135'},
 'dc1f3d6668938040fceb3b959440f50668c7afb4770df534131133a9c2d8252c': {'AddressOfEntryPoint': 4104,
                                                                      'DebugRVA': 8224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'drmk.sys': 'DrmGetFilterDescriptor',
                                                                                      'ks.sys': 'KsInitializeDriver'},
                                                                      'ImportedFunctions': ['KsInitializeDriver',
                                                                                            'DrmGetFilterDescriptor'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 2,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 512,
                                                                                       'INIT\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/dc1f3d6668938040fceb3b959440f50668c7afb4770df534131133a9c2d8252c'},
 'dc2edc7f2df5614c6e75a9e1f27943075712e88def317bc276cdffb1708f5dc5': {'AddressOfEntryPoint': 339976,
                                                                      'DebugRVA': 315552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortDebugPrint'},
                                                                      'ImportedFunctions': ['StorPortGetLogicalUnit',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortNotification',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortReady',
                                                                                            'StorPortLogError',
                                                                                            'StorPortPauseDevice',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortSetDeviceQueueDepth',
                                                                                            'StorPortBusy',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortDebugPrint',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 309760,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/dc2edc7f2df5614c6e75a9e1f27943075712e88def317bc276cdffb1708f5dc5'},
 'dc52184c184823c942ad69902f8608b0d997590f515011ae67e7e18705076ecd': {'AddressOfEntryPoint': 1074702569,
                                                                      'DebugRVA': 666240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 906544,
                                                                      'ExportSize': 483,
                                                                      'IATRVA': 663552,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGetHashParam',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'USER32.dll': 'GetProcessWindowStation',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'timeGetDevCaps',
                                                                                      'WS2_32.dll': 'recv',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLongPathNameW',
                                                                                            'IsProcessInJob',
                                                                                            'GetCurrentProcessId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DebugActiveProcess',
                                                                                            'GetProcessId',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileW',
                                                                                            'RtlCaptureContext',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'SetThreadPriority',
                                                                                            'IsDebuggerPresent',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'SetInformationJobObject',
                                                                                            'VirtualQueryEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'ReadFile',
                                                                                            'SetHandleInformation',
                                                                                            'GetSystemInfo',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemPowerStatus',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'GetCurrentThread',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CancelIo',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetNamedPipeInfo',
                                                                                            'TerminateJobObject',
                                                                                            'SignalObjectAndWait',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'GetThreadContext',
                                                                                            'VirtualProtectEx',
                                                                                            'VirtualFreeEx',
                                                                                            'CreateJobObjectW',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'DebugBreak',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadContext',
                                                                                            'ContinueDebugEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'FlushInstructionCache',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'ExitProcess',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetSystemTime',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetNamedPipeHandleStateW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetProcessHeap',
                                                                                            'ExitThread',
                                                                                            'RtlPcToFileHeader',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateRemoteThread',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'GetQueueStatus',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'RegisterClassExW',
                                                                                            'WaitMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'UnregisterClassW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'CallMsgFilterW',
                                                                                            'CreateWindowStationW',
                                                                                            'KillTimer',
                                                                                            'CreateDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostMessageW',
                                                                                            'MessageBoxW',
                                                                                            'WaitForInputIdle',
                                                                                            'wsprintfW',
                                                                                            'CharUpperW',
                                                                                            'GetProcessWindowStation',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDestroyHash',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'EqualSid',
                                                                                            'DuplicateToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'SetThreadToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'GetLengthSid',
                                                                                            'SetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'GetProfileType',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'gethostbyname',
                                                                                            'shutdown',
                                                                                            'select',
                                                                                            'send',
                                                                                            'ntohs',
                                                                                            'closesocket',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'recv',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime',
                                                                                            'timeGetDevCaps',
                                                                                            'CoTaskMemFree'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 292,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1504,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/dc52184c184823c942ad69902f8608b0d997590f515011ae67e7e18705076ecd'},
 'dc72db959e60d3826e00fe1cf2ec668cb63871c230879e99eed66d6dbc553b52': {'AddressOfEntryPoint': 27168,
                                                                      'DebugRVA': 91056,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 33243416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9728,
                                                                                       '.pdata\x00\x00': 6144,
                                                                                       '.rdata\x00\x00': 27136,
                                                                                       '.rsrc\x00\x00\x00': 33243648,
                                                                                       '.text\x00\x00\x00': 84480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/dc72db959e60d3826e00fe1cf2ec668cb63871c230879e99eed66d6dbc553b52'},
 'dca2f38a365a3878bada4c0f09bdd5a43f3ba661acd58100eafa40db94b48f0a': {'AddressOfEntryPoint': 1073849553,
                                                                      'DebugRVA': 79264,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'USER32.dll': 'InvalidateRect',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['MoveFileW',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleFileNameA',
                                                                                            'MultiByteToWideChar',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CompareStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'CopyFileW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'Sleep',
                                                                                            'SetFileAttributesW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'HeapSize',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapCreate',
                                                                                            'RtlUnwindEx',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetHandleCount',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'WriteFile',
                                                                                            'SetLastError',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetLastError',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'ExitProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapReAlloc',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'SetStdHandle',
                                                                                            'TerminateProcess',
                                                                                            'GetClientRect',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'GetDC',
                                                                                            'LoadIconW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSysColor',
                                                                                            'MessageBoxW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'CharUpperW',
                                                                                            'CharUpperA',
                                                                                            'LoadStringW',
                                                                                            'GetWindowRect',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetClassNameW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'DialogBoxParamW',
                                                                                            'EndDialog',
                                                                                            'CheckDlgButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetParent',
                                                                                            'SendMessageW',
                                                                                            'InvalidateRect',
                                                                                            'CreateFontW',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'ShellExecuteW',
                                                                                            'SHChangeNotify',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CoCreateInstance',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 22624,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/dca2f38a365a3878bada4c0f09bdd5a43f3ba661acd58100eafa40db94b48f0a'},
 'dcc2fa1185fdaa6a42f5e2a7e72828e2d04de8e2c2263186559c09446e44c99a': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 486976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 487424,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/dcc2fa1185fdaa6a42f5e2a7e72828e2d04de8e2c2263186559c09446e44c99a'},
 'dd7a51df679e9cfa4609eda781fcf520dce1805d0da3e8d243140374c3619ed8': {'AddressOfEntryPoint': 22352,
                                                                      'DebugRVA': 43216,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 301989888,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'Common.dll': '?append@String@pcd@@QEAAAEAV12@PEBD@Z',
                                                                                      'Dapi5.dll': '?setDiscoverDevicesCallback@SysInfoModule@dapi5@@SAXP6AXXZ@Z',
                                                                                      'HID.DLL': 'HidD_GetAttributes',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCR90.dll': '_commode',
                                                                                      'Matrix.dll': '?description@CapabilityImp@pcd@@QEBA?AVString@2@XZ',
                                                                                      'OSWindows.dll': '?getOsLocator@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                      'Sysinfo.dll': '?initPrinters@libSysinfo@@YA_NXZ',
                                                                                      'libModuleCommon.dll': '?GetDriver@CEnumDriver@@SAXAEBVWindowsRegistryKey@@AEBVString@pcd@@AEAV34@222@Z',
                                                                                      'libSynaptics.dll': '??0SynapticsEnumerator@@QEAA@PEAVSysInfoDevice@dapi5@@@Z',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['?getPriority@LogFactory@pcd@@SA?AW4LOGGER_PRIORITY@LoggerPriority@2@XZ',
                                                                                            '?createLogger@LogFactory@pcd@@SAXPEBDAEAPEAVLogger@2@@Z',
                                                                                            '??1TraceLogger@pcd@@QEAA@XZ',
                                                                                            '??0TraceLogger@pcd@@QEAA@PEAVLogger@1@PEBD1H@Z',
                                                                                            '?SprintfFormat@pcd@@YA?AVString@1@PEBDZZ',
                                                                                            '?logAssert@AssertionFailure@pcd@@SAXPEBD_K0@Z',
                                                                                            '?logAssert@AssertionFailure@pcd@@SAXPEBD_K0AEBVString@2@@Z',
                                                                                            '?getSystemErrorMsg@System@pcd@@SA?AVString@2@K@Z',
                                                                                            '?getSystemError@System@pcd@@SAKXZ',
                                                                                            '??0Exception@pcd@@QEAA@AEBV01@@Z',
                                                                                            '??HString@pcd@@QEBA?AV01@AEBV01@@Z',
                                                                                            '??9String@pcd@@QEBA_NAEBV01@@Z',
                                                                                            '?trim@String@pcd@@QEAAAEAV12@XZ',
                                                                                            '?toUpper@String@pcd@@QEAAAEAV12@XZ',
                                                                                            '?find@String@pcd@@QEBAIAEBV12@I@Z',
                                                                                            '?getUTF8String@String@pcd@@QEBA?AVCString@2@XZ',
                                                                                            '?size@String@pcd@@QEBAIXZ',
                                                                                            '??4String@pcd@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??1String@pcd@@QEAA@XZ',
                                                                                            '??0String@pcd@@QEAA@XZ',
                                                                                            '??0String@pcd@@QEAA@PEBD@Z',
                                                                                            '??0String@pcd@@QEAA@AEBV01@@Z',
                                                                                            '??0String@pcd@@QEAA@PEBG@Z',
                                                                                            '?EMPTY@String@pcd@@SAAEBV12@XZ',
                                                                                            '??BCString@pcd@@QEBAPEBDXZ',
                                                                                            '??1CString@pcd@@QEAA@XZ',
                                                                                            '??1SerializationFailed@pcd@@UEAA@XZ',
                                                                                            '??0SerializationFailed@pcd@@QEAA@AEBVString@1@@Z',
                                                                                            '??0SerializationFailed@pcd@@QEAA@AEBV01@@Z',
                                                                                            '?deserializeEnd@Serializable@pcd@@MEAAXXZ',
                                                                                            '?deserializeBegin@Serializable@pcd@@MEAAXPEBVXmlElement@2@@Z',
                                                                                            '?getSerializedXML@Serializable@pcd@@MEAAXAEAVString@2@@Z',
                                                                                            '?serializeEnd@Serializable@pcd@@MEAAXXZ',
                                                                                            '?serializeBegin@Serializable@pcd@@MEAAXAEBVString@2@@Z',
                                                                                            '?deserializeUtf8@Serializable@pcd@@UEAAXPEBD@Z',
                                                                                            '?deserialize@Serializable@pcd@@UEAAXAEBVString@2@@Z',
                                                                                            '?doSerialization@Serializable@pcd@@UEAAXAEBVString@2@AEAV32@@Z',
                                                                                            '??1Serializable@pcd@@UEAA@XZ',
                                                                                            '??0Serializable@pcd@@QEAA@XZ',
                                                                                            '??1LoggerStream@pcd@@QEAA@XZ',
                                                                                            '??0LoggerStream@pcd@@QEAA@XZ',
                                                                                            '?log@Logger@pcd@@QEAA_NW4LOGGER_PRIORITY@LoggerPriority@2@AEBVLoggerStream@2@@Z',
                                                                                            '?resolvePriority@Logger@pcd@@QEBA?AW4LOGGER_PRIORITY@LoggerPriority@2@XZ',
                                                                                            '??Hpcd@@YA?AVString@0@PEBDAEBV10@@Z',
                                                                                            '?open@FileHandleResManager@pcd@@CAPEAXAEBVCreateFileOpenArgs@2@@Z',
                                                                                            '?destroy@FileHandleResManager@pcd@@CAXAEAPEAX@Z',
                                                                                            '?toString@PCDValue@pcd@@QEBA?AVString@2@I@Z',
                                                                                            '?nilValue@PCDValue@pcd@@SAIXZ',
                                                                                            '??1PCDValue@pcd@@UEAA@XZ',
                                                                                            '??0PCDValue@pcd@@QEAA@XZ',
                                                                                            '??0PCDValue@pcd@@QEAA@AEBI@Z',
                                                                                            '??0PCDValue@pcd@@QEAA@AEBVString@1@@Z',
                                                                                            '??1WindowsRegistryKey@@QEAA@XZ',
                                                                                            '??0WindowsRegistryKey@@QEAA@PEAUHKEY__@@@Z',
                                                                                            '??6LoggerStream@pcd@@QEAAAEAV01@AEBVString@1@@Z',
                                                                                            '??HLoggerStream@pcd@@QEAAAEAV01@AEBVString@1@@Z',
                                                                                            '??HLoggerStream@pcd@@QEAAAEAV01@PEBD@Z',
                                                                                            '??1Exception@pcd@@UEAA@XZ',
                                                                                            '?toString@Exception@pcd@@QEBA?AVString@2@XZ',
                                                                                            '?getDistribution@OperatingSystem@pcd@@QEBAAEBVOperatingSystemDistribution@2@XZ',
                                                                                            '?getMajor@OperatingSystem@pcd@@QEBAAEBVOperatingSystemMajorVersion@2@XZ',
                                                                                            '?getCurrentOperatingSystem@OperatingSystem@pcd@@SA?AV12@XZ',
                                                                                            '??1OperatingSystem@pcd@@UEAA@XZ',
                                                                                            '??1StructuredException@pcd@@QEAA@XZ',
                                                                                            '??1OperatingSystemDistribution@pcd@@UEAA@XZ',
                                                                                            '?WIN_PE@OperatingSystemDistribution@pcd@@SA?AV12@XZ',
                                                                                            '??1OperatingSystemMajorVersion@pcd@@UEAA@XZ',
                                                                                            '?WIN_2000@OperatingSystemMajorVersion@pcd@@SA?AV12@XZ',
                                                                                            '??6LoggerStream@pcd@@QEAAAEAV01@J@Z',
                                                                                            '?append@String@pcd@@QEAAAEAV12@PEBD@Z',
                                                                                            '?capsWithHighestPriority@CapabilityImp@pcd@@QEBA?AV12@XZ',
                                                                                            '??1CapabilityImp@pcd@@UEAA@XZ',
                                                                                            '?description@CapabilityImp@pcd@@QEBA?AVString@2@XZ',
                                                                                            '?createGeneric@SysInfoDevice@dapi5@@SAPEAV12@AEBVDeviceCapability@2@0AEBVDapiString@2@111@Z',
                                                                                            '?STRINGARRAY@DataType@dapi5@@SAAEBV12@XZ',
                                                                                            '?STRING@DataType@dapi5@@SAAEBV12@XZ',
                                                                                            '?imp@DeviceCapability@dapi5@@QEAAAEAVCapabilityImp@pcd@@XZ',
                                                                                            '??8DeviceCapability@dapi5@@QEBA_NAEBV01@@Z',
                                                                                            '?toString@DeviceCapability@dapi5@@QEBAAEBVDapiString@2@XZ',
                                                                                            '??1DeviceCapability@dapi5@@QEAA@XZ',
                                                                                            '??4DeviceCapability@dapi5@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0DeviceCapability@dapi5@@QEAA@XZ',
                                                                                            '?WiMouseTest@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?Mouse@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?WiMouse@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?WiKeyboard@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?Keyboard@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?NIL@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?toPCDString@Value@dapi5@@QEBAAEBVString@pcd@@XZ',
                                                                                            '?getStringInArray@Value@dapi5@@QEBAAEBVDapiString@2@I@Z',
                                                                                            '?stringArraySize@Value@dapi5@@QEBAIXZ',
                                                                                            '?valueString@Value@dapi5@@QEBAAEBVDapiString@2@XZ',
                                                                                            '??1Value@dapi5@@QEAA@XZ',
                                                                                            '??0Value@dapi5@@QEAA@AEBVString@pcd@@@Z',
                                                                                            '?pcdString@DapiString@dapi5@@QEBAAEBVString@pcd@@XZ',
                                                                                            '??1DapiString@dapi5@@QEAA@XZ',
                                                                                            '??0DapiString@dapi5@@QEAA@PEBD@Z',
                                                                                            '??0DapiString@dapi5@@QEAA@AEBVString@pcd@@@Z',
                                                                                            '?value@Parameter@dapi5@@QEBA?AVValue@2@XZ',
                                                                                            '?createParameter@SysInfoModule@dapi5@@SAPEAVParameter@2@AEBVDapiString@2@AEBVDataType@2@0_N2@Z',
                                                                                            '?property@SysInfoDevice@dapi5@@QEBAPEAVDeviceProperty@2@AEBVDapiString@2@@Z',
                                                                                            '?deviceCapabilities@SysInfoDevice@dapi5@@QEBA?AVDeviceCapability@2@XZ',
                                                                                            '?setName@SysInfoDevice@dapi5@@QEAAPEAV12@AEBVDapiString@2@@Z',
                                                                                            '?addDeviceCapability@SysInfoDevice@dapi5@@QEAAPEAV12@AEBVDeviceCapability@2@@Z',
                                                                                            '?addProperty@SysInfoDevice@dapi5@@QEAAPEAV12@PEBVDeviceProperty@2@@Z',
                                                                                            '?createUnknown@SysInfoDevice@dapi5@@SAPEAV12@AEBVDeviceCapability@2@0AEBVDapiString@2@111@Z',
                                                                                            '?setValue@DeviceProperty@dapi5@@QEAAPEAV12@AEBVValue@2@@Z',
                                                                                            '?value@DeviceProperty@dapi5@@QEBA?AVValue@2@XZ',
                                                                                            '?BOOLEAN@DataType@dapi5@@SAAEBV12@XZ',
                                                                                            '?UINT32@DataType@dapi5@@SAAEBV12@XZ',
                                                                                            '??UDeviceCapability@dapi5@@QEBA?AV01@AEBV01@@Z',
                                                                                            '?KeyboardTest@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?MouseTest@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?Joystick@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '?Printer@DeviceCapability@dapi5@@SAAEBV12@XZ',
                                                                                            '??0Value@dapi5@@QEAA@J@Z',
                                                                                            '??0Value@dapi5@@QEAA@I@Z',
                                                                                            '??0Value@dapi5@@QEAA@K@Z',
                                                                                            '??0Value@dapi5@@QEAA@_N@Z',
                                                                                            '??0Value@dapi5@@QEAA@PEBG@Z',
                                                                                            '??UPropertyCategory@dapi5@@QEBA?AV01@AEBV01@@Z',
                                                                                            '??1PropertyCategory@dapi5@@QEAA@XZ',
                                                                                            '?Tier3@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Tier2@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Tier1@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Profile@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Summary@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Internal@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?RequiredForTests@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?Key@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?SysInfo@PropertyCategory@dapi5@@SAAEBV12@XZ',
                                                                                            '?localizedString@LocalizedString@dapi5@@QEBAAEBVDapiString@2@XZ',
                                                                                            '?registerLibrary@DiagModule@dapi5@@SAXAEBVDapiString@2@@Z',
                                                                                            '?addDevice@SysInfoModule@dapi5@@SAXPEAVSysInfoDevice@2@@Z',
                                                                                            '?createLocalizedString@SysInfoModule@dapi5@@SAPEAVLocalizedString@2@AEBVDapiString@2@@Z',
                                                                                            '?createDeviceProperty@SysInfoModule@dapi5@@SAPEAVDeviceProperty@2@AEBVDapiString@2@AEBVPropertyCategory@2@AEBVDataType@2@AEBVDeviceCapability@2@@Z',
                                                                                            '?start@SysInfoModule@dapi5@@SAHXZ',
                                                                                            '?addModuleEnumerationRequirement@SysInfoModule@dapi5@@SAXAEBVString@pcd@@_N@Z',
                                                                                            '?setModuleCapabilities@SysInfoModule@dapi5@@SAXAEBVDeviceCapability@2@@Z',
                                                                                            '?setCmdLineArgs@SysInfoModule@dapi5@@SAXHQEAPEBD@Z',
                                                                                            '?setVersion@SysInfoModule@dapi5@@SAXIIAEBVDapiString@2@@Z',
                                                                                            '?setModuleInitCallback@SysInfoModule@dapi5@@SAXP6AXXZ@Z',
                                                                                            '?setDiscoverDevicesCallback@SysInfoModule@dapi5@@SAXP6AXXZ@Z',
                                                                                            'HidD_GetHidGuid',
                                                                                            'HidD_GetManufacturerString',
                                                                                            'HidD_GetAttributes',
                                                                                            '?enumeratePrinters@libSysinfo@@YA_NXZ',
                                                                                            '?pDriverVersion@CommonProperties@libSysinfo@@2PEAVDeviceProperty@dapi5@@EA',
                                                                                            '?pDriver@CommonProperties@libSysinfo@@2PEAVDeviceProperty@dapi5@@EA',
                                                                                            '?pDescription@CommonProperties@libSysinfo@@2PEAVDeviceProperty@dapi5@@EA',
                                                                                            '?pDriverProvider@CommonProperties@libSysinfo@@2PEAVDeviceProperty@dapi5@@EA',
                                                                                            '?initPrinters@libSysinfo@@YA_NXZ',
                                                                                            '?GetDriver@CEnumDriver@@SAXAEBVWindowsRegistryKey@@AEBVString@pcd@@AEAV34@222@Z',
                                                                                            '?enumerate@SynapticsEnumerator@@QEAA_NAEAV?$Array@PEAVSysInfoDevice@dapi5@@@pcd@@@Z',
                                                                                            '??1SynapticsEnumerator@@QEAA@XZ',
                                                                                            '??0SynapticsEnumerator@@QEAA@PEAVSysInfoDevice@dapi5@@@Z',
                                                                                            '?isDecendentOf@WindowsDevice@libOSWindows@@QEBA_NAEBV12@PEAI@Z',
                                                                                            '?getDescription@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                            '?getDisplayName@WindowsDevice@libOSWindows@@QEBAXAEAVString@pcd@@AEBV34@@Z',
                                                                                            '?getServiceName@WindowsDevice@libOSWindows@@QEBA_NAEAVString@pcd@@@Z',
                                                                                            '?getDeviceInstanceId@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                            '?getEnumerator@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                            '??0WindowsDevice@libOSWindows@@QEAA@AEBVString@pcd@@@Z',
                                                                                            '?getStringRegistryProperty@WindowsDevice@libOSWindows@@QEBA_NKAEAVString@pcd@@W4RegPropType@2@@Z',
                                                                                            '?openRegistryKey@WindowsDevice@libOSWindows@@QEBAPEAUHKEY__@@W4RegKeyType@2@@Z',
                                                                                            '??0WindowsDeviceSet@libOSWindows@@QEAA@PEBU_GUID@@0I@Z',
                                                                                            '?size@WindowsDeviceSet@libOSWindows@@QEBAIXZ',
                                                                                            '??AWindowsDeviceSet@libOSWindows@@QEAAAEAVWindowsDevice@1@I@Z',
                                                                                            '??1WindowsDevice@libOSWindows@@QEAA@XZ',
                                                                                            '??1WindowsDeviceSet@libOSWindows@@QEAA@XZ',
                                                                                            '?getOsLocator@WindowsDevice@libOSWindows@@QEBAAEBVString@pcd@@XZ',
                                                                                            '_amsg_exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            'printf',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'sprintf',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_CxxThrowException',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcessId',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RaiseException',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 226,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1704,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 30720,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 34304},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/dd7a51df679e9cfa4609eda781fcf520dce1805d0da3e8d243140374c3619ed8'},
 'de87683be8164d8c6e676f0fbc26ae75a059f7676fb5e3f1b8e1b8217737c4c0': {'AddressOfEntryPoint': 1078666449,
                                                                      'DebugRVA': 859808,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 851968,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptSetProvParam',
                                                                                      'CFGMGR32.dll': 'CM_Get_DevNode_Status',
                                                                                      'CRYPT32.dll': 'CryptUnprotectData',
                                                                                      'GDI32.dll': 'GetTextExtentPoint32W',
                                                                                      'IPHLPAPI.DLL': 'GetBestInterface',
                                                                                      'KERNEL32.dll': 'GetExitCodeProcess',
                                                                                      'MSVCP90.dll': '?_Lockit_ctor@_Lockit@std@@SAXH@Z',
                                                                                      'MSVCR90.dll': 'rand',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'OLEAUT32.dll': 'CreateErrorInfo',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'SETUPAPI.dll': 'SetupDiCallClassInstaller',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyW',
                                                                                      'USER32.dll': 'SetMenuItemInfoW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WININET.dll': 'HttpQueryInfoW',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'WTSAPI32.dll': 'WTSSendMessageW',
                                                                                      'Wlanapi.dll': 'WlanOpenHandle',
                                                                                      'mscoree.dll': '_CorExeMain',
                                                                                      'msvcm90.dll': '?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z',
                                                                                      'ole32.dll': 'CoCreateInstance',
                                                                                      'packet.dll': 'PacketAllocatePacket'},
                                                                      'ImportedFunctions': ['strncpy',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_vsnprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_time64',
                                                                                            'wcschr',
                                                                                            'swprintf_s',
                                                                                            'wcstoul',
                                                                                            'wcscat_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcsstr',
                                                                                            'wcstok',
                                                                                            '_wtoi',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '__CxxUnregisterExceptionObject',
                                                                                            '__CxxDetectRethrow',
                                                                                            '__CxxRegisterExceptionObject',
                                                                                            '__CxxExceptionFilter',
                                                                                            '__CxxQueryExceptionSize',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '__RTDynamicCast',
                                                                                            'malloc',
                                                                                            'isprint',
                                                                                            'vsprintf',
                                                                                            'srand',
                                                                                            'memmove',
                                                                                            'strtoul',
                                                                                            'isdigit',
                                                                                            'islower',
                                                                                            'strncmp',
                                                                                            '_wcsupr',
                                                                                            '_wcsdup',
                                                                                            'isxdigit',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            'qsort',
                                                                                            '_waccess',
                                                                                            'wcsftime',
                                                                                            '_localtime64_s',
                                                                                            'wcsncpy',
                                                                                            'wcsrchr',
                                                                                            'memcpy_s',
                                                                                            '_mktime64',
                                                                                            'mbstowcs',
                                                                                            'ceilf',
                                                                                            '_vswprintf',
                                                                                            'isalpha',
                                                                                            '_snwprintf',
                                                                                            '__FrameUnwindFilter',
                                                                                            'abort',
                                                                                            '_encoded_null',
                                                                                            'memcpy',
                                                                                            'strlen',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'strcmp',
                                                                                            'sprintf',
                                                                                            '_vswprintf_c_l',
                                                                                            'free',
                                                                                            'calloc',
                                                                                            '_recalloc',
                                                                                            'swscanf_s',
                                                                                            '_wmakepath_s',
                                                                                            'wcsncpy_s',
                                                                                            '_wsplitpath_s',
                                                                                            'sprintf_s',
                                                                                            'sscanf_s',
                                                                                            '_makepath_s',
                                                                                            'strncpy_s',
                                                                                            '_splitpath_s',
                                                                                            'strcpy',
                                                                                            'strcpy_s',
                                                                                            'wcscpy_s',
                                                                                            '_vsnprintf_s',
                                                                                            '_snprintf_s',
                                                                                            '_errno',
                                                                                            '_vsnwprintf_s',
                                                                                            '_snwprintf_s',
                                                                                            'wcscpy',
                                                                                            '_wcsicmp',
                                                                                            'memmove_s',
                                                                                            'memcmp',
                                                                                            '_CxxThrowException',
                                                                                            'wcslen',
                                                                                            'realloc',
                                                                                            'tolower',
                                                                                            'mbtowc',
                                                                                            '_snprintf',
                                                                                            'wcstombs_s',
                                                                                            '_access',
                                                                                            'strrchr',
                                                                                            'strstr',
                                                                                            'memset',
                                                                                            'printf',
                                                                                            '__CxxFrameHandler3',
                                                                                            '__C_specific_handler',
                                                                                            '_purecall',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '_itow_s',
                                                                                            'fgetws',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '_stricmp',
                                                                                            'rand',
                                                                                            'GetConsoleWindow',
                                                                                            'GetShortPathNameW',
                                                                                            'SetLastError',
                                                                                            'DeviceIoControl',
                                                                                            'GetTempPathW',
                                                                                            'CopyFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'GetProductInfo',
                                                                                            'FindResourceW',
                                                                                            'LockResource',
                                                                                            'FreeResource',
                                                                                            'GetThreadLocale',
                                                                                            'SetThreadLocale',
                                                                                            'EnumResourceNamesW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'GetVersionExA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'OpenMutexW',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleInputW',
                                                                                            'SetFileAttributesW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'FormatMessageW',
                                                                                            'CreateEventW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetSystemPowerStatus',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetOverlappedResult',
                                                                                            'ResetEvent',
                                                                                            'GetUserGeoID',
                                                                                            'GetGeoInfoW',
                                                                                            'lstrcpyW',
                                                                                            'CreateMutexW',
                                                                                            'FreeLibrary',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'GetTimeFormatW',
                                                                                            'lstrcmpiW',
                                                                                            'OpenEventW',
                                                                                            'GetDateFormatW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrlenW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'lstrcmpW',
                                                                                            'RaiseException',
                                                                                            'GetSystemInfo',
                                                                                            'MapViewOfFile',
                                                                                            'GetSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileMappingA',
                                                                                            'GetCurrentThread',
                                                                                            'OpenFileMappingA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'OpenEventA',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'lstrlenA',
                                                                                            'WinExec',
                                                                                            'GetCurrentProcess',
                                                                                            'VirtualAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'GetComputerNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetEvent',
                                                                                            'ResumeThread',
                                                                                            'OutputDebugStringA',
                                                                                            'LoadLibraryA',
                                                                                            'CreateFileA',
                                                                                            'CreateEventA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpyA',
                                                                                            'WideCharToMultiByte',
                                                                                            'OutputDebugStringW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetWindowPos',
                                                                                            'EnableWindow',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadStringW',
                                                                                            'UpdateWindow',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'RemovePropW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetPropW',
                                                                                            'EnumThreadWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetClassInfoW',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'CharUpperW',
                                                                                            'CloseDesktop',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'CloseWindowStation',
                                                                                            'TranslateMessage',
                                                                                            'SetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'PeekMessageW',
                                                                                            'DeleteMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuState',
                                                                                            'IsMenu',
                                                                                            'GetWindow',
                                                                                            'GetSubMenu',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowLongW',
                                                                                            'ShowWindow',
                                                                                            'GetWindowRect',
                                                                                            'SendMessageW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'LogonUserW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'OpenThreadToken',
                                                                                            'RevertToSelf',
                                                                                            'SetThreadToken',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'LookupAccountSidW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExW',
                                                                                            'OpenServiceW',
                                                                                            'StartServiceW',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'OpenSCManagerA',
                                                                                            'StartServiceA',
                                                                                            'CreateServiceA',
                                                                                            'OpenServiceA',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetEntriesInAclW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'IsTextUnicode',
                                                                                            'ControlService',
                                                                                            'DeleteService',
                                                                                            'CloseServiceHandle',
                                                                                            'CreateServiceW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptDeriveKey',
                                                                                            'CryptEncrypt',
                                                                                            'CryptDecrypt',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGetUserKey',
                                                                                            'CryptGenKey',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptGetProvParam',
                                                                                            'CryptSetProvParam',
                                                                                            'SysStringLen',
                                                                                            'GetErrorInfo',
                                                                                            'VariantChangeType',
                                                                                            'SetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'CreateErrorInfo',
                                                                                            'HttpSendRequestA',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetOpenW',
                                                                                            'InternetReadFile',
                                                                                            'HttpEndRequestW',
                                                                                            'InternetWriteFile',
                                                                                            'HttpSendRequestExW',
                                                                                            'HttpSendRequestW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetConnectW',
                                                                                            'InternetErrorDlg',
                                                                                            'HttpQueryInfoW',
                                                                                            'bind',
                                                                                            'htons',
                                                                                            'socket',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'closesocket',
                                                                                            'recvfrom',
                                                                                            'select',
                                                                                            'inet_ntoa',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'setsockopt',
                                                                                            'ntohl',
                                                                                            'htonl',
                                                                                            'gethostbyaddr',
                                                                                            'gethostbyname',
                                                                                            'WSAAddressToStringW',
                                                                                            'sendto',
                                                                                            'inet_addr',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CryptBinaryToStringW',
                                                                                            'CryptProtectData',
                                                                                            'CryptUnprotectData',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'NotifyAddrChange',
                                                                                            'GetInterfaceInfo',
                                                                                            'IpReleaseAddress',
                                                                                            'IpRenewAddress',
                                                                                            'GetAdaptersAddresses',
                                                                                            'GetIfEntry',
                                                                                            'GetAdapterIndex',
                                                                                            'DeleteIPAddress',
                                                                                            'AddIPAddress',
                                                                                            'GetAdaptersInfo',
                                                                                            'GetBestInterface',
                                                                                            'SHDeleteKeyW',
                                                                                            'WlanRegisterNotification',
                                                                                            'WlanEnumInterfaces',
                                                                                            'WlanGetAvailableNetworkList',
                                                                                            'WlanGetNetworkBssList',
                                                                                            'WlanGetProfileList',
                                                                                            'WlanGetProfile',
                                                                                            'WlanCloseHandle',
                                                                                            'WlanSetInterface',
                                                                                            'WlanIhvControl',
                                                                                            'WlanConnect',
                                                                                            'WlanDisconnect',
                                                                                            'WlanScan',
                                                                                            'WlanSetProfile',
                                                                                            'WlanQueryInterface',
                                                                                            'WlanFreeMemory',
                                                                                            'WlanOpenHandle',
                                                                                            'WTSSendMessageW',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidEqual',
                                                                                            'UuidCompare',
                                                                                            'UuidFromStringA',
                                                                                            'UuidFromStringW',
                                                                                            'PacketSetBpf',
                                                                                            'PacketOpenAdapter',
                                                                                            'PacketReceivePacket',
                                                                                            'PacketSetReadTimeout',
                                                                                            'PacketSendPacket',
                                                                                            'PacketSetHwFilter',
                                                                                            'PacketSetBuff',
                                                                                            'PacketFreePacket',
                                                                                            'PacketCloseAdapter',
                                                                                            'PacketSetNumWrites',
                                                                                            'PacketInitPacket',
                                                                                            'PacketAllocatePacket',
                                                                                            'CM_Locate_DevNodeA',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'NetLocalGroupGetMembers',
                                                                                            'NetShareDel',
                                                                                            'NetShareAdd',
                                                                                            'NetShareEnum',
                                                                                            'NetApiBufferFree',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ShellExecuteW',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            '?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z',
                                                                                            '?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ',
                                                                                            '?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$AAVEventHandler@System@@@Z',
                                                                                            '?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@@Z',
                                                                                            '?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVException@System@@0@Z',
                                                                                            '?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z',
                                                                                            '?_Lockit_dtor@_Lockit@std@@SAXH@Z',
                                                                                            '?_Decref@facet@locale@std@@QEAAPEAV123@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??0?$allocator@_W@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAPEBDXZ',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?_Lockit_ctor@_Lockit@std@@SAXH@Z',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            '_CorExeMain'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 475,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1831644,
                                                                      'SectionNames': {'.data\x00\x00\x00': 104448,
                                                                                       '.nep\x00\x00\x00\x00': 81408,
                                                                                       '.pdata\x00\x00': 16384,
                                                                                       '.rdata\x00\x00': 2129920,
                                                                                       '.rsrc\x00\x00\x00': 1831936,
                                                                                       '.text\x00\x00\x00': 764416,
                                                                                       '[9K\x00oc\x00\x00': 20480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/de87683be8164d8c6e676f0fbc26ae75a059f7676fb5e3f1b8e1b8217737c4c0'},
 'ded49ccd2b47b64b9f959746a2d23d4b0021b51ad9b6988b73d68c5dcc9ba168': {'AddressOfEntryPoint': 38168,
                                                                      'DebugRVA': 107456,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 32944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 34304,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 33280,
                                                                                       '.text\x00\x00\x00': 102400},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ded49ccd2b47b64b9f959746a2d23d4b0021b51ad9b6988b73d68c5dcc9ba168'},
 'deff872ed525bc283d11d386ded952dbbbdbb32c84d3d17631d27b5f7b04cf83': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 90632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 70240,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 70656,
                                                                                       '.text\x00\x00\x00': 82944},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/deff872ed525bc283d11d386ded952dbbbdbb32c84d3d17631d27b5f7b04cf83'},
 'df481c0a996c8d66840a21bf3628768add8759571edd504cb3192b7b8ba3376e': {'AddressOfEntryPoint': 1073758637,
                                                                      'DebugRVA': 12896,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR80.dll': '_XcptFilter',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'StrCmpNW'},
                                                                      'ImportedFunctions': ['GetVersionExW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'PathFileExistsW',
                                                                                            'StrCmpIW',
                                                                                            'StrCpyW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'StrCatW',
                                                                                            'StrCatBuffW',
                                                                                            'StrCmpNW',
                                                                                            'wcscat_s',
                                                                                            'wcsstr',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            'wcsrchr',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            'wcslen',
                                                                                            'wcscpy_s',
                                                                                            '_XcptFilter'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 4608,
                                                                                       '7V\x00\x00c\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/df481c0a996c8d66840a21bf3628768add8759571edd504cb3192b7b8ba3376e'},
 'df5baaf7361227dce7d44aa9cb7ccf72a12ea057b404a79550919ec352ab84d3': {'AddressOfEntryPoint': 369184,
                                                                      'DebugRVA': 11920,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 90400,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.pdata\x00\x00': 25600,
                                                                                       '.rsrc\x00\x00\x00': 90624,
                                                                                       '.text\x00\x00\x00': 443904},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/df5baaf7361227dce7d44aa9cb7ccf72a12ea057b404a79550919ec352ab84d3'},
 'df793f700ac4a70a63681b95cf6e01db32b42d54d5b487e4d9b7fa24c84d2313': {'AddressOfEntryPoint': 467168,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 282624,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'GDI32.dll': 'Escape',
                                                                                      'KERNEL32.dll': 'HeapSize',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'SETUPAPI.dll': 'SetupCopyOEMInfA',
                                                                                      'SHLWAPI.dll': 'PathIsUNCA',
                                                                                      'USER32.dll': 'RemovePropA',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'comdlg32.dll': 'GetFileTitleA',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupCopyOEMInfA',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileTime',
                                                                                            'RaiseException',
                                                                                            'GetTickCount',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'ExitProcess',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'GetOEMCP',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetConsoleCP',
                                                                                            'SetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCPInfo',
                                                                                            'CreateFileA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FindClose',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'GetFileSize',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'EnterCriticalSection',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFlags',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalFindAtomA',
                                                                                            'lstrcatA',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleFileNameW',
                                                                                            'MulDiv',
                                                                                            'lstrcpynA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FreeResource',
                                                                                            'CloseHandle',
                                                                                            'GlobalAddAtomA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleFileNameA',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GlobalLock',
                                                                                            'lstrcmpA',
                                                                                            'GlobalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'lstrcpyA',
                                                                                            'LoadLibraryA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GetVersionExA',
                                                                                            'GetThreadLocale',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetACP',
                                                                                            'GetLastError',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'SetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'HeapSize',
                                                                                            'MessageBeep',
                                                                                            'DestroyMenu',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'PostThreadMessageA',
                                                                                            'ReleaseCapture',
                                                                                            'LoadCursorA',
                                                                                            'SetCapture',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringA',
                                                                                            'DrawTextExA',
                                                                                            'DrawTextA',
                                                                                            'TabbedTextOutA',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpA',
                                                                                            'GetCapture',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassLongA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassLongPtrA',
                                                                                            'GetClassNameA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'SetFocus',
                                                                                            'IsChild',
                                                                                            'GetWindowTextA',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowLongPtrA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetMessagePos',
                                                                                            'MapWindowPoints',
                                                                                            'SetForegroundWindow',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'PtInRect',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'UnregisterClassA',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcA',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowLongA',
                                                                                            'OffsetRect',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetWindow',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'DrawIcon',
                                                                                            'SendMessageA',
                                                                                            'IsIconic',
                                                                                            'GetClientRect',
                                                                                            'LoadIconA',
                                                                                            'EnableWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'CharUpperA',
                                                                                            'PostMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'SetCursor',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CopyRect',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'InvalidateRgn',
                                                                                            'InvalidateRect',
                                                                                            'SetRect',
                                                                                            'IsRectEmpty',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'CharNextA',
                                                                                            'GetMessageTime',
                                                                                            'GetSysColorBrush',
                                                                                            'IsWindowEnabled',
                                                                                            'GetLastActivePopup',
                                                                                            'GetParent',
                                                                                            'GetWindowLongA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'ValidateRect',
                                                                                            'GetCursorPos',
                                                                                            'PeekMessageA',
                                                                                            'GetKeyState',
                                                                                            'IsWindowVisible',
                                                                                            'GetActiveWindow',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageA',
                                                                                            'CallNextHookEx',
                                                                                            'SetWindowsHookExA',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'GetMenuState',
                                                                                            'ModifyMenuA',
                                                                                            'GetFocus',
                                                                                            'LoadBitmapA',
                                                                                            'RemovePropA',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ExtSelectClipRgn',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetMapMode',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'GetClipBox',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateBitmap',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'DeleteObject',
                                                                                            'SetMapMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'Escape',
                                                                                            'GetFileTitleA',
                                                                                            'OpenPrinterA',
                                                                                            'DocumentPropertiesA',
                                                                                            'ClosePrinter',
                                                                                            'RegQueryValueA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathStripToRootA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathIsUNCA',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoGetClassObject',
                                                                                            'CoTaskMemAlloc',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleInitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleUninitialize',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 337,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 16608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13312,
                                                                                       '.pdata\x00\x00': 23040,
                                                                                       '.rdata\x00\x00': 102912,
                                                                                       '.rsrc\x00\x00\x00': 20480,
                                                                                       '.text\x00\x00\x00': 276480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/df793f700ac4a70a63681b95cf6e01db32b42d54d5b487e4d9b7fa24c84d2313'},
 'df7c6753f1fe2bb2fd168a715a1ba859e34efdd42b25783803869e1f832bf18b': {'AddressOfEntryPoint': 1376,
                                                                      'DebugRVA': 928,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 896,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'IofCompleteRequest'},
                                                                      'ImportedFunctions': ['IoCreateDevice',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IofCompleteRequest'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 3,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1088,
                                                                      'SectionNames': {'.pdata\x00\x00': 128,
                                                                                       '.rdata\x00\x00': 256,
                                                                                       '.rsrc\x00\x00\x00': 1152,
                                                                                       '.text\x00\x00\x00': 128,
                                                                                       'INIT\x00\x00\x00\x00': 831904},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/df7c6753f1fe2bb2fd168a715a1ba859e34efdd42b25783803869e1f832bf18b'},
 'e04031a7c2095b795162df0926bb9e4ec3685bbb817861102262b932e70ea0cd': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12345152,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 12291584,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/e04031a7c2095b795162df0926bb9e4ec3685bbb817861102262b932e70ea0cd'},
 'e0b97c1bb84dd9723ffe2c1d87b01e88e217a535b570d159641bcfa4952333ed': {'AddressOfEntryPoint': 73867,
                                                                      'DebugRVA': 25312,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'jli.dll': 'JLI_MemFree',
                                                                                      'msvcrt.dll': '_strnicmp'},
                                                                      'ImportedFunctions': ['JLI_ExactVersionId',
                                                                                            'JLI_JarUnpackFile',
                                                                                            'JLI_StringDup',
                                                                                            'JLI_ParseManifest',
                                                                                            'JLI_ValidVersionString',
                                                                                            'JLI_AcceptableRelease',
                                                                                            'JLI_FreeManifest',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_MemFree',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            '_beginthreadex',
                                                                                            '_putenv',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'fflush',
                                                                                            '_errno',
                                                                                            'strerror',
                                                                                            'strchr',
                                                                                            'fgets',
                                                                                            'strcspn',
                                                                                            'strspn',
                                                                                            'strrchr',
                                                                                            'fopen',
                                                                                            'fwrite',
                                                                                            'fread',
                                                                                            'fclose',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'memset',
                                                                                            'getenv',
                                                                                            'strcmp',
                                                                                            'exit',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'printf',
                                                                                            'sprintf',
                                                                                            'memcpy',
                                                                                            'strncmp',
                                                                                            'sscanf',
                                                                                            'strlen',
                                                                                            '_access',
                                                                                            '_stat',
                                                                                            '_strnicmp',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'LocalFree',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetExitCodeProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetExitCodeThread',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 17408,
                                                                                       'dtwwkix\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/e0b97c1bb84dd9723ffe2c1d87b01e88e217a535b570d159641bcfa4952333ed'},
 'e10cb9994f890c8bd6f49d2e07d0a4e7284ff083849aa000c903c0f8aebe2654': {'AddressOfEntryPoint': 13292,
                                                                      'DebugRVA': 45888,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapSetInformation',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'StartMenuHook64.dll': 'StartMenuHookLog',
                                                                                      'USER32.dll': 'FindWindowW'},
                                                                      'ImportedFunctions': ['GetShell_TrayWnd',
                                                                                            'GetMenuReplacingMsgWnd',
                                                                                            'GetDV2ControlHostWnd',
                                                                                            'HookAllProgramsButton',
                                                                                            'StartMenuHookLog',
                                                                                            'GetACP',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'HeapCreate',
                                                                                            'GetVersion',
                                                                                            'GetOEMCP',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'LCMapStringW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'HeapAlloc',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapFree',
                                                                                            'InitializeCriticalSection',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStringTypeW',
                                                                                            'WideCharToMultiByte',
                                                                                            'IsValidCodePage',
                                                                                            'WaitForMultipleObjects',
                                                                                            'OpenProcess',
                                                                                            'CreateMutexW',
                                                                                            'GetCommandLineW',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetVersionExW',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'wsprintfW',
                                                                                            'GetSysColor',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SendMessageW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'FindWindowW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 79,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 19456,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/e10cb9994f890c8bd6f49d2e07d0a4e7284ff083849aa000c903c0f8aebe2654'},
 'e16314d8ccfeef3c294865925c01babab9d52d4773466a3925aebb7c90041bf0': {'AddressOfEntryPoint': 484768,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 585728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'GetActiveObject',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'SetKeyboardState',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'listen',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'gethostname',
                                                                                            'listen',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'waveOutSetVolume',
                                                                                            'timeGetTime',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Remove',
                                                                                            'WNetUseConnectionW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenProcess',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'SetSystemPowerState',
                                                                                            'SetFileTime',
                                                                                            'FindResourceW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadResource',
                                                                                            'FindFirstFileW',
                                                                                            'LockResource',
                                                                                            'FindClose',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'CreatePipe',
                                                                                            'GetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'VirtualFree',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'DeviceIoControl',
                                                                                            'SetErrorMode',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'GetShortPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GlobalMemoryStatus',
                                                                                            'Beep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileSize',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetHandleCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'HeapFree',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowDC',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateMenu',
                                                                                            'GetSysColor',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetActiveWindow',
                                                                                            'InflateRect',
                                                                                            'CharNextW',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CountClipboardFormats',
                                                                                            'CharLowerBuffW',
                                                                                            'UnregisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'DrawFrameControl',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'IsCharLowerW',
                                                                                            'GetKeyState',
                                                                                            'keybd_event',
                                                                                            'GetCursor',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'GetAsyncKeyState',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'CopyRect',
                                                                                            'BeginPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'FrameRect',
                                                                                            'RedrawWindow',
                                                                                            'DrawTextW',
                                                                                            'wsprintfW',
                                                                                            'DrawFocusRect',
                                                                                            'FlashWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'IsZoomed',
                                                                                            'GetCaretPos',
                                                                                            'GetSubMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetMenuStringW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharUpperW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetKeyboardState',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DestroyIcon',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetDC',
                                                                                            'WindowFromPoint',
                                                                                            'SetClipboardData',
                                                                                            'VkKeyScanA',
                                                                                            'EmptyClipboard',
                                                                                            'SetKeyboardState',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CloseFigure',
                                                                                            'SetPixel',
                                                                                            'EndPath',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'ExtCreatePen',
                                                                                            'PolyBezierTo',
                                                                                            'SetViewportOrgEx',
                                                                                            'Rectangle',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'SHFileOperationW',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromCLSID',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'GetActiveObject'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 459,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 37560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.pdata\x00\x00': 19456,
                                                                                       '.rdata\x00\x00': 81920,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 580096},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/e16314d8ccfeef3c294865925c01babab9d52d4773466a3925aebb7c90041bf0'},
 'e26cb57638e309602caacab844f911bddf8246a404126edaba9aeeb1cb95284a': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 908376,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 908800,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/e26cb57638e309602caacab844f911bddf8246a404126edaba9aeeb1cb95284a'},
 'e32669c449629bc13ddbfc0b64cd6eec781253217c5db0feea7ccede5ab28dfc': {'AddressOfEntryPoint': 38320,
                                                                      'DebugRVA': 5392,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'LocalFileTimeToFileTime',
                                                                                      'USER32.dll': 'ReleaseDC',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__set_app_type',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'FreeSid',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoA',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetCurrentProcessId',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpyA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetShortPathNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcmpiA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'lstrcatA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'GetTickCount',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'LoadLibraryExA',
                                                                                            'lstrcpynA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FormatMessageA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'TerminateThread',
                                                                                            'GetDriveTypeA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDC',
                                                                                            'GetWindowRect',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBeep',
                                                                                            'SetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'GetDesktopWindow',
                                                                                            'EndDialog',
                                                                                            'ExitWindowsEx',
                                                                                            'wsprintfA',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'CharPrevA',
                                                                                            'SetWindowLongPtrA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'CallWindowProcA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendMessageA',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 149,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 113540,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 197632,
                                                                                       '.text\x00\x00\x00': 64512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/e32669c449629bc13ddbfc0b64cd6eec781253217c5db0feea7ccede5ab28dfc'},
 'e411e9caad9f33646d3a4736da6420ef814a615fe8e5e6643b3e0a873e2c5209': {'AddressOfEntryPoint': 117587,
                                                                      'DebugRVA': 7600,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'GetProcAddress',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathMakePrettyW',
                                                                                      'STLang64.dll': 'LocalizeSetLangID',
                                                                                      'USER32.dll': 'GetSysColor',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'msvcrt.dll': '_wspawnlp',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueW',
                                                                                            'RegCloseKey',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'CloseServiceHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyW',
                                                                                            'VirtualProtect',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateFileW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'WinExec',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateThread',
                                                                                            'lstrcatW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetStockObject',
                                                                                            'GetWindowLongW',
                                                                                            'GetCursorPos',
                                                                                            'TrackPopupMenu',
                                                                                            'GetMenuItemID',
                                                                                            'LoadIconW',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'GetClientRect',
                                                                                            'GetActiveWindow',
                                                                                            'DrawStateW',
                                                                                            'LoadImageW',
                                                                                            'FrameRect',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetSubMenu',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'TrackPopupMenuEx',
                                                                                            'OffsetRect',
                                                                                            'LoadMenuW',
                                                                                            'DestroyCursor',
                                                                                            'ClientToScreen',
                                                                                            'DrawFocusRect',
                                                                                            'InflateRect',
                                                                                            'WindowFromPoint',
                                                                                            'SetTimer',
                                                                                            'GetMessagePos',
                                                                                            'ScreenToClient',
                                                                                            'SetCursor',
                                                                                            'DestroyMenu',
                                                                                            'CopyRect',
                                                                                            'FillRect',
                                                                                            'InvalidateRect',
                                                                                            'DestroyIcon',
                                                                                            'PtInRect',
                                                                                            'KillTimer',
                                                                                            'IsWindow',
                                                                                            'GetDC',
                                                                                            'MessageBeep',
                                                                                            'SetRect',
                                                                                            'SetForegroundWindow',
                                                                                            'SetFocus',
                                                                                            'GetForegroundWindow',
                                                                                            'PostMessageW',
                                                                                            'FindWindowW',
                                                                                            'DeleteMenu',
                                                                                            'ModifyMenuW',
                                                                                            'GetSystemMetrics',
                                                                                            'InsertMenuW',
                                                                                            'CheckMenuItem',
                                                                                            'AttachThreadInput',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'UpdateWindow',
                                                                                            'IsZoomed',
                                                                                            'DrawFrameControl',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EqualRect',
                                                                                            'IsIconic',
                                                                                            'DrawIcon',
                                                                                            'GetIconInfo',
                                                                                            'SetMenuDefaultItem',
                                                                                            'RegisterWindowMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetSysColor',
                                                                                            'wcsncpy',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'wcsstr',
                                                                                            '_CxxThrowException',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '__CxxFrameHandler',
                                                                                            'iswspace',
                                                                                            '_wcsnicmp',
                                                                                            'memmove',
                                                                                            'wcsncmp',
                                                                                            'swprintf',
                                                                                            '_wspawnlp',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'PathParseIconLocationW',
                                                                                            'PathRemoveArgsW',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathFileExistsW',
                                                                                            'PathMakePrettyW',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_GetIconSize',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'LocalizeString',
                                                                                            'LocalizeSetLangID'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 173,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 367880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 395776,
                                                                                       '.text\x00\x00\x00': 113664},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/e411e9caad9f33646d3a4736da6420ef814a615fe8e5e6643b3e0a873e2c5209'},
 'e4ec5e2d8509a7c60597f08674b6341324befafa910aa5637c473149b0a298cd': {'AddressOfEntryPoint': 10760,
                                                                      'DebugRVA': 12688,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 32768,
                                                                      'ExportSize': 192,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['ExAllocatePoolWithTag',
                                                                                            'ExFreePoolWithTag',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'RtlInitUnicodeString',
                                                                                            'IoDeleteDevice',
                                                                                            'KeSetEvent',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'KeInitializeEvent',
                                                                                            'KeReleaseSpinLock',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'IofCompleteRequest',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeWaitForSingleObject',
                                                                                            'RtlCompareMemory',
                                                                                            'ObfReferenceObject',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'IoAcquireCancelSpinLock',
                                                                                            'KeInitializeSpinLock',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'ZwClose',
                                                                                            'ZwSetSecurityObject',
                                                                                            'IoCreateDevice',
                                                                                            'IoDeviceObjectType',
                                                                                            'ObOpenObjectByPointer',
                                                                                            '_snwprintf',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'SeCaptureSecurityDescriptor',
                                                                                            'RtlGetSaclSecurityDescriptor',
                                                                                            'RtlGetGroupSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlAbsoluteToSelfRelativeSD',
                                                                                            'IoIsWdmVersionAvailable',
                                                                                            'SeExports',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'ZwCreateKey',
                                                                                            'ZwSetValueKey',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwOpenKey',
                                                                                            '__C_specific_handler'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.edata\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 8192,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'PAGE\x00\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/e4ec5e2d8509a7c60597f08674b6341324befafa910aa5637c473149b0a298cd'},
 'e647717985bf0a1c6b3e2464d4f95d2efe3b77801c43246bde45eae908b940b8': {'AddressOfEntryPoint': 78608,
                                                                      'DebugRVA': 252508,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 253952,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'API-MS-Win-Core-ErrorHandling-L1-1-0.dll': 'UnhandledExceptionFilter',
                                                                                      'API-MS-Win-Core-File-L1-1-0.dll': 'FindNextFileW',
                                                                                      'API-MS-Win-Core-Handle-L1-1-0.dll': 'CloseHandle',
                                                                                      'API-MS-Win-Core-Heap-L1-1-0.dll': 'HeapSetInformation',
                                                                                      'API-MS-Win-Core-IO-L1-1-0.dll': 'DeviceIoControl',
                                                                                      'API-MS-Win-Core-LibraryLoader-L1-1-0.dll': 'LoadStringW',
                                                                                      'API-MS-Win-Core-LocalRegistry-L1-1-0.dll': 'RegSetValueExW',
                                                                                      'API-MS-Win-Core-Misc-L1-1-0.dll': 'lstrlenW',
                                                                                      'API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'API-MS-Win-Core-ProcessThreads-L1-1-0.dll': 'GetProcessTimes',
                                                                                      'API-MS-Win-Core-Profile-L1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'API-MS-Win-Core-String-L1-1-0.dll': 'CompareStringW',
                                                                                      'API-MS-Win-Core-Synch-L1-1-0.dll': 'OpenProcess',
                                                                                      'API-MS-Win-Core-SysInfo-L1-1-0.dll': 'GetSystemTime',
                                                                                      'API-MS-Win-Security-Base-L1-1-0.dll': 'SetTokenInformation',
                                                                                      'API-MS-Win-Security-LSALookup-L1-1-0.dll': 'LsaLookupOpenLocalPolicy',
                                                                                      'API-MS-Win-Security-SDDL-L1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'CRYPTBASE.dll': 'SystemFunction005',
                                                                                      'RPCRT4.dll': 'RpcAsyncAbortCall',
                                                                                      'SspiCli.dll': 'LogonUserExExW',
                                                                                      'msvcrt.dll': '_ultow',
                                                                                      'ntdll.dll': 'RtlUnicodeStringToInteger'},
                                                                      'ImportedFunctions': ['_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_ltow',
                                                                                            'wcscspn',
                                                                                            '__getmainargs',
                                                                                            '_ltow_s',
                                                                                            'wcschr',
                                                                                            '_wcslwr',
                                                                                            '_ultow_s',
                                                                                            'time',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            'wcstoul',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            'wcsncmp',
                                                                                            '_ultow',
                                                                                            'UuidCreate',
                                                                                            'UuidCreateNil',
                                                                                            'UuidEqual',
                                                                                            'RpcServerUnsubscribeForNotification',
                                                                                            'RpcServerSubscribeForNotification',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcServerInqBindingHandle',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'I_RpcSessionStrictContextHandle',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'NdrServerCall2',
                                                                                            'NdrAsyncServerCall',
                                                                                            'UuidFromStringW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcServerInqCallAttributesA',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcAsyncAbortCall',
                                                                                            'LogonUserExExW',
                                                                                            'RtlLengthSid',
                                                                                            'EtwTraceMessage',
                                                                                            'NtTraceControl',
                                                                                            'RtlSetLastWin32Error',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtOpenThread',
                                                                                            'NtQueueApcThread',
                                                                                            'RtlQueueApcWow64Thread',
                                                                                            'EvtIntReportEventAndSourceAsync',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventRegister',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlFreeHeap',
                                                                                            'NtSetEvent',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtOpenProcessToken',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtQueryDirectoryFile',
                                                                                            'NtDeleteFile',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'NtFilterToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtSetInformationThread',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtDuplicateToken',
                                                                                            'NtAccessCheckAndAuditAlarm',
                                                                                            'NtAccessCheck',
                                                                                            'NtPrivilegeObjectAuditAlarm',
                                                                                            'NtPrivilegeCheck',
                                                                                            'RtlMapGenericMask',
                                                                                            'RtlSetSecurityObject',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'RtlQuerySecurityObject',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'NtDeleteKey',
                                                                                            'NtEnumerateKey',
                                                                                            'NtDeleteValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenKey',
                                                                                            'NtCreateKey',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlConvertExclusiveToShared',
                                                                                            'RtlConvertSharedToExclusive',
                                                                                            'RtlCreateServiceSid',
                                                                                            'RtlRegisterWait',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlCopySid',
                                                                                            'NtUnloadDriver',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'NtLoadDriver',
                                                                                            'DbgPrintEx',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlInitializeSRWLock',
                                                                                            'NtOpenFile',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlReleaseSRWLockShared',
                                                                                            'NtDeleteObjectAuditAlarm',
                                                                                            'RtlAcquireSRWLockShared',
                                                                                            'NtFlushKey',
                                                                                            'RtlAreAllAccessesGranted',
                                                                                            'NtCloseObjectAuditAlarm',
                                                                                            'RtlReleaseSRWLockExclusive',
                                                                                            'RtlAcquireSRWLockExclusive',
                                                                                            'RtlDeregisterWait',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlQueueWorkItem',
                                                                                            'RtlDeleteSecurityObject',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlCopyLuid',
                                                                                            'NtQueryKey',
                                                                                            'NtShutdownSystem',
                                                                                            'NtInitializeRegistry',
                                                                                            'NtSetSystemEnvironmentValue',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlNewSecurityObject',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'LsaLookupTranslateSids',
                                                                                            'LsaLookupFreeMemory',
                                                                                            'LsaLookupClose',
                                                                                            'LsaLookupManageSidNameMapping',
                                                                                            'LsaLookupGetDomainInfo',
                                                                                            'LsaLookupTranslateNames',
                                                                                            'LsaLookupOpenLocalPolicy',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'SystemFunction029',
                                                                                            'SystemFunction005',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetFileInformationByHandle',
                                                                                            'CreateDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeviceIoControl',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'LoadStringW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegLoadMUIStringW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'IsWow64Process',
                                                                                            'lstrlenW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetProcessId',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateProcessAsUserW',
                                                                                            'ResumeThread',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'ExitThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetProcessTimes',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CompareStringW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'ResetEvent',
                                                                                            'OpenEventW',
                                                                                            'OpenProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemTime',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'CheckTokenMembership',
                                                                                            'GetTokenInformation',
                                                                                            'InitializeAcl',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AllocateLocallyUniqueId',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetTokenInformation'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 293,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 19112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 39936,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 248832},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/e647717985bf0a1c6b3e2464d4f95d2efe3b77801c43246bde45eae908b940b8'},
 'e65f6131d5e50cc106a826249cb157dd5d984f219a7f68ecbb0d19e1f29dafdc': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 338396,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 338432,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/e65f6131d5e50cc106a826249cb157dd5d984f219a7f68ecbb0d19e1f29dafdc'},
 'e73bd8b8396d12820a8934a089372cd2761346c68e786dd1dd9072d690851b3e': {'AddressOfEntryPoint': 311304,
                                                                      'DebugRVA': 209152,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 208896,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntoskrnl.exe': 'KeQueryTimeIncrement',
                                                                                      'storport.sys': 'ScsiPortNotification'},
                                                                      'ImportedFunctions': ['ExSystemTimeToLocalTime',
                                                                                            'KeBugCheckEx',
                                                                                            'MmUnmapIoSpace',
                                                                                            'MmMapIoSpace',
                                                                                            'DbgPrint',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'RtlQueryRegistryValues',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'StorPortNotification',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortResumeDevice',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortDeviceReady',
                                                                                            'StorPortBusy',
                                                                                            'StorPortResume',
                                                                                            'StorPortReady',
                                                                                            'StorPortDeviceBusy',
                                                                                            'StorPortPauseDevice',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortSetDeviceQueueDepth',
                                                                                            'StorPortLogError',
                                                                                            'StorPortPause',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortValidateRange',
                                                                                            'StorPortGetUncachedExtension',
                                                                                            'StorPortExtendedFunction',
                                                                                            'ScsiPortNotification'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 29,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2200,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 201728,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/e73bd8b8396d12820a8934a089372cd2761346c68e786dd1dd9072d690851b3e'},
 'e7725dfd8522b86f60d8eafe1b8a6f227b0a3f1e74e77d579573e113b0fd5813': {'AddressOfEntryPoint': 5008,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 518288,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 518656,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/e7725dfd8522b86f60d8eafe1b8a6f227b0a3f1e74e77d579573e113b0fd5813'},
 'e8162f1766459e6ef57b0063938da6cab886743ee5c5669233424855c8098f8f': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 538896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 539136,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/e8162f1766459e6ef57b0063938da6cab886743ee5c5669233424855c8098f8f'},
 'e84f033460a4b6cdc5a5340ef654cb7c42e01bd690b9033c515c4b2a5ffc65c9': {'AddressOfEntryPoint': 232913,
                                                                      'DebugRVA': 234592,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 233472,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'FindFirstFileW',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'LoadLibraryExW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'FindNextFileW',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcpyW',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileW',
                                                                                            'CreateFileA',
                                                                                            'GetLocaleInfoW',
                                                                                            'ReadFile',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCPInfo',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'RtlVirtualUnwind',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'WriteFile',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSize',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'MessageBoxW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'OleUninitialize',
                                                                                            'CoInitialize',
                                                                                            'OleInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 110,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 20992,
                                                                                       '.pdata\x00\x00': 15872,
                                                                                       '.rdata\x00\x00': 84992,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 228864,
                                                                                       'evglglf\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/e84f033460a4b6cdc5a5340ef654cb7c42e01bd690b9033c515c4b2a5ffc65c9'},
 'e9142a19eac88acda42d97fb32435de8bf0434e355f4cfb58b948f193db59775': {'AddressOfEntryPoint': 1073842757,
                                                                      'DebugRVA': 70656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SETUPAPI.dll': 'SetupDiEnumDeviceInfo',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'BeginPaint',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'TranslateMessage',
                                                                                            'DefWindowProcW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'EndPaint',
                                                                                            'UpdateWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'DispatchMessageW',
                                                                                            'RegisterClassExW',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'LoadIconW',
                                                                                            'GetMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'EndDialog',
                                                                                            'LoadStringW',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'LoadCursorW',
                                                                                            'CreateWindowExW',
                                                                                            'EnumDisplaySettingsExW',
                                                                                            'DestroyWindow',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'HeapReAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapSize',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'CreateFileW',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 111,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2688,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/e9142a19eac88acda42d97fb32435de8bf0434e355f4cfb58b948f193db59775'},
 'e9a0170496e18c976183a500e736ab58eeac2d19663f94f9bf9703fbf9cabc7a': {'AddressOfEntryPoint': 33228,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['GetModuleBaseNameW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'EnumProcessModules',
                                                                                            'GetStringTypeW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetLastError',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'lstrcpyW',
                                                                                            'FlsGetValue',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'RtlUnwindEx',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'MessageBoxW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 17920,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 56832},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/e9a0170496e18c976183a500e736ab58eeac2d19663f94f9bf9703fbf9cabc7a'},
 'e9a94221d0cd8c2716ef8d6157f587b2fe6d09e128885bc54015663cc39c0edb': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 659708,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 659968,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/e9a94221d0cd8c2716ef8d6157f587b2fe6d09e128885bc54015663cc39c0edb'},
 'e9b355846580911b7cc8507f1c698fb0811eb0b6d0ea61f21305e47c375aa8ae': {'AddressOfEntryPoint': 1074142929,
                                                                      'DebugRVA': 333312,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 331776,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetStartupInfoA',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'USER32.dll': 'CharToOemA'},
                                                                      'ImportedFunctions': ['SetConsoleCtrlHandler',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateFileW',
                                                                                            'BackupRead',
                                                                                            'BackupSeek',
                                                                                            'SetFileTime',
                                                                                            'MoveFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileTime',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileAttributesW',
                                                                                            'MoveFileA',
                                                                                            'DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryA',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetVersionExW',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'GetProcessAffinityMask',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CompareStringA',
                                                                                            'SetPriorityClass',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'ExitThread',
                                                                                            'SetLastError',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetConsoleCP',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'ExitProcess',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'CharLowerW',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperA',
                                                                                            'CharLowerA',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'CharToOemBuffW',
                                                                                            'CharToOemBuffA',
                                                                                            'OemToCharA',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'GetFileSecurityW',
                                                                                            'GetFileSecurityA',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHFileOperationW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 29208,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/e9b355846580911b7cc8507f1c698fb0811eb0b6d0ea61f21305e47c375aa8ae'},
 'e9d1c4f94282311d558015795d18dde7e856ca07005ea1656ce84bd2132f8f9e': {'AddressOfEntryPoint': 102332,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 62224,
                                                                      'SectionNames': {'.data\x00\x00\x00': 25088,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 46592,
                                                                                       '.rsrc\x00\x00\x00': 62464,
                                                                                       '.text\x00\x00\x00': 173568},
                                                                      'StackReserveSize': 20000,
                                                                      'filename': './data/malware/e9d1c4f94282311d558015795d18dde7e856ca07005ea1656ce84bd2132f8f9e'},
 'ea29b59d8a7e9328c8d4fb105a42fd9cd57fc067dd079876e6028a308fd5c342': {'AddressOfEntryPoint': 51232,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'OLEAUT32.dll': 'SafeArrayCreate',
                                                                                      'msvcrt.dll': '_wcsicmp',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'TerminateProcess',
                                                                                            'FreeLibrary',
                                                                                            'RegCreateKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SafeArrayGetElement',
                                                                                            'VariantInit',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayCreate',
                                                                                            'sscanf',
                                                                                            'strstr',
                                                                                            'fgets',
                                                                                            '__CxxFrameHandler',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'isdigit',
                                                                                            'vsprintf',
                                                                                            'strpbrk',
                                                                                            'free',
                                                                                            'strchr',
                                                                                            '_CxxThrowException',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy',
                                                                                            'calloc',
                                                                                            'realloc',
                                                                                            'fputs',
                                                                                            'strncpy',
                                                                                            'atoi',
                                                                                            'swprintf',
                                                                                            'fclose',
                                                                                            'memset',
                                                                                            'sprintf',
                                                                                            '_c_exit',
                                                                                            'printf',
                                                                                            '_stricmp',
                                                                                            'fopen',
                                                                                            '_wcsicmp'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 26624,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 48640},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ea29b59d8a7e9328c8d4fb105a42fd9cd57fc067dd079876e6028a308fd5c342'},
 'ea9142915371fad08d233c021c7d72bd252c30a966b195e3b510c3684cf76585': {'AddressOfEntryPoint': 1073909045,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconA',
                                                                                      'SHLWAPI.dll': 'StrStrIA',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'hccutils.DLL': 'FindResources',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['LoadSTRING',
                                                                                            'LoadBITMAP',
                                                                                            'LoadICON',
                                                                                            'LoadIMAGE',
                                                                                            'FindResources',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpiA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineA',
                                                                                            'Sleep',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'CreateEventA',
                                                                                            'WriteConsoleW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'LCMapStringA',
                                                                                            'ExitProcess',
                                                                                            'LCMapStringW',
                                                                                            'FlsAlloc',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetProcAddress',
                                                                                            'CreateFileA',
                                                                                            'GetLocaleInfoA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'HeapAlloc',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetStdHandle',
                                                                                            'SetFilePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ShowWindow',
                                                                                            'GetDC',
                                                                                            'GetSystemMetrics',
                                                                                            'ReleaseDC',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'DestroyIcon',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'SetForegroundWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'CreateDialogParamA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowTextA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'PostMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyMenu',
                                                                                            'FindWindowA',
                                                                                            'SetWindowLongA',
                                                                                            'PostThreadMessageA',
                                                                                            'CharNextW',
                                                                                            'CharNextA',
                                                                                            'GetCursorPos',
                                                                                            'GetWindowLongA',
                                                                                            'wsprintfA',
                                                                                            'IsWindow',
                                                                                            'RegisterWindowMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetDIBits',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'BitBlt',
                                                                                            'SetTextColor',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'Shell_NotifyIconA',
                                                                                            'CoTaskMemFree',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoTaskMemAlloc',
                                                                                            'VarUI4FromStr',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'StrStrIA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 172,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2552,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ea9142915371fad08d233c021c7d72bd252c30a966b195e3b510c3684cf76585'},
 'eacc44ed55385c3253f9844b61cb50305de4a850c72acd843f7b8929907a0053': {'AddressOfEntryPoint': 137100,
                                                                      'DebugRVA': 182240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 211520,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'RtlLookupFunctionEntry',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'LoadIconW',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'Sleep',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetTickCount',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'CreateThread',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetProcessAffinityMask',
                                                                                            'ReleaseSemaphore',
                                                                                            'ResetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'SetThreadPriority',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'CreateSemaphoreW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileType',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLongPathNameW',
                                                                                            'MoveFileW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'CreateFileW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'CreateHardLinkW',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GlobalAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxW',
                                                                                            'FindWindowExW',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharUpperW',
                                                                                            'OemToCharBuffA',
                                                                                            'LoadBitmapW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'PostMessageW',
                                                                                            'GetSysColor',
                                                                                            'SetForegroundWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'IsWindowVisible',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyIcon',
                                                                                            'SetFocus',
                                                                                            'GetClassNameW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'EndDialog',
                                                                                            'SetDlgItemTextW',
                                                                                            'wvsprintfW',
                                                                                            'SendMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadStringW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'LoadIconW',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SHBrowseForFolderW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetFileInfoW',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 213,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 24224,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 31744,
                                                                                       '.rsrc\x00\x00\x00': 24576,
                                                                                       '.text\x00\x00\x00': 174080},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/eacc44ed55385c3253f9844b61cb50305de4a850c72acd843f7b8929907a0053'},
 'eb2a55ec12c2fa476df5e88d2b38f8d0a158d2a4c973b8b33fdc1a52a376761d': {'AddressOfEntryPoint': 99376,
                                                                      'DebugRVA': 5216,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'GetCommandLineW',
                                                                                      'SHELL32.dll': 'ShellAboutW',
                                                                                      'USER32.dll': 'EndDialog',
                                                                                      'msvcrt.dll': '_cexit'},
                                                                      'ImportedFunctions': ['WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'WriteProfileStringW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpW',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalCompact',
                                                                                            'lstrlenW',
                                                                                            'LocalReAlloc',
                                                                                            'GetProfileIntW',
                                                                                            'GetStartupInfoA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'GetProfileStringW',
                                                                                            'LocalAlloc',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'ShellAboutW',
                                                                                            'wcstoul',
                                                                                            'toupper',
                                                                                            'wcschr',
                                                                                            'memmove',
                                                                                            '_wcsrev',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_CxxThrowException',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler',
                                                                                            'memcpy',
                                                                                            '_cexit',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'GetWindowRect',
                                                                                            'SetDlgItemInt',
                                                                                            'GetWindowTextW',
                                                                                            'CheckDlgButton',
                                                                                            'HideCaret',
                                                                                            'CallWindowProcW',
                                                                                            'DrawTextW',
                                                                                            'WinHelpW',
                                                                                            'PostQuitMessage',
                                                                                            'ScreenToClient',
                                                                                            'ChildWindowFromPoint',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'EnableMenuItem',
                                                                                            'TrackPopupMenuEx',
                                                                                            'OpenClipboard',
                                                                                            'GetClipboardData',
                                                                                            'CharNextA',
                                                                                            'CloseClipboard',
                                                                                            'GetDesktopWindow',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'RegisterClassExW',
                                                                                            'GetSysColorBrush',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'CheckMenuItem',
                                                                                            'CheckMenuRadioItem',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowPos',
                                                                                            'OffsetRect',
                                                                                            'MapWindowPoints',
                                                                                            'GetClientRect',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'LoadMenuW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetMenu',
                                                                                            'CreateDialogParamW',
                                                                                            'DestroyMenu',
                                                                                            'DestroyWindow',
                                                                                            'ShowWindow',
                                                                                            'SetMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'MessageBoxW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsChild',
                                                                                            'IsDialogMessageW',
                                                                                            'GetMessageW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'CreateWindowExW',
                                                                                            'LoadStringW',
                                                                                            'SetProcessDefaultLayout',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'SetCursor',
                                                                                            'SetFocus',
                                                                                            'SetWindowTextW',
                                                                                            'CheckRadioButton',
                                                                                            'GetSubMenu',
                                                                                            'MessageBeep',
                                                                                            'EndDialog'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 35240,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 36864,
                                                                                       '.text\x00\x00\x00': 103936},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/eb2a55ec12c2fa476df5e88d2b38f8d0a158d2a4c973b8b33fdc1a52a376761d'},
 'eb94ef1c22bd34c0ca2187024eca4aea3cd063c223f3d37889e08813774e5179': {'AddressOfEntryPoint': 5008,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 393632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 393728,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/eb94ef1c22bd34c0ca2187024eca4aea3cd063c223f3d37889e08813774e5179'},
 'ec3f778fe07bf5f3fcced76b5445c2757dbcf38c90d486f8280616f54689f655': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5434728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5434880,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/ec3f778fe07bf5f3fcced76b5445c2757dbcf38c90d486f8280616f54689f655'},
 'ed79e88bd6f0e5a6472b560e95df02e2a806b51791024bd0ef88e41badfd17f1': {'AddressOfEntryPoint': 48472,
                                                                      'DebugRVA': 87360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 96768,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'DosDateTimeToFileTime',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalAlloc',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'wvsprintfA',
                                                                                            'wvsprintfW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClassNameW',
                                                                                            'DialogBoxParamW',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'LoadBitmapW',
                                                                                            'LoadIconW',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'CharUpperA',
                                                                                            'GetParent',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharToOemBuffW',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'CharUpperW',
                                                                                            'FindWindowExW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteExW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 88852,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 89088,
                                                                                       '.text\x00\x00\x00': 80384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/ed79e88bd6f0e5a6472b560e95df02e2a806b51791024bd0ef88e41badfd17f1'},
 'edacc966aade9677f5f0e8acfbe1221c632a66ea0d7ed953844bad3b37b699f0': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/edacc966aade9677f5f0e8acfbe1221c632a66ea0d7ed953844bad3b37b699f0'},
 'eed1f52569e1839586f5d70b09ce36873b081b0ce70f47b7bccf16a17edd561c': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 392372,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 392704,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/eed1f52569e1839586f5d70b09ce36873b081b0ce70f47b7bccf16a17edd561c'},
 'efd5f0db92b96994cfe87d71d30234132a5b5bd61dd9eb576f154e5474c41be4': {'AddressOfEntryPoint': 1073787261,
                                                                      'DebugRVA': 29792,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapDestroy',
                                                                                      'MSVCP80.dll': '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W@Z',
                                                                                      'MSVCR80.dll': '__setusermatherr',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'SetTimer',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['AllocConsole',
                                                                                            'GetCurrentThreadId',
                                                                                            'FreeConsole',
                                                                                            'InitializeCriticalSection',
                                                                                            'RaiseException',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'GetProcAddress',
                                                                                            'CreateProcessW',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'VirtualFreeEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'PostMessageW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'FindWindowW',
                                                                                            'FindWindowExW',
                                                                                            'OffsetRect',
                                                                                            'ClientToScreen',
                                                                                            'SendMessageW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'IsWindow',
                                                                                            'PostQuitMessage',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'SetTimer',
                                                                                            'CommandLineToArgvW',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            '??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PEB_W@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@PEB_W@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_CxxThrowException',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'freopen',
                                                                                            'memcpy_s',
                                                                                            '__iob_func',
                                                                                            '_vscwprintf',
                                                                                            'setlocale',
                                                                                            'memmove_s',
                                                                                            'fclose',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            'vswprintf_s',
                                                                                            '_purecall',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            'ldiv',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '_wtoi64',
                                                                                            '_wtoi',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            'wcsrchr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 121,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 712,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/efd5f0db92b96994cfe87d71d30234132a5b5bd61dd9eb576f154e5474c41be4'},
 'f0323b7e2e721504a0c4539cc02dd471fd5615bb0a913aa4bd0c105dffa22dab': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5055548,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5056000,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/f0323b7e2e721504a0c4539cc02dd471fd5615bb0a913aa4bd0c105dffa22dab'},
 'f106307a90b03b3b91721c9bf8f763ee3022c3a318d0df611c49450433f7fb1f': {'AddressOfEntryPoint': 43902,
                                                                      'DebugRVA': 5264,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'API-MS-WIN-Service-Core-L1-1-0.dll': 'SetServiceStatus',
                                                                                      'API-MS-WIN-Service-Management-L1-1-0.dll': 'CreateServiceW',
                                                                                      'API-MS-WIN-Service-winsvc-L1-1-0.dll': 'RegisterServiceCtrlHandlerW',
                                                                                      'API-MS-Win-Security-Base-L1-1-0.dll': 'IsValidSid',
                                                                                      'KERNEL32.dll': 'GetProcAddress',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'msvcrt.dll': '_initterm',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoInitialize',
                                                                                      'wbemcomn.dll': '??_7CUnkInternal@@6B@'},
                                                                      'ImportedFunctions': ['wcsstr',
                                                                                            'printf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_vsnwprintf',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_callnewh',
                                                                                            '_purecall',
                                                                                            'malloc',
                                                                                            '_CxxThrowException',
                                                                                            'free',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '_initterm',
                                                                                            '??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '??1CInCritSec@@QEAA@XZ',
                                                                                            '??1CCritSec@@QEAA@XZ',
                                                                                            '??4CNtSid@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '??0CNtSid@@QEAA@AEBV0@@Z',
                                                                                            '?GetDWORDStr@Registry@@QEAAHPEBGPEAK@Z',
                                                                                            '??1Registry@@QEAA@XZ',
                                                                                            '??0Registry@@QEAA@PEBGK@Z',
                                                                                            '??0CNtSid@@QEAA@PEAX@Z',
                                                                                            '?GetTextSid@CNtSid@@QEAAHPEAGPEAK@Z',
                                                                                            '??8CNtSid@@QEAAHAEAV0@@Z',
                                                                                            '??1CNtSid@@QEAA@XZ',
                                                                                            '??0CNtSid@@QEAA@W4SidType@0@@Z',
                                                                                            '?ErrorTrace@@YAHDPEBDZZ',
                                                                                            '?_ThrowMemoryException_@@YAXXZ',
                                                                                            '??0CCritSec@@QEAA@XZ',
                                                                                            '?Write@CMemoryLog@@QEAAXJ@Z',
                                                                                            '?GetMemLogObject@@YAPEAVCMemoryLog@@XZ',
                                                                                            '?InternalRelease@CUnkInternal@@QEAAKXZ',
                                                                                            '?InternalQueryInterface@CUnkInternal@@QEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?OnInitialize@CUnk@@UEAAHXZ',
                                                                                            '??0CUnkInternal@@QEAA@PEAVCLifeControl@@@Z',
                                                                                            '??1CUnkInternal@@UEAA@XZ',
                                                                                            '?QueryInterface@CUnkInternal@@UEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?AddRef@CUnkInternal@@UEAAKXZ',
                                                                                            '?Release@CUnkInternal@@UEAAKXZ',
                                                                                            '?Initialize@CUnk@@UEAAHXZ',
                                                                                            '?Release@CUnk@@UEAAKXZ',
                                                                                            '?AddRef@CUnk@@UEAAKXZ',
                                                                                            '?QueryInterface@CUnk@@UEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '??1CUnk@@UEAA@XZ',
                                                                                            '??0CUnk@@QEAA@PEAVCLifeControl@@PEAUIUnknown@@@Z',
                                                                                            '??_7CUnkInternal@@6B@',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'DeleteService',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CreateServiceW',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DebugBreak',
                                                                                            'lstrlenW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LCMapStringW',
                                                                                            'GetLastError',
                                                                                            'SetEvent',
                                                                                            'ExitProcess',
                                                                                            'CreateEventW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoRevertToSelf',
                                                                                            'CoImpersonateClient',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitialize',
                                                                                            'EqualSid',
                                                                                            'GetLengthSid',
                                                                                            'IsValidSid',
                                                                                            'TranslateMessage',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'GetMessageW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 126,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 28160,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 39936},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f106307a90b03b3b91721c9bf8f763ee3022c3a318d0df611c49450433f7fb1f'},
 'f18a6d3cf01c2f0d46fb23df3ed1e49c7e185b2796f8d54e184a6ea168da0bbd': {'AddressOfEntryPoint': 10380,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'HeapSize',
                                                                                      'SHELL32.dll': 'ShellExecuteA'},
                                                                      'ImportedFunctions': ['WriteFile',
                                                                                            'SetEndOfFile',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'VirtualAllocEx',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateRemoteThread',
                                                                                            'LoadLibraryA',
                                                                                            'VirtualFreeEx',
                                                                                            'WaitForSingleObject',
                                                                                            'SetLastError',
                                                                                            'CloseHandle',
                                                                                            'ReadProcessMemory',
                                                                                            'OpenProcess',
                                                                                            'GetLastError',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetFileAttributesW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateFileW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapFree',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'HeapSize',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ShellExecuteA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 532480,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 39424},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f18a6d3cf01c2f0d46fb23df3ed1e49c7e185b2796f8d54e184a6ea168da0bbd'},
 'f18fb26d15a28b2314cad232830aa15bd06e97c781ba2ab37a4146fc7cb04e05': {'AddressOfEntryPoint': 1074003813,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'CRYPT32.dll': 'CertOpenStore',
                                                                                      'KERNEL32.dll': 'GetConsoleMode',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'USER32.dll': 'DdeUninitialize',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WINTRUST.dll': 'WTHelperProvDataFromStateData',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['DdeCreateStringHandleW',
                                                                                            'DdeDisconnect',
                                                                                            'DdeGetLastError',
                                                                                            'DdeClientTransaction',
                                                                                            'DdeFreeStringHandle',
                                                                                            'DdeInitializeW',
                                                                                            'WaitForInputIdle',
                                                                                            'DdeConnect',
                                                                                            'DdeUninitialize',
                                                                                            'ShellExecuteExW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'StrStrIW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'GetLongPathNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetProcAddress',
                                                                                            'OpenProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'Sleep',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetVersionExA',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpA',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'GetSystemTime',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetACP',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'OpenThread',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapReAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertGetNameStringW',
                                                                                            'CertGetNameStringA',
                                                                                            'CryptMsgClose',
                                                                                            'CertCloseStore',
                                                                                            'CryptMsgUpdate',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CertOpenStore'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 148,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15664,
                                                                      'SectionNames': {'!\x19\x04\x00c\x00\x00\x00': 15872,
                                                                                       '.data\x00\x00\x00': 8192,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 47104,
                                                                                       '.text\x00\x00\x00': 173056},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f18fb26d15a28b2314cad232830aa15bd06e97c781ba2ab37a4146fc7cb04e05'},
 'f1bcd14143b9c4f4b35e38a486e5bc281c5104da5ae8bcde963c293e2a32cbc2': {'AddressOfEntryPoint': 12816,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetFileType',
                                                                                      'LZ32.dll': 'LZCopy',
                                                                                      'USER32.dll': 'wsprintfA'},
                                                                      'ImportedFunctions': ['GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetVersionExA',
                                                                                            'SetLastError',
                                                                                            'CopyFileA',
                                                                                            'SetEndOfFile',
                                                                                            'LoadLibraryA',
                                                                                            'SetFilePointer',
                                                                                            'SetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'MoveFileExA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetLastError',
                                                                                            'ReadFile',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyA',
                                                                                            'GetLocalTime',
                                                                                            'RemoveDirectoryA',
                                                                                            'OutputDebugStringA',
                                                                                            'InitializeCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'Sleep',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'wvsprintfA',
                                                                                            'wsprintfA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'LZOpenFileA',
                                                                                            'LZClose',
                                                                                            'LZCopy'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 89,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 14336,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 38400},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f1bcd14143b9c4f4b35e38a486e5bc281c5104da5ae8bcde963c293e2a32cbc2'},
 'f1c8f2a783fc891800db4054c1096b77f3908a7db2cdf255d36a6731d96a09de': {'AddressOfEntryPoint': 4186,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 233992,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'OpenSemaphoreW'},
                                                                      'ImportedFunctions': ['VirtualAlloc',
                                                                                            'ExitVDM',
                                                                                            'OpenSemaphoreW'],
                                                                      'LinkerVersion': 4,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 3,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.reloc\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 28672,
                                                                                       'BSS\x00\x00\x00\x00\x00': 201728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f1c8f2a783fc891800db4054c1096b77f3908a7db2cdf255d36a6731d96a09de'},
 'f20b6dd67a16ed8ff9ca5db8bb4581d32b2f4c11951b20fb798de502db8390e5': {'AddressOfEntryPoint': 19460,
                                                                      'DebugRVA': 60528,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NDIS.SYS': 'NdisRetreatNetBufferListDataStart',
                                                                                      'fwpkclnt.sys': 'FwpmFilterAdd0',
                                                                                      'ntoskrnl.exe': 'SeReportSecurityEventWithSubCategory'},
                                                                      'ImportedFunctions': ['MmGetSystemRoutineAddress',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'IofCompleteRequest',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlCompareMemory',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'IoCreateDevice',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'ObSetSecurityObjectByPointer',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'IoDeleteDevice',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'KeAcquireInStackQueuedSpinLock',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'ExQueryDepthSList',
                                                                                            'PsGetCurrentProcessId',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'KeInitializeSpinLock',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'EtwUnregister',
                                                                                            'RtlCreateAcl',
                                                                                            'IoWMIWriteEvent',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'EtwWrite',
                                                                                            'EtwRegister',
                                                                                            'KeReleaseInStackQueuedSpinLock',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExFreePoolWithTag',
                                                                                            'RtlLengthSid',
                                                                                            'SeAccessCheck',
                                                                                            'SeLockSubjectContext',
                                                                                            'IoGetFileObjectGenericMapping',
                                                                                            'ZwOpenProcessTokenEx',
                                                                                            'SeReleaseSubjectContext',
                                                                                            'SeCaptureSubjectContext',
                                                                                            'ZwClose',
                                                                                            'ZwSetInformationThread',
                                                                                            'ZwDuplicateToken',
                                                                                            'ZwDuplicateObject',
                                                                                            'SeUnlockSubjectContext',
                                                                                            'ZwOpenProcess',
                                                                                            'KeSetEvent',
                                                                                            'KeInitializeEvent',
                                                                                            'PsCreateSystemThread',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'KeWaitForSingleObject',
                                                                                            'ObfDereferenceObject',
                                                                                            'KeWaitForMultipleObjects',
                                                                                            'SeSetAuditParameter',
                                                                                            'SeReportSecurityEventWithSubCategory',
                                                                                            'FwpsFlowAssociateContext0',
                                                                                            'FwpsCalloutUnregisterByKey0',
                                                                                            'FwpiCalloutRegisterAndAddWithoutDevice0',
                                                                                            'FwpmEngineOpen0',
                                                                                            'FwpmEngineClose0',
                                                                                            'FwpsCalloutRegisterWithoutDevice0',
                                                                                            'FwpmFilterAdd0',
                                                                                            'NdisAdvanceNetBufferListDataStart',
                                                                                            'NdisGetDataBuffer',
                                                                                            'NdisRetreatNetBufferListDataStart'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 67,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 56832,
                                                                                       'INIT\x00\x00\x00\x00': 2560,
                                                                                       'PAGE\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/f20b6dd67a16ed8ff9ca5db8bb4581d32b2f4c11951b20fb798de502db8390e5'},
 'f21e9ca8169b6ce332afccbbd8bee5cec9b0081f65f6788406c6f45c03e6a968': {'AddressOfEntryPoint': 401014,
                                                                      'DebugRVA': 238688,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 237568,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'FindFirstFileW',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'LoadLibraryExW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'FindNextFileW',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcpyW',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileW',
                                                                                            'CreateFileA',
                                                                                            'GetLocaleInfoW',
                                                                                            'ReadFile',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCPInfo',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'RtlVirtualUnwind',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'WriteFile',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSize',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'MessageBoxW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'OleUninitialize',
                                                                                            'CoInitialize',
                                                                                            'OleInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 110,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 20992,
                                                                                       '.pdata\x00\x00': 16384,
                                                                                       '.rdata\x00\x00': 85504,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 231936,
                                                                                       'qpgueml\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f21e9ca8169b6ce332afccbbd8bee5cec9b0081f65f6788406c6f45c03e6a968'},
 'f26a9a6a65bacb457abe25895e5713c7459e8f91add60584be460a8ee4858a62': {'AddressOfEntryPoint': 28680,
                                                                      'DebugRVA': 16720,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'XENUTIL.SYS': 'XmSpawnThread',
                                                                                      'ntoskrnl.exe': 'IoAcquireRemoveLockEx',
                                                                                      'xevtchn.sys': 'EvtchnSetupDebugCallback'},
                                                                      'ImportedFunctions': ['ExDeleteNPagedLookasideList',
                                                                                            'IofCallDriver',
                                                                                            'KeInitializeEvent',
                                                                                            'IoReleaseRemoveLockEx',
                                                                                            'IoDetachDevice',
                                                                                            'PoSetPowerState',
                                                                                            'InitSafeBootMode',
                                                                                            'PoStartNextPowerIrp',
                                                                                            'IofCompleteRequest',
                                                                                            'KeSetEvent',
                                                                                            'KeWaitForSingleObject',
                                                                                            'IoFreeIrp',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'MmGetPhysicalAddress',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'ExQueryDepthSList',
                                                                                            'KeBugCheckEx',
                                                                                            'IoDeleteDevice',
                                                                                            'IoCreateDevice',
                                                                                            'IoInitializeRemoveLockEx',
                                                                                            'ExInitializeNPagedLookasideList',
                                                                                            'IoAllocateIrp',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'PoCallDriver',
                                                                                            'IoAttachDeviceToDeviceStack',
                                                                                            'IoReleaseRemoveLockAndWaitEx',
                                                                                            'IoAcquireRemoveLockEx',
                                                                                            'EvtchnReleaseDebugCallback',
                                                                                            'EvtchnSetupDebugCallback',
                                                                                            '_XmAssertFail',
                                                                                            '___XenTrace',
                                                                                            'XmThreadWait',
                                                                                            '_XmBug',
                                                                                            'XmKillThread',
                                                                                            'XmFreeMemory',
                                                                                            '_XmAllocateMemory',
                                                                                            '_XmBugCheck',
                                                                                            'XmSpawnThread'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 39,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 8704,
                                                                                       'INIT\x00\x00\x00\x00': 1536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/f26a9a6a65bacb457abe25895e5713c7459e8f91add60584be460a8ee4858a62'},
 'f278cb2e5c34a75a2f5e57ffb4c8a9a52bc8abad537a61f481730be0c0b13d40': {'AddressOfEntryPoint': 1073974324,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStringTypeA',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceRegistryPropertyW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['SetupDiDestroyDeviceInfoList',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'FlsSetValue',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'HeapReAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeA',
                                                                                            'wsprintfW',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathRenameExtensionW',
                                                                                            'SHGetValueW',
                                                                                            'PathCombineW',
                                                                                            'PathAppendW',
                                                                                            'PathFileExistsW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1316,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f278cb2e5c34a75a2f5e57ffb4c8a9a52bc8abad537a61f481730be0c0b13d40'},
 'f2e68e0d707fd7c7430c3fd4175ea2bc5a6a7b178885b57800459ff8af0abe5c': {'AddressOfEntryPoint': 107836,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 602112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'SafeArrayAllocData',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetStringTypeW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'LockResource',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsCharLowerW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'GetClipboardData',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'IsMenu',
                                                                                            'CloseClipboard',
                                                                                            'CloseWindowStation',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMessageW',
                                                                                            'IsWindow',
                                                                                            'DeleteObject',
                                                                                            'AngleArc',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'LineTo',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'LockServiceDatabase',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegCloseKey',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'IIDFromString',
                                                                                            'VarR8FromDec',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'DispCallFunc',
                                                                                            'CreateStdDispatch',
                                                                                            'CreateDispTypeInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'OleLoadPicture',
                                                                                            'GetActiveObject',
                                                                                            'QueryPathOfRegTypeLib',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayAllocData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 519,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 149952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 150016,
                                                                                       '.text\x00\x00\x00': 596992,
                                                                                       'data\x00\x00\x00\x00': 18944,
                                                                                       'text\x00\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/f2e68e0d707fd7c7430c3fd4175ea2bc5a6a7b178885b57800459ff8af0abe5c'},
 'f307939244103caadc4a73c86667ec6e601fa082b56a734b723fc7edcdb9b4a6': {'AddressOfEntryPoint': 84396,
                                                                      'DebugRVA': 103552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                      'KERNEL32.dll': 'GetCommandLineA',
                                                                                      'MSVCP90.dll': '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                      'MSVCR90.dll': 'memcpy',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'GetMessageA'},
                                                                      'ImportedFunctions': ['WriteFile',
                                                                                            'OpenProcess',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeA',
                                                                                            'ResetEvent',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcessId',
                                                                                            'PeekNamedPipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'CreateSemaphoreA',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'LocalAlloc',
                                                                                            'TlsGetValue',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'SHGetFileInfoW',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAX_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'strtok_s',
                                                                                            '_wsplitpath_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wcslwr_s',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            'wcslen',
                                                                                            '_strdup',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcstok_s',
                                                                                            'memcpy',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 30208,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 94720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f307939244103caadc4a73c86667ec6e601fa082b56a734b723fc7edcdb9b4a6'},
 'f32b01499bfea3cbe329958c26e9c0ef5e9b846b5d902a37abe87e11b1dcdea6': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 396228,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 396288,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/f32b01499bfea3cbe329958c26e9c0ef5e9b846b5d902a37abe87e11b1dcdea6'},
 'f3941074c899374b4b8c538d2fd93bcf7351686c3178e083271a8df919b611ae': {'AddressOfEntryPoint': 119932,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 618496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorDacl',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'SetViewportOrgEx',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'MPR.dll': 'WNetUseConnectionW',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINMM.dll': 'mciSendStringW',
                                                                                      'WSOCK32.dll': 'recv',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['__WSAFDIsSet',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'htons',
                                                                                            'select',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'WSACleanup',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'recv',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'waveOutSetVolume',
                                                                                            'mciSendStringW',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetUseConnectionW',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'FtpOpenFileW',
                                                                                            'FtpGetFileSize',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetQueryOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcessModules',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW',
                                                                                            'HeapAlloc',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'MulDiv',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenProcess',
                                                                                            'VirtualAllocEx',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetSystemPowerState',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceNamesW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetProcessHeap',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'CreatePipe',
                                                                                            'TerminateThread',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'VirtualFree',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateHardLinkW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSize',
                                                                                            'GlobalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'Beep',
                                                                                            'GetComputerNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessIoCounters',
                                                                                            'CreateProcessW',
                                                                                            'SetPriorityClass',
                                                                                            'LoadLibraryW',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetFilePointer',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetLocalTime',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsCharLowerW',
                                                                                            'IsCharUpperW',
                                                                                            'GetMenuStringW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'IsZoomed',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetWindowLongW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'FlashWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'FrameRect',
                                                                                            'DrawFrameControl',
                                                                                            'FillRect',
                                                                                            'PtInRect',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetCursor',
                                                                                            'GetWindowDC',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'RedrawWindow',
                                                                                            'DrawMenuBar',
                                                                                            'DestroyMenu',
                                                                                            'SetMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CreateMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DefDlgProcW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'WindowFromPoint',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'CharLowerBuffW',
                                                                                            'MonitorFromRect',
                                                                                            'LoadImageW',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'mouse_event',
                                                                                            'ExitWindowsEx',
                                                                                            'SetActiveWindow',
                                                                                            'FindWindowExW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetMenuDefaultItem',
                                                                                            'InsertMenuItemW',
                                                                                            'IsMenu',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'GetCursorPos',
                                                                                            'DeleteMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'FindWindowW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'keybd_event',
                                                                                            'SendInput',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyState',
                                                                                            'VkKeyScanW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBeep',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CopyRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetMenu',
                                                                                            'DestroyWindow',
                                                                                            'EnumWindows',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'GetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumChildWindows',
                                                                                            'CharUpperBuffW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendMessageW',
                                                                                            'MapVirtualKeyW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetUserObjectSecurity',
                                                                                            'GetUserObjectSecurity',
                                                                                            'CloseDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'IsCharAlphaW',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'ClientToScreen',
                                                                                            'RegisterHotKey',
                                                                                            'GetCursorInfo',
                                                                                            'SetWindowPos',
                                                                                            'CopyImage',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CountClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetClipboardData',
                                                                                            'OpenDesktopW',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'SetFocus',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBoxA',
                                                                                            'DestroyIcon',
                                                                                            'OpenClipboard',
                                                                                            'BlockInput',
                                                                                            'GetMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'ExtCreatePen',
                                                                                            'StrokeAndFillPath',
                                                                                            'StrokePath',
                                                                                            'EndPath',
                                                                                            'SetPixel',
                                                                                            'CloseFigure',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'LineTo',
                                                                                            'AngleArc',
                                                                                            'MoveToEx',
                                                                                            'Ellipse',
                                                                                            'PolyDraw',
                                                                                            'BeginPath',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'RoundRect',
                                                                                            'SetBkColor',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'GetPixel',
                                                                                            'DeleteDC',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetUserNameW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LogonUserW',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DragQueryPoint',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'SHEmptyRecycleBinW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ExtractIconExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'DragFinish',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'MkParseDisplayName',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'StringFromIID',
                                                                                            'OleInitialize',
                                                                                            'CreateBindCtx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayAllocDescriptorEx',
                                                                                            'SysAllocString',
                                                                                            'OleLoadPicture',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'LoadRegTypeLib',
                                                                                            'GetActiveObject',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VarR8FromDec'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 517,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 34636,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30208,
                                                                                       '.pdata\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 88064,
                                                                                       '.rsrc\x00\x00\x00': 34816,
                                                                                       '.text\x00\x00\x00': 613376},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/malware/f3941074c899374b4b8c538d2fd93bcf7351686c3178e083271a8df919b611ae'},
 'f3a1b6ccf1574590fae51100bcfa8a11938f77abe40820cfc483cc8999c0e850': {'AddressOfEntryPoint': 245776,
                                                                      'DebugRVA': 62784,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 241664,
                                                                      'ExportSize': 54,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ksecdd.sys': 'GetSecurityUserInfo',
                                                                                      'ntoskrnl.exe': 'ExReleaseFastMutex'},
                                                                      'ImportedFunctions': ['ExInitializeNPagedLookasideList',
                                                                                            'KeInitializeEvent',
                                                                                            'IofCompleteRequest',
                                                                                            'ObfDereferenceObject',
                                                                                            'IoDeleteSymbolicLink',
                                                                                            'RtlInitUnicodeString',
                                                                                            'ExInitializeResourceLite',
                                                                                            '__C_specific_handler',
                                                                                            'IoCreateSymbolicLink',
                                                                                            'ExReleaseResourceLite',
                                                                                            'ExAcquireResourceExclusiveLite',
                                                                                            'KeSetEvent',
                                                                                            'KeLeaveCriticalRegion',
                                                                                            'KeEnterCriticalRegion',
                                                                                            'IoIsOperationSynchronous',
                                                                                            'IoSetTopLevelIrp',
                                                                                            'IoGetTopLevelIrp',
                                                                                            'ExpInterlockedPushEntrySList',
                                                                                            'ExQueryDepthSList',
                                                                                            'DbgPrint',
                                                                                            'ExpInterlockedPopEntrySList',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'FsRtlIsNameInExpression',
                                                                                            'FsRtlDoesNameContainWildCards',
                                                                                            'IoReleaseCancelSpinLock',
                                                                                            'KeWaitForSingleObject',
                                                                                            'KeClearEvent',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwClose',
                                                                                            'ZwOpenKey',
                                                                                            'KeBugCheckEx',
                                                                                            'KeReleaseSpinLock',
                                                                                            'KeAcquireSpinLockRaiseToDpc',
                                                                                            'IoGetStackLimits',
                                                                                            'MmGetSystemRoutineAddress',
                                                                                            'KeReleaseMutex',
                                                                                            'ExReleaseFastMutexUnsafe',
                                                                                            'ExAcquireFastMutexUnsafe',
                                                                                            'IoCreateDevice',
                                                                                            'IoDeleteDevice',
                                                                                            'IoGetCurrentProcess',
                                                                                            'KeInitializeMutex',
                                                                                            'ExAllocatePoolWithTag',
                                                                                            'ExFreePool',
                                                                                            'IoWMIRegistrationControl',
                                                                                            'ExDeleteNPagedLookasideList',
                                                                                            'ExDeleteResourceLite',
                                                                                            'IoUnregisterFileSystem',
                                                                                            'FsRtlDeregisterUncProvider',
                                                                                            'IoRegisterFileSystem',
                                                                                            'FsRtlRegisterUncProvider',
                                                                                            'SeReleaseSubjectContext',
                                                                                            'SeCaptureSubjectContext',
                                                                                            'SeQueryAuthenticationIdToken',
                                                                                            'ExAcquireResourceSharedLite',
                                                                                            'IoCheckEaBufferValidity',
                                                                                            'FsRtlIsNtstatusExpected',
                                                                                            'CcUninitializeCacheMap',
                                                                                            'IoRemoveShareAccess',
                                                                                            'FsRtlFastUnlockAll',
                                                                                            'IoGetRequestorProcess',
                                                                                            'FsRtlFastUnlockSingle',
                                                                                            'ExSetResourceOwnerPointer',
                                                                                            'FsRtlProcessFileLock',
                                                                                            'RtlCreateUnicodeString',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'ZwQuerySymbolicLinkObject',
                                                                                            'ZwOpenSymbolicLinkObject',
                                                                                            'ZwOpenDirectoryObject',
                                                                                            'MmCanFileBeTruncated',
                                                                                            'ExFreePoolWithTag',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ProbeForWrite',
                                                                                            'ProbeForRead',
                                                                                            'RtlCompareMemory',
                                                                                            'ExConvertExclusiveToSharedLite',
                                                                                            'MmMapLockedPagesSpecifyCache',
                                                                                            'CcSetFileSizes',
                                                                                            'CcInitializeCacheMap',
                                                                                            'FsRtlNormalizeNtstatus',
                                                                                            'ExRaiseStatus',
                                                                                            'MmFlushImageSection',
                                                                                            'ExAcquireFastMutex',
                                                                                            'ExInterlockedAddUlong',
                                                                                            'KeResetEvent',
                                                                                            'CcPrepareMdlWrite',
                                                                                            'CcCopyWrite',
                                                                                            'CcSetReadAheadGranularity',
                                                                                            'FsRtlCheckLockForWriteAccess',
                                                                                            'CcPurgeCacheSection',
                                                                                            'CcFlushCache',
                                                                                            'ExIsResourceAcquiredExclusiveLite',
                                                                                            'ExIsResourceAcquiredSharedLite',
                                                                                            'CcDeferWrite',
                                                                                            'CcCanIWrite',
                                                                                            'CcMdlRead',
                                                                                            'CcCopyRead',
                                                                                            'CcSetAdditionalCacheAttributes',
                                                                                            'FsRtlCheckLockForReadAccess',
                                                                                            'FsRtlPostStackOverflow',
                                                                                            'MmForceSectionClosed',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'SeQuerySessionIdToken',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'IoUpdateShareAccess',
                                                                                            'IoSetShareAccess',
                                                                                            'IoCheckShareAccess',
                                                                                            'PsGetProcessImageFileName',
                                                                                            'IoRaiseInformationalHardError',
                                                                                            'ExQueueWorkItem',
                                                                                            'CcMdlReadComplete',
                                                                                            'CcMdlWriteComplete',
                                                                                            'ObReferenceObjectByHandle',
                                                                                            'IoFileObjectType',
                                                                                            'FsRtlFastCheckLockForWrite',
                                                                                            'FsRtlFastCheckLockForRead',
                                                                                            'IoWriteErrorLogEntry',
                                                                                            'IoAllocateErrorLogEntry',
                                                                                            'KeQueryTimeIncrement',
                                                                                            'FsRtlInitializeFileLock',
                                                                                            'SeTokenIsRestricted',
                                                                                            'SeQueryInformationToken',
                                                                                            'FsRtlUninitializeFileLock',
                                                                                            'IoFreeMdl',
                                                                                            'MmProbeAndLockPages',
                                                                                            'IoAllocateMdl',
                                                                                            'PsCreateSystemThread',
                                                                                            'PsTerminateSystemThread',
                                                                                            'ObReferenceObjectByPointer',
                                                                                            'PsThreadType',
                                                                                            'KeInsertQueue',
                                                                                            'KeRemoveQueue',
                                                                                            'KeInitializeQueue',
                                                                                            'KeRundownQueue',
                                                                                            'PsIsThreadTerminating',
                                                                                            'RtlGetVersion',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'MmQuerySystemSize',
                                                                                            'ExAllocatePoolWithTagPriority',
                                                                                            'ExAcquireSharedWaitForExclusive',
                                                                                            'ExAcquireSharedStarveExclusive',
                                                                                            'RtlUpcaseUnicodeChar',
                                                                                            'MmUnlockPages',
                                                                                            'KeCancelTimer',
                                                                                            'KeSetTimer',
                                                                                            'KeReleaseSpinLockFromDpcLevel',
                                                                                            'KeAcquireSpinLockAtDpcLevel',
                                                                                            'KeInitializeTimer',
                                                                                            'KeInitializeDpc',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'IoAllocateIrp',
                                                                                            'IoFreeIrp',
                                                                                            'IoCancelIrp',
                                                                                            'IofCallDriver',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlAnsiCharToUnicodeChar',
                                                                                            'CcFastCopyWrite',
                                                                                            'CcZeroData',
                                                                                            'IoGetRelatedDeviceObject',
                                                                                            'CcFastCopyRead',
                                                                                            'ExReleaseResourceForThreadLite',
                                                                                            'ExReleaseFastMutex',
                                                                                            'GetSecurityUserInfo'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 872,
                                                                      'SectionNames': {'\x00Z\x03\x00oc\x00\x00': 1024,
                                                                                       '.data\x00\x00\x00': 2048,
                                                                                       '.edata\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 19456,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 56832,
                                                                                       'INIT\x00\x00\x00\x00': 7168,
                                                                                       'PAGE\x00\x00\x00\x00': 125952},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/f3a1b6ccf1574590fae51100bcfa8a11938f77abe40820cfc483cc8999c0e850'},
 'f492a8b86bbd70975cd524c4ac45df283ea42c280a9423911405824d27a07942': {'AddressOfEntryPoint': 7408,
                                                                      'DebugRVA': 41696,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers'},
                                                                      'ImportedFunctions': ['WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'CreateProcessA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapFree',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'HeapSize',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCloseKey'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 50100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 50176,
                                                                                       '.text\x00\x00\x00': 36352},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f492a8b86bbd70975cd524c4ac45df283ea42c280a9423911405824d27a07942'},
 'f493057440e28d88dac057c92b21b47a6e729fbaf19e8fe4374a23793a5df755': {'AddressOfEntryPoint': 50000,
                                                                      'DebugRVA': 5440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2403636,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2320896,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/f493057440e28d88dac057c92b21b47a6e729fbaf19e8fe4374a23793a5df755'},
 'f65a6c764b773dbe55a8dc0b5a992b55e0b3621bf11081ffb273d71eece10641': {'AddressOfEntryPoint': 51236,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2621272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2621440,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/f65a6c764b773dbe55a8dc0b5a992b55e0b3621bf11081ffb273d71eece10641'},
 'f89e7192d08324b8d1f9669d5ad22cf3e3331c3b8a31d73008378c74c3a1f1c9': {'AddressOfEntryPoint': 74080,
                                                                      'DebugRVA': 25312,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'jli.dll': 'JLI_MemFree',
                                                                                      'msvcrt.dll': '_strnicmp'},
                                                                      'ImportedFunctions': ['JLI_ExactVersionId',
                                                                                            'JLI_JarUnpackFile',
                                                                                            'JLI_StringDup',
                                                                                            'JLI_ParseManifest',
                                                                                            'JLI_ValidVersionString',
                                                                                            'JLI_AcceptableRelease',
                                                                                            'JLI_FreeManifest',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_MemFree',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            '_beginthreadex',
                                                                                            '_putenv',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'fflush',
                                                                                            '_errno',
                                                                                            'strerror',
                                                                                            'strchr',
                                                                                            'fgets',
                                                                                            'strcspn',
                                                                                            'strspn',
                                                                                            'strrchr',
                                                                                            'fopen',
                                                                                            'fwrite',
                                                                                            'fread',
                                                                                            'fclose',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'memset',
                                                                                            'getenv',
                                                                                            'strcmp',
                                                                                            'exit',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'printf',
                                                                                            'sprintf',
                                                                                            'memcpy',
                                                                                            'strncmp',
                                                                                            'sscanf',
                                                                                            'strlen',
                                                                                            '_access',
                                                                                            '_stat',
                                                                                            '_strnicmp',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'LocalFree',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetExitCodeProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetExitCodeThread',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 17408,
                                                                                       'xxknhhm\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/f89e7192d08324b8d1f9669d5ad22cf3e3331c3b8a31d73008378c74c3a1f1c9'},
 'f9b4f1787b1d8eb87fd1f0192ce96f70aa227addd6a30ec2a31160d1caba35bc': {'AddressOfEntryPoint': 151568,
                                                                      'DebugRVA': 127152,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 126976,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'NTOSKRNL.exe': 'KeBugCheckEx',
                                                                                      'storport.sys': 'StorPortNotification'},
                                                                      'ImportedFunctions': ['StorPortGetUncachedExtension',
                                                                                            'StorPortStallExecution',
                                                                                            'StorPortSetBusDataByOffset',
                                                                                            'StorPortLogError',
                                                                                            'StorPortGetBusData',
                                                                                            'StorPortGetDeviceBase',
                                                                                            'StorPortSynchronizeAccess',
                                                                                            'StorPortGetPhysicalAddress',
                                                                                            'StorPortCompleteRequest',
                                                                                            'StorPortResume',
                                                                                            'StorPortPause',
                                                                                            'StorPortGetLogicalUnit',
                                                                                            'StorPortBusy',
                                                                                            'StorPortInitialize',
                                                                                            'StorPortSetDeviceQueueDepth',
                                                                                            'StorPortReady',
                                                                                            'StorPortGetScatterGatherList',
                                                                                            'StorPortNotification',
                                                                                            'KeBugCheckEx'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 19,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 119808,
                                                                                       'INIT\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/f9b4f1787b1d8eb87fd1f0192ce96f70aa227addd6a30ec2a31160d1caba35bc'},
 'f9e4b51cf668410226769506c9aef59d613d32de3aed980d501a39b39770ce70': {'AddressOfEntryPoint': 1249872,
                                                                      'DebugRVA': 968120,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 1241088,
                                                                      'ExportSize': 73,
                                                                      'IATRVA': 970752,
                                                                      'ImageBase': 65536,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 992,
                                                                      'SectionNames': {'\x00\x08\x12\x00oc\x00\x00': 2560,
                                                                                       '.data\x00\x00\x00': 50688,
                                                                                       '.edata\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 55296,
                                                                                       '.rdata\x00\x00': 96768,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 964608,
                                                                                       'INIT\x00\x00\x00\x00': 17408,
                                                                                       'PAGE\x00\x00\x00\x00': 3072,
                                                                                       'PAGECONS': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/malware/f9e4b51cf668410226769506c9aef59d613d32de3aed980d501a39b39770ce70'},
 'fab80c8daa62c97bbb4cac1520a95c25b6cb755fbd181437feb2e51ead19b368': {'AddressOfEntryPoint': 1074123741,
                                                                      'DebugRVA': 219760,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 217088,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'FlsAlloc',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SETUPAPI.dll': 'SetupDiGetClassDevsW',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter'},
                                                                      'ImportedFunctions': ['SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapReAlloc',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GlobalFlags',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetThreadLocale',
                                                                                            'lstrlenA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcessId',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetCurrentThread',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetVersion',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'lstrcmpA',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeResource',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcmpW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExA',
                                                                                            'SetLastError',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'lstrlenW',
                                                                                            'MulDiv',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExW',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WaitForMultipleObjects',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'FlsAlloc',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'TabbedTextOutW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'DestroyMenu',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SetCursor',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'ValidateRect',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'IsDialogMessageW',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapW',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetActiveWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'IsWindowEnabled',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongPtrW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetFocus',
                                                                                            'IsWindow',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'SetActiveWindow',
                                                                                            'DispatchMessageW',
                                                                                            'GetDlgItem',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageW',
                                                                                            'MapWindowPoints',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetKeyState',
                                                                                            'IsWindowVisible',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassW',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'CopyRect',
                                                                                            'PtInRect',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'UnregisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'GetWindowRect',
                                                                                            'GetMenuState',
                                                                                            'GetSysColorBrush',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'WinHelpW',
                                                                                            'ClientToScreen',
                                                                                            'DestroyIcon',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadMenuW',
                                                                                            'SetWindowPos',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'IsIconic',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'SetTimer',
                                                                                            'RemoveMenu',
                                                                                            'KillTimer',
                                                                                            'SetMenuDefaultItem',
                                                                                            'ModifyMenuW',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetWindowTextW',
                                                                                            'GetMenuItemID',
                                                                                            'DrawIcon',
                                                                                            'GetMenuItemCount',
                                                                                            'LoadIconW',
                                                                                            'GetSubMenu',
                                                                                            'GetCursorPos',
                                                                                            'GetClientRect',
                                                                                            'SendMessageW',
                                                                                            'FindWindowExW',
                                                                                            'GetClassInfoW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetParent',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindow',
                                                                                            'EnableWindow',
                                                                                            'PostMessageW',
                                                                                            'GetTopWindow',
                                                                                            'UnregisterClassA',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'TextOutW',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'SetMapMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'ExtTextOutW',
                                                                                            'CreateBitmap',
                                                                                            'GetObjectW',
                                                                                            'DocumentPropertiesW',
                                                                                            'OpenPrinterW',
                                                                                            'ClosePrinter',
                                                                                            'RegEnumKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFindExtensionW',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 288,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 72860,
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/fab80c8daa62c97bbb4cac1520a95c25b6cb755fbd181437feb2e51ead19b368'},
 'fd353ce31912ea745bf0b47144171a5700b128664711adfdd007577cf087e546': {'AddressOfEntryPoint': 6656,
                                                                      'DebugRVA': 8800,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSecurityDescriptorSacl',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCR80.dll': 'memset',
                                                                                      'USER32.dll': 'PostQuitMessage'},
                                                                      'ImportedFunctions': ['CreateFileMappingW',
                                                                                            'GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'wcsstr',
                                                                                            'memset'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 48484,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 48640,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/fd353ce31912ea745bf0b47144171a5700b128664711adfdd007577cf087e546'},
 'fde7f22dcebcfbedafd5daecba1dc9952ff51c0ee433164b5509ec67aeb04d87': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 344936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 345088,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/fde7f22dcebcfbedafd5daecba1dc9952ff51c0ee433164b5509ec67aeb04d87'},
 'fee18f402375b210fc7b89e29084fb8e478d5ee0f0cdb85d4618d14abb2e5197': {'AddressOfEntryPoint': 72752,
                                                                      'DebugRVA': 79760,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegUnLoadKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'MPR.dll': 'WNetEnumResourceA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'WS2_32.dll': 'WSAGetLastError',
                                                                                      'comdlg32.dll': 'GetOpenFileNameA',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['WNetCloseEnum',
                                                                                            'WNetOpenEnumA',
                                                                                            'WNetEnumResourceA',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_mbsicmp',
                                                                                            '_purecall',
                                                                                            'qsort',
                                                                                            '_strlwr',
                                                                                            '_itoa',
                                                                                            '_c_exit',
                                                                                            'strtoul',
                                                                                            'strcmp',
                                                                                            '_memicmp',
                                                                                            'strchr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'strlen',
                                                                                            'atoi',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strcmpi',
                                                                                            'memcpy',
                                                                                            'atof',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'strcpy',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'sprintf',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'ImageList_Create',
                                                                                            'CreateToolbarEx',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'gethostbyname',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'connect',
                                                                                            'WSAAsyncSelect',
                                                                                            'gethostbyaddr',
                                                                                            'closesocket',
                                                                                            'WSASetLastError',
                                                                                            'htons',
                                                                                            'WSAGetLastError',
                                                                                            'OpenProcess',
                                                                                            'CreateThread',
                                                                                            'ResumeThread',
                                                                                            'ReadProcessMemory',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeleteFileA',
                                                                                            'SetErrorMode',
                                                                                            'GetStdHandle',
                                                                                            'EnumResourceNamesA',
                                                                                            'GetStartupInfoA',
                                                                                            'FormatMessageA',
                                                                                            'CreateFileA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GlobalAlloc',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryExA',
                                                                                            'FindFirstFileA',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetDateFormatA',
                                                                                            'GlobalUnlock',
                                                                                            'FindNextFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetFileSize',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareFileTime',
                                                                                            'GetLogicalDrives',
                                                                                            'GetComputerNameA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'GlobalLock',
                                                                                            'GetTimeFormatA',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'BeginDeferWindowPos',
                                                                                            'TrackPopupMenu',
                                                                                            'KillTimer',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyMenu',
                                                                                            'PostQuitMessage',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'ModifyMenuA',
                                                                                            'LoadMenuA',
                                                                                            'GetWindowTextA',
                                                                                            'GetMenuItemInfoA',
                                                                                            'TranslateMessage',
                                                                                            'DeferWindowPos',
                                                                                            'IsDialogMessageA',
                                                                                            'SetTimer',
                                                                                            'DispatchMessageA',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetFocus',
                                                                                            'EndDeferWindowPos',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'CreateWindowExA',
                                                                                            'SetDlgItemInt',
                                                                                            'SetDlgItemTextA',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'PostMessageA',
                                                                                            'SetMenu',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetWindowPos',
                                                                                            'DefWindowProcA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowPlacement',
                                                                                            'SendMessageA',
                                                                                            'RegisterClassA',
                                                                                            'LoadImageA',
                                                                                            'LoadIconA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'InvalidateRect',
                                                                                            'ReleaseDC',
                                                                                            'OpenClipboard',
                                                                                            'GetClassNameA',
                                                                                            'CloseClipboard',
                                                                                            'GetParent',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringA',
                                                                                            'GetMenu',
                                                                                            'MoveWindow',
                                                                                            'GetCursorPos',
                                                                                            'GetDC',
                                                                                            'CheckMenuItem',
                                                                                            'GetSysColor',
                                                                                            'EnumChildWindows',
                                                                                            'SetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'EnableWindow',
                                                                                            'EmptyClipboard',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'DestroyWindow',
                                                                                            'GetMessageA',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'FindTextA',
                                                                                            'GetSaveFileNameA',
                                                                                            'GetOpenFileNameA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegConnectRegistryA',
                                                                                            'RegLoadKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegUnLoadKeyA',
                                                                                            'ShellExecuteA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 216,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 13264,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 70144},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/malware/fee18f402375b210fc7b89e29084fb8e478d5ee0f0cdb85d4618d14abb2e5197'},
 'fef17c9f848a3d291aa2070105bbbc143bb48ffd4c1fdfac24b1eea39782c0de': {'AddressOfEntryPoint': 51656,
                                                                      'DebugRVA': 5424,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_initterm'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceA',
                                                                                            'SetFilePointer',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            '_llseek',
                                                                                            'lstrcmpA',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowLongPtrA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrA',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 412204,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 412672,
                                                                                       '.text\x00\x00\x00': 55296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/malware/fef17c9f848a3d291aa2070105bbbc143bb48ffd4c1fdfac24b1eea39782c0de'}}

[*] Completed Malware PE information extraction:

In [7]:
for subdir, dirs, files in os.walk("./data/clean/"):
        for f in files:
            print(f)
            os.rename("./data/clean/"+f, "./data/clean/"+sha256_checksum("./data/clean/"+f))

print("Done Renaming files to sha256")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 Renaming files to sha256
In [8]:
ds_clean = {}
ds_clean = pe2vec("./data/clean")
print("")
print("[*] Clean PE information:")
print("")
pp.pprint(ds_clean)

print("")
print("[*] Completed Clean PE information extraction:")
print("")
[*] Extracting the PE file data: 

[+] ./data/clean/8bc59a8a3d5a8631f2256d4b421165b1c4f517ac3b66a22251ca2f6956977a28
[+] ./data/clean/fcbace1dac76aa93ad80549dd6c172b7f64562c68edd5f0065e32d39609f5dbc
[+] ./data/clean/c680f6fd7be34cbd33b700acec414c6057651d305b6609edb61e709831fec22f
[+] ./data/clean/664a99900a6acdeb453ecb8de9d405468da0705b95ab226df933870d66b5edb8
[+] ./data/clean/c9f160b3458f10f2303b7ff6eea7a29735b58e4b9fa9ec3de79af6062641986d
[+] ./data/clean/8d130351f58bdfdf551a72359b2b746cbf371db96cbb88ade692c8112b55d561
[+] ./data/clean/eeed420cf9e178fcb6ec76a2395598a0bea8711c1cb85cfb0266105bdce7c59e
[+] ./data/clean/9e851105ba5298ec121c085741cc9f521d3d2e418566a2b89abbdf59c2453575
[+] ./data/clean/2823ee5360bbaf03207bfae624fa187d0c0cb0df338040f93111c213b301e15a
[+] ./data/clean/550a619015a3d74cc3a47c1347d67e251aeb5ea6d0af33bf1404a8ce1b4a148d
[+] ./data/clean/0b41fc31edc0e3e28cdc86cf44199f11a5dfd16a491663c4e6875cd9e4c0f2b6
[+] ./data/clean/fd9a1bc3cf5e6d2c75b6c8e1674f87d3c6704d3822af495d8104b757abea704c
[+] ./data/clean/eba198d9905be26ed1c6dfc621f480c69e8890f7e5e0f9c48494a423e4163c69
[+] ./data/clean/d0298428e7cca8084c97872a9fd5d66bd802e871f88ec4044b843d5cd7e6a238
[+] ./data/clean/a15e75dc88f28191aedb1a429041685ddb667e12adbf089185821f537402a89b
[+] ./data/clean/e4783b194a052ecb4aaf60b3e977688c47174a2027907be8abc731b02208831b
[+] ./data/clean/ac12debc2bea2651a322f7ad1f7f2deed652ee992bd4b7f22a7096b2d85b7868
[+] ./data/clean/676af1833ca80f220ea653237521ed333ba8c358a2d46b9c6887472dea1afd89
[+] ./data/clean/33883048abd6bc511eec3f417855a1e9e2be94f01cf43380e1deca35a381716e
[+] ./data/clean/837928ff2fd17c398ddfc0caf6d93a5996e3f97d666ecba689767d09ab73b750
[+] ./data/clean/631ae7074649a665d62ac6fc940d203eff715c88b4b57ee46865286607909231
[+] ./data/clean/680b43e253d5a0ee06bd47d05a16c98906084f7d876a4e5ca3db95c64bbabafd
[+] ./data/clean/20d21eb87a51386492f603ae9e84a961e797009839cdf90450467b623975eba4
[+] ./data/clean/42399cd03b656fe537d902681c705b921e9f350876fb19c7a3a0b5a38c39cf3c
[+] ./data/clean/ebcc8af65b21e7d736797a03b1fbf2fc7f929955cf57f6488c3f52e902d0f7dc
[+] ./data/clean/3d9e7de6c7c3736a3038541fb5d0917d6ba5d1f2cc4596c406689dfee3d03716
[+] ./data/clean/77f08faacf8433dd9912e49c80d0e0668a0f451036a5a9ab4abf15220c17f2e5
[+] ./data/clean/7aa3bf54c579a289f13366c477ffca1642d4da1028d7f64a54fa91d54f1c6322
[+] ./data/clean/da76b2792d3919ac5669ce9a2ae686676eab9e67be995f941a0f2168cd29305f
[+] ./data/clean/aa68b43decac8bda949004112ca75af5660da1e46a387399fc3ad48106534078
[+] ./data/clean/cbce8ce128420399fe99b34141a78be6926212b75bc0a1dbafc280af2faa8a42
[+] ./data/clean/b052acd6a50bbf19b95297578aea8bfbd1c9282a40519bbd32ae8bf484a867ae
[+] ./data/clean/fa7da61bcfafcb669045627b9dc75f8501deab515992230016a8fe7f8965bd41
[+] ./data/clean/6c786141c50e58ea75aac73c68493b7ad47f343dd4c2600ffe1b88cad842f6e3
[+] ./data/clean/7b437ba3de1c9be08e668038fa7d1e09426532826e7e46e96ff7370a3584dfb6
[+] ./data/clean/9ef28ff671b13ae24a75b2c84e1968b77f14006e8e1088392fdf999aa38521ae
[+] ./data/clean/8c891eafeda8ea789e095bf95b8cd29be283c68f64b14041448de52ea1db28dd
[+] ./data/clean/f4ee068cf6fa25701cb1c53807174641f916a5544844160498af3ad24f814c20
[+] ./data/clean/630f21ca0bcc941bece9f295435423f5a18ad2060490efa80cf6d18b4bd6c842
[+] ./data/clean/79d032d3c2e8081e670652c948ebb47be6dd6e0a78003ad9b3686c1607298c9c
[+] ./data/clean/9acf913220503e5fc2121f4ebd85338cf3c2e3b2bd267e2f785054e5a0a34883
[+] ./data/clean/e154f9e0546b513a810b5bd5165db65826a6495e80cdc1d26b76a00353460f13
[+] ./data/clean/58c7de7ee7fe19eb39c3069a567f31c636dd25c7e4e314edbcca8e678705e5dc
[+] ./data/clean/ce97b0a60d64331fc43a3a4736643d2650b16dcc24624b02e830b347777342f3
[+] ./data/clean/483bbaf89f4afc406a7b9ca9459be1b87b2bcdb11447090382120e5a60b24820
[+] ./data/clean/25e36448bb77600c375eeeb497eff2ee0c519955d1d85fed1d60cd77d3e68825
[+] ./data/clean/8a06368f69e862d2fb99dbb27b0fe0bbd01b9e0f9f18779a2fa19ffd80bc17c1
[+] ./data/clean/b8828c663a4f4e1a4f201bfb85b272f28184061ba3bfd6431e0a4cad09f4ffb1
[+] ./data/clean/32862f08cefc88829f64e1483c4a06cde6666c3f062881e32872dd44a6d7cae9
[+] ./data/clean/4a222e7ee0513f62594e490bc2eb448427b3660ef7178defb0db30935bcc42d6
[+] ./data/clean/97dfcae8909c23ca43e2b251611dbb38235e8a89f2bfefdbb32c9d8f380c819a
[+] ./data/clean/719fd51ae8a7f71c9dc4fba37f50d88084f9b55f169122ed412559343f9411ab
[+] ./data/clean/129c1aff6a50305936706c6377517fa023f759c2d501c64db842e5152824091a
[+] ./data/clean/563bf71d86e17cee2324b7b0b6f0f67f1e887bb413b138b359777096b926928f
[+] ./data/clean/84d3e95575939b88cfe57242b07b52662aaeea833ba2b67218ca498a0fe93ec0
[+] ./data/clean/ff72358729e4240cb7c6be361505eb788dbf825df545f056038157c8bf0d99b5
[+] ./data/clean/10c6c1e77c4dfced675ef497f39cd9c9fd5cde707cb7154298b7ac49ae2677ea
[+] ./data/clean/ef70d74a14af53162bbc8fe02430e46a3af6b615956c3e9379be939afbf6f81d
[+] ./data/clean/155bb96bc972f227c563e2c3db12ea00d212af6c1fe882e0e944d6b5e1aaa3ee
[+] ./data/clean/f0e86fe049a980b9683cbdbbc48cb2eac8d749fac0f0246cddcaf3b7946da81d
[+] ./data/clean/eb2b029003e4b600a4204fc72d896195835b3337d32eabcaece481722cb5379a
[+] ./data/clean/d6dc48daabf02cbdc4b95aa8405b4d22133e6baac06002747b634a1617997158
[+] ./data/clean/6c58fb928c48b6116305cc9f2df5e7e0107dcce8ee0953300359df35071de80f
[+] ./data/clean/3db92c5315e5c60a968f9f5b4e2ca8a5051d981364e82328df2949e9cffb393c
[+] ./data/clean/f637772f0605055e692f16e1e990e0c92af1b2d25a0ae51e5001b70c8e211df7
[+] ./data/clean/60a709795b3eeb2b3f0f09999b4e024b647af88095b32ee095d08892c21709e7
[+] ./data/clean/5a58676b0ad7d87336106be0d88c0161572f580b1b510c117420c72b4f2948af
[+] ./data/clean/15d6202738aaeffd2719039c114b91c2d92fc6100c592be889ef0ba216e927fc
[+] ./data/clean/a32c2d6f22bf033a9976f8e0b35497dc05b7945bd58058ab820fb3a4b0a2985d
[+] ./data/clean/23056509380a27dbf21376d642cc37b96e1d6afa4e8e4369085def4986d6a5be
[+] ./data/clean/40e78e3fc3268144880e9543b6f09bfdf120d98d26be0319e8b325a5043b885b
[+] ./data/clean/813a1d0c8e4369cfc2befc31ec72f4a514514e8046808978dc5f02287d48a31e
[+] ./data/clean/8746ee1a84a083a90e37899d71d50d5c7c015e69688a466aa80447f011780c0d
[+] ./data/clean/2fff5000e045b846cda16d0c46320239c83e698ec5bff608b3b60d7ea4920701
[+] ./data/clean/28419489e1de293e5eefdbd6367a0f419fa350324cf52147d71fa1a9d5b3bf3e
[+] ./data/clean/2a5c83abaa0351129e0f8d86571ff569e36f06eb209e0d9701c58085624f1cd5
[+] ./data/clean/e46853caaf6adf679f3bdb116761aa7ef199f148641cff7ec9d76fd67ef5305f
[+] ./data/clean/5ac8aad3353e5a3979ceb907f86b796b5e63c217fc4a41002fde97b2ac816341
[+] ./data/clean/dffd95e075813e27b3dc261485f0437882d6c7ce0c52607ba1d067ec25c28195
[+] ./data/clean/19634f10bb4590444179e79ed857460f39f07456b8a7bb3d7ac6ccd70c9b965f
[+] ./data/clean/2b94903a1b87ea55f4bc28457be5c602c6194de7e79b8e22d7b723d5ef351587
[+] ./data/clean/e27631103951f60e02404955ce70910e2e5a31afbd526cba9154d6a3a42b2cd2
[+] ./data/clean/80a1f407cbbd2b1f1e8aeb8f9ffd519ba2de03ae8bede840069740303ecc7571
[+] ./data/clean/26fe23ab440c181bab735c5eba34a487a4db2c01d94f9ae26cc7082ccd6797fb
[+] ./data/clean/7129c97108c2c3cf135a9118e1db3a6d134cf340d874284ffc647c67dca9fffe
[+] ./data/clean/24902c6b33d83ee0522bfd8a7f1a96fca980c6d9943684570ff70cbbb9a494ae
[+] ./data/clean/d53cb803ffaacd495a1938bcf3593e7a3baf833220be879e7ea2122b68f57212
[+] ./data/clean/70e1f8796b131428393ea0f99186d293048b6e0afea68015f91336618e64564a
[+] ./data/clean/13547a41926d3dea0f819a660cb58823c66b043c6345650de16952a33821154b
[+] ./data/clean/367931c915d8e804a0120ec4917c4b4e79b79cffbbb84ef5d14425b80dbc26e0
[+] ./data/clean/305dee238a9dd240dc22b0ff547fd3398d9104ce93e75606ab46d5974d1e9a57
[+] ./data/clean/c36c3a1d074de32d53f371c665243196a7608652a2fc6be9520312d5ce560871
[+] ./data/clean/4b4cba9b7be3c0e3768e78e7a393f73f85323c67a3f5900ce029d963d65a29f7
[+] ./data/clean/f92b453d3f6c8ea595255273656352a99dde999ae1ca5015765999b4a875f3e4
[+] ./data/clean/f0facfa3e10d4cfbec558fcd943ac41e386b34b9fc16082a2dea1a88e794ecfa
[+] ./data/clean/e916317e9fef21437bacb65f9c6245ba4cc2c2ca415846197aed677c23b8a0df
[+] ./data/clean/88e1b76bdf799478a72fa27db0bfe7bc5d02cc7e53675967399300448f0e266f
[+] ./data/clean/9c42598e1a58ae5a34022bc706b35cafd4b4db022f020756f42c79ec6e54e47e
[+] ./data/clean/d3cd35bb65f42806809e7bab170849f9a973fbefba997966322fd043e472f4a5
[+] ./data/clean/c6722da37f8fe062d11c93d8dc108faee7b1b34cf8abd778dc8858dbe5ccc651
[+] ./data/clean/f6cd7352d96fa8c8668e4f77751cf748212c237436b9b02f808190cf26a59fe7
[+] ./data/clean/d4d5d206dec551e88d5d342ae1eeedf302545a3342a27bb144f31f0856031e5e
[+] ./data/clean/7db14d1adf6f8962044c53bff54d52555d5028c0c84d6bb8c59157dd95f75869
[+] ./data/clean/3cdfd58346f9f1116ed6716c40d69aa19c8bf04225496a2e60d62a425df57198
[+] ./data/clean/6f63b0e2accc36f4f9bb2f3c14410b8e1e1d91e184713aa6e4289f1efaae9236
[+] ./data/clean/6260bfed16d59503127825ebfef0b326a9fc26795e273e2baa41df3def68a6cf
[+] ./data/clean/2ecf87b88eef8e4617d039dc53ce1512fe1620af2a5a737e2413500770053fb7
[+] ./data/clean/df202ba127f1c5ae7789172a0891206632d1119d28bb18d9cdc153c540bd990c
[+] ./data/clean/fc5dc427e76579a85ccb85c1d19899f748447ff34e1cf9975e2bb993bf7d47cd
[+] ./data/clean/945f2ab6a001e5af56cbfeb33f5917ba520239093f81c74ab7e30df8e53daca9
[+] ./data/clean/d10f174fb0e16594ba79dee81ac293dd7bf34e37471a1607c78156365b58198f
[+] ./data/clean/5ded98e52f73e6bfb412dc5533adb4177f8ddd4b2cba433943b07b7838c72bbe
[+] ./data/clean/4d6cf01e84a2e02b1732de1d3d845fae18359b8f0252a9f2f3b18405304d0d13
[+] ./data/clean/f91096d3662081ea8b2001812b860fadbb5dedd9fd663a071267e3b47d805c92
[+] ./data/clean/51e399b2f922ae18b257866c29c9df2db33bc5df7e178e007e42c89e893cb57a
[+] ./data/clean/612e686f23f5fc2d6b44ed66afbbd60eac6d05d5decb37b8a996d817986c7435
[+] ./data/clean/48b43418d70943cff4a78ec8ecf5b59c2d34208c263c6b1cf131d6329a745ecc
[+] ./data/clean/aa4e300420b301d397e3bb66fd62655f86724f2b0c17968217829b91f9443c1f
[+] ./data/clean/e11a41cc09ecedc8b0204dcb92486b7519ee3934d463105004101da402f78187
[+] ./data/clean/6c2a3cfc3831c1106139e326c09654521d2726419c0055b38a8eca4489d060a3
[+] ./data/clean/956e7163da398faf99f95edfb50978312b53f4950f4a066eb0eb7896cf3aa518
[+] ./data/clean/d23256310ff54a63ccf9f0b9a98acedffda64a5a43765225fdc6c07b09f68618
[+] ./data/clean/f170ae5b215e5b241b1b021d1a52278e3e50312ab5ee3e0fc019abaaa37956f1
[+] ./data/clean/da961798b7edb88766c552df1b6789bc8ee12b6dddafc3adde616ea50c04749b
[+] ./data/clean/223bda934134cc5fb68f79c15d4fbef8d6ae271b96942585529ee9fdbdc717f0
[+] ./data/clean/6bd82e211b0a49978d65d4c93f1d54270e9db4332d24911457142ae2efd02733
[+] ./data/clean/e4b8ae527cd61b724633d6408743a3ca45203ca11faebb7c0411d8bb30c19a87
[+] ./data/clean/4ea9ce843b80dab6822b5df59af534c517c5b14ed157c64e966254d2495cfd96
[+] ./data/clean/1be356672a180059735991a50072c6bd2ef4a8209d2af8c12ceafbc0cdf62f0d
[+] ./data/clean/536b4d837d1653134545f46f2df75a4e717f545639865e448aacc8317e2873d8
[+] ./data/clean/b4cd6a5722d3f77f5bc9af2f2e00efe66de62cd7997dc2882c0e07f5c1d21ed5
[+] ./data/clean/a15dca46f832f975de262d3ca0a8f16e5514208a0060f6ac20f5d2d2631ff9e1
[+] ./data/clean/8e3c5e339ccdff4a0eaaec9a39bf82f9ac6db93d4fd3c2e8df01cf49d8604cbe
[+] ./data/clean/b239c9c92f5c032eafddbe34e9c3c8ed068831ba9d735a5c5cc1ea237d97324c
[+] ./data/clean/ec99308a220f3a719750ee0703afcd150f80bf7666a665f889c48b39adcaa981
[+] ./data/clean/ee80b1d1c0e4f3d8946beb84893bfa6c9f5c964eb4423cc6682cb327ad163e92
[+] ./data/clean/39c901f0272171afdc7f16e27bc33899373a063f9b7b09b4bb1f89a70be056bd
[+] ./data/clean/18682853485a2a5c8a11fff6a5685e182edc22646cc321fce0a1abfe498743c8
[+] ./data/clean/9bbe91f3da1b1e7beeeefaf6a7b3db584f01926dce79747559a02942996950ab
[+] ./data/clean/37846104b4c23175c27cfa3e20a7edfcc24902edbcde88dc6d97db6f1e15b398
[+] ./data/clean/6df6a742c23eefa480cb37bad3835c5005801c61168d32610504eeb72c7b7f30
[+] ./data/clean/75155568d64e958d8003f9fbb36839fc9a53bfab3b51a8a1106a78e5be98b2e9
[+] ./data/clean/c7d08e602bbd09b03bb6454357873cfb07f51d679ee2dea9f1c9c54dfbe29612
[+] ./data/clean/07b51955190dd6041880d1076f370049b1a8dc1734195304af85b8a4e12b7649
[+] ./data/clean/26200dcafbf67ed312e449bc4a10e09c9794c6a8e02d25eea19432fa45d747df
[+] ./data/clean/6a6354a35efb4878c50c0fd08a487ceac7fff52e992d8e107f011a88204c9b9d
[+] ./data/clean/96150fe07cae0f883ce6b5b6568541cfa8e9ab40e6ee7af1a027f3df40f642f3
[+] ./data/clean/a57ef2c5eacd068df9240721344ad07aefb0fe7a141cf26a2abcafd58ea03dfa
[+] ./data/clean/f2b6ac8d8ac0a105d5942da6c9bcecdf1866cec55a6f69eb30137adcc8f9b089
[+] ./data/clean/7e0b07d75a60b3b3eb3f671b038fcf7f4c66dbe773c87a4772eb34bb5a203664
[+] ./data/clean/c5b4311ff7cd97c1bbb2becb4c2e0560d811b082a8b6ad1a16f34266e26688ac
[+] ./data/clean/5c70a83d54f72e1f06c93328a19456fa2bbd752fe321a7a8aff59c58f9456436
[+] ./data/clean/68df1027df80e38d6f6c2c211f76854f05158f51e00f7937f72b113de0ce2477
[+] ./data/clean/885e44f9b213784be3c4a5e0a9523218d539ce8e332d936cfc3e36575c6349a0
[+] ./data/clean/43360727acb28ea5da50a4fc7eaa21c502539afa384b1bd19dab62658fe112c9
[+] ./data/clean/820d76e187238324e8bef86349ebc9df2268209cf2b89139cba9553f99ce6ca4
[+] ./data/clean/f7e30fbeaaf6b763866065d7289563f14e98cc8df3e5c43dfd49c694c4e504fe
[+] ./data/clean/0a0800304e99d4c6d1205340d330bac2901a3642d300b5ed0e3ccc849202aa6c
[+] ./data/clean/d36d2f93f0581b3a8a5297f563ec8e37ac48115e145a8664eff14d4a3c10d03a
[+] ./data/clean/833b63ccb605ff6ac0af019a2ef4b63a1daef50ea0fa1287db33bc356d0882d2
[+] ./data/clean/97c867cf893874b5924bc41fb93b87a92ae5fb2f4191610898e0fe73bca491ef
[+] ./data/clean/6cd5026f2dfa3e3e450721704a42ccd556a9d59746d3008d96755899c62c0148
[+] ./data/clean/61f1d5e6a4776116d918a13a547aa509588fa92907f864b243fffa286df12d2d
[+] ./data/clean/d4f45dd80b621f653d575fb3039f207a4d217bcbbfe398ae0cec0e977a47785d
[+] ./data/clean/ecb4c25e4d9bd87e3b7a5ae9ecf011707a7ab8ed1c9d92bdab72fad3e70dedca
[+] ./data/clean/eff7333ee6bbb6d3b234bccd25acd04a1ae54a78ff372502fefe3a27ede61687
[+] ./data/clean/7c92a0c9ee97cd8157e7d0e4808673b385c8169d09b350f138e5e8953b16465e
[+] ./data/clean/5fca91c2baba32293ce18dd545047742193a6996f345081dded686bc87ddcd1d
[+] ./data/clean/26807814a3a72c140e09403e8cee276b057421187ee3d473654f15fc31cb3230
[+] ./data/clean/a427cb7a0b453e547318f271d7517a1cb8923b631f5b489d09a538ddc002c95f
[+] ./data/clean/d9e3b8faf069e7c8f97640930d90b89107578ea900b347d1fb32c99b3f309f26
[+] ./data/clean/33a4a3cbe560276a4760563963a86df68e4307ead88702a299ad6ab717546ce5
[+] ./data/clean/b6268ab457f407e7e9ef0cc98bcb8db5742706d0c76b84a926a62435420651ef
[+] ./data/clean/eda005ffd7ef503281fbab123d754fd35dbe82a2e799aea242a6ff7edb473ff0
[+] ./data/clean/bc8b17f12b3cbbbaff23389de5d8eb6a65ee18293648a66ff62b695089289731
[+] ./data/clean/d64115f7574ef972342fa4be84241a11723c5f555b1ad795c29ceab28dfcf9ca
[+] ./data/clean/bdb3b96ff30a8a3f4f020e09d0cb9771e065db376b6a9a8d504d16b12396a920
[+] ./data/clean/0fc64383fc2f7630707802cdcc51d28255b20af1941c24356c3b53168db5d0dd
[+] ./data/clean/bc770f47a3d8fb4f08bfc3150cc2065e42d5f3653ea102daf180e5cdd261cfc9
[+] ./data/clean/b3f3a2a45b697ae64e23214be6c36ea95aa2b298878c76889a4dd294ea842bbe
[+] ./data/clean/e1ba82881f5b6591888866e5e09199c8a2f5db9e6034d17c68ad0dbaa62914ad
[+] ./data/clean/ad65408a22b4d8080e6acedda2ed2f45224849d57faba767dede626b102fd70c
[+] ./data/clean/0566517fbec5a9f4c6770e033cf7cc5d0fdd8d5cccd10b3e623e14ee9bac7794
[+] ./data/clean/c9153e347c544d1b4a25c21d7a2a7d3887c3f5c0822b32c36ef132e4fa65c485
[+] ./data/clean/75a5ab180c92f08dabdb275186208aed61a046e58383b91a3b99ef6fc7fbd098
[+] ./data/clean/814cc5d5bda54437af2be28bd4dc6fbf15e2779994295ed6433eee9e3c27af70
[+] ./data/clean/bf6b8afbf1e795aac967382b78608166d9d9d8c35ee815645abd8ea2c1f60176
[+] ./data/clean/0fe5d2a39135442d9f1a3df1db6f3595e38dc540d0355f4609491de870099e51
[+] ./data/clean/66e9f4d03e67dbcbd9d3a13bfc45b2c11e712b677e990e8ea1b405b60a3a40b2
[+] ./data/clean/4e31e7ccecda241b1874fea801d97d5f1f295a8b7c1f949a81d7ce56cc4f2cf3
[+] ./data/clean/ee893a021af6c97c9e933fd83f15068da55dff8803ab13c72835eca4a6b2a902
[+] ./data/clean/681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064
[+] ./data/clean/1bd10be42e4cea3e466f8ff7f43dad0556c8b9df924cc975f8126a487f302fd7
[+] ./data/clean/3a8e8f5ce80dcb09c56d68025bf83881187ddb5df27cab96b44686f1879514cc
[+] ./data/clean/ccc66e744649d6973b19e5c0f6fd35829d366843a00cbd98f62f49d952396eea
[+] ./data/clean/6489eafcbfb236b0cc0855ef28fc9ba82c24230394832f96f1c8d7072632cc61
[+] ./data/clean/81759e8574567ad8e367b036942c12a2d0366c4ce45dce3ed10cc8db9bfab188
[+] ./data/clean/1754075df4d4401dd6204149ab61fb7eec16f5b6df045fc59daf80b3c89a9716
[+] ./data/clean/167d9bc91264826a1d24b721aecd6ef5fb02c45c6638c44432d33d67c15cc738
[+] ./data/clean/998f3bba8abcd6be600769cae18951bc5a280098524898770ebd762e9fb6fedd
[+] ./data/clean/5cf41740e977391bd9d70fd8266979c0973ddfd85ece2c62b848f27df9872253
[+] ./data/clean/c31d2eb970ef723d6ba6634e710a9075bafd439e9a419e760bbc5f65d81bd438
[+] ./data/clean/6c9fe40a885b8b11ab8d2ca5ed9b99eece6df030691baf114477c3776f70d715
[+] ./data/clean/522745441391e5f0936954fa9b07eaca486b40fbb5a3df4ce7fabd561e45c5d9
[+] ./data/clean/1c99e25179af47a88fa1ef61d02f1774b62d0de08be03aa319ac7b1d43e30f7d
[+] ./data/clean/f2abe33d96fa7b8aa0cd9183c57bb7da98d0d1a40375344ca1a13d8f61a9b2bd
[+] ./data/clean/bafb54ce450a431bb2967b80d8a721c9aa47dae05acb6c39019144adf390d54f
[+] ./data/clean/c9b87bbb56caa63d0bb1588e44a3cfbf686f0e5f5dac173c3c25f864f44b7991
[+] ./data/clean/d075610247781845bf0bfcb648e804c333e4483a7339ac3a7a1f1dfb41509c4a
[+] ./data/clean/f682ddd88e8d48647fbd1cd8fa884f48e78b3baff02c00702115133cb662bec5
[+] ./data/clean/e3314f17a6cd291ff1f912a35635c5f0abb610b2f188be72d4040b700adf8f87
[+] ./data/clean/fd6ca20a731613a2e954b7142c32cb94a3c038ed652ac93bb6e7334143af5973
[+] ./data/clean/04ec6c94faa1b8c9762f8e5564129aaaedc5a41df9ed7f6e56da6d4de926be87
[+] ./data/clean/5fd6751b5ffc4ce39c152d4049765b069d1895b4f01aad2f318f856bfa33aa1a
[+] ./data/clean/fa2d81e6340ab279662bbd4b39d95e4595e0610505b7ff8e9b10fd28617a2fed
[+] ./data/clean/dc239067c33bd9767a8deea1db78a0303f6dc639498609437d904bd3292ed54b
[+] ./data/clean/50fb0252fbb7b76643d830638c5190ef9724845fa24966caf6e3fc55fbcf6bca
[+] ./data/clean/bc32ec3f42c1d48fec5f2320d7e9fb026cac68a40fc573c73f731735a8653d96
[+] ./data/clean/40674a67d6201c7b2fbd9c81f4704ca6f0d259c6bf036456b36bad6bdce52937
[+] ./data/clean/d50b8d784124bdcabcb0f3ce0e31da35fc697e88550b8a669596f9b26a6f8d42
[+] ./data/clean/44e326c5f6c67cd3271c256ce4fdb16fca74256157f20b320811cc8d87c4ddf9
[+] ./data/clean/773975b945cf3362c47caa5a4346b173a89410f1710b5ee90f2003e9d4ebdbc4
[+] ./data/clean/e29534ff881e8a2be373a9f7decbdb158b678b61221a6566aaeb58047c87d896
[+] ./data/clean/02659e6fdc7cbc6df2bb0616695436f5487e33fc324acd7c86f3362482664e13
[+] ./data/clean/62de32ac894ffc605105abb2d61c941312d7f9f4babd88b2cdae25562def2a10
[+] ./data/clean/5b41af2140f0d69577ddfa1e0833342dbe86dc1aa73252853fac81eb5e5cb7f6
[+] ./data/clean/ae2d8b0a9b26652de141f01f22f39b35dc97c9e0b6c08130ddd82a8a0a96738d
[+] ./data/clean/6d8ffeea6102f69d1d174decaa8878908c662d9163f941aee4bd2fd2d5a12865
[+] ./data/clean/19d9c153832efa40d8522a5bc4bc8eff7ad3f224d98431d12664beea5a4073f3
[+] ./data/clean/27d031d7ee3f326ebdf64503bf0788d6c4eafb8192a724974e9e2cb695fc08c3
[+] ./data/clean/816ee193ee33b93523a46f73c8910484b41178147a19ef35c1e41dbbc38a592a
[+] ./data/clean/38287977c89d179dade5e875cbb601753128ebacd56279e9529697c70080a32c
[+] ./data/clean/305b924a5e413bfdb610ab31d1b2687be86f6b88997ba848845c41d2141c5f48
[+] ./data/clean/a914c81d3a3805c0500d70fdec8a10a3b7333314796c4aeb08b5f9bf6c08f544
[+] ./data/clean/52b7b43d7ae52d505e48d25bedaedee9e2a7e337e5752c15cd4a66f79a928a94
[+] ./data/clean/42146c80a122f6d4e348851926f8d8f454cee9f511cc0ea1acb17ddda614df60
[+] ./data/clean/29a9afddbf858cb8cf399f4285eddf31de111505d22ca3634423ca90e71448cf
[+] ./data/clean/8364d6a49771d5ca039ca5ff913fcc83de83691fb137c99e55c0468c2094acdc
[+] ./data/clean/aac9977d146ce101fb96fad70ca53010b0504155fff000f70d2c71e36798c3e2
[+] ./data/clean/6cec18d9302a4124cb1721feabb899c4022ec3a7d2afced7cf80367b72675e8b
[+] ./data/clean/9b1db0b9951bbb3373eb9642ef107e4ce44ae3f79f371e4ddca1201fb0c49491
[+] ./data/clean/64a74486a32ad21db2ba1b66ac75c13144099a87caed5df1a6f0309be89efa0f
[+] ./data/clean/426b19f26c03dfc5db649f980b77dfbdb0aed7623dd0451418cdcc6c535eb696
[+] ./data/clean/329fd76a7b34efca3ae366f2047ec75ccedd56fd940a5d5564eb9a43b92cc346
[+] ./data/clean/1b4d6834ccef1d4dc58434394387ff9b53ba55e15185b91743ddac6ac8d4724f
[+] ./data/clean/1731e53de5f48baae0963677257660df1329549e81c48b4d7db7f7f3f2329aab
[+] ./data/clean/7fc950d0546aaee6c96ce7f12e8e57546be1c53fa851eca511eb5b206be3457a
[+] ./data/clean/ee1f8297de41428e669755f3a0e1062e5ca47c9a00440b76fc8d2125606cba8b
[+] ./data/clean/1bcb85d1e686e576682d651e34b90af6c886be5519d45d6f659765f25de5b7f1
[+] ./data/clean/e83370777ce17e7d00c5200a8ef6fcf5e9fafa222858c4415a19c965f5f506c0
[+] ./data/clean/503b45ea3b23a86070c72c7d28df59c43539e5ec1cc134ee3f38c8eb84c61bbe
[+] ./data/clean/7bab1cd05573cf9e4f90db32b250ab62d629c448c0c0accb8e3d45a60ce1ee4d
[+] ./data/clean/8ff8b37469fdec28cca26ed924698d7d57d4d5881bc4e12f4084f0fa197267ef
[+] ./data/clean/0e31107ed4c8d449ea5415a20ea1645bf612c5f6b5370d7a5a185bb83a401f32
[+] ./data/clean/718e638164e20fc5464aa3dfb302de35728b1b61c7fc0dd1d5da47b1848bbc1a
[+] ./data/clean/f0c1fc7453ceb39969d88f537adf2d6dc048124568c42637062b4f148b7c17f1
[+] ./data/clean/41f45a46ee56626ff2699d525bb56a3bb4718c5ca5f4fb5b3b38add64584026b
[+] ./data/clean/43759b0c441fd4f71fe5eeb69f548cd2eb40ac0abfa02ea3afc44fbddf28dc16
[+] ./data/clean/173fe71b45998cba39f596daf4afcad7a0dcfa7ff0a1f3f7a77bca9e44b78a0e
[+] ./data/clean/f77a0b548c32115a7aa6a2951124e1fc550b6b24cf3e14bfba1852b9c74ed5ad
[+] ./data/clean/daf43d1b5b5f8fe14570ce8378beb82761787621562b4464557853ee20e76359
[+] ./data/clean/39c87d5b63b00d602b647947dea10594fd77ab074c48a890a1b192a8d7498759
[+] ./data/clean/e4a49f9335de8284ba58131c68d86a30c594ab757ca7ae317ea71e6b58a6a42e
[+] ./data/clean/f8c631cadd48d010cc2afc1cac7fe22a9fbcc22cc4547d31e88311a449ffde6f
[+] ./data/clean/f6a0b698293529f5cd92d7e2e3885bf32d08ab42a103d32ca55db6a949baef8b
[+] ./data/clean/bb8ec51d8faad286833ea9f71575a6244f3a64fdb510c933930bf48b322314a3
[+] ./data/clean/b7dcbabf2b8de426e3997392d73b4fba6e8ee1e00d28daf609db9ae5e24bb2b5
[+] ./data/clean/886241bdfd1af4566ad4d8753a16c30b157962aa9ba21d57a3a09e12fb445203
[+] ./data/clean/5c3eccf7bd5b294d0ebe99483278713075f372debd1cb8333f2fea09c25b3e49
[+] ./data/clean/0ce0bbd005855ab76c1e9cd6c7d80ed46b977e46c129b4e0c3b8f4b929556778
[+] ./data/clean/e1997829e5a0d5ec1327b68f194b803c5ea30ad9b42ba42d54387e16d3ae53f5
[+] ./data/clean/cda941f4cf19f882b831289589abb575a3f1de72ef826c24da0e273490a99835
[+] ./data/clean/c0018bd9d4f84661b795f64b9baf3f548170676c1d99c24e17edc8d43c83077e
[+] ./data/clean/8bbd850fd8a2b41d090fbf8e005f9a5a76c774aca643318a8a34254f99f79ed8
[+] ./data/clean/34de9036d0d16ef10129962be5ebb4f6d001d1ff6677c0aec6ff530322ea099c
[+] ./data/clean/c3ab8b0ea57f0c7219fbd28793d08b7e436b00a47f11385349fd49def094666c
[+] ./data/clean/c5aa5c1e611e0bb0712528171ad3aae3c9da8ec3ea1348d447bb3a9df1588a0d
[+] ./data/clean/afe047a12616834738381aaed5607f2dc6ba3e23b72c593aea3b9afdf5169441
[+] ./data/clean/33fffe32220150b341d88e7e7c9dae4e297e317770fa9a4f9f96eaa38ad7e055
[+] ./data/clean/c149cb85f732beb95bf6564d72bdfdd9306f7050edfd9d2cd475420efe3b84fc
[+] ./data/clean/0af263b9e678c59f04c803fab0702f1865d63086a86f190e8cd8608afd919958
[+] ./data/clean/a3411d421f61a2ceb425190868b1a06c6d4db7c00ecb397359ff37011a5e0c00
[+] ./data/clean/5accc2123982804781f324e33ed124f94af039de49baa400d7d632060bfb1946
[+] ./data/clean/4c05306cb13722d9d83ba02757233d907e7dd260ec705eb5bb0c001deff9e8bb
[+] ./data/clean/cb326627c0de82a5cb6159dcdd40b5f2e5ce2bc87cf5b0f85fa8d8bc62d2e92c
[+] ./data/clean/7f5a7cbfe72eb23e6570999aeaa198772dd71ff2c29f16ba527a091a2a1a91dd
[+] ./data/clean/3e875f1dbb8251d0e8b95c4bbad89ac1626f0a59042a5d18f281d6eecd0648fb
[+] ./data/clean/27035890a36f6d22de9d8043f4006ad84a6fff6423d06d9a3b62a1a2558e8fbb
[+] ./data/clean/3f14b8e521bce17f8499c6ebaef4ed0ad851fa84736c0aefe3b92e2622b58452
[+] ./data/clean/8be4dba9147438b23de791a2846721adbf0d78d1224a56d67a71471e5b2a5f70
[+] ./data/clean/995780108f9a112b6b3b4846d42d26a344be86a51d76118fbe3cba2df6ff5307
[+] ./data/clean/93ae2948fedd140cddbf6cf9193f4b14ed3688ca47a8da0208859659e4a0e84a
[+] ./data/clean/5c1e7c316ec5bbb74472f813b7e527473fc7b0b7d0e16f6bbed12201bfc485e6
[+] ./data/clean/eae7fe329c2552cb7a8dab7b9a1124553ab3a25f4deb059c3b73c084ab6c5239
[+] ./data/clean/4b9c70d118803fbc80d0269caa2809e1842d7d5a155da6df7eefdbf0b511bd12
[+] ./data/clean/17c797002eb4e301cf1b7ef92b24999053f2cbe9407ec6f9718fa9a136c3f003
[+] ./data/clean/7ab88be8fe2b05703f1a6a81cc8059920567dd156b83d46b66d47ae2ffd2d71d
[+] ./data/clean/dabec132d46a5b4376f5bd727df7de6c337016b1b77ede1a883ae4540d55a8d3
[+] ./data/clean/38de01d5dccfc6380b35df88bba624c15c86f1399562db1e9fe333ff1f734c23
[+] ./data/clean/e3beaa87dc6097e24169d159e403063cbdc52497f5f80c4c4d5bfb2d75a54b7c
[+] ./data/clean/3e0f073af5d60118cb2904686c08e90440967519ba60c21ad6b518290815eb84
[+] ./data/clean/3d79b80cc025550b7010cd3fe4b566f14f70b2fedf9dbe0b557373e1c6276f43
[+] ./data/clean/ee7afac9e0c2d1a31035fab8f175ce07f95fe6edd29d19532dd09bb1e353f4f8
[+] ./data/clean/99ff6dc0dc03e0e92ae9e46b897ecfb8f88af4de9bf93d380c1e2f3c4fe86927
[+] ./data/clean/a05495dadcf88b1ce9c79262979f7817c3726d6e244267f8530c9111c4e1e08b
[+] ./data/clean/232074ad00344d60f4f65b3bb900148ba1f50ef6a648b414e7cbb362d8137051
[+] ./data/clean/3953bd1e2e229a0d612418469f69c81bfa641534caefdeb61669f0de882722b8
[+] ./data/clean/49e6e7f0fdd9bd16e30d827ac421bd9afd5dd281577a9b08e8a0c3f91bad62a1
[+] ./data/clean/4ad5b51e70a14e6729c487edcec8ff8ae1c17a6b3274b764d872644e336048b1
[+] ./data/clean/a2bdbb568693c7c3c221d88d334ec2c86ab71de0982e883b49ccc6291a7d9625
[+] ./data/clean/3e364e1aef8caee5d643f3d258232b403c52a5a4945f2b000c2ab47a1a39876a
[+] ./data/clean/bdc3d19257cb069a4aca183f7a3f88cb94ced2f14390158f1cce06f37f2530e5
[+] ./data/clean/3e9efaaa73476bb719630664c6ab041c2624e3c11e18fb50d6a3450d774153ef
[+] ./data/clean/fdb9fbd237662f095b5eccaac195803cadd16a3610c960a051ff4fee81339b1d
[+] ./data/clean/d47403bafb78760367624e5dc59576de3981c6987f36f2d59c5ef416656d2eaa
[+] ./data/clean/e5e8c07f5745db40174b6f1493f930c10078dee4a0c7c233c7cec7fd94f9f1d2
[+] ./data/clean/439ac0824e46703a11c9ba1b35bc8ec3129eacdbed219b7d440b1e079f757fed
[+] ./data/clean/c9dc8da0a972fc885c965454bf1d69a44b269ca7cf295ccadcf888bfbdece5f5
[+] ./data/clean/3bddf1082465673d656b60bbafd2ef257933eeb976a486eccedab933f9d0d231

[-] File not PE: ./data/clean/00da304afa5cb9c053f649c537ca6766fa0250b6a320e66927f85bed568a47b2 
=>	 Zip archive data

Removing file.
[+] ./data/clean/aeb641f87a15958fb28d62bd50872b5b6801f901cdab70353a381016ead714a9
[+] ./data/clean/1def80fc38ff4742be567d3424fc58a352d50c9f522701305feda4893968b4fe
[+] ./data/clean/923c98ddd9a62827fd04e1f42f6f144ba67c444cf102bf29bd1a698e27f7aec8
[+] ./data/clean/1579095fb4fcc5b336b5bf6b395d24e9985a4c25a9f12e7cf9797804b272c36b
[+] ./data/clean/03c97b6de8cd704cc0dbb7fb3166d92a20131a627df631c8965dd2b4fe72f342
[+] ./data/clean/a65902d9d21bc94ceecf467a923fe19302cffd589bdf49e8b49c0be4a3cd163f
[+] ./data/clean/eab9da1b4aaddb0c2179ee74475fe1fed70e2d90686153369cdd132ac9ce4928
[+] ./data/clean/8b9ffaea64684357e00c93edc0603a5cddaab02f2c87c4a3d971bc0a1ebaf867
[+] ./data/clean/4f2fdeeffce4812b6aa1f02b245f32b080db791a63ac81013c9f39ae121eb235
[+] ./data/clean/9271c8e2d116cb38909d004a0b1b0e3235601bfa7588deb5cde143ac6e1539b9
[+] ./data/clean/18fade2b94b018d175b899c0a209bbed35fc3c2d92ce655af0ca3094193b9ef4
[+] ./data/clean/9ae43faa045e6a86e9b220fe305b4142e0bea4733782b28f870e4ad779e80181
[+] ./data/clean/a89a924f95aaad929bb3f3aef4b52e1523ad51e61f3688f278962159b5afe45d
[+] ./data/clean/c22da09fe420825082bcc728e582aebadd74a1d7ee84ae8d2d6e4067c3ba508b
[+] ./data/clean/ee64c2009fb28c2306761c6d938e07d07a843d0f7663f1e85a1f1a9ddf6771a0
[+] ./data/clean/26d183ff2c2e7157dcf9c04513f0bd368b19711ebb15b58f730c9f23ff1115d4
[+] ./data/clean/e0bd33640579a0cae30b09cad725d1271cd8596a58c1428a57a8890f8f8696a8
[+] ./data/clean/c38c686d11f1ede897fb6701ebb3fbc0f638b2423d48608739de6a63046b1c60
[+] ./data/clean/ebd6ae773b02624efa745b5b86cdf006c193a07753549d706c973fa4d70e579f
[+] ./data/clean/30d28d509768bb7e71bc49477afc7faa0167c45a321d0fe42b92acfef91db000
[+] ./data/clean/0312defa0cb061af2c1a141734d405ff8ebdcd6b4419d31dd7c7d9cc4dbe8e2a
[+] ./data/clean/6a01efbc2bf54e26a7ee8fd15702e5621d61257a5551ca8f597749fbbd14cad5
[+] ./data/clean/02d2d5bf8305f3683cc2832346395555f8e0900b3b761563a5f6af5625067b49
[+] ./data/clean/1dfff55f4fd929f04aaea59ffd69ab8e31474ce0fed11ad034af17b9ea0d0bba
[+] ./data/clean/e6b0d2dcfeb00674d7e6fe4f2afe139069457ed5c1ab723f7c3682d89d960c34
[+] ./data/clean/3aa7bf50609c661a9d8c81e850e55dc4ffb4f77877d4e69c6f75cc7328c96389
[+] ./data/clean/cc33ab1818656f24b77c35455de22c060f476f3a919c2db84c4f82f761c977b9
[+] ./data/clean/05c8850190ac9b7bad6e1a224bfd13fb449659d3b5cafde77e78903abf992380
[+] ./data/clean/f0f509144a750e12bc0e663ccabd72fbe6eddef68258825dfadb96da5c656e46
[+] ./data/clean/5a4a83478e07d34e14bd8dc9955b37fe573dbd592388cf1774b8beec0c96d2eb
[+] ./data/clean/622b317979b8bf31ba98cce75283a935e6406364d492ed519f2a10da50d611f2
[+] ./data/clean/df47e713409dfdc7c34b9009f00c31a32b82de32c4260c8bb6c91ca1bd827508
[+] ./data/clean/5516375c7bf9f770fc3c31863a9bf217e098e8e45ecbd93464616b458f1b7f35
[+] ./data/clean/9f84dfc0ae2d0fa228457d3f17465f8bea44792951cf917d683888c9c12ec76c
[+] ./data/clean/81049ddd6c2111f279070e9e88cb7781743c3f738cdabe9619acf45198b4420a
[+] ./data/clean/b2ee86dee2bb94276918a3285781e67c9fdb697d4a3100ec9a604242c59934f2
[+] ./data/clean/a0fe17c7abd28a6134fb782a9e0725f4deb78b5855deec86ab1fae62f7c4159c
[+] ./data/clean/d23d755d3f87fc91d5faeb3e2b0d991b3910750f2eba434195a38453ed8c6ebc
[+] ./data/clean/2b3b0f3d0909eb2b89ef5783bffdcde57fc64f98b6c8c50bbd04c62fc9a291f0
[+] ./data/clean/3b05ef54e43cbf4e5200647ba733a1f1b1239a56dcf99d03ed6cf16108828d38
[+] ./data/clean/2cb3312e0a7c242ebe04620ad49a96b6cbbaeff559ed811ff51cd62f41ab3474
[+] ./data/clean/ab560f01a77f8591bbd7468cbd046bbc300f020b6e09e13c2df4a58dd7603cf9
[+] ./data/clean/163b66f87979f330fd54847543333695c37a7103a489f385f51eda0c1fa05e90
[+] ./data/clean/a80d97af3881757ca91955b0d2ed0e6132c834e0dcd61cd68dd88b617b7f3c14
[+] ./data/clean/85a7e92111f9fbb1f1898828462b08505c08f388001072cb786a63d6340a2071
[+] ./data/clean/c306ae721c046eb3246e863b7bd4f1fdecb4dac5c1ed04c06f29c582443a389c
[+] ./data/clean/562aa49e875b9cebe7f7701816cecfab6b59dd132ccb0754480efec80ef315a2
[+] ./data/clean/0617d71df6cb74ba1c16d1394bc7ffee90b05f521c8e7472b6f21cee2c0ff359
[+] ./data/clean/066d1783695dce4f21e89c7e3070fb730a8edc79ddde16e323fb10e2c1c671a3
[+] ./data/clean/ed4218505bfed8a2e23962789f4d96c562e21fc7ea63c24dd03c9e876a1c54d5
[+] ./data/clean/8c57e9d0f7446a998a2ea4f100ed7cad6a9fa7f8f9da0578cde9d14be3860147
[+] ./data/clean/2cd08349d03899fecd24217c18fa7c8f7c5dabda96218d8777aa3e66b2542014
[+] ./data/clean/9d10013b8f321eee381ae39191a2ec37996289fda32dd7da0319b2fa6e2c0df4
[+] ./data/clean/f7698776c192abe73d84b35c270860d56e57fd80b9c1c018a801e80830ebb8c4
[+] ./data/clean/2f981cac425fb96b5243c4b0edd422ef946e386c767f9f2cee9a516f78b38fe9
[+] ./data/clean/80993fe0cf9058bd3149d9bed8f9d69c5ec72d453e54c758612a386c081a3777
[+] ./data/clean/aa33292c6e8044d6884d4bb776b58549feda71e226b1c23980063d312af18506
[+] ./data/clean/b4d0ae06b4831719849c83a113ff7be4f44df6fc7c8fb369de5b93f70c8d194a
[+] ./data/clean/6d641dca1d7ac08c364b7fd0771b9b707ab61dee4778974291dd8ec9461e4ba1
[+] ./data/clean/1c446ec18052954b40c095d1787127ea37efab60261288f882b5b99c2ecd523e
[+] ./data/clean/aea3d46a8c61945550368341bd122adf88a3b8116a6911844583324888220745
[+] ./data/clean/5587cea38b44259178bbc4fc45fedbef86f0273bf662eebdf397c9e58c168954
[+] ./data/clean/b81028c41722e254953b5134439ba04e741cff656120349b6175ce1383729945
[+] ./data/clean/bdf28cfbe67c3d4a584f1b5a1583ee3b7e48bfcd4b81f77115dea244d551a4a1
[+] ./data/clean/85a43c95bc60213353be0960cc2947b8f458b6470c683fe18f35e0469c47d2d1
[+] ./data/clean/7bcc93b58d0a53e6a59773174ac86a2322eebdb3253b98726da1cc7c0d5f6ec9
[+] ./data/clean/bc706b94bf2046f1b255d674ddbed58ffd2ad2bcba56ade9f3a285349c27fe3a
[+] ./data/clean/1b8fb3b474542bf6309491cf8d146e8a0f7b060ff238bc2d646fb6af62f766d4
[+] ./data/clean/7c534922487d60f5e24b7c313ad85d5dae659f526764bf756ab56c048b8a8076
[+] ./data/clean/048c2ffe78df7dcb1fd037af81cb336369406b864e3edee1028ac047a5a9d070
[+] ./data/clean/99fecebad98a67c3d67bdcf5e212f301d5da57f3f7dd2804af89a88d31477bdb
[+] ./data/clean/f01003819ec28450755844629b050fe1f2326db3edfb128e06209da2b8f781db
[+] ./data/clean/daf266508c54b89056ddb95affce438ed8e933a33aa78924234b3996006f47c9
[+] ./data/clean/40d10661c6c94501d48e581d52bfe184f8949d66bfef8327f35cedfbb9c5387d
[+] ./data/clean/de822afb73c9429aa46af2803c9a71552bd5436d355cc373d93d114d47a59018
[+] ./data/clean/01b38fd2c1df5dafdaaff096fb5d4f93697428afcb98efeaafd80c1c55fbb462
[+] ./data/clean/d7466a0e732a179041b43f76bfde6468e9fe75a3cc3595771d19f01cd7bf6902
[+] ./data/clean/ca58d3b98c17640c85081c77c49d30465b72cb83285abc9a56c803c0ec3dbaa1
[+] ./data/clean/567c21be2e1832abe66883996013624155a4f6e0e9e53e3f11886425d593f90b
[+] ./data/clean/a5a04cb1eac50b89451935e31078f8648ea70c2f6386c0f58e1ecafad30045de
[+] ./data/clean/259e2c3bc9b6655876caf607dd15c88c96cb532a26d5520bdebaa5d388714eb5
[+] ./data/clean/3768dbbb83c7ee7d87ec008d271c0d1288273e62191fc87acd6572e8f55c22ed
[+] ./data/clean/721d2b78e576151975dd3e4a2612e983f3bdc7233b04940466f4cabf73da12d8
[+] ./data/clean/cbb1f476f531b8b4c6d4376ef3a634618966d9e3bf1821c70daf1b6d24e21b43
[+] ./data/clean/8184eef321c9a9a26848c73419242c664a366cf7f3119416b5528759852ee354
[+] ./data/clean/75f12ea2f30d9c0d872dade345f30f562e6d93847b6a509ba53beec6d0b2c346
[+] ./data/clean/df4b35dc5c0d2dbdcb9335cca97d95bea5bb1c1e78d9249e6abbe3f6bc57e81e
[+] ./data/clean/358ee9d6c7f8ab2479b13ec9bfc546ef7ecd9e2161c6a5d5ed97976c4365f301
[+] ./data/clean/bc9cd1e95d6fd6e4428ca2ae85e48a84ff4fe06cd5c5ac3a33eb762fcdb0ab5c
[+] ./data/clean/67fd29c6ea707b857317706ba8f517e5379cff20e48757098e8c338299d4ecbc
[-]
[+] ./data/clean/088b7693be0643277d16a66862b4446a288afb86b2e987fe7a943126d0dd08f0
[+] ./data/clean/d5d04e5bf7085da59675912547a858a0ac86138eec733136638ad5640cc1684f
[-]
[+] ./data/clean/3ab2e5c73f6cce79d4abc021d584442915dd96d7e1aed32ede3b4bfe9b3fd01b
[+] ./data/clean/7bf892391e71783145ab9a81ed35d029a66e2284b3fb97bf8198aa2ce56833dc
[-]
[+] ./data/clean/2d812e482415a44f20806ecd7060e1ca0fabe9458dea8f128593fac9a624a5fa
[+] ./data/clean/916f9843e05f135eed67d3374c0e0ed1fa8b8374e89748a451584ba08d8dfc7a
[+] ./data/clean/ad6e5a41a6f3ace6fa0128b0c8e77c473fca5aa9e2daaf55cf956ad22e63f45c
[+] ./data/clean/35fd9608d1147d191d8689ac10e75934ba93dfe54c1432545bc8a10cb20cf72b
[+] ./data/clean/96c8f4b3e1f325dcd1ee5ae1fec78562d115099a731934aeadc3e49ef19a720d
[+] ./data/clean/48331be81db4474aa078c976b4635737b87f10974b11832fbdcc387bb6869fc8
[+] ./data/clean/3a26e84b22e7665a55f0857da23a05e3ef3ed430242b6f7635909981cdbeba94
[+] ./data/clean/c4019deb9772a8e4e38134cbb4038d1bb5c73ba5d0f14b03bb5fbceae4e16f67
[+] ./data/clean/f2e81ab35f0e9f78a75b2a3a92c92f5a53b8138a686f672f5196bc5115da4fab
[+] ./data/clean/a43ee96f9876ff2836b5096d1cb5c864d7b46d478b6fc544b3eae12db81c5ee4
[+] ./data/clean/89f2fb1ba521b0b3a060dd558cb3740405946b106b8495f2b3ff3d3e1af93537
[+] ./data/clean/352cedd04fd2bc1c7b83ebf7d34ef892e0a1a05f93d526cab101a44263c95b5d
[+] ./data/clean/353a798807d0825b216a821c6344220d25518c2b4e6fb32da97fca3b1ae31a08
[+] ./data/clean/3694913609062fd45cce3733eecac8e6cf6b9100164d94218d378916cf86c6ec
[+] ./data/clean/bab24f57a195d485e397fe45cb4846e542645cd6c4ae4444b681025b20378136
[+] ./data/clean/a3bb39a8e9ac6177ca65a54279049b12666a8631a995ecc79a59be1d4e539c85
[+] ./data/clean/dc0dde1b7feed4184a181c2ce437a1b2f1b67da052105392e852654710da2132
[+] ./data/clean/e614bb23131efe77b8ef6cfe08a28ceec7a9adccc03d183b7a287ac6c822de1f
[+] ./data/clean/c9ffb13f7a582cc472f73c4512524487067ebcd7dae435316a3a243747624468
[+] ./data/clean/386ca84bad61431c446b34e22b331eeb202b9acbd0465ce804a0de71a0b03112
[+] ./data/clean/db798bd9b01279cf23d34f0543fbef7da01f1368d39e8ebea89ec724b027e13b
[+] ./data/clean/36030217bac63be5f1bda4da6d7bb728d9b16b6d352192ef818f66e10027aa8a
[+] ./data/clean/5a9d1be3ce1c7b4ca2382715f1db0594f1fb26a7e8815e31126d928b71e12c8b
[+] ./data/clean/ca8615cd448c19e7a6bc9f345e8178a41c3ba3c5f4663f60e8b711b53edfc6df
[+] ./data/clean/6adf2be6032b4f9e2b051e07a1c5b21dc837a46104faa468d6c87ea918a03bed
[-]
[+] ./data/clean/808e9283937233d74f64b071e174b4a9f4e016b96e43d739265c55fcfcbf322d
[+] ./data/clean/aa10bfe51228e5210c7e34372d4e9ebe75e920ba85edb2e6350c2e390899cf09
[+] ./data/clean/ae2cbe9a574d919bd18d4a335ab0119fa509e2b69af8dd3681c67c7584d16e53
[+] ./data/clean/fcc3442059d7314aee8904a5ce2b93ef0a0c9865c2ab670c8ee438e4d828a9b8
[+] ./data/clean/7230212a8242f90a518b5282717cce125c06599d52274547657491c848334867
[+] ./data/clean/775455b1c787d54bc1300fd3fd2233bbb3d243b673d25b53b75e1691e4cb06e4
[+] ./data/clean/08ad18cf25a6adb26271aeb671b2983ba85a465ae8463905f67c422938b98454

[-] File not PE: ./data/clean/f49d1e41a4c18999a3b6d345730faa1d22f9334246e336d50f049ba3b0b0435c 
=>	 Zip archive data

Removing file.
[+] ./data/clean/851e5526ef294d3902d16ab9dc3de677501ddbbc5c1990b6a4c4483cc0a23ab8
[+] ./data/clean/8c7ad7303b8e4addafc174b46ee951fc063db116deb7abfb6aeebf733b84d87c
[+] ./data/clean/d308ad776c10217853cadd89e6a5b8bfb9643b1b9c7c1da8c98b4bdcf0642133
[+] ./data/clean/9914e9e7d4060556b78ebbe3ffd190b6c3d5d37f0cbfeaa95430cbc0d99488ef
[+] ./data/clean/dfa180160e8d58fb471ac0c4602619852ffd74d6426464e0eb6c61c06afe065b
[+] ./data/clean/fb8ad1d3ef80c18604996c2a464e988c0ab7ca6f58cc83991a4e7479e5e6c682
[+] ./data/clean/daf40d9a2ec0f85748aa446e41c11cf7188fdfa0f00d84652a38699c5e04863a
[-]
[+] ./data/clean/f30717aa77a2f53d2b8275688e885bf170571285309be57b2a91b52f06d300c3
[+] ./data/clean/852bffe953e3c9a19e9da3fd6fb97ac6365393afe090db9d044d54e315a9fe47
[+] ./data/clean/51b4643a1c8080ffbebee73ac7d86d66aa9ba811b7c71782fd38bd004b8cc64c
[+] ./data/clean/736bffd8c2ee02cd432004bbc539ca48bd664f17887b85b4dca51d0a9ea3251f
[+] ./data/clean/a162fbc31868aa71bb6c2f1ddb5e8c3016f2c9de6a9c46a481a4993e6d258bed
[+] ./data/clean/6d5dc17684c9fc9a2c777df3693727c4a3924792ae73306b7624c2e15fefd2a8
[+] ./data/clean/72253b7a0d3b27437ba87f0b24deb5d653bd2f9310c18c19d4bc5b2bb66182bf
[+] ./data/clean/4ef8089452331a127262a9841001c12ae5757f8c4c39ad69c06e1a6d64a6ce40
[+] ./data/clean/62925cfa2f9b7ac0992a1dd4a9a00e84c2a2b244b38ef32925728e58dd4e4cad
[+] ./data/clean/96181ada3f08d9a0ca41241dd1222d47744e6c28823abbaaf99ece786a33aa0b
[+] ./data/clean/07c4e2f63f946ab1027a468f6977f15e5a64a99b75733d1ecb628ca38bbc9fc1
[+] ./data/clean/df338dacbaa9d5c3cbee0263de5ab11115945a872c5e1cbb57588576e191ddcb
[+] ./data/clean/5c1af46c7300e87a73dacf6cf41ce397e3f05df6bd9c7e227b4ac59f85769160
[+] ./data/clean/d72c15d9d553257168ba21581412ebd7bd99ba6519baf379175040c6d845d399
[+] ./data/clean/e87bde4257e33f4f185dc872e0d7fc0a378741233ea3dd6a2665bfcf44bad1d4
[+] ./data/clean/fcd95d7322e02b1835b27fa89ce11be07a2630d5481693b0bc76d0b783491733
[+] ./data/clean/42c14420e1f53023c6f89ba91dfc0a739c34c998452528677c622e534a1884cd
[+] ./data/clean/156fbbf56592342bee40a92b4d469a2517d33bf0c9681e14b19177e2b12280cf
[+] ./data/clean/a36b63b8d88b0b23937627dfd967203652cc29f4ad787e4f5867005f8e25a1e5
[+] ./data/clean/dbd6048833df804524633ead2b73f216e717ad74d082ff436349f69200ad11fa
[+] ./data/clean/007247436f041ca59c5ee0e8636c668c2a43376aeb8cfa17a744b59f26365461
[+] ./data/clean/3fdd342d11e9f1e845d766ea2ff70e465afcf8ea45700f5eb696450b3b1a3900
[+] ./data/clean/e7efc2e9acfe7d9765337df8935e1db4c537c20ab99036cd474533f33de3b183
[+] ./data/clean/787c9b36ddb06f270f1dc08f8071661cbeb104c19a4204459615022a6a1cbbb8
[+] ./data/clean/9bcb7a05b9a1752b9fcd7be69eb6d4683341828a28f95f5acadf9a37392af4d9
[+] ./data/clean/ae8b7135284c9f111b34bf7ef631350b98f35298adafd7269bd364f63bb74b2e
[+] ./data/clean/90b13f3aa9d4bfe5859218aef13c0da5816ba6a877ea7545e1d4c72b0271b433
[+] ./data/clean/b4552f62e1238bb2679d44fd9d863ba505133d804d03e08f5882a9abda7d8b72
[+] ./data/clean/907a94070b7d5ca94794fb85ca1c1a96b024f9a3f5004d3f8c7d919c2cc768b9
[+] ./data/clean/3f579132a39aec2513cd286ab9a43534dc05f9502fd1a369126236f69ef76282
[+] ./data/clean/854d97ef52be2ded031ecf2857f8361530b5a9136e1ff5b5090f9e723ad6e28f
[+] ./data/clean/f0af778eb77be0cdc4d480fa8b4fa095e725d26efac9bb6660be788a64dac605
[+] ./data/clean/5c6ba7844252ef3b207953fc2de7860801cf9213173823bb203a187adf6e5e5c
[+] ./data/clean/e187bc3df3b1240e34f0635d0ffe98e65e84bb0fbbe330f1b4c83abd77b71a2a
[+] ./data/clean/33a61b0a1c921599b3eeb47e1b8ea758c94edcdb8a033bc13c5fd3f23637fd27
[+] ./data/clean/3b5706b0cf0969a9f82060fd4dcc745f2d83c066b663fe8a4f0f493b64032c9c
[+] ./data/clean/ef261231934b46b50c5045687e9ee65a8dde980de231f197d6d7edecbefb39b8
[+] ./data/clean/37a120563d3d48293c34df4fa4d49d814fe5cd92c325e46bda3027c8a8503241
[+] ./data/clean/e2d6eb8764dd4ec3bf840f30a5e911fbae832d54f3c2a6939addd07787c08bf6
[+] ./data/clean/609daf97b0ba4534435c3af3563e4c78840ee4fbdc378c72023d6ffe2904f3e6
[+] ./data/clean/52cf5f74e4a061edf5d69f1c56a0c23c8982a3f981fdab08ed7ae42b031cb448
[+] ./data/clean/435603112d830db82a3622f7a3387ae91ba828435a7a8dba35f010c6f8b792e3
[+] ./data/clean/dd068b44a27674478b0711346693f017af4c8d9c58a85840593cb0535734367d
[+] ./data/clean/8c3d759de022634e1f622c3f01d9f7df98d91a67e82684560278200b5efdc283
[+] ./data/clean/940c6d3f10b36f3e98b6438b759553edc70992d88ee6f99d2bc7c95677455f13
[+] ./data/clean/5cf3ba35a2b439763d96cee5200a3a1b63365b2e7717d5e4d29fc42c7863a3c4
[-]
[+] ./data/clean/97881bc9ba7d6bfceedfbe5f605283fcb393345ffa62e11d36f107b63fd3103f
[+] ./data/clean/09734ddb11a0beeee5e37a6d2f9fe24b1b09a8a0f5d25db666084671a1d35c26
[+] ./data/clean/666a24082d02da9c08892e4c2bcbef11b8c086119476e16b6094060fef34e314
[+] ./data/clean/d29f831e97475d12e50ec3af556b0f04b6bce668796daf91337c9b408f72d44e
[+] ./data/clean/a4ad03c8b96059ac25cc470965653bc1ea2a0c88926337c62dee94a303087ce3
[+] ./data/clean/84732ec6907a12d36853c2466a254b86e7cbd06c3348b7b0bf5d8f8cfebe83a3
[+] ./data/clean/4b487075f31cfca0a480b2c8be0d265655298f26e95b00f132285c784b3da4eb
[+] ./data/clean/7fdd465674a32752637f55aacb76da16f9a57dcd98e5774daec6d47b185c4201
[+] ./data/clean/2ebbbb962b3a87dbb89e18794a39b19820773be64a70a4f58318b00aa1432f52
[+] ./data/clean/1445bcc87cac845d42f21517a251871f8c949436c9ee15d190ba3328f723b416
[+] ./data/clean/cd3d19b80432b32c76b565bc1cbdecc1c23b536dbfe81d76c2726bedcec18089
[+] ./data/clean/246d976fbbbf12bce8e095d490d742378b153f96433e7929e6960c5e7453501c
[+] ./data/clean/fae588c9c8c29207eb2dd4af42639e48ef705356d8ffb1cb3435f6d699f72c1e
[+] ./data/clean/a94fbfdc3f7cab32b966c153ad06bfee9c1f406f82e0c579a8d0b34b7918ed3b
[+] ./data/clean/e67472d9838e4b12454d3764200c1e9719fa754fe6a816680e4588cd572438c3
[+] ./data/clean/f07e7d10a2782c99dfb3efd8a94bf5de5fde01f1d77bc9f3aaa43426556dbac5
[+] ./data/clean/3dc6eb43d4026447d8d3e3a1116d72bc5750074bbe0071ec27c39e5285d4a228
[+] ./data/clean/86c4b70a40b7251b74172aed2e53dade117a1dcb838497c5bcbe8532da193a11
[+] ./data/clean/c17b1807961c71492016a9ccd29290eeef4c4835980e3f605cb58ecc13cb9dda
[+] ./data/clean/eda6cd1bda685a38bb8d754c47710cb0bc2885990f174bdbf57028ad5a86dd22
[+] ./data/clean/21272fa2b2a5b2dfd8741d80a5b4031dd673dd9eee54e0b3d012b1e04efec139
[+] ./data/clean/89946db73c08e6854ff5ce549409d358d4c14a6abda5fc7097f2d0a4184a7ee2
[+] ./data/clean/f716f42d63040941cc2403b860200f829f67a0a58500708a21a2c46b47c65a45
[+] ./data/clean/0285647ce6e7a6a29b4b4b283c85fc9e4263db73b5ef275a24104ecca2b5d08f
[+] ./data/clean/6f8ce6d9ae9ceb7c28b05731b6603c595ad1b72fe775f0d75eedc7765a3ea29b
[+] ./data/clean/1201ecd9f3eb0a40660be69f33a4126e0871d87b34eeaf578c37b1cbb4455a7a
[+] ./data/clean/516ef56be418e630cc3e16cbe1932d0a6d2e5a402546a723780a0282d7ca60f0
[+] ./data/clean/af7a12602ec998600ed807820608aa716f1a2ae0042440f773ff6ad7b2e62c3e
[+] ./data/clean/7b2cf6e56fe262686ce9afdabb260854ee92b257ad95d577e9ada6a4eccfb9f1

[-] File not PE: ./data/clean/cfa5a64cb6ff63139b423666cba73dd50806a45fff206cf8208d409791cdee4b 
=>	 Zip archive data

Removing file.
[+] ./data/clean/89566d72f4e1ddd5ff449372e7068e40d35e0afe613647990a3fb5cccc700107
[+] ./data/clean/8dfeb7075dee18139481ff059c98f3ca247173be412f276549831c82096c15ef
[+] ./data/clean/6a5542dfc2c6cb16706a2cd1450471916bb8d7567b7969aa3ee7b316b1cd4a30
[+] ./data/clean/96a69e45dbb5b8a85cf8a5ab36aad4c194a667dc4bec9ad32caccf707f24e7f9
[+] ./data/clean/1b1e9e25b04b9b16aed36e639e3316cb7b72a5539e7359cdd6d1979470cdef57
[+] ./data/clean/f6c40e85d11f4014339b2b8fba5efe4a05d19963764f0c5244b1ceb2dece10fd
[+] ./data/clean/aa300b32cbe3c2109ac25bfc50a3a08de43efba5889ded23ce20a828978ad616
[+] ./data/clean/d7812d0109291bcb5268913498e66f817009e8262050f546ad16b5fac47f8cca
[+] ./data/clean/9b87765286fc691e8b8ffdc3b28355d21cf37eb3532098c9798c108cfdf63d50
[+] ./data/clean/d9fedcacbed1184c3d492063bec05e3293bfbdcabfd097f711b01275bf2720b1
[+] ./data/clean/cc449330841a638d70c3b37d0973babe1f51250fb43f69bb2fe18ffe7ddde81b
[+] ./data/clean/0ff1a185fc4201cc2154b6e5edbf1c4ff1a487d130feed4e841bf688ef10bc3b
[+] ./data/clean/00fa0679d4d159772298f2fafc2d349620264a592f900afc50626622a2a71c84
[+] ./data/clean/8ebc2c50697810d4df9579604b9dd79e3250d5259d6af1f6fa4c6108f6f8e856
[+] ./data/clean/ef4c002224f4c919d0ce6e5c04ae68b0c26a8a84bd0ec280390c2a3a15a43575
[+] ./data/clean/cc5af9e22b93bd22a7640e58583a05458823098f415c1b06743ff881efcedfd6
[+] ./data/clean/3510df9d6df9e90fd9a6a1e75dc1bb3a38ef0ab54ec07585613be1fd0bb441f8
[+] ./data/clean/0944947ed9340339840782005e1e13db90f7c9a78494bd0db0090d13ad62cfbc
[+] ./data/clean/baddd1785777b240daec204cc72a840c75f1cc1d428b691e3b491c5fb75eca75
[+] ./data/clean/b0bea6e6254f069b22fe9b6af14a316587dfd4b6642134677de5901744f4a08e
[+] ./data/clean/066151ea27da27ca88b05235e0b917e4abfcd0544beab1b2ed24e1724c48ab8d
[+] ./data/clean/beb0475dc80b99ea8c0e3c391fa206c1bc051b171d756e0bdc20d284ee8ccd21
[+] ./data/clean/5836b9e06e9fc8692c0321320e934accadc716ee5d016722135fcdcc38c902dc
[+] ./data/clean/b9f65699acedb38dd6ae3c7130ab67a68edfadeceb9025a7335335c9863b8ae0
[+] ./data/clean/d3a5a774d6352a13c74bbfcad5f667bcfd754fd959946ffb4919dfdc11db6adf
[+] ./data/clean/36b3b5c705c560ac45e25ec9e06e2fb17df0bd0edbe0ac880bec8cb010d9c2ea
[+] ./data/clean/cada5671fc807eef94e1afb85b6a466447426e430a52957997d802eff7056d80
[+] ./data/clean/7cff03f890334150ce3f369c395781e0809911623543150b418357724d2cc459
[+] ./data/clean/07e9c84ffbe387f263a86cf87fdf44d50bae8d6f0b3a10c8f99556e85a7e34bb
[+] ./data/clean/a12fd587781878ef422dfe740a18ac7e43d91e7ac5af7740633ca60d69445019
[+] ./data/clean/fc27c9046d023838437b279b69cfb7af962acb4a8ef8c654acbaa0d12a965442
[+] ./data/clean/aed4b8e81e615a54a9491fdce19e3e3b4ecaefd6acd3b4a53f79858460dd0851
[+] ./data/clean/6f9195d85b386099f9f63e3319f5e9e85e0f3a1f0d48cfc9a37e7eff65225933
[+] ./data/clean/d4f991adfdd1949ae08a106dad8a7899fef0bf5e691ac74099137fc5ffd9386f
[+] ./data/clean/c52bee78658c897ab70714ee4600a4fd509c7362f4dddfd1fc643ff52d6ba314
[+] ./data/clean/c8a56a8288d2326fdbd47788820d501c5c74c211e3da8f5f2669ce06e213aed7
[+] ./data/clean/ef1d64faad0952a453e3e3ab55b878170e777f926b636550d6c617827ef7e858
[+] ./data/clean/7d0ba1a011ec2c2c392a86d1c5ebaf20f5615142ed3de4ed5cd603f60e520345
[+] ./data/clean/e95e069b08fdaf9e8da3f9b99110d8ce9670cac71ad5268a2de6b6df64b531eb
[+] ./data/clean/820ae49d5ca9b263a6b1c54cc0bc69654cded6591c37924e8cb116b2a5566179
[+] ./data/clean/e4414327c8bfe5eff6abc3c6b6296ff66f792169fc02693bef126b6edb6d2eae
[+] ./data/clean/ffb509f4a4e6619fb4535de95a41e7bdf08ac919ac564378e14411440ed9c6a9
[+] ./data/clean/11b7bf52a54a4e5782c3fe2c3c68645c7ef75d6f0d5b284db6eb69220d137e16
[+] ./data/clean/3e808c7d0d1728d81d1754e068dfbbfc76d162a404d3820080bcf86d597d22ba
[+] ./data/clean/10fb638dc9c7e7d0961ace87320a0bd7ca48918bbb818038ac807b1172033c36
[+] ./data/clean/353196fc80da93a9e96efacb32ae29955c3487341695e65412bbe73c8d328c42
[-]
[+] ./data/clean/6a1323d4761dc8dcb813598776434b1489110192e94dba3097fb841bed48de5c
[+] ./data/clean/8835a72592f8a7da8ffc8d058410d0175cb1905b018906f22b922dc1180c4027
[+] ./data/clean/c9481b9dbe4a9689b0d694a17d2d3b02813c283435b11be3f345ef449db47626
[+] ./data/clean/d192199bfb64e0bf52e6df248718101fe12e33cbe20d9660fea037204e774278
[+] ./data/clean/fc8ef5704c871187ae4945000db3d3758e8b867e90f8e530b0f12c6438d17d35
[+] ./data/clean/c56c433c5b65db5d184fdc273725ce81d92ff103e9b281f697389f7e48877f73
[-]
[+] ./data/clean/337e0047c26483876b4211c206e40943b5cd73dbe890658471f07b7dd03232dd
[+] ./data/clean/976b533b4ceb34aa9ee24ee98303f4423f6e627c8a41697fe0ef428bde511e81
[+] ./data/clean/2c123c6acd967cdf1ad2855187cf3d8357b16a4fd9c2f18ae54cfa384165fa11
[+] ./data/clean/3cefaa966d5e204fe6601160e7ba4d27910437bd1e83b8e0e9f2c4c3de210227
[+] ./data/clean/fecc1365cc1a49cc521cb2d849a71fb10bea2cca3d45cbb7cd81e0b2aacf6620
[+] ./data/clean/57402f55eee4634ff8616f208903e57633e08387988532ae2de0bcf24b860693
[-]
[+] ./data/clean/6b7b6132e6f37b4e3de4875e3e65b88a73d4961c611fff7be646e849e7f7abce
[+] ./data/clean/8e416aced9319c33c48654100f999279e69f6a81623d4ba92bf950f4dabb5901
[+] ./data/clean/31368d980d418dbfd72d4e3331614bdc8ba215159a42b437349e239280c9a91d
[+] ./data/clean/59dbb842eb105b68f22d78ac200c7bd55aa12ea528e5c9c4ae6cb36c356e9505
[+] ./data/clean/f8bb94e382806820f6493ded8466f2ae8045a3b06b66fecbeaa9239bd0a32754
[+] ./data/clean/e661aca2f9fcb9b3ee9403c2233606993bb45c6fc28cd29e4ec6b280f9a888eb
[+] ./data/clean/b0863d305a74c6c74657cc57b3f1c21a829d7a6183a9f38fdc5bfed9cf320e10
[+] ./data/clean/6784269501e37eeabeef9ef6bb0f0c690ac90e904e9b901c540cfaa7a4dbced7
[+] ./data/clean/4f34d7c266b6cf16bbcbf1c55a20d9bafd49366011c85b76229bb6523332c280
[+] ./data/clean/f7ae0aa18ff14aff0e37972ce0a48545d2d3752a82e6696a5dcee801ae3466f3
[+] ./data/clean/3af0c080f7eabc7da8a65a695dfb01621cb68cd0a905dd3a33a6af70e4a09b50
[+] ./data/clean/36783a5027fd3140b97eae048aedb1d23e7f950a52d730e32d4a086402cd0f16
[+] ./data/clean/a19ab81b3e587b57a773357c039b18814109fec865f0d70ff502ac93fc44d472
[+] ./data/clean/c133c69794f369ea0a4041e4edf085e39c1cc1343665f5bc4765667230069d41
[+] ./data/clean/f778d267fc863772f35601fcea10ebff9a42f95ddd34c14c58af58e2f6d4cf96
[+] ./data/clean/d4af506c47ab433de90ca6e9fe81eee8ff12997a601c5ea923cc10e3f992b087
[+] ./data/clean/ef1e50f0cc9fa1751838b6e0ecd533cbd446bf90733938509fe255cbcb4c4309
[+] ./data/clean/a53cb0e16ec752ade4f70fed25e84d5f69463f5ee745e5d0fbefe9ce652327e1
[+] ./data/clean/3ac80e0562022b833dc9291d1375317fee90b5fef564ce028972b04b50b58c5f
[+] ./data/clean/e239b5c4c26c48d574c9d99e8203b93b36fb8b33fa165b2145f449888a6891cb
[+] ./data/clean/63fa11cc14cafce8fa7e746e5807b7cacb4b0a515facc13d1bfe1a041558c28f
[+] ./data/clean/5bc52fad56943f55301d51831680ee03e31422251452d1c36963ba49160afc59
[+] ./data/clean/dc18bf3b06f1ade38e8ef24c8071b2cc6c6893cc2e62e1d6c6d847ec521976a0
[+] ./data/clean/68789d5775003c4ea52cc8588bbdaadacda4b58f67e03761ff17b07d44ba1415
[+] ./data/clean/a2e5dbb8b6ce5ef7d32dbc75af3ebd9229c8389f468f7fa5457221e55f4e7c6b
[+] ./data/clean/e45961a8602ebf4bfd718b2390ea37a823e0fe201f1873889454a838fbd29f21
[+] ./data/clean/4d14ffbaacc4eea946ddfdd34d34310e5ff9e0626656fd876df5c35867b3e011
[+] ./data/clean/bf1411eefbbc09cc2c15471faff70c89a47d4a796a2520c5bc0e9b90ecd95554
[+] ./data/clean/8f379b7d937f83ea30a954c81c142a67802f6431574728d2bafbf06889d7994d
[+] ./data/clean/63c07312adb6f8a8bde93361c30ac63dab4de1141af54630eef11e54b0bf983d
[+] ./data/clean/9c681c1b22ecb47eb440d637208daf12b1a5e6ba314d8be7fbd25fd8ed2f09c7
[+] ./data/clean/a2e5d8b4cd332a567f3851fec3787730894e461df49191ad71b21695805a57eb
[+] ./data/clean/ae93b015de5835809704350581fcdf568914e20349a1584cee87cfb49b63813f
[+] ./data/clean/da739399f10955b9a133c303fbea666bd3a901593e36f9e0f924e850c8f4a1b4
[+] ./data/clean/1b7d61208f0095224775101aeb182759ce85ccbb5e0a13cbae3d88c5fe7e7acb
[+] ./data/clean/1d417bbe87fcdd84ec500328b538c17c8806547e6f7154c9c10da916f69fcc9b
[+] ./data/clean/ab96a75ee3116059dcc7a35b96c5c0dce73083b1729d9341bee17485ecb048d7
[+] ./data/clean/c16f020f56a563b8f92f2830d795907c2b828f1a5f48d6b674d4b2d8a715af60
[+] ./data/clean/f5072d3c6641b987ce4f504adc8c945a0797864b08b7943ea53450738526ba28
[+] ./data/clean/ff2f0e766fa89869acefe61ea18954f1b02060826215b6331548ae481862c145
[+] ./data/clean/4f3ae133a46d42b6a0fe75e95bf8b915f9f0890ff5e79ae10a5b308523c917fd
[+] ./data/clean/c30ab3feda30d4b435db24ed19b5d047411a2208a3153dffa948e7dcf0bda9bf
[+] ./data/clean/3b73639fb7ecb324ce0a87bee012cf4cbe528717c6255eb140b280840fe91b48
[+] ./data/clean/e5112f7522636e5263399ffbf7f52b1dfc7b5eac6efa81d1a5ee441acafb10b2
[+] ./data/clean/bbeceb8dbeb159152b1d1b63aa4a23bb97a93ee7e63271213c181d3064f2ddf3
[+] ./data/clean/15e9ef8fe24a1ce0ad23911b6ea10d3e56c8586ad310da7b994958f64eac92c1
[+] ./data/clean/09cc91b6997d3c2432aa73d0d021856b8603304dae9b315e10289ccf941b5a21
[+] ./data/clean/b2aba986be6e8acd51964867ab3c18c7782b5f146b4def56e04c7226aeaf9a7c
[+] ./data/clean/ad1911fa84b13decf301c78fb1561c635bcadb1e8fc76150814b62c3c0c9d979
[+] ./data/clean/56d8cfcae7af7fb6adcc748e43657989ae333d46a25cb52aecf2454734387747
[+] ./data/clean/3ed9c592c8058fb68ee5939af579b7aeb0bcf2510cb3e724b23f31fecbfab04f
[+] ./data/clean/9323d73e1129eebda48815d13b944098bf4fba87713a086c49dd53bf2ed70103
[+] ./data/clean/872bd73e1ad161ad7588afe46f7e5ea25442a34a5502be40d7c39b8d903dc360
[+] ./data/clean/9b773adba5e9c85afcd2984cfba4bb180bd251e69f693653d3ab4f2de51eb140
[+] ./data/clean/807b8a5a61c7d30149d65f0862eef51fc86e322b96a956ba04ae30fec266632e
[+] ./data/clean/a283a3000e631e281ec3b9f2a029faaf76aaf267bb8b1921fb2b9b0b51c87d19
[+] ./data/clean/e362670f93cdd952335b1a41e5529f184f2022ea4d41817a9781b150b062511c
[+] ./data/clean/84fe7824717bb55d7f32c7487e37012a1bc6cd4c8c0202be4bfb07e770f8dc51
[+] ./data/clean/b2e32b3fa44b3a9a8fdfa906627355f6f48b4821929f9bce5ded2d07894361d4
[+] ./data/clean/0cf9864ae3a8679ed503f954a453452c93fa44f99ca6f39bbc5860abde7fd35e
[+] ./data/clean/1350196dc351b56cde07ad7eb17b594407cf0dc20d4626b4112d46b68d47d631
[+] ./data/clean/baaed3870c0c5a5c48ce296b549d7d933f385e1591f16745f336f25d51114909
[-]
[+] ./data/clean/f71c8f75c886b60689574a7353fe79f3a140ea5c2263595354af7f8959ab485f
[+] ./data/clean/a4532438eaa9ffd439605cc40956892d5790128c1f3484e73ff3258f66550049
[+] ./data/clean/4f57f549aea9065ca3d487b18ee3048689cdb1a93947bd1368bb4bd9f2581e6b
[+] ./data/clean/c27ccb3657d83e9e0cb329807c1ab66d02e49a90230ef711d8348562b6f2486d
[+] ./data/clean/42497534cdf28b26ce51a2dc26e5e5262e403cd512b725d47df97b43a6ff21fb
[+] ./data/clean/6b10a3a3924275a1b7e6402f447f00bbf6bd771d0b75836a3a271cd56d5e9ed8
[+] ./data/clean/fae9df3860b5646e4b29e1d50fdcd4518e5bad04b998a796caa20a2bad08a930
[+] ./data/clean/784be3d82f86dbbab1ecfed093abd0ca78da8c3f35420f3d08babdcc3caad083
[+] ./data/clean/933c402506a218e34c36b4661f98c3c3576a5bb16839a90f839c5dbd172d0b5a
[+] ./data/clean/98c63b38c69f40ddab2eaa1c472bc1c3eab7e9158675d2124ccdabdc92d0ed3c
[+] ./data/clean/074fe023b714ea1bce48a32737c903a904e55a3b8d32196f122a4082d6ab37e6
[+] ./data/clean/ff6b47ee6165f4e10d450c96c1875d932b8e7fe788d0f53e615f2f25558db06b
[+] ./data/clean/6c4434f19cfa5a2e2e8ea30a9e33606efcb87aceec2ce550c2ba3cf1858b3b5a
[+] ./data/clean/efa6d85029b3850ae0d5352c933bc4b45b57b9f2733a19c09c0d75ad90e73cf4
[+] ./data/clean/8d546c1bf686fd06d9fe126e4391bd81c8c9f91db71abdcb1a2ee0318e780c44
[+] ./data/clean/90c0d77a160c70512cf2247f8b623bfaef562b0ddb367cba55436a01749128c7
[+] ./data/clean/e5c6eb60211ec6b21425f7cd63d597109dfd4c867b5645b52d05684be59097fd
[+] ./data/clean/bd7ea44dfd278c44ab7e49437d44d6c279bb1da1f92c9afefcb02babaa00b360
[+] ./data/clean/a02ca5e84246f1f7149f9dc4191ca48e6ee8a8ae0f82f4923aafec75ea8be380
[+] ./data/clean/6823babb87c32906443cfcfea9a31662abd2b8aaab30542558c7f52d7ac507b8
[+] ./data/clean/1e384e490aff301349d27c37139d304edc83cf62571875540ab468e3b0d65c06
[+] ./data/clean/8e5a9e595f24d07206791817972fe475a0d66f3abb9cfddc8fb50203ad449dae
[+] ./data/clean/4f8adc6306e241bfffd1f86c4ba362d0d255c00b92d967d810e8288e3394b864
[+] ./data/clean/7313c269bd76053bd3613d04f7fcfb2b1a6a0537806bfe908d6d89eb8d570941
[+] ./data/clean/f0f1e00ebb34ae2ff99f50fd6e71413bb3ca771adffc0aa0018663d98925512f
[+] ./data/clean/aa2d76729131d3f6a422a79925dcdd43bd2c4b341f4d765cf3c4338e4ec5de63
[-]
[+] ./data/clean/5cbeea096c7a0ad76e40f461c1a2c1d79bab42c1730ed70ecd8183302f9be357
[+] ./data/clean/421bd619eafb8ce48990654c61420de25b8c06e4234c1c7a4a227f5c673f855c
[+] ./data/clean/8364b6aeb14e710cec1a334a20342c6d3dc53541731621e28ecf4750551358c1
[+] ./data/clean/468c2119d5886942fb2e419086124847cad7d49a457a74e250e974adc52d1925
[+] ./data/clean/bc93b7edaeb63fd12b221c47ee2234e9a1bdfd57314f128dad993c2bd8c1522f
[+] ./data/clean/5a29ebb6da036e303611eb1304192655021405bb05452fd37886dde604ff0d9d
[+] ./data/clean/d7161581baaa04fc2e515bf724cc2cc17c25250a3574717d53a8f9d638e3d30f
[+] ./data/clean/8758403fc0c36faeb4aef38720963810ff1cd4f399e7a208fe968ddab5d8049d
[+] ./data/clean/61d45eb8a34584155d3ca770bc6a3401b5281f8682004fc656b5dca77f3a8466
[+] ./data/clean/1c3924ad8d9fb31809c669bb7f5c97b4386b6f5dd713c6816b08a408efdb39c1
[+] ./data/clean/bb39024c490bd804bab068ac14cf7cbabba1c2e7e3dfeb495d23b549955cebd1
[+] ./data/clean/00696555cbf6db83af785f8acb2270b9411cfc75e7f6d3ece0ec1ae146ad5acf
[+] ./data/clean/fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de
[+] ./data/clean/7b7f8973702f72655ece594ec9179a2228c62912a1f37d1c77d243476088271d
[+] ./data/clean/8580b8c95af3f470ff19627e1d96ecc6f2b614026744f74b2338c2d1e19bc49d
[-]
[+] ./data/clean/cd8e84c1f8d1ee3a7014343e3fb236329d2b67c1ec233ea4b208d99e3f95105b
[+] ./data/clean/1aa3927c7985386d42759656665c7b422ee226df16a19446af6d9a6613b8ae9b
[+] ./data/clean/13b98844b2fa4a39a4d8ebb414fc79450d5ab4f0c8f5141ac06d40b2a0431ea4
[+] ./data/clean/4a3387a54eeca83f3a8ff1f5f282f7966c9e7bfe159c8eb45444cab01b3e167e
[+] ./data/clean/751941b4e09898c31791efeb5f90fc7367c89831d4a98637ed505e40763e287b
[+] ./data/clean/fa17f4ba95f3a9c109a4479adab435587245286b050101cddc91c0e17ead09bf
[+] ./data/clean/9f5c12e65607d9e12ee219b8fd93b008cefb8efb2edc792bad0793d461cef8ed
[+] ./data/clean/83d9aadd19743604f193df6c1f50a8f4024667a7c6a24d14d96c42e6fff91d8d
[+] ./data/clean/1e9a13221f6e089d48d8a28c0b28e960f0676ea57470126d6a810c00480e7be6
[+] ./data/clean/4e62c0e369b1eb045548d9c9bb2ba27137e6456d12f5c97f61bcd5890239fe1d
[+] ./data/clean/e6ca1a566c6af3098e404e3b8804aa0c9e4e265df56158103e3c9a4441aedc1f
[+] ./data/clean/4e2f6a6effc06e758dc5107084598f7dcf73b51b90d37c427e2d3736d6acb4f4
[+] ./data/clean/27a835c4f4c7b44482f991fe82b7163d32fdb4a4b01c9fcf31724789f5017309
[+] ./data/clean/3d0689d906f39cfe1ecb872685fe5db9a151af0db6114f925195da25880b1242
[+] ./data/clean/a7488e0bbf2c837ad00cf1862a4097d640c5086628058d62a1f745749ac13057
[+] ./data/clean/b9c549419499dc662224f4519bd9adec595b47e65e11db00d4fb83effa8c5212
[+] ./data/clean/5233a3654ef37c6c5f1ecf4efdb89fa135bb9ff3f81e3195a4e35cfe02ccd337
[+] ./data/clean/ed0b243f223839e41743c40ed813c8e44c07a668c4bb7b269ce4a327c92c72b8
[+] ./data/clean/552b590ee6c54f05aff5faf910615ef897328b3338cf69f35cd5924a2ba6eb1b
[+] ./data/clean/b30ab08efd763bf8d9216baf03beb57800618f26cae2ec792ae6cddaa7a6d640
[+] ./data/clean/dd9fbf8c32bb3a29f7062baba23b84fb9f7395a4ab3fb7001071154cde92f7d5
[+] ./data/clean/9ff3e2a010bb96dcfbb0093558b6cbcd92604b84766b14b2ff41cf7fc642b048
[+] ./data/clean/2c8b6b0497ac12ab7641342e07eca16b661b31e81444798799d4b186306a9a77
[+] ./data/clean/fc3b5f953fbcf97ca87a3da6c52fbebaa3dce8d70513cdb556db89a3aaa40028
[+] ./data/clean/7fcbbcaf1aa85dce8d75fb38dc4848ae12e8dd913cebbc37bcd3d0123f0a3cab
[+] ./data/clean/9c9c7ea0965fe1b6b34b07921e5c46ff2bd45b1583b26f5e78f3edc202470c63
[+] ./data/clean/ea45bfbe5aace1f1bf9184ee4053ababb82538449df7f9b1b73f62eb1a5741b2
[+] ./data/clean/407ce8b8b076c5e7c127fbd0395379dfbf6ac2dcda2fb043a979628e0610ad06
[+] ./data/clean/a126472dac60d6756fd6b582f1d2a240bae68cfc457f5b406176b019f5373661
[+] ./data/clean/92a2549710a89a48c8f2f9ef03565fc339c68e6db8c29dbd46cdd735e8731a23
[+] ./data/clean/d77c699ff8d890753ce6c572626e93ca909fcb7cc65cfbf160efadd994a2b81b
[+] ./data/clean/8b640c97a1ba0925000c37721b972d8f3d6f7e4516ce36ec5213527296724531
[+] ./data/clean/cdf14d1021ab6e6f1f30759a35a0541a9f257e3efc26d9b4aac9a99ac68bb8a1
[+] ./data/clean/ccc881be5c4cec84bbaae993c76a67427a90df9a51b573552becdd998cccaa50
[+] ./data/clean/939157d713e941c2b50a755d696a9f4880d05bc71218f41adf5c0929736fd2bd
[+] ./data/clean/840c34866229e45d2e404e24ed3cc2a98260157653986ed24fab869d2c15da98
[+] ./data/clean/9f5c1d3f314cd4a6260550bf865318252ac9811fa6cf82884ccdea684a10ed06
[+] ./data/clean/fa31d1c4201a6faa33a75004d1415d17cf677a719fb172b4e416e8b7c4b563e3
[+] ./data/clean/61ee8b98c26da669b727c15223039a00fe28d40656c17b160404c82bc5778040
[+] ./data/clean/64ca31ad8c808d9c51fc04287d6430c55793ed16ac1af7a4be799aabc0619287
[+] ./data/clean/ce29fab2de75fbb40a2da29c9ed547cbef758c58e0ebce461cd56e42194ea6b0
[+] ./data/clean/7ac0fecd5b8615fdb384eb34f34e60ee04c88dc71fe58a4926ee72ca364394be
[+] ./data/clean/ce514285ff272426a4cf88200d402a58f66c9f77f536664efe0da6ffc12026ec
[+] ./data/clean/c2b98bc036fa232039422554bfd4fc1517d6143d6914aa1114de2e2982b9eea4
[+] ./data/clean/ed9fb40c3cb5ba0a9ac3ade80b503f5d7128016c75852e612a6c838f04401ea3
[+] ./data/clean/0d64a81ec5c1e9800bbad38a5cf618aea636cf89ca7e1271797a7eb9d1ac363c
[+] ./data/clean/2b658d0a86220608c9f8fac30494a0368778fd7da5e6529257913b45a52c4a55
[+] ./data/clean/da4e7041c7b78b845ce44349e5f8f3cb10906519a5be33e5d76c6fa6ad78f6d4
[+] ./data/clean/a26863a3a3e96c9900a9abb54935cd704bc02fc675495b25251201b1b034bca5
[+] ./data/clean/9d67efa96796e24cbeace6190b29b8dd03271326b83d87582e4f8515d753a429
[+] ./data/clean/f1c3b48b2579225f3cba19a3d8d26e71038647771981801348c9bed3348f4542
[+] ./data/clean/2294fed3a1625476ebc1afc219793fa9ed4ce56ae036926b79776cbac1ec2b30
[+] ./data/clean/da5e0acb7ef7d6dcb11507da9c8fe224ef76a57a27caf84afa679fb9e1408ec8
[+] ./data/clean/f0e46c0f9b2991fa6d187c6b2bed28139c67804cc58cc45c77f06a6f217cb21a
[+] ./data/clean/778c6c3c4c46fbbb9e9f31d07426370566beb21a44e74ab8127c814e5b960a76
[+] ./data/clean/fdfc28e2700cd6eae2aabc5d171d4a6a0da341d9f6172c4bdfa80176a79b1d6a
[+] ./data/clean/841b14bbd4482c0f38c407b62bd27cace388eab46b1d639f028f1d193608fe35
[+] ./data/clean/9c4a85e6ef2d5ad322d9385fefbd751d8873bf26ccfdb8c9810600dea85c4ff0
[+] ./data/clean/15667792199cc764a62e3e61f5380b08298a107b12c7c3d8109d8edbbc11cc7b
[+] ./data/clean/0d392968ded34d674409a7a79ff6981990fa732a9e67a767cbedc4c98a0d7cbe
[+] ./data/clean/29bfb0f5b72c7cc57638fb369037d4857f854bf55629a654ad3322265c80c2bb
[+] ./data/clean/df2e72f49ca58ffaebf87fd9800132d27d647825f2aafb1fa4d4114b6579540c
[+] ./data/clean/3513c2b2d4f8d55e07f74b3c841b131155212439d3697d8c2865caf93fca3fcb
[-]
[+] ./data/clean/c196e8245cd28369f7635bb704dfb31a7f977ef48c8f7401eb516916244a61b7
[+] ./data/clean/e0725e75fabbb5734dcc33b69d1016d5907f77803ae6c9d53bc42fc23ed0a9d9
[+] ./data/clean/d4c471316c61201b15da33fccc87601c639b358e40d29111753f34019c1f2033
[+] ./data/clean/8a9d6525cf296a7561e7b45ae10ab658c75b954f15346570b701891829d3cd34
[+] ./data/clean/5ef1c94c5c2c118b1dcc95525dd054ab5475972c8e02f06e6e0ee311e40d7a1b
[+] ./data/clean/e410347ff0234a42a3f3599bd85c93acef197ee538868ab53349d0fa616e07c1
[+] ./data/clean/7df67e2e0ad0d26b378eedae9d517b420c7d17715a95a0b1daf29b12c239fed5
[+] ./data/clean/5bfceb053fde7dc45d89694a71c2dc427dcc96124e29e8e31e5afb5299a05725
[+] ./data/clean/46c2deb946de70ac2193e70e263fa6dc1839a44793344e57cf2dcb8effe9bb0e
[+] ./data/clean/56cdba9e78ba58bf95456c1773b2d565cd0073039cd138f8aa8f7f8d247a37f8
[+] ./data/clean/b3e952c49ff1182df5ffa0b165aca07609eb5a4476cb78b7f8aeaea47d5d3ffa
[+] ./data/clean/d3347f25295818f51fba0b5b859b8c0c9ae8be104bb26b59bd4e9e7487d158e3
[+] ./data/clean/d5d90082f580daf8fdf16a13c00dc999bc5ff03b0fe8ea80c3de7261639c0405
[+] ./data/clean/2686be85f963d0d0bb275e92e5b543280d8742cf10772303e3189d0719b6a277
[+] ./data/clean/70b3e9aba2f8da3e00788cace8a7efe7968f93f0225c705e41e58e98a9afb25f
[+] ./data/clean/9ea15872b2f24e0c093b7b20f80986f13a99e0c57a7d2a2dc0e4ae0faab1727c
[+] ./data/clean/56c7926c9658f915b115e99b02fc3ac710e472af2f65305d1c99a13fe316e2f8
[-]
[+] ./data/clean/10756491f3aa754f8b76af96f33a597826785f8d441d75abdc2fa74e7073ce6c
[+] ./data/clean/f1e9efc23bc9932d633c77fd91619406384537254d4fff9fb53d490abaec2db3
[+] ./data/clean/e46c156d2116416c1c27eb47b46e891ec7bc12522b73f646d576477b71aa69ba
[+] ./data/clean/95070392da581b473096bb3fdf3cd8d6093ed027fcac12f216f57f8d14deb15e
[+] ./data/clean/b0bcdf7cd1d65e61a9061d539d83527a89b69583958f8a26c6bf9766c1b61e0c
[+] ./data/clean/6fe97c56d75dbb59ceb78d88bee42e0667fa28126a2063b6098a24dc5fbe95e6
[+] ./data/clean/eac59a86a3b0c97c7b16a0fe6320b1364898a87ee3b3355fc50a71f2c57571ca
[+] ./data/clean/7191ba350f924cd2c059f0244a2a933656d19a66e99e05d079d7e95bd2634b92
[+] ./data/clean/a9b095ed024118d9d990daf7b84159d899e856f1e344389f575a1e2c274969b6
[+] ./data/clean/92fe8e8d5ebd4aab0c03651a8f0010078ac689eb32abdcef5902ad976e443757
[+] ./data/clean/3f1bfc4be00fa0c07778a986e81bf21453ba45f76fecd261d7e88e7db76a15a1
[+] ./data/clean/3c6a9a4adc6bd75027924997abddc1b26f859675cf6f4e5f996b645e0f53d7d0
[+] ./data/clean/d581db473caff2897d71bb42609485151d8437c9a93248d323efa36a48b28440
[+] ./data/clean/cad2ab101c037d8f45073f61f927dc8750a937b9d5b878453fdf48a6c04660db
[+] ./data/clean/42d508b3bc7fa06be6d49978b469ea556bef6e5f7b3e8041ca6341c817655a00
[+] ./data/clean/fd08ac764e086f40a53efc6d531a70aa8c63e608ec52cd7696ff5020d0abc168
[+] ./data/clean/4ad70fb78f58aa38a579f2e0a293bf5c4dc63706b70799942be2a091ea35c21f
[+] ./data/clean/b62848d3c4a165eb4d42671f6838fd7c437e5bedb41c9648d457c4ec734bb97b
[+] ./data/clean/c1455b1e8c9f3d41b7d131b296215ba912a312907049ca36844d1cf472da2857
[+] ./data/clean/de72dcb5e14f7d6a4b3e55b273a10a16c6de77dbb7a6f8575ea14e52aa58583c
[+] ./data/clean/d89ab72ad8a071593be0f48c5fc0fc40802c1bdea05e39aebbf26fabe2fefece
[+] ./data/clean/031fa2ab892dd560fcfb87377eac92e0252b2026634c0530d2ed60c39b35d948
[+] ./data/clean/b79e0890e5acffe7966bb32a6aaa415d6e334d0df5452debe6a867bb03451ea6
[+] ./data/clean/9137b804681b06e87dfd6f548f9cecfda0da5aa17cbe0e673032ec465168c9f1
[+] ./data/clean/f844a4a3e020fe064218d65a0f26b2db28a3d92ff10077fde023454d3adc8510
[+] ./data/clean/499010e852571b6bbfe8e7a6b9f396283efffac99fd844d2ca390e61aee2ce8f
[+] ./data/clean/1629630cf717f6abe87bd15813ff693441ea6ea32785c08eb88fe82c9e05f45f
[+] ./data/clean/729d140140c3af5b46031f1a7652b159b08721afa80776f17afe73633800afc1
[+] ./data/clean/651e0b5e530e8058d27b7784f89c7839476c5342b0ae3abf85981b6c2d0f4080
[+] ./data/clean/ed1f857082e575e1d2426adb2416de6172bc993174dcc95801fc3516c451d96d
[+] ./data/clean/569bc163dd5ff6623e1800a8ebbca012c8d375afc68bad7fda0ffbe2876791ff
[+] ./data/clean/48fa68f3e77eb91e1347f02bf464bb84542275141921f22132fd614ee7d5436d
[+] ./data/clean/cd1eb2bfba4f7ced178a1dfe059b36f6e09e7a12f6f765d10d8c827fec1f4849
[+] ./data/clean/388557172f87d67a033d7b8ea0124246af2e7c041e93fb6cfb35bb9cf733578b
[+] ./data/clean/7571bbd1fb453730a71be694bbcea071bda1c18d6c98d465d4c25ae103a26bbc
[+] ./data/clean/51cd26a60d77b16d7bf4458fb5e54ba7c4d1f3b0df3de51bb95391b54da33c21
[+] ./data/clean/116222b05e6963fad6f8aa9b9c4878724e9771531b4c0b8ead67cea7203b4af5
[+] ./data/clean/f2e7594a948d89e4cf89bd195fdf329c3d9955f110c10f68772b5ead83d23ced
[+] ./data/clean/c824e459c950b4d249fc2484c441d9d14b02dbe4192a96d2655fbb7ff19c6857
[+] ./data/clean/e05736304339b95938f623f5e5ab295942ccb728cf0782e429ff56c7f98c4ace
[+] ./data/clean/cc74d0bf88a9aedd0568857d1805bfb52e7ef04202cbf3c2d29e6c49dd001a12
[+] ./data/clean/5677d8babce093f8b67ae7bda6ec28b1f9196a8398c7fe482ed7eba03272ea26
[+] ./data/clean/9e4821e46e6728ea485e0a7b82f4ee7cd5a746a9d61e83fded521560cb74c323
[+] ./data/clean/67f0e5f712ca3defd5657016258e959e199cd779892dd2ba499327d0112903e1
[+] ./data/clean/608c9793c4e7a8ccd7ac8899133de7ff7c6e78528fe1e4dc03e19999b435c101
[+] ./data/clean/70737bfd33f154a76bc600824185e30cb37b7a94a58a2906fab70552a66172f5
[+] ./data/clean/73bb2538c8a42b16397858d449d8558d666918a17e272aa74934b2014482a9d0
[+] ./data/clean/8bc53c486cba7fca5ffe4dd43976cbaac6bfb24acc95d23da5ad5bc0e0689a3e
[+] ./data/clean/4859684e359b34a60f11ee19532df88abfc16b151581951d263f72e070e83ac4
[+] ./data/clean/beb715404b799f3181c699e233f98b2a913beb677e94abe8e2872499fc755385
[+] ./data/clean/c0a6a84369cb3e709a6ffebed2b38ab62d731b79d052d6d6fa8ef855bc428778
[+] ./data/clean/bde229bb4eb76ab2a58b46ccdeb0a0fb35990404a840dd47c4a8932f47d221a0
[+] ./data/clean/46b3537ac50fb5382443e98b1e962edca6f5d916efcb1af5182ea3ca45ba9b55
[+] ./data/clean/484b2f751a965339025a2ae832c0475d9af2ba9e3ddc1835ba18d5cd08059f96
[+] ./data/clean/6c190a2205122c65c196283b32bdcc1549c465e730793cb1c6169857de781eae
[+] ./data/clean/e24ed8f78ef41c1bc17386ae4bbce0dc892c5b89b12c03fc9fb61d359b13f1b4
[+] ./data/clean/496fa6bf30f3205fb2232a1706d6de91b3a5e27cd2c2cccb70b7a3a0e29c091b
[+] ./data/clean/ebf09c166c54927f3263ac71d0ec424faff8b0dde3fd5ba561392f25a06916ea
[+] ./data/clean/593e8cd7bcf2ec412443a6bab81d04011693bd8783aaadc30af62047e916471f
[+] ./data/clean/e4b9f694cb1762aa33fe0a4725b12e570eae796bfde6d0d649533ebbc30a66de
[+] ./data/clean/16fe4b3d2c4cde39c0ea555581d8dfb929899c3d650685daa21eff59ae4e8fde
[+] ./data/clean/197521c1b8b28de64851ef75068b15359d7e504d7b3c26db4da87993cb2f3db1
[+] ./data/clean/08eef39a50bbc70e4257caea1df39bcfe2cf3ef725a54c3bfa01da3a9046ecee
[+] ./data/clean/6e8cc572ed4ccbf7ddb375cb841d936eda2366508019e570778ec5dafa0ecbdf
[+] ./data/clean/17efb7ca5f719d6a8c08791c355caecaf77b29b02383bc8badf078e086a0acc8
[+] ./data/clean/f86944cfece2d19515389c9bb8775cddb1d0944fa2e1ae351c4e0796ef650fea
[+] ./data/clean/d17dbc3b807b62d77e2e67badc10f992140187b109987282a120f900f7813958
[+] ./data/clean/38515483413002d884d7354be2a724117ca9e6b0baecfc9d47292a194996f72b
[-]
[+] ./data/clean/252cd8ef43b3c4d21acd2ddcf1bc6a1546c682653c124dfba1289757662cb760
[+] ./data/clean/bf359e51873234caf87a319aa1099560e2557a942f6d9b3af61ab9f0bcf51339
[+] ./data/clean/84b7b28db52ae454caba76b134895eb3244295cb3a45ec40acb9b5d653c96553
[+] ./data/clean/40b35149333e31d7253b7cc4a857da4ec9bd8142daf00058b023c2bf7cf74355
[+] ./data/clean/4f162db6af3d885a51c2a9d67b1263c4f0bb091472891f7070b2eeddfdd99a34
[+] ./data/clean/083bb4f3b20419c87db656f1465e5f782acde76838cde6207f26aad035c69de0
[+] ./data/clean/b071a327f1ef63a137ff5a7c5aba0b0fd28818a0e476606d05192deda81d5fe5
[+] ./data/clean/592485374cdd9efbfc90d82da94d5c250aadbe75b9316baefdccbdb23c8f683e
[+] ./data/clean/e38b3e1b6dcc39df44e0fd20ecf91b60549bda698ed2958cff9ddadb87525992
[+] ./data/clean/fea559ea217255e913ec5587834e8d23235590b7fd70a92579c256fde068591f
[+] ./data/clean/25b54326cc1a1388f60a34df319a665d8a9679d251829de498320b221dafc64c
[+] ./data/clean/14376ddd07cf8df48803a3c0e606a66f6250bbe56e6fd99e83553ed617fffed8
[+] ./data/clean/bbf6d9ed2664f6bfcce40348a0cbd73c55ba364cec8649b2bf332e3301ed7a19
[+] ./data/clean/d9ede3f6b898a023015db015a47bd44534a2ec587f03917924c82960a7e91f95
[+] ./data/clean/34d94e88c0a4b7827d4870bad34ae3b9dc5ae694ff463ef0efa1f4ba474a7a6e
[+] ./data/clean/c73a7928dc9f9baa4b7dbb14d75b7a5a556adf76e283ed6b3392241727eef96b
[+] ./data/clean/cdd26305649864b79e4fd13ed46657028a881e7ad46b3e5e78842c21c0a2f184
[+] ./data/clean/c27715d59ab8541b7e90e7e982758f817f1d6e52410a9fb4706a52ecd5bf0587
[+] ./data/clean/3441d2ca0928f7d90cf1d6818095160fa56716841e49fc15042934d7452cf376
[+] ./data/clean/ebf6ee7b73c1b467c58f9a2bd668206ea48dd5cdde2f0236b7709c1164f4f093
[-]
[+] ./data/clean/b9865611be065755c23b108e053e5098f0edfe679a6b6628386569412efcd88c
[+] ./data/clean/ed168045d0402e26305699442fc2b019b9967ca401e084748a763e8f08a5651c
[+] ./data/clean/adf30bc2e756b42bff841159d28dc72ccc98ddc1c04fbbb3fc44110cfdae5abf
[+] ./data/clean/bdb16bf6b4f2467b5a30d59c4b544c1a23a1daca6cb113273e0c3d3d69782553
[+] ./data/clean/a70008779e308a1f9dd567d28cb8933388c2fbe915262f2d1589576b5a616a7c
[+] ./data/clean/b820ed135975f062802abeeb232addc9a3a75102d4fb69f725df1a0e7396e896
[+] ./data/clean/d935670b38c64de5076c5530fcba6599922519629c9e647369d5b8d848434a7d
[+] ./data/clean/2747c94d6b0e767ada89d519cb732d898933fe4db9d8a2e446d64686c28fd1b5
[+] ./data/clean/627ca7b2e6bb945cc0ab173c14c90637d249712e34c6091b71273e4150782079
[+] ./data/clean/417feff43085f5380344cf9c959dd90b1d1d30811e4e02184f85d7fdb7d3d0d6
[+] ./data/clean/89928b2405dcbcf9a3b2a2350eac872e4188c474527cd4ef61704ab2f17c2b27
[+] ./data/clean/69d92d825f60c14c635236642e5d954153b4004de30b680d95f062a0a7530f68
[+] ./data/clean/27442c2dbdef8c0cb2ff118773a0c1d90ce619139c0d4bdb20e799f6ec421853
[+] ./data/clean/c567cbe2d4c5be63c4aeb21232ce28fb7f4e9364e6222d35e4d16b1d018c69d1
[+] ./data/clean/71434f2a46e7ebf73a1e06100bda24b52459a37d0dd39fa3ccfa63c54708fdac
[+] ./data/clean/52360f17c9c70c9cea3316560b40c4d89fd705ed7e6b6088c99fc54d4cc35eb5
[+] ./data/clean/898aef79d3dc23b1127c39b1a95943361a9afbee298b856124c5170aaaf5e18c
[+] ./data/clean/d0dadb4665a45db2cdf58e80e7d9fe7e675c04bf6a627bdb491474dd800826e6
[+] ./data/clean/93ca178ddbd4f17b9be409cd4aab5e8108671381d66ad8ee089e81951108c513
[+] ./data/clean/41011e17f51f36ee20baa8d1d33f5c085b3a4c0fcfb02937fa86f54ca8a87e40
[+] ./data/clean/7870240a230355ae6446183ee800e219c475d97f96569f0ae35c4b6d1fc905e0
[+] ./data/clean/3368f84c5c1e52d416ae74615088b6af101adf2167b1fb009125bdcd4ca15bf0
[+] ./data/clean/73e255675371774c25ad4717d5564e137ef70b087ec1f4767ab11ebb275328ab
[+] ./data/clean/0a573e23b28a82423bf443f4de8b0f89471035a0ab4292de054bf5f03c26af60
[+] ./data/clean/effc54b816c924aa647d4909d667c59764c806928adc12aaccefe798536da3ec
[+] ./data/clean/00070b0d4cb037c40d5d2464f92841aeb9ad863472bf9516b959d3779cbfe622
[+] ./data/clean/29d86a492b627f71ffa7e2b7eeea2687a217acb3290783f53cd214848c538347
[+] ./data/clean/10be808b6decf8d8c8cf99de86bfeb43de3dbe0af16f799060ff8371873c0d5a
[+] ./data/clean/18d3606f52a3771524b02e4191bbcd9ac1a31bf603e80df62d2f6037cd6ed471
[+] ./data/clean/a372f66c631f9ca7e5d175f013af0b9bca952957e85bd63be8ec02077a888b65
[+] ./data/clean/9c3b9def86e340419c324ebd3de0c6f3c9a97694cebbfc3224f94bec30b7e098
[+] ./data/clean/85723f259c824129052ad6190e5094f66f47b175a580e17b6095c7bffc8d90eb
[+] ./data/clean/7eadc73f8aa77148ca289d5ce5c2632f3a157d313079583454c0421bb97d5646
[+] ./data/clean/a912ff7e63c233d4cfe3fbf0a92da134861638d9feee57ff0099a65862c5b3e3
[+] ./data/clean/3530a30a2d62f158ccbb9f2af51722f658bbcc179e559ecc06a0cbdf3007871f
[+] ./data/clean/ced97ac768997b34fc37e4661e66ebf3d253cb068931bb4f2faf1ddded3016dc
[+] ./data/clean/bbd0be7bd07c90aa690c6484b765d19a02bf5c60841d6497d8395bc5b1f976d2
[+] ./data/clean/34aef088190d020b1684d7433c2f9393bbbe37cc33dfe40ed63195a16a735a85
[+] ./data/clean/9d097860d075865216c42702302493389bb4d102e4a9b26acf1f56c0df71f595
[+] ./data/clean/296ddfd1c924c0eeaf42c33a56052e3157716adb8ac6f84c6ff4b52e6b972a67
[+] ./data/clean/18a0defb57e307a84fb497d096a7834ab6ba59d7683dca00d99dbfab64e5e2c4
[+] ./data/clean/85daccce2a734a33d54849a046e8b1f1709c9fdd6e43c828c09e1f2d48eda22b
[+] ./data/clean/f1cbde5e9b8b08a42789eb454ffbeea497774cfc1c807211cb501dded8e84698
[+] ./data/clean/db69c3556c1408ae37cbdedca474de336e02deb2e2dbfa6f5cc54c82761f4557
[+] ./data/clean/85cf29dfdda3166b0c3d8adadecf00833fc6aa251b0f2c628bff2e698f87d8ec
[+] ./data/clean/1188fdc42a50c38b2abf53586a5175a6247bb3336db20e9eec65c6033525cb2b
[+] ./data/clean/21cdf6c23feb322ed2fde9cff276b1b1b758cdbaae3268a2b8b025e2f78326dd
[+] ./data/clean/8305bc3353655b4e0e1ae300064e0f865be0be10084c902d1f8958a6fe335910
[+] ./data/clean/71dc30513eb3dcb8c84aa1dbf8d2a985477ae7a3d12921edd2b7b1db8eae11fb
[+] ./data/clean/971ef57fe7a61f62cbe81857525206bf03e59df1377a6c6de700dc7856fcc089
[+] ./data/clean/33e0694012804397159c9e4634dd749d497de5a47c6ddc805510edb2e7f222dc
[+] ./data/clean/be42aa1ac3bfa70aa8c277a190743fbf1b942ba29ab149693aa86889ebe7ce04
[+] ./data/clean/dff9bb9e1792c24432db6d3b3272e8f480432711955cea3385d8943ac1cd558f
[+] ./data/clean/e29558ea9df1a9c22f60bc2ebcc18c054b6b54160175cb76f183c95754f1a8b3
[+] ./data/clean/b9e673f60fd682b29a66ab3e819a8e1100f2a3621bef102ba71af66b072e9600
[+] ./data/clean/65219ffa2bf89071b495af984ac20e2c37cffe3de2cb9c72ba40c1b8e2ced9dc
[+] ./data/clean/ce802cc9f317b8dc3af92d7b11953dccd58ea17a3056e8a06c1c207ed9317421
[+] ./data/clean/012426c78cc11ace9c6789be4da0fbbd2cfdf7cddc4df3c61761a3d0669ca4fe
[+] ./data/clean/69d288099d73dcca9eebf672e9887d7b4a63d2c329bff1be1444772c7101ea38
[+] ./data/clean/d899f2c9377a5c335fb8d2e78d381b1e7d5922a84246dcb4a7af6d5a776ff824
[+] ./data/clean/1a0d4fe1b3758b1e8a66fb1aabc92590acfc543d66e5efe6779206c426b412e1
[+] ./data/clean/97faeea90c645ee3f2667a8095499675a3c05c4f30f448cc2533506f7eff3481
[+] ./data/clean/93275d17acf2e2547861d55e935f53c2db216e9fe496552c0bbfe0949e8e19b4
[+] ./data/clean/61bd1930830885a8574769df384cef76d9ca00cb4c1c892d71d51156049d625f
[+] ./data/clean/9ac2c67f12b69085fdd7813a351545453a98c3f0074ca4f7eb3d7aee547bce07
[+] ./data/clean/6b57c3c5c1965be12aae4024dacf3facb4657b93fd5e86a8f2d13648e27afdfa
[+] ./data/clean/e7188e280f93f24f88e779fa4288e22e40e7ed43921fcf9b5c69189d662630d7
[+] ./data/clean/f94b5130a8fe71bef0ed851a297b0ffe3fc06905f335ce3c128d9b2fd89e1979
[+] ./data/clean/2de57f405329e93944e23b701aea4702ffc11167ea29f0bddd6c92f004b20a2e
[+] ./data/clean/ab5e21c17a4ea0d66f826657ed714c2db0880a0a19ade61abb92dacc3acfbc28
[+] ./data/clean/d9ea07fa377f97eaf12a28af9fc32d88c8b65f65e7f2bd446df246e881c0596c
[+] ./data/clean/0bbf1952ee724d29f04d9ea52cae9c8c781791d57ed127ae7b618704c3395a79
[+] ./data/clean/069271f8b51d3f29390d960687e5a251e131e3b974c1a8ba78ce664e2f605978
[+] ./data/clean/46328a0146053b658c19f39a9cc4fa6f27fafbf3b408eff21a66ab2639b52444
[+] ./data/clean/33bcf34ae9648a6b1be524b6939be10b43d81785f01d0cc85b86d6be75f35346
[+] ./data/clean/65194217ec194e315292c3640d4949bb8351126e78b0b753f040acc9a4ae59a8
[+] ./data/clean/47ddc47f579cdf2afcd1fe1fa1fa4241746775273cf82bff02388e20aec1554a
[+] ./data/clean/a4f8c322fdb17b22770aee031c3ddc1068273b301385c36ff6564dd8eb65f683
[+] ./data/clean/5220b5a0cb9cbe0979cd257b40c38a44839a6ab71ded9f143047e2a3268b0948
[+] ./data/clean/06c6db880fe8bbce85c5fbb3e93074ce92e6829b8df68fe053d24c24bfb04c8b
[+] ./data/clean/1d955bc90146a0b73fab61a445de5ad71a153e90e6bf0db4f2e5506b32211466
[+] ./data/clean/2c214b46f62f87b34b3f02647442d34bd8f9d60371660bb3589b2230b4694db0
[+] ./data/clean/78e1e6dd5b4cc1312bcc4c24675378ab1166971064adc65de6b57815f3fe3a06
[+] ./data/clean/78126182dbb1d76efcaf14c6b15fc10e0e99af566ec17093f65723ab45038bd1
[+] ./data/clean/833db9236ca1471180d12d1edf5655fcf8959ba839ca8df07141bb8af52d2a5c
[+] ./data/clean/7ec667cb7581c2269c0c8c39ca24806c1ef22845aff97ff2848365545dfd4d9d
[+] ./data/clean/554cf2abbfab4481d32bea81616cee8b1a1f043af8c83dfd81df48c15d5349e3
[+] ./data/clean/411ea79b87fb9b44746c2a711333b45e369f5583f4bb3286653fc1a15e457a9d
[+] ./data/clean/ee395a82baf3dd2a844d0f6c48a8c19bec4202e459eb753f9af70e8beb925c70
[+] ./data/clean/3de978b005bf2e88ba858ce37d9e27bd3584642b8412e22c300a1e739743838a
[+] ./data/clean/0bb8118c2ee7879c5dd385603f84148df643c04b14607676069401cb0820b320
[+] ./data/clean/f0f52edc9bac6ced10a096e357a12424cabcf1ad9afd370ca699b8725f8ecc8f
[+] ./data/clean/122bb4863ef62678e95a39f412b224816e20784b6d7132a7ab4036a2152966d5
[+] ./data/clean/7a7b342f322194eccd459ab2e7d5b83af8d1dee75b78114fc06891b6d66169fa
[+] ./data/clean/c7e38d167f3756b4d818debef7f69fd205f550f95be1e1903df668343272832e
[+] ./data/clean/a494cb94dfd5a6c26694f443e58e1f33f6d79f67094a0ac8ec143bfdc8e1656d
[+] ./data/clean/556fb4023100c734b18bd59eff82087922defc89845bc20f285ad2def7611bab
[+] ./data/clean/77378c8d09e7841cfcc31d42ecc2ac828898e2958240d2d0966d82c9229f641f
[+] ./data/clean/b13ea663a13efa2530694203a1eea7299f1e90c535e01917308dd2c0f964c7af
[+] ./data/clean/6374e1c9d3647f9c04ae42fff152aa3f9986cf2e778b76a62db4e2b1d53f0bce
[+] ./data/clean/142c996c5081f1be1d343fbf5f7f65ec535e94db0381d348137da61a46d793e3
[+] ./data/clean/a938a6f437c40becfe407ad7d5ecaa9ef2169f29a77ca978deabf3c388f986a1
[+] ./data/clean/a47a68c48feb8e447198bdcdde309f97ebe64e5027c3162b270e46de71369bfb
[+] ./data/clean/16cb4648f592752f3f98fe5964fd368b2e0db701a2c17c3243a33595b541c26f
[+] ./data/clean/92c355138fec3314aac791501316b6487b72c610c068d0f166af115bd234eb8d
[+] ./data/clean/867ee572e312a13e3badfea33326ff01d0439d2aa18323543ba4a94a4829bdfe
[+] ./data/clean/1753c1e8e2fed023af4fd2f1bc6a403f45136513bf0ae246a77be4bf2d8a2f3b
[+] ./data/clean/871c76c41d39a54afb41f0f0ebecfae4384d718810468bdf2a4ff4ed06347f74
[+] ./data/clean/a2611fb0a85c8b0282b608c1461adb6f61f216675c9fcfbfee382771e083fa9d
[+] ./data/clean/5f8a521c4f28b563aef665ef368684ff45604514084b89a92ae0f6bc10317d8c
[+] ./data/clean/6f621fdb475a137867f308e90b307b25c24643fa42a95ca9e66fb57dd951b13a
[+] ./data/clean/06e21deb33958f3aa54fcc1ee11b93377a98257bd1c2ab505cad8dfabc519898
[+] ./data/clean/d801e9eb2b0a16bc6b79b3106e28808980347c6c7f384112de8f74c04b293c05
[+] ./data/clean/518f6481d6bebe5c0851090118b018237c489219e60dc4f7b01bc638b5fe0611
[+] ./data/clean/909414ae2b17407eabbd26e89862f230757b2d84e0eb91fe42d05b80764d4181
[+] ./data/clean/7fbfab17fe55578159f482a3c9741f02ef5c15c939f4bf1c7b164faa0ab6dda3
[+] ./data/clean/9a7bbc43fc996beda3c6e2b7d212662ac660c6f316c4907e2bc7625530a30c27
[+] ./data/clean/7dba65ac20ab2379060042b3d025b53a0cafa8f27903db28ffe9d94beec42f99
[+] ./data/clean/419310da612cfc53c800d17542f3c25e2475a7f7499fad36a3313bb1c3c4eada
[+] ./data/clean/ab3f84f1a8627f2046e19e064ee900e869280e8e8c049ce60615671d6fa84aec
[+] ./data/clean/3fee0c58334856837b41b201c03dd974ae293ae6bcca96a38d6066d159b3534a
[+] ./data/clean/f886e452846d31c82b404962e11ed68e2576cdda8e36d6213a15eff36d044189
[+] ./data/clean/a50f35f9742e856869b2fc4c67628daef10e7fddc8ee0095a13e82bd07ff36f7
[+] ./data/clean/22031a847abe683643a059f08132acf860dce379114e60e57fb03d970f748d9b
[+] ./data/clean/e8d2f5cc9fcf1c3080897d9d6c4228216da8dc98f17232af2519e2b18e6a0122
[+] ./data/clean/a93bd5979575645c9968e7aa6b097bf93ba4788df8a73dccbd5056f6905b49ee
[+] ./data/clean/f4e138c85c5c50306cfd36457edd549ca295ba3b2b60064a485116dcba17f8b6
[+] ./data/clean/e226da8c5deab6b51c0cd90d0aa87ad25651edb6b2d6996e07de00978a35dcf5
[+] ./data/clean/58d7de2ffac0360f24f0fa9afc268c9d0225f5cab27b40bd0a74acd41943a327
[+] ./data/clean/01579b7ac743f18645c1ac3ca8b3dbe0de0e20b7fbb98ed0c302903e8488e0be
[+] ./data/clean/3f8b18728f607789c4b910bcc745c5bce6252ebfd3c8224a1cdcabeb3579e250
[+] ./data/clean/778cd1ebfdc9fa6457497741da5431e4de16f2fad490ed88ade6e3bec16096b1
[+] ./data/clean/8944449331593e5bbd01c9503b5c75b7fa8336bb7a8163ff4200f046de0f2f48
[+] ./data/clean/6fb858c5e8dfdb969fad1ec848e576288cf9eda9b1158b14fc9988adfee14937
[+] ./data/clean/59868a0b228cdd2a69efc6b46e2d252f8bf694491e437bb32618adc771541e51
[+] ./data/clean/99175db05c309a22e8ea0fde205ccdd9c608acb962ea8f3d5db9274db8d87fac
[+] ./data/clean/2671795bc7c78a0cf195423640d8cd650d0d7b73a43352a6566389957ae82863
[+] ./data/clean/a5fbef3efb22970120c5b40d58401b59a80f74dc92b85d637eaab52b6136473d
[+] ./data/clean/31fe6da399914a64f1053c2ff632546ccf707202b02b9292e83612af3fba306b
[+] ./data/clean/6c28a9c9f529ba37bbe76fbc50c799733ea719d9260eb80e5a9fb859b9295ae0
[+] ./data/clean/7e1dc886af729071fc931c631815ec6ce25bee7e58e775055d60f728f9b62aed
[+] ./data/clean/3df31cd4267ded90794e6a5e0bbff97e74c2c3e6a051e7024c97a5c1960f4cc9
[+] ./data/clean/1363416b411d5dfc4992862e4c7840a721aa0122dd1c4d0eb3a8501f794b736b
[+] ./data/clean/94544102f9e7c0439b095121b8abd6c54d9dd4d57a80244acd25b159a6fc18f0
[+] ./data/clean/8f58ca629f6425bac49d767e3d68f8e8c4461a784ca3d660b6fe2c8bc11c8d60
[+] ./data/clean/515437a6721142081c0706dbb18d11f6b294490389f688addda41ced8301c094
[+] ./data/clean/6fe1ff95b3c6ab578445bf126ec2bc7eb0b5244d2f27c6e443ac9a645fc23152
[+] ./data/clean/8a335c28fe1ef96dd71485877f2e86155d24b5614ace05468f4b07e2acd56331
[+] ./data/clean/f7d246347fa82ef329f23adf5583c1f1867d7ae422be94f8f5f1e7c0e52f78e1
[+] ./data/clean/e2a3fb8b606e55e843958b93ee6a5fdce6fb4aaa6befd2f030baa91ed4b5b013
[+] ./data/clean/9015edeb220c2ead7317b34466bef90c413b383fffb5f124585cb89aa29dce69
[+] ./data/clean/3116ce7edcde2dcca4b888c0f9c0213aca044480edc7b4247a0f2682e367e952
[+] ./data/clean/c5ac447cfbf3957509e9281fd1f4b52ccfc27d404481baa3e6a9a46a0fb2191c
[+] ./data/clean/77f61bb677dc591f01382e88307ce1bdb62c41d9929cb3c6ba3ec6c93fafc2ce
[+] ./data/clean/d66fa5f31c046b4c2ae01a2ce046a99f505dc16a565df448827adcbd5e34c709
[+] ./data/clean/e04bfb63f79bb4e28926ec82afa3601ee06704af0ebcb66858b9e014635dcc63
[+] ./data/clean/2648bf5f04685dc297ebafcf237ba24259d219f726ba7050b5d4739867ccd11f
[+] ./data/clean/8d2a341ef36633aae533204ced7a088731e67e5dc2ac325836a5c31dd3cd0e33
[+] ./data/clean/8ef8155a748a3b8d8d8e470b268a685104fa9634974827c5da6d4df8acb8d355
[+] ./data/clean/e739650377bd910fe37759f5a8f44f2deb92056795778f7d3d4bf679268f1337
[-]
[+] ./data/clean/320f6fa6e3686d70aab61e064182aa3d17cbc8c3be3355f832f66ae640ec4c88
[+] ./data/clean/cd4cb88a309e19a9f01d9b2772551050fcb047b30f849716bc76d03fb721993c
[+] ./data/clean/f8f1ab00047cf2c5dd9f20fda3a2ead4f9ef72acae5f69eea2830f9d16e87ff7
[-]
[+] ./data/clean/b2eeea7a9589bfc37394a3159bdf5cf708bf8e8769f5b4930b9bd095adaa9849
[+] ./data/clean/1795e55a21685950e13465873866a4cb79bf6c958f121c124dbcd8d75f155e04
[+] ./data/clean/09bc5032927ae5ec5edaa71dff73372b9391c82d1fd6ae0bc1318d36749506e3
[+] ./data/clean/7ca1e150017ac7d1408c155ec01eab78eb8019789e26bf78b129ab4b39a4faed
[+] ./data/clean/61d76327de227ae8f15afbb0f99c1df6152061855df7b35dbd6ff7329fc1ba4d
[+] ./data/clean/2a0040b54311fb62153131d4b201150ab058b7f85f7f5a7f8751a6db2b08669e
[+] ./data/clean/d00122c928c5818a24e6c11183f79c253cfb6576ad54dc92aeefc630abbde655
[+] ./data/clean/9c7229f10f11d18e1fed6395391a46225a84b421034b9ab6f81af7430fdc556f
[+] ./data/clean/792488a8f240b110d849cba2aa8b74e2a158604475c5a23942838815628c935d
[+] ./data/clean/e3512955bc4d590f01f6a4fd515dc13ed78de89f026fc93b700fb3641ebe0cc7
[+] ./data/clean/71c660fd9bdc1b0677cc14930b5450b2489727526918551c39510025be2ca183
[+] ./data/clean/6719c0eecd26a1f435351d8f8ebb77798126c348f8b3e1ad4f13d660240709e8
[+] ./data/clean/997c0e69c490770815dd64189ad2f59f8309ad266981bfc5d70a728dd174d19c
[+] ./data/clean/9c05d671e08bd2310204e4c4f1d2c6d4cf06378ef00d208eb96639b4b4b0e770
[+] ./data/clean/021f0d9689db7cdd65394273e44415017cb8a2ddb5860c9297a4297b3d8d7875
[+] ./data/clean/be3ee03e1829dd4a86af9037f4d85529ed32d5940ab22e2b7c4c675424cd016b
[+] ./data/clean/35416b914ca8d758410d917174454d02cc0afbe1a7eac941b2f1e65207501c5e
[+] ./data/clean/7ebe99935e4494ed47a0257e1faad9f8604d5b002276a4d9723de6a9ad8fe76e
[+] ./data/clean/cd0a1121e8a7b96dfd341fbd1f53016cd1c185ef868cd7250326047b7cb48a0d
[+] ./data/clean/dabbb9fd97db00d5b683b6ee45e9a1e1ff097bea8d2f22541bd7f0b77d01e4c4
[+] ./data/clean/c708ed1d07678ff314a88b65f840dab14fab99589c164ea2e96f4afc612dd9b7
[+] ./data/clean/f4960d8f2c08c82781f4af2cb284bfa44d4018676d3cc1c34bed81f484a68768
[-]
[+] ./data/clean/916981fa577f28db734f0f0ced5c50a1371b0654adde0f6f286b4a19c2924ab4
[+] ./data/clean/3edff1058b2134342da0c161c739d8f4665883dc3407434b46ca966982922f74
[+] ./data/clean/0d3bef6ef8809e17f5eb943825c76813198f32aa8bd49b3db7e9c2b0dec184d2
[+] ./data/clean/764aa12fef0790c180116a890670e0d773c1559232a19406db765a4f5e397adc
[+] ./data/clean/71934e414a4a965a71da79ab082ec41e886534be735937c3461668c2744dbfab
[+] ./data/clean/7a26e6a8b69f50c68697b101842a799bccaf1f3ae8d3322c96ab6aaef34c464d
[+] ./data/clean/fa2796a7c52e07a6a861d9a298df24d1c501ca417512db5bffb2fa2be7c4d199
[+] ./data/clean/d1a684f3e0a46d02093473a07aac6003132a51dc6db91b8a3e53ba9342428da3
[+] ./data/clean/6a6baf3ed2a130a50ead6d6523d10b5cd429d967fe0c36d4239f07b03d3317f5
[+] ./data/clean/418b7b5180e7bf8ebc5763c414da5388299e55465c96fbc0ebad78ce95ec096c
[+] ./data/clean/56274fda657cbf79840e6e9b7c9d3f2cbc7cefb4840e9826958cc59b6f8eff2d
[+] ./data/clean/b210d589290a6364a9e303c2f72831c9f6a303b73f898e9ae4aec961e61df875
[+] ./data/clean/951adec65262b39df0cf6d81f56016f22239ca1b1b3678de6f73646bc4bca2c1
[+] ./data/clean/eee84f44922405aada909b6e268441ce1b32c1961cc606a44e03903c658359ae
[+] ./data/clean/44bcf8043bfc163d4ecd92d88a69fa29179e84ab0862f2333b6de39f7d3ed1d5
[+] ./data/clean/983b888f0d7ff028516417bbd645b5b52578ab8d433a501718fd2a8569e580e9
[+] ./data/clean/4e996adc72b7232ea68bbcf7cadd1463c8dd4899ae31d7b8456f5a62e4a585b4
[+] ./data/clean/92e0320d24b7a9dad6a597d55b40e14907ca4ba2125fbe24ec9cb9e247c12ba1
[+] ./data/clean/6a71351d88ec15e19e72e4a79dbb24992bc8aa8c18b0df454fdb12f47da63184
[+] ./data/clean/fd046e6edec4d0cef0edf372659257de09483793a2cb0212816b3e6d47c958d2
[+] ./data/clean/ed489ad86c444ae01e6ec8db33c7126877083f39d61e33161418471a3273c8c1
[+] ./data/clean/4931c588348442831826aeb9d14b65e40f3bf4d018778cff3132742117ad7d4c
[-]
[+] ./data/clean/6caffa7c8e508569c7855512c7b36e00df52d13779572dc939e3f39a4948eca3
[+] ./data/clean/94e57073e8eeaf63dd55ee3c846a3f734b191ee72786678419ae99140a15dc1d
[-]
[+] ./data/clean/1e97eca81395d1bd5e627debfdb02828bd3655d68c8f7296395d574781faa32e
[+] ./data/clean/351800b0e186fdf3cf9a4894a37dac26515f85d4ec980379deb3ca72df3fe092
[+] ./data/clean/5440388229f609e47c74734c78beb85d68abd1d79f3cb7a6b6596627d053d0ff
[+] ./data/clean/568dd7194d79796bb90410b01041188010f6c0e76cf357e5882c62617c3af65e
[+] ./data/clean/a29426ceb90c8098d67c5d6850723b8acf9bb6b1c2c3aeac73626b380d213e5e
[+] ./data/clean/134e40391e97a3ba5fe6e3b2433a430fce46d2a678fe2cfd15e48af59428a375
[+] ./data/clean/ac173e71ffd0cb0b6e1a25c67d35098291b0abe6037843497796f3e0312b59f3
[+] ./data/clean/b30947d6cf4ea9fd67a8b2d2be43109e9ddafe9cb20c9bcfba0e1e7a65375ad5
[+] ./data/clean/5f4c607f64acee3b3300c8e4ec360fa69c01681026e681a7f9297e446f55816b
[+] ./data/clean/c6f9843a59b1b0d2775b39b7a70ed92f513bbcf0c0209e3f9da75faf0ae73a90
[+] ./data/clean/1f83f9d9201ed34b18d1452e439d6d2fb51b52a2fa627ccae3b2976d78af83b2
[+] ./data/clean/c8bebe08952543ba996ca294b5638deb26c2f55695d87de2de1282888642e449
[+] ./data/clean/d9de84565a9cd6898065ce18909b388dacecbb79e62f3373c967cd9817ea1600
[+] ./data/clean/e4365d0cc3e364026e0322854b8e555c87e7379013ed8489199205f0e5d59d9a
[+] ./data/clean/985eb55ecb750da812876b8569d5f1999a30a24bcc54f9bab4d3fc44dfedb931
[+] ./data/clean/1cd476da02b91b5be2b04dab36514d64abfa12105934b84c8bce8ce83a42e180
[+] ./data/clean/719e55fc497a8a052074cca8f99837f6e692011727a8bfac0c7947f7a3cd8100
[+] ./data/clean/ffccf98379c579bc6da94188e51af360402c0fb5d0c6da72a5a12b70517e47ab
[+] ./data/clean/9aaddc499cedaa3c759632e8dfa15e4ba3dd7425696f5f8adf22a89f224c92ba
[+] ./data/clean/2a13d8f3455c91ea4b156cf0e372470d057e6b87bf3f52f30b393abbb2b7d944
[+] ./data/clean/d68f77159ad421f171cc6be65200780d776ddb256d07b5ed1ad73fa761bb7ed6
[+] ./data/clean/d41e763d716affbfedfe2ea74efbf1f7acc14ec98038ff82c649b8b658a61058
[+] ./data/clean/a6b27618a98caecad262502065b99823a3244387fc2f034d592db4483c906b32
[+] ./data/clean/e6d75b3f87c9c8d924ff412b6d6ebfe1b23d6c40d6365c111d82bbd470a7a6aa
[+] ./data/clean/249f5d2590d0025d460552c2388a730cb4ce132386d111a27afb8763643da2c9
[+] ./data/clean/2c8f2b69ba1cfd8b3c99c5fc5041b7feb7c4ff8baf442e9e3bf5e0a085405c02
[+] ./data/clean/a077e63dd3e8713ad5433faf385c6a2b48b56d1fc6b48f0dd9ab541cfce810f3
[+] ./data/clean/55f6d2483307499de4bd0fe81359b648734c905e3ef02dac2ff04b0a1331ce6d
[+] ./data/clean/f4aa3127eb98a1267843fbd05f9dcf94cb5cc8a5de1f3e76836a213c5e58e29f
[+] ./data/clean/e7a6de3e4f548a67cf743714a3954a5e9cf8bbaac4bb92506d3f357a01b78352
[+] ./data/clean/c55de3917fc4188e711bb3154974fb16c7ad65026c29a1680bd48d6854d46e14
[+] ./data/clean/ef12c1f39f55c6e53902f0fe92f5107dd2e2a495e8ed9bd85ea08479fad64487
[+] ./data/clean/bee011f3fe9711abf80f4fff607b5e1809ef62f0430985bf0ec96ec83f20151d
[+] ./data/clean/a80f927c1cf42200a2777121d013c2a4a09403e3fe15559b857cbc6eb489b66e
[+] ./data/clean/c3dc71edc05a9e1778bbea6757b65c1f9b2f491615cb68ba686eedafb3afc0f5
[+] ./data/clean/de8a942908aae36a494f6d3a5a3ef60b1845bfd5aa20aa101b1532536abaf497
[+] ./data/clean/cadeb025a83fc2d084d609c9858fd055b8528457c49b434ea47a7f301a5817b6
[+] ./data/clean/6ea38d7b6cd4c4adc626596af626e029654f0efae6c64b2a172cffd3091508e7
[+] ./data/clean/69828c857d4824b9f850b1e0597d2c134c91114b7a0774c41dffe33b0eb23721
[+] ./data/clean/0683694b4e12b58cfde47674daedfeb15dbc804bf539707ae1629d2f525b3da8
[+] ./data/clean/a2dbb68e62468b24185baf6e305a756f0fe3eb34f218417a1d579cf3d4a4bcab
[+] ./data/clean/b484d3b22c3ea105240ddd0128963768e7007b6fd5b803f304adc7b45ef79ab7
[+] ./data/clean/d676d4f5f949fed314d4a06b1df0d47d492c052d83ecbf3e07d8fa9ff34c1dc3
[+] ./data/clean/b166863491ff19a0f1f22767b0b0506bbf11f6670229181a68e56f850368ad3e
[+] ./data/clean/66d594a5db3a75a3799fa62f4affa674a5a118e53a27796f1e88ea6cef5405a0
[+] ./data/clean/6cb6f906ad21a8518954d73fe6d47bd0f82eb17f458a122858aaded0c07d5431
[+] ./data/clean/f1f67830fc3531dfbdaf5315f59422438ab9f243d89491ac75d1818e7ed98b5d
[+] ./data/clean/996cae130528d585bf4c1d60123272b7ebaad73bd005dbed96c3c95e198a2b42
[+] ./data/clean/1bd26ba55f884a38dc4204eee93fe4397e34b8c8301badbd8bac3a419415b2f5
[+] ./data/clean/13f2b062be907d963d749f42c82a619351f1b6167f5f7e62f1e89ffa31d39b7c
[+] ./data/clean/538c214cf4c2e105ce443522798496cc8f112543bf062712f91d7fc0dbe6f7d7
[+] ./data/clean/4c948318b04dadb58926818d02776129b651a134e01e28d7b6707994a83a0227
[+] ./data/clean/9cc3d825418bf9941d2f65daf95084467fc014ffe0398efac68a6533347a1a40
[+] ./data/clean/b23d7c93c9b1d568e608ebae4ed38634f73280aa61104687d60aa3db33f93307
[+] ./data/clean/2d209c2b823e350c1f1661f87a3a013804302477afe56877f94adbafe7a2e06d
[+] ./data/clean/7e899679a35964a89ae06121bb7e4c42e174ce72543ef29051a959bd51f2cc47
[+] ./data/clean/8b1e84ec34d16036b66114838ef98352443f27d2f355d982c903f7afe572166a
[+] ./data/clean/e07ebecb666e6818e34f83bb4ffba126486b64be78506f4736cf9a2346d93979
[+] ./data/clean/abcb6e3abec368b658ed100b7e112c3571ef6ee9044c5723ac6ebfca265229d9
[-]
[+] ./data/clean/d4b4bd2f8a3db7de1b5f0f88b5ede076fa9614d9de657e6dd6cf9305d0d86cff
[+] ./data/clean/dcb9eecd222843185ab8e6722660894813efa76fa6d4503ac54fcb0a5685936f
[+] ./data/clean/d1d8a3b724bc9637e7602b5c6ed0df34378e6ff84e833182bc856e7ed531d388
[+] ./data/clean/d5f8bb09fef606ad16cdd831d573c4e6304e4d66c6ee4a66f7d3976e832a9aff
[+] ./data/clean/3288fc005cc6e942c398362b994960b42e5773715318c941dbe94b22b3afdb9d
[+] ./data/clean/eceb7132b6075b371194e3aaf6c05dc484549354c0e7f2cb2e628cf33b95acd6
[-]
[+] ./data/clean/c0540a82fbc2bdc45dcc755bb8a8eb0f19dc3e55d9cc6998a0d089d9ccef7239
[+] ./data/clean/8e0e651a59fdf07f2161d2578baa97ba6de8b624f4ab9a17d3c633f4a060b522
[+] ./data/clean/e7f87849d3271e3ae7433b5a5e3a79b2a9649d1ddaf7142f56788c932bc1d0f9
[+] ./data/clean/5f692c3fb2827db7ac0d86b6f671b27b17176adfc0be14c11dfdb8f492a42c49
[+] ./data/clean/f6c58fd43d203ece69a80f8dad51b85188bd138200cf2834798d7c5de950564b
[+] ./data/clean/a23c852d3ed4148044708925e56e17246cdb88d6ecaaa375503fa1f915ba1272
[+] ./data/clean/2539f5d1c1adb549b2bbe8d819e3fd7927a65034828aa5606592430cc46dd937
[+] ./data/clean/3dfa41f89abfeb121bf98d70a94c4c7f01960e8d48195ae82c7045dab46f7366
[+] ./data/clean/3a0fc1f0bdb2f8797d37dc8b3815f41007f0a0de1d5a67649f3db33a148e4048
[+] ./data/clean/f5ba9e542df3b7d043126e54579bf7db7534e7ce23dd9b5071310f307267852a
[-]
[+] ./data/clean/9ce3599fece67a4a8729a164204e4c4302ad0b7b5d3004c2b0cf1afed3ca48b7
[+] ./data/clean/89fd614790612ad4945ff46aa8eb83e8bd4a8945482fc23efe68073f62322ff3
[+] ./data/clean/5cff7956bb913609bea64e5a88bab1e385ef44f7c3c7297440ba989a1ea7ea68
[+] ./data/clean/26fcd3c90e15f1b096c0b5b44c5e4ef251687638222bcdf8eacd71e151963432
[+] ./data/clean/30951db8bfc21640645aa9144cfeaa294bb7c6980ef236d28552b6f4f3f92a96
[+] ./data/clean/2a8fd361c5d511847a777bedd796806ee18a4c9f6dbca219517a0885e3dbc756
[+] ./data/clean/fcb3a1bcbe786c808f6acc7cc0a8906deb37c83b170a937f9cca5635fcea35e5
[+] ./data/clean/e30953278af244cbf40991a1002f82783add42ec13a583c51864c0d8cabd8005
[+] ./data/clean/95cce95ab9100f71ca6be4c393432a06cd08eb6ba34b43a514f663c8bf7b898a
[+] ./data/clean/b192e074f68fa824644dfa15b4075a06f127ec238a81e9b61cec7dbefb31f659
[+] ./data/clean/15f3090a9d060536f62352a29dfa9ff97f8caeac7f870ae11c66f599583249bf
[+] ./data/clean/0d02237739561700e8e779305be19e663f5ce2f1cb6f749476c4a14bc69236fb
[+] ./data/clean/01febe03a5884cd323e141e607eb0b1020c6320c83229132871675929db85675
[-]
[+] ./data/clean/7222f172bf73d481d71e083addac6c0c651278c03d2e2eac20806cc7488825e6
[-]
[+] ./data/clean/f8eada16bdef5c858229591957df22ee5f1e69f052d9d63dd243bc5c4b731292
[+] ./data/clean/544a20393e3e0c2935924ee0b5826bc65ae6a256fc041a865d4e84e3c1cfb4d8
[+] ./data/clean/ab1f26c4c0e9babd0feed715e3d4b835ed68395492f2af089343eeba2005d25b
[+] ./data/clean/ed95b1141f32e8d2180b47426a1cbe89085764e744938e9bca98c5be411a52a6
[+] ./data/clean/517c9292281404b4735c860f4d84b868e01430979fbfb84f40a4e18363b528b6
[+] ./data/clean/65488a3c53a3c1f5569beab9cd3fe1683040dc9595bf698a1962e02694f4ee8c
[+] ./data/clean/5bf579687281524933e8ab09e59ae90f02d91fce7fe65796f25fd036b0cd6622
[+] ./data/clean/a07c4d3b4970e4041201b62daa296ebe8eeae6a940b40c0a545eb6215d13eace
[+] ./data/clean/40f21b38bd31a72f864a5214ebf63853524948e8e0be7659a9b0742b8bbeb8d0
[+] ./data/clean/d84149976bc94a21b21aa0bc99fcbdee9d1ad4f3387d8b62b90f805ac300ba05
[+] ./data/clean/021d977c2b378e6b9f5bde36556ce4ea18d21be2531245e385477e6df9a171c6
[+] ./data/clean/46693d9b74d12454d117cc61ff2e9481cabb100b4d74eb5367d3cf88b89a0e71
[+] ./data/clean/de20efd8944a05a52f63ba16d5ef9e58c0f9d658e5ab743fd3ff839cf817be1b
[+] ./data/clean/47ae116740e08a6b163f8f1cc9edabaedf5460aa7ecc2d7012dbd9728ed450ae
[+] ./data/clean/bb837fa21e4dca9c61df68aea4f0635b3a695b5c495ef500b971e3391927e2bb
[+] ./data/clean/9ea2099682d5818e9ef3369acbca93c7c7f071a94d6d27eec18d41b7c0ce2f39
[+] ./data/clean/0a441bda10f1dd3df9c7018df3c1047a043190f01a96facd27582e0ca4d5a44a
[+] ./data/clean/771151fdeb8e30545f4bbfe1b73eee0e1187db905a535e9cc12d2c57aa0acc8d
[+] ./data/clean/5c7ef0e0f9f35c90d304c56bfc04c85ab4476d83fbb91f38fc207809fbc38210
[+] ./data/clean/1d5cba061142691df9d99380139653fae326ff15fd12d8cc1b91ead79194aa9d
[+] ./data/clean/c16aec3a691863790f1f4ff755eb36a5853b2b9f2ad78abb0acf42b22dbfc7e1
[+] ./data/clean/c0551cbb37772545f50b00bde96b83d16f35ef146cf44cea124beda934d53300
[+] ./data/clean/c9ffde0dfdf93941e4777682da7e57b41d55fcd23ac19c370f36d5dfd9b3c9db
[+] ./data/clean/6d1dfe10bf4482151db3a8f34601dfdb527cc7ea107c0a74d8498dfa54e4e976
[+] ./data/clean/b8240ccba03ee8cf8b1f281f3a517be42798c792d7925043d9eb6dcbb56955c3
[+] ./data/clean/5a4e18cc99c7da8453da6258fdb8072cf398a0d9bfeaf65a576cb2c9ff8e74f7
[+] ./data/clean/be0f78992dfa50f6516115378f216bb8e49ed4e25e63599b7f39243355a4332b
[-]
[+] ./data/clean/75b7edf2f114f6fbf776c538687b1930111748a73d9331d456ebfefad069c7df
[+] ./data/clean/106907dff5890c52f7e82219bce498718d6a41c6f2c0b458ede79408beb770b8
[+] ./data/clean/551886804fd55a4b795cc2e465e8199bc798f71d5fda79f3c3ad853ca14c31cd
[+] ./data/clean/0aed8d8f6d6674c7b3e0d992140567da672ad0d10e07fb157c6c8fb53f943c06
[+] ./data/clean/e12f5a5804519a4c8f4eda5b27b3477d89aa4b80e5d9bfa359c1d6794d947965
[+] ./data/clean/a596c36731eb24fec689091e741c52159ba802440aa91c39c3ba826dea4f9276
[+] ./data/clean/008fa2b9697f9a173e40572face100410e51975e34a5cef2be08dfa8e04ed3c0
[+] ./data/clean/4606e69cd87382f2c6afcfc461b9a6517362d7d8eba05b4d024a93567e9fdc80
[+] ./data/clean/4bb9cb059aac1b4e185d5ce1692d75497f25d5e979ffb89a8e22881fa42110e4
[+] ./data/clean/c995f2247a1f50f4471ff00bed9adba769eadc0f612fa633d4ec550a6fe648df
[+] ./data/clean/f13bd7ae3ef9cad75f1a3de497d762f2096f10d4d3620bda9a838fef578ba53d
[+] ./data/clean/b7b264eae44c58a7a3989c373b725ffff356610774c65d1898f21a3e7452d413
[+] ./data/clean/47a333285ce7aad631389f1b3eb842e9056177faf5670fc923da636bf4eaed7d
[-]
[+] ./data/clean/d525340edc1af79472718dcd1c1ef8fc5306a6b2493692bfe9c0cb27faed4def
[-]
[+] ./data/clean/86c8b86a80e911bb63d7a78b828bf45a02afb5c9ab271906720feeec7c24fe7d
[+] ./data/clean/8e9dd45d81352c2fe6f6b6ab124ae81d2b6485dba434bd59cfe8ce44f7628b24
[+] ./data/clean/4878c77955611f9641100aae97867c5d3bd4183aa8ddf4b45ca453990f5f51fa
[+] ./data/clean/1339b5cdd775ef01f4bf69518b7141041fb66571130166f4fbd072fc750f9806
[+] ./data/clean/227699fece9be1f2ce70455de491f57e4c7280f0a16017a55c86c2dad4543ac1
[+] ./data/clean/9845c284c806a2d7943eefcef8af5313937fcc057e249f78b3990c86e282d423
[+] ./data/clean/cb41e9d0e8107aa9337dbd1c56f22461131ad0952a2472b4477e2649d16ecb15
[+] ./data/clean/b82725880d35a907e0a615e54759c3a4e2828faa3bb83f6b04ebd2634376eb40
[+] ./data/clean/9932324e1cdfc4bc88d5bc908b90ae7e032ce999c46091f97e6784faaf8ac97f
[+] ./data/clean/60fd82f9261ab7faf0d168d623c0e16f8b587ea7ec5aa441c3a5944f439cbacb
[+] ./data/clean/74f4956142e6867378635c2e2e52a6a312c21ffd20253b95e6183c76872787e8
[+] ./data/clean/193cd70a73e750a178eb91b05b8a15f988b1499cb77c37c9a9f2e2e22d98ce59
[+] ./data/clean/86d8631c075400af09ecbfc531d64b187696d6aa277ad6d58e718e17ddcd4616
[+] ./data/clean/6bd1f5ab9250206ab3836529299055e272ecaa35a72cbd0230cb20ff1cc30902
[+] ./data/clean/70bffc9c81bde425bbd3b2eaf54fb82764d15808f92e9338d2b954a5b912b43b
[+] ./data/clean/63be7455e335d9ae93f0b0c6c16355b85da0a25f83a85a84e81ced287bb4cff8
[+] ./data/clean/201382c257d6bb25a318901df532837e3d670db62a32b9f6f1b9606782683f28
[+] ./data/clean/5f8335c007e0ffebaf799bc10de2593c0d9ddeba024acddb1da64f6e94e01fe3
[+] ./data/clean/cd46a7b9994d48386a8d0e813b2aa4288cf915c7ea99bb24a8616f993435efc1
[+] ./data/clean/2990059766f4118256b48decfe2d586d469a219c1e5dda038943c97bbfaa661d
[+] ./data/clean/25194b41833bc3c2a670ebbebd1fcd488c8ec9c438ec991358ee6e3d1df069c1
[+] ./data/clean/0b0656a8ddb957214e0f65ba52874e3be58dec9a2878e8c88a71957295712d87
[+] ./data/clean/e6e93bfc7bd098fa9d38e51dd1ae4106a73ed56251f725c0dfc2b4ced1af2dd6
[+] ./data/clean/81ee15c4666d73420333bace26971f9df60178f2694951b2e56c36df572551c7
[+] ./data/clean/57fe5c5932e87e77cad9742efa2216d81e5b496e5081607af982eceff3b94252
[+] ./data/clean/0bc5838c1a531114851b2db02094856f786da369fb69199d9e36ec71ba3cc04a
[+] ./data/clean/8dd0e96db1eccb739a55bf60e0b4055da712b81b3030c2e7ab93a5bf803d1c3b
[+] ./data/clean/9631159f2aaf4832d4e4df11054948c4a1439946e21c1680ff8b108274e59c6e
[+] ./data/clean/48985b22a895154cc44f9eb77489cfdf54fa54506e8ecaef492fe30f40d27e90
[+] ./data/clean/3c677c3b2552414b11013deac07c80c12139f71d66064c8e0a255c92cc625e0c
[+] ./data/clean/18cee4dd64171378598e362309bee02e6a4b16119aeef5d19fa8384766debdf1
[+] ./data/clean/28b001bb9a72ae7a24242bfab248d767a1ac5dec981c672a3944f7a072375e9a
[+] ./data/clean/067d2c6ee12ff31c08bc5752d5603a803fc67d0f97da3ea702b330a69b7dd7e8
[+] ./data/clean/0903b5932938a6ff8dfd64f02b1fb0f37a1cd58a04a960b962f59558695f21b7
[+] ./data/clean/72fc897a1dfdd4586b362b11f51680495f34a85efea16bf6e56bf97f3fb51dca
[+] ./data/clean/87f4ec955efc8b0bddd2181b72c898ee5cb1371229dd1167958aa98e605735f4
[+] ./data/clean/c44c4a2a4c98ef90f221f0e5a176ef8635ccc2cac2697479c886d1202b8f5ea6
[+] ./data/clean/6dc1433c83950ae8cf06fae2248d9762b18f3d5b16b89b51750f5d87c625abfb
[+] ./data/clean/e0b09ec52e8733fb6be9688478d2640ecaa5b091fca4b2f8cb0fd383f738d112

[-] File not PE: ./data/clean/18c9f40140df54aabee25d38f7ef5501a8d24cd78c75f780096bfe227ef25919 
=>	 Zip archive data

Removing file.
[+] ./data/clean/dd63c365aeda14c6bf602898207cf73df58f7b91176858ad0e27dfdf3fd4746e
[+] ./data/clean/6e8c6c77560972a400827ceec38dd4d24f5781debc8414c9e01c6b309c28366a
[+] ./data/clean/1d8ee4a0b49293560ab4f735a4aa0aeb44ace7c53b7ab4f28526e3b76a27be83
[+] ./data/clean/70ff5a0b20fca4226451174c3c079bef1cf9f35bdd776e20e846c08519d5671e
[+] ./data/clean/28e9e1c154aa7b11049aaddebc275341a90f23395c44e07aeeb08907aae7ec26
[+] ./data/clean/81956c77df1e2006ad328d98be39f837ccd044c172739237e330e850c86ca4f2
[+] ./data/clean/694ef1583b1ae4655f4729a61430ad2afbdbc7767e83f1a9b71556a02a75c8fc
[+] ./data/clean/789aa7005b0ffcc042d8bd2ca12fbbf3dfd10b843096c78815593ce64be81768
[+] ./data/clean/1d7b9125aa6528b0287452834f64e01e0ce40019dae2fd9610c45aa139f1e38b
[+] ./data/clean/0c1b468202d22a6b1472d929fbd6c7ca3c3a23a5b383ed2db98acd3bf06e13f1
[+] ./data/clean/909c523f0657650471caa7baa2751525604375d8b82688aad47472fdce1abe3b
[+] ./data/clean/5d3921091a11880c143db8a6f5c55b6fec76f24d4d8bec56a8fc37e0b43b8be2
[+] ./data/clean/d9c0f17a6812eab0c5ebb7cdafd718d325dce81cddc991b20067e998f98187a9
[+] ./data/clean/0cd81d97ad2d2809a9b516a1697a887e21ef7620591f9cb4cbc437e83230baf2
[+] ./data/clean/4962ece5176ace02dea2b8d0a61321c0595b9d0970bd56cb04192c422bbf77cc
[+] ./data/clean/8c5614a4d7b5b5464f81894c4caf267281d2cb106cc46dcf5675e7e16395180b
[+] ./data/clean/bdf333ebad3c91e5280755c07ab6eb4e8ffd4463f96617f33c25f66ef82b341f
[+] ./data/clean/1fa6532e9048c88faab04e5792db3ad5e29a3c714a43f54c8ee35e3cef7ccff0
[+] ./data/clean/2950ec6f9f3a3ff8e9b18b63aff690323aea8bbdabdf0f0c81d432641195ebfd
[+] ./data/clean/b205f7ac445810ad7d8ac8d4b758d6a70bb5f799497eb2cf1684627f8e60fd96
[+] ./data/clean/33d7b0893ad2a7565ed27a360e233405d3d41186e276264fe29e0577fc17720d
[+] ./data/clean/e5892202db9c37f741ba345d2baae658893e10f11ff67dd481db6693fa3861d3
[+] ./data/clean/445b913ebc4829d3bedb2dea89aa541fb4a03d055bf2dadea21b9125a57f5f10
[+] ./data/clean/b969b5c2e61bca437799ca56819a15ce9356dd4699f64920f88b6b26470b8075
[+] ./data/clean/7150b8e2025d685feb0bfc1e1a05ba481106c4259073ebf5fbe5b427084409a0
[+] ./data/clean/a5b6deb455845311db511677ae3674dfc4a7d506d5a84fb0dc6c229230028e15
[+] ./data/clean/606923eb7a078bc6b038ac4d51c6647d50982203f9533886e5abd2763209d526
[+] ./data/clean/007bdab757d03d94e60c9b1e3eec13b07562705c514992ba7ceb0b6f177e5160
[+] ./data/clean/8bf9e95427e6ef301e6c1c39097f97f1b50ee4c7d4bcb36781b4174c68f7a444
[+] ./data/clean/218dedc696c79720826f82fe7704824c02c72f057a5ec45d8563e40fec479399
[+] ./data/clean/4e780d73364401249299787505e10d9cc220f87d1e5316a122ec81ee08167b8c
[+] ./data/clean/703ed2ae1b858f6a68ccd732524da6144c7c0db4734b88cc11f86572a7bce297
[+] ./data/clean/20a3abd5e7ad32389dc8828873c947db87d43385993c51b811c219619791220c
[+] ./data/clean/b433ea2114390c85a1c662494b432d4c731eb64d350bf31501afcab579a058a4
[+] ./data/clean/94755d0c49ec3238ba3c74054efe54d4843caeb913a58efc1b696063fe107116
[+] ./data/clean/30f9d677e81dd561ebe084ad3d0c71f20711dfb99584af68e2b4ee2c495cbf9b
[+] ./data/clean/bafb6b0fe18ca094691b912d68c782e59be615436e7a320e7e9cffb285528499
[+] ./data/clean/d86c3538f9f6197ef6d5496ce5755bec87ed6880b93d62003869d9906cb0aee4
[+] ./data/clean/c1d073c5ddb95f8ed36274eb9aef152c59f9a1cc0b9a26958eab094a8b68256d
[+] ./data/clean/d1d69520a02a7dcaa9adfae55dc7fc974533b26797fb7efa55a02c01e46cd67c
[+] ./data/clean/8f8278e04855f1cae5b376b62b881382beb18a505ce6f66c1305150f2d3bbc5a
[+] ./data/clean/3d821bafa1c5097fbcf652a79baca75a87d7ba6843fba06c7e7ebcf46d570095
[+] ./data/clean/d2ad9ce737c5b0eb73e2cd8c417031b4a1d01a2f1a73bde8a5f5fb3c36977c9a
[+] ./data/clean/63fb44d78c5245bea4feb6b8a0ee419840615e90a8781f8e6d5585dfe6ba86c0
[+] ./data/clean/d77a8bc1d60998364926ea1ab6eb3afff573035bacaa9f4860be80f3ca18e222
[+] ./data/clean/01ae2f2e549cda25720972cac5fffb27eda2255fb67d0c170f5607d37c643245
[+] ./data/clean/e4d44531d5af5f61711f377ad6cb72ebef1113a677748086f370eb71d1b6dec3
[+] ./data/clean/33243e2da132cb73fe15b690a4a3cc04dea824fd687399bcb9577002f6126c72
[+] ./data/clean/56dbf8ee9f5c65fa76e0cfabe6c997d5ec7f4500bf421098a5fd9f91d3b79d3c
[+] ./data/clean/5a2ec46602e5323a66051ee2470dee4a67f6aad3ddb89b8e195c27a51e9aea8d
[+] ./data/clean/61685176312a9a959beb059325fbc5fb0a20accdd7441bee013d47bb9f3f10ab
[+] ./data/clean/bb783a594067db5cb4e43030d9e6928636555a9ce6aa3533532731975094230a
[+] ./data/clean/c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf
[+] ./data/clean/36e1069708e8160a70c628608bed85d8d45dfcf73d243a6f327ed9984391e88f
[+] ./data/clean/10b9a22e0dd4b07d7af9eb633950516d849f3a125e75a456d9f39f4aedc8c1ba
[+] ./data/clean/b23f91ec3fca66017b3e52c7172277751567a670d698b55b5110405dabc06bb4
[+] ./data/clean/a4c00cdcc99dc257184025b05a5caef0ed9bf624aa5fe716f88533e64c23a60c
[+] ./data/clean/82b64025001fe21a9555ddd79302739163cda42a69c7d3783f9174aa4c6fb666
[+] ./data/clean/0b397b8f5ae9520097e1c4f9192b43035a351fcc068c20d880c184d49c16c355
[+] ./data/clean/77a8143e7b27936be5c9e85c941708ac8b767ebb4934315345929cd8303f5a5e
[+] ./data/clean/2f567b1d522fdd8a9cc1a2e8807550fc078b21b0d85a80a4c8997d69a1d94646
[+] ./data/clean/f18d3fcc556b58a9370f33b94cb64c8980e49d0376eddf4a3a52a30a92ff7fdf
[+] ./data/clean/dd0f60e96fac68fbd5b86382e541408c613bd0f871d0e0a1ef9ab6e7b26e545c

[*] Clean PE information:

{'00070b0d4cb037c40d5d2464f92841aeb9ad863472bf9516b959d3779cbfe622': {'AddressOfEntryPoint': 21704,
                                                                      'DebugRVA': 4880,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'MSVBVM60.DLL': '__vbaFreeObj'},
                                                                      'ImportedFunctions': ['__vbaVarTstGt',
                                                                                            '__vbaVarSub',
                                                                                            '__vbaStrI2',
                                                                                            '_CIcos',
                                                                                            '_adj_fptan',
                                                                                            '__vbaStrI4',
                                                                                            '__vbaVarMove',
                                                                                            '__vbaVarVargNofree',
                                                                                            '__vbaFreeVar',
                                                                                            '__vbaStrVarMove',
                                                                                            '__vbaLateIdCall',
                                                                                            '__vbaLineInputStr',
                                                                                            '__vbaLenBstr',
                                                                                            '__vbaEnd',
                                                                                            '__vbaFreeVarList',
                                                                                            '_adj_fdiv_m64',
                                                                                            '__vbaFreeObjList',
                                                                                            '_adj_fprem1',
                                                                                            '__vbaResume',
                                                                                            '__vbaVarCmpNe',
                                                                                            '__vbaStrCat',
                                                                                            '__vbaWriteFile',
                                                                                            '__vbaSetSystemError',
                                                                                            '__vbaHresultCheckObj',
                                                                                            '__vbaLenVar',
                                                                                            '_adj_fdiv_m32',
                                                                                            '__vbaVarTstLe',
                                                                                            '__vbaVarCmpGe',
                                                                                            '__vbaAryDestruct',
                                                                                            '__vbaVarForInit',
                                                                                            '__vbaExitProc',
                                                                                            '__vbaFileCloseAll',
                                                                                            '__vbaOnError',
                                                                                            '__vbaObjSet',
                                                                                            '_adj_fdiv_m16i',
                                                                                            '__vbaObjSetAddref',
                                                                                            '_adj_fdivr_m16i',
                                                                                            '__vbaVarIndexLoad',
                                                                                            '__vbaFpR4',
                                                                                            '__vbaBoolVar',
                                                                                            '__vbaFpR8',
                                                                                            '__vbaVarTstLt',
                                                                                            '__vbaRefVarAry',
                                                                                            '__vbaBoolVarNull',
                                                                                            '_CIsin',
                                                                                            '__vbaErase',
                                                                                            '__vbaVargVarMove',
                                                                                            '__vbaChkstk',
                                                                                            '__vbaFileClose',
                                                                                            'EVENT_SINK_AddRef',
                                                                                            '__vbaGenerateBoundsError',
                                                                                            '__vbaStrCmp',
                                                                                            '__vbaVarTstEq',
                                                                                            '__vbaR4Str',
                                                                                            '__vbaPrintObj',
                                                                                            '__vbaObjVar',
                                                                                            '__vbaI2I4',
                                                                                            'DllFunctionCall',
                                                                                            '__vbaVarLateMemSt',
                                                                                            '__vbaVarOr',
                                                                                            '__vbaCastObjVar',
                                                                                            '__vbaStrR4',
                                                                                            '__vbaRedimPreserve',
                                                                                            '_adj_fpatan',
                                                                                            '__vbaR4Var',
                                                                                            '__vbaLateIdCallLd',
                                                                                            '__vbaStrR8',
                                                                                            '__vbaRedim',
                                                                                            'EVENT_SINK_Release',
                                                                                            '__vbaNew',
                                                                                            '_CIsqrt',
                                                                                            '__vbaVarAnd',
                                                                                            'EVENT_SINK_QueryInterface',
                                                                                            '__vbaVarMul',
                                                                                            '__vbaExceptHandler',
                                                                                            '__vbaInputFile',
                                                                                            '__vbaPrintFile',
                                                                                            '__vbaStrToUnicode',
                                                                                            '_adj_fprem',
                                                                                            '_adj_fdivr_m64',
                                                                                            '__vbaVarDiv',
                                                                                            '__vbaLateIdStAd',
                                                                                            '__vbaI2Str',
                                                                                            '__vbaVarCmpLe',
                                                                                            '__vbaFPException',
                                                                                            '__vbaInStrVar',
                                                                                            '__vbaUbound',
                                                                                            '__vbaStrVarVal',
                                                                                            '__vbaVarCat',
                                                                                            '__vbaI2Var',
                                                                                            '_CIlog',
                                                                                            '__vbaErrorOverflow',
                                                                                            '__vbaFileOpen',
                                                                                            '__vbaInStr',
                                                                                            '__vbaR8Str',
                                                                                            '__vbaVarLateMemCallLdRf',
                                                                                            '__vbaNew2',
                                                                                            '_adj_fdiv_m32i',
                                                                                            '_adj_fdivr_m32i',
                                                                                            '__vbaVarSetObj',
                                                                                            '__vbaStrCopy',
                                                                                            '__vbaLateMemNamedCall',
                                                                                            '__vbaFreeStrList',
                                                                                            '__vbaVarNot',
                                                                                            '_adj_fdivr_m32',
                                                                                            '__vbaR8Var',
                                                                                            '_adj_fdiv_r',
                                                                                            '__vbaVarTstNe',
                                                                                            '__vbaVarSetVar',
                                                                                            '__vbaI4Var',
                                                                                            '__vbaVarCmpEq',
                                                                                            '__vbaAryLock',
                                                                                            '__vbaLateMemCall',
                                                                                            '__vbaVarAdd',
                                                                                            '__vbaFreeVarg',
                                                                                            '__vbaVarDup',
                                                                                            '__vbaStrToAnsi',
                                                                                            '__vbaVerifyVarObj',
                                                                                            '__vbaFpI2',
                                                                                            '__vbaVarCopy',
                                                                                            '__vbaVarLateMemCallLd',
                                                                                            '__vbaVarTstGe',
                                                                                            '__vbaFpI4',
                                                                                            '__vbaVarSetObjAddref',
                                                                                            '_CIatan',
                                                                                            '__vbaStrMove',
                                                                                            '__vbaCastObj',
                                                                                            '__vbaStrVarCopy',
                                                                                            '__vbaVarNeg',
                                                                                            '__vbaLateIdNamedCall',
                                                                                            '_allmul',
                                                                                            '__vbaVarLateMemCallSt',
                                                                                            '__vbaLateIdSt',
                                                                                            '_CItan',
                                                                                            '__vbaAryUnlock',
                                                                                            '__vbaVarForNext',
                                                                                            '_CIexp',
                                                                                            '__vbaFreeStr',
                                                                                            '__vbaFreeObj'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 139,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 1179648},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/00070b0d4cb037c40d5d2464f92841aeb9ad863472bf9516b959d3779cbfe622'},
 '00696555cbf6db83af785f8acb2270b9411cfc75e7f6d3ece0ec1ae146ad5acf': {'AddressOfEntryPoint': 29424,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 32576,
                                                                      'ExportSize': 163,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DelayLoadFailureHook',
                                                                                      'WsmSvc.DLL': 'WSManInitialize',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'ReadConsoleW',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'WriteConsoleInputA',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileType',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'CancelIoEx',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'DeleteCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceEnableLevel',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '_wcsicmp',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_snwscanf_s',
                                                                                            '_purecall',
                                                                                            'isdigit',
                                                                                            '_vsnwprintf',
                                                                                            'malloc',
                                                                                            '_wcsnicmp',
                                                                                            'free',
                                                                                            '_strnicmp',
                                                                                            '__setusermatherr',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateThread',
                                                                                            'TerminateProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetStdHandle',
                                                                                            'GetStdHandle',
                                                                                            'GetProcessHeap',
                                                                                            'HeapDestroy',
                                                                                            'HeapSetInformation',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'TraceMessage',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadStringW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'WriteConsoleInputA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'ReadConsoleW',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'CancelIoEx',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalFree',
                                                                                            'WSManCreateShell',
                                                                                            '?Free@WSManMemory@@SGXPAXH@Z',
                                                                                            '??0AutoLibrary@@QAE@PAUHINSTANCE__@@@Z',
                                                                                            '??1?$AutoDeleteVector@E@@QAE@XZ',
                                                                                            '??1?$AutoDeleteVector@D@@QAE@XZ',
                                                                                            '??1AutoLibrary@@QAE@XZ',
                                                                                            '??1?$AutoDeleteVector@PBG@@QAE@XZ',
                                                                                            '??0?$AutoDeleteVector@E@@QAE@PAE@Z',
                                                                                            '??0?$AutoDeleteVector@D@@QAE@PAD@Z',
                                                                                            '??0?$AutoDeleteVector@PBG@@QAE@XZ',
                                                                                            '??4?$AutoDeleteVector@PBG@@QAEAAV0@PAPBG@Z',
                                                                                            'WSManReceiveShellOutput',
                                                                                            'WSManDeinitialize',
                                                                                            '??1CWSManCriticalSection@@QAE@XZ',
                                                                                            'WSManSendShellInput',
                                                                                            'WSManCloseOperation',
                                                                                            'WSManCloseShell',
                                                                                            'WSManRunShellCommand',
                                                                                            'WSManCloseCommand',
                                                                                            'WSManSetSessionOption',
                                                                                            'WSManCreateSession',
                                                                                            'WSManSignalShell',
                                                                                            'WSManCloseSession',
                                                                                            '?Alloc@WSManMemory@@SGPAXIHW4_NitsFaultMode@@@Z',
                                                                                            'WSManInitialize',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 114,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/00696555cbf6db83af785f8acb2270b9411cfc75e7f6d3ece0ec1ae146ad5acf'},
 '007247436f041ca59c5ee0e8636c668c2a43376aeb8cfa17a744b59f26365461': {'AddressOfEntryPoint': 227872,
                                                                      'DebugRVA': 82400,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 3522560,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'KERNEL32.dll': 'ReleaseMutex',
                                                                                      'MSVCR120_CLR0400.dll': '_controlfp_s',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'fusion.dll': 'CreateAssemblyEnum',
                                                                                      'mscoree.dll': 'LoadLibraryShim',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'IsTextUnicode',
                                                                                            'EventWrite',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetBinaryTypeA',
                                                                                            'DeleteFileW',
                                                                                            'SearchPathW',
                                                                                            'GetStdHandle',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFree',
                                                                                            'GetACP',
                                                                                            'FormatMessageW',
                                                                                            'GetCPInfo',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'GetConsoleOutputCP',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualProtect',
                                                                                            'CreateEventW',
                                                                                            'CreateSemaphoreW',
                                                                                            'ResetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'RaiseException',
                                                                                            'ReleaseSemaphore',
                                                                                            'HeapValidate',
                                                                                            'HeapCreate',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapDestroy',
                                                                                            'TlsSetValue',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SleepEx',
                                                                                            'SetEvent',
                                                                                            'VirtualQuery',
                                                                                            'TlsGetValue',
                                                                                            'CreateMutexW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetFullPathNameW',
                                                                                            'ReadFile',
                                                                                            'CloseHandle',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileSize',
                                                                                            'SetLastError',
                                                                                            'CreateFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'SwitchToThread',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'DecodePointer',
                                                                                            'GetProcAddress',
                                                                                            'EncodePointer',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseMutex',
                                                                                            'memset',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf_s',
                                                                                            '_errno',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_vsnprintf_s',
                                                                                            'isspace',
                                                                                            'wcstod',
                                                                                            'strtod',
                                                                                            '_mbsinc',
                                                                                            'memmove',
                                                                                            '_purecall',
                                                                                            'swscanf_s',
                                                                                            '_wcsicmp',
                                                                                            '_stricmp',
                                                                                            'exit',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf',
                                                                                            'fwrite',
                                                                                            '_wfopen_s',
                                                                                            'fclose',
                                                                                            'fread',
                                                                                            'fopen_s',
                                                                                            'atoi',
                                                                                            'wcsrchr',
                                                                                            'iswupper',
                                                                                            'iswdigit',
                                                                                            'iswxdigit',
                                                                                            'strchr',
                                                                                            'wcscat_s',
                                                                                            'printf',
                                                                                            'strrchr',
                                                                                            'wcsstr',
                                                                                            'sprintf_s',
                                                                                            'strcat_s',
                                                                                            'strcpy_s',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'wcscpy_s',
                                                                                            'wcsncpy_s',
                                                                                            '_controlfp_s',
                                                                                            'CreateAssemblyNameObject',
                                                                                            'CreateAssemblyEnum',
                                                                                            'GetRequestedRuntimeInfo',
                                                                                            'LoadLibraryShim',
                                                                                            'CoCreateGuid',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'SysFreeString',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocString',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 157,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1892,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 246272},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/clean/007247436f041ca59c5ee0e8636c668c2a43376aeb8cfa17a744b59f26365461'},
 '007bdab757d03d94e60c9b1e3eec13b07562705c514992ba7ceb0b6f177e5160': {'AddressOfEntryPoint': 10656,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-com-l1-1-1.dll': 'CoTaskMemAlloc',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateError',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoActivateInstance',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsCreateStringReference',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventUnregister',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['??3@YAXPAX@Z',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_XcptFilter',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_purecall',
                                                                                            '_except_handler4_common',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'memset',
                                                                                            'WindowsCompareStringOrdinal',
                                                                                            'WindowsCreateString',
                                                                                            'WindowsCreateStringReference',
                                                                                            'RoInitialize',
                                                                                            'RoUninitialize',
                                                                                            'RoGetActivationFactory',
                                                                                            'RoActivateInstance',
                                                                                            'RoOriginateError',
                                                                                            'RaiseException',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'CoTaskMemAlloc',
                                                                                            'EventWrite',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 15632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 15872,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/007bdab757d03d94e60c9b1e3eec13b07562705c514992ba7ceb0b6f177e5160'},
 '008fa2b9697f9a173e40572face100410e51975e34a5cef2be08dfa8e04ed3c0': {'AddressOfEntryPoint': 152696,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 200704,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'NETAPI32.dll': 'DsRoleGetPrimaryDomainInformation',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['GetFileType',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'LoadLibraryExW',
                                                                                            'CompareStringW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesExW',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'MoveFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'SetWaitableTimer',
                                                                                            'CreateWaitableTimerW',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryExA',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'LocalAlloc',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetConsoleOutputCP',
                                                                                            'FindActCtxSectionStringW',
                                                                                            'OutputDebugStringA',
                                                                                            'IsWow64Process',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetStdHandle',
                                                                                            'DeactivateActCtx',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'LoadLibraryW',
                                                                                            'ActivateActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'QueryActCtxW',
                                                                                            'ReadConsoleW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetCurrentProcess',
                                                                                            'RaiseException',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'strchr',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'strcmp',
                                                                                            '_vsnwprintf',
                                                                                            '_errno',
                                                                                            '_beginthreadex',
                                                                                            '_beginthread',
                                                                                            'wcstol',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_stricmp',
                                                                                            '_wsetlocale',
                                                                                            'swprintf_s',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memmove_s',
                                                                                            '_wcsicmp',
                                                                                            '_purecall',
                                                                                            'wprintf',
                                                                                            'wcscmp',
                                                                                            'NetpwPathType',
                                                                                            'DsRoleFreeMemory',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'CoCreateInstance',
                                                                                            'CoGetMalloc',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetTickCount',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetLocalTime',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 144,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 28384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 181248},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/008fa2b9697f9a173e40572face100410e51975e34a5cef2be08dfa8e04ed3c0'},
 '00fa0679d4d159772298f2fafc2d349620264a592f900afc50626622a2a71c84': {'AddressOfEntryPoint': 4755,
                                                                      'DebugRVA': 12576,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 486539264,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'VCRUNTIME140.dll': '__std_type_info_destroy_list',
                                                                                      'api-ms-win-crt-heap-l1-1-0.dll': '_set_new_mode',
                                                                                      'api-ms-win-crt-locale-l1-1-0.dll': '_configthreadlocale',
                                                                                      'api-ms-win-crt-math-l1-1-0.dll': '__setusermatherr',
                                                                                      'api-ms-win-crt-runtime-l1-1-0.dll': '_initterm_e',
                                                                                      'api-ms-win-crt-stdio-l1-1-0.dll': '_set_fmode',
                                                                                      'python35.dll': 'Py_Main'},
                                                                      'ImportedFunctions': ['Py_Main',
                                                                                            'memset',
                                                                                            '_except_handler4_common',
                                                                                            '__std_type_info_destroy_list',
                                                                                            '_get_initial_wide_environment',
                                                                                            '_seh_filter_dll',
                                                                                            '_configure_narrow_argv',
                                                                                            '_initialize_narrow_environment',
                                                                                            '_initialize_onexit_table',
                                                                                            '_register_thread_local_exe_atexit_callback',
                                                                                            '__p___argc',
                                                                                            '_crt_atexit',
                                                                                            '_crt_at_quick_exit',
                                                                                            '_controlfp_s',
                                                                                            'terminate',
                                                                                            '_c_exit',
                                                                                            '_initialize_wide_environment',
                                                                                            '_cexit',
                                                                                            '_register_onexit_function',
                                                                                            '_configure_wide_argv',
                                                                                            '__p___wargv',
                                                                                            '_set_app_type',
                                                                                            '_seh_filter_exe',
                                                                                            '_initterm',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_execute_onexit_table',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '__p__commode',
                                                                                            '_set_fmode',
                                                                                            '_configthreadlocale',
                                                                                            '_set_new_mode',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 22392,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 22528,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 2000000,
                                                                      'filename': './data/clean/00fa0679d4d159772298f2fafc2d349620264a592f900afc50626622a2a71c84'},
 '012426c78cc11ace9c6789be4da0fbbd2cfdf7cddc4df3c61761a3d0669ca4fe': {'AddressOfEntryPoint': 188842,
                                                                      'DebugRVA': 422864,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 307200,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'LoadLibraryExA',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'GetUserNameW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'DecryptFileW',
                                                                                            'CreateWellKnownSid',
                                                                                            'InitializeAcl',
                                                                                            'SetEntriesInAclW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetTokenInformation',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'SystemFunction036',
                                                                                            'QueryServiceConfigW',
                                                                                            'GetMessageW',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetCursorPos',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromProgID',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'CompareStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'TlsAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'CreateProcessW',
                                                                                            'GetVersionExW',
                                                                                            'VerSetConditionMask',
                                                                                            'FreeLibrary',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetDateFormatW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetStringTypeW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'DuplicateHandle',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'OpenProcess',
                                                                                            'GetProcessId',
                                                                                            'WaitForSingleObject',
                                                                                            'ConnectNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'CreateNamedPipeW',
                                                                                            'CreateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'ResetEvent',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CompareStringA',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetThreadExecutionState',
                                                                                            'CopyFileExW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateMutexW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetThreadLocale',
                                                                                            'IsValidCodePage',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'TlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'DecodePointer',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetFileSizeEx',
                                                                                            'CopyFileW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FindFirstFileExW',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'RtlUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadLibraryExA',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 237,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 32792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 125952,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 33280,
                                                                                       '.text\x00\x00\x00': 302080,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.wixburn': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/012426c78cc11ace9c6789be4da0fbbd2cfdf7cddc4df3c61761a3d0669ca4fe'},
 '01579b7ac743f18645c1ac3ca8b3dbe0de0e20b7fbb98ed0c302903e8488e0be': {'AddressOfEntryPoint': 25776,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 172032,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'DSROLE.dll': 'DsRoleGetPrimaryDomainInformation',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleOutputCP',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'PeekConsoleInputW',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetTimeFormatW',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'GlobalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'LoadLibraryW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetCPInfo',
                                                                                      'api-ms-win-core-privateprofile-l1-1-1.dll': 'GetProfileStringW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetComputerNameExW',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'GetTimeZoneInformation',
                                                                                      'api-ms-win-security-activedirectoryclient-l1-1-0.dll': 'DsBindWithSpnExW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'InitializeAcl',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'EnumServicesStatusExW',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'OpenSCManagerW',
                                                                                      'browcli.dll': 'NetServerEnum',
                                                                                      'logoncli.dll': 'DsGetDcNameW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netutils.dll': 'NetApiBufferReallocate',
                                                                                      'ntdll.dll': 'RtlCopySid',
                                                                                      'samcli.dll': 'NetUserDel',
                                                                                      'srvcli.dll': 'NetServerGetInfo',
                                                                                      'wkscli.dll': 'NetUseDel'},
                                                                      'ImportedFunctions': ['_vsnwprintf_s',
                                                                                            'wcstod',
                                                                                            'putchar',
                                                                                            '_ftol2',
                                                                                            '_ftol2_sse',
                                                                                            'wcstok',
                                                                                            '_local_unwind4',
                                                                                            '_wcsdup',
                                                                                            'wcspbrk',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_wcsicmp',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_snwprintf_s',
                                                                                            '_vsnwprintf',
                                                                                            'wcscspn',
                                                                                            'iswctype',
                                                                                            'memmove',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            'wcsrchr',
                                                                                            'calloc',
                                                                                            '_wcsrev',
                                                                                            'realloc',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_ultow',
                                                                                            'swprintf_s',
                                                                                            'wcsncat_s',
                                                                                            'wcsstr',
                                                                                            'wcschr',
                                                                                            'exit',
                                                                                            'setlocale',
                                                                                            '_setmode',
                                                                                            '_iob',
                                                                                            '_fileno',
                                                                                            '_wcsnicmp',
                                                                                            'sprintf_s',
                                                                                            'wcsspn',
                                                                                            'qsort',
                                                                                            'wcscpy_s',
                                                                                            'wcsncmp',
                                                                                            'wcscat_s',
                                                                                            '_wcslwr',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsupr',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'RtlInitString',
                                                                                            'NlsMbOemCodePageTag',
                                                                                            'RtlxOemStringToUnicodeSize',
                                                                                            'NtQuerySystemTime',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'RtlLengthSid',
                                                                                            'RtlOemStringToUnicodeString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlQueryTimeZoneInformation',
                                                                                            'RtlTimeFieldsToTime',
                                                                                            'NtSetInformationThread',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtDuplicateToken',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'RtlCopySid',
                                                                                            'NetGroupAddUser',
                                                                                            'NetGroupGetInfo',
                                                                                            'NetUserEnum',
                                                                                            'NetUserGetGroups',
                                                                                            'NetUserGetInfo',
                                                                                            'NetUserSetInfo',
                                                                                            'NetUserModalsSet',
                                                                                            'NetGroupEnum',
                                                                                            'NetGroupGetUsers',
                                                                                            'NetGroupSetInfo',
                                                                                            'NetGroupDel',
                                                                                            'NetGroupDelUser',
                                                                                            'NetGroupAdd',
                                                                                            'NetUserModalsGet',
                                                                                            'NetUserAdd',
                                                                                            'NetUserDel',
                                                                                            'NetApiBufferFree',
                                                                                            'NetpwNameValidate',
                                                                                            'NetapipBufferAllocate',
                                                                                            'NetpwListTraverse',
                                                                                            'NetpwNameCompare',
                                                                                            'NetpwListCanonicalize',
                                                                                            'NetpwPathType',
                                                                                            'NetpwNameCanonicalize',
                                                                                            'NetApiBufferAllocate',
                                                                                            'NetApiBufferReallocate',
                                                                                            'DsRoleFreeMemory',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetLocalTime',
                                                                                            'GetComputerNameExW',
                                                                                            'NetFileGetInfo',
                                                                                            'NetFileClose',
                                                                                            'NetSessionEnum',
                                                                                            'NetShareGetInfo',
                                                                                            'NetShareEnum',
                                                                                            'NetFileEnum',
                                                                                            'NetSessionGetInfo',
                                                                                            'NetShareDel',
                                                                                            'NetShareSetInfo',
                                                                                            'NetShareAdd',
                                                                                            'NetShareCheck',
                                                                                            'NetShareDelSticky',
                                                                                            'NetServerStatisticsGet',
                                                                                            'NetRemoteTOD',
                                                                                            'NetSessionDel',
                                                                                            'NetConnectionEnum',
                                                                                            'NetServerTransportEnum',
                                                                                            'NetServerSetInfo',
                                                                                            'NetServerGetInfo',
                                                                                            'Sleep',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetCPInfo',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineW',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'NetWkstaUserGetInfo',
                                                                                            'NetWkstaGetInfo',
                                                                                            'NetUseEnum',
                                                                                            'NetWkstaTransportEnum',
                                                                                            'NetWkstaStatisticsGet',
                                                                                            'NetUseDel',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetAce',
                                                                                            'CopySid',
                                                                                            'EqualSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'GetLengthSid',
                                                                                            'AddAccessAllowedAce',
                                                                                            'CreateWellKnownSid',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetFileType',
                                                                                            'GetDriveTypeW',
                                                                                            'WriteFile',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'DsGetDcNameW',
                                                                                            'StartServiceW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'EnumDependentServicesW',
                                                                                            'EnumServicesStatusExW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'PeekConsoleInputW',
                                                                                            'LoadLibraryW',
                                                                                            'GlobalAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetProfileStringW',
                                                                                            'DsUnBindW',
                                                                                            'DsCrackNamesW',
                                                                                            'DsFreeNameResultW',
                                                                                            'DsBindWithSpnExW',
                                                                                            'NetServerEnum',
                                                                                            'GetTimeZoneInformation',
                                                                                            'lstrlenW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 34,
                                                                      'NumberOfImportFunctions': 215,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1712,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10240,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7680,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 110080},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/01579b7ac743f18645c1ac3ca8b3dbe0de0e20b7fbb98ed0c302903e8488e0be'},
 '01ae2f2e549cda25720972cac5fffb27eda2255fb67d0c170f5607d37c643245': {'AddressOfEntryPoint': 12707,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'ExitProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalUnlock',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 180824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 181248,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/01ae2f2e549cda25720972cac5fffb27eda2255fb67d0c170f5607d37c643245'},
 '01b38fd2c1df5dafdaaff096fb5d4f93697428afcb98efeaafd80c1c55fbb462': {'AddressOfEntryPoint': 21200,
                                                                      'DebugRVA': 4368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterTraceGuidsW',
                                                                                      'KERNEL32.dll': 'CreateFileW',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoTaskMemFree',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': '__p__commode',
                                                                                      'ntdll.dll': 'RtlEnumerateGenericTableAvl',
                                                                                      'urlmon.dll': 'CoInternetParseIUri'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'TraceMessage',
                                                                                            'GetTokenInformation',
                                                                                            'EventWrite',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegQueryValueExW',
                                                                                            'EventUnregister',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegGetValueW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegOpenKeyExW',
                                                                                            'EventRegister',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegCloseKey',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'GetLastError',
                                                                                            'GetThreadPriority',
                                                                                            'UnmapViewOfFile',
                                                                                            'CompareStringEx',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'CompareStringOrdinal',
                                                                                            'GetFileSizeEx',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateFileW',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_purecall',
                                                                                            '_vsnwprintf_s',
                                                                                            'exit',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memcpy_s',
                                                                                            'memset',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'RtlInsertElementGenericTableAvl',
                                                                                            'RtlEnumerateGenericTableWithoutSplayingAvl',
                                                                                            'RtlLookupElementGenericTableAvl',
                                                                                            'RtlDeleteElementGenericTableAvl',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlReAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'NtQueryInformationThread',
                                                                                            'NtSetInformationThread',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlNumberGenericTableElementsAvl',
                                                                                            'RtlInitializeGenericTableAvl',
                                                                                            'RtlSubscribeWnfStateChangeNotification',
                                                                                            'RtlUnsubscribeWnfNotificationWaitForCompletion',
                                                                                            'RtlEnumerateGenericTableAvl',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'NdrServerCall2',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcObjectSetType',
                                                                                            'RpcServerListen',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcMgmtStopServerListening',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerRegisterIf3',
                                                                                            'UuidFromStringW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateUri',
                                                                                            'CoInternetParseIUri',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 100,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1800,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 19456},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/01b38fd2c1df5dafdaaff096fb5d4f93697428afcb98efeaafd80c1c55fbb462'},
 '01febe03a5884cd323e141e607eb0b1020c6320c83229132871675929db85675': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 1619816,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 6892870828032,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1300,
                                                                      'SectionNames': {'.data\x00\x00\x00': 157696,
                                                                                       '.reloc\x00\x00': 32256,
                                                                                       '.text\x00\x00\x00': 1432064,
                                                                                       '.xdata\x00\x00': 22528},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/01febe03a5884cd323e141e607eb0b1020c6320c83229132871675929db85675'},
 '021d977c2b378e6b9f5bde36556ce4ea18d21be2531245e385477e6df9a171c6': {'AddressOfEntryPoint': 9984,
                                                                      'DebugRVA': 4272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'CRYPT32.dll': 'CryptUpdateProtectedState',
                                                                                      'DUI70.dll': 'InitProcessPriv',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'NETAPI32.dll': 'NetUserModalsGet',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'PostMessageW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GetSidIdentifierAuthority',
                                                                                            'OpenProcessToken',
                                                                                            'GetSidSubAuthority',
                                                                                            'OpenThreadToken',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetTokenInformation',
                                                                                            'CopySid',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegEnumValueW',
                                                                                            'IsValidSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetLengthSid',
                                                                                            'RegEnumKeyExW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegCloseKey',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentThread',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'CompareStringOrdinal',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'LoadIconW',
                                                                                            'PostMessageW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcsncmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_initterm',
                                                                                            'memset',
                                                                                            'CryptUpdateProtectedState',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'PropertySheetW',
                                                                                            'CommandLineToArgvW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetUserModalsGet',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            '?GetEncodedContentString@Element@DirectUI@@QAEJPAGI@Z',
                                                                                            'UnInitThread',
                                                                                            '??0TaskPage@DirectUI@@QAE@XZ',
                                                                                            '??1TaskPage@DirectUI@@UAE@XZ',
                                                                                            '?DUICreatePropertySheetPage@TaskPage@DirectUI@@QAEJPAUHINSTANCE__@@@Z',
                                                                                            '?PropSheet_SendMessage@TaskPage@DirectUI@@IAEJIIJ@Z',
                                                                                            '?LoadParser@TaskPage@DirectUI@@MAEJPAPAVDUIXmlParser@2@@Z',
                                                                                            '?CreateDUICP@TaskPage@DirectUI@@EAEJPAVHWNDElement@2@PAUHWND__@@1PAPAVElement@2@PAPAVDUIXmlParser@2@@Z',
                                                                                            '?DestroyCP@TaskPage@DirectUI@@EAEXXZ',
                                                                                            'InitThread',
                                                                                            '?Click@Button@DirectUI@@SG?AVUID@@XZ',
                                                                                            'StrToID',
                                                                                            '?OnListenedInput@TaskPage@DirectUI@@MAEXPAVElement@2@PAUInputEvent@2@@Z',
                                                                                            '?OnListenedPropertyChanged@TaskPage@DirectUI@@MAEXPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z',
                                                                                            'UnInitProcessPriv',
                                                                                            '?SetVisible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetContentString@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetEnabled@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetMaxLength@Edit@DirectUI@@QAEJH@Z',
                                                                                            '?LoadPage@TaskPage@DirectUI@@MAEJPAVHWNDElement@2@PAUHINSTANCE__@@PAPAVElement@2@PAPAVDUIXmlParser@2@@Z',
                                                                                            '?InitPropSheetPage@TaskPage@DirectUI@@MAEXPAU_PROPSHEETPAGEW@@@Z',
                                                                                            '?OnQueryCancel@TaskPage@DirectUI@@MAEJXZ',
                                                                                            '?OnReset@TaskPage@DirectUI@@MAEJXZ',
                                                                                            '?OnWizBack@TaskPage@DirectUI@@MAEJXZ',
                                                                                            '?OnWizFinish@TaskPage@DirectUI@@MAEJXZ',
                                                                                            '?OnWizNext@TaskPage@DirectUI@@MAEJXZ',
                                                                                            '?OnQueryInitialFocus@TaskPage@DirectUI@@MAEPAVElement@2@XZ',
                                                                                            '?CreateParserCP@TaskPage@DirectUI@@EAEJPAPAVDUIXmlParser@2@@Z',
                                                                                            '?OnMessage@TaskPage@DirectUI@@MAE_NIIJPAJ@Z',
                                                                                            '?OnListenerAttach@TaskPage@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?OnListenerDetach@TaskPage@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?OnListenedPropertyChanging@TaskPage@DirectUI@@MAE_NPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z',
                                                                                            'InitProcessPriv'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 101,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 56376,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 56832,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/021d977c2b378e6b9f5bde36556ce4ea18d21be2531245e385477e6df9a171c6'},
 '021f0d9689db7cdd65394273e44415017cb8a2ddb5860c9297a4297b3d8d7875': {'AddressOfEntryPoint': 89632,
                                                                      'DebugRVA': 26336,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 196608,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'GDI32.dll': 'CreateFontA',
                                                                                      'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'USER32.dll': 'LoadStringA',
                                                                                      'apphelp.dll': 'SdbSetPermLayerKeys',
                                                                                      'ntdll.dll': 'RtlGetVersion',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'CloseHandle',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateFileW',
                                                                                            'CreateProcessA',
                                                                                            'ResumeThread',
                                                                                            'GetModuleFileNameW',
                                                                                            'ReadProcessMemory',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'SetLastError',
                                                                                            'SuspendThread',
                                                                                            'TerminateProcess',
                                                                                            'GetTickCount',
                                                                                            'OpenProcess',
                                                                                            'WaitForDebugEvent',
                                                                                            'ExitProcess',
                                                                                            'ContinueDebugEvent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'DebugActiveProcess',
                                                                                            'GetVersionExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCommandLineA',
                                                                                            'OutputDebugStringA',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'SetEvent',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'GetFileSizeEx',
                                                                                            'HeapFree',
                                                                                            'LeaveCriticalSection',
                                                                                            'SwitchToThread',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetThreadContext',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'RaiseException',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStartupInfoA',
                                                                                            'GetThreadContext',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'LoadLibraryExA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'EncodePointer',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'SetEndOfFile',
                                                                                            'ReadFile',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FormatMessageA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenFileMappingW',
                                                                                            'DuplicateHandle',
                                                                                            'GetFullPathNameW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'NtQueryInformationToken',
                                                                                            'LdrLoadDll',
                                                                                            'LdrGetProcedureAddress',
                                                                                            'RtlInitUnicodeString',
                                                                                            'LdrUnloadDll',
                                                                                            'RtlUnwind',
                                                                                            'RtlGetVersion',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'MessageBoxA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextA',
                                                                                            'SendMessageA',
                                                                                            'SetWindowPos',
                                                                                            'GetDesktopWindow',
                                                                                            'DialogBoxParamA',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'CoUninitialize',
                                                                                            'SdbDeletePermLayerKeys',
                                                                                            'SdbSetPermLayerKeys',
                                                                                            'CreateFontA'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 149,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 10400,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 10752,
                                                                                       '.text\x00\x00\x00': 175616},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/021f0d9689db7cdd65394273e44415017cb8a2ddb5860c9297a4297b3d8d7875'},
 '02659e6fdc7cbc6df2bb0616695436f5487e33fc324acd7c86f3362482664e13': {'AddressOfEntryPoint': 43672,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 62696,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 62976,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 41472,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/02659e6fdc7cbc6df2bb0616695436f5487e33fc324acd7c86f3362482664e13'},
 '0285647ce6e7a6a29b4b4b283c85fc9e4263db73b5ef275a24104ecca2b5d08f': {'AddressOfEntryPoint': 293938,
                                                                      'DebugRVA': 303712,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 396736,
                                                                      'ExportSize': 78,
                                                                      'IATRVA': 299008,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCR90.dll': '_invoke_watson',
                                                                                      'WS2_32.dll': 'gethostbyaddr'},
                                                                      'ImportedFunctions': ['accept',
                                                                                            'gethostbyname',
                                                                                            'getservbyname',
                                                                                            'ntohs',
                                                                                            'bind',
                                                                                            'listen',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'socket',
                                                                                            'setsockopt',
                                                                                            'connect',
                                                                                            'WSAStartup',
                                                                                            'WSACancelBlockingCall',
                                                                                            'WSACleanup',
                                                                                            'getsockname',
                                                                                            'WSAGetLastError',
                                                                                            'select',
                                                                                            '__WSAFDIsSet',
                                                                                            'shutdown',
                                                                                            'closesocket',
                                                                                            'gethostbyaddr',
                                                                                            '_controlfp_s',
                                                                                            '_except_handler4_common',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'realloc',
                                                                                            'fputs',
                                                                                            'qsort',
                                                                                            'strspn',
                                                                                            'isdigit',
                                                                                            'signal',
                                                                                            'malloc',
                                                                                            '_errno',
                                                                                            'free',
                                                                                            'fputc',
                                                                                            'strstr',
                                                                                            'isxdigit',
                                                                                            '_kbhit',
                                                                                            '_time64',
                                                                                            'exit',
                                                                                            'getenv',
                                                                                            '_access',
                                                                                            '_stricmp',
                                                                                            'memcpy',
                                                                                            'toupper',
                                                                                            '_wassert',
                                                                                            'strncat',
                                                                                            'setvbuf',
                                                                                            'memset',
                                                                                            'islower',
                                                                                            'sscanf',
                                                                                            'strncmp',
                                                                                            'strchr',
                                                                                            'atol',
                                                                                            'atoi',
                                                                                            'perror',
                                                                                            'abort',
                                                                                            'printf',
                                                                                            'fprintf',
                                                                                            'fgets',
                                                                                            'fread',
                                                                                            'fwrite',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fflush',
                                                                                            '_open',
                                                                                            '_read',
                                                                                            '_write',
                                                                                            '_lseek',
                                                                                            '_close',
                                                                                            '_setmode',
                                                                                            '_fileno',
                                                                                            'clearerr',
                                                                                            'ferror',
                                                                                            'feof',
                                                                                            '__iob_func',
                                                                                            '_invoke_watson',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'InterlockedCompareExchange',
                                                                                            'SetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'GetProcessTimes',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'Sleep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 692,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 98304,
                                                                                       '.reloc\x00\x00': 25088,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 291328},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0285647ce6e7a6a29b4b4b283c85fc9e4263db73b5ef275a24104ecca2b5d08f'},
 '02d2d5bf8305f3683cc2832346395555f8e0900b3b761563a5f6af5625067b49': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 376548,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 376832,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/02d2d5bf8305f3683cc2832346395555f8e0900b3b761563a5f6af5625067b49'},
 '0312defa0cb061af2c1a141734d405ff8ebdcd6b4419d31dd7c7d9cc4dbe8e2a': {'AddressOfEntryPoint': 2105856,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'Arc',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'WSOCK32.dll': 'socket',
                                                                                      'comdlg32.dll': 'PrintDlgA',
                                                                                      'ole32.dll': 'OleInitialize'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'RegCloseKey',
                                                                                            'PrintDlgA',
                                                                                            'Arc',
                                                                                            'OleInitialize',
                                                                                            'DragFinish',
                                                                                            'GetDC',
                                                                                            'socket'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 13,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 108760,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 109568,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 709632},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0312defa0cb061af2c1a141734d405ff8ebdcd6b4419d31dd7c7d9cc4dbe8e2a'},
 '031fa2ab892dd560fcfb87377eac92e0252b2026634c0530d2ed60c39b35d948': {'AddressOfEntryPoint': 20032,
                                                                      'DebugRVA': 67844,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'HeapSize',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'OpenWindowStationW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'WSAGetLastError',
                                                                                      'dbghelp.dll': 'EnumerateLoadedModulesW64',
                                                                                      'framedynos.dll': '??4CHString@@QAEABV0@PBG@Z',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlTimeToElapsedTimeFields',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegConnectRegistryW',
                                                                                            'RegCloseKey',
                                                                                            'LookupAccountSidW',
                                                                                            'OpenSCManagerW',
                                                                                            'EnumServicesStatusExW',
                                                                                            'CloseServiceHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'WriteConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'ReadFile',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenA',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'VerSetConditionMask',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'HeapSize',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'wcsstr',
                                                                                            'wcstok',
                                                                                            'fflush',
                                                                                            'fprintf',
                                                                                            '_get_osfhandle',
                                                                                            '_fileno',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_errno',
                                                                                            'wcstoul',
                                                                                            'wcschr',
                                                                                            '_wtoi64',
                                                                                            '_wcsicmp',
                                                                                            'wcsrchr',
                                                                                            '_wcsdup',
                                                                                            'free',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__iob_func',
                                                                                            '_memicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'memset',
                                                                                            'RtlLargeIntegerToChar',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'RtlTimeToElapsedTimeFields',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetProcessWindowStation',
                                                                                            'EnumWindowStationsW',
                                                                                            'GetWindowTextW',
                                                                                            'PostMessageW',
                                                                                            'wsprintfW',
                                                                                            'CharUpperW',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'FindWindowExW',
                                                                                            'EnumWindows',
                                                                                            'CloseDesktop',
                                                                                            'SetThreadDesktop',
                                                                                            'OpenDesktopW',
                                                                                            'GetThreadDesktop',
                                                                                            'EnumDesktopsW',
                                                                                            'CloseWindowStation',
                                                                                            'SetProcessWindowStation',
                                                                                            'IsHungAppWindow',
                                                                                            'LoadStringW',
                                                                                            'OpenWindowStationW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetGetLastErrorW',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'GetUserNameExW',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetNameInfoW',
                                                                                            'GetAddrInfoW',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            '??0CHString@@QAE@XZ',
                                                                                            '??1CHString@@QAE@XZ',
                                                                                            '??YCHString@@QAEABV0@ABV0@@Z',
                                                                                            '??4CHString@@QAEABV0@PBD@Z',
                                                                                            '?FindOneOf@CHString@@QBEHPBG@Z',
                                                                                            '?Find@CHString@@QBEHG@Z',
                                                                                            '?Mid@CHString@@QBE?AV1@H@Z',
                                                                                            '?Compare@CHString@@QBEHPBG@Z',
                                                                                            '?Left@CHString@@QBE?AV1@H@Z',
                                                                                            '?Empty@CHString@@QAEXXZ',
                                                                                            '?Mid@CHString@@QBE?AV1@HH@Z',
                                                                                            '?Find@CHString@@QBEHPBG@Z',
                                                                                            '??YCHString@@QAEABV0@PBG@Z',
                                                                                            '?ReleaseBuffer@CHString@@QAEXH@Z',
                                                                                            '?GetBufferSetLength@CHString@@QAEPAGH@Z',
                                                                                            '?GetBuffer@CHString@@QAEPAGH@Z',
                                                                                            '?Format@CHString@@QAAXPBGZZ',
                                                                                            '??4CHString@@QAEABV0@ABV0@@Z',
                                                                                            '?GetData@CHString@@IBEPAUCHStringData@@XZ',
                                                                                            '??4CHString@@QAEABV0@PBG@Z',
                                                                                            'NetServerGetInfo',
                                                                                            'NetApiBufferFree',
                                                                                            'EnumerateLoadedModulesW64',
                                                                                            'StrChrIW',
                                                                                            'StrStrW',
                                                                                            'StrChrW',
                                                                                            'StrStrIW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 177,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 64000},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/031fa2ab892dd560fcfb87377eac92e0252b2026634c0530d2ed60c39b35d948'},
 '03c97b6de8cd704cc0dbb7fb3166d92a20131a627df631c8965dd2b4fe72f342': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/03c97b6de8cd704cc0dbb7fb3166d92a20131a627df631c8965dd2b4fe72f342'},
 '048c2ffe78df7dcb1fd037af81cb336369406b864e3edee1028ac047a5a9d070': {'AddressOfEntryPoint': 27428,
                                                                      'DebugRVA': 4768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetCurrentDirectoryA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': 'exit'},
                                                                      'ImportedFunctions': ['FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrlenA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetShortPathNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FormatMessageA',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExA',
                                                                                            'GetVersionExA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'TerminateThread',
                                                                                            'GetDriveTypeA',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'InterlockedExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetDeviceCaps',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowPos',
                                                                                            'SendMessageA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DispatchMessageA',
                                                                                            'CallWindowProcA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'CharPrevA',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'LoadStringA',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_vsnprintf',
                                                                                            'exit',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12755892,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 12755968,
                                                                                       '.text\x00\x00\x00': 43520},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/048c2ffe78df7dcb1fd037af81cb336369406b864e3edee1028ac047a5a9d070'},
 '04ec6c94faa1b8c9762f8e5564129aaaedc5a41df9ed7f6e56da6d4de926be87': {'AddressOfEntryPoint': 13333,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'FindWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 382880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 382976,
                                                                                       '.text\x00\x00\x00': 26624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/04ec6c94faa1b8c9762f8e5564129aaaedc5a41df9ed7f6e56da6d4de926be87'},
 '0566517fbec5a9f4c6770e033cf7cc5d0fdd8d5cccd10b3e623e14ee9bac7794': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 442928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 443392,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0566517fbec5a9f4c6770e033cf7cc5d0fdd8d5cccd10b3e623e14ee9bac7794'},
 '05c8850190ac9b7bad6e1a224bfd13fb449659d3b5cafde77e78903abf992380': {'AddressOfEntryPoint': 221991,
                                                                      'DebugRVA': 431376,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 430080,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityDescriptorDacl',
                                                                                      'GDI32.dll': 'TranslateCharsetInfo',
                                                                                      'KERNEL32.dll': 'LocalAlloc',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'RpcStringFreeA',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetDlgItemTextA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteExA',
                                                                                            'SHFileOperationA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'lstrcpyA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetErrorMode',
                                                                                            'GetTempPathA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'GetTickCount',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'CopyFileA',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'CreateEventA',
                                                                                            'lstrcatA',
                                                                                            'GetTempFileNameA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GlobalHandle',
                                                                                            'VerLanguageNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'CompareFileTime',
                                                                                            'FindFirstFileA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetFileAttributesA',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetSystemInfo',
                                                                                            'MulDiv',
                                                                                            'IsValidCodePage',
                                                                                            'GetVersion',
                                                                                            'GetModuleHandleA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsBadReadPtr',
                                                                                            'VirtualQuery',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetDriveTypeA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetCurrentProcessId',
                                                                                            'FindResourceExA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'ExitProcess',
                                                                                            'GetProcessTimes',
                                                                                            'OpenProcess',
                                                                                            'SearchPathA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SetStdHandle',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsBadCodePtr',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsBadWritePtr',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'FatalAppExitA',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedExchange',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'lstrlenA',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GlobalAlloc',
                                                                                            'CloseHandle',
                                                                                            'GlobalLock',
                                                                                            'ReadFile',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'GetThreadContext',
                                                                                            'VirtualProtectEx',
                                                                                            'WriteProcessMemory',
                                                                                            'FlushInstructionCache',
                                                                                            'SetThreadContext',
                                                                                            'ResumeThread',
                                                                                            'DeleteFileA',
                                                                                            'Sleep',
                                                                                            'RemoveDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'SetFilePointer',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'lstrcpynA',
                                                                                            'GetModuleFileNameA',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'GetLocalTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'VirtualProtect',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'LocalAlloc',
                                                                                            'UpdateWindow',
                                                                                            'SetCursor',
                                                                                            'GetWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetFocus',
                                                                                            'GetClassInfoA',
                                                                                            'wvsprintfA',
                                                                                            'LoadStringA',
                                                                                            'EnableWindow',
                                                                                            'GetParent',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'GetWindowPlacement',
                                                                                            'DrawIcon',
                                                                                            'DestroyIcon',
                                                                                            'GetDlgCtrlID',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'IsDialogMessageA',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetRect',
                                                                                            'FindWindowA',
                                                                                            'IntersectRect',
                                                                                            'SubtractRect',
                                                                                            'IsWindow',
                                                                                            'CharPrevA',
                                                                                            'CharNextA',
                                                                                            'WaitForInputIdle',
                                                                                            'GetWindowLongA',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'SetWindowLongA',
                                                                                            'GetClientRect',
                                                                                            'ClientToScreen',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowDC',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'wsprintfA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'CreateDialogParamA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'DialogBoxParamA',
                                                                                            'DefWindowProcA',
                                                                                            'PostMessageA',
                                                                                            'KillTimer',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'LoadIconA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'CharUpperA',
                                                                                            'ExitWindowsEx',
                                                                                            'SendDlgItemMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'SetDlgItemTextA',
                                                                                            'CreateFontA',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'GetObjectA',
                                                                                            'CreateFontIndirectA',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'CreatePalette',
                                                                                            'GetDeviceCaps',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'CreateDIBitmap',
                                                                                            'TranslateCharsetInfo',
                                                                                            'RegCreateKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'OpenThreadToken',
                                                                                            'RegEnumValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CreateItemMoniker',
                                                                                            'GetRunningObjectTable',
                                                                                            'ProgIDFromCLSID',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateGuid',
                                                                                            'SysAllocStringLen',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'GetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'UuidFromStringA',
                                                                                            'UuidCreate',
                                                                                            'UuidToStringA',
                                                                                            'RpcStringFreeA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 313,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 58055,
                                                                      'SectionNames': {'.data\x00\x00\x00': 36864,
                                                                                       '.rdata\x00\x00': 73728,
                                                                                       '.rsrc\x00\x00\x00': 61440,
                                                                                       '.text\x00\x00\x00': 425984},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/05c8850190ac9b7bad6e1a224bfd13fb449659d3b5cafde77e78903abf992380'},
 '0617d71df6cb74ba1c16d1394bc7ffee90b05f521c8e7472b6f21cee2c0ff359': {'AddressOfEntryPoint': 12491,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 120160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 120320,
                                                                                       '.text\x00\x00\x00': 23040},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0617d71df6cb74ba1c16d1394bc7ffee90b05f521c8e7472b6f21cee2c0ff359'},
 '066151ea27da27ca88b05235e0b917e4abfcd0544beab1b2ed24e1724c48ab8d': {'AddressOfEntryPoint': 5056,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'SHLWAPI.dll': 'PathAppendA',
                                                                                      'msvcrt.dll': '_controlfp'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            '_ismbblead',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_controlfp',
                                                                                            'ShellExecuteA',
                                                                                            'PathAppendA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 34,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/066151ea27da27ca88b05235e0b917e4abfcd0544beab1b2ed24e1724c48ab8d'},
 '066d1783695dce4f21e89c7e3070fb730a8edc79ddde16e323fb10e2c1c671a3': {'AddressOfEntryPoint': 43672,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 41472,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/066d1783695dce4f21e89c7e3070fb730a8edc79ddde16e323fb10e2c1c671a3'},
 '067d2c6ee12ff31c08bc5752d5603a803fc67d0f97da3ea702b330a69b7dd7e8': {'AddressOfEntryPoint': 29120,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RemoveUsersFromEncryptedFile',
                                                                                      'CRYPT32.dll': 'CryptQueryObject',
                                                                                      'EFSUTIL.dll': 'EfsUtilGetSmartcardProviderName',
                                                                                      'FeClient.dll': 'EfsClientFreeProtectorList',
                                                                                      'KERNEL32.dll': 'GetFileAttributesW',
                                                                                      'NETAPI32.dll': 'DsRoleFreeMemory',
                                                                                      'NTDSAPI.dll': 'DsFreeNameResultW',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'bcrypt.dll': 'BCryptEncrypt',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError'},
                                                                      'ImportedFunctions': ['EncryptedFileKeyInfo',
                                                                                            'AddUsersToEncryptedFile',
                                                                                            'CryptAcquireContextW',
                                                                                            'FlushEfsCache',
                                                                                            'DecryptFileW',
                                                                                            'EqualSid',
                                                                                            'CryptReleaseContext',
                                                                                            'RegQueryValueExW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'LookupAccountSidW',
                                                                                            'QueryRecoveryAgentsOnEncryptedFile',
                                                                                            'RegOpenKeyExW',
                                                                                            'CryptDestroyKey',
                                                                                            'SetUserFileEncryptionKey',
                                                                                            'AddUsersToEncryptedFileEx',
                                                                                            'FreeEncryptedFileKeyInfo',
                                                                                            'FreeEncryptionCertificateHashList',
                                                                                            'QueryUsersOnEncryptedFile',
                                                                                            'CryptGetUserKey',
                                                                                            'EncryptFileW',
                                                                                            'RegCloseKey',
                                                                                            'RemoveUsersFromEncryptedFile',
                                                                                            'SetFilePointer',
                                                                                            'GetDriveTypeW',
                                                                                            'SetEndOfFile',
                                                                                            'SetErrorMode',
                                                                                            'VerSetConditionMask',
                                                                                            'CreateDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'VirtualFree',
                                                                                            'ReadConsoleW',
                                                                                            'GetVolumePathNameW',
                                                                                            'FindNextVolumeW',
                                                                                            'SetConsoleMode',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'lstrcmpW',
                                                                                            'FlushFileBuffers',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetLastError',
                                                                                            'VirtualAlloc',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'FindClose',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindVolumeClose',
                                                                                            'QueryDosDeviceW',
                                                                                            'DeviceIoControl',
                                                                                            'HeapSetInformation',
                                                                                            'FindNextFileW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'CloseHandle',
                                                                                            'FindFirstVolumeW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'GetVolumeInformationW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'FindFirstFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'LocalFree',
                                                                                            'GetFileType',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'lstrlenW',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleMode',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetFileAttributesW',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'getchar',
                                                                                            'towupper',
                                                                                            '_putws',
                                                                                            '_iob',
                                                                                            'printf',
                                                                                            '_wcsnicmp',
                                                                                            '_get_osfhandle',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'fgetws',
                                                                                            'memset',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'UuidToStringW',
                                                                                            'UuidCreate',
                                                                                            'RpcStringFreeW',
                                                                                            'MessageBoxW',
                                                                                            'DsCrackNamesW',
                                                                                            'DsBindW',
                                                                                            'DsUnBindW',
                                                                                            'DsFreeNameResultW',
                                                                                            'CertOpenStore',
                                                                                            'CertGetEnhancedKeyUsage',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertAddCertificateContextToStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertCloseStore',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CryptStringToBinaryW',
                                                                                            'PFXExportCertStoreEx',
                                                                                            'CryptQueryObject',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptDestroyKey',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptGenerateSymmetricKey',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptGenRandom',
                                                                                            'BCryptEncrypt',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'DsRoleFreeMemory',
                                                                                            'EfsUtilGetCurrentUserInformation',
                                                                                            'EfsUtilCreateSelfSignedCertificate',
                                                                                            'EfsUtilGetSmartcardProviderName',
                                                                                            'EfsClientQueryProtectors',
                                                                                            'EfsClientFreeProtectorList'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 149,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 27648},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/067d2c6ee12ff31c08bc5752d5603a803fc67d0f97da3ea702b330a69b7dd7e8'},
 '0683694b4e12b58cfde47674daedfeb15dbc804bf539707ae1629d2f525b3da8': {'AddressOfEntryPoint': 4816,
                                                                      'DebugRVA': 26080,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 37504,
                                                                      'ExportSize': 89,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR90.dll': '_unlink',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'glib-2.0.dll': 'g_option_context_parse',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['_decode_pointer',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_amsg_exit',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'printf',
                                                                                            'strerror',
                                                                                            '_errno',
                                                                                            'fwrite',
                                                                                            'rename',
                                                                                            'fclose',
                                                                                            'feof',
                                                                                            'ferror',
                                                                                            'clearerr',
                                                                                            '_fileno',
                                                                                            '_setmode',
                                                                                            '_close',
                                                                                            '_lseek',
                                                                                            '_write',
                                                                                            '_read',
                                                                                            '_open',
                                                                                            'fflush',
                                                                                            'ftell',
                                                                                            'fseek',
                                                                                            'fopen',
                                                                                            'fread',
                                                                                            'fgets',
                                                                                            'memcmp',
                                                                                            'atoi',
                                                                                            'strrchr',
                                                                                            '_fdopen',
                                                                                            '_open_osfhandle',
                                                                                            '_strnicmp',
                                                                                            '__crt_debugger_hook',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_lock',
                                                                                            '_unlink',
                                                                                            'TerminateProcess',
                                                                                            'FormatMessageA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoTaskMemFree',
                                                                                            'RegQueryValueExW',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'FreeSid',
                                                                                            'g_option_context_new',
                                                                                            'g_string_free',
                                                                                            'g_string_append_printf',
                                                                                            'g_string_new',
                                                                                            'g_strdup_printf',
                                                                                            'g_fopen',
                                                                                            'g_clear_error',
                                                                                            'g_list_sort',
                                                                                            'g_list_prepend',
                                                                                            'g_regex_match',
                                                                                            'g_dir_read_name_utf8',
                                                                                            'g_regex_unref',
                                                                                            'g_dir_close',
                                                                                            'g_dir_open_utf8',
                                                                                            'g_regex_new',
                                                                                            'g_list_free',
                                                                                            'g_list_first',
                                                                                            'g_list_last',
                                                                                            'g_option_context_add_main_entries',
                                                                                            'g_remove',
                                                                                            'g_vsnprintf',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_utf8_to_utf16',
                                                                                            'g_utf16_to_utf8',
                                                                                            'g_realloc',
                                                                                            'g_option_context_free',
                                                                                            'g_strdup',
                                                                                            'g_mapped_file_new',
                                                                                            'g_mapped_file_get_contents',
                                                                                            'g_mapped_file_get_length',
                                                                                            'g_mapped_file_unref',
                                                                                            'g_free',
                                                                                            'g_get_prgname',
                                                                                            'g_file_test_utf8',
                                                                                            'g_mkdir',
                                                                                            'g_build_filename',
                                                                                            'g_option_context_set_help_enabled',
                                                                                            'g_rmdir',
                                                                                            'g_option_context_parse'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 124,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 428,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 13312,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 17408},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0683694b4e12b58cfde47674daedfeb15dbc804bf539707ae1629d2f525b3da8'},
 '069271f8b51d3f29390d960687e5a251e131e3b974c1a8ba78ce664e2f605978': {'AddressOfEntryPoint': 52544,
                                                                      'DebugRVA': 4432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'POWRPROF.dll': 'PowerReadValueIncrement',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetDateFormatW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'RaiseException',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileAttributesW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSize',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCreateKeyExW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegSaveKeyW',
                                                                                      'api-ms-win-core-shlwapi-legacy-l1-1-0.dll': 'PathAppendW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemInfo',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'api-ms-win-power-base-l1-1-0.dll': 'GetPwrCapabilities',
                                                                                      'api-ms-win-power-setting-l1-1-0.dll': 'PowerWriteACValueIndex',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupPrivilegeValueW',
                                                                                      'api-ms-win-service-private-l1-1-1.dll': 'I_QueryTagInformation',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlLoadString'},
                                                                      'ImportedFunctions': ['_get_osfhandle',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            '_errno',
                                                                                            '_memicmp',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '__wgetmainargs',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_controlfp',
                                                                                            '_fileno',
                                                                                            '_wtoi',
                                                                                            '_except_handler4_common',
                                                                                            '_wcstoui64',
                                                                                            '_ui64tow_s',
                                                                                            'memcpy',
                                                                                            '_itow_s',
                                                                                            '_wcsnicmp',
                                                                                            '_purecall',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_vsnwprintf',
                                                                                            'wcstoul',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_wcsicmp',
                                                                                            '_XcptFilter',
                                                                                            'swprintf_s',
                                                                                            '__iob_func',
                                                                                            'memset',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlLoadString',
                                                                                            'UuidFromStringW',
                                                                                            'UuidEqual',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemInfo',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTempPathW',
                                                                                            'GetFullPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'DeleteFileW',
                                                                                            'GetFileType',
                                                                                            'GetFileAttributesW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcessToken',
                                                                                            'ExitProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'LoadLibraryExA',
                                                                                            'LoadStringW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'PowerWriteDCValueIndex',
                                                                                            'PowerGetActiveScheme',
                                                                                            'PowerSetActiveScheme',
                                                                                            'PowerWriteACValueIndex',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetTokenInformation',
                                                                                            'CompareStringOrdinal',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'GetPwrCapabilities',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'CloseHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RegSaveKeyW',
                                                                                            'PathAppendW',
                                                                                            'I_QueryTagInformation',
                                                                                            'PowerInformationWithPrivileges',
                                                                                            'PowerApplyPowerRequestOverride',
                                                                                            'PowerOpenUserPowerKey',
                                                                                            'PowerImportPowerScheme',
                                                                                            'PowerReadDCValueIndex',
                                                                                            'DevicePowerEnumDevices',
                                                                                            'PowerReadACValueIndex',
                                                                                            'DevicePowerOpen',
                                                                                            'PowerReadSettingAttributes',
                                                                                            'DevicePowerClose',
                                                                                            'DevicePowerSetDeviceState',
                                                                                            'PowerReadValueMax',
                                                                                            'ReadPwrScheme',
                                                                                            'PowerWriteACDefaultIndex',
                                                                                            'PowerRemovePowerSetting',
                                                                                            'PowerDuplicateScheme',
                                                                                            'PowerWriteValueIncrement',
                                                                                            'PowerWriteFriendlyName',
                                                                                            'PowerWriteValueMin',
                                                                                            'PowerWriteDCDefaultIndex',
                                                                                            'PowerEnumerate',
                                                                                            'PowerRestoreDefaultPowerSchemes',
                                                                                            'PowerWriteSecurityDescriptor',
                                                                                            'PowerRestoreIndividualDefaultPowerScheme',
                                                                                            'PowerDeleteScheme',
                                                                                            'PowerWriteSettingAttributes',
                                                                                            'PowerWriteDescription',
                                                                                            'PowerReadPossibleValue',
                                                                                            'PowerReadPossibleFriendlyName',
                                                                                            'PowerReadFriendlyName',
                                                                                            'GetActivePwrScheme',
                                                                                            'PowerReadValueUnitsSpecifier',
                                                                                            'PowerReplaceDefaultPowerSchemes',
                                                                                            'PowerWriteValueMax',
                                                                                            'PowerPolicyToGUIDFormat',
                                                                                            'PowerReadValueMin',
                                                                                            'PowerWritePossibleValue',
                                                                                            'PowerReadSecurityDescriptor',
                                                                                            'PowerReadValueIncrement',
                                                                                            'WSACleanup',
                                                                                            'GetStdHandle',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 31,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 51712},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/069271f8b51d3f29390d960687e5a251e131e3b974c1a8ba78ce664e2f605978'},
 '06c6db880fe8bbce85c5fbb3e93074ce92e6829b8df68fe053d24c24bfb04c8b': {'AddressOfEntryPoint': 11587,
                                                                      'DebugRVA': 16848,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'UnmapViewOfFile',
                                                                                      'MSVCP100.dll': '??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z',
                                                                                      'MSVCR100.dll': '__dllonexit',
                                                                                      'USER32.dll': 'DialogBoxParamW'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'UnregisterWaitEx',
                                                                                            'SetEvent',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'MapViewOfFile',
                                                                                            'OpenThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'IsDebuggerPresent',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueueUserAPC',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowTextW',
                                                                                            'EndDialog',
                                                                                            'LoadImageW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EnableWindow',
                                                                                            'SetWindowLongW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageW',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'PostMessageW',
                                                                                            'DialogBoxParamW',
                                                                                            'InitCommonControlsEx',
                                                                                            '?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA',
                                                                                            '??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ',
                                                                                            '?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ',
                                                                                            '?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ',
                                                                                            '?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z',
                                                                                            '?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z',
                                                                                            '?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ',
                                                                                            '?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z',
                                                                                            '?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@',
                                                                                            '??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z',
                                                                                            '??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@',
                                                                                            '??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '_purecall',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_invoke_watson',
                                                                                            'memcpy',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'memmove',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 102,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/06c6db880fe8bbce85c5fbb3e93074ce92e6829b8df68fe053d24c24bfb04c8b'},
 '06e21deb33958f3aa54fcc1ee11b93377a98257bd1c2ab505cad8dfabc519898': {'AddressOfEntryPoint': 298059,
                                                                      'DebugRVA': 448208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 446464,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersInfo',
                                                                                      'KERNEL32.dll': 'CreateProcessW',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'OPENGL32.dll': 'glGetString',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'PathIsDirectoryW',
                                                                                      'USER32.dll': 'UnregisterClassW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WININET.dll': 'HttpOpenRequestW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'gdiplus.dll': 'GdipCreateSolidFill',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['WritePrivateProfileStringW',
                                                                                            'GetTickCount',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateThread',
                                                                                            'MoveFileExW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetFileType',
                                                                                            'DuplicateHandle',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCommandLineW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'lstrcmpW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SetEndOfFile',
                                                                                            'QueueUserWorkItem',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'GetModuleHandleExA',
                                                                                            'InterlockedExchange',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'GetLocalTime',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'CompareFileTime',
                                                                                            'GetFileTime',
                                                                                            'CreateFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLastError',
                                                                                            'FindNextFileA',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetStringTypeA',
                                                                                            'GetLocaleInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'SetStdHandle',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetHandleCount',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapCreate',
                                                                                            'GetStdHandle',
                                                                                            'HeapSize',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'CompareStringW',
                                                                                            'GetCPInfo',
                                                                                            'CompareStringA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'ExitThread',
                                                                                            'GetFileAttributesW',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'HeapReAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlUnwind',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'LoadLibraryA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'InterlockedCompareExchange',
                                                                                            'DeleteFileA',
                                                                                            'OutputDebugStringW',
                                                                                            'DebugBreak',
                                                                                            'InterlockedIncrement',
                                                                                            'lstrlenA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'CreateFileW',
                                                                                            'SizeofResource',
                                                                                            'WriteFile',
                                                                                            'FreeResource',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'lstrcpyW',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'Process32NextW',
                                                                                            'CloseHandle',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'CopyFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetVolumeInformationW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'Sleep',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'InterlockedDecrement',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushInstructionCache',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'CreateProcessW',
                                                                                            'SetTimer',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'IsWindow',
                                                                                            'PostMessageW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'DrawIcon',
                                                                                            'DrawIconEx',
                                                                                            'DrawTextW',
                                                                                            'GetKeyState',
                                                                                            'GetFocus',
                                                                                            'UpdateWindow',
                                                                                            'EnableWindow',
                                                                                            'GetClientRect',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'WaitMessage',
                                                                                            'UnregisterClassA',
                                                                                            'KillTimer',
                                                                                            'SetFocus',
                                                                                            'DestroyWindow',
                                                                                            'CallWindowProcW',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindowRect',
                                                                                            'ShowWindow',
                                                                                            'IsIconic',
                                                                                            'IsZoomed',
                                                                                            'ScreenToClient',
                                                                                            'GetDC',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'ChangeDisplaySettingsW',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'ReleaseDC',
                                                                                            'PeekMessageW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'MapWindowPoints',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetWindow',
                                                                                            'GetParent',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetClassLongW',
                                                                                            'LoadImageW',
                                                                                            'GetSystemMetrics',
                                                                                            'OffsetRect',
                                                                                            'SetWindowRgn',
                                                                                            'GetMessagePos',
                                                                                            'PostQuitMessage',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'SetForegroundWindow',
                                                                                            'SendMessageTimeoutW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'AttachThreadInput',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetForegroundWindow',
                                                                                            'wvsprintfW',
                                                                                            'LoadStringW',
                                                                                            'CharNextW',
                                                                                            'FillRect',
                                                                                            'CopyRect',
                                                                                            'GetQueueStatus',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'TrackMouseEvent',
                                                                                            'FindWindowW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'RoundRect',
                                                                                            'SetTextColor',
                                                                                            'GetObjectA',
                                                                                            'SetBkColor',
                                                                                            'StretchBlt',
                                                                                            'SetWindowOrgEx',
                                                                                            'Rectangle',
                                                                                            'MoveToEx',
                                                                                            'GetObjectW',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CombineRgn',
                                                                                            'CreateRectRgn',
                                                                                            'CreateRoundRectRgn',
                                                                                            'BitBlt',
                                                                                            'CreateFontW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'SetViewportOrgEx',
                                                                                            'LineTo',
                                                                                            'GetLengthSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'DuplicateTokenEx',
                                                                                            'SetTokenInformation',
                                                                                            'CreateProcessAsUserW',
                                                                                            'OpenProcessToken',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'FreeSid',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'VariantClear',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'PathAddBackslashW',
                                                                                            'PathFileExistsA',
                                                                                            'PathIsDirectoryA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathAppendA',
                                                                                            'PathCombineA',
                                                                                            'PathRemoveFileSpecA',
                                                                                            'PathIsRootW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsDirectoryW',
                                                                                            'InitCommonControlsEx',
                                                                                            'TransparentBlt',
                                                                                            'AlphaBlend',
                                                                                            'glGetString',
                                                                                            'GdipClonePath',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipDrawString',
                                                                                            'GdipFillPath',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipDrawPath',
                                                                                            'GdipDrawRectangleI',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipReleaseDC',
                                                                                            'GdipAddPathArcI',
                                                                                            'GdipAddPathLineI',
                                                                                            'GdipSetStringFormatTrimming',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipSetStringFormatFlags',
                                                                                            'GdipCreateTexture2I',
                                                                                            'GdipSetImageAttributesColorKeys',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipDeletePath',
                                                                                            'GdipCreatePath',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipTranslateTextureTransform',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateBitmapFromFileICM',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipDrawImageRectRectI',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDisposeImageAttributes',
                                                                                            'GdipCreateImageAttributes',
                                                                                            'GdipCloneImage',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GetAdaptersInfo',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'InternetReadFile',
                                                                                            'InternetOpenUrlA',
                                                                                            'HttpSendRequestA',
                                                                                            'InternetConnectW',
                                                                                            'InternetOpenA',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetSetOptionW',
                                                                                            'HttpOpenRequestW',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 376,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 294713912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 18432,
                                                                                       '.rdata\x00\x00': 121344,
                                                                                       '.rsrc\x00\x00\x00': 294714368,
                                                                                       '.text\x00\x00\x00': 440320},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/06e21deb33958f3aa54fcc1ee11b93377a98257bd1c2ab505cad8dfabc519898'},
 '074fe023b714ea1bce48a32737c903a904e55a3b8d32196f122a4082d6ab37e6': {'AddressOfEntryPoint': 38688,
                                                                      'DebugRVA': 549016,
                                                                      'DebugSize': 56,
                                                                      'Dll': 53568,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 557056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-appmodel-runtime-internal-l1-1-0.dll': 'GetCurrentPackageContext',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringW',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'RaiseException',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'CreateFileMappingW',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchCombineEx',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-psapi-l1-1-0.dll': 'K32GetProcessMemoryInfo',
                                                                                      'api-ms-win-core-quirks-l1-1-0.dll': 'QuirkIsEnabled',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringOrdinal',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForMultipleObjectsEx',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount64',
                                                                                      'api-ms-win-core-threadpool-l1-2-0.dll': 'CreateThreadpoolWork',
                                                                                      'api-ms-win-core-url-l1-1-0.dll': 'PathCreateFromUrlW',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'DecodePointer',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateError',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceLoggerHandle',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventWrite',
                                                                                      'api-ms-win-ro-typeresolution-l1-1-0.dll': 'RoGetMetaDataFile',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'CloseServiceHandle',
                                                                                      'iertutil.dll': 'CreateIUriBuilder',
                                                                                      'ntdll.dll': 'RtlUnwind'},
                                                                      'ImportedFunctions': ['strchr',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlGetVersion',
                                                                                            'wcsstr',
                                                                                            'wcschr',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventUnregister',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmSetDWORD',
                                                                                            'RtlFreeSid',
                                                                                            'RtlInitializeGenericTableAvl',
                                                                                            'RtlInsertElementGenericTableAvl',
                                                                                            'RtlLookupElementGenericTableAvl',
                                                                                            'RtlEnumerateGenericTableWithoutSplayingAvl',
                                                                                            'RtlDeleteElementGenericTableAvl',
                                                                                            'RtlFindAceByType',
                                                                                            'RtlEqualSid',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtQueryInformationToken',
                                                                                            '_wcsnicmp',
                                                                                            'NtGetCachedSigningLevel',
                                                                                            'memmove',
                                                                                            'wcsncmp',
                                                                                            '_vsnwprintf',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'RtlDeleteCriticalSection',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlReportException',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlReAllocateHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'memset',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'memcpy_s',
                                                                                            '_itow_s',
                                                                                            '_chkstk',
                                                                                            '_ftol2',
                                                                                            '_ftol2_sse',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'RtlUnwind',
                                                                                            'GetPackagePropertyString',
                                                                                            'GetPackageApplicationPropertyString',
                                                                                            'GetPackageProperty',
                                                                                            'GetCurrentPackageApplicationContext',
                                                                                            'GetPackageOSMaxVersionTested',
                                                                                            'GetCurrentPackageContext',
                                                                                            'PathCreateFromUrlW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'TraceMessage',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'DecodePointer',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'InitOnceInitialize',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'InitOnceExecuteOnce',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateSemaphoreExW',
                                                                                            'ReleaseSemaphore',
                                                                                            'SleepEx',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'SetRestrictedErrorInfo',
                                                                                            'RoGetMatchingRestrictedErrorInfo',
                                                                                            'RoOriginateError',
                                                                                            'CreateWellKnownSid',
                                                                                            'CheckTokenCapability',
                                                                                            'GetTokenInformation',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'OpenProcessToken',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetProcessTimes',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventWrite',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount64',
                                                                                            'DebugBreak',
                                                                                            'OutputDebugStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'GetFileSizeEx',
                                                                                            'WriteFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringEx',
                                                                                            'CompareStringOrdinal',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'QuirkIsEnabled',
                                                                                            'WaitForThreadpoolWaitCallbacks',
                                                                                            'SetThreadpoolWait',
                                                                                            'CloseThreadpoolWait',
                                                                                            'CloseThreadpoolWork',
                                                                                            'SubmitThreadpoolWork',
                                                                                            'WaitForThreadpoolWorkCallbacks',
                                                                                            'CreateThreadpoolCleanupGroup',
                                                                                            'CloseThreadpoolCleanupGroupMembers',
                                                                                            'CreateThreadpoolWait',
                                                                                            'CreateThreadpoolWork',
                                                                                            'LCMapStringW',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'FormatMessageW',
                                                                                            'K32GetProcessMemoryInfo',
                                                                                            'PathCchCombineEx',
                                                                                            'LocalFree',
                                                                                            'RoResolveNamespace',
                                                                                            'RoGetMetaDataFile',
                                                                                            'CreateUri',
                                                                                            'CreateIUriBuilder',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 34,
                                                                      'NumberOfImportFunctions': 156,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 36384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.didat\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 32256,
                                                                                       '.rsrc\x00\x00\x00': 36864,
                                                                                       '.text\x00\x00\x00': 545280},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/074fe023b714ea1bce48a32737c903a904e55a3b8d32196f122a4082d6ab37e6'},
 '07b51955190dd6041880d1076f370049b1a8dc1734195304af85b8a4e12b7649': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/07b51955190dd6041880d1076f370049b1a8dc1734195304af85b8a4e12b7649'},
 '07c4e2f63f946ab1027a468f6977f15e5a64a99b75733d1ecb628ca38bbc9fc1': {'AddressOfEntryPoint': 161264,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LsaFreeMemory',
                                                                                      'KERNEL32.dll': 'GetModuleHandleA',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'NETAPI32.dll': 'DsGetDcNameW',
                                                                                      'NTDSAPI.dll': 'DsBindWithCredW',
                                                                                      'OLEAUT32.dll': 'SafeArrayGetLBound',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'framedynos.dll': '?GetBufferSetLength@CHString@@QAEPAGH@Z',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'LookupAccountSidW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegGetValueW',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaNtStatusToWinError',
                                                                                            'LsaClose',
                                                                                            'LsaEnumerateAccountRights',
                                                                                            'LookupPrivilegeDisplayNameW',
                                                                                            'LsaFreeMemory',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'WriteConsoleW',
                                                                                            'lstrlenW',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'GetComputerNameExW',
                                                                                            'GetComputerNameW',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetFileAttributesExW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'ReadFile',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'FindNLSString',
                                                                                            'SetLastError',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'SystemTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'strchr',
                                                                                            'strtok',
                                                                                            'fflush',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            'wcstok',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_wcsicmp',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '__iob_func',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            'wcschr',
                                                                                            'wcsstr',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            'fprintf',
                                                                                            'memset',
                                                                                            'wsprintfW',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetGetLastErrorW',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantChangeType',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'GetComputerObjectNameW',
                                                                                            'TranslateNameW',
                                                                                            'GetUserNameExW',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            'gethostbyaddr',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'NetApiBufferFree',
                                                                                            'NetServerGetInfo',
                                                                                            'DsGetDcNameW',
                                                                                            '?Mid@CHString@@QBE?AV1@HH@Z',
                                                                                            '?Find@CHString@@QBEHPBG@Z',
                                                                                            '?SetAt@CHString@@QAEXHG@Z',
                                                                                            '?MakeLower@CHString@@QAEXXZ',
                                                                                            '??0CHString@@QAE@ABV0@@Z',
                                                                                            '??H@YG?AVCHString@@ABV0@PBG@Z',
                                                                                            '??H@YG?AVCHString@@ABV0@0@Z',
                                                                                            '?AllocSysString@CHString@@QBEPAGXZ',
                                                                                            '??H@YG?AVCHString@@PBGABV0@@Z',
                                                                                            '??YCHString@@QAEABV0@ABV0@@Z',
                                                                                            '?GetBuffer@CHString@@QAEPAGH@Z',
                                                                                            '??0CHString@@QAE@PBD@Z',
                                                                                            '??YCHString@@QAEABV0@PBG@Z',
                                                                                            '?Left@CHString@@QBE?AV1@H@Z',
                                                                                            '?Format@CHString@@QAAXPBGZZ',
                                                                                            '??0CHString@@QAE@PBG@Z',
                                                                                            '?Mid@CHString@@QBE?AV1@H@Z',
                                                                                            '??4CHString@@QAEABV0@ABV0@@Z',
                                                                                            '?Find@CHString@@QBEHG@Z',
                                                                                            '?FindOneOf@CHString@@QBEHPBG@Z',
                                                                                            '??1CHString@@QAE@XZ',
                                                                                            '??0CHString@@QAE@XZ',
                                                                                            '?Empty@CHString@@QAEXXZ',
                                                                                            '?Compare@CHString@@QBEHPBG@Z',
                                                                                            '?GetData@CHString@@IBEPAUCHStringData@@XZ',
                                                                                            '?ReleaseBuffer@CHString@@QAEXH@Z',
                                                                                            '??4CHString@@QAEABV0@PBG@Z',
                                                                                            '?GetBufferSetLength@CHString@@QAEPAGH@Z',
                                                                                            'DsCrackNamesW',
                                                                                            'DsUnBindW',
                                                                                            'DsFreeNameResultW',
                                                                                            'DsBindWithCredW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 185,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 173056},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/07c4e2f63f946ab1027a468f6977f15e5a64a99b75733d1ecb628ca38bbc9fc1'},
 '07e9c84ffbe387f263a86cf87fdf44d50bae8d6f0b3a10c8f99556e85a7e34bb': {'AddressOfEntryPoint': 18832,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegGetValueW',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'RPCRT4.dll': 'RpcCertGeneratePrincipalNameW',
                                                                                      'SspiCli.dll': 'SspiEncodeAuthIdentityAsStrings',
                                                                                      'WINHTTP.dll': 'WinHttpReceiveResponse',
                                                                                      'credui.dll': 'CredUIPromptForCredentialsW',
                                                                                      'msvcrt.dll': '?terminate@@YAXXZ',
                                                                                      'ntdll.dll': 'WinSqmIsOptedIn'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'EventActivityIdControl',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'RegGetValueW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'HeapFree',
                                                                                            'LocalFree',
                                                                                            'GetFileType',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetModuleHandleW',
                                                                                            'GetComputerNameW',
                                                                                            'HeapAlloc',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcessHeap',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            'memset',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'malloc',
                                                                                            'wcschr',
                                                                                            '_wtoi',
                                                                                            '_cgetws_s',
                                                                                            'wcstol',
                                                                                            'wcsstr',
                                                                                            '_getch',
                                                                                            'free',
                                                                                            '_wcsicmp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'RpcEpResolveBinding',
                                                                                            'RpcMgmtInqStats',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcMgmtStatsVectorFree',
                                                                                            'RpcErrorLoadErrorInfo',
                                                                                            'RpcErrorGetNumberOfRecords',
                                                                                            'RpcErrorGetNextRecord',
                                                                                            'UuidCreate',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcErrorClearInformation',
                                                                                            'RpcErrorEndEnumeration',
                                                                                            'UuidToStringW',
                                                                                            'RpcErrorResetEnumeration',
                                                                                            'RpcErrorStartEnumeration',
                                                                                            'RpcErrorSaveErrorInfo',
                                                                                            'I_RpcCertProcessAndProvision',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'UuidFromStringW',
                                                                                            'RpcCertGeneratePrincipalNameW',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpSetCredentials',
                                                                                            'WinHttpQueryAuthSchemes',
                                                                                            'WinHttpQueryOption',
                                                                                            'WinHttpSetOption',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'CertFreeCertificateContext',
                                                                                            'SspiPromptForCredentialsW',
                                                                                            'CredUIPromptForCredentialsW',
                                                                                            'SspiEncodeStringsAsAuthIdentity',
                                                                                            'SspiEncodeAuthIdentityAsStrings'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 102,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/07e9c84ffbe387f263a86cf87fdf44d50bae8d6f0b3a10c8f99556e85a7e34bb'},
 '083bb4f3b20419c87db656f1465e5f782acde76838cde6207f26aad035c69de0': {'AddressOfEntryPoint': 131216,
                                                                      'DebugRVA': 325272,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 372736,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CRYPTBASE.dll': 'SystemFunction029',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SspiCli.dll': 'LogonUserExExW',
                                                                                      'api-ms-win-core-crt-l1-1-0.dll': 'memset',
                                                                                      'api-ms-win-core-crt-l2-1-0.dll': '_initterm_e',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetErrorMode',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'SetFileInformationByHandle',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetProcessTimes',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryValueExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'SetEvent',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-threadpool-l1-2-0.dll': 'CloseThreadpoolWork',
                                                                                      'api-ms-win-core-wow64-l1-1-0.dll': 'IsWow64Process',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'SetTokenInformation',
                                                                                      'api-ms-win-security-lsalookup-l1-1-1.dll': 'LsaLookupTranslateSids',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                      'ntdll.dll': 'RtlConnectToSm'},
                                                                      'ImportedFunctions': ['memcmp',
                                                                                            'wcschr',
                                                                                            '_wcslwr_s',
                                                                                            'wcsrchr',
                                                                                            'wcscat_s',
                                                                                            'memcpy',
                                                                                            '__C_specific_handler',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcstoul',
                                                                                            '_ltow_s',
                                                                                            'wcscspn',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            'wcsncmp',
                                                                                            '_ultow_s',
                                                                                            'memset',
                                                                                            '_initterm',
                                                                                            'exit',
                                                                                            '_initterm_e',
                                                                                            'RpcServerInqCallAttributesA',
                                                                                            'RpcBindingFree',
                                                                                            'RpcAsyncAbortCall',
                                                                                            'UuidFromStringW',
                                                                                            'NdrAsyncServerCall',
                                                                                            'NdrServerCall2',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'I_RpcSessionStrictContextHandle',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'RpcServerInqBindingHandle',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcServerRegisterIf3',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcEpUnregister',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerSubscribeForNotification',
                                                                                            'RpcServerUnsubscribeForNotification',
                                                                                            'UuidEqual',
                                                                                            'UuidCreateNil',
                                                                                            'UuidCreate',
                                                                                            'LogonUserExExW',
                                                                                            'NtDisplayString',
                                                                                            'RtlDeleteSecurityObject',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlReleaseSRWLockExclusive',
                                                                                            'RtlCopyLuid',
                                                                                            'NtSetEvent',
                                                                                            'NtRaiseHardError',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlPublishWnfStateData',
                                                                                            'RtlInitializeSRWLock',
                                                                                            'NtOpenFile',
                                                                                            'TpReleaseWait',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'TpAllocWait',
                                                                                            'NtDeleteWnfStateName',
                                                                                            'NtCreateWnfStateName',
                                                                                            'NtOpenThread',
                                                                                            'NtQueueApcThread',
                                                                                            'RtlQueueApcWow64Thread',
                                                                                            'EvtIntReportEventAndSourceAsync',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventRegister',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'RtlFreeHeap',
                                                                                            'TpSetWait',
                                                                                            'NtOpenProcessToken',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtQueryDirectoryFile',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'NtFilterToken',
                                                                                            'RtlTestProtectedAccess',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlAbsoluteToSelfRelativeSD',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlAddAccessDeniedAce',
                                                                                            'RtlGetAce',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlGetGroupSecurityDescriptor',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtDuplicateToken',
                                                                                            'NtAccessCheckAndAuditAlarm',
                                                                                            'NtAccessCheck',
                                                                                            'NtPrivilegeObjectAuditAlarm',
                                                                                            'NtPrivilegeCheck',
                                                                                            'RtlMapGenericMask',
                                                                                            'RtlSetSecurityObject',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'RtlQuerySecurityObject',
                                                                                            'RtlUnsubscribeWnfNotificationWaitForCompletion',
                                                                                            'RtlSubscribeWnfStateChangeNotification',
                                                                                            'NtQueryWnfStateData',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'NtDeleteKey',
                                                                                            'NtEnumerateKey',
                                                                                            'NtDeleteValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenKey',
                                                                                            'NtCreateKey',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlConvertExclusiveToShared',
                                                                                            'RtlConvertSharedToExclusive',
                                                                                            'RtlRegisterWait',
                                                                                            'RtlDeregisterWait',
                                                                                            'RtlCreateServiceSid',
                                                                                            'DbgPrintEx',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'RtlEqualSid',
                                                                                            'NtInitializeRegistry',
                                                                                            'RtlAreAllAccessesGranted',
                                                                                            'NtQueryKey',
                                                                                            'NtSetInformationThread',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlAcquireSRWLockExclusive',
                                                                                            'RtlSendMsgToSm',
                                                                                            'NtDelayExecution',
                                                                                            'NtDeleteObjectAuditAlarm',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAcquireSRWLockShared',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'NtDeleteFile',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlCopySid',
                                                                                            'RtlLengthSid',
                                                                                            'NtUnloadDriver',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'RtlQueueWorkItem',
                                                                                            'NtLoadDriver',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtCloseObjectAuditAlarm',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtSetSystemEnvironmentValue',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlReleaseSRWLockShared',
                                                                                            'NtShutdownSystem',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlAddAce',
                                                                                            'RtlNewSecurityObject',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'RtlSetLastWin32Error',
                                                                                            'NtTraceControl',
                                                                                            'RtlConnectToSm',
                                                                                            'LsaLookupOpenLocalPolicy',
                                                                                            'LsaLookupFreeMemory',
                                                                                            'LsaLookupClose',
                                                                                            'LsaLookupManageSidNameMapping',
                                                                                            'LsaLookupGetDomainInfo',
                                                                                            'LsaLookupTranslateNames',
                                                                                            'LsaLookupTranslateSids',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'SystemFunction005',
                                                                                            'SystemFunction029',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'CreateFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileInformationByHandle',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'DeviceIoControl',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegLoadMUIStringW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetProcessId',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateProcessAsUserW',
                                                                                            'ResumeThread',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'SetProcessMitigationPolicy',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'ExitThread',
                                                                                            'GetProcessTimes',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CompareStringW',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'OpenEventW',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetSystemTime',
                                                                                            'GetVersionExW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetTickCount64',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'AllocateLocallyUniqueId',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'InitializeAcl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'CheckTokenMembership',
                                                                                            'GetTokenInformation',
                                                                                            'SetTokenInformation',
                                                                                            'CreateThreadpoolCleanupGroup',
                                                                                            'CreateThreadpoolWork',
                                                                                            'SubmitThreadpoolWork',
                                                                                            'CloseThreadpoolCleanupGroupMembers',
                                                                                            'CloseThreadpoolCleanupGroup',
                                                                                            'CallbackMayRunLong',
                                                                                            'CloseThreadpoolWork',
                                                                                            'IsWow64Process',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 322,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 22064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 14336,
                                                                                       '.pdata\x00\x00': 17920,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 22528,
                                                                                       '.text\x00\x00\x00': 336896},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/083bb4f3b20419c87db656f1465e5f782acde76838cde6207f26aad035c69de0'},
 '088b7693be0643277d16a66862b4446a288afb86b2e987fe7a943126d0dd08f0': {'AddressOfEntryPoint': 10144,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'StrTrimW',
                                                                                      'USER32.dll': 'AllowSetForegroundWindow',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueW',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrlenW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'AllowSetForegroundWindow',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__p__fmode',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            'exit',
                                                                                            '_ismbblead',
                                                                                            '_acmdln',
                                                                                            'memset',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoGetMalloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'ShellExecuteExW',
                                                                                            'StrTrimW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 48,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 100456,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 100864,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/088b7693be0643277d16a66862b4446a288afb86b2e987fe7a943126d0dd08f0'},
 '08ad18cf25a6adb26271aeb671b2983ba85a465ae8463905f67c422938b98454': {'AddressOfEntryPoint': 43584,
                                                                      'DebugRVA': 4736,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'DUI70.dll': '?DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ',
                                                                                      'DUser.dll': 'InvalidateGadget',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEACC.dll': 'AccessibleObjectFromWindow',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'wcschr',
                                                                                      'ntdll.dll': 'WinSqmIsOptedIn',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['EventUnregister',
                                                                                            'EventRegister',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'TraceMessage',
                                                                                            'RegGetValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegLoadMUIStringW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'LockResource',
                                                                                            'OpenJobObjectW',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'IsProcessInJob',
                                                                                            'DeleteFileW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateProcessW',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'K32GetModuleBaseNameW',
                                                                                            'K32EnumProcessModules',
                                                                                            'OpenProcess',
                                                                                            'ProcessIdToSessionId',
                                                                                            'K32EnumProcesses',
                                                                                            'GetThreadUILanguage',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'VirtualAllocEx',
                                                                                            'OpenMutexW',
                                                                                            'GetThreadPreferredUILanguages',
                                                                                            'MulDiv',
                                                                                            'GetLocaleInfoEx',
                                                                                            'ReadProcessMemory',
                                                                                            'CompareStringOrdinal',
                                                                                            'VirtualFreeEx',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RaiseException',
                                                                                            'CreateMutexW',
                                                                                            'CloseHandle',
                                                                                            'LoadIconW',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowTextW',
                                                                                            'MessageBoxW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetShellWindow',
                                                                                            'GetKeyState',
                                                                                            'SendInput',
                                                                                            'SetCursor',
                                                                                            'SetTimer',
                                                                                            'GetThreadDesktop',
                                                                                            'KillTimer',
                                                                                            'LoadCursorW',
                                                                                            'FindWindowW',
                                                                                            'IsProcessDPIAware',
                                                                                            'GetAncestor',
                                                                                            'GetSystemMetrics',
                                                                                            'GetUserObjectInformationW',
                                                                                            'SendMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'LoadStringW',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__setusermatherr',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'wcscspn',
                                                                                            'wcsspn',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'malloc',
                                                                                            'calloc',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_ltow_s',
                                                                                            'wcsrchr',
                                                                                            '_wcslwr_s',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_wcsicmp',
                                                                                            'wcsstr',
                                                                                            'wcschr',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'GetProcessHandleFromHwnd',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'ShellExecuteW',
                                                                                            'InvalidateGadget',
                                                                                            '?Release@Value@DirectUI@@QAEXXZ',
                                                                                            '?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z',
                                                                                            '?CustomProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z',
                                                                                            '?GetUnset@Value@DirectUI@@SGPAV12@XZ',
                                                                                            '??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '??1CritSecLock@DirectUI@@QAE@XZ',
                                                                                            '?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z',
                                                                                            '?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?SetActive@Element@DirectUI@@QAEJH@Z',
                                                                                            'RegisterPVLBehaviorFactory',
                                                                                            '?GetClassInfoPtr@TouchSwitch@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?SetToggleValue@TouchSwitch@DirectUI@@QAEXH@Z',
                                                                                            '?GetToggleValue@TouchSwitch@DirectUI@@QAEHXZ',
                                                                                            '?ThemeChange@HWNDElement@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '??0Element@DirectUI@@QAE@XZ',
                                                                                            '??1Element@DirectUI@@UAE@XZ',
                                                                                            '?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnDestroy@Element@DirectUI@@UAEXXZ',
                                                                                            '?IsDescendent@Element@DirectUI@@QAE_NPAV12@@Z',
                                                                                            '?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z',
                                                                                            '?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z',
                                                                                            '?GetRoot@Element@DirectUI@@QAEPAV12@XZ',
                                                                                            '?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ',
                                                                                            '?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?Register@Element@DirectUI@@SGJXZ',
                                                                                            '?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QAEXXZ',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z',
                                                                                            '?SliderUpdated@TouchSlider@DirectUI@@SG?AVUID@@XZ',
                                                                                            '??0ClassInfoBase@DirectUI@@QAE@XZ',
                                                                                            '??1ClassInfoBase@DirectUI@@UAE@XZ',
                                                                                            '?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z',
                                                                                            '?Register@ClassInfoBase@DirectUI@@QAEJXZ',
                                                                                            '?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z',
                                                                                            '?AddRef@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?Release@ClassInfoBase@DirectUI@@UAEHXZ',
                                                                                            '?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ',
                                                                                            '?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z',
                                                                                            '?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z',
                                                                                            '?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ',
                                                                                            '?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ',
                                                                                            '?AddChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ',
                                                                                            '?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ',
                                                                                            '?Click@TouchButton@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QAEJH@Z',
                                                                                            'StrToID',
                                                                                            '?Click@Button@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            '?GetClassInfoPtr@CCPushButton@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                            '?IsContentProtected@Element@DirectUI@@UAE_NXZ',
                                                                                            '?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?GetKeyFocused@Element@DirectUI@@UAE_NXZ',
                                                                                            '?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?SetVisible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z',
                                                                                            '?SetAccessible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ',
                                                                                            '?GetClassInfoW@HWNDElement@DirectUI@@UAEPAUIClassInfo@2@XZ',
                                                                                            'InitThread',
                                                                                            '?Destroy@NativeHWNDHost@DirectUI@@QAEXXZ',
                                                                                            'UnInitThread',
                                                                                            '?EndDefer@Element@DirectUI@@QAEXK@Z',
                                                                                            'UnInitProcessPriv',
                                                                                            'StartMessagePump',
                                                                                            'InitProcessPriv',
                                                                                            '?ShowWindow@NativeHWNDHost@DirectUI@@QAEXH@Z',
                                                                                            '?Create@NativeHWNDHost@DirectUI@@SGJPBGPAUHWND__@@PAUHICON__@@HHHHHHIPAPAV12@@Z',
                                                                                            '?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z',
                                                                                            '?LoadFromResource@DUIFactory@DirectUI@@QAEJPAUHINSTANCE__@@PBG1PAVElement@2@PAKPAPAV42@1@Z',
                                                                                            '?Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UAEJXZ',
                                                                                            '?DoubleBuffered@Element@DirectUI@@QAEX_N@Z',
                                                                                            '?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?SetKeyFocus@Element@DirectUI@@UAEXXZ',
                                                                                            '?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z',
                                                                                            '?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z',
                                                                                            '?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z',
                                                                                            '?Add@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            '?Add@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?Destroy@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?Destroy@Layout@DirectUI@@QAEXXZ',
                                                                                            '?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z',
                                                                                            '?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z',
                                                                                            '??1HWNDElement@DirectUI@@UAE@XZ',
                                                                                            '??0HWNDElement@DirectUI@@QAE@XZ',
                                                                                            '?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?Register@HWNDElement@DirectUI@@SGJXZ',
                                                                                            '?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z',
                                                                                            '?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z',
                                                                                            '?CreateStyleParser@HWNDElement@DirectUI@@UAEJPAPAVDUIXmlParser@2@@Z',
                                                                                            '?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z',
                                                                                            '?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z',
                                                                                            '?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z',
                                                                                            '?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z',
                                                                                            '?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?OnDestroy@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '??1DUIFactory@DirectUI@@QAE@XZ',
                                                                                            '?DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 292,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 209312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 13312,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 209408,
                                                                                       '.text\x00\x00\x00': 48640},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/08ad18cf25a6adb26271aeb671b2983ba85a465ae8463905f67c422938b98454'},
 '08eef39a50bbc70e4257caea1df39bcfe2cf3ef725a54c3bfa01da3a9046ecee': {'AddressOfEntryPoint': 23296,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ReportEventW',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'ExitWindowsEx',
                                                                                      'msvcrt.dll': '_except_handler4_common',
                                                                                      'ntdll.dll': 'NtPowerInformation',
                                                                                      'ole32.dll': 'ReleaseStgMedium'},
                                                                      'ImportedFunctions': ['IsSETEnabled',
                                                                                            'BuildReasonArray',
                                                                                            'RecordShutdownReason',
                                                                                            'DestroyReasons',
                                                                                            'ReasonCodeNeedsComment',
                                                                                            'CallWindowProcW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowLongW',
                                                                                            'EnableMenuItem',
                                                                                            'GetWindowTextLengthW',
                                                                                            'DialogBoxParamW',
                                                                                            'ReasonCodeNeedsBugID',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'GetClassNameW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'EndDialog',
                                                                                            'CheckDlgButton',
                                                                                            'LoadStringW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextW',
                                                                                            'ExitWindowsEx',
                                                                                            'GetUserNameExW',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'ReleaseStgMedium',
                                                                                            'DbgPrint',
                                                                                            'NtInitiatePowerAction',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtPowerInformation',
                                                                                            'AbortSystemShutdownW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegQueryValueExW',
                                                                                            'RegisterEventSourceW',
                                                                                            'InitiateShutdownW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'ReportEventW',
                                                                                            'GlobalUnlock',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpW',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleMode',
                                                                                            'LoadLibraryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'GlobalLock',
                                                                                            'FreeLibrary',
                                                                                            'lstrlenA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'EncodePointer',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LocalAlloc',
                                                                                            'GetFileType',
                                                                                            'DecodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            '_unlock',
                                                                                            '_wcsicmp',
                                                                                            '_wtoi',
                                                                                            'wcsstr',
                                                                                            '_vsnwprintf',
                                                                                            'wcsncmp',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            'memset',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 21504},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/08eef39a50bbc70e4257caea1df39bcfe2cf3ef725a54c3bfa01da3a9046ecee'},
 '0903b5932938a6ff8dfd64f02b1fb0f37a1cd58a04a960b962f59558695f21b7': {'AddressOfEntryPoint': 84320,
                                                                      'DebugRVA': 4816,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 118784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventRegister',
                                                                                      'KERNEL32.dll': 'SetEvent',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects',
                                                                                      'api-ms-win-core-winrt-error-l1-1-0.dll': 'RoOriginateError',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateErrorW',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoRevokeActivationFactories',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsCreateString',
                                                                                      'msvcrt.dll': 'memmove',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoReleaseServerProcess'},
                                                                      'ImportedFunctions': ['EventWrite',
                                                                                            'EventUnregister',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegCloseKey',
                                                                                            'EventRegister',
                                                                                            'LoadLibraryExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleExW',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'InitializeSRWLock',
                                                                                            'FreeLibrary',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'OpenMutexW',
                                                                                            'AcquireSRWLockShared',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'ResetEvent',
                                                                                            'CreateEventExW',
                                                                                            'CloseHandle',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'SetEvent',
                                                                                            'SetCoalescableTimer',
                                                                                            'TranslateMessage',
                                                                                            'GetForegroundWindow',
                                                                                            'RealGetWindowClassW',
                                                                                            'KillTimer',
                                                                                            'PeekMessageW',
                                                                                            'GetAncestor',
                                                                                            'DispatchMessageW',
                                                                                            'ToUnicode',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_snwprintf_s',
                                                                                            '_purecall',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memcpy_s',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_exit',
                                                                                            'memmove',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'PropVariantClear',
                                                                                            'CoReleaseServerProcess',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'RoOriginateError',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlQueryWnfStateData',
                                                                                            'RtlSubscribeWnfStateChangeNotification',
                                                                                            'RtlUnsubscribeWnfStateChangeNotification',
                                                                                            'RtlPublishWnfStateData',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RoTransformError',
                                                                                            'IsErrorPropagationEnabled',
                                                                                            'RoGetMatchingRestrictedErrorInfo',
                                                                                            'RoReportFailedDelegate',
                                                                                            'RoOriginateErrorW',
                                                                                            'RoRegisterActivationFactories',
                                                                                            'RoRevokeActivationFactories',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsStringHasEmbeddedNull',
                                                                                            'WindowsIsStringEmpty',
                                                                                            'WindowsCreateString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 119,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 100864},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/0903b5932938a6ff8dfd64f02b1fb0f37a1cd58a04a960b962f59558695f21b7'},
 '0944947ed9340339840782005e1e13db90f7c9a78494bd0db0090d13ad62cfbc': {'AddressOfEntryPoint': 27840,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetTokenInformation',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINSTA.dll': 'WinStationShadowStop2',
                                                                                      'WS2_32.dll': 'GetAddrInfoW',
                                                                                      'msvcrt.dll': '_initterm',
                                                                                      'ntdll.dll': 'EtwEventUnregister',
                                                                                      'ole32.dll': 'CreateBindCtx'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'OpenProcessToken',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegGetValueW',
                                                                                            'SetSecurityInfo',
                                                                                            'AddAce',
                                                                                            'GetAce',
                                                                                            'AddAccessDeniedAce',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'GetSecurityInfo',
                                                                                            'GetTokenInformation',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'MapViewOfFile',
                                                                                            'SetEvent',
                                                                                            'UnmapViewOfFile',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleExA',
                                                                                            'GetCurrentProcessId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapSetInformation',
                                                                                            'HeapReAlloc',
                                                                                            'GetLastError',
                                                                                            'PostQuitMessage',
                                                                                            'DispatchMessageW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'KillTimer',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'LoadStringW',
                                                                                            '_wcmdln',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            '__p__commode',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetNameInfoW',
                                                                                            'GetAddrInfoW',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventWriteFull',
                                                                                            'EtwEventUnregister',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'MkParseDisplayName',
                                                                                            'StringFromCLSID',
                                                                                            'CreateBindCtx',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'GetUserNameExW',
                                                                                            'WinStationSendMessageW',
                                                                                            'WinStationShadowStop2'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 108,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2512,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0944947ed9340339840782005e1e13db90f7c9a78494bd0db0090d13ad62cfbc'},
 '09734ddb11a0beeee5e37a6d2f9fe24b1b09a8a0f5d25db666084671a1d35c26': {'AddressOfEntryPoint': 8048,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetVersionExA',
                                                                                      'msvcrt.dll': 'wcstoul',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['LocalFree',
                                                                                            'GetVersion',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'VirtualAlloc',
                                                                                            'LocalAlloc',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetVersionExA',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            'rand_s',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcstoul',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 40,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/09734ddb11a0beeee5e37a6d2f9fe24b1b09a8a0f5d25db666084671a1d35c26'},
 '09bc5032927ae5ec5edaa71dff73372b9391c82d1fd6ae0bc1318d36749506e3': {'AddressOfEntryPoint': 11104,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'CompareStringW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'HeapSetInformation',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'PostQuitMessage',
                                                                                            'UnregisterClassW',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'LoadStringW',
                                                                                            'DispatchMessageW',
                                                                                            'LoadIconW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_exit',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'Shell_NotifyIconW',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 61,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 71512,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 71680,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/09bc5032927ae5ec5edaa71dff73372b9391c82d1fd6ae0bc1318d36749506e3'},
 '09cc91b6997d3c2432aa73d0d021856b8603304dae9b315e10289ccf941b5a21': {'AddressOfEntryPoint': 25632,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetComputerNameW',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'NETAPI32.dll': 'NetServerGetInfo',
                                                                                      'SHLWAPI.dll': 'StrStrW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeExW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'VerSetConditionMask'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'CreateMailslotW',
                                                                                            'ReadFile',
                                                                                            'SetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleOutputCP',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'ExitProcess',
                                                                                            'GetLastError',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'GetComputerNameW',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcstok',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_iob',
                                                                                            '_vsnwprintf',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            'memset',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetServerGetInfo',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetNameInfoW',
                                                                                            'GetAddrInfoW',
                                                                                            'WSAGetLastError',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'StrChrIW',
                                                                                            'StrChrW',
                                                                                            'StrStrIW',
                                                                                            'StrStrW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetLastErrorW',
                                                                                            'GetUserNameExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/09cc91b6997d3c2432aa73d0d021856b8603304dae9b315e10289ccf941b5a21'},
 '0a0800304e99d4c6d1205340d330bac2901a3642d300b5ed0e3ccc849202aa6c': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0a0800304e99d4c6d1205340d330bac2901a3642d300b5ed0e3ccc849202aa6c'},
 '0a441bda10f1dd3df9c7018df3c1047a043190f01a96facd27582e0ca4d5a44a': {'AddressOfEntryPoint': 5680,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'IIDFromString',
                                                                                      'api-ms-win-core-com-private-l1-1-0.dll': 'CoRegisterSurrogateEx',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'ntdll.dll': 'NtSetInformationProcess'},
                                                                      'ImportedFunctions': ['TerminateProcess',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            '__setusermatherr',
                                                                                            '_wcsicmp',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'NtSetInformationProcess',
                                                                                            'CoRegisterSurrogateEx',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'IIDFromString',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 34,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0a441bda10f1dd3df9c7018df3c1047a043190f01a96facd27582e0ca4d5a44a'},
 '0a573e23b28a82423bf443f4de8b0f89471035a0ab4292de054bf5f03c26af60': {'AddressOfEntryPoint': 25599,
                                                                      'DebugRVA': 8736,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'SystemTimeToFileTime',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_adjust_fdiv',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '_stricmp',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            '_XcptFilter',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'CreateEventA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetProcessHeap',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetEvent',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'FindFirstFileA',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'ShowWindow',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 6072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 4709376,
                                                                                       '.text\x00\x00\x00': 34304},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0a573e23b28a82423bf443f4de8b0f89471035a0ab4292de054bf5f03c26af60'},
 '0aed8d8f6d6674c7b3e0d992140567da672ad0d10e07fb157c6c8fb53f943c06': {'AddressOfEntryPoint': 222108,
                                                                      'DebugRVA': 5888,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 2,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueA',
                                                                                      'COMCTL32.dll': 'ImageList_Draw',
                                                                                      'GDI32.dll': 'MoveToEx',
                                                                                      'KERNEL32.dll': 'CompareStringW',
                                                                                      'SHELL32.dll': 'SHGetFileInfoA',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'comdlg32.dll': 'ReplaceTextA'},
                                                                      'ImportedFunctions': ['SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SearchPathA',
                                                                                            'GetLocalTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetFileType',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetStartupInfoA',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'SetFileAttributesA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'GetShortPathNameA',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'ExitProcess',
                                                                                            'GetComputerNameA',
                                                                                            'GetSystemInfo',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentProcess',
                                                                                            'UnmapViewOfFile',
                                                                                            'WriteProcessMemory',
                                                                                            'FlushInstructionCache',
                                                                                            'ReadProcessMemory',
                                                                                            'VirtualQueryEx',
                                                                                            'VirtualProtectEx',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'DeleteFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'GetLogicalDrives',
                                                                                            'GetDriveTypeA',
                                                                                            'SetFilePointer',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFullPathNameA',
                                                                                            'CreateFileA',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetLocaleInfoA',
                                                                                            'CreateEventA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetEvent',
                                                                                            'WaitForDebugEvent',
                                                                                            'ContinueDebugEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateThread',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'CloseHandle',
                                                                                            'GetThreadContext',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExA',
                                                                                            'LoadLibraryExW',
                                                                                            'InterlockedExchange',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'GetACP',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'RtlUnwind',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProfileStringA',
                                                                                            'SetErrorMode',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetThreadLocale',
                                                                                            'GetStringTypeExA',
                                                                                            'GetVolumeInformationA',
                                                                                            'MoveFileA',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'TlsGetValue',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsFree',
                                                                                            'IsBadWritePtr',
                                                                                            'GlobalHandle',
                                                                                            'TlsAlloc',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFlags',
                                                                                            'GetProcessVersion',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetFileTime',
                                                                                            'SetFileTime',
                                                                                            'GetTempFileNameA',
                                                                                            'GlobalFree',
                                                                                            'WideCharToMultiByte',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcmpA',
                                                                                            'GetCurrentThread',
                                                                                            'SuspendThread',
                                                                                            'SetThreadPriority',
                                                                                            'MulDiv',
                                                                                            'lstrcmpiA',
                                                                                            'GlobalFindAtomA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'lstrcatA',
                                                                                            'lstrcpynA',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalAddAtomA',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'lstrlenA',
                                                                                            'ResumeThread',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'SetThreadContext',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetTickCount',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadCodePtr',
                                                                                            'SetStdHandle',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetUserNameA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegCreateKeyA',
                                                                                            'GetFileSecurityA',
                                                                                            'SetFileSecurityA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueA',
                                                                                            'GetTextMetricsA',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'PatBlt',
                                                                                            'Escape',
                                                                                            'TextOutA',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'CreatePatternBrush',
                                                                                            'CreateSolidBrush',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateRectRgn',
                                                                                            'StretchDIBits',
                                                                                            'IntersectClipRect',
                                                                                            'ExcludeClipRect',
                                                                                            'SelectClipRgn',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetMapMode',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'DeleteDC',
                                                                                            'CreateBitmap',
                                                                                            'GetClipBox',
                                                                                            'GetTextAlign',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetTextAlign',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'ExtTextOutA',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateFontA',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'BitBlt',
                                                                                            'CreateDIBitmap',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPointA',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'GetCharWidthA',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetObjectA',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetDlgItemTextA',
                                                                                            'IsDlgButtonChecked',
                                                                                            'IsDialogMessageA',
                                                                                            'MoveWindow',
                                                                                            'GetNextDlgTabItem',
                                                                                            'CheckMenuItem',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'ModifyMenuA',
                                                                                            'GetMenuState',
                                                                                            'LoadBitmapA',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'GetWindowDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'TabbedTextOutA',
                                                                                            'DrawTextA',
                                                                                            'GrayStringA',
                                                                                            'InflateRect',
                                                                                            'SetCapture',
                                                                                            'SetCursorPos',
                                                                                            'DestroyCursor',
                                                                                            'LoadCursorA',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'EndDialog',
                                                                                            'ShowOwnedPopups',
                                                                                            'WaitMessage',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'WindowFromPoint',
                                                                                            'SetParent',
                                                                                            'IsRectEmpty',
                                                                                            'AppendMenuA',
                                                                                            'DeleteMenu',
                                                                                            'GetSystemMenu',
                                                                                            'CheckDlgButton',
                                                                                            'GetClassNameA',
                                                                                            'LoadStringA',
                                                                                            'FindWindowA',
                                                                                            'FillRect',
                                                                                            'InsertMenuA',
                                                                                            'GetMenuStringA',
                                                                                            'DestroyIcon',
                                                                                            'SetRect',
                                                                                            'CharUpperA',
                                                                                            'InvertRect',
                                                                                            'GetDCEx',
                                                                                            'LockWindowUpdate',
                                                                                            'IsWindowUnicode',
                                                                                            'CharNextA',
                                                                                            'DefDlgProcA',
                                                                                            'ExcludeUpdateRgn',
                                                                                            'ShowCaret',
                                                                                            'HideCaret',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollPos',
                                                                                            'GetTopWindow',
                                                                                            'IsChild',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassLongA',
                                                                                            'SetPropA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetPropA',
                                                                                            'CallWindowProcA',
                                                                                            'RemovePropA',
                                                                                            'GetForegroundWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetLastActivePopup',
                                                                                            'SendDlgItemMessageA',
                                                                                            'MapWindowPoints',
                                                                                            'DispatchMessageA',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetSysColorBrush',
                                                                                            'IsWindowVisible',
                                                                                            'EqualRect',
                                                                                            'GetKeyState',
                                                                                            'GetDlgCtrlID',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'SetMenu',
                                                                                            'LoadIconA',
                                                                                            'GetClassInfoA',
                                                                                            'DestroyMenu',
                                                                                            'ShowWindow',
                                                                                            'GetWindow',
                                                                                            'SetCursor',
                                                                                            'PeekMessageA',
                                                                                            'GetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'LoadAcceleratorsA',
                                                                                            'SetRectEmpty',
                                                                                            'GetActiveWindow',
                                                                                            'wsprintfA',
                                                                                            'GetMenuItemID',
                                                                                            'AdjustWindowRectEx',
                                                                                            'RedrawWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'DefMDIChildProcA',
                                                                                            'DrawMenuBar',
                                                                                            'TranslateAcceleratorA',
                                                                                            'TranslateMDISysAccel',
                                                                                            'DefFrameProcA',
                                                                                            'BringWindowToTop',
                                                                                            'GetMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SetActiveWindow',
                                                                                            'ClientToScreen',
                                                                                            'OffsetRect',
                                                                                            'PtInRect',
                                                                                            'GetDesktopWindow',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'GetMessagePos',
                                                                                            'OpenClipboard',
                                                                                            'IsIconic',
                                                                                            'LoadMenuA',
                                                                                            'GetSubMenu',
                                                                                            'GetMessageTime',
                                                                                            'GetSysColor',
                                                                                            'DrawFocusRect',
                                                                                            'CopyRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'MessageBeep',
                                                                                            'GetParent',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'InvalidateRect',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'IsZoomed',
                                                                                            'RemoveMenu',
                                                                                            'EnableMenuItem',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowTextA',
                                                                                            'GetFocus',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindow',
                                                                                            'SetFocus',
                                                                                            'MessageBoxA',
                                                                                            'WinHelpA',
                                                                                            'EnableWindow',
                                                                                            'UpdateWindow',
                                                                                            'SetDebugErrorLevel',
                                                                                            'PostMessageA',
                                                                                            'SendMessageA',
                                                                                            'CreateWindowExA',
                                                                                            'UnregisterClassA',
                                                                                            'DocumentPropertiesA',
                                                                                            'OpenPrinterA',
                                                                                            'ClosePrinter',
                                                                                            'FindTextA',
                                                                                            'GetOpenFileNameA',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetFileTitleA',
                                                                                            'GetSaveFileNameA',
                                                                                            'ReplaceTextA',
                                                                                            'ImageList_LoadImageA',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Draw',
                                                                                            'ExtractIconA',
                                                                                            'DragAcceptFiles',
                                                                                            'DragQueryFileA',
                                                                                            'DragFinish',
                                                                                            'SHBrowseForFolderA',
                                                                                            'ShellExecuteExA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetFileInfoA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 439,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 214656,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8704,
                                                                                       '.rsrc\x00\x00\x00': 215040,
                                                                                       '.text\x00\x00\x00': 417280},
                                                                      'StackReserveSize': 1572864,
                                                                      'filename': './data/clean/0aed8d8f6d6674c7b3e0d992140567da672ad0d10e07fb157c6c8fb53f943c06'},
 '0af263b9e678c59f04c803fab0702f1865d63086a86f190e8cd8608afd919958': {'AddressOfEntryPoint': 130992,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSVCRT.dll': 'free',
                                                                                      'OLEAUT32.dll': 'OleLoadPicture',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'DeleteDC',
                                                                                            'free',
                                                                                            'CoInitialize',
                                                                                            'OleLoadPicture',
                                                                                            'SHGetMalloc',
                                                                                            'GetDC'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 12,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 15352,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 15872,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 45568},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0af263b9e678c59f04c803fab0702f1865d63086a86f190e8cd8608afd919958'},
 '0b0656a8ddb957214e0f65ba52874e3be58dec9a2878e8c88a71957295712d87': {'AddressOfEntryPoint': 13984,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'CharToOemW',
                                                                                      'msvcrt.dll': '_get_osfhandle'},
                                                                      'ImportedFunctions': ['CharToOemW',
                                                                                            'CommandLineToArgvW',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'SetThreadUILanguage',
                                                                                            'WriteFile',
                                                                                            'GetConsoleMode',
                                                                                            'GetLocaleInfoW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetFileType',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCommandLineW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'lstrcmpW',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetLastError',
                                                                                            'FindClose',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeviceIoControl',
                                                                                            'HeapSetInformation',
                                                                                            'FindNextFileW',
                                                                                            'CloseHandle',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetFileAttributesW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'Sleep',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wcsnicmp',
                                                                                            'swprintf_s',
                                                                                            'wcscpy_s',
                                                                                            'wcsncmp',
                                                                                            'wcscat_s',
                                                                                            'memcpy_s',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            '_get_osfhandle'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 11776},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0b0656a8ddb957214e0f65ba52874e3be58dec9a2878e8c88a71957295712d87'},
 '0b397b8f5ae9520097e1c4f9192b43035a351fcc068c20d880c184d49c16c355': {'AddressOfEntryPoint': 84894,
                                                                      'DebugRVA': 84500,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1592,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 76800},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0b397b8f5ae9520097e1c4f9192b43035a351fcc068c20d880c184d49c16c355'},
 '0b41fc31edc0e3e28cdc86cf44199f11a5dfd16a491663c4e6875cd9e4c0f2b6': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 136832,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 137216,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0b41fc31edc0e3e28cdc86cf44199f11a5dfd16a491663c4e6875cd9e4c0f2b6'},
 '0bb8118c2ee7879c5dd385603f84148df643c04b14607676069401cb0820b320': {'AddressOfEntryPoint': 12046,
                                                                      'DebugRVA': 11836,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1376,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0bb8118c2ee7879c5dd385603f84148df643c04b14607676069401cb0820b320'},
 '0bbf1952ee724d29f04d9ea52cae9c8c781791d57ed127ae7b618704c3395a79': {'AddressOfEntryPoint': 31088,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetUserDefaultUILanguage',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'SHELL32.dll': 'SHGetKnownFolderPath',
                                                                                      'SHLWAPI.dll': 'SHStrDupW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'mscoree.dll': 'CorBindToRuntimeEx',
                                                                                      'msvcrt.dll': '_wcsnicmp',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegGetValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'WriteFile',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExW',
                                                                                            'GetFileAttributesW',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileW',
                                                                                            'CompareStringW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetLastError',
                                                                                            'FindClose',
                                                                                            'IsWow64Process',
                                                                                            'GetFileType',
                                                                                            'SetConsoleTitleW',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadResource',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'FindFirstFileW',
                                                                                            'SetErrorMode',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_except_handler4_common',
                                                                                            '_CxxThrowException',
                                                                                            'bsearch',
                                                                                            '_controlfp',
                                                                                            '_vsnwprintf',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcsncmp',
                                                                                            '_itow',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'wcsrchr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcstoul',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'PropVariantClear',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'SafeArrayCreate',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayPutElement',
                                                                                            'SysStringLen',
                                                                                            'SHStrDupW',
                                                                                            'LoadStringW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'CorBindToRuntimeEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 101,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 409992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 410112,
                                                                                       '.text\x00\x00\x00': 41984},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0bbf1952ee724d29f04d9ea52cae9c8c781791d57ed127ae7b618704c3395a79'},
 '0bc5838c1a531114851b2db02094856f786da369fb69199d9e36ec71ba3cc04a': {'AddressOfEntryPoint': 71488,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'KERNEL32.dll': 'GetFileType',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'USER32.dll': 'CharPrevW',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'cmutil.dll': 'CmMalloc',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcessId',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentProcess',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'CreateFileW',
                                                                                            'CompareStringW',
                                                                                            'lstrcmpW',
                                                                                            'lstrlenW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetLastError',
                                                                                            'FindClose',
                                                                                            'lstrcmpiW',
                                                                                            'FindNextFileW',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'lstrlenA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'CopyFileW',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'LocalAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlUnwind',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'CheckDlgButton',
                                                                                            'EndDialog',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SetFocus',
                                                                                            'DialogBoxParamW',
                                                                                            'IsWindow',
                                                                                            'CheckRadioButton',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetWindowTextW',
                                                                                            'MessageBoxExW',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxW',
                                                                                            'CharPrevW',
                                                                                            '_XcptFilter',
                                                                                            '_controlfp',
                                                                                            '_vsnwprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_ismbblead',
                                                                                            '_vsnprintf',
                                                                                            'SzToWzWithAlloc',
                                                                                            'CmRealloc',
                                                                                            'WzToSzWithAlloc',
                                                                                            'GetOSMajorVersion',
                                                                                            'GetOSVersion',
                                                                                            'CmFree',
                                                                                            'CmMalloc',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetDesktopFolder',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHChangeNotify',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 71168},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0bc5838c1a531114851b2db02094856f786da369fb69199d9e36ec71ba3cc04a'},
 '0c1b468202d22a6b1472d929fbd6c7ca3c3a23a5b383ed2db98acd3bf06e13f1': {'AddressOfEntryPoint': 17574,
                                                                      'DebugRVA': 20992,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DecodePointer',
                                                                                      'MSVCR120.dll': 'fread',
                                                                                      'libgcrypt-20.dll': 'gcry_md_read',
                                                                                      'libglib-2.0-0.dll': 'g_snprintf',
                                                                                      'libwiretap.dll': 'wtap_snapshot_length',
                                                                                      'libwsutil.dll': 'get_copyright_info'},
                                                                      'ImportedFunctions': ['GlobalMemoryStatusEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'wtap_iscompressed',
                                                                                            'wtap_block_get_string_option_value',
                                                                                            'wtap_block_get_nth_string_option_value',
                                                                                            'wtap_init',
                                                                                            'wtap_open_offline',
                                                                                            'wtap_read',
                                                                                            'wtap_phdr',
                                                                                            'wtap_file_size',
                                                                                            'wtap_file_type_subtype',
                                                                                            'wtap_file_encap',
                                                                                            'wtap_file_tsprec',
                                                                                            'wtap_file_get_shb',
                                                                                            'wtap_file_get_idb_info',
                                                                                            'wtap_get_debug_if_descr',
                                                                                            'wtap_close',
                                                                                            'wtap_file_type_subtype_string',
                                                                                            'wtap_encap_string',
                                                                                            'wtap_tsprec_string',
                                                                                            'wtap_strerror',
                                                                                            'register_all_wiretap_modules',
                                                                                            'wtap_get_num_encap_types',
                                                                                            'wtap_snapshot_length',
                                                                                            'get_os_version_info',
                                                                                            'nstime_set_zero',
                                                                                            'nstime_delta',
                                                                                            'nstime_cmp',
                                                                                            'nstime_to_sec',
                                                                                            'ws_add_crash_info',
                                                                                            'init_progfile_dir',
                                                                                            'init_process_policies',
                                                                                            'scan_plugins',
                                                                                            'init_report_err',
                                                                                            'format_size',
                                                                                            'ws_stdio_fopen',
                                                                                            'create_app_running_mutex',
                                                                                            'getopt_long',
                                                                                            'arg_list_utf_16to8',
                                                                                            'optind',
                                                                                            'get_copyright_info',
                                                                                            'gcry_md_write',
                                                                                            'gcry_md_ctl',
                                                                                            'gcry_md_reset',
                                                                                            'gcry_md_enable',
                                                                                            'gcry_md_open',
                                                                                            'gcry_check_version',
                                                                                            'gcry_md_read',
                                                                                            'g_array_sized_new',
                                                                                            'g_strfreev',
                                                                                            'g_array_append_vals',
                                                                                            'g_array_set_size',
                                                                                            'g_malloc',
                                                                                            'g_malloc0_n',
                                                                                            'g_array_free',
                                                                                            'g_string_free',
                                                                                            'g_strerror',
                                                                                            'g_strlcpy',
                                                                                            'g_strdup',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_strjoinv',
                                                                                            'g_strsplit',
                                                                                            'g_string_append_printf',
                                                                                            'g_string_append',
                                                                                            'g_string_new',
                                                                                            'g_free',
                                                                                            'g_snprintf',
                                                                                            'fprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_except1',
                                                                                            '_localtime64',
                                                                                            'localeconv',
                                                                                            'exit',
                                                                                            'putchar',
                                                                                            'printf',
                                                                                            'strchr',
                                                                                            'setlocale',
                                                                                            'memset',
                                                                                            '__iob_func',
                                                                                            'fclose',
                                                                                            'fread'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 113,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 289296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 9216,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 289792,
                                                                                       '.text\x00\x00\x00': 15872},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0c1b468202d22a6b1472d929fbd6c7ca3c3a23a5b383ed2db98acd3bf06e13f1'},
 '0cd81d97ad2d2809a9b516a1697a887e21ef7620591f9cb4cbc437e83230baf2': {'AddressOfEntryPoint': 90976,
                                                                      'DebugRVA': 389564,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 413696,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'COMCTL32.dll': 'ImageList_Add',
                                                                                      'GDI32.dll': 'GetTextExtentPointW',
                                                                                      'KERNEL32.dll': 'HeapDestroy',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'gdiplus.dll': 'GdipDeleteBrush',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ShellAboutW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDeletePen',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipSetPageUnit',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipDrawArcI',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipCloneBitmapAreaI',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipFree',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCloneImage',
                                                                                            'GdipAlloc',
                                                                                            'GdipDeleteBrush',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'EventWrite',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'IsThemeActive',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Add',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'WinSqmAddToStream',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetStartupInfoA',
                                                                                            'lstrlenA',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemTime',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'CloseHandle',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'MulDiv',
                                                                                            'GlobalFindAtomW',
                                                                                            'FindResourceW',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetLocaleInfoW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetLocaleInfoEx',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'GetProfileStringW',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'RegisterApplicationRecoveryCallback',
                                                                                            'ApplicationRecoveryInProgress',
                                                                                            'Sleep',
                                                                                            'ApplicationRecoveryFinished',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetTempFileNameW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetLastError',
                                                                                            'GetModuleHandleExW',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'LoadResource',
                                                                                            'HeapDestroy',
                                                                                            'OpenClipboard',
                                                                                            'GetClipboardData',
                                                                                            'InvalidateRect',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'InsertMenuItemW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowPlacement',
                                                                                            'SetForegroundWindow',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageExtraInfo',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetKeyState',
                                                                                            'IsDialogMessageW',
                                                                                            'GetClassNameW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSystemMetrics',
                                                                                            'EnumChildWindows',
                                                                                            'DrawTextW',
                                                                                            'SetPropW',
                                                                                            'SystemParametersInfoW',
                                                                                            'CheckRadioButton',
                                                                                            'UpdateWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'MoveWindow',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'FillRect',
                                                                                            'GetNextDlgTabItem',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'OffsetRect',
                                                                                            'EqualRect',
                                                                                            'MonitorFromRect',
                                                                                            'GetClassWord',
                                                                                            'EnumDesktopWindows',
                                                                                            'EnumDisplayMonitors',
                                                                                            'IntersectRect',
                                                                                            'CopyRect',
                                                                                            'GetFocus',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'CreatePopupMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'CharNextA',
                                                                                            'IsWindowEnabled',
                                                                                            'PostMessageW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'EnableWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowPlacement',
                                                                                            'CheckMenuItem',
                                                                                            'GetSysColor',
                                                                                            'SetClassLongW',
                                                                                            'GetClassLongW',
                                                                                            'DrawMenuBar',
                                                                                            'SetMenuItemInfoW',
                                                                                            'AppendMenuW',
                                                                                            'LoadStringW',
                                                                                            'GetSubMenu',
                                                                                            'RemoveMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'SetFocus',
                                                                                            'MapWindowPoints',
                                                                                            'EnableMenuItem',
                                                                                            'GetParent',
                                                                                            'GetMenu',
                                                                                            'GetClientRect',
                                                                                            'CreateWindowExW',
                                                                                            'DestroyWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'EndDialog',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'SendMessageW',
                                                                                            'MessageBeep',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'LoadImageW',
                                                                                            'UnregisterClassA',
                                                                                            'CreateDialogParamW',
                                                                                            'GetMenuState',
                                                                                            'ShowWindow',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidToStringW',
                                                                                            'UuidCreate',
                                                                                            'timeGetTime',
                                                                                            'CreateDIBSection',
                                                                                            'GetStockObject',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'CreatePatternBrush',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'EqualRgn',
                                                                                            'CombineRgn',
                                                                                            'SetRectRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateRectRgn',
                                                                                            'GetRgnBox',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'ExtCreatePen',
                                                                                            'GetObjectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextMetricsW',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontIndirectW',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPointW',
                                                                                            'time',
                                                                                            'difftime',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'setlocale',
                                                                                            '__pctype_func',
                                                                                            '___lc_handle_func',
                                                                                            '___lc_codepage_func',
                                                                                            '___mb_cur_max_func',
                                                                                            '_errno',
                                                                                            '__mb_cur_max',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__crtLCMapStringW',
                                                                                            'isspace',
                                                                                            'tolower',
                                                                                            'abort',
                                                                                            'isalnum',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'isalpha',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__uncaught_exception',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            'isdigit',
                                                                                            'isxdigit',
                                                                                            'toupper',
                                                                                            '_purecall',
                                                                                            'malloc',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'free',
                                                                                            'wcstoul',
                                                                                            'strcspn',
                                                                                            '_ftol2_sse',
                                                                                            '_ftol2',
                                                                                            'memchr',
                                                                                            '_strtoui64',
                                                                                            '_strtoi64',
                                                                                            '_wcsrev',
                                                                                            'strchr',
                                                                                            'sprintf_s',
                                                                                            '_wtoi64',
                                                                                            '_i64tow_s',
                                                                                            '_wcsdup',
                                                                                            'localeconv',
                                                                                            '??1bad_cast@@UAE@XZ',
                                                                                            '??0bad_cast@@QAE@ABV0@@Z',
                                                                                            'iswalpha',
                                                                                            'iswdigit',
                                                                                            '_wcslwr_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcsncmp',
                                                                                            '_itow_s',
                                                                                            'calloc',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_itoa',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'wcstol',
                                                                                            'mbstowcs_s',
                                                                                            '__p__fmode',
                                                                                            'exit',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 349,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 381216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 9728,
                                                                                       '.reloc\x00\x00': 20480,
                                                                                       '.rsrc\x00\x00\x00': 381440,
                                                                                       '.text\x00\x00\x00': 386048},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0cd81d97ad2d2809a9b516a1697a887e21ef7620591f9cb4cbc437e83230baf2'},
 '0ce0bbd005855ab76c1e9cd6c7d80ed46b977e46c129b4e0c3b8f4b929556778': {'AddressOfEntryPoint': 685468,
                                                                      'DebugRVA': 976816,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 974848,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptSignHashW',
                                                                                      'CRYPT32.dll': 'CertGetIssuerCertificateFromStore',
                                                                                      'GDI32.dll': 'SetWindowOrgEx',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'BeginPaint',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'gdiplus.dll': 'GdipCreateBitmapFromStreamICM',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'MoveFileW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemInfo',
                                                                                            'MulDiv',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVersion',
                                                                                            'GetLocalTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileTime',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'VirtualQuery',
                                                                                            'IsBadReadPtr',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetCurrentThread',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryExA',
                                                                                            'SetErrorMode',
                                                                                            'GetTempPathW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'MoveFileExW',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FlushInstructionCache',
                                                                                            'SetThreadContext',
                                                                                            'SetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareFileTime',
                                                                                            'VerLanguageNameW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadContext',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'lstrcpyA',
                                                                                            'ExitThread',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'ReadConsoleW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'OutputDebugStringW',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'FatalAppExitA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'CreateSemaphoreW',
                                                                                            'GetStartupInfoW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStringTypeW',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapSize',
                                                                                            'AreFileApisANSI',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetStdHandle',
                                                                                            'GetACP',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlUnwind',
                                                                                            'FreeResource',
                                                                                            'GetPrivateProfileSectionNamesA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'lstrcatW',
                                                                                            'GetVersionExW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'CreateEventW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetTempFileNameW',
                                                                                            'CopyFileW',
                                                                                            'GetTickCount',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'FindResourceW',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'lstrcpyW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateProcessW',
                                                                                            'ResumeThread',
                                                                                            'TerminateProcess',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'DuplicateHandle',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcatA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcpynA',
                                                                                            'LocalAlloc',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SearchPathW',
                                                                                            'lstrcmpA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'VirtualProtect',
                                                                                            'GetCurrentProcessId',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FindResourceExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetFileTime',
                                                                                            'OpenProcess',
                                                                                            'GetProcessTimes',
                                                                                            'LCMapStringW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CloseHandle',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetShortPathNameW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'LoadCursorW',
                                                                                            'SetTimer',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'LoadIconW',
                                                                                            'wsprintfW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetDesktopWindow',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowDC',
                                                                                            'ReleaseDC',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'PostMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'KillTimer',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'LoadImageW',
                                                                                            'CreateDialogParamW',
                                                                                            'MoveWindow',
                                                                                            'GetParent',
                                                                                            'GetWindowTextW',
                                                                                            'SetCursor',
                                                                                            'GetWindow',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'SetDlgItemTextW',
                                                                                            'FindWindowW',
                                                                                            'SubtractRect',
                                                                                            'IntersectRect',
                                                                                            'SetRect',
                                                                                            'FillRect',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'GetDC',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDlgCtrlID',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'CharNextW',
                                                                                            'IsDialogMessageW',
                                                                                            'FindWindowExW',
                                                                                            'ScreenToClient',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowRect',
                                                                                            'EnableWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'SendMessageW',
                                                                                            'WaitForInputIdle',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperW',
                                                                                            'wsprintfA',
                                                                                            'CallWindowProcW',
                                                                                            'DrawIcon',
                                                                                            'DrawTextW',
                                                                                            'UpdateWindow',
                                                                                            'InvalidateRect',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'MapWindowPoints',
                                                                                            'DrawFocusRect',
                                                                                            'CopyRect',
                                                                                            'InflateRect',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'MapDialogRect',
                                                                                            'RegisterClassExW',
                                                                                            'MonitorFromPoint',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'SelectClipRgn',
                                                                                            'UnrealizeObject',
                                                                                            'CreateHalftonePalette',
                                                                                            'GetDIBColorTable',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'CreatePalette',
                                                                                            'CreateFontW',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateSolidBrush',
                                                                                            'GetObjectW',
                                                                                            'TranslateCharsetInfo',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetStretchBltMode',
                                                                                            'StretchBlt',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'BitBlt',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateDCW',
                                                                                            'CreatePatternBrush',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'DeleteMetaFile',
                                                                                            'CreateBitmap',
                                                                                            'CreateRectRgn',
                                                                                            'PatBlt',
                                                                                            'PlayMetaFile',
                                                                                            'SetBkColor',
                                                                                            'SetMapMode',
                                                                                            'SetMetaFileBitsEx',
                                                                                            'SetPixel',
                                                                                            'SetViewportExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'RegCreateKeyExW',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptVerifySignatureW',
                                                                                            'CryptAcquireContextW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegCreateKeyW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CryptSignHashW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'CoInitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromProgID',
                                                                                            'GetRunningObjectTable',
                                                                                            'CreateItemMoniker',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VarUI4FromStr',
                                                                                            'GetErrorInfo',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VarBstrFromDate',
                                                                                            'VarBstrCat',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'VarBstrCmp',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CryptImportPublicKeyInfo',
                                                                                            'CertCompareCertificate',
                                                                                            'CertAddCertificateContextToStore',
                                                                                            'CertOpenSystemStoreW',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertOpenStore',
                                                                                            'CertSaveStore',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'PFXImportCertStore',
                                                                                            'CertSetCertificateContextProperty',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertGetIssuerCertificateFromStore',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'UuidToStringW',
                                                                                            'UuidFromStringW',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipFree',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCloneImage',
                                                                                            'GdipAlloc',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipCreateBitmapFromResource',
                                                                                            'GdipCreateBitmapFromFileICM',
                                                                                            'GdipCreateBitmapFromStreamICM'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 417,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 324960,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10240,
                                                                                       '.rdata\x00\x00': 266752,
                                                                                       '.rsrc\x00\x00\x00': 325120,
                                                                                       '.text\x00\x00\x00': 968704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0ce0bbd005855ab76c1e9cd6c7d80ed46b977e46c129b4e0c3b8f4b929556778'},
 '0cf9864ae3a8679ed503f954a453452c93fa44f99ca6f39bbc5860abde7fd35e': {'AddressOfEntryPoint': 38856,
                                                                      'DebugRVA': 519088,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 446464,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExA',
                                                                                      'COMCTL32.dll': 'PropertySheetA',
                                                                                      'GDI32.dll': 'CreateFontA',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'UpdateWindow',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'SetThreadPriority',
                                                                                            'SetFilePointer',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTempPathA',
                                                                                            'GetCurrentThread',
                                                                                            'LoadLibraryA',
                                                                                            'DeleteFileA',
                                                                                            'SetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'GetFileSize',
                                                                                            'RemoveDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessA',
                                                                                            'FormatMessageA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetTempPathW',
                                                                                            'CreateDirectoryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointerEx',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetProcessHeap',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FindNextFileW',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileExW',
                                                                                            'FindFirstFileExA',
                                                                                            'FindClose',
                                                                                            'CreateThread',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'OutputDebugStringW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryExA',
                                                                                            'GetStdHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'MapViewOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileMappingA',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'UnmapViewOfFile',
                                                                                            'lstrlenA',
                                                                                            'SetFileTime',
                                                                                            'SetLastError',
                                                                                            'HeapSize',
                                                                                            'GetTimeZoneInformation',
                                                                                            'RaiseException',
                                                                                            'GetStringTypeW',
                                                                                            'GetConsoleCP',
                                                                                            'HeapReAlloc',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'RtlUnwindEx',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedFlushSList',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetFileType',
                                                                                            'PeekNamedPipe',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetACP',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'ReleaseDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'DispatchMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetFocus',
                                                                                            'LoadCursorA',
                                                                                            'GetDC',
                                                                                            'PostMessageA',
                                                                                            'GetSystemMetrics',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxA',
                                                                                            'MoveWindow',
                                                                                            'RegisterClassA',
                                                                                            'DefWindowProcA',
                                                                                            'CreateWindowExA',
                                                                                            'TranslateMessage',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SendMessageA',
                                                                                            'SetCursor',
                                                                                            'GetDlgItem',
                                                                                            'PeekMessageA',
                                                                                            'GetParent',
                                                                                            'UpdateWindow',
                                                                                            'SelectObject',
                                                                                            'CreateDIBitmap',
                                                                                            'SetTextColor',
                                                                                            'TextOutA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateFontA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 174,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 23552,
                                                                                       '.rdata\x00\x00': 108544,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 442368},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0cf9864ae3a8679ed503f954a453452c93fa44f99ca6f39bbc5860abde7fd35e'},
 '0d02237739561700e8e779305be19e663f5ce2f1cb6f749476c4a14bc69236fb': {'AddressOfEntryPoint': 42379,
                                                                      'DebugRVA': 5040,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 81472,
                                                                      'ExportSize': 148,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'DTUParse.dll': '?ParserConsolePasswordPrompt@@YAXHPAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PAX@Z',
                                                                                      'KERNEL32.dll': 'VirtualFree',
                                                                                      'MSVCP100.dll': '??0_Lockit@std@@QAE@H@Z',
                                                                                      'MSVCR100.dll': '?what@exception@std@@UBEPBDXZ',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'GetFileSize',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'FindFirstFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'FindClose',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexW',
                                                                                            'SetHandleInformation',
                                                                                            'ReleaseMutex',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'DebugBreak',
                                                                                            'SetLastError',
                                                                                            'GetDateFormatW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetStringTypeW',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryW',
                                                                                            'IsWow64Process',
                                                                                            'GetVersionExW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetTimeFormatW',
                                                                                            'lstrlenW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'FormatMessageW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'ResumeThread',
                                                                                            'SuspendThread',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateRemoteThread',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcess',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualAllocEx',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'LockResource',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'VirtualQuery',
                                                                                            'VirtualFree',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'free',
                                                                                            '_wsplitpath_s',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_except_handler4_common',
                                                                                            '_crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'wcstoul',
                                                                                            'iswxdigit',
                                                                                            'memcpy',
                                                                                            '_wmakepath_s',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'wmemcpy_s',
                                                                                            '_getwche',
                                                                                            'printf',
                                                                                            '_wtoi',
                                                                                            'wcschr',
                                                                                            'memmove',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            'towupper',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_eof',
                                                                                            'swprintf_s',
                                                                                            '_fileno',
                                                                                            '__iob_func',
                                                                                            '_CxxThrowException',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            'fputs',
                                                                                            'wcsncat_s',
                                                                                            'wcsncmp',
                                                                                            'wcsrchr',
                                                                                            'wcspbrk',
                                                                                            '_swscanf_s_l',
                                                                                            '_resetstkoflw',
                                                                                            '_vsnwprintf_l',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?_Orphan_all@_Container_base0@std@@QAEXXZ',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            'VarBstrCmp',
                                                                                            'VarBstrCat',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreate',
                                                                                            'VarUdateFromDate',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'CLSIDFromString',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'GetModuleFileNameExW',
                                                                                            'GetModuleInformation',
                                                                                            'EnumProcessModules',
                                                                                            '??ACParser@@QAE?AUOPTARGINFO@@PBG@Z',
                                                                                            '?SetPasswordCallback@CParser@@QAEXP6AXHPAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PAX@Z1@Z',
                                                                                            '?SetDisplayToConsoleOn@CParser@@QAEXXZ',
                                                                                            '?ValidateDependencies@CParser@@QAEHXZ',
                                                                                            '?Parse@CParser@@QAEHHQAPAG@Z',
                                                                                            '?Parse@CParser@@QAEHPAU_iobuf@@@Z',
                                                                                            '??1CParser@@QAE@XZ',
                                                                                            '??0CParser@@QAE@XZ',
                                                                                            '?ParserConsolePasswordPrompt@@YAXHPAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PAX@Z',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 214,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 10076,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0d02237739561700e8e779305be19e663f5ce2f1cb6f749476c4a14bc69236fb'},
 '0d392968ded34d674409a7a79ff6981990fa732a9e67a767cbedc4c98a0d7cbe': {'AddressOfEntryPoint': 6592,
                                                                      'DebugRVA': 17636,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CompareFileTime',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetStartupInfoA',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetEnvironmentVariableW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumValueW',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharNextW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemDirectoryW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['SearchPathW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LoadStringW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'TerminateProcess',
                                                                                            'GetFileAttributesExW',
                                                                                            'CompareFileTime',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'CharNextW',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wtoi',
                                                                                            'memmove',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_amsg_exit',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcsicmp',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoA',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 67,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0d392968ded34d674409a7a79ff6981990fa732a9e67a767cbedc4c98a0d7cbe'},
 '0d3bef6ef8809e17f5eb943825c76813198f32aa8bd49b3db7e9c2b0dec184d2': {'AddressOfEntryPoint': 9696,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'ktmw32.dll': 'RecoverEnlistment',
                                                                                      'msvcrt.dll': 'exit',
                                                                                      'ntdll.dll': 'RtlFreeUnicodeString',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'SetThreadUILanguage',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteFile',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '__p__commode',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_XcptFilter',
                                                                                            '_wcsicmp',
                                                                                            'setlocale',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wprintf',
                                                                                            '_amsg_exit',
                                                                                            'exit',
                                                                                            'RtlCompareMemory',
                                                                                            'NtQueryInformationEnlistment',
                                                                                            'NtEnumerateTransactionObject',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlStringFromGUID',
                                                                                            'NtOpenTransaction',
                                                                                            'NtOpenEnlistment',
                                                                                            'NtOpenResourceManager',
                                                                                            'NtQueryInformationTransactionManager',
                                                                                            'NtOpenTransactionManager',
                                                                                            'NtQueryInformationTransaction',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'CommitComplete',
                                                                                            'OpenEnlistment',
                                                                                            'OpenResourceManager',
                                                                                            'OpenTransactionManagerById',
                                                                                            'RollbackEnlistment',
                                                                                            'CommitEnlistment',
                                                                                            'RecoverEnlistment',
                                                                                            'IIDFromString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0d3bef6ef8809e17f5eb943825c76813198f32aa8bd49b3db7e9c2b0dec184d2'},
 '0d64a81ec5c1e9800bbad38a5cf618aea636cf89ca7e1271797a7eb9d1ac363c': {'AddressOfEntryPoint': 44864,
                                                                      'DebugRVA': 20304,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CreateProcessW',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'TerminateProcess',
                                                                                            'GetOverlappedResult',
                                                                                            'GetLastError',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'CancelIo',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'SetupComm',
                                                                                            'GetCommState',
                                                                                            'SetCommState',
                                                                                            'SetCommTimeouts',
                                                                                            'PurgeComm',
                                                                                            'DeviceIoControl',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'DisconnectNamedPipe',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCurrentProcess',
                                                                                            'time',
                                                                                            '_kbhit',
                                                                                            'fprintf',
                                                                                            '_getch',
                                                                                            'exit',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_snwprintf_s',
                                                                                            'wcstombs',
                                                                                            'fwprintf',
                                                                                            '_snprintf_s',
                                                                                            '_wfopen',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_callnewh',
                                                                                            '_XcptFilter',
                                                                                            'wcscat_s',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '_purecall',
                                                                                            'localtime',
                                                                                            '__p__commode',
                                                                                            '_vsnwprintf',
                                                                                            'printf',
                                                                                            'fflush',
                                                                                            '_wtoi',
                                                                                            'memmove',
                                                                                            'isgraph',
                                                                                            'vfwprintf',
                                                                                            'memmove_s',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            '__iob_func',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'inet_addr',
                                                                                            'WSARecv',
                                                                                            'WSASocketW',
                                                                                            'WSASend',
                                                                                            'WSAGetLastError',
                                                                                            'WSAConnect',
                                                                                            'htons',
                                                                                            'closesocket',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 100,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 1064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 45056},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0d64a81ec5c1e9800bbad38a5cf618aea636cf89ca7e1271797a7eb9d1ac363c'},
 '0e31107ed4c8d449ea5415a20ea1645bf612c5f6b5370d7a5a185bb83a401f32': {'AddressOfEntryPoint': 10737,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetACP',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects'},
                                                                      'ImportedFunctions': ['lstrlenA',
                                                                                            '_lclose',
                                                                                            'GetModuleFileNameA',
                                                                                            '_lread',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            '_lwrite',
                                                                                            '_lcreat',
                                                                                            'CreateDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'GetTempPathA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'MoveFileExA',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'CompareStringA',
                                                                                            'DeleteFileA',
                                                                                            'Sleep',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapCreate',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'wsprintfA',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'MessageBoxA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'ShellExecuteExA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 95992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 96256,
                                                                                       '.text\x00\x00\x00': 22528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0e31107ed4c8d449ea5415a20ea1645bf612c5f6b5370d7a5a185bb83a401f32'},
 '0fc64383fc2f7630707802cdcc51d28255b20af1941c24356c3b53168db5d0dd': {'AddressOfEntryPoint': 4564,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CreateDirectoryW',
                                                                                      'SETUPAPI.dll': 'SetupIterateCabinetW',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['SetupIterateCabinetW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxW',
                                                                                            'SizeofResource',
                                                                                            'GetLastError',
                                                                                            'DeleteFileW',
                                                                                            'LoadResource',
                                                                                            'GetModuleFileNameW',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'LockResource',
                                                                                            'FindResourceW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetModuleHandleW',
                                                                                            'VerSetConditionMask',
                                                                                            'lstrcpyW',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryA',
                                                                                            'GetTempPathW',
                                                                                            'CreateDirectoryW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1118040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1118208,
                                                                                       '.text\x00\x00\x00': 2048},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0fc64383fc2f7630707802cdcc51d28255b20af1941c24356c3b53168db5d0dd'},
 '0fe5d2a39135442d9f1a3df1db6f3595e38dc540d0355f4609491de870099e51': {'AddressOfEntryPoint': 35111,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'RtlUnwind',
                                                                                      'LZ32.dll': 'LZClose',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'TranslateMessage'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'FormatMessageA',
                                                                                            'DeleteFileA',
                                                                                            'MulDiv',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'WaitForSingleObject',
                                                                                            'CompareStringA',
                                                                                            'Sleep',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindNextFileA',
                                                                                            'WritePrivateProfileSectionA',
                                                                                            'GetStartupInfoA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFileAttributesA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'SizeofResource',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpiA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'lstrcpynA',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'FindFirstFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'lstrcatA',
                                                                                            'lstrlenA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'LoadLibraryA',
                                                                                            'MoveFileExA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetShortPathNameA',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'IsBadCodePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetEnvironmentStrings',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'TerminateProcess',
                                                                                            'GetStringTypeW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetStringTypeA',
                                                                                            'IsBadWritePtr',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'VirtualAlloc',
                                                                                            'GetVersion',
                                                                                            'GetCommandLineA',
                                                                                            'HeapDestroy',
                                                                                            'RtlUnwind',
                                                                                            'GetParent',
                                                                                            'GetDlgItem',
                                                                                            'SetFocus',
                                                                                            'SendDlgItemMessageA',
                                                                                            'EnableWindow',
                                                                                            'CheckRadioButton',
                                                                                            'GetWindowLongA',
                                                                                            'LoadStringA',
                                                                                            'LoadImageA',
                                                                                            'MessageBoxA',
                                                                                            'CharNextA',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetDlgItemTextA',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetWindow',
                                                                                            'PostMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'wsprintfA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowTextA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DrawTextA',
                                                                                            'MoveWindow',
                                                                                            'GetClientRect',
                                                                                            'ScreenToClient',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetParent',
                                                                                            'MapDialogRect',
                                                                                            'IsWindow',
                                                                                            'GetWindowRect',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'InvalidateRect',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'UpdateWindow',
                                                                                            'IsDialogMessageA',
                                                                                            'SetWindowLongA',
                                                                                            'GetActiveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'LoadIconA',
                                                                                            'PeekMessageA',
                                                                                            'SendMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'CreateFontIndirectA',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'CreatePalette',
                                                                                            'GetObjectA',
                                                                                            'GetStockObject',
                                                                                            'CreateDIBitmap',
                                                                                            'GetTextExtentPointA',
                                                                                            'SelectObject',
                                                                                            'EnumFontFamiliesExA',
                                                                                            'DeleteDC',
                                                                                            'BitBlt',
                                                                                            'TextOutA',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetMalloc',
                                                                                            'LZOpenFileA',
                                                                                            'LZCopy',
                                                                                            'LZClose'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 183,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 182952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 184320,
                                                                                       '.text\x00\x00\x00': 73728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/0fe5d2a39135442d9f1a3df1db6f3595e38dc540d0355f4609491de870099e51'},
 '0ff1a185fc4201cc2154b6e5edbf1c4ff1a487d130feed4e841bf688ef10bc3b': {'AddressOfEntryPoint': 163296,
                                                                      'DebugRVA': 5024,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 200704,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenTraceW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'IsDBCSLeadByte',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathIsSameRootW',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'XmlLite.dll': 'CreateXmlWriter',
                                                                                      'msvcrt.dll': 'memcmp',
                                                                                      'ntdll.dll': 'EtwEventWriteNoRegistration',
                                                                                      'ole32.dll': 'CoTaskMemAlloc',
                                                                                      'uireng.dll': 'UirUpdateRecordingSession'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueA',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'CloseTrace',
                                                                                            'ProcessTrace',
                                                                                            'OpenTraceW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'CopyFileW',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetLastError',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'MulDiv',
                                                                                            'lstrcmpW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FormatMessageW',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'InitializeCriticalSection',
                                                                                            'RaiseException',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'UnregisterWait',
                                                                                            'GetCurrentProcess',
                                                                                            'IsWow64Process',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleW',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'LocalAlloc',
                                                                                            'VirtualQuery',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetFilePointer',
                                                                                            'ReplaceFileW',
                                                                                            'GetFileAttributesExA',
                                                                                            'lstrcmpA',
                                                                                            'GlobalReAlloc',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'SetEvent',
                                                                                            'CreateFileA',
                                                                                            'lstrlenA',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'GlobalFree',
                                                                                            'GlobalHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'OpenEventW',
                                                                                            'GetFullPathNameW',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCommandLineW',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileMappingW',
                                                                                            'ReadFile',
                                                                                            'SizeofResource',
                                                                                            'WriteFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileSize',
                                                                                            'GetDateFormatW',
                                                                                            'DeleteFileA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'OpenProcess',
                                                                                            'CreateFileW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetProductInfo',
                                                                                            'GetVersionExW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FreeLibrary',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'LoadLibraryExA',
                                                                                            'DecodePointer',
                                                                                            'VirtualAlloc',
                                                                                            'FlushInstructionCache',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'EncodePointer',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpiA',
                                                                                            'MoveFileExW',
                                                                                            'DeleteFileW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentProcessId',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetLastError',
                                                                                            'IsDBCSLeadByte',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GetObjectW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetClassInfoExW',
                                                                                            'RedrawWindow',
                                                                                            'SetWindowPos',
                                                                                            'CreateWindowExW',
                                                                                            'DestroyWindow',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'ClientToScreen',
                                                                                            'GetParent',
                                                                                            'ScreenToClient',
                                                                                            'MoveWindow',
                                                                                            'SetCapture',
                                                                                            'GetSysColor',
                                                                                            'CharUpperBuffA',
                                                                                            'CharPrevA',
                                                                                            'ReleaseCapture',
                                                                                            'FillRect',
                                                                                            'GetClientRect',
                                                                                            'InvalidateRgn',
                                                                                            'CallWindowProcW',
                                                                                            'InvalidateRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetDesktopWindow',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'CharUpperW',
                                                                                            'SetWindowTextW',
                                                                                            'CharToOemBuffA',
                                                                                            'OemToCharBuffA',
                                                                                            'CharNextA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetMessageW',
                                                                                            'GetClassNameW',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowContextHelpId',
                                                                                            'TranslateAcceleratorW',
                                                                                            'PostMessageW',
                                                                                            'TrackPopupMenu',
                                                                                            'EnableMenuItem',
                                                                                            'DestroyMenu',
                                                                                            'GetSubMenu',
                                                                                            'LoadMenuW',
                                                                                            'MapWindowPoints',
                                                                                            'DestroyIcon',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'SetDlgItemTextW',
                                                                                            'EnableWindow',
                                                                                            'SetDlgItemInt',
                                                                                            'SendDlgItemMessageW',
                                                                                            'DialogBoxParamW',
                                                                                            'LoadIconW',
                                                                                            'SetForegroundWindow',
                                                                                            'UnregisterHotKey',
                                                                                            'GetKeyState',
                                                                                            'UnregisterClassW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'IsWindowVisible',
                                                                                            'GetWindowRect',
                                                                                            'AdjustWindowRect',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'RegisterHotKey',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadStringW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'IsChild',
                                                                                            'GetFocus',
                                                                                            'SetFocus',
                                                                                            'GetWindow',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'IsWindow',
                                                                                            'UnregisterClassA',
                                                                                            'CharLowerA',
                                                                                            'MessageBoxW',
                                                                                            'CharNextW',
                                                                                            'wcscat_s',
                                                                                            'mbstowcs_s',
                                                                                            'memcpy_s',
                                                                                            'swprintf_s',
                                                                                            'malloc',
                                                                                            'calloc',
                                                                                            '_wcsupr',
                                                                                            'wcsstr',
                                                                                            'wcstoul',
                                                                                            '_wcstoui64',
                                                                                            'wcstol',
                                                                                            'wcsrchr',
                                                                                            '_itow_s',
                                                                                            '_vsnprintf',
                                                                                            'strstr',
                                                                                            '_mktemp',
                                                                                            'free',
                                                                                            '_vscwprintf',
                                                                                            '_snwscanf_s',
                                                                                            'wcschr',
                                                                                            '_callnewh',
                                                                                            'memset',
                                                                                            'qsort',
                                                                                            'memmove',
                                                                                            'time',
                                                                                            'gmtime',
                                                                                            'localtime',
                                                                                            'strncmp',
                                                                                            '_getdrive',
                                                                                            'memcpy',
                                                                                            'wcscpy_s',
                                                                                            'wcsncpy_s',
                                                                                            '_vsnwprintf',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_ftol2',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_errno',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'realloc',
                                                                                            'memcmp',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_Destroy',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Create',
                                                                                            'VarBstrCmp',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'LoadRegTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'SysStringByteLen',
                                                                                            'CoGetClassObject',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CLSIDFromProgID',
                                                                                            'CLSIDFromString',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleLockRunning',
                                                                                            'CoTaskMemAlloc',
                                                                                            'SHFileOperationW',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellAboutW',
                                                                                            'SHCreateItemInKnownFolder',
                                                                                            'CommandLineToArgvW',
                                                                                            'PathGetArgsW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathCombineW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFileExistsW',
                                                                                            'SHAutoComplete',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'PathFindExtensionA',
                                                                                            'PathMatchSpecExA',
                                                                                            'PathIsSameRootW',
                                                                                            'UirStartRecordingSession',
                                                                                            'UirInitializeEngine',
                                                                                            'UirStopRecordingSession',
                                                                                            'UirGetScreenComment',
                                                                                            'UirPauseRecordingSession',
                                                                                            'UirResumeRecordingSession',
                                                                                            'UirUpdateRecordingSession',
                                                                                            'EtwEventWriteNoRegistration',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'CreateXmlWriter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 365,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 375280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 9728,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 375296,
                                                                                       '.text\x00\x00\x00': 167424},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/0ff1a185fc4201cc2154b6e5edbf1c4ff1a487d130feed4e841bf688ef10bc3b'},
 '106907dff5890c52f7e82219bce498718d6a41c6f2c0b458ede79408beb770b8': {'AddressOfEntryPoint': 8880,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'msvcrt.dll': '_resetstkoflw',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind'},
                                                                      'ImportedFunctions': ['GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'SetLastError',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'wcschr',
                                                                                            'wcsrchr',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'swscanf',
                                                                                            '_resetstkoflw',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'CommandLineToArgvW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 60,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12592,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 12800,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/106907dff5890c52f7e82219bce498718d6a41c6f2c0b458ede79408beb770b8'},
 '10756491f3aa754f8b76af96f33a597826785f8d441d75abdc2fa74e7073ce6c': {'AddressOfEntryPoint': 62144,
                                                                      'DebugRVA': 4704,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'UnregisterTraceGuids',
                                                                                      'KERNEL32.dll': 'OutputDebugStringA',
                                                                                      'OLEAUT32.dll': 'UnRegisterTypeLib',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'AllowSetForegroundWindow',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RaiseException',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'lstrcmpiW',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'CompareStringW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleExA',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'HeapAlloc',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'InitializeSRWLock',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'OutputDebugStringA',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'AllowSetForegroundWindow',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '_wcsicmp',
                                                                                            'wcstok_s',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'memcmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'calloc',
                                                                                            '__C_specific_handler',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            '_purecall',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'memcpy_s',
                                                                                            'malloc',
                                                                                            'wcsncpy_s',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'LoadTypeLib',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayUnlock',
                                                                                            'SysFreeString',
                                                                                            'VarUI4FromStr',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            'SysStringByteLen',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayGetUBound',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'PathAppendW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 138,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 9432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 9728,
                                                                                       '.text\x00\x00\x00': 67072},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/10756491f3aa754f8b76af96f33a597826785f8d441d75abdc2fa74e7073ce6c'},
 '10b9a22e0dd4b07d7af9eb633950516d849f3a125e75a456d9f39f4aedc8c1ba': {'AddressOfEntryPoint': 4400,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'msvcrt.dll': 'wcslen'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'CreateEventA',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateMutexA',
                                                                                            'CreateSemaphoreA',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedIncrement',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'MapViewOfFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SignalObjectAndWait',
                                                                                            'Sleep',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'UnmapViewOfFile',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            '_access',
                                                                                            '_close',
                                                                                            '_dup',
                                                                                            '_fdopen',
                                                                                            '_fstat',
                                                                                            '_getpid',
                                                                                            '_lseek',
                                                                                            '_open',
                                                                                            '_read',
                                                                                            '_stat',
                                                                                            '_strdup',
                                                                                            '_unlink',
                                                                                            '_write',
                                                                                            '__getmainargs',
                                                                                            '__lc_codepage',
                                                                                            '__mb_cur_max',
                                                                                            '__p__environ',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_cexit',
                                                                                            '_chsize',
                                                                                            '_errno',
                                                                                            '_filbuf',
                                                                                            '_findclose',
                                                                                            '_findfirst',
                                                                                            '_findnext',
                                                                                            '_fullpath',
                                                                                            '_get_osfhandle',
                                                                                            '_iob',
                                                                                            '_isctype',
                                                                                            '_lseeki64',
                                                                                            '_mkdir',
                                                                                            '_onexit',
                                                                                            '_pctype',
                                                                                            '_setjmp',
                                                                                            '_setmode',
                                                                                            '_stricmp',
                                                                                            '_strnicmp',
                                                                                            'abort',
                                                                                            'atexit',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'fputs',
                                                                                            'fread',
                                                                                            'free',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'gmtime',
                                                                                            'localeconv',
                                                                                            'localtime',
                                                                                            'longjmp',
                                                                                            'malloc',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'mktime',
                                                                                            'pow',
                                                                                            'printf',
                                                                                            'putchar',
                                                                                            'puts',
                                                                                            'qsort',
                                                                                            'rand',
                                                                                            'realloc',
                                                                                            'remove',
                                                                                            'rewind',
                                                                                            'signal',
                                                                                            'sprintf',
                                                                                            'srand',
                                                                                            'strcat',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strerror',
                                                                                            'strftime',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'strrchr',
                                                                                            'strstr',
                                                                                            'strtok',
                                                                                            'strtol',
                                                                                            'time',
                                                                                            'tolower',
                                                                                            'toupper',
                                                                                            'wcslen'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 131,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 19968,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 132096,
                                                                                       '.text\x00\x00\x00': 698368},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/10b9a22e0dd4b07d7af9eb633950516d849f3a125e75a456d9f39f4aedc8c1ba'},
 '10be808b6decf8d8c8cf99de86bfeb43de3dbe0af16f799060ff8371873c0d5a': {'AddressOfEntryPoint': 8254,
                                                                      'DebugRVA': 12704,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DecodePointer',
                                                                                      'MSVCR120.dll': 'exit',
                                                                                      'libglib-2.0-0.dll': 'g_strfreev',
                                                                                      'libwiretap.dll': 'wtap_file_type_subtype',
                                                                                      'libwsutil.dll': 'get_copyright_info'},
                                                                      'ImportedFunctions': ['GlobalMemoryStatusEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'wtap_phdr_cleanup',
                                                                                            'wtap_block_array_free',
                                                                                            'wtap_init',
                                                                                            'wtap_open_offline',
                                                                                            'wtap_read',
                                                                                            'wtap_seek_read',
                                                                                            'wtap_phdr',
                                                                                            'wtap_phdr_init',
                                                                                            'wtap_file_encap',
                                                                                            'wtap_file_get_shb_for_new_file',
                                                                                            'wtap_file_get_idb_info',
                                                                                            'wtap_file_get_nrb_for_new_file',
                                                                                            'wtap_fdclose',
                                                                                            'wtap_dump_open_ng',
                                                                                            'wtap_dump_open_stdout_ng',
                                                                                            'register_all_wiretap_modules',
                                                                                            'wtap_strerror',
                                                                                            'wtap_dump_close',
                                                                                            'wtap_dump',
                                                                                            'wtap_file_type_subtype',
                                                                                            'get_os_version_info',
                                                                                            'ws_buffer_init',
                                                                                            'ws_buffer_free',
                                                                                            'nstime_set_unset',
                                                                                            'nstime_cmp',
                                                                                            'getopt_long',
                                                                                            'ws_add_crash_info',
                                                                                            'init_progfile_dir',
                                                                                            'init_process_policies',
                                                                                            'scan_plugins',
                                                                                            'init_report_err',
                                                                                            'optind',
                                                                                            'get_copyright_info',
                                                                                            'g_ptr_array_new',
                                                                                            'g_ptr_array_free',
                                                                                            'g_ptr_array_add',
                                                                                            'g_strjoinv',
                                                                                            'g_string_free',
                                                                                            'g_slice_alloc',
                                                                                            'g_slice_free1',
                                                                                            'g_ptr_array_sort',
                                                                                            'g_strsplit',
                                                                                            'g_string_append_printf',
                                                                                            'g_string_append',
                                                                                            'g_string_new',
                                                                                            'g_free',
                                                                                            'g_strfreev',
                                                                                            'printf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'memset',
                                                                                            'setlocale',
                                                                                            'strchr',
                                                                                            '_XcptFilter',
                                                                                            'exit'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 89,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 289312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 289792,
                                                                                       '.text\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/10be808b6decf8d8c8cf99de86bfeb43de3dbe0af16f799060ff8371873c0d5a'},
 '10c6c1e77c4dfced675ef497f39cd9c9fd5cde707cb7154298b7ac49ae2677ea': {'AddressOfEntryPoint': 228496,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSVCRT.dll': 'free'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'free'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 7,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 61456,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 61952,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/10c6c1e77c4dfced675ef497f39cd9c9fd5cde707cb7154298b7ac49ae2677ea'},
 '10fb638dc9c7e7d0961ace87320a0bd7ca48918bbb818038ac807b1172033c36': {'AddressOfEntryPoint': 34976,
                                                                      'DebugRVA': 4544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'DUI70.dll': '?ShowWindow@NativeHWNDHost@DirectUI@@QAEXH@Z',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'OLEACC.dll': 'AccessibleObjectFromWindow',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'PlaySndSrv.DLL': 'PlaySoundServerInitialize',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'msvcrt.dll': '__CxxFrameHandler3',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GetTraceEnableFlags',
                                                                                            'EventUnregister',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'EventRegister',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'TraceMessage',
                                                                                            'EventWrite',
                                                                                            'RegGetValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegLoadMUIStringW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'OpenJobObjectW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'IsProcessInJob',
                                                                                            'DeleteFileW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'GetVersionExW',
                                                                                            'OpenMutexW',
                                                                                            'GetCurrentThreadId',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateMutexW',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateProcessW',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'K32GetModuleBaseNameW',
                                                                                            'K32EnumProcessModules',
                                                                                            'OpenProcess',
                                                                                            'ProcessIdToSessionId',
                                                                                            'K32EnumProcesses',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'RaiseException',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'SetWindowTextW',
                                                                                            'LoadIconW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetShellWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetThreadDesktop',
                                                                                            'GetKeyState',
                                                                                            'SendInput',
                                                                                            'SetWindowPos',
                                                                                            'UnregisterClassA',
                                                                                            '_purecall',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            'free',
                                                                                            'memset',
                                                                                            'memmove_s',
                                                                                            'malloc',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'memcpy_s',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'wcscspn',
                                                                                            'wcsspn',
                                                                                            '_ltow_s',
                                                                                            'wcsrchr',
                                                                                            '_wcslwr_s',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '_wtoi',
                                                                                            '__p__fmode',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmAddToStream',
                                                                                            'PlaySoundServerInitialize',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'ShellExecuteW',
                                                                                            'PathFileExistsW',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QAEJH@Z',
                                                                                            'StrToID',
                                                                                            '?Click@Button@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            '?GetClassInfoPtr@CCPushButton@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                            '?IsContentProtected@Element@DirectUI@@UAE_NXZ',
                                                                                            '?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?GetKeyFocused@Element@DirectUI@@UAE_NXZ',
                                                                                            '?SetVisible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z',
                                                                                            '?SetAccessible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ',
                                                                                            '?GetClassInfoW@HWNDElement@DirectUI@@UAEPAUIClassInfo@2@XZ',
                                                                                            '?DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ',
                                                                                            '??1DUIFactory@DirectUI@@QAE@XZ',
                                                                                            '?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnDestroy@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z',
                                                                                            '?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z',
                                                                                            '?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z',
                                                                                            '?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z',
                                                                                            '?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?CreateStyleParser@HWNDElement@DirectUI@@UAEJPAPAVDUIXmlParser@2@@Z',
                                                                                            '?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z',
                                                                                            '?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z',
                                                                                            '?Register@HWNDElement@DirectUI@@SGJXZ',
                                                                                            '?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '??0HWNDElement@DirectUI@@QAE@XZ',
                                                                                            '??1HWNDElement@DirectUI@@UAE@XZ',
                                                                                            '?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z',
                                                                                            '?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z',
                                                                                            '?Destroy@Layout@DirectUI@@QAEXXZ',
                                                                                            '?Destroy@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Add@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?Add@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            '?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z',
                                                                                            '?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z',
                                                                                            '?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z',
                                                                                            '?SetKeyFocus@Element@DirectUI@@UAEXXZ',
                                                                                            '?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?OnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?DoubleBuffered@Element@DirectUI@@QAEX_N@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UAEJXZ',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ',
                                                                                            '?Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z',
                                                                                            '?LoadFromResource@DUIFactory@DirectUI@@QAEJPAUHINSTANCE__@@PBG1PAVElement@2@PAKPAPAV42@1@Z',
                                                                                            '?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z',
                                                                                            '?Create@NativeHWNDHost@DirectUI@@SGJPBGPAUHWND__@@PAUHICON__@@HHHHHHIPAPAV12@@Z',
                                                                                            'InitThread',
                                                                                            '?Destroy@NativeHWNDHost@DirectUI@@QAEXXZ',
                                                                                            'UnInitThread',
                                                                                            '?EndDefer@Element@DirectUI@@QAEXK@Z',
                                                                                            'UnInitProcessPriv',
                                                                                            'StartMessagePump',
                                                                                            'InitProcessPriv',
                                                                                            '?ShowWindow@NativeHWNDHost@DirectUI@@QAEXH@Z'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 221,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 205680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 9728,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 205824,
                                                                                       '.text\x00\x00\x00': 37888},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/10fb638dc9c7e7d0961ace87320a0bd7ca48918bbb818038ac807b1172033c36'},
 '116222b05e6963fad6f8aa9b9c4878724e9771531b4c0b8ead67cea7203b4af5': {'AddressOfEntryPoint': 11117,
                                                                      'DebugRVA': 4608,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'CRYPT32.dll': 'CryptProtectData',
                                                                                      'KERNEL32.dll': 'IsProcessorFeaturePresent',
                                                                                      'MSVCR100.dll': '_wcsicmp',
                                                                                      'OLEAUT32.dll': 'SystemTimeToVariantTime',
                                                                                      'SHLWAPI.dll': 'PathAppendW'},
                                                                      'ImportedFunctions': ['GetModuleFileNameW',
                                                                                            'GetSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFree',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'GetVersion',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'HeapDestroy',
                                                                                            'RaiseException',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_wtoi',
                                                                                            'wmemcpy_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'vswprintf_s',
                                                                                            '_vscwprintf',
                                                                                            '_crt_debugger_hook',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_except_handler4_common',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            'memset',
                                                                                            'ceil',
                                                                                            'floor',
                                                                                            'wcsnlen',
                                                                                            '_wcsicmp',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'RegCloseKey',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CryptUnprotectData',
                                                                                            'CryptProtectData',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathAppendW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1620,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17920,
                                                                                       '.reloc\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 55808},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/116222b05e6963fad6f8aa9b9c4878724e9771531b4c0b8ead67cea7203b4af5'},
 '1188fdc42a50c38b2abf53586a5175a6247bb3336db20e9eec65c6033525cb2b': {'AddressOfEntryPoint': 325984,
                                                                      'DebugRVA': 6000,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 372736,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventActivityIdControl',
                                                                                      'CRYPT32.dll': 'CryptBinaryToStringW',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'RPCRT4.dll': 'RpcBindingToStringBindingW',
                                                                                      'SETUPAPI.dll': 'SetupDiGetClassDevsW',
                                                                                      'SHELL32.dll': 'DragQueryFileW',
                                                                                      'USER32.dll': 'SystemParametersInfoW',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'WINSTA.dll': 'WinStationQueryInformationW',
                                                                                      'WTSAPI32.dll': 'WTSVirtualChannelClose',
                                                                                      'dwmapi.dll': 'DwmGetWindowAttribute',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlInitUnicodeString',
                                                                                      'ole32.dll': 'OleIsCurrentClipboard'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceEnableFlags',
                                                                                            'EventUnregister',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'EventRegister',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'OpenThreadToken',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegGetValueW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'CheckTokenMembership',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'EventWrite',
                                                                                            'GetTokenInformation',
                                                                                            'RegEnumValueW',
                                                                                            'EventActivityIdControl',
                                                                                            'InitOnceExecuteOnce',
                                                                                            'InitOnceInitialize',
                                                                                            'DeviceIoControl',
                                                                                            'QueryDosDeviceW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetFileAttributesW',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateFileW',
                                                                                            'WideCharToMultiByte',
                                                                                            'DefineDosDeviceW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetProcAddress',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryExW',
                                                                                            'CompareStringW',
                                                                                            'SetLastError',
                                                                                            'lstrcmpW',
                                                                                            'GetVersionExW',
                                                                                            'GetOverlappedResult',
                                                                                            'WriteFile',
                                                                                            'CancelIo',
                                                                                            'ReadFileEx',
                                                                                            'QueueUserAPC',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'TlsFree',
                                                                                            'LocalFree',
                                                                                            'DebugBreak',
                                                                                            'TlsAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetSystemInfo',
                                                                                            'LocalAlloc',
                                                                                            'CreateSemaphoreW',
                                                                                            'OpenThread',
                                                                                            'ResetEvent',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'ReleaseSemaphore',
                                                                                            'TlsSetValue',
                                                                                            'SetEvent',
                                                                                            'TlsGetValue',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSetInformation',
                                                                                            'InitializeCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleExA',
                                                                                            'CreateMutexW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'ChangeClipboardChain',
                                                                                            'SetClipboardViewer',
                                                                                            'GetClipboardViewer',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'GetClipboardFormatNameW',
                                                                                            'DefWindowProcW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateWindowExW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PostThreadMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'UnhookWinEvent',
                                                                                            'LoadCursorW',
                                                                                            'CountClipboardFormats',
                                                                                            'OpenClipboard',
                                                                                            'EnumClipboardFormats',
                                                                                            'CloseClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'LoadStringW',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterClassW',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'SendMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'GetClassNameW',
                                                                                            'IntersectRect',
                                                                                            'SetRect',
                                                                                            'OffsetRect',
                                                                                            'ClientToScreen',
                                                                                            'DispatchMessageW',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetLayeredWindowAttributes',
                                                                                            'GetUserObjectInformationW',
                                                                                            'IsWindowVisible',
                                                                                            'EqualRect',
                                                                                            'IsWindow',
                                                                                            'EnumChildWindows',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowRgn',
                                                                                            'GetWindowTextW',
                                                                                            'GetAncestor',
                                                                                            'TranslateMessage',
                                                                                            'EnumWindows',
                                                                                            'SetRectEmpty',
                                                                                            'GetClientRect',
                                                                                            'OpenDesktopW',
                                                                                            'GetParent',
                                                                                            'KillTimer',
                                                                                            'IsChild',
                                                                                            'GetMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetTimer',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetSystemMetrics',
                                                                                            'ChangeDisplaySettingsExW',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'UnionRect',
                                                                                            'PostMessageW',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWinEventHook',
                                                                                            'SystemParametersInfoW',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__set_app_type',
                                                                                            '_wcsicmp',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_purecall',
                                                                                            'rand',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_acmdln',
                                                                                            '_fmode',
                                                                                            '_wcsnicmp',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_commode',
                                                                                            'vswprintf_s',
                                                                                            'swprintf_s',
                                                                                            'wcsrchr',
                                                                                            'srand',
                                                                                            'wcschr',
                                                                                            'time',
                                                                                            '_vsnwprintf',
                                                                                            'wcscmp',
                                                                                            'ShellExecuteW',
                                                                                            'SHChangeNotify',
                                                                                            'SHFileOperationW',
                                                                                            'DragQueryFileW',
                                                                                            'WinStationIsSessionRemoteable',
                                                                                            'WinStationVirtualOpenEx',
                                                                                            'WinStationGetConnectionProperty',
                                                                                            'WinStationFreePropertyValue',
                                                                                            'WinStationNameFromLogonIdW',
                                                                                            'WinStationQueryInformationW',
                                                                                            'WTSRegisterSessionNotification',
                                                                                            'WTSVirtualChannelWrite',
                                                                                            'WTSQuerySessionInformationW',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSVirtualChannelQuery',
                                                                                            'WTSVirtualChannelOpen',
                                                                                            'WTSVirtualChannelOpenEx',
                                                                                            'WTSUnRegisterSessionNotification',
                                                                                            'WTSVirtualChannelClose',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'ReleaseStgMedium',
                                                                                            'OleGetClipboard',
                                                                                            'OleSetClipboard',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlMultiByteToUnicodeN',
                                                                                            'EtwEventActivityIdControl',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtCreateFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'NdrServerCall2',
                                                                                            'NdrServerCallAll',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcServerUnregisterIfEx',
                                                                                            'RpcServerListen',
                                                                                            'RpcBindingInqAuthClientW',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'OpenPrinterW',
                                                                                            'GetPrinterDataW',
                                                                                            'ClosePrinter',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDevicePropertyW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiOpenDeviceInterfaceW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'DwmGetWindowAttribute',
                                                                                            'CryptBinaryToStringW',
                                                                                            'CreateDCW',
                                                                                            'DeleteDC',
                                                                                            'ExtEscape',
                                                                                            'EqualRgn',
                                                                                            'CreateRectRgn',
                                                                                            'OffsetRgn',
                                                                                            'CombineRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetRectRgn',
                                                                                            'GetRegionData',
                                                                                            'GetRgnBox',
                                                                                            'GetStockObject',
                                                                                            'GetObjectW',
                                                                                            'SetMetaFileBitsEx',
                                                                                            'DeleteMetaFile',
                                                                                            'GetMetaFileBitsEx',
                                                                                            'CloseMetaFile',
                                                                                            'PlayMetaFile',
                                                                                            'CreateMetaFileW',
                                                                                            'CreatePalette',
                                                                                            'GetPaletteEntries',
                                                                                            'DeleteObject'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 292,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 330752,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/1188fdc42a50c38b2abf53586a5175a6247bb3336db20e9eec65c6033525cb2b'},
 '11b7bf52a54a4e5782c3fe2c3c68645c7ef75d6f0d5b284db6eb69220d137e16': {'AddressOfEntryPoint': 118558,
                                                                      'DebugRVA': 118156,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1992,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 110592},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/11b7bf52a54a4e5782c3fe2c3c68645c7ef75d6f0d5b284db6eb69220d137e16'},
 '1201ecd9f3eb0a40660be69f33a4126e0871d87b34eeaf578c37b1cbb4455a7a': {'AddressOfEntryPoint': 4988,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2644,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/1201ecd9f3eb0a40660be69f33a4126e0871d87b34eeaf578c37b1cbb4455a7a'},
 '122bb4863ef62678e95a39f412b224816e20784b6d7132a7ab4036a2152966d5': {'AddressOfEntryPoint': 8864,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathAddExtensionW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'RaiseException',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLastError',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'HeapAlloc',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateProcessW',
                                                                                            'HeapSetInformation',
                                                                                            'MoveFileExW',
                                                                                            'LocalFree',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'memcpy',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantInit',
                                                                                            'CommandLineToArgvW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathAddExtensionW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 63,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/122bb4863ef62678e95a39f412b224816e20784b6d7132a7ab4036a2152966d5'},
 '129c1aff6a50305936706c6377517fa023f759c2d501c64db842e5152824091a': {'AddressOfEntryPoint': 14819,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrcpynA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcpynA',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 41096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 41472,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/129c1aff6a50305936706c6377517fa023f759c2d501c64db842e5152824091a'},
 '1339b5cdd775ef01f4bf69518b7141041fb66571130166f4fbd072fc750f9806': {'AddressOfEntryPoint': 5424,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 2174976,
                                                                      'ExportSize': 5610,
                                                                      'IATRVA': 2185428,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ReportEventW',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'Normaliz.dll': 'IdnToUnicode',
                                                                                      'USER32.dll': 'SendMessageA',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WLDAP32.dll': 'ldap_value_free_len',
                                                                                      'WS2_32.dll': 'socket',
                                                                                      'msvcrt.dll': 'wprintf'},
                                                                      'ImportedFunctions': ['DeregisterEventSource',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDCW',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetBitmapBits',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'SelectObject',
                                                                                            'CloseHandle',
                                                                                            'CreateFileMappingA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FormatMessageA',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetFileType',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetStdHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetVersion',
                                                                                            'GetVersionExA',
                                                                                            'GetVersionExW',
                                                                                            'GlobalMemoryStatus',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryW',
                                                                                            'MapViewOfFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'PeekNamedPipe',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ReadFile',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SearchPathA',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'SleepEx',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'UnmapViewOfFile',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            '_access',
                                                                                            '_close',
                                                                                            '_fileno',
                                                                                            '_getch',
                                                                                            '_isatty',
                                                                                            '_mkdir',
                                                                                            '_open',
                                                                                            '_read',
                                                                                            '_setmode',
                                                                                            '_strdup',
                                                                                            '_stricmp',
                                                                                            '_strnicmp',
                                                                                            '_write',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__iob_func',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_assert',
                                                                                            '_beginthreadex',
                                                                                            '_cexit',
                                                                                            '_chmod',
                                                                                            '_chsize',
                                                                                            '_errno',
                                                                                            '_exit',
                                                                                            '_fdopen',
                                                                                            '_fileno',
                                                                                            '_fmode',
                                                                                            '_fstat64',
                                                                                            '_ftime',
                                                                                            '_getch',
                                                                                            '_gmtime64',
                                                                                            '_initterm',
                                                                                            '_localtime64',
                                                                                            '_lock',
                                                                                            '_lseeki64',
                                                                                            '_mktime64',
                                                                                            '_onexit',
                                                                                            '_open',
                                                                                            '_setmode',
                                                                                            '_stat64',
                                                                                            '_stricmp',
                                                                                            '_strnicmp',
                                                                                            '_sys_nerr',
                                                                                            '_time64',
                                                                                            '_unlock',
                                                                                            '_utime64',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            '_wfopen',
                                                                                            'abort',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'feof',
                                                                                            'ferror',
                                                                                            'fflush',
                                                                                            'fgets',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'fputs',
                                                                                            'fread',
                                                                                            'free',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'isalnum',
                                                                                            'isalpha',
                                                                                            'isgraph',
                                                                                            'islower',
                                                                                            'isprint',
                                                                                            'isspace',
                                                                                            'isupper',
                                                                                            'isxdigit',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'memchr',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'printf',
                                                                                            'putc',
                                                                                            'puts',
                                                                                            'qsort',
                                                                                            'raise',
                                                                                            'rand',
                                                                                            'realloc',
                                                                                            'rewind',
                                                                                            'setlocale',
                                                                                            'setvbuf',
                                                                                            'signal',
                                                                                            'sprintf',
                                                                                            'sscanf',
                                                                                            'strcat',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strcspn',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'strpbrk',
                                                                                            'strrchr',
                                                                                            'strspn',
                                                                                            'strstr',
                                                                                            'strtok',
                                                                                            'strtol',
                                                                                            'strtoul',
                                                                                            'tolower',
                                                                                            'vfprintf',
                                                                                            'wcsstr',
                                                                                            'wprintf',
                                                                                            'IdnToAscii',
                                                                                            'IdnToUnicode',
                                                                                            'FindWindowA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetUserObjectInformationW',
                                                                                            'MessageBoxW',
                                                                                            'SendMessageA',
                                                                                            'timeGetTime',
                                                                                            'ber_free',
                                                                                            'ldap_err2string',
                                                                                            'ldap_first_attribute',
                                                                                            'ldap_first_entry',
                                                                                            'ldap_get_dn',
                                                                                            'ldap_get_values_len',
                                                                                            'ldap_init',
                                                                                            'ldap_memfree',
                                                                                            'ldap_msgfree',
                                                                                            'ldap_next_attribute',
                                                                                            'ldap_next_entry',
                                                                                            'ldap_search_s',
                                                                                            'ldap_set_option',
                                                                                            'ldap_simple_bind_s',
                                                                                            'ldap_unbind_s',
                                                                                            'ldap_value_free_len',
                                                                                            'WSACleanup',
                                                                                            'WSAGetLastError',
                                                                                            'WSAIoctl',
                                                                                            'WSASetLastError',
                                                                                            'WSAStartup',
                                                                                            '__WSAFDIsSet',
                                                                                            'accept',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            'getpeername',
                                                                                            'getsockname',
                                                                                            'getsockopt',
                                                                                            'htonl',
                                                                                            'htons',
                                                                                            'inet_addr',
                                                                                            'ioctlsocket',
                                                                                            'listen',
                                                                                            'ntohl',
                                                                                            'ntohs',
                                                                                            'recv',
                                                                                            'recvfrom',
                                                                                            'select',
                                                                                            'send',
                                                                                            'sendto',
                                                                                            'setsockopt',
                                                                                            'shutdown',
                                                                                            'socket'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 245,
                                                                      'NumberOfSections': 12,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 992,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 164864,
                                                                                       '.edata\x00\x00': 5632,
                                                                                       '.idata\x00\x00': 9216,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 333312,
                                                                                       '.reloc\x00\x00': 19968,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 1638400,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.xdata\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/1339b5cdd775ef01f4bf69518b7141041fb66571130166f4fbd072fc750f9806'},
 '134e40391e97a3ba5fe6e3b2433a430fce46d2a678fe2cfd15e48af59428a375': {'AddressOfEntryPoint': 5744,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'SETUPAPI.dll': 'InstallHinfSectionW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'newdev.dll': 'DiInstallDriverW'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCommandLineW',
                                                                                            'TerminateProcess',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '_vsnwprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupDiGetActualSectionToInstallW',
                                                                                            'SetupCloseInfFile',
                                                                                            'InstallHinfSectionW',
                                                                                            'DiInstallDriverW',
                                                                                            'CommandLineToArgvW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 40,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/134e40391e97a3ba5fe6e3b2433a430fce46d2a678fe2cfd15e48af59428a375'},
 '1350196dc351b56cde07ad7eb17b594407cf0dc20d4626b4112d46b68d47d631': {'AddressOfEntryPoint': 10048,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RegisterApplicationRestart',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleOutputCP',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'LCMapStringW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwTraceMessage',
                                                                                      'wbemcomn.dll': '?GetWMIADAPCmdLine@@YGPAGH@Z'},
                                                                      'ImportedFunctions': ['_vsnprintf',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '__setusermatherr',
                                                                                            '_except_handler4_common',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            'atoi',
                                                                                            'isspace',
                                                                                            'mbstowcs',
                                                                                            'strspn',
                                                                                            'setlocale',
                                                                                            'memset',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'LCMapStringW',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetStdHandle',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            '?EnablePrivilege@@YGHKJ@Z',
                                                                                            '?Write@CMemoryLog@@QAEXJ@Z',
                                                                                            '?DebugTrace@@YAHDPBDZZ',
                                                                                            '?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z',
                                                                                            '?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z',
                                                                                            '?GetMemLogObject@@YGPAVCMemoryLog@@XZ',
                                                                                            '?GetWMIADAPCmdLine@@YGPAGH@Z',
                                                                                            'EtwTraceMessage',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'RegisterApplicationRestart'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 64488,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 64512,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1350196dc351b56cde07ad7eb17b594407cf0dc20d4626b4112d46b68d47d631'},
 '13547a41926d3dea0f819a660cb58823c66b043c6345650de16952a33821154b': {'AddressOfEntryPoint': 12991,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpynA',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 19536,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 19968,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/13547a41926d3dea0f819a660cb58823c66b043c6345650de16952a33821154b'},
 '1363416b411d5dfc4992862e4c7840a721aa0122dd1c4d0eb3a8501f794b736b': {'AddressOfEntryPoint': 62106,
                                                                      'DebugRVA': 4672,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyW',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatus',
                                                                                            'ControlService',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'SetSecurityInfo',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityInfo',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'lstrcmpiW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'lstrcatW',
                                                                                            'lstrcpyW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpW',
                                                                                            'FindFirstFileW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrcpynW',
                                                                                            'GetVersionExW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'RtlUnwind',
                                                                                            'InterlockedExchange',
                                                                                            'VirtualQuery',
                                                                                            'SetFilePointer',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'FlushFileBuffers',
                                                                                            'ReadFile',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 89088},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1363416b411d5dfc4992862e4c7840a721aa0122dd1c4d0eb3a8501f794b736b'},
 '13b98844b2fa4a39a4d8ebb414fc79450d5ab4f0c8f5141ac06d40b2a0431ea4': {'AddressOfEntryPoint': 47294,
                                                                      'DebugRVA': 152304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 151552,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExA',
                                                                                      'COMCTL32.dll': 'PropertySheetA',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'SetDlgItemTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'FreeLibrary',
                                                                                            'SetStdHandle',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetFileSize',
                                                                                            'GetLocaleInfoW',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'InterlockedExchange',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'DeleteFileA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileA',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateDirectoryA',
                                                                                            'SetLastError',
                                                                                            'RtlUnwind',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetProcessHeap',
                                                                                            'SetHandleCount',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileType',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'HeapReAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'VirtualFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'FatalAppExitA',
                                                                                            'VirtualAlloc',
                                                                                            'WriteFile',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'wsprintfA',
                                                                                            'GetFocus',
                                                                                            'ShowWindow',
                                                                                            'SetCursor',
                                                                                            'GetDlgItem',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetParent',
                                                                                            'PostMessageA',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'MessageBoxA',
                                                                                            'UpdateWindow',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'CreateFontA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'TextOutA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateSolidBrush',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryValueA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 164,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 40448,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 144896},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/13b98844b2fa4a39a4d8ebb414fc79450d5ab4f0c8f5141ac06d40b2a0431ea4'},
 '13f2b062be907d963d749f42c82a619351f1b6167f5f7e62f1e89ffa31d39b7c': {'AddressOfEntryPoint': 50944,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'NETAPI32.dll': 'NetWkstaTransportEnum',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'SHLWAPI.dll': 'StrChrW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'GetAddrInfoW',
                                                                                      'framedynos.dll': '??0CHString@@QAE@PBG@Z',
                                                                                      'msvcrt.dll': '_fileno',
                                                                                      'ntdll.dll': 'VerSetConditionMask',
                                                                                      'ole32.dll': 'CoInitializeSecurity'},
                                                                      'ImportedFunctions': ['FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'GetTimeFormatW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetComputerNameExW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'ReadFile',
                                                                                            'LocalAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenA',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            '__wgetmainargs',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'wcstok',
                                                                                            'fflush',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            '_get_osfhandle',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcsstr',
                                                                                            '_iob',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_wcsicmp',
                                                                                            '_memicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'wsprintfW',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'WNetGetLastErrorW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayGetElement',
                                                                                            'SysFreeString',
                                                                                            'VariantCopy',
                                                                                            'GetUserNameExW',
                                                                                            'WSACleanup',
                                                                                            'FreeAddrInfoW',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            'GetNameInfoW',
                                                                                            'GetAddrInfoW',
                                                                                            '?SetAt@CHString@@QAEXHG@Z',
                                                                                            '?Empty@CHString@@QAEXXZ',
                                                                                            '?Mid@CHString@@QBE?AV1@HH@Z',
                                                                                            '??YCHString@@QAEABV0@PBG@Z',
                                                                                            '?Left@CHString@@QBE?AV1@H@Z',
                                                                                            '?Format@CHString@@QAAXPBGZZ',
                                                                                            '?ReleaseBuffer@CHString@@QAEXH@Z',
                                                                                            '?GetBufferSetLength@CHString@@QAEPAGH@Z',
                                                                                            '?Compare@CHString@@QBEHPBG@Z',
                                                                                            '?GetData@CHString@@IBEPAUCHStringData@@XZ',
                                                                                            '?Mid@CHString@@QBE?AV1@H@Z',
                                                                                            '??4CHString@@QAEABV0@ABV0@@Z',
                                                                                            '?Find@CHString@@QBEHG@Z',
                                                                                            '?FindOneOf@CHString@@QBEHPBG@Z',
                                                                                            '??4CHString@@QAEABV0@PBG@Z',
                                                                                            '??1CHString@@QAE@XZ',
                                                                                            '??0CHString@@QAE@XZ',
                                                                                            '??0CHString@@QAE@PBG@Z',
                                                                                            'NetApiBufferFree',
                                                                                            'NetServerGetInfo',
                                                                                            'NetWkstaTransportEnum',
                                                                                            'StrChrIW',
                                                                                            'StrStrIW',
                                                                                            'StrStrW',
                                                                                            'StrChrW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 139,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 52736},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/13f2b062be907d963d749f42c82a619351f1b6167f5f7e62f1e89ffa31d39b7c'},
 '142c996c5081f1be1d343fbf5f7f65ec535e94db0381d348137da61a46d793e3': {'AddressOfEntryPoint': 48640,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyExW',
                                                                                      'ActionQueue.dll': 'ProcessActionQueue',
                                                                                      'KERNEL32.dll': 'SetLastError',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'UNATTEND.DLL': 'UnattendFindFileFromCmdLine',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegFlushKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FindClose',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'CopyFileExW',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateProcessW',
                                                                                            'FlushFileBuffers',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'GetModuleHandleExW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GlobalFree',
                                                                                            'CloseHandle',
                                                                                            'PowerSetRequest',
                                                                                            'PowerCreateRequest',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'FreeLibrary',
                                                                                            'HeapAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetLastError',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_amsg_exit',
                                                                                            '_wcmdln',
                                                                                            '_wcsnicmp',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            'wcsrchr',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            '_vscwprintf',
                                                                                            'swprintf_s',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            '_XcptFilter',
                                                                                            '__wgetmainargs',
                                                                                            'wcscmp',
                                                                                            'NtSetValueKey',
                                                                                            'NtClose',
                                                                                            'NtCreateKey',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CommandLineToArgvW',
                                                                                            'UnattendFreeResults',
                                                                                            'UnattendFindAnswerFileWithResults',
                                                                                            'UnattendCtxDeserializeWithResults',
                                                                                            'UnattendCtxSerializeSettingsStream',
                                                                                            'UnattendCtxCancelModify',
                                                                                            'UnattendCtxCommitModify',
                                                                                            'UnattendCtxReplaceMatchedNodesWithText',
                                                                                            'UnattendCtxBeginModify',
                                                                                            'UnattendMarkPassUsedInCtx',
                                                                                            'UnattendCtxOpenNode',
                                                                                            'UnattendAddResults',
                                                                                            'UnattendFreeNode',
                                                                                            'UnattendCtxCleanup',
                                                                                            'UnattendCtxSerialize',
                                                                                            'UnattendFindFileFromCmdLine',
                                                                                            'GenerateActionQueue',
                                                                                            'ProcessActionQueue',
                                                                                            'LoadStringW',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 123,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 48640},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/142c996c5081f1be1d343fbf5f7f65ec535e94db0381d348137da61a46d793e3'},
 '14376ddd07cf8df48803a3c0e606a66f6250bbe56e6fd99e83553ed617fffed8': {'AddressOfEntryPoint': 14688,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'SCECLI.dll': 'SceSetupGenerateTemplate',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileAttributesW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-shlwapi-legacy-l1-1-0.dll': 'PathIsRootW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'FreeSid',
                                                                                      'msvcrt.dll': '_wcsicmp'},
                                                                      'ImportedFunctions': ['__p__commode',
                                                                                            'iswctype',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            'fgetwc',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'wcsrchr',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'vswprintf_s',
                                                                                            '__p__fmode',
                                                                                            '__iob_func',
                                                                                            'wcscpy_s',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'wcscat_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            'setlocale',
                                                                                            '_except_handler4_common',
                                                                                            'sprintf_s',
                                                                                            'wcsncpy_s',
                                                                                            'vprintf',
                                                                                            'towlower',
                                                                                            'vfwprintf',
                                                                                            '_wcsicmp',
                                                                                            'SceConfigureSystem',
                                                                                            'SceAnalyzeSystem',
                                                                                            'SceRegisterRegValues',
                                                                                            'SceWriteSecurityProfileInfo',
                                                                                            'SceIsSystemDatabase',
                                                                                            'SceOpenProfile',
                                                                                            'SceGenerateRollback',
                                                                                            'SceGetSecurityProfileInfo',
                                                                                            'SceFreeMemory',
                                                                                            'SceBrowseDatabaseTable',
                                                                                            'SceCloseProfile',
                                                                                            'SceFreeProfileMemory',
                                                                                            'SceSetupGenerateTemplate',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathIsRootW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 80,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 17480,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 17920,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/14376ddd07cf8df48803a3c0e606a66f6250bbe56e6fd99e83553ed617fffed8'},
 '1445bcc87cac845d42f21517a251871f8c949436c9ee15d190ba3328f723b416': {'AddressOfEntryPoint': 60208,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LsaEnumerateTrustedDomains',
                                                                                      'DNSAPI.dll': 'DnsValidateName_W',
                                                                                      'DSPARSE.dll': 'DsIsMangledDnW',
                                                                                      'DSROLE.dll': 'DsRoleFreeMemory',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'NTDSAPI.dll': 'DsFreePasswordCredentials',
                                                                                      'Secur32.dll': 'AcceptSecurityContext',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'credui.dll': 'CredPackAuthenticationBufferW',
                                                                                      'cryptdll.dll': 'CDGenerateRandomBits',
                                                                                      'logoncli.dll': 'I_NetLogonControl2',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netjoin.dll': 'NetpStopService',
                                                                                      'netutils.dll': 'NetApiBufferAllocate',
                                                                                      'ntdll.dll': 'RtlInitUnicodeString',
                                                                                      'ole32.dll': 'CoTaskMemFree',
                                                                                      'samcli.dll': 'NetUserDel',
                                                                                      'srvcli.dll': 'NetServerGetInfo',
                                                                                      'wkscli.dll': 'NetGetJoinInformation'},
                                                                      'ImportedFunctions': ['OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'StartServiceW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetUserNameW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'InitiateSystemShutdownW',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaClose',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'LsaSetInformationPolicy',
                                                                                            'IsValidSid',
                                                                                            'LookupAccountSidW',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'LsaOpenSecret',
                                                                                            'LsaCreateSecret',
                                                                                            'LsaSetSecret',
                                                                                            'LsaDelete',
                                                                                            'LsaOpenTrustedDomain',
                                                                                            'LsaCreateTrustedDomain',
                                                                                            'LsaCreateTrustedDomainEx',
                                                                                            'LsaQueryTrustedDomainInfoByName',
                                                                                            'LsaSetTrustedDomainInfoByName',
                                                                                            'LsaOpenTrustedDomainByName',
                                                                                            'LsaQueryInfoTrustedDomain',
                                                                                            'LsaSetInformationTrustedDomain',
                                                                                            'LsaNtStatusToWinError',
                                                                                            'LsaQueryTrustedDomainInfo',
                                                                                            'LsaLookupSids',
                                                                                            'LsaEnumerateTrustedDomainsEx',
                                                                                            'LsaEnumerateTrustedDomains',
                                                                                            'GetLastError',
                                                                                            'SetConsoleMode',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetComputerNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'WideCharToMultiByte',
                                                                                            'DnsHostnameToComputerNameW',
                                                                                            'GetStringTypeExW',
                                                                                            'SetComputerNameExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'GetConsoleMode',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'WriteConsoleW',
                                                                                            'WriteFile',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'GetStdHandle',
                                                                                            'GetCommandLineW',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            '_wcsnicmp',
                                                                                            'wcsncpy_s',
                                                                                            'wcscat_s',
                                                                                            '_wcsupr',
                                                                                            '_wcslwr',
                                                                                            'wcstoul',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            '_vsnwprintf',
                                                                                            'printf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'swprintf_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wgetenv',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            'setlocale',
                                                                                            'wcsrchr',
                                                                                            '_wcsicmp',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcscspn',
                                                                                            '_iob',
                                                                                            'fgetwc',
                                                                                            'iswdigit',
                                                                                            'memcpy',
                                                                                            '_wtoi',
                                                                                            'memset',
                                                                                            'GetFocus',
                                                                                            'LoadStringW',
                                                                                            'InitializeSecurityContextW',
                                                                                            'FreeContextBuffer',
                                                                                            'QueryCredentialsAttributesW',
                                                                                            'AcquireCredentialsHandleW',
                                                                                            'QuerySecurityPackageInfoW',
                                                                                            'EnumerateSecurityPackagesW',
                                                                                            'AcceptSecurityContext',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'DsRoleFreeMemory',
                                                                                            'NetpwNameValidate',
                                                                                            'NetApiBufferFree',
                                                                                            'NetApiBufferAllocate',
                                                                                            'NetpManageMachineAccountWithSid',
                                                                                            'NetpSetComputerAccountPassword',
                                                                                            'NetpCreateComputerObjectInDs',
                                                                                            'NetpManageIPCConnect',
                                                                                            'NetpStopService',
                                                                                            'DsEnumerateDomainTrustsW',
                                                                                            'DsGetDcNameW',
                                                                                            'I_NetLogonControl2',
                                                                                            'NetUserSetInfo',
                                                                                            'NetUserGetInfo',
                                                                                            'NetUserAdd',
                                                                                            'NetUserEnum',
                                                                                            'NetLocalGroupAddMember',
                                                                                            'NetLocalGroupDelMember',
                                                                                            'NetUserDel',
                                                                                            'NetServerGetInfo',
                                                                                            'NetGetJoinableOUs',
                                                                                            'NetRenameMachineInDomain',
                                                                                            'NetJoinDomain',
                                                                                            'NetUnjoinDomain',
                                                                                            'NetWkstaGetInfo',
                                                                                            'NetGetJoinInformation',
                                                                                            'DnsQuery_W',
                                                                                            'DnsValidateName_W',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQuerySystemTime',
                                                                                            'RtlRandom',
                                                                                            'RtlEqualSid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'RtlValidSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlLengthSid',
                                                                                            'RtlInitUnicodeString',
                                                                                            'DsIsMangledDnW',
                                                                                            'DsMakePasswordCredentialsW',
                                                                                            'DsBindWithCredW',
                                                                                            'DsFreeDomainControllerInfoW',
                                                                                            'DsGetDomainControllerInfoW',
                                                                                            'DsListRolesW',
                                                                                            'DsRemoveDsDomainW',
                                                                                            'DsRemoveDsServerW',
                                                                                            'DsFreeNameResultW',
                                                                                            'DsCrackNamesW',
                                                                                            'DsUnBindW',
                                                                                            'DsFreePasswordCredentials',
                                                                                            'CDGenerateRandomBits',
                                                                                            'CredUIPromptForWindowsCredentialsW',
                                                                                            'CredUnPackAuthenticationBufferW',
                                                                                            'CredUIParseUserNameW',
                                                                                            'CredPackAuthenticationBufferW',
                                                                                            'CoTaskMemFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 184,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 57856},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1445bcc87cac845d42f21517a251871f8c949436c9ee15d190ba3328f723b416'},
 '155bb96bc972f227c563e2c3db12ea00d212af6c1fe882e0e944d6b5e1aaa3ee': {'AddressOfEntryPoint': 47331,
                                                                      'DebugRVA': 78320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'HeapSize',
                                                                                      'USER32.dll': 'SendMessageA'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'GetCommandLineA',
                                                                                            'LocalFree',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'DeleteFileA',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'LocalAlloc',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'FreeResource',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'SetStdHandle',
                                                                                            'GetLocalTime',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileType',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'HeapAlloc',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'GetStdHandle',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetHandleCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'DestroyWindow',
                                                                                            'SendMessageA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 100,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 38370064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.reloc\x00\x00': 27648,
                                                                                       '.rsrc\x00\x00\x00': 38370304,
                                                                                       '.text\x00\x00\x00': 72704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/155bb96bc972f227c563e2c3db12ea00d212af6c1fe882e0e944d6b5e1aaa3ee'},
 '15667792199cc764a62e3e61f5380b08298a107b12c7c3d8109d8edbbc11cc7b': {'AddressOfEntryPoint': 17920,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CRYPT32.dll': 'CryptStringToBinaryW',
                                                                                      'VAULTCLI.dll': 'VaultOpenVault',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleOutputCP',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlCaptureContext',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'FreeSid',
                                                                                      'api-ms-win-security-credentials-l1-1-0.dll': 'CredMarshalCredentialW',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError'},
                                                                      'ImportedFunctions': ['?terminate@@YAXXZ',
                                                                                            'fwprintf',
                                                                                            '_iob',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_wsetlocale',
                                                                                            '_XcptFilter',
                                                                                            'wcsstr',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            '_wcsicmp',
                                                                                            'memset',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadStringW',
                                                                                            'GetProcAddress',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'CredFree',
                                                                                            'CredMarshalCredentialW',
                                                                                            'FreeSid',
                                                                                            'CryptStringToBinaryW',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'RtlGUIDFromString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'VaultGetInformation',
                                                                                            'VaultEnumerateItemTypes',
                                                                                            'VaultFree',
                                                                                            'VaultCloseVault',
                                                                                            'VaultEnumerateItems',
                                                                                            'VaultEnumerateVaults',
                                                                                            'VaultGetItemType',
                                                                                            'VaultAddItem',
                                                                                            'VaultRemoveItem',
                                                                                            'VaultOpenVault',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 16384},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/15667792199cc764a62e3e61f5380b08298a107b12c7c3d8109d8edbbc11cc7b'},
 '156fbbf56592342bee40a92b4d469a2517d33bf0c9681e14b19177e2b12280cf': {'AddressOfEntryPoint': 308430,
                                                                      'DebugRVA': 1149712,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1146880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterEventSourceA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'VirtualAllocEx',
                                                                                      'MSVCP100.dll': '?_Xlength_error@std@@YAXPBD@Z',
                                                                                      'MSVCR100.dll': '_stat64i32',
                                                                                      'OLEAUT32.dll': 'SafeArrayLock',
                                                                                      'PSAPI.DLL': 'GetProcessMemoryInfo',
                                                                                      'USER32.dll': 'CreateAcceleratorTableA',
                                                                                      'WININET.dll': 'InternetGetCookieW',
                                                                                      'WS2_32.dll': 'closesocket',
                                                                                      'ole32.dll': 'CLSIDFromProgID',
                                                                                      'urlmon.dll': 'ObtainUserAgentString'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryExA',
                                                                                            'lstrcmpA',
                                                                                            'MulDiv',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetProcessTimes',
                                                                                            'GetSystemTimes',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcessId',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetModuleHandleW',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTickCount',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'SetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'TerminateProcess',
                                                                                            'LockResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleFileNameA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'GlobalMemoryStatus',
                                                                                            'LoadLibraryA',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'GetVersion',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedExchange',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushInstructionCache',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'VirtualFree',
                                                                                            'VirtualProtectEx',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'PostMessageA',
                                                                                            'MoveWindow',
                                                                                            'GetClientRect',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'EnumChildWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'CharNextW',
                                                                                            'PostThreadMessageA',
                                                                                            'GetMessageA',
                                                                                            'CharUpperA',
                                                                                            'GetTopWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'BringWindowToTop',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'GetDesktopWindow',
                                                                                            'SetFocus',
                                                                                            'GetFocus',
                                                                                            'GetWindow',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'CallWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'FillRect',
                                                                                            'ReleaseCapture',
                                                                                            'GetClassNameA',
                                                                                            'GetDlgItem',
                                                                                            'GetParent',
                                                                                            'IsChild',
                                                                                            'SetCapture',
                                                                                            'RedrawWindow',
                                                                                            'InvalidateRgn',
                                                                                            'InvalidateRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'ScreenToClient',
                                                                                            'ClientToScreen',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'RegisterClassExA',
                                                                                            'CharLowerBuffA',
                                                                                            'DefWindowProcA',
                                                                                            'LoadStringA',
                                                                                            'CreateWindowExA',
                                                                                            'UnregisterClassA',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'MessageBoxA',
                                                                                            'SetForegroundWindow',
                                                                                            'CharNextA',
                                                                                            'LoadCursorA',
                                                                                            'GetClassInfoExA',
                                                                                            'DispatchMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowTextA',
                                                                                            'SendMessageA',
                                                                                            'CreateAcceleratorTableA',
                                                                                            'GetStockObject',
                                                                                            'GetObjectA',
                                                                                            'CreateSolidBrush',
                                                                                            'GetDeviceCaps',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'ReportEventA',
                                                                                            'DeregisterEventSource',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegisterEventSourceA',
                                                                                            'CoCreateGuid',
                                                                                            'ProgIDFromCLSID',
                                                                                            'StringFromGUID2',
                                                                                            'OleLockRunning',
                                                                                            'CoGetClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromProgID',
                                                                                            'SafeArrayCreate',
                                                                                            'SysFreeString',
                                                                                            'VarBstrCat',
                                                                                            'VarBstrCmp',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'VarUI4FromStr',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'OleCreateFontIndirect',
                                                                                            'DispCallFunc',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCopy',
                                                                                            'UnRegisterTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'VariantChangeType',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantCopy',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayLock',
                                                                                            '?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z',
                                                                                            '?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z',
                                                                                            '?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z',
                                                                                            '?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ',
                                                                                            '?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z',
                                                                                            '??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z',
                                                                                            '??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?width@ios_base@std@@QBE_JXZ',
                                                                                            '?getloc@ios_base@std@@QBE?AVlocale@2@XZ',
                                                                                            '?flags@ios_base@std@@QBEHXZ',
                                                                                            '?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z',
                                                                                            '?widen@?$ctype@_W@std@@QBE_WD@Z',
                                                                                            '?width@ios_base@std@@QAE_J_J@Z',
                                                                                            '?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z',
                                                                                            '?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ',
                                                                                            '?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ',
                                                                                            '?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ',
                                                                                            '?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?good@ios_base@std@@QBE_NXZ',
                                                                                            '?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?id@?$codecvt@_WDH@std@@2V0locale@2@A',
                                                                                            '?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ',
                                                                                            '?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z',
                                                                                            '?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z',
                                                                                            '?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ',
                                                                                            '??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '?id@?$ctype@_W@std@@2V0locale@2@A',
                                                                                            '??Bid@locale@std@@QAEIXZ',
                                                                                            '?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '?always_noconv@codecvt_base@std@@QBE_NXZ',
                                                                                            '?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?_Orphan_all@_Container_base0@std@@QAEXXZ',
                                                                                            '?_Orphan_all@_Container_base12@std@@QAEXXZ',
                                                                                            '??0_Container_base12@std@@QAE@XZ',
                                                                                            '??1_Container_base12@std@@QAE@XZ',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '_mbsupr_s',
                                                                                            'wcsxfrm',
                                                                                            'iswspace',
                                                                                            'iswprint',
                                                                                            'iswcntrl',
                                                                                            'iswupper',
                                                                                            'iswlower',
                                                                                            'iswalpha',
                                                                                            'iswdigit',
                                                                                            'iswpunct',
                                                                                            'iswxdigit',
                                                                                            'wcstol',
                                                                                            'wcscpy_s',
                                                                                            'towlower',
                                                                                            '_vswprintf_c_l',
                                                                                            'abort',
                                                                                            '_getch',
                                                                                            'signal',
                                                                                            'fputs',
                                                                                            'fprintf',
                                                                                            'strstr',
                                                                                            'sprintf',
                                                                                            'fgets',
                                                                                            'feof',
                                                                                            '_fileno',
                                                                                            '_setmode',
                                                                                            'ferror',
                                                                                            'fopen',
                                                                                            '_wfopen',
                                                                                            '_errno',
                                                                                            '_gmtime64',
                                                                                            'strcmp',
                                                                                            'isxdigit',
                                                                                            'strtoul',
                                                                                            'realloc',
                                                                                            'sscanf',
                                                                                            'memchr',
                                                                                            'isupper',
                                                                                            'tolower',
                                                                                            'isspace',
                                                                                            'strchr',
                                                                                            '__iob_func',
                                                                                            'raise',
                                                                                            '_vsnprintf',
                                                                                            'wcsstr',
                                                                                            'qsort',
                                                                                            'strncpy',
                                                                                            'getenv',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'free',
                                                                                            '_mbsnbcpy_s',
                                                                                            '_mbsstr',
                                                                                            '_mbsnbcmp',
                                                                                            'malloc',
                                                                                            'memcpy_s',
                                                                                            '_CxxThrowException',
                                                                                            'strcpy_s',
                                                                                            'sprintf_s',
                                                                                            '_vscwprintf',
                                                                                            'vswprintf_s',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'strnlen',
                                                                                            'wcsnlen',
                                                                                            '_mbscmp',
                                                                                            '_mbsicmp',
                                                                                            'memmove_s',
                                                                                            '_recalloc',
                                                                                            'calloc',
                                                                                            'memset',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            'memmove',
                                                                                            '_resetstkoflw',
                                                                                            'memcpy',
                                                                                            'strncmp',
                                                                                            'fclose',
                                                                                            'fread',
                                                                                            '_wfopen_s',
                                                                                            '_findclose',
                                                                                            '_wfindfirst64i32',
                                                                                            '_vscprintf',
                                                                                            'vsprintf_s',
                                                                                            'getenv_s',
                                                                                            '_beginthread',
                                                                                            '_stricmp',
                                                                                            'wcsncpy_s',
                                                                                            'strcat_s',
                                                                                            '_wsplitpath_s',
                                                                                            'ftell',
                                                                                            'fseek',
                                                                                            'fwrite',
                                                                                            '_beginthreadex',
                                                                                            '_time64',
                                                                                            '??0bad_cast@std@@QAE@PBD@Z',
                                                                                            '??1bad_cast@std@@UAE@XZ',
                                                                                            '??0bad_cast@std@@QAE@ABV01@@Z',
                                                                                            '_lock_file',
                                                                                            '_unlock_file',
                                                                                            'fgetwc',
                                                                                            'fputwc',
                                                                                            'ungetwc',
                                                                                            'setvbuf',
                                                                                            'fflush',
                                                                                            'ungetc',
                                                                                            'fgetc',
                                                                                            'fgetpos',
                                                                                            '_fseeki64',
                                                                                            'fsetpos',
                                                                                            '_localtime64_s',
                                                                                            '_mktime64',
                                                                                            'printf',
                                                                                            'atoi',
                                                                                            '_mbsrchr',
                                                                                            '_mbsinc',
                                                                                            '_ismbcspace',
                                                                                            '_mbschr',
                                                                                            '_mbsncmp',
                                                                                            '_mbslwr_s',
                                                                                            '_mbspbrk',
                                                                                            'isdigit',
                                                                                            '_strnicmp',
                                                                                            '_mbsnicmp',
                                                                                            '_stat64i32',
                                                                                            'UrlMkSetSessionOption',
                                                                                            'ObtainUserAgentString',
                                                                                            'InternetSetCookieExW',
                                                                                            'InternetSetCookieW',
                                                                                            'InternetSetCookieExA',
                                                                                            'InternetSetCookieA',
                                                                                            'InternetGetCookieExW',
                                                                                            'GetUrlCacheEntryInfoA',
                                                                                            'InternetGetCookieExA',
                                                                                            'InternetGetCookieA',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetSetOptionA',
                                                                                            'InternetOpenA',
                                                                                            'GetUrlCacheEntryInfoExA',
                                                                                            'InternetGetCookieW',
                                                                                            'EnumProcessModules',
                                                                                            'GetProcessMemoryInfo',
                                                                                            '__WSAFDIsSet',
                                                                                            'select',
                                                                                            'WSASetLastError',
                                                                                            'socket',
                                                                                            'setsockopt',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'connect',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'shutdown',
                                                                                            'closesocket'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 484,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 53760,
                                                                                       '.rdata\x00\x00': 383488,
                                                                                       '.reloc\x00\x00': 113664,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 1141760,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/156fbbf56592342bee40a92b4d469a2517d33bf0c9681e14b19177e2b12280cf'},
 '1579095fb4fcc5b336b5bf6b395d24e9985a4c25a9f12e7cf9797804b272c36b': {'AddressOfEntryPoint': 14819,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrcpynA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcpynA',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 65664,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 66048,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1579095fb4fcc5b336b5bf6b395d24e9985a4c25a9f12e7cf9797804b272c36b'},
 '15d6202738aaeffd2719039c114b91c2d92fc6100c592be889ef0ba216e927fc': {'AddressOfEntryPoint': 96244,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127792,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456320,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 89600,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/15d6202738aaeffd2719039c114b91c2d92fc6100c592be889ef0ba216e927fc'},
 '15e9ef8fe24a1ce0ad23911b6ea10d3e56c8586ad310da7b994958f64eac92c1': {'AddressOfEntryPoint': 54336,
                                                                      'DebugRVA': 4272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'IPHLPAPI.DLL': 'Icmp6CreateFile',
                                                                                      'NTDSAPI.dll': 'DsGetDomainControllerInfoW',
                                                                                      'WS2_32.dll': 'socket',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetDateFormatW',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CreateFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'LoadLibraryW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'CreateProcessW',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumValueW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegConnectRegistryW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharUpperW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForSingleObject',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'GetTimeZoneInformation',
                                                                                      'api-ms-win-core-wow64-l1-1-0.dll': 'IsWow64Process',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetSecurityDescriptorDacl',
                                                                                      'api-ms-win-security-provider-l1-1-0.dll': 'SetNamedSecurityInfoW',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'SetServiceStatus',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'OpenSCManagerW',
                                                                                      'api-ms-win-service-management-l2-1-0.dll': 'QueryServiceStatusEx',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'ControlService',
                                                                                      'browcli.dll': 'NetServerEnum',
                                                                                      'cryptdll.dll': 'MD5Update',
                                                                                      'logoncli.dll': 'DsGetDcNameW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netutils.dll': 'NetApiBufferFree'},
                                                                      'ImportedFunctions': ['??0exception@@QAE@XZ',
                                                                                            'wcsspn',
                                                                                            'free',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '_CxxThrowException',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '_ltow',
                                                                                            '?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'wcschr',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_vsnwprintf',
                                                                                            'wcstoul',
                                                                                            'iswalpha',
                                                                                            'iswdigit',
                                                                                            'iswspace',
                                                                                            'memcpy',
                                                                                            '_ftol2',
                                                                                            '__p__fmode',
                                                                                            '_wcsicmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memset',
                                                                                            'GetStdHandle',
                                                                                            'GetCommandLineW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'CharUpperW',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'LoadStringW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeLibrary',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'CreateFileW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'CloseHandle',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'QueryServiceStatusEx',
                                                                                            'OpenEventW',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'RegGetValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'ControlService',
                                                                                            'GetAddrInfoW',
                                                                                            'send',
                                                                                            'WSAIoctl',
                                                                                            'connect',
                                                                                            'GetNameInfoW',
                                                                                            'WSAAddressToStringW',
                                                                                            'WSAStartup',
                                                                                            'FreeAddrInfoW',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'WSAEventSelect',
                                                                                            'WSACleanup',
                                                                                            'recv',
                                                                                            'socket',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'HeapSetInformation',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'IcmpSendEcho',
                                                                                            'Icmp6SendEcho2',
                                                                                            'IcmpCreateFile',
                                                                                            'IcmpCloseHandle',
                                                                                            'Icmp6CreateFile',
                                                                                            'DsGetDcNameW',
                                                                                            'NetApiBufferFree',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegConnectRegistryW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'IsWow64Process',
                                                                                            'NetServerEnum',
                                                                                            'DsFreeDomainControllerInfoW',
                                                                                            'DsUnBindW',
                                                                                            'DsBindW',
                                                                                            'DsGetDomainControllerInfoW',
                                                                                            'MD5Final',
                                                                                            'MD5Init',
                                                                                            'MD5Update',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 37,
                                                                      'NumberOfImportFunctions': 131,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 56832},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/15e9ef8fe24a1ce0ad23911b6ea10d3e56c8586ad310da7b994958f64eac92c1'},
 '15f3090a9d060536f62352a29dfa9ff97f8caeac7f870ae11c66f599583249bf': {'AddressOfEntryPoint': 7488,
                                                                      'DebugRVA': 4752,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'dbgeng.dll': 'DebugCreate',
                                                                                      'msvcrt.dll': '__iob_func'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '__p__fmode',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'fprintf',
                                                                                            'fputs',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__iob_func',
                                                                                            'DebugCreate'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/15f3090a9d060536f62352a29dfa9ff97f8caeac7f870ae11c66f599583249bf'},
 '1629630cf717f6abe87bd15813ff693441ea6ea32785c08eb88fe82c9e05f45f': {'AddressOfEntryPoint': 10328,
                                                                      'DebugRVA': 58112,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LCMapStringW',
                                                                                      'SHLWAPI.dll': 'StrStrIW'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetInformationJobObject',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GenerateConsoleCtrlEvent',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryInformationJobObject',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateJobObjectA',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'GetCommandLineA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'WriteFile',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryW',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'SetStdHandle',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'LCMapStringW',
                                                                                            'StrStrIW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 79,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 20644,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 20992,
                                                                                       '.text\x00\x00\x00': 52736},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1629630cf717f6abe87bd15813ff693441ea6ea32785c08eb88fe82c9e05f45f'},
 '163b66f87979f330fd54847543333695c37a7103a489f385f51eda0c1fa05e90': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 197396,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 197632,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/163b66f87979f330fd54847543333695c37a7103a489f385f51eda0c1fa05e90'},
 '167d9bc91264826a1d24b721aecd6ef5fb02c45c6638c44432d33d67c15cc738': {'AddressOfEntryPoint': 14467,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 38072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 38400,
                                                                                       '.text\x00\x00\x00': 28160},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/167d9bc91264826a1d24b721aecd6ef5fb02c45c6638c44432d33d67c15cc738'},
 '16cb4648f592752f3f98fe5964fd368b2e0db701a2c17c3243a33595b541c26f': {'AddressOfEntryPoint': 77280,
                                                                      'DebugRVA': 33584,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'AllocConsole',
                                                                                      'api-ms-win-core-debug-l1-1-0.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-0.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-0.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-1-0.dll': 'DeleteFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-1-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-1-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-localregistry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-memory-l1-1-0.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-misc-l1-1-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-namedpipe-l1-1-0.dll': 'PeekNamedPipe',
                                                                                      'api-ms-win-core-processenvironment-l1-1-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-0.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-synch-l1-1-0.dll': 'CreateEventA',
                                                                                      'api-ms-win-core-sysinfo-l1-1-0.dll': 'GetSystemInfo',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'Beep',
                                                                                      'dbgeng.dll': 'DebugConnect',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_vsnprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_strnicmp',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'feof',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'fgetwc',
                                                                                            '__iob_func',
                                                                                            'realloc',
                                                                                            'isprint',
                                                                                            '_spawnlp',
                                                                                            'strrchr',
                                                                                            '_stricmp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            'rewind',
                                                                                            '_CxxThrowException',
                                                                                            'getenv',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'calloc',
                                                                                            '??0exception@@QAE@ABQBDH@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            'fopen',
                                                                                            'free',
                                                                                            'wcsstr',
                                                                                            'malloc',
                                                                                            'isspace',
                                                                                            'printf',
                                                                                            '_purecall',
                                                                                            'atoi',
                                                                                            '_callnewh',
                                                                                            '_cexit',
                                                                                            'sscanf_s',
                                                                                            'strtoul',
                                                                                            'memmove',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_strlwr',
                                                                                            'strstr',
                                                                                            'tolower',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'strchr',
                                                                                            'fclose',
                                                                                            'fgets',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_XcptFilter',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'FormatMessageA',
                                                                                            'Sleep',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'SetStdHandle',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetStdHandle',
                                                                                            'ReadConsoleA',
                                                                                            'WriteConsoleA',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'AllocConsole',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetPriorityClass',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentProcessId',
                                                                                            'OutputDebugStringA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'PeekNamedPipe',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExA',
                                                                                            'GetComputerNameExA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'Beep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DebugCreate',
                                                                                            'DebugConnect',
                                                                                            'DelayLoadFailureHook',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 137,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 3824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 7168,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 77312},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/16cb4648f592752f3f98fe5964fd368b2e0db701a2c17c3243a33595b541c26f'},
 '16fe4b3d2c4cde39c0ea555581d8dfb929899c3d650685daa21eff59ae4e8fde': {'AddressOfEntryPoint': 31648,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'GDI32.dll': 'ExtTextOutW',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'SETUPAPI.dll': 'SetupDiOpenClassRegKey',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'USER32.dll': 'CheckDlgButton',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminCalcHashFromFileHandle',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['OpenServiceW',
                                                                                            'QueryServiceConfigW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileAttributesExW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetDateFormatW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'WriteFile',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'SetFilePointer',
                                                                                            'lstrcmpW',
                                                                                            'GetFileSize',
                                                                                            'CompareStringW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MulDiv',
                                                                                            'GetCommandLineW',
                                                                                            'CreateThread',
                                                                                            'HeapSetInformation',
                                                                                            'RegisterApplicationRestart',
                                                                                            'OutputDebugStringW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileAttributesW',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'lstrlenW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SetTextAlign',
                                                                                            'ExtTextOutW',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'DefWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'InvalidateRect',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'GetParent',
                                                                                            'BeginPaint',
                                                                                            'IsDlgButtonChecked',
                                                                                            'PostMessageW',
                                                                                            'FindWindowW',
                                                                                            'SetProcessDPIAware',
                                                                                            'LoadIconW',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyIcon',
                                                                                            'CheckRadioButton',
                                                                                            'EnableWindow',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CharUpperBuffW',
                                                                                            'GetSysColor',
                                                                                            'GetDlgItemTextW',
                                                                                            'EndDialog',
                                                                                            'DestroyWindow',
                                                                                            'SetFocus',
                                                                                            'SetForegroundWindow',
                                                                                            'CreateWindowExW',
                                                                                            'MoveWindow',
                                                                                            'GetClientRect',
                                                                                            'GetWindowRect',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetWindowLongW',
                                                                                            'CharLowerBuffW',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'CheckDlgButton',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'iswctype',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'memset',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHGetFileInfoW',
                                                                                            'CreateStatusWindowW',
                                                                                            'PropertySheetW',
                                                                                            'StrStrIW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'pSetupConcatenatePaths',
                                                                                            'pSetupStringFromGuid',
                                                                                            'SetupDiBuildClassInfoList',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupOpenFileQueue',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupScanFileQueueW',
                                                                                            'SetupCloseFileQueue',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiOpenClassRegKey',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'CryptCATCatalogInfoFromContext',
                                                                                            'CryptCATAdminReleaseCatalogContext',
                                                                                            'CryptCATAdminAcquireContext',
                                                                                            'CryptCATAdminReleaseContext',
                                                                                            'IsCatalogFile',
                                                                                            'CryptCATAdminEnumCatalogFromHash',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'CertFreeCertificateContext'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 164,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 32600,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 32768,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/16fe4b3d2c4cde39c0ea555581d8dfb929899c3d650685daa21eff59ae4e8fde'},
 '1731e53de5f48baae0963677257660df1329549e81c48b4d7db7f7f3f2329aab': {'AddressOfEntryPoint': 22898,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'ReadFile',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenProcessToken',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5208,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 49154048,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1731e53de5f48baae0963677257660df1329549e81c48b4d7db7f7f3f2329aab'},
 '173fe71b45998cba39f596daf4afcad7a0dcfa7ff0a1f3f7a77bca9e44b78a0e': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 19808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 19968,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/173fe71b45998cba39f596daf4afcad7a0dcfa7ff0a1f3f7a77bca9e44b78a0e'},
 '1753c1e8e2fed023af4fd2f1bc6a403f45136513bf0ae246a77be4bf2d8a2f3b': {'AddressOfEntryPoint': 77056,
                                                                      'DebugRVA': 34304,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'ReadConsoleA',
                                                                                      'api-ms-win-core-debug-l1-1-0.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-0.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-0.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-1-0.dll': 'DeleteFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-1-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-libraryloader-l1-1-0.dll': 'GetModuleFileNameA',
                                                                                      'api-ms-win-core-localregistry-l1-1-0.dll': 'RegOpenKeyExA',
                                                                                      'api-ms-win-core-memory-l1-1-0.dll': 'VirtualQuery',
                                                                                      'api-ms-win-core-misc-l1-1-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-namedpipe-l1-1-0.dll': 'PeekNamedPipe',
                                                                                      'api-ms-win-core-processenvironment-l1-1-0.dll': 'SetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-0.dll': 'CreateProcessA',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-1-0.dll': 'DeleteCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-1-0.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'Beep',
                                                                                      'dbgeng.dll': 'DebugConnect',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['??1exception@@UAE@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '_XcptFilter',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'fopen',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memcpy',
                                                                                            '__iob_func',
                                                                                            'realloc',
                                                                                            'isprint',
                                                                                            '__p__commode',
                                                                                            '_spawnlp',
                                                                                            'strrchr',
                                                                                            '??0exception@@QAE@ABQBDH@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '_callnewh',
                                                                                            'strtoul',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'rewind',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            'fgetwc',
                                                                                            '_onexit',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'feof',
                                                                                            'tolower',
                                                                                            '_vsnprintf',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            'getenv',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'free',
                                                                                            'wcsstr',
                                                                                            'malloc',
                                                                                            'isspace',
                                                                                            'printf',
                                                                                            '_purecall',
                                                                                            'memmove',
                                                                                            '_unlock',
                                                                                            '_strlwr',
                                                                                            'strstr',
                                                                                            'strchr',
                                                                                            'fclose',
                                                                                            'fgets',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'FormatMessageA',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'InitializeCriticalSection',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'EnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetStdHandle',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'AllocConsole',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'ReadConsoleA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFileType',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'CreateFileA',
                                                                                            'DeleteFileW',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'SetThreadPriority',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'OutputDebugStringA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'PeekNamedPipe',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemInfo',
                                                                                            'GetComputerNameExA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Beep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DebugCreate',
                                                                                            'DebugConnect',
                                                                                            'DelayLoadFailureHook',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 134,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 7168,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 77312},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1753c1e8e2fed023af4fd2f1bc6a403f45136513bf0ae246a77be4bf2d8a2f3b'},
 '1754075df4d4401dd6204149ab61fb7eec16f5b6df045fc59daf80b3c89a9716': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 90308,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 90624,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1754075df4d4401dd6204149ab61fb7eec16f5b6df045fc59daf80b3c89a9716'},
 '1795e55a21685950e13465873866a4cb79bf6c958f121c124dbcd8d75f155e04': {'AddressOfEntryPoint': 14304,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventUnregister',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'bcd.dll': 'BcdOpenSystemStore',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'EventWrite',
                                                                                            'InitiateShutdownW',
                                                                                            'EventRegister',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'EventUnregister',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapSetInformation',
                                                                                            'CompareStringW',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'LoadStringW',
                                                                                            '_fmode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_commode',
                                                                                            'memset',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'BcdCloseStore',
                                                                                            'BcdCloseObject',
                                                                                            'BcdSetElementData',
                                                                                            'BcdOpenObject',
                                                                                            'BcdOpenSystemStore'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 56,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 73256,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 73728,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/1795e55a21685950e13465873866a4cb79bf6c958f121c124dbcd8d75f155e04'},
 '17c797002eb4e301cf1b7ef92b24999053f2cbe9407ec6f9718fa9a136c3f003': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 42656,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 43008,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/17c797002eb4e301cf1b7ef92b24999053f2cbe9407ec6f9718fa9a136c3f003'},
 '17efb7ca5f719d6a8c08791c355caecaf77b29b02383bc8badf078e086a0acc8': {'AddressOfEntryPoint': 26992,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'LoadLibraryExW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'POWRPROF.dll': 'PowerDeterminePlatformRole',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlFreeUnicodeString',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'FreeLibrary',
                                                                                            'HeapAlloc',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'GetFileSizeEx',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetProcAddress',
                                                                                            'GetLocalTime',
                                                                                            'CreateFileMappingW',
                                                                                            'LocaleNameToLCID',
                                                                                            'CreateEventW',
                                                                                            'GetProductInfo',
                                                                                            'GetSystemInfo',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetFileTime',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'MapViewOfFile',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryExW',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            '__p__fmode',
                                                                                            'wcstok',
                                                                                            'strtoul',
                                                                                            '_vsnwprintf',
                                                                                            'wcsstr',
                                                                                            'strtok',
                                                                                            'atoi',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_ftol2',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            'strstr',
                                                                                            'wcstoul',
                                                                                            'swscanf',
                                                                                            '_strnicmp',
                                                                                            'wcschr',
                                                                                            '_wtof',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_getmbcp',
                                                                                            '_setmode',
                                                                                            '_iob',
                                                                                            '_fileno',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'wprintf',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'wcsrchr',
                                                                                            'memset',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'CoGetMalloc',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'PowerDeterminePlatformRole'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 107,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/17efb7ca5f719d6a8c08791c355caecaf77b29b02383bc8badf078e086a0acc8'},
 '18682853485a2a5c8a11fff6a5685e182edc22646cc321fce0a1abfe498743c8': {'AddressOfEntryPoint': 343367,
                                                                      'DebugRVA': 539616,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 536576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityDescriptorDacl',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'VirtualFree',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'OLEAUT32.dll': 'VariantChangeType',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'DefWindowProcW',
                                                                                      'gdiplus.dll': 'GdipDisposeImage',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GdiplusShutdown',
                                                                                            'GdipLoadImageFromStream',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDeletePen',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawRectangleI',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipDrawImageRectRectI',
                                                                                            'GdipCreateFontFamilyFromName',
                                                                                            'GdipDeleteFontFamily',
                                                                                            'GdipGetGenericFontFamilySansSerif',
                                                                                            'GdipCreateFont',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipDrawString',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage',
                                                                                            'SystemFunction036',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'EncryptFileW',
                                                                                            'DecryptFileW',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'SetFileSecurityW',
                                                                                            'GetFileSecurityW',
                                                                                            'RevertToSelf',
                                                                                            'SetThreadToken',
                                                                                            'OpenThreadToken',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'OpenEncryptedFileRawW',
                                                                                            'ReadEncryptedFileRaw',
                                                                                            'WriteEncryptedFileRaw',
                                                                                            'CloseEncryptedFileRaw',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegSetKeySecurity',
                                                                                            'SetSecurityInfo',
                                                                                            'GetTokenInformation',
                                                                                            'IsValidSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'GetExitCodeProcess',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiW',
                                                                                            'CreateMutexW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'FindResourceW',
                                                                                            'CopyFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetLastError',
                                                                                            'SetErrorMode',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'CreateEventA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemInfo',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetCommandLineW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MulDiv',
                                                                                            'LoadLibraryW',
                                                                                            'LockResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GetLogicalDrives',
                                                                                            'FindClose',
                                                                                            'GetDriveTypeA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetProcessWorkingSetSize',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GetCurrentProcess',
                                                                                            'LockFileEx',
                                                                                            'UnlockFileEx',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'FlushFileBuffers',
                                                                                            'DeviceIoControl',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CreateHardLinkW',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'GetVolumePathNameW',
                                                                                            'CompareStringW',
                                                                                            'GetCurrentThreadId',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'FindNextChangeNotification',
                                                                                            'FindCloseChangeNotification',
                                                                                            'GetCurrentThread',
                                                                                            'ExitThread',
                                                                                            'LoadLibraryA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FindResourceExW',
                                                                                            'EnumResourceNamesW',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetFileTime',
                                                                                            'BackupRead',
                                                                                            'BackupSeek',
                                                                                            'BackupWrite',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'LocalAlloc',
                                                                                            'TerminateProcess',
                                                                                            'WideCharToMultiByte',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'RtlUnwind',
                                                                                            'CreateThread',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetStringTypeW',
                                                                                            'OutputDebugStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetVersion',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetFileAttributesW',
                                                                                            'ReadConsoleW',
                                                                                            'LCMapStringA',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreA',
                                                                                            'SetThreadPriority',
                                                                                            'GetThreadPriority',
                                                                                            'TerminateThread',
                                                                                            'VirtualFree',
                                                                                            'wsprintfW',
                                                                                            'CreateWindowExA',
                                                                                            'RegisterClassExA',
                                                                                            'DefWindowProcA',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'CharUpperBuffW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetWindowRect',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowPos',
                                                                                            'PostMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'LoadImageW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'MessageBoxW',
                                                                                            'GetSystemMetrics',
                                                                                            'CharNextW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'ShowWindow',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'DefWindowProcW',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'BitBlt',
                                                                                            'GetDeviceCaps',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFolderPathW',
                                                                                            'WNetCloseEnum',
                                                                                            'WNetGetUniversalNameW',
                                                                                            'WNetEnumResourceW',
                                                                                            'WNetAddConnection3W',
                                                                                            'WNetOpenEnumW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'CoInitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'VarUI4FromStr',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'PathAddBackslashW',
                                                                                            'PathAppendW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 292,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 395412,
                                                                      'SectionNames': {'.data\x00\x00\x00': 18432,
                                                                                       '.rdata\x00\x00': 519680,
                                                                                       '.reloc\x00\x00': 43008,
                                                                                       '.rsrc\x00\x00\x00': 395776,
                                                                                       '.text\x00\x00\x00': 530944,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/18682853485a2a5c8a11fff6a5685e182edc22646cc321fce0a1abfe498743c8'},
 '18a0defb57e307a84fb497d096a7834ab6ba59d7683dca00d99dbfab64e5e2c4': {'AddressOfEntryPoint': 64688,
                                                                      'DebugRVA': 4672,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'IsTextUnicode',
                                                                                      'CRYPT32.dll': 'CertOpenStore',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'SHLWAPI.dll': 'StrCmpW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryW',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'GetACP',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalFree',
                                                                                            'DeleteFileW',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetTempPathW',
                                                                                            'CopyFileW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetTempFileNameW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleExA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'wcscat_s',
                                                                                            'wcstok_s',
                                                                                            'memcpy',
                                                                                            '_purecall',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'iswdigit',
                                                                                            'fclose',
                                                                                            '_wsetlocale',
                                                                                            'towupper',
                                                                                            'setlocale',
                                                                                            'fputws',
                                                                                            'iswxdigit',
                                                                                            '__iob_func',
                                                                                            'fwprintf',
                                                                                            'swprintf_s',
                                                                                            '_wfopen_s',
                                                                                            'wcstol',
                                                                                            'toupper',
                                                                                            '_wcslwr',
                                                                                            'towlower',
                                                                                            'memset',
                                                                                            'LoadStringW',
                                                                                            'StrCmpW',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CryptMsgClose',
                                                                                            'CryptMsgUpdate',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptVerifyDetachedMessageSignature',
                                                                                            'CryptSignMessage',
                                                                                            'CertDuplicateCertificateChain',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CryptDecodeObject',
                                                                                            'CryptBinaryToStringW',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertGetCertificateChain',
                                                                                            'CertCloseStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertFindExtension',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CertGetEnhancedKeyUsage',
                                                                                            'CertOpenStore',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'EventActivityIdControl',
                                                                                            'TraceMessage',
                                                                                            'IsTextUnicode'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 124,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 62976},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/18a0defb57e307a84fb497d096a7834ab6ba59d7683dca00d99dbfab64e5e2c4'},
 '18cee4dd64171378598e362309bee02e6a4b16119aeef5d19fa8384766debdf1': {'AddressOfEntryPoint': 5664,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'msvcrt.dll': '_exit'},
                                                                      'ImportedFunctions': ['LoadLibraryExW',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassW',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongW',
                                                                                            'LoadIconW',
                                                                                            'PostQuitMessage',
                                                                                            'TranslateMessage',
                                                                                            'LoadCursorW',
                                                                                            'PostMessageW',
                                                                                            'DispatchMessageW',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__setusermatherr',
                                                                                            '_except_handler4_common',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_controlfp',
                                                                                            '_exit'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 20568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 20992,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/18cee4dd64171378598e362309bee02e6a4b16119aeef5d19fa8384766debdf1'},
 '18d3606f52a3771524b02e4191bbcd9ac1a31bf603e80df62d2f6037cd6ed471': {'AddressOfEntryPoint': 25256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'Framework.dll': '?log@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDHPEBVCCafException@2@@Z',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCP90.dll': '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@0@Z',
                                                                                      'MSVCR90.dll': '__CxxFrameHandler3',
                                                                                      'ProviderFx.dll': '?createSchema@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCSchemaDoc@Caf@@V?$TCafObject@VCSchemaDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@@std@@@std@@V?$deque@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                      'glib-2.0.dll': 'g_atomic_int_dec_and_test'},
                                                                      'ImportedFunctions': ['g_atomic_int_inc',
                                                                                            'g_atomic_int_dec_and_test',
                                                                                            '?doesDirectoryExist@FileSystemUtils@Caf@@SA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??1CCafException@Caf@@UEAA@XZ',
                                                                                            '?throwAddRefedSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '??1CLogger@Caf@@UEAA@XZ',
                                                                                            '?populate@CCafException@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@J00@Z',
                                                                                            '??0UnsupportedOperationException@Caf@@QEAA@XZ',
                                                                                            '?AddRef@CCafException@Caf@@UEAAXXZ',
                                                                                            '?Release@CCafException@Caf@@UEAAXXZ',
                                                                                            '?QueryInterface@CCafException@Caf@@UEAAXAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?throwSelf@UnsupportedOperationException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@UnsupportedOperationException@Caf@@UEAAXXZ',
                                                                                            '?getMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getFullMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '??1UnsupportedOperationException@Caf@@UEAA@XZ',
                                                                                            '??0CLogger@Caf@@QEAA@PEBD@Z',
                                                                                            '?getName@CAttachmentDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getUri@CAttachmentDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?findRequiredAttachment@AttachmentUtils@Caf@@SA?AV?$TCafSmartPtr@VCAttachmentDoc@Caf@@V?$TCafObject@VCAttachmentDoc@Caf@@@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$TCafSmartPtr@VCAttachmentCollectionDoc@Caf@@V?$TCafObject@VCAttachmentCollectionDoc@Caf@@@@@@@Z',
                                                                                            '?notNullPtr@CValidate@Caf@@SAXPEBXPEBD11@Z',
                                                                                            '?runSyncToFiles@ProcessUtils@Caf@@SAXAEBV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@1W4Priority@12@V54@@Z',
                                                                                            '?INHERIT_PARENT_DIRECTORY@ProcessUtils@Caf@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B',
                                                                                            '?_sStderrFilename@Caf@@3PEBDEB',
                                                                                            '?buildPath@FileSystemUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@0@Z',
                                                                                            '?_sStdoutFilename@Caf@@3PEBDEB',
                                                                                            '?notEmptyStr@CValidate@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD11@Z',
                                                                                            '?populateVA@CCafException@Caf@@QEAAXJAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PEBDZZ',
                                                                                            '??0InvalidArgumentException@Caf@@QEAA@XZ',
                                                                                            '?chmod@FileSystemUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z',
                                                                                            '?saveTextFile@FileSystemUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4FILE_MODE_TYPE@12@V34@@Z',
                                                                                            '?parseFileAddress@UriUtils@Caf@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAUSFileUriRecord@12@@Z',
                                                                                            '?logVA@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDH1ZZ',
                                                                                            '?parseUriString@UriUtils@Caf@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAUSUriRecord@12@@Z',
                                                                                            '?isTrue@CValidate@Caf@@SAX_NPEBD11@Z',
                                                                                            '?getIsReference@CAttachmentDoc@Caf@@QEBA_NXZ',
                                                                                            '?findRequiredParameterAsString@ParameterUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@AEBV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@@Z',
                                                                                            '?findOptionalParameterAsStringCollection@ParameterUtils@Caf@@SA?AV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@AEBV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@@Z',
                                                                                            '?createDirectory@FileSystemUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z',
                                                                                            '?throwSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '?getOutputDir@CProviderInvokeOperationDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getParameterCollection@COperationDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@XZ',
                                                                                            '?getName@COperationDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getOperation@CProviderInvokeOperationDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCOperationDoc@Caf@@V?$TCafObject@VCOperationDoc@Caf@@@@@@XZ',
                                                                                            '?throwSelf@InvalidArgumentException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@InvalidArgumentException@Caf@@UEAAXXZ',
                                                                                            '??1InvalidArgumentException@Caf@@UEAA@XZ',
                                                                                            '??0CCafException@Caf@@QEAA@XZ',
                                                                                            '?log@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDHPEBVCCafException@2@@Z',
                                                                                            '?processProviderCommandline@CProviderDriver@Caf@@SAHAEAUIInvokedProvider@2@HQEAPEAD@Z',
                                                                                            '?createMethodParameter@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PARAMETER_TYPE@2@_N2@Z',
                                                                                            '?createMethod@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$deque@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCInstanceParameterDoc@Caf@@V?$TCafObject@VCInstanceParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCInstanc',
                                                                                            '?createActionClass@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$TCafSmartPtr@VCCollectMethodDoc@Caf@@V?$TCafObject@VCCollectMethodDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '?createSchema@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCSchemaDoc@Caf@@V?$TCafObject@VCSchemaDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@@std@@@std@@V?$deque@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@PEBD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAHPEBD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@0@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'Sleep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 114,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.rdata\x00\x00': 25088,
                                                                                       '.text\x00\x00\x00': 32256},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/18d3606f52a3771524b02e4191bbcd9ac1a31bf603e80df62d2f6037cd6ed471'},
 '18fade2b94b018d175b899c0a209bbed35fc3c2d92ce655af0ca3094193b9ef4': {'AddressOfEntryPoint': 94645,
                                                                      'DebugRVA': 298192,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 229376,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'FreeEnvironmentStringsW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['SHGetFolderPathW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'RegCloseKey',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'SetSecurityInfo',
                                                                                            'GetSecurityInfo',
                                                                                            'SetEntriesInAclW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'PathFileExistsW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'ReadConsoleW',
                                                                                            'HeapSize',
                                                                                            'SetEvent',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'VerSetConditionMask',
                                                                                            'GetCommandLineW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileSizeEx',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'GetTickCount',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalFree',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'SetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'CreateEventW',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCPInfo',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeSListHead',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetACP',
                                                                                            'GetFileType',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetProcessHeap',
                                                                                            'FindFirstFileExA',
                                                                                            'FindNextFileA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 107,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 312416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 84480,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 312832,
                                                                                       '.text\x00\x00\x00': 223744,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/18fade2b94b018d175b899c0a209bbed35fc3c2d92ce655af0ca3094193b9ef4'},
 '193cd70a73e750a178eb91b05b8a15f988b1499cb77c37c9a9f2e2e22d98ce59': {'AddressOfEntryPoint': 39006,
                                                                      'DebugRVA': 38764,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2160,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/193cd70a73e750a178eb91b05b8a15f988b1499cb77c37c9a9f2e2e22d98ce59'},
 '19634f10bb4590444179e79ed857460f39f07456b8a7bb3d7ac6ccd70c9b965f': {'AddressOfEntryPoint': 12505,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'PostQuitMessage',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['Sleep',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTickCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'GetFileSize',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrlenA',
                                                                                            'lstrcpynA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetFullPathNameA',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'GlobalLock',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'EnableMenuItem',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetDlgItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'LoadImageA',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'PostQuitMessage',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 159,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 91488,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 91648,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/19634f10bb4590444179e79ed857460f39f07456b8a7bb3d7ac6ccd70c9b965f'},
 '197521c1b8b28de64851ef75068b15359d7e504d7b3c26db4da87993cb2f3db1': {'AddressOfEntryPoint': 38194,
                                                                      'DebugRVA': 4624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSidSubAuthority',
                                                                                      'KERNEL32.dll': 'lstrcpyW',
                                                                                      'MSVCP60.dll': '??1_Lockit@std@@QAE@XZ',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINSPOOL.DRV': 'EnumPrintersW',
                                                                                      'msvcrt.dll': '__winitenv'},
                                                                      'ImportedFunctions': ['SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetCurrentThreadId',
                                                                                            'lstrcmpW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentProcess',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'SetLastError',
                                                                                            'lstrcatW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpyW',
                                                                                            '_CxxThrowException',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__wgetmainargs',
                                                                                            '__CxxFrameHandler',
                                                                                            'wprintf',
                                                                                            '_wcsrev',
                                                                                            '_wtol',
                                                                                            'wcstok',
                                                                                            'wcscmp',
                                                                                            'wcscpy',
                                                                                            'wcschr',
                                                                                            'malloc',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'fwprintf',
                                                                                            '_wfopen',
                                                                                            'fclose',
                                                                                            'fgetws',
                                                                                            'free',
                                                                                            '_except_handler3',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '__winitenv',
                                                                                            '??0_Lockit@std@@QAE@XZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'IsValidSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'LookupAccountNameW',
                                                                                            'LookupAccountSidW',
                                                                                            'AddAce',
                                                                                            'GetAce',
                                                                                            'InitializeAcl',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'SetFileSecurityW',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorSacl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetAclInformation',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'DeleteAce',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'GetFileSecurityW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'GetSidSubAuthority',
                                                                                            'wsprintfW',
                                                                                            'LoadStringW',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'EnumPrintersW',
                                                                                            'NetShareEnum',
                                                                                            'NetShareGetInfo',
                                                                                            'NetLocalGroupEnum',
                                                                                            'NetGroupEnum',
                                                                                            'NetLocalGroupGetMembers',
                                                                                            'NetLocalGroupDelMembers',
                                                                                            'NetLocalGroupAddMembers',
                                                                                            'NetServerGetInfo',
                                                                                            'NetGetDCName',
                                                                                            'NetApiBufferFree'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 123,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 9728,
                                                                                       '.text\x00\x00\x00': 43520},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/197521c1b8b28de64851ef75068b15359d7e504d7b3c26db4da87993cb2f3db1'},
 '19d9c153832efa40d8522a5bc4bc8eff7ad3f224d98431d12664beea5a4073f3': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 9736,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/19d9c153832efa40d8522a5bc4bc8eff7ad3f224d98431d12664beea5a4073f3'},
 '1a0d4fe1b3758b1e8a66fb1aabc92590acfc543d66e5efe6779206c426b412e1': {'AddressOfEntryPoint': 377976,
                                                                      'DebugRVA': 652256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 507904,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SystemFunction036',
                                                                                      'COMDLG32.dll': 'ChooseColorA',
                                                                                      'GDI32.dll': 'ExtTextOutA',
                                                                                      'IMM32.dll': 'ImmSetCompositionFontA',
                                                                                      'KERNEL32.dll': 'GetVersionExA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'InvalidateRect',
                                                                                      'WINMM.dll': 'PlaySoundA',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetUserNameA',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'RegCreateKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'SystemFunction036',
                                                                                            'ChooseFontA',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetSaveFileNameA',
                                                                                            'ChooseColorA',
                                                                                            'CreateFontIndirectA',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'TextOutA',
                                                                                            'CreateFontA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextExtentExPointA',
                                                                                            'SetMapMode',
                                                                                            'GetTextMetricsA',
                                                                                            'Rectangle',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreatePalette',
                                                                                            'CreatePen',
                                                                                            'ExcludeClipRect',
                                                                                            'GetBkMode',
                                                                                            'GetCharWidthA',
                                                                                            'GetCharWidthW',
                                                                                            'GetCharWidth32A',
                                                                                            'GetCharWidth32W',
                                                                                            'GetCharABCWidthsFloatA',
                                                                                            'GetPixel',
                                                                                            'TranslateCharsetInfo',
                                                                                            'GetCharacterPlacementW',
                                                                                            'IntersectClipRect',
                                                                                            'LineTo',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'SetBkMode',
                                                                                            'SetPaletteEntries',
                                                                                            'SetPixel',
                                                                                            'SetTextAlign',
                                                                                            'UpdateColors',
                                                                                            'GetObjectA',
                                                                                            'MoveToEx',
                                                                                            'CreateBitmap',
                                                                                            'ExtTextOutW',
                                                                                            'Polyline',
                                                                                            'UnrealizeObject',
                                                                                            'ExtTextOutA',
                                                                                            'ImmReleaseContext',
                                                                                            'ImmGetCompositionStringW',
                                                                                            'ImmGetContext',
                                                                                            'ImmSetCompositionWindow',
                                                                                            'ImmSetCompositionFontA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'ShellExecuteA',
                                                                                            'PeekMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'DestroyWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'MessageBoxIndirectA',
                                                                                            'FindWindowA',
                                                                                            'GetQueueStatus',
                                                                                            'GetClipboardOwner',
                                                                                            'WinHelpA',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'SetClassLongA',
                                                                                            'ScreenToClient',
                                                                                            'SetCaretPos',
                                                                                            'ShowCaret',
                                                                                            'HideCaret',
                                                                                            'DestroyCaret',
                                                                                            'CreateCaret',
                                                                                            'GetCursorPos',
                                                                                            'SetCursor',
                                                                                            'ShowCursor',
                                                                                            'SetForegroundWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'UpdateWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'DeleteMenu',
                                                                                            'AppendMenuA',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateMenu',
                                                                                            'GetSystemMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ToAsciiEx',
                                                                                            'SetKeyboardState',
                                                                                            'GetKeyboardState',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'GetClipboardData',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'OpenClipboard',
                                                                                            'IsZoomed',
                                                                                            'IsIconic',
                                                                                            'FlashWindow',
                                                                                            'IsWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'GetDoubleClickTime',
                                                                                            'DefWindowProcW',
                                                                                            'PostMessageA',
                                                                                            'GetMessageTime',
                                                                                            'PeekMessageW',
                                                                                            'InsertMenuA',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetKeyboardLayout',
                                                                                            'IsDialogMessageA',
                                                                                            'LoadIconA',
                                                                                            'LoadCursorA',
                                                                                            'GetParent',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowLongA',
                                                                                            'SetActiveWindow',
                                                                                            'EnableWindow',
                                                                                            'ReleaseCapture',
                                                                                            'GetCapture',
                                                                                            'DefDlgProcA',
                                                                                            'EndDialog',
                                                                                            'DialogBoxParamA',
                                                                                            'CreateDialogParamA',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowPlacement',
                                                                                            'MoveWindow',
                                                                                            'PostQuitMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowLongA',
                                                                                            'MessageBeep',
                                                                                            'MessageBoxA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SetCapture',
                                                                                            'SetFocus',
                                                                                            'SendDlgItemMessageA',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckRadioButton',
                                                                                            'CheckDlgButton',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'DrawEdge',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetCaretBlinkTime',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetSysColor',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowTextA',
                                                                                            'InvalidateRect',
                                                                                            'PlaySoundA',
                                                                                            'EnumPrintersA',
                                                                                            'OpenPrinterA',
                                                                                            'StartDocPrinterA',
                                                                                            'StartPagePrinter',
                                                                                            'WritePrinter',
                                                                                            'EndPagePrinter',
                                                                                            'EndDocPrinter',
                                                                                            'ClosePrinter',
                                                                                            'SetEndOfFile',
                                                                                            'HeapSize',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CreateFileW',
                                                                                            'GetProcessHeap',
                                                                                            'SetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'IsValidCodePage',
                                                                                            'FindFirstFileExA',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadConsoleW',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FlushFileBuffers',
                                                                                            'DecodePointer',
                                                                                            'LCMapStringW',
                                                                                            'CompareStringW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetStringTypeW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'OutputDebugStringW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetLastError',
                                                                                            'RtlUnwind',
                                                                                            'LoadLibraryExW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetStartupInfoW',
                                                                                            'IsDebuggerPresent',
                                                                                            'InitializeSListHead',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetACP',
                                                                                            'GetLocalTime',
                                                                                            'DeleteFileA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'CreateMutexA',
                                                                                            'ReleaseMutex',
                                                                                            'SetCommTimeouts',
                                                                                            'SetCommState',
                                                                                            'SetCommBreak',
                                                                                            'GetCommState',
                                                                                            'ClearCommBreak',
                                                                                            'OpenProcess',
                                                                                            'CreatePipe',
                                                                                            'SetHandleInformation',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateNamedPipeA',
                                                                                            'ConnectNamedPipe',
                                                                                            'WaitNamedPipeA',
                                                                                            'LocalFree',
                                                                                            'CreateFileA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'RaiseException',
                                                                                            'GetSystemTimeAdjustment',
                                                                                            'GetSystemTime',
                                                                                            'GetThreadTimes',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcessTimes',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'FormatMessageA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CreateEventA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetOverlappedResult',
                                                                                            'GetLastError',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateFileMappingA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetTickCount',
                                                                                            'GetProcAddress',
                                                                                            'MulDiv',
                                                                                            'Beep',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'GetVersionExA'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 324,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 11960,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 154624,
                                                                                       '.reloc\x00\x00': 24576,
                                                                                       '.rsrc\x00\x00\x00': 12288,
                                                                                       '.text\x00\x00\x00': 502272},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1a0d4fe1b3758b1e8a66fb1aabc92590acfc543d66e5efe6779206c426b412e1'},
 '1aa3927c7985386d42759656665c7b422ee226df16a19446af6d9a6613b8ae9b': {'AddressOfEntryPoint': 47669,
                                                                      'DebugRVA': 144096,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 143360,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'COMCTL32.dll': 'PropertySheetA',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'HeapDestroy',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'SetDlgItemTextA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'FreeLibrary',
                                                                                            'SetStdHandle',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryW',
                                                                                            'InterlockedExchange',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'RtlUnwind',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetHandleCount',
                                                                                            'FatalAppExitA',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'DeleteFileA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileA',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateDirectoryA',
                                                                                            'SetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetProcessHeap',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'WriteFile',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileType',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'HeapReAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'wsprintfA',
                                                                                            'GetFocus',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'GetDlgItem',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetParent',
                                                                                            'PostMessageA',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'CreateFontA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'TextOutA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateSolidBrush',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'ShellExecuteA',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 161,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 42496,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 137728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1aa3927c7985386d42759656665c7b422ee226df16a19446af6d9a6613b8ae9b'},
 '1b1e9e25b04b9b16aed36e639e3316cb7b72a5539e7359cdd6d1979470cdef57': {'AddressOfEntryPoint': 5424,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'IPHLPAPI.DLL': 'GetUdpTable',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'WS2_32.dll': 'inet_ntoa'},
                                                                      'ImportedFunctions': ['GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTcpTable',
                                                                                            'GetUdpTable',
                                                                                            'ntohs',
                                                                                            'inet_ntoa',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_configthreadlocale',
                                                                                            '_crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'strcpy_s',
                                                                                            'printf',
                                                                                            'atoi',
                                                                                            '__set_app_type'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1b1e9e25b04b9b16aed36e639e3316cb7b72a5539e7359cdd6d1979470cdef57'},
 '1b4d6834ccef1d4dc58434394387ff9b53ba55e15185b91743ddac6ac8d4724f': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 70764,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 71168,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1b4d6834ccef1d4dc58434394387ff9b53ba55e15185b91743ddac6ac8d4724f'},
 '1b7d61208f0095224775101aeb182759ce85ccbb5e0a13cbae3d88c5fe7e7acb': {'AddressOfEntryPoint': 28748,
                                                                      'DebugRVA': 38160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyW',
                                                                                      'KERNEL32.dll': 'OutputDebugStringW',
                                                                                      'MSVCP90.dll': '?_Lock@_Mutex@std@@QEAAXXZ',
                                                                                      'MSVCR90.dll': '_decode_pointer',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'USERENV.dll': 'GetProfileType',
                                                                                      'hgfs.dll': 'HgfsUri_ConvertFromUtf16ToHgfsUri',
                                                                                      'vmtools.dll': 'Debug'},
                                                                      'ImportedFunctions': ['RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'StrCmpW',
                                                                                            'PathIsPrefixW',
                                                                                            'PathFileExistsW',
                                                                                            'GetProfileType',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_CxxThrowException',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '_vsnwprintf_s',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            'strchr',
                                                                                            'malloc',
                                                                                            '??8type_info@@QEBA_NAEBV0@@Z',
                                                                                            '_purecall',
                                                                                            'strstr',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_decode_pointer',
                                                                                            'UtilSafeRealloc0',
                                                                                            'Log',
                                                                                            'Warning',
                                                                                            'Win32U_RegQueryValueEx',
                                                                                            'Win32U_SHCopyKey',
                                                                                            'Unicode_Join',
                                                                                            'Win32U_RegCreateKeyEx',
                                                                                            'Win32U_RegOpenKeyEx',
                                                                                            'Win32U_SHDeleteKey',
                                                                                            'Hostinfo_GetOSType',
                                                                                            'UtilSafeMalloc0',
                                                                                            'xdr_pointer',
                                                                                            'xdr_array',
                                                                                            'xdr_string',
                                                                                            'xdr_enum',
                                                                                            'VmCheck_IsVirtualWorld',
                                                                                            'DynXdr_Create',
                                                                                            'DynXdr_Destroy',
                                                                                            'DynXdr_AppendRaw',
                                                                                            'DynXdr_Get',
                                                                                            'RpcOut_SendOneRaw',
                                                                                            'Unicode_GetAllocBytes',
                                                                                            'Unicode_AllocWithLength',
                                                                                            'Unicode_UTF16Strlen',
                                                                                            'Debug',
                                                                                            'HgfsUri_ConvertFromUtf16ToHgfsUri',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W0@Z',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?_Unlock@_Mutex@std@@QEAAXXZ',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '?allocate@?$allocator@_W@std@@QEAAPEA_W_K@Z',
                                                                                            '?deallocate@?$allocator@_W@std@@QEAAXPEA_W_K@Z',
                                                                                            '?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ',
                                                                                            '?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z',
                                                                                            '?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z',
                                                                                            '?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W@Z',
                                                                                            '??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAXXZ',
                                                                                            '?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AEAV10@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z',
                                                                                            '?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV12@_K0@Z',
                                                                                            '?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_K_W_K@Z',
                                                                                            '?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2_KB',
                                                                                            '??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@H@Z',
                                                                                            '?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@_K0@Z',
                                                                                            '?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_K_W_K@Z',
                                                                                            '?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KPEB_W_K@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z',
                                                                                            '??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PEB_W@Z',
                                                                                            '?_Lock@_Mutex@std@@QEAAXXZ',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCommandLineW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'CopyFileW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'OutputDebugStringW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 145,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 19272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 25600,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 32768},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1b7d61208f0095224775101aeb182759ce85ccbb5e0a13cbae3d88c5fe7e7acb'},
 '1b8fb3b474542bf6309491cf8d146e8a0f7b060ff238bc2d646fb6af62f766d4': {'AddressOfEntryPoint': 23401,
                                                                      'DebugRVA': 4624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GlobalFree',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'lstrlenA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'lstrcatA',
                                                                                            'lstrcpyA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetShortPathNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcmpiA',
                                                                                            'GetProcAddress',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'FreeResource',
                                                                                            'CloseHandle',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'LoadLibraryExA',
                                                                                            'lstrcpynA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FormatMessageA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'TerminateThread',
                                                                                            'GetDriveTypeA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'LockResource',
                                                                                            'LoadLibraryA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'MulDiv',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'FreeLibrary',
                                                                                            'GlobalFree',
                                                                                            'GetDeviceCaps',
                                                                                            'ExitWindowsEx',
                                                                                            'wsprintfA',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'CharPrevA',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'CallWindowProcA',
                                                                                            'DispatchMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'SendMessageA',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetWindowRect',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBeep',
                                                                                            'SetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 125,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 123321728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 123321856,
                                                                                       '.text\x00\x00\x00': 34816},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1b8fb3b474542bf6309491cf8d146e8a0f7b060ff238bc2d646fb6af62f766d4'},
 '1bcb85d1e686e576682d651e34b90af6c886be5519d45d6f659765f25de5b7f1': {'AddressOfEntryPoint': 13012,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTickCount',
                                                                                            'lstrcmpiA',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'lstrcmpA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetCurrentProcess',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'EndDialog',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'TrackPopupMenu',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 131856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 132096,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1bcb85d1e686e576682d651e34b90af6c886be5519d45d6f659765f25de5b7f1'},
 '1bd10be42e4cea3e466f8ff7f43dad0556c8b9df924cc975f8126a487f302fd7': {'AddressOfEntryPoint': 78989,
                                                                      'DebugRVA': 172736,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 172032,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitiateSystemShutdownW',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'WINHTTP.dll': 'WinHttpCloseHandle'},
                                                                      'ImportedFunctions': ['GetCurrentProcessId',
                                                                                            'Process32FirstW',
                                                                                            'OpenProcess',
                                                                                            'TerminateProcess',
                                                                                            'Process32NextW',
                                                                                            'CreateFileW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'FreeResource',
                                                                                            'SetEndOfFile',
                                                                                            'ReadConsoleW',
                                                                                            'WriteConsoleW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapReAlloc',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'SetStdHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleExW',
                                                                                            'ExitProcess',
                                                                                            'IsDebuggerPresent',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'LCMapStringW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetStartupInfoW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapFree',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'GetCPInfo',
                                                                                            'HeapAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'Sleep',
                                                                                            'TranslateMessage',
                                                                                            'TranslateAcceleratorW',
                                                                                            'DispatchMessageW',
                                                                                            'SendMessageW',
                                                                                            'GetMessageW',
                                                                                            'wsprintfW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'DialogBoxParamW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'PostMessageW',
                                                                                            'EndDialog',
                                                                                            'PostQuitMessage',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'GetSaveFileNameW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'InitiateSystemShutdownW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'PathCombineW',
                                                                                            'StrCmpW',
                                                                                            'PathFileExistsW',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpCloseHandle'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 127,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15928160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 48128,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 15928320,
                                                                                       '.text\x00\x00\x00': 167936},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1bd10be42e4cea3e466f8ff7f43dad0556c8b9df924cc975f8126a487f302fd7'},
 '1bd26ba55f884a38dc4204eee93fe4397e34b8c8301badbd8bac3a419415b2f5': {'AddressOfEntryPoint': 6207,
                                                                      'DebugRVA': 4272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSidSubAuthority',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': '__p__commode'},
                                                                      'ImportedFunctions': ['GetSidSubAuthorityCount',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'IsValidSid',
                                                                                            'EqualSid',
                                                                                            'LookupAccountNameA',
                                                                                            'GetSidSubAuthority',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'printf',
                                                                                            '_vsnwprintf',
                                                                                            '__p__commode',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'SetLastError',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 34,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1bd26ba55f884a38dc4204eee93fe4397e34b8c8301badbd8bac3a419415b2f5'},
 '1be356672a180059735991a50072c6bd2ef4a8209d2af8c12ceafbc0cdf62f0d': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1be356672a180059735991a50072c6bd2ef4a8209d2af8c12ceafbc0cdf62f0d'},
 '1c3924ad8d9fb31809c669bb7f5c97b4386b6f5dd713c6816b08a408efdb39c1': {'AddressOfEntryPoint': 2498211,
                                                                      'DebugRVA': 2792528,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2777088,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenServiceW',
                                                                                      'COMDLG32.dll': 'CommDlgExtendedError',
                                                                                      'GDI32.dll': 'TextOutA',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'MSVCP120.dll': '?_Xbad_alloc@std@@YAXXZ',
                                                                                      'MSVCR120.dll': 'modf',
                                                                                      'Qt5Core.dll': '??0QVariant@@QAE@_N@Z',
                                                                                      'Qt5Gui.dll': '??0QPalette@@QAE@XZ',
                                                                                      'Qt5Multimedia.dll': '??0QAudioFormat@@QAE@XZ',
                                                                                      'Qt5PrintSupport.dll': '??1QPrintDialog@@UAE@XZ',
                                                                                      'Qt5Widgets.dll': '?dropEvent@QTextEdit@@MAEXPAVQDropEvent@@@Z',
                                                                                      'Qt5WinExtras.dll': '??0QWinTaskbarButton@@QAE@PAVQObject@@@Z',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'SetFocus',
                                                                                      'WSOCK32.dll': 'WSACleanup',
                                                                                      'WinSparkle.dll': 'win_sparkle_init',
                                                                                      'libglib-2.0-0.dll': 'g_string_chunk_new',
                                                                                      'libgmodule-2.0-0.dll': 'g_module_symbol',
                                                                                      'libwireshark.dll': 'proto_get_protocol_name',
                                                                                      'libwiretap.dll': 'wtap_phdr_init',
                                                                                      'libwscodecs.dll': 'register_all_codecs',
                                                                                      'libwsutil.dll': 'profile_store_persconffiles'},
                                                                      'ImportedFunctions': ['GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'VerSetConditionMask',
                                                                                            'GetVersionExW',
                                                                                            'lstrlenW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetOverlappedResult',
                                                                                            'GetCommandLineW',
                                                                                            'ConnectNamedPipe',
                                                                                            'AllocConsole',
                                                                                            'ReadFile',
                                                                                            'TerminateProcess',
                                                                                            'CreateNamedPipeW',
                                                                                            'PeekNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'SetConsoleTitleA',
                                                                                            'AttachConsole',
                                                                                            'FreeConsole',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateProcessW',
                                                                                            'CreateEventW',
                                                                                            'CreatePipe',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'LocalFree',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetProcAddress',
                                                                                            'GetExitCodeProcess',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalHandle',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetParent',
                                                                                            'MessageBoxA',
                                                                                            'PeekMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'SetFocus',
                                                                                            'SetAbortProc',
                                                                                            'EndPage',
                                                                                            'StartPage',
                                                                                            'EndDoc',
                                                                                            'StartDocA',
                                                                                            'GetTextMetricsA',
                                                                                            'SetMapMode',
                                                                                            'DeleteDC',
                                                                                            'TextOutA',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'PrintDlgA',
                                                                                            'CommDlgExtendedError',
                                                                                            '?printEngine@QPrinter@@QBEPAVQPrintEngine@@XZ',
                                                                                            '?setColorMode@QPrinter@@QAEXW4ColorMode@1@@Z',
                                                                                            '?setOutputFileName@QPrinter@@QAEXABVQString@@@Z',
                                                                                            '?setOutputFormat@QPrinter@@QAEXW4OutputFormat@1@@Z',
                                                                                            '?setVisible@QPrintPreviewWidget@@UAEX_N@Z',
                                                                                            '?setVisible@QPrintDialog@@UAEX_N@Z',
                                                                                            '?setVisible@QPageSetupDialog@@UAEX_N@Z',
                                                                                            '?qt_metacast@QPrintPreviewWidget@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QPrintDialog@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QPageSetupDialog@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QPrintPreviewWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QPrintDialog@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QPageSetupDialog@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?metaObject@QPrintPreviewWidget@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QPrintDialog@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QPageSetupDialog@@UBEPBUQMetaObject@@XZ',
                                                                                            '?exec@QPageSetupDialog@@UAEHXZ',
                                                                                            '?done@QPrintDialog@@UAEXH@Z',
                                                                                            '?done@QPageSetupDialog@@UAEXH@Z',
                                                                                            '??1QPageSetupDialog@@UAE@XZ',
                                                                                            '??0QPageSetupDialog@@QAE@PAVQPrinter@@PAVQWidget@@@Z',
                                                                                            '?updatePreview@QPrintPreviewWidget@@QAEXXZ',
                                                                                            '?fitInView@QPrintPreviewWidget@@QAEXXZ',
                                                                                            '?setZoomFactor@QPrintPreviewWidget@@QAEXN@Z',
                                                                                            '?zoomOut@QPrintPreviewWidget@@QAEXN@Z',
                                                                                            '?zoomIn@QPrintPreviewWidget@@QAEXN@Z',
                                                                                            '??1QPrintPreviewWidget@@UAE@XZ',
                                                                                            '??0QPrintPreviewWidget@@QAE@PAVQPrinter@@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?pageRect@QPrinter@@QBE?AVQRect@@XZ',
                                                                                            '?setDocName@QPrinter@@QAEXABVQString@@@Z',
                                                                                            '?printerName@QPrinter@@QBE?AVQString@@XZ',
                                                                                            '??1QPrinter@@UAE@XZ',
                                                                                            '??0QPrinter@@QAE@W4PrinterMode@0@@Z',
                                                                                            '?exec@QPrintDialog@@UAEHXZ',
                                                                                            '??0QPrintDialog@@QAE@PAVQPrinter@@PAVQWidget@@@Z',
                                                                                            '??1QPrintDialog@@UAE@XZ',
                                                                                            '?qt_metacast@QAudioOutput@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QAudioOutput@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?metaObject@QAudioOutput@@UBEPBUQMetaObject@@XZ',
                                                                                            '?state@QAudioOutput@@QBE?AW4State@QAudio@@XZ',
                                                                                            '?processedUSecs@QAudioOutput@@QBE_JXZ',
                                                                                            '?setNotifyInterval@QAudioOutput@@QAEXH@Z',
                                                                                            '?stop@QAudioOutput@@QAEXXZ',
                                                                                            '?start@QAudioOutput@@QAEXPAVQIODevice@@@Z',
                                                                                            '??1QAudioOutput@@UAE@XZ',
                                                                                            '??0QAudioOutput@@QAE@ABVQAudioFormat@@PAVQObject@@@Z',
                                                                                            '?setSampleType@QAudioFormat@@QAEXW4SampleType@1@@Z',
                                                                                            '?setCodec@QAudioFormat@@QAEXABVQString@@@Z',
                                                                                            '?setSampleSize@QAudioFormat@@QAEXH@Z',
                                                                                            '?setChannelCount@QAudioFormat@@QAEXH@Z',
                                                                                            '?setSampleRate@QAudioFormat@@QAEXH@Z',
                                                                                            '??1QAudioFormat@@QAE@XZ',
                                                                                            '??0QAudioFormat@@QAE@XZ',
                                                                                            '?reset@QWinTaskbarProgress@@QAEXXZ',
                                                                                            '?qt_metacast@QWinTaskbarButton@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QWinTaskbarButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?metaObject@QWinTaskbarButton@@UBEPBUQMetaObject@@XZ',
                                                                                            '?eventFilter@QWinTaskbarButton@@UAE_NPAVQObject@@PAVQEvent@@@Z',
                                                                                            '?hide@QWinTaskbarProgress@@QAEXXZ',
                                                                                            '?show@QWinTaskbarProgress@@QAEXXZ',
                                                                                            '??1QWinTaskbarButton@@UAE@XZ',
                                                                                            '?progress@QWinTaskbarButton@@QBEPAVQWinTaskbarProgress@@XZ',
                                                                                            '?setWindow@QWinTaskbarButton@@QAEXPAVQWindow@@@Z',
                                                                                            '??0QWinTaskbarButton@@QAE@PAVQObject@@@Z',
                                                                                            'codec_register_plugin_types',
                                                                                            'ws_codec_resampler_init',
                                                                                            'ws_codec_resampler_destroy',
                                                                                            'ws_codec_resampler_process_int',
                                                                                            'ws_codec_resampler_set_rate',
                                                                                            'ws_codec_resampler_get_rate',
                                                                                            'ws_codec_resampler_skip_zeros',
                                                                                            'ws_codec_resampler_reset_mem',
                                                                                            'find_codec',
                                                                                            'codec_init',
                                                                                            'codec_release',
                                                                                            'codec_get_channels',
                                                                                            'codec_get_frequency',
                                                                                            'codec_decode',
                                                                                            'register_all_codecs',
                                                                                            'stats_tree_free',
                                                                                            'stats_tree_packet',
                                                                                            'stats_tree_new',
                                                                                            'stats_tree_presentation',
                                                                                            'wmem_memdup',
                                                                                            'mtp3_service_indicator_code_short_vals',
                                                                                            'uat_save',
                                                                                            'uat_clear',
                                                                                            'uat_add_record',
                                                                                            'uat_fld_chk_enum',
                                                                                            'uat_fld_chk_num_dec',
                                                                                            'uat_fld_chk_str',
                                                                                            'uat_load',
                                                                                            'uat_new',
                                                                                            'remove_tap_listener',
                                                                                            'proto_get_finfo_ptr_array',
                                                                                            'proto_registrar_get_ftype',
                                                                                            'fvalue_get_floating',
                                                                                            'fvalue_get_sinteger64',
                                                                                            'fvalue_get_uinteger64',
                                                                                            'fvalue_get_sinteger',
                                                                                            'fvalue_get',
                                                                                            'register_tap_listener',
                                                                                            'funnel_reload_menus',
                                                                                            'funnel_register_all_menus',
                                                                                            'funnel_set_funnel_ops',
                                                                                            'expert_severity_vals',
                                                                                            'expert_group_vals',
                                                                                            'register_stat_tap_ui',
                                                                                            'col_get_text',
                                                                                            'val_to_str_const',
                                                                                            'expert_get_highest_severity',
                                                                                            'wslua_count_plugins',
                                                                                            'register_count',
                                                                                            'free_stat_tables',
                                                                                            'reset_stat_table',
                                                                                            'new_stat_tap_get_field_data',
                                                                                            'srt_table_get_tap_string',
                                                                                            'srt_table_dissector_init',
                                                                                            'reset_srt_table',
                                                                                            'get_srt_packet_func',
                                                                                            'get_srt_tap_listener_name',
                                                                                            'get_srt_proto_id',
                                                                                            'rtd_table_get_tap_string',
                                                                                            'rtd_table_dissector_init',
                                                                                            'reset_rtd_table',
                                                                                            'free_rtd_table',
                                                                                            'get_rtd_value_string',
                                                                                            'get_rtd_packet_func',
                                                                                            'get_rtd_tap_listener_name',
                                                                                            'get_rtd_proto_id',
                                                                                            'get_average',
                                                                                            'pfilter_expression_head',
                                                                                            'stats_tree_get_cfg_list',
                                                                                            'tap_listeners_dfilter_recompile',
                                                                                            'wslua_reload_plugins',
                                                                                            'find_conversation_filter',
                                                                                            'dfilter_macro_get_uat',
                                                                                            'color_filters_reset_tmp',
                                                                                            'color_filters_tmp_color',
                                                                                            'color_filters_set_tmp',
                                                                                            'tmp_color_filters_used',
                                                                                            'get_node_field_value',
                                                                                            'proto_construct_match_selected_string',
                                                                                            'proto_can_match_selected',
                                                                                            'proto_is_frame_protocol',
                                                                                            'proto_get_frame_protocols',
                                                                                            'proto_registrar_is_protocol',
                                                                                            'proto_registrar_get_parent',
                                                                                            'proto_free_deregistered_fields',
                                                                                            'geoip_db_lookup_ipv6',
                                                                                            'geoip_db_lookup_ipv4',
                                                                                            'geoip_db_name',
                                                                                            'geoip_db_num_dbs',
                                                                                            'get_hostlist_filter',
                                                                                            'reset_hostlist_table_data',
                                                                                            'get_hostlist_packet_func',
                                                                                            'get_conversation_filter',
                                                                                            'get_conversation_port',
                                                                                            'get_conversation_address',
                                                                                            'reset_conversation_table_data',
                                                                                            'get_conversation_by_proto_id',
                                                                                            'get_conversation_packet_func',
                                                                                            'get_conversation_proto_id',
                                                                                            'get_conversation_hide_ports',
                                                                                            'set_tap_dfilter',
                                                                                            'proto_get_protocol_filter_name',
                                                                                            'proto_get_protocol_short_name',
                                                                                            'find_protocol_by_id',
                                                                                            'proto_get_id_by_short_name',
                                                                                            'draw_tap_listeners',
                                                                                            'proto_enable_all',
                                                                                            'read_prefs',
                                                                                            'prefs_clear_string_list',
                                                                                            'prefs_reset',
                                                                                            'color_filters_reload',
                                                                                            'read_disabled_heur_dissector_list',
                                                                                            'read_disabled_protos_list',
                                                                                            'host_name_lookup_process',
                                                                                            'conv_filter_list',
                                                                                            'ext_menubar_get_entries',
                                                                                            'plugin_if_register_gui_cb',
                                                                                            'color_filter_list_delete',
                                                                                            'color_filter_new',
                                                                                            'color_filters_write',
                                                                                            'color_filters_apply',
                                                                                            'color_filters_clone',
                                                                                            'get_column_width_string',
                                                                                            'get_column_custom_fields',
                                                                                            'set_column_resolved',
                                                                                            'get_column_resolved',
                                                                                            'set_column_visible',
                                                                                            'get_column_visible',
                                                                                            'get_column_title',
                                                                                            'col_format_to_string',
                                                                                            'find_conversation',
                                                                                            'get_data_source_tvb',
                                                                                            'get_data_source_name',
                                                                                            'col_cleanup',
                                                                                            'proto_find_field_from_offset',
                                                                                            'proto_all_finfos',
                                                                                            'proto_registrar_get_byname',
                                                                                            'proto_registrar_get_abbrev',
                                                                                            'gbl_resolv_flags',
                                                                                            'color_filters_export',
                                                                                            'color_filters_import',
                                                                                            'packet_range_convert_str',
                                                                                            'packet_range_check',
                                                                                            'range_convert_range',
                                                                                            'print_stream_ps_new',
                                                                                            'print_stream_text_new',
                                                                                            'tvb_get_ptr',
                                                                                            'wmem_free',
                                                                                            'prefs_register_string_preference',
                                                                                            'prefs_find_preference',
                                                                                            'prefs_find_module',
                                                                                            'tvb_new',
                                                                                            'tvb_ws_mempbrk_pattern_guint8',
                                                                                            'stats_tree_get_values_from_node',
                                                                                            'write_csv_columns',
                                                                                            'write_csv_column_titles',
                                                                                            'write_psml_finale',
                                                                                            'write_psml_columns',
                                                                                            'write_psml_preamble',
                                                                                            'write_json_finale',
                                                                                            'write_json_proto_tree',
                                                                                            'write_json_preamble',
                                                                                            'write_pdml_finale',
                                                                                            'write_pdml_proto_tree',
                                                                                            'write_pdml_preamble',
                                                                                            'print_hex_data',
                                                                                            'proto_tree_print',
                                                                                            'packet_range_process_packet',
                                                                                            'packet_range_process_init',
                                                                                            'packet_range_init',
                                                                                            'dfilter_apply_edt',
                                                                                            'tap_build_interesting',
                                                                                            'reset_tap_listeners',
                                                                                            'stats_tree_get_cfg_by_abbr',
                                                                                            'union_of_tap_listener_flags',
                                                                                            'ber_set_filename',
                                                                                            'dfilter_macro_build_ftv_cache',
                                                                                            'convert_string_case',
                                                                                            'add_ipv4_name',
                                                                                            'add_ipv6_name',
                                                                                            'add_ip_name_from_string',
                                                                                            'get_addrinfo_list',
                                                                                            'new_frame_data_sequence',
                                                                                            'frame_data_sequence_add',
                                                                                            'frame_data_sequence_find',
                                                                                            'free_frame_data_sequence',
                                                                                            'find_and_mark_frame_depended_upon',
                                                                                            'dfilter_free',
                                                                                            'print_preamble',
                                                                                            'print_line',
                                                                                            'print_bookmark',
                                                                                            'new_page',
                                                                                            'print_finale',
                                                                                            'destroy_print_stream',
                                                                                            'stats_tree_sort_compare',
                                                                                            'stats_tree_format_as_str',
                                                                                            'format_text',
                                                                                            'is_broadcast_bssid',
                                                                                            'tvb_captured_length',
                                                                                            'frame_data_compare',
                                                                                            'get_column_tooltip',
                                                                                            'prefs_apply',
                                                                                            'prefs_is_registered_protocol',
                                                                                            'prefs_pref_foreach',
                                                                                            'proto_get_id_by_filter_name',
                                                                                            'proto_get_protocol_long_name',
                                                                                            'fvalue_to_string_repr',
                                                                                            'tree_expanded',
                                                                                            'tree_expanded_set',
                                                                                            'num_tree_types',
                                                                                            'address_to_str',
                                                                                            'address_to_display',
                                                                                            'val_to_str_wmem',
                                                                                            'val_to_str_ext_wmem',
                                                                                            'proto_check_field_name',
                                                                                            'dfilter_deprecated_tokens',
                                                                                            'ftype_pretty_name',
                                                                                            'proto_get_first_protocol',
                                                                                            'proto_get_next_protocol',
                                                                                            'proto_get_first_protocol_field',
                                                                                            'proto_get_next_protocol_field',
                                                                                            'proto_is_protocol_enabled',
                                                                                            'dissector_table_foreach_handle',
                                                                                            'col_format_desc',
                                                                                            'set_column_format',
                                                                                            'set_column_title',
                                                                                            'set_column_custom_fields',
                                                                                            'get_column_custom_occurrence',
                                                                                            'set_column_custom_occurrence',
                                                                                            'filter_expression_new',
                                                                                            'range_convert_str',
                                                                                            'ranges_are_equal',
                                                                                            'range_copy',
                                                                                            'prefs_pref_to_str',
                                                                                            'convert_string_to_hex',
                                                                                            'conversation_table_get_num',
                                                                                            'get_conversation_table_by_num',
                                                                                            'get_follow_proto_id',
                                                                                            'epan_get_user_comment',
                                                                                            'sua_co_class_type_acro_values',
                                                                                            'sccp_message_type_acro_values',
                                                                                            't30_facsimile_control_field_vals_short_ext',
                                                                                            'get_follow_tap_string',
                                                                                            't30_facsimile_control_field_vals_ext',
                                                                                            't38_T30_data_vals',
                                                                                            't38_T30_indicator_vals',
                                                                                            'rtp_event_type_values_ext',
                                                                                            'q931_message_type_vals',
                                                                                            'q931_cause_code_vals_ext',
                                                                                            'isup_message_type_value_acro_ext',
                                                                                            'h225_RasMessage_vals',
                                                                                            'find_tap_id',
                                                                                            'rtp_dyn_payload_get_name',
                                                                                            'wmem_strdup',
                                                                                            'tvb_memcpy',
                                                                                            'tvb_get_ntohl',
                                                                                            'tvb_get_ntohs',
                                                                                            'tvb_get_guint8',
                                                                                            'epan_dissect_fake_protocols',
                                                                                            'p_get_proto_data',
                                                                                            'try_val_to_str',
                                                                                            'in_cksum',
                                                                                            'string_replace',
                                                                                            'geoip_db_type',
                                                                                            'decode_dcerpc_reset_all',
                                                                                            'dissector_handle_get_protocol_index',
                                                                                            'dissector_table_get_type',
                                                                                            'dissector_table_get_dissector_handles',
                                                                                            'ex_opt_count',
                                                                                            'ex_opt_get_next',
                                                                                            'register_all_protocols',
                                                                                            'register_all_protocol_handoffs',
                                                                                            'epan_register_plugin_types',
                                                                                            'epan_init',
                                                                                            'epan_cleanup',
                                                                                            'epan_get_compiled_version_info',
                                                                                            'epan_get_runtime_version_info',
                                                                                            'register_all_plugin_tap_listeners',
                                                                                            'new_stat_tap_iterate_tables',
                                                                                            'start_requested_stats',
                                                                                            'build_column_format_array',
                                                                                            'set_disabled_protos_list',
                                                                                            'proto_disable_proto_by_name',
                                                                                            'set_disabled_heur_dissector_list',
                                                                                            'proto_enable_heuristic_by_name',
                                                                                            'color_filters_init',
                                                                                            'prefs_apply_all',
                                                                                            'dfilter_compile',
                                                                                            'rtd_table_iterate_tables',
                                                                                            'srt_table_iterate_tables',
                                                                                            'timestamp_set_type',
                                                                                            'timestamp_set_precision',
                                                                                            'timestamp_set_seconds_type',
                                                                                            'conversation_table_set_gui_info',
                                                                                            'hostlist_table_set_gui_info',
                                                                                            'AirPDcapInitContext',
                                                                                            'AirPDcapDestroyContext',
                                                                                            'prefs',
                                                                                            'airpdcap_ctx',
                                                                                            'try_capture_dissector',
                                                                                            'except_setup_try',
                                                                                            'except_pop',
                                                                                            'except_rethrow',
                                                                                            'except_free',
                                                                                            'frame_data_reset',
                                                                                            'frame_data_destroy',
                                                                                            'frame_data_init',
                                                                                            'frame_data_set_before_dissect',
                                                                                            'frame_data_set_after_dissect',
                                                                                            'epan_new',
                                                                                            'epan_free',
                                                                                            'epan_dissect_init',
                                                                                            'epan_dissect_new',
                                                                                            'epan_dissect_reset',
                                                                                            'epan_dissect_run',
                                                                                            'epan_dissect_run_with_taps',
                                                                                            'epan_dissect_prime_dfilter',
                                                                                            'epan_dissect_fill_in_columns',
                                                                                            'epan_dissect_cleanup',
                                                                                            'epan_dissect_free',
                                                                                            'col_custom_prime_edt',
                                                                                            'have_custom_cols',
                                                                                            'have_field_extractors',
                                                                                            'col_has_time_fmt',
                                                                                            'get_column_format',
                                                                                            'get_column_char_width',
                                                                                            'fvalue_get_uinteger',
                                                                                            'proto_tree_children_foreach',
                                                                                            'proto_item_fill_label',
                                                                                            'postseq_cleanup_all_protocols',
                                                                                            'expert_update_comment_count',
                                                                                            'color_filters_cleanup',
                                                                                            'stats_tree_get_displayname',
                                                                                            'have_filtering_tap_listeners',
                                                                                            'stats_tree_get_column_name',
                                                                                            'find_dissector_table',
                                                                                            'dissector_change_uint',
                                                                                            'dissector_change_string',
                                                                                            'get_follow_by_name',
                                                                                            'get_follow_conv_func',
                                                                                            'get_follow_index_func',
                                                                                            'get_follow_port_to_display',
                                                                                            'get_follow_tap_handler',
                                                                                            'follow_reset_stream',
                                                                                            'get_tcp_stream_count',
                                                                                            'get_udp_stream_count',
                                                                                            'address_to_name',
                                                                                            'EBCDIC_to_ASCII',
                                                                                            'prefs_module_has_submodules',
                                                                                            'prefs_modules_foreach_submodules',
                                                                                            'prefs_pref_type_name',
                                                                                            'prefs_pref_type_description',
                                                                                            'oid_get_default_mib_path',
                                                                                            'geoip_db_get_paths',
                                                                                            'wslua_plugins_get_descriptions',
                                                                                            'wmem_packet_scope',
                                                                                            'wmem_strdup_printf',
                                                                                            'epan_get_interface_name',
                                                                                            'print_uuid',
                                                                                            'print_numeric_uuid',
                                                                                            'wmem_alloc',
                                                                                            'wmem_file_scope',
                                                                                            'val_to_str_ext_const',
                                                                                            'get_ether_name',
                                                                                            'bluetooth_company_id_vals_ext',
                                                                                            'bthci_evt_lmp_version',
                                                                                            'bthci_evt_hci_version',
                                                                                            'get_conversation_hashtable_exact',
                                                                                            'get_conversation_hashtable_no_addr2',
                                                                                            'get_conversation_hashtable_no_port2',
                                                                                            'get_conversation_hashtable_no_addr2_or_port2',
                                                                                            'proto_can_toggle_protocol',
                                                                                            'proto_get_id',
                                                                                            'proto_heuristic_dissector_foreach',
                                                                                            'proto_set_decoding',
                                                                                            'save_disabled_protos_list',
                                                                                            'save_disabled_heur_dissector_list',
                                                                                            'wmem_list_head',
                                                                                            'wmem_list_frame_next',
                                                                                            'wmem_list_frame_data',
                                                                                            'dtbl_entry_get_handle',
                                                                                            'dtbl_entry_get_initial_handle',
                                                                                            'dissector_all_tables_foreach_changed',
                                                                                            'get_dissector_table_ui_name',
                                                                                            'get_dissector_table_selector_type',
                                                                                            'get_dissector_table_param',
                                                                                            'dissector_reset_uint',
                                                                                            'dissector_get_default_uint_handle',
                                                                                            'dissector_reset_string',
                                                                                            'dissector_get_default_string_handle',
                                                                                            'dissector_handle_get_short_name',
                                                                                            'decode_dcerpc_add_show_list',
                                                                                            'decode_as_list',
                                                                                            'ftype_can_slice',
                                                                                            'ftype_can_eq',
                                                                                            'ftype_can_ne',
                                                                                            'ftype_can_gt',
                                                                                            'ftype_can_ge',
                                                                                            'ftype_can_lt',
                                                                                            'ftype_can_le',
                                                                                            'ftype_can_contains',
                                                                                            'ftype_can_matches',
                                                                                            'proto_initialize_all_prefixes',
                                                                                            'tfs_true_false',
                                                                                            'dissector_table_foreach',
                                                                                            'dissector_all_tables_foreach_table',
                                                                                            'heur_dissector_table_foreach',
                                                                                            'dissector_all_heur_tables_foreach_table',
                                                                                            'dissector_handle_get_dissector_name',
                                                                                            'get_export_pdu_tap_list',
                                                                                            'address_to_str_buf',
                                                                                            'bytes_to_str',
                                                                                            'set_fd_time',
                                                                                            'port_type_to_str',
                                                                                            'wmem_map_foreach',
                                                                                            'get_hash_ether_hexaddr',
                                                                                            'get_hash_ether_resolved_name',
                                                                                            'get_hash_manuf_resolved_name',
                                                                                            'get_manuf_hashtable',
                                                                                            'get_wka_hashtable',
                                                                                            'get_eth_hashtable',
                                                                                            'get_serv_port_hashtable',
                                                                                            'get_ipv4_hash_table',
                                                                                            'get_ipv6_hash_table',
                                                                                            'rtp_payload_type_short_vals_ext',
                                                                                            'epan_dissect_prime_hfid',
                                                                                            'proto_registrar_get_id_byname',
                                                                                            'tvb_free',
                                                                                            'tvb_reported_length',
                                                                                            'tvb_uncompress',
                                                                                            'uat_get_actual_filename',
                                                                                            'uat_update_record',
                                                                                            'uat_remove_record_idx',
                                                                                            'guid_cmp',
                                                                                            'dcerpc_get_proto_sub_dissector',
                                                                                            'set_srt_table_param_data',
                                                                                            'get_srt_table_by_name',
                                                                                            'dcerpc_uuids',
                                                                                            'rpc_progs',
                                                                                            'EBCDIC_to_ASCII1',
                                                                                            'col_fill_in_frame_data',
                                                                                            'col_fill_in_error',
                                                                                            'col_based_on_frame_data',
                                                                                            'color_filters_used',
                                                                                            'color_filters_prime_edt',
                                                                                            'bthci_cmd_scan_enable_values',
                                                                                            'bthci_cmd_encrypt_mode_vals',
                                                                                            'bthci_cmd_authentication_enable_values',
                                                                                            'bthci_cmd_inq_modes',
                                                                                            'prefs_capture_device_monitor_mode',
                                                                                            'chunk_type_values',
                                                                                            'try_val_to_str_ext',
                                                                                            'prefs_is_capture_device_hidden',
                                                                                            'ex_opt_get_nth',
                                                                                            'read_prefs_file',
                                                                                            'prefs_get_string_list',
                                                                                            'join_string_list',
                                                                                            'get_column_format_from_str',
                                                                                            'val_to_str',
                                                                                            'str_to_val',
                                                                                            'ex_opt_add',
                                                                                            'disable_name_resolution',
                                                                                            'string_to_name_resolve',
                                                                                            'prefs_set_pref',
                                                                                            'process_stat_cmd_arg',
                                                                                            'list_stat_cmd_args',
                                                                                            'read_keytab_file',
                                                                                            'ssl_session_hash',
                                                                                            'ssl_crandom_hash',
                                                                                            'proto_registrar_get_nth',
                                                                                            'write_prefs',
                                                                                            'write_carrays_hex_data',
                                                                                            'proto_get_protocol_name',
                                                                                            'win_sparkle_set_appcast_url',
                                                                                            'win_sparkle_set_update_check_interval',
                                                                                            'win_sparkle_check_update_with_ui',
                                                                                            'win_sparkle_cleanup',
                                                                                            'win_sparkle_set_automatic_check_for_updates',
                                                                                            'win_sparkle_set_registry_path',
                                                                                            'win_sparkle_init',
                                                                                            '?qt_metacast@QMenuBar@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QStackedWidget@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QToolBar@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QWidget@@UAEPAXPBD@Z',
                                                                                            '?resizeEvent@QMenuBar@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?setVisible@QMenuBar@@UAEX_N@Z',
                                                                                            '?sizeHint@QCheckBox@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QFrame@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QLineEdit@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QMenuBar@@UBE?AVQSize@@XZ',
                                                                                            '?timerEvent@QMenuBar@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?staticMetaObject@QWidget@@2UQMetaObject@@B',
                                                                                            '?staticMetaObject@QTreeWidget@@2UQMetaObject@@B',
                                                                                            '??0QApplication@@QAE@AAHPAPADH@Z',
                                                                                            '?styleSheet@QApplication@@QBE?AVQString@@XZ',
                                                                                            '?setStyleSheet@QApplication@@QAEXABVQString@@@Z',
                                                                                            '?event@QApplication@@MAE_NPAVQEvent@@@Z',
                                                                                            '?customCount@QColorDialog@@SAHXZ',
                                                                                            '?customColor@QColorDialog@@SA?AVQColor@@H@Z',
                                                                                            '?setCustomColor@QColorDialog@@SAXHVQColor@@@Z',
                                                                                            '?compressEvent@QApplication@@MAE_NPAVQEvent@@PAVQObject@@PAVQPostEventList@@@Z',
                                                                                            '?notify@QApplication@@UAE_NPAVQObject@@PAVQEvent@@@Z',
                                                                                            '?addTab@QTabWidget@@QAEHPAVQWidget@@ABVQString@@@Z',
                                                                                            '?currentWidget@QTabWidget@@QBEPAVQWidget@@XZ',
                                                                                            '?widget@QTabWidget@@QBEPAVQWidget@@H@Z',
                                                                                            '?count@QTabWidget@@QBEHXZ',
                                                                                            '??0QTreeWidgetItem@@QAE@PAVQTreeWidget@@H@Z',
                                                                                            '?setTextAlignment@QTreeWidgetItem@@QAEXHH@Z',
                                                                                            '?setColumnCount@QTreeWidget@@QAEXH@Z',
                                                                                            '?addTopLevelItems@QTreeWidget@@QAEXABV?$QList@PAVQTreeWidgetItem@@@@@Z',
                                                                                            '?sortColumn@QTreeWidget@@QBEHXZ',
                                                                                            '?clear@QTreeWidget@@QAEXXZ',
                                                                                            '?showColumn@QTreeView@@QAEXH@Z',
                                                                                            '?activateWindow@QWidget@@QAEXXZ',
                                                                                            '?hasFocus@QWidget@@QBE_NXZ',
                                                                                            '?showNormal@QWidget@@QAEXXZ',
                                                                                            '?raise@QWidget@@QAEXXZ',
                                                                                            '?adjustSize@QWidget@@QAEXXZ',
                                                                                            '?isMinimized@QWidget@@QBE_NXZ',
                                                                                            '?setParent@QWidget@@QAEXPAV1@@Z',
                                                                                            '?parentWidget@QWidget@@QBEPAV1@XZ',
                                                                                            '?addWidget@QSplitter@@QAEXPAVQWidget@@@Z',
                                                                                            '?setOrientation@QSplitter@@QAEXW4Orientation@Qt@@@Z',
                                                                                            '?orientation@QSplitter@@QBE?AW4Orientation@Qt@@XZ',
                                                                                            '?setSizes@QSplitter@@QAEXABV?$QList@H@@@Z',
                                                                                            '?handleWidth@QSplitter@@QBEHXZ',
                                                                                            '?findData@QComboBox@@QBEHABVQVariant@@HV?$QFlags@W4MatchFlag@Qt@@@@@Z',
                                                                                            '?insertItem@QComboBox@@QAEXHABVQIcon@@ABVQString@@ABVQVariant@@@Z',
                                                                                            '?setCurrentIndex@QComboBox@@QAEXH@Z',
                                                                                            '?setSeparator@QAction@@QAEX_N@Z',
                                                                                            '?child@QTreeWidgetItem@@QBEPAV1@H@Z',
                                                                                            '?childCount@QTreeWidgetItem@@QBEHXZ',
                                                                                            '?isItemExpanded@QTreeWidget@@QBE_NPBVQTreeWidgetItem@@@Z',
                                                                                            '?text@QLineEdit@@QBE?AVQString@@XZ',
                                                                                            '?clear@QLineEdit@@QAEXXZ',
                                                                                            '?currentWidget@QStackedWidget@@QBEPAVQWidget@@XZ',
                                                                                            '?currentIndex@QStackedWidget@@QBEHXZ',
                                                                                            '?widget@QStackedWidget@@QBEPAVQWidget@@H@Z',
                                                                                            '?count@QStackedWidget@@QBEHXZ',
                                                                                            '?showMessage@QStatusBar@@QAEXABVQString@@H@Z',
                                                                                            '?clearMessage@QStatusBar@@QAEXXZ',
                                                                                            '?question@QMessageBox@@SA?AW4StandardButton@1@PAVQWidget@@ABVQString@@1V?$QFlags@W4StandardButton@QMessageBox@@@@W421@@Z',
                                                                                            '?setHeaderLabels@QTreeWidget@@QAEXABVQStringList@@@Z',
                                                                                            '?sortItems@QTreeWidget@@QAEXHW4SortOrder@Qt@@@Z',
                                                                                            '?setItemHidden@QTreeWidget@@QAEXPBVQTreeWidgetItem@@_N@Z',
                                                                                            '?model@QAbstractItemView@@QBEPAVQAbstractItemModel@@XZ',
                                                                                            '??0QTreeWidgetItem@@QAE@PAV0@H@Z',
                                                                                            '?columnCount@QTreeWidgetItem@@QBEHXZ',
                                                                                            '?invisibleRootItem@QTreeWidget@@QBEPAVQTreeWidgetItem@@XZ',
                                                                                            '?setItemExpanded@QTreeWidget@@QAEXPBVQTreeWidgetItem@@_N@Z',
                                                                                            '?setFirstItemColumnSpanned@QTreeWidget@@QAEXPBVQTreeWidgetItem@@_N@Z',
                                                                                            '?text@QMessageBox@@QBE?AVQString@@XZ',
                                                                                            '?setTextFormat@QMessageBox@@QAEXW4TextFormat@Qt@@@Z',
                                                                                            '?changeEvent@QMessageBox@@MAEXPAVQEvent@@@Z',
                                                                                            '?closeEvent@QMessageBox@@MAEXPAVQCloseEvent@@@Z',
                                                                                            '?event@QMessageBox@@MAE_NPAVQEvent@@@Z',
                                                                                            '?keyPressEvent@QMessageBox@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?resizeEvent@QMessageBox@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?showEvent@QMessageBox@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?setPalette@QWidget@@QAEXABVQPalette@@@Z',
                                                                                            '?setAutoFillBackground@QWidget@@QAEX_N@Z',
                                                                                            '??0QVBoxLayout@@QAE@XZ',
                                                                                            '??0QProgressBar@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QProgressBar@@UAE@XZ',
                                                                                            '?maximum@QProgressBar@@QBEHXZ',
                                                                                            '?setTextVisible@QProgressBar@@QAEX_N@Z',
                                                                                            '?setMaximum@QProgressBar@@QAEXH@Z',
                                                                                            '?setValue@QProgressBar@@QAEXH@Z',
                                                                                            '?event@QProgressBar@@MAE_NPAVQEvent@@@Z',
                                                                                            '?metaObject@QProgressBar@@UBEPBUQMetaObject@@XZ',
                                                                                            '?minimumSizeHint@QProgressBar@@UBE?AVQSize@@XZ',
                                                                                            '?paintEvent@QProgressBar@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QProgressBar@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QProgressBar@@UAEPAXPBD@Z',
                                                                                            '?sizeHint@QProgressBar@@UBE?AVQSize@@XZ',
                                                                                            '?text@QProgressBar@@UBE?AVQString@@XZ',
                                                                                            '??1QDialog@@UAE@XZ',
                                                                                            '??0QStatusBar@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QStatusBar@@UAE@XZ',
                                                                                            '?addWidget@QStatusBar@@QAEXPAVQWidget@@H@Z',
                                                                                            '?addStretch@QBoxLayout@@QAEXH@Z',
                                                                                            '?setHandleWidth@QSplitter@@QAEXH@Z',
                                                                                            '?setStretchFactor@QSplitter@@QAEXHH@Z',
                                                                                            '?setIconSize@QAbstractButton@@QAEXABVQSize@@@Z',
                                                                                            '?changeEvent@QSplitter@@MAEXPAVQEvent@@@Z',
                                                                                            '?childEvent@QSplitter@@MAEXPAVQChildEvent@@@Z',
                                                                                            '?createHandle@QSplitter@@MAEPAVQSplitterHandle@@XZ',
                                                                                            '?event@QSplitter@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QStatusBar@@MAE_NPAVQEvent@@@Z',
                                                                                            '?metaObject@QSplitter@@UBEPBUQMetaObject@@XZ',
                                                                                            '?minimumSizeHint@QSplitter@@UBE?AVQSize@@XZ',
                                                                                            '?paintEvent@QStatusBar@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QSplitter@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QSplitter@@UAEPAXPBD@Z',
                                                                                            '?resizeEvent@QSplitter@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?resizeEvent@QStatusBar@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?showEvent@QStatusBar@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?sizeHint@QSplitter@@UBE?AVQSize@@XZ',
                                                                                            '?setMaximumWidth@QWidget@@QAEXH@Z',
                                                                                            '?setGraphicsEffect@QWidget@@QAEXPAVQGraphicsEffect@@@Z',
                                                                                            '?layout@QWidget@@QBEPAVQLayout@@XZ',
                                                                                            '?windowHandle@QWidget@@QBEPAVQWindow@@XZ',
                                                                                            '??0QFrame@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '??1QFrame@@UAE@XZ',
                                                                                            '?setFrameShape@QFrame@@QAEXW4Shape@1@@Z',
                                                                                            '?setFrameShadow@QFrame@@QAEXW4Shadow@1@@Z',
                                                                                            '?setLineWidth@QFrame@@QAEXH@Z',
                                                                                            '?insertWidget@QBoxLayout@@QAEXHPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z',
                                                                                            '??0QGraphicsOpacityEffect@@QAE@PAVQObject@@@Z',
                                                                                            '??1QGraphicsOpacityEffect@@UAE@XZ',
                                                                                            '?boundingRectFor@QGraphicsEffect@@UBE?AVQRectF@@ABV2@@Z',
                                                                                            '?draw@QGraphicsOpacityEffect@@MAEXPAVQPainter@@@Z',
                                                                                            '?event@QFrame@@MAE_NPAVQEvent@@@Z',
                                                                                            '?metaObject@QGraphicsOpacityEffect@@UBEPBUQMetaObject@@XZ',
                                                                                            '?qt_metacall@QGraphicsOpacityEffect@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QGraphicsOpacityEffect@@UAEPAXPBD@Z',
                                                                                            '?sourceChanged@QGraphicsEffect@@MAEXV?$QFlags@W4ChangeFlag@QGraphicsEffect@@@@@Z',
                                                                                            '?staticMetaObject@QBoxLayout@@2UQMetaObject@@B',
                                                                                            '?setSizeGripEnabled@QDialog@@QAEX_N@Z',
                                                                                            '??0QGridLayout@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QGridLayout@@UAE@XZ',
                                                                                            '?addLayout@QGridLayout@@QAEXPAVQLayout@@HHHHV?$QFlags@W4AlignmentFlag@Qt@@@@@Z',
                                                                                            '??0QFormLayout@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QFormLayout@@UAE@XZ',
                                                                                            '?setFieldGrowthPolicy@QFormLayout@@QAEXW4FieldGrowthPolicy@1@@Z',
                                                                                            '?setWidget@QFormLayout@@QAEXHW4ItemRole@1@PAVQWidget@@@Z',
                                                                                            '?setLayout@QFormLayout@@QAEXHW4ItemRole@1@PAVQLayout@@@Z',
                                                                                            '?setOpenExternalLinks@QLabel@@QAEX_N@Z',
                                                                                            '?setTextInteractionFlags@QLabel@@QAEXV?$QFlags@W4TextInteractionFlag@Qt@@@@@Z',
                                                                                            '?setToolTip@QTreeWidgetItem@@QAEXHABVQString@@@Z',
                                                                                            '?addItem@QFormLayout@@UAEXPAVQLayoutItem@@@Z',
                                                                                            '?addItem@QGridLayout@@MAEXPAVQLayoutItem@@@Z',
                                                                                            '?count@QFormLayout@@UBEHXZ',
                                                                                            '?count@QGridLayout@@UBEHXZ',
                                                                                            '?expandingDirections@QFormLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ',
                                                                                            '?expandingDirections@QGridLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ',
                                                                                            '?hasHeightForWidth@QFormLayout@@UBE_NXZ',
                                                                                            '?hasHeightForWidth@QGridLayout@@UBE_NXZ',
                                                                                            '?heightForWidth@QFormLayout@@UBEHH@Z',
                                                                                            '?heightForWidth@QGridLayout@@UBEHH@Z',
                                                                                            '?invalidate@QFormLayout@@UAEXXZ',
                                                                                            '?invalidate@QGridLayout@@UAEXXZ',
                                                                                            '?itemAt@QFormLayout@@UBEPAVQLayoutItem@@H@Z',
                                                                                            '?itemAt@QGridLayout@@UBEPAVQLayoutItem@@H@Z',
                                                                                            '?maximumSize@QGridLayout@@UBE?AVQSize@@XZ',
                                                                                            '?maximumSize@QLayout@@UBE?AVQSize@@XZ',
                                                                                            '?metaObject@QFormLayout@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QGridLayout@@UBEPBUQMetaObject@@XZ',
                                                                                            '?minimumHeightForWidth@QGridLayout@@UBEHH@Z',
                                                                                            '?minimumSize@QFormLayout@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSize@QGridLayout@@UBE?AVQSize@@XZ',
                                                                                            '?qt_metacall@QFormLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QGridLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QFormLayout@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QGridLayout@@UAEPAXPBD@Z',
                                                                                            '?setGeometry@QFormLayout@@UAEXABVQRect@@@Z',
                                                                                            '?setGeometry@QGridLayout@@UAEXABVQRect@@@Z',
                                                                                            '?sizeHint@QFormLayout@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QGridLayout@@UBE?AVQSize@@XZ',
                                                                                            '?takeAt@QFormLayout@@UAEPAVQLayoutItem@@H@Z',
                                                                                            '?takeAt@QGridLayout@@UAEPAVQLayoutItem@@H@Z',
                                                                                            '?addChildren@QTreeWidgetItem@@QAEXABV?$QList@PAVQTreeWidgetItem@@@@@Z',
                                                                                            '?takeChildren@QTreeWidgetItem@@QAE?AV?$QList@PAVQTreeWidgetItem@@@@XZ',
                                                                                            '?isItemHidden@QTreeWidget@@QBE_NPBVQTreeWidgetItem@@@Z',
                                                                                            '?sortIndicatorOrder@QHeaderView@@QBE?AW4SortOrder@Qt@@XZ',
                                                                                            '?setMenu@QPushButton@@QAEXPAVQMenu@@@Z',
                                                                                            '??0QTextEdit@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QTextEdit@@UAE@XZ',
                                                                                            '?setReadOnly@QTextEdit@@QAEX_N@Z',
                                                                                            '?setHtml@QTextEdit@@QAEXABVQString@@@Z',
                                                                                            '?canInsertFromMimeData@QTextEdit@@MBE_NPBVQMimeData@@@Z',
                                                                                            '?changeEvent@QTextEdit@@MAEXPAVQEvent@@@Z',
                                                                                            '?contextMenuEvent@QTextEdit@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?createMimeDataFromSelection@QTextEdit@@MBEPAVQMimeData@@XZ',
                                                                                            '?doSetTextCursor@QTextEdit@@MAEXABVQTextCursor@@@Z',
                                                                                            '?dragEnterEvent@QTextEdit@@MAEXPAVQDragEnterEvent@@@Z',
                                                                                            '?dragLeaveEvent@QTextEdit@@MAEXPAVQDragLeaveEvent@@@Z',
                                                                                            '?dragMoveEvent@QTextEdit@@MAEXPAVQDragMoveEvent@@@Z',
                                                                                            '?qt_metacast@QAction@@UAEPAXPBD@Z',
                                                                                            '?event@QTextEdit@@MAE_NPAVQEvent@@@Z',
                                                                                            '?focusInEvent@QTextEdit@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusNextPrevChild@QTextEdit@@MAE_N_N@Z',
                                                                                            '?focusOutEvent@QTextEdit@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?inputMethodEvent@QTextEdit@@MAEXPAVQInputMethodEvent@@@Z',
                                                                                            '?inputMethodQuery@QTextEdit@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?insertFromMimeData@QTextEdit@@MAEXPBVQMimeData@@@Z',
                                                                                            '?keyPressEvent@QTextEdit@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyReleaseEvent@QTextEdit@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?loadResource@QTextEdit@@UAE?AVQVariant@@HABVQUrl@@@Z',
                                                                                            '?metaObject@QTextEdit@@UBEPBUQMetaObject@@XZ',
                                                                                            '?mouseDoubleClickEvent@QTextEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QTextEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QTextEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QTextEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?paintEvent@QTextEdit@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QTextEdit@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QTextEdit@@UAEPAXPBD@Z',
                                                                                            '?resizeEvent@QTextEdit@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?scrollContentsBy@QTextEdit@@MAEXHH@Z',
                                                                                            '?showEvent@QTextEdit@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?timerEvent@QTextEdit@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?viewportEvent@QAbstractScrollArea@@MAE_NPAVQEvent@@@Z',
                                                                                            '?viewportSizeHint@QAbstractScrollArea@@MBE?AVQSize@@XZ',
                                                                                            '?wheelEvent@QTextEdit@@MAEXPAVQWheelEvent@@@Z',
                                                                                            '?cursor@QWidget@@QBE?AVQCursor@@XZ',
                                                                                            '?setCursor@QWidget@@QAEXABVQCursor@@@Z',
                                                                                            '?setFocusPolicy@QWidget@@QAEXW4FocusPolicy@Qt@@@Z',
                                                                                            '?setLayout@QWidget@@QAEXPAVQLayout@@@Z',
                                                                                            '?setAttribute@QWidget@@QAEXW4WidgetAttribute@Qt@@_N@Z',
                                                                                            '?setCheckable@QAbstractButton@@QAEX_N@Z',
                                                                                            '?toggle@QAbstractButton@@QAEXXZ',
                                                                                            '??0QRubberBand@@QAE@W4Shape@0@PAVQWidget@@@Z',
                                                                                            '??1QRubberBand@@UAE@XZ',
                                                                                            '?setGeometry@QRubberBand@@QAEXABVQRect@@@Z',
                                                                                            '?setFrameStyle@QFrame@@QAEXH@Z',
                                                                                            '??0QComboBox@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QComboBox@@UAE@XZ',
                                                                                            '?count@QComboBox@@QBEHXZ',
                                                                                            '?currentIndex@QComboBox@@QBEHXZ',
                                                                                            '?itemText@QComboBox@@QBE?AVQString@@H@Z',
                                                                                            '?itemData@QComboBox@@QBE?AVQVariant@@HH@Z',
                                                                                            '?setItemIcon@QComboBox@@QAEXHABVQIcon@@@Z',
                                                                                            '?view@QComboBox@@QBEPAVQAbstractItemView@@XZ',
                                                                                            '?addSpacerItem@QBoxLayout@@QAEXPAVQSpacerItem@@@Z',
                                                                                            '??0QRadioButton@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QRadioButton@@UAE@XZ',
                                                                                            '?setIcon@QTreeWidgetItem@@QAEXHABVQIcon@@@Z',
                                                                                            '?itemWidget@QTreeWidget@@QBEPAVQWidget@@PAVQTreeWidgetItem@@H@Z',
                                                                                            '?setItemWidget@QTreeWidget@@QAEXPAVQTreeWidgetItem@@HPAVQWidget@@@Z',
                                                                                            '?selectAll@QLineEdit@@QAEXXZ',
                                                                                            '?changeEvent@QComboBox@@MAEXPAVQEvent@@@Z',
                                                                                            '?changeEvent@QRubberBand@@MAEXPAVQEvent@@@Z',
                                                                                            '?contextMenuEvent@QComboBox@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?event@QComboBox@@UAE_NPAVQEvent@@@Z',
                                                                                            '?event@QRadioButton@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QRubberBand@@MAE_NPAVQEvent@@@Z',
                                                                                            '?focusInEvent@QComboBox@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusOutEvent@QComboBox@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?hideEvent@QComboBox@@MAEXPAVQHideEvent@@@Z',
                                                                                            '?hidePopup@QComboBox@@UAEXXZ',
                                                                                            '?hitButton@QRadioButton@@MBE_NABVQPoint@@@Z',
                                                                                            '?inputMethodEvent@QComboBox@@MAEXPAVQInputMethodEvent@@@Z',
                                                                                            '?inputMethodQuery@QComboBox@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?keyPressEvent@QComboBox@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyReleaseEvent@QComboBox@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?metaObject@QComboBox@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QFrame@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QRadioButton@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QRubberBand@@UBEPBUQMetaObject@@XZ',
                                                                                            '?minimumSizeHint@QComboBox@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QRadioButton@@UBE?AVQSize@@XZ',
                                                                                            '?mouseMoveEvent@QRadioButton@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QComboBox@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QComboBox@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?moveEvent@QRubberBand@@MAEXPAVQMoveEvent@@@Z',
                                                                                            '?paintEvent@QComboBox@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEvent@QRadioButton@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEvent@QRubberBand@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QComboBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QFrame@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QRadioButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QRubberBand@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QComboBox@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QFrame@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QRadioButton@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QRubberBand@@UAEPAXPBD@Z',
                                                                                            '?resizeEvent@QComboBox@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?resizeEvent@QRubberBand@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?showEvent@QComboBox@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?showEvent@QRubberBand@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?showPopup@QComboBox@@UAEXXZ',
                                                                                            '?sizeHint@QComboBox@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QRadioButton@@UBE?AVQSize@@XZ',
                                                                                            '?wheelEvent@QComboBox@@MAEXPAVQWheelEvent@@@Z',
                                                                                            '??0QCheckBox@@QAE@ABVQString@@PAVQWidget@@@Z',
                                                                                            '?checkState@QCheckBox@@QBE?AW4CheckState@Qt@@XZ',
                                                                                            '?setCheckState@QCheckBox@@QAEXW4CheckState@Qt@@@Z',
                                                                                            '?addWidget@QLayout@@QAEXPAVQWidget@@@Z',
                                                                                            '?insertLayout@QBoxLayout@@QAEXHPAVQLayout@@H@Z',
                                                                                            '??0QGridLayout@@QAE@XZ',
                                                                                            '?setColumnStretch@QGridLayout@@QAEXHH@Z',
                                                                                            '?setColumnMinimumWidth@QGridLayout@@QAEXHH@Z',
                                                                                            '?textAlignment@QTreeWidgetItem@@QBEHH@Z',
                                                                                            '??0QPushButton@@QAE@ABVQString@@PAVQWidget@@@Z',
                                                                                            '?addWidget@QGridLayout@@QAEXPAVQWidget@@HHV?$QFlags@W4AlignmentFlag@Qt@@@@@Z',
                                                                                            '??0QLabel@@QAE@ABVQString@@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?critical@QMessageBox@@SA?AW4StandardButton@1@PAVQWidget@@ABVQString@@1V?$QFlags@W4StandardButton@QMessageBox@@@@W421@@Z',
                                                                                            '?addChild@QTreeWidgetItem@@QAEXPAV1@@Z',
                                                                                            '?createEditor@QStyledItemDelegate@@UBEPAVQWidget@@PAV2@ABVQStyleOptionViewItem@@ABVQModelIndex@@@Z',
                                                                                            '??0QTabWidget@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QTabWidget@@UAE@XZ',
                                                                                            '?setTabPosition@QTabWidget@@QAEXW4TabPosition@1@@Z',
                                                                                            '?setDocumentMode@QTabWidget@@QAEX_N@Z',
                                                                                            '?tabBar@QTabWidget@@QBEPAVQTabBar@@XZ',
                                                                                            '?tabInserted@QTabWidget@@MAEXH@Z',
                                                                                            '?tabRemoved@QTabWidget@@MAEXH@Z',
                                                                                            '?changeEvent@QTabWidget@@MAEXPAVQEvent@@@Z',
                                                                                            '?event@QTabWidget@@MAE_NPAVQEvent@@@Z',
                                                                                            '?hasHeightForWidth@QTabWidget@@UBE_NXZ',
                                                                                            '?heightForWidth@QTabWidget@@UBEHH@Z',
                                                                                            '?keyPressEvent@QTabWidget@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?minimumSizeHint@QTabWidget@@UBE?AVQSize@@XZ',
                                                                                            '?paintEvent@QTabWidget@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?resizeEvent@QTabWidget@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?showEvent@QTabWidget@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?sizeHint@QTabWidget@@UBE?AVQSize@@XZ',
                                                                                            '?setActionGroup@QAction@@QAEXPAVQActionGroup@@@Z',
                                                                                            '?isSeparator@QAction@@QBE_NXZ',
                                                                                            '?parentWidget@QAction@@QBEPAVQWidget@@XZ',
                                                                                            '?isEmpty@QMenu@@QBE_NXZ',
                                                                                            '?setHeaderHidden@QTreeView@@QAEX_N@Z',
                                                                                            '?expandAll@QTreeView@@QAEXXZ',
                                                                                            '?collapseAll@QTreeView@@QAEXXZ',
                                                                                            '??0QTreeWidgetItemIterator@@QAE@PAVQTreeWidgetItem@@V?$QFlags@W4IteratorFlag@QTreeWidgetItemIterator@@@@@Z',
                                                                                            '?font@QTreeWidgetItem@@QBE?AVQFont@@H@Z',
                                                                                            '?scrollToItem@QTreeWidget@@QAEXPBVQTreeWidgetItem@@W4ScrollHint@QAbstractItemView@@@Z',
                                                                                            '??0QStyleOptionViewItem@@QAE@ABV0@@Z',
                                                                                            '?style@QApplication@@SAPAVQStyle@@XZ',
                                                                                            '?qt_metacast@QTreeView@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QTreeView@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QTreeView@@2UQMetaObject@@B',
                                                                                            '?desktop@QApplication@@SAPAVQDesktopWidget@@XZ',
                                                                                            '?numScreens@QDesktopWidget@@QBEHXZ',
                                                                                            '?availableGeometry@QDesktopWidget@@QBE?BVQRect@@H@Z',
                                                                                            '?setStyle@QWidget@@QAEXPAVQStyle@@@Z',
                                                                                            '?updateGeometry@QWidget@@QAEXXZ',
                                                                                            '?minimum@QAbstractSlider@@QBEHXZ',
                                                                                            '?pageStep@QAbstractSlider@@QBEHXZ',
                                                                                            '??0QScrollBar@@QAE@W4Orientation@Qt@@PAVQWidget@@@Z',
                                                                                            '??1QScrollBar@@UAE@XZ',
                                                                                            '?sizeHint@QScrollBar@@UBE?AVQSize@@XZ',
                                                                                            '?initStyleOption@QScrollBar@@IBEXPAVQStyleOptionSlider@@@Z',
                                                                                            '??0QProxyStyle@@QAE@PAVQStyle@@@Z',
                                                                                            '??1QProxyStyle@@UAE@XZ',
                                                                                            '?styleHint@QProxyStyle@@UBEHW4StyleHint@QStyle@@PBVQStyleOption@@PBVQWidget@@PAVQStyleHintReturn@@@Z',
                                                                                            '??1QStyleOption@@QAE@XZ',
                                                                                            '??0QStyleOptionSlider@@QAE@XZ',
                                                                                            '??1QStyleOptionSlider@@QAE@XZ',
                                                                                            '?changeEvent@QAbstractSlider@@MAEXPAVQEvent@@@Z',
                                                                                            '?contextMenuEvent@QScrollBar@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?drawComplexControl@QProxyStyle@@UBEXW4ComplexControl@QStyle@@PBVQStyleOptionComplex@@PAVQPainter@@PBVQWidget@@@Z',
                                                                                            '?drawControl@QProxyStyle@@UBEXW4ControlElement@QStyle@@PBVQStyleOption@@PAVQPainter@@PBVQWidget@@@Z',
                                                                                            '?drawItemPixmap@QProxyStyle@@UBEXPAVQPainter@@ABVQRect@@HABVQPixmap@@@Z',
                                                                                            '?drawItemText@QProxyStyle@@UBEXPAVQPainter@@ABVQRect@@HABVQPalette@@_NABVQString@@W4ColorRole@4@@Z',
                                                                                            '?drawPrimitive@QProxyStyle@@UBEXW4PrimitiveElement@QStyle@@PBVQStyleOption@@PAVQPainter@@PBVQWidget@@@Z',
                                                                                            '?event@QProxyStyle@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QScrollBar@@UAE_NPAVQEvent@@@Z',
                                                                                            '?generatedIconPixmap@QProxyStyle@@UBE?AVQPixmap@@W4Mode@QIcon@@ABV2@PBVQStyleOption@@@Z',
                                                                                            '?hideEvent@QScrollBar@@MAEXPAVQHideEvent@@@Z',
                                                                                            '?hitTestComplexControl@QProxyStyle@@UBE?AW4SubControl@QStyle@@W4ComplexControl@3@PBVQStyleOptionComplex@@ABVQPoint@@PBVQWidget@@@Z',
                                                                                            '?itemPixmapRect@QProxyStyle@@UBE?AVQRect@@ABV2@HABVQPixmap@@@Z',
                                                                                            '?itemTextRect@QProxyStyle@@UBE?AVQRect@@ABVQFontMetrics@@ABV2@H_NABVQString@@@Z',
                                                                                            '?keyPressEvent@QAbstractSlider@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?layoutSpacing@QProxyStyle@@UBEHW4ControlType@QSizePolicy@@0W4Orientation@Qt@@PBVQStyleOption@@PBVQWidget@@@Z',
                                                                                            '?metaObject@QProxyStyle@@UBEPBUQMetaObject@@XZ',
                                                                                            '?mouseMoveEvent@QScrollBar@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?pixelMetric@QProxyStyle@@UBEHW4PixelMetric@QStyle@@PBVQStyleOption@@PBVQWidget@@@Z',
                                                                                            '?polish@QProxyStyle@@UAEXAAVQPalette@@@Z',
                                                                                            '?polish@QProxyStyle@@UAEXPAVQApplication@@@Z',
                                                                                            '?polish@QProxyStyle@@UAEXPAVQWidget@@@Z',
                                                                                            '?qt_metacall@QProxyStyle@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QProxyStyle@@UAEPAXPBD@Z',
                                                                                            '?sizeFromContents@QProxyStyle@@UBE?AVQSize@@W4ContentsType@QStyle@@PBVQStyleOption@@ABV2@PBVQWidget@@@Z',
                                                                                            '?sliderChange@QScrollBar@@MAEXW4SliderChange@QAbstractSlider@@@Z',
                                                                                            '?standardIcon@QProxyStyle@@UBE?AVQIcon@@W4StandardPixmap@QStyle@@PBVQStyleOption@@PBVQWidget@@@Z',
                                                                                            '?standardPalette@QProxyStyle@@UBE?AVQPalette@@XZ',
                                                                                            '?standardPixmap@QProxyStyle@@UBE?AVQPixmap@@W4StandardPixmap@QStyle@@PBVQStyleOption@@PBVQWidget@@@Z',
                                                                                            '?subControlRect@QProxyStyle@@UBE?AVQRect@@W4ComplexControl@QStyle@@PBVQStyleOptionComplex@@W4SubControl@4@PBVQWidget@@@Z',
                                                                                            '?subElementRect@QProxyStyle@@UBE?AVQRect@@W4SubElement@QStyle@@PBVQStyleOption@@PBVQWidget@@@Z',
                                                                                            '?timerEvent@QAbstractSlider@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?unpolish@QProxyStyle@@UAEXPAVQApplication@@@Z',
                                                                                            '?unpolish@QProxyStyle@@UAEXPAVQWidget@@@Z',
                                                                                            '?wheelEvent@QScrollBar@@MAEXPAVQWheelEvent@@@Z',
                                                                                            '?qt_metacast@QDialog@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QDialog@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QDialog@@2UQMetaObject@@B',
                                                                                            '?showFullScreen@QWidget@@QAEXXZ',
                                                                                            '?isFullScreen@QWidget@@QBE_NXZ',
                                                                                            '?qt_metacast@QStyledItemDelegate@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QStyledItemDelegate@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QStyledItemDelegate@@2UQMetaObject@@B',
                                                                                            '?testAttribute@QWidget@@QBE_NW4WidgetAttribute@Qt@@@Z',
                                                                                            '?focusNextChild@QWidget@@IAE_NXZ',
                                                                                            '?setMaxLength@QLineEdit@@QAEXH@Z',
                                                                                            '?cursorPosition@QLineEdit@@QBEHXZ',
                                                                                            '?setCursorPosition@QLineEdit@@QAEXH@Z',
                                                                                            '?backspace@QLineEdit@@QAEXXZ',
                                                                                            '?hasSelectedText@QLineEdit@@QBE_NXZ',
                                                                                            '?selectionStart@QLineEdit@@QBEHXZ',
                                                                                            '?textEdited@QLineEdit@@QAEXABVQString@@@Z',
                                                                                            '?cursorRect@QLineEdit@@IBE?AVQRect@@XZ',
                                                                                            '?setWidget@QCompleter@@QAEXPAVQWidget@@@Z',
                                                                                            '?setCompletionMode@QCompleter@@QAEXW4CompletionMode@1@@Z',
                                                                                            '?popup@QCompleter@@QBEPAVQAbstractItemView@@XZ',
                                                                                            '?setCaseSensitivity@QCompleter@@QAEXW4CaseSensitivity@Qt@@@Z',
                                                                                            '?setMaxVisibleItems@QCompleter@@QAEXH@Z',
                                                                                            '?complete@QCompleter@@QAEXABVQRect@@@Z',
                                                                                            '?setMinimumHeight@QWidget@@QAEXH@Z',
                                                                                            '?setMaximumHeight@QWidget@@QAEXH@Z',
                                                                                            '?contentsRect@QWidget@@QBE?AVQRect@@XZ',
                                                                                            '?setPlaceholderText@QLineEdit@@QAEXABVQString@@@Z',
                                                                                            '?setMenu@QToolButton@@QAEXPAVQMenu@@@Z',
                                                                                            '?menu@QToolButton@@QBEPAVQMenu@@XZ',
                                                                                            '?setPopupMode@QToolButton@@QAEXW4ToolButtonPopupMode@1@@Z',
                                                                                            '??0QCompleter@@QAE@PAVQAbstractItemModel@@PAVQObject@@@Z',
                                                                                            '??1QCompleter@@UAE@XZ',
                                                                                            '?setCompletionPrefix@QCompleter@@QAEXABVQString@@@Z',
                                                                                            '?event@QCompleter@@MAE_NPAVQEvent@@@Z',
                                                                                            '?eventFilter@QCompleter@@MAE_NPAVQObject@@PAVQEvent@@@Z',
                                                                                            '?metaObject@QCompleter@@UBEPBUQMetaObject@@XZ',
                                                                                            '?pathFromIndex@QCompleter@@UBE?AVQString@@ABVQModelIndex@@@Z',
                                                                                            '?qt_metacall@QCompleter@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QCompleter@@UAEPAXPBD@Z',
                                                                                            '?splitPath@QCompleter@@UBE?AVQStringList@@ABVQString@@@Z',
                                                                                            '?staticMetaObject@QComboBox@@2UQMetaObject@@B',
                                                                                            '?staticMetaObject@QLineEdit@@2UQMetaObject@@B',
                                                                                            '?effectiveWinId@QWidget@@QBEIXZ',
                                                                                            '??0QFileDialog@@QAE@PAVQWidget@@ABVQString@@11@Z',
                                                                                            '?setDirectory@QFileDialog@@QAEXABVQString@@@Z',
                                                                                            '?setDirectory@QFileDialog@@QAEXABVQDir@@@Z',
                                                                                            '?accept@QFileDialog@@MAEXXZ',
                                                                                            '?changeEvent@QFileDialog@@MAEXPAVQEvent@@@Z',
                                                                                            '?done@QFileDialog@@MAEXH@Z',
                                                                                            '?setVisible@QFileDialog@@UAEX_N@Z',
                                                                                            '??0QStyleOptionComboBox@@QAE@XZ',
                                                                                            '??1QStyleOptionComboBox@@QAE@XZ',
                                                                                            '?setMaxCount@QComboBox@@QAEXH@Z',
                                                                                            '?setAutoCompletion@QComboBox@@QAEX_N@Z',
                                                                                            '?setEditable@QComboBox@@QAEX_N@Z',
                                                                                            '?setLineEdit@QComboBox@@QAEXPAVQLineEdit@@@Z',
                                                                                            '?clearEditText@QComboBox@@QAEXXZ',
                                                                                            '?initStyleOption@QComboBox@@IBEXPAVQStyleOptionComboBox@@@Z',
                                                                                            '?qt_metacast@QMainWindow@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QMainWindow@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QMainWindow@@2UQMetaObject@@B',
                                                                                            '?activate@QLayout@@QAE_NXZ',
                                                                                            '?isEnabled@QWidget@@QBE_NXZ',
                                                                                            '?setMinimumSize@QWidget@@QAEXHH@Z',
                                                                                            '?setMaximumSize@QWidget@@QAEXHH@Z',
                                                                                            '?insertItems@QComboBox@@QAEXHABVQStringList@@@Z',
                                                                                            '?clear@QComboBox@@QAEXXZ',
                                                                                            '?setAccessibleDescription@QWidget@@QAEXABVQString@@@Z',
                                                                                            '?setHorizontalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z',
                                                                                            '?setHeaderItem@QTreeWidget@@QAEXPAVQTreeWidgetItem@@@Z',
                                                                                            '?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z',
                                                                                            '?setFlags@QListWidgetItem@@QAEXV?$QFlags@W4ItemFlag@Qt@@@@@Z',
                                                                                            '?setText@QListWidgetItem@@QAEXABVQString@@@Z',
                                                                                            '?setFont@QListWidgetItem@@QAEXABVQFont@@@Z',
                                                                                            '??0QListWidget@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QListWidget@@UAE@XZ',
                                                                                            '?item@QListWidget@@QBEPAVQListWidgetItem@@H@Z',
                                                                                            '?insertItem@QListWidget@@QAEXHABVQString@@@Z',
                                                                                            '?count@QListWidget@@QBEHXZ',
                                                                                            '?itemAt@QListWidget@@QBEPAVQListWidgetItem@@ABVQPoint@@@Z',
                                                                                            '?setItemSelected@QListWidget@@QAEXPBVQListWidgetItem@@_N@Z',
                                                                                            '?selectedItems@QListWidget@@QBE?AV?$QList@PAVQListWidgetItem@@@@XZ',
                                                                                            '??0QGraphicsBlurEffect@@QAE@PAVQObject@@@Z',
                                                                                            '??1QGraphicsBlurEffect@@UAE@XZ',
                                                                                            '?setBlurRadius@QGraphicsBlurEffect@@QAEXN@Z',
                                                                                            '?boundingRectFor@QGraphicsBlurEffect@@UBE?AVQRectF@@ABV2@@Z',
                                                                                            '?currentChanged@QListView@@MAEXABVQModelIndex@@0@Z',
                                                                                            '?dataChanged@QListView@@MAEXABVQModelIndex@@0ABV?$QVector@H@@@Z',
                                                                                            '?doItemsLayout@QListView@@UAEXXZ',
                                                                                            '?dragLeaveEvent@QListView@@MAEXPAVQDragLeaveEvent@@@Z',
                                                                                            '?dragMoveEvent@QListView@@MAEXPAVQDragMoveEvent@@@Z',
                                                                                            '?draw@QGraphicsBlurEffect@@MAEXPAVQPainter@@@Z',
                                                                                            '?dropEvent@QListWidget@@UAEXPAVQDropEvent@@@Z',
                                                                                            '?dropMimeData@QListWidget@@MAE_NHPBVQMimeData@@W4DropAction@Qt@@@Z',
                                                                                            '?event@QListWidget@@MAE_NPAVQEvent@@@Z',
                                                                                            '?horizontalOffset@QListView@@MBEHXZ',
                                                                                            '?horizontalScrollbarAction@QAbstractItemView@@MAEXH@Z',
                                                                                            '?indexAt@QListView@@UBE?AVQModelIndex@@ABVQPoint@@@Z',
                                                                                            '?isIndexHidden@QListView@@MBE_NABVQModelIndex@@@Z',
                                                                                            '?keyPressEvent@QAbstractItemView@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyboardSearch@QAbstractItemView@@UAEXABVQString@@@Z',
                                                                                            '?metaObject@QGraphicsBlurEffect@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QListWidget@@UBEPBUQMetaObject@@XZ',
                                                                                            '?mimeData@QListWidget@@MBEPAVQMimeData@@V?$QList@PAVQListWidgetItem@@@@@Z',
                                                                                            '?mimeTypes@QListWidget@@MBE?AVQStringList@@XZ',
                                                                                            '?mouseDoubleClickEvent@QAbstractItemView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QListView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QAbstractItemView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QListView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?moveCursor@QListView@@MAE?AVQModelIndex@@W4CursorAction@QAbstractItemView@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z',
                                                                                            '?paintEvent@QListView@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QGraphicsBlurEffect@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QListWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QGraphicsBlurEffect@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QListWidget@@UAEPAXPBD@Z',
                                                                                            '?reset@QListView@@UAEXXZ',
                                                                                            '?resizeEvent@QListView@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?rowsAboutToBeRemoved@QListView@@MAEXABVQModelIndex@@HH@Z',
                                                                                            '?rowsInserted@QListView@@MAEXABVQModelIndex@@HH@Z',
                                                                                            '?scrollContentsBy@QListView@@MAEXHH@Z',
                                                                                            '?scrollTo@QListView@@UAEXABVQModelIndex@@W4ScrollHint@QAbstractItemView@@@Z',
                                                                                            '?selectAll@QAbstractItemView@@UAEXXZ',
                                                                                            '?selectedIndexes@QListView@@MBE?AV?$QList@VQModelIndex@@@@XZ',
                                                                                            '?selectionChanged@QListView@@MAEXABVQItemSelection@@0@Z',
                                                                                            '?setModel@QListWidget@@EAEXPAVQAbstractItemModel@@@Z',
                                                                                            '?setRootIndex@QListView@@UAEXABVQModelIndex@@@Z',
                                                                                            '?setSelection@QListView@@MAEXABVQRect@@V?$QFlags@W4SelectionFlag@QItemSelectionModel@@@@@Z',
                                                                                            '?setSelectionModel@QAbstractItemView@@UAEXPAVQItemSelectionModel@@@Z',
                                                                                            '?sizeHintForColumn@QAbstractItemView@@UBEHH@Z',
                                                                                            '?startDrag@QListView@@MAEXV?$QFlags@W4DropAction@Qt@@@@@Z',
                                                                                            '?supportedDropActions@QListWidget@@MBE?AV?$QFlags@W4DropAction@Qt@@@@XZ',
                                                                                            '?timerEvent@QListView@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?updateGeometries@QListView@@MAEXXZ',
                                                                                            '?verticalOffset@QListView@@MBEHXZ',
                                                                                            '?viewOptions@QListView@@MBE?AVQStyleOptionViewItem@@XZ',
                                                                                            '?viewportEvent@QAbstractItemView@@MAE_NPAVQEvent@@@Z',
                                                                                            '?viewportSizeHint@QListView@@MBE?AVQSize@@XZ',
                                                                                            '?visualRect@QListView@@UBE?AVQRect@@ABVQModelIndex@@@Z',
                                                                                            '?visualRegionForSelection@QListView@@MBE?AVQRegion@@ABVQItemSelection@@@Z',
                                                                                            '?wheelEvent@QListView@@MAEXPAVQWheelEvent@@@Z',
                                                                                            '?setModal@QDialog@@QAEX_N@Z',
                                                                                            '?setResult@QDialog@@QAEXH@Z',
                                                                                            '?model@QComboBox@@QBEPAVQAbstractItemModel@@XZ',
                                                                                            '?addWidget@QGridLayout@@QAEXPAVQWidget@@HHHHV?$QFlags@W4AlignmentFlag@Qt@@@@@Z',
                                                                                            '?addItem@QGridLayout@@QAEXPAVQLayoutItem@@HHHHV?$QFlags@W4AlignmentFlag@Qt@@@@@Z',
                                                                                            '??0QGroupBox@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QGroupBox@@UAE@XZ',
                                                                                            '?setTitle@QGroupBox@@QAEXABVQString@@@Z',
                                                                                            '?setFlat@QGroupBox@@QAEX_N@Z',
                                                                                            '?changeEvent@QGroupBox@@MAEXPAVQEvent@@@Z',
                                                                                            '?childEvent@QGroupBox@@MAEXPAVQChildEvent@@@Z',
                                                                                            '?event@QGroupBox@@MAE_NPAVQEvent@@@Z',
                                                                                            '?focusInEvent@QGroupBox@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?metaObject@QGroupBox@@UBEPBUQMetaObject@@XZ',
                                                                                            '?minimumSizeHint@QGroupBox@@UBE?AVQSize@@XZ',
                                                                                            '?mouseMoveEvent@QGroupBox@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QGroupBox@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QGroupBox@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?paintEvent@QGroupBox@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QGroupBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QGroupBox@@UAEPAXPBD@Z',
                                                                                            '?resizeEvent@QGroupBox@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?staticMetaObject@QRadioButton@@2UQMetaObject@@B',
                                                                                            '?setSizeAdjustPolicy@QComboBox@@QAEXW4SizeAdjustPolicy@1@@Z',
                                                                                            '?insertMenu@QMenu@@QAEPAVQAction@@PAV2@PAV1@@Z',
                                                                                            '??0QTreeWidgetItemIterator@@QAE@ABV0@@Z',
                                                                                            '?selectedFiles@QFileDialog@@QBE?AVQStringList@@XZ',
                                                                                            '?setNameFilter@QFileDialog@@QAEXABVQString@@@Z',
                                                                                            '?selectNameFilter@QFileDialog@@QAEXABVQString@@@Z',
                                                                                            '?selectedNameFilter@QFileDialog@@QBE?AVQString@@XZ',
                                                                                            '?setAcceptMode@QFileDialog@@QAEXW4AcceptMode@1@@Z',
                                                                                            '?qt_metacast@QApplication@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QApplication@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QApplication@@2UQMetaObject@@B',
                                                                                            '?setTabText@QTabWidget@@QAEXHABVQString@@@Z',
                                                                                            '?indexOf@QTabWidget@@QBEHPAVQWidget@@@Z',
                                                                                            '?clear@QTabWidget@@QAEXXZ',
                                                                                            '?setCurrentWidget@QTabWidget@@QAEXPAVQWidget@@@Z',
                                                                                            '?isColumnHidden@QTreeView@@QBE_NH@Z',
                                                                                            '?metaObject@QTabWidget@@UBEPBUQMetaObject@@XZ',
                                                                                            '?qt_metacall@QTabWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QTabWidget@@UAEPAXPBD@Z',
                                                                                            '?setSizeIncrement@QWidget@@QAEXHH@Z',
                                                                                            '?setLocale@QWidget@@QAEXABVQLocale@@@Z',
                                                                                            '?textCursor@QTextEdit@@QBE?AVQTextCursor@@XZ',
                                                                                            '?toPlainText@QTextEdit@@QBE?AVQString@@XZ',
                                                                                            '?setAcceptRichText@QTextEdit@@QAEX_N@Z',
                                                                                            '?setText@QTextEdit@@QAEXABVQString@@@Z',
                                                                                            '?clear@QTextEdit@@QAEXXZ',
                                                                                            '?toolTip@QWidget@@QBE?AVQString@@XZ',
                                                                                            '?removeItem@QLayout@@QAEXPAVQLayoutItem@@@Z',
                                                                                            '?qt_metacast@QLineEdit@@UAEPAXPBD@Z',
                                                                                            '??1QSpinBox@@UAE@XZ',
                                                                                            '?setMaximum@QSpinBox@@QAEXH@Z',
                                                                                            '?setValue@QSpinBox@@QAEXH@Z',
                                                                                            '?document@QPlainTextEdit@@QBEPAVQTextDocument@@XZ',
                                                                                            '?textCursor@QPlainTextEdit@@QBE?AVQTextCursor@@XZ',
                                                                                            '?setReadOnly@QPlainTextEdit@@QAEX_N@Z',
                                                                                            '?setCurrentCharFormat@QPlainTextEdit@@QAEXABVQTextCharFormat@@@Z',
                                                                                            '?currentCharFormat@QPlainTextEdit@@QBE?AVQTextCharFormat@@XZ',
                                                                                            '?find@QPlainTextEdit@@QAE_NABVQString@@V?$QFlags@W4FindFlag@QTextDocument@@@@@Z',
                                                                                            '?find@QPlainTextEdit@@QAE_NABVQRegExp@@V?$QFlags@W4FindFlag@QTextDocument@@@@@Z',
                                                                                            '?toPlainText@QPlainTextEdit@@QBE?AVQString@@XZ',
                                                                                            '?moveCursor@QPlainTextEdit@@QAEXW4MoveOperation@QTextCursor@@W4MoveMode@3@@Z',
                                                                                            '?print@QPlainTextEdit@@QBEXPAVQPagedPaintDevice@@@Z',
                                                                                            '?clear@QPlainTextEdit@@QAEXXZ',
                                                                                            '?insertPlainText@QPlainTextEdit@@QAEXABVQString@@@Z',
                                                                                            '?changeEvent@QAbstractSpinBox@@MAEXPAVQEvent@@@Z',
                                                                                            '?clear@QAbstractSpinBox@@UAEXXZ',
                                                                                            '?closeEvent@QAbstractSpinBox@@MAEXPAVQCloseEvent@@@Z',
                                                                                            '?contextMenuEvent@QAbstractSpinBox@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?event@QSpinBox@@MAE_NPAVQEvent@@@Z',
                                                                                            '?fixup@QSpinBox@@MBEXAAVQString@@@Z',
                                                                                            '?focusInEvent@QAbstractSpinBox@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusOutEvent@QAbstractSpinBox@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?hideEvent@QAbstractSpinBox@@MAEXPAVQHideEvent@@@Z',
                                                                                            '?inputMethodQuery@QAbstractSpinBox@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?keyPressEvent@QAbstractSpinBox@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyReleaseEvent@QAbstractSpinBox@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?metaObject@QSpinBox@@UBEPBUQMetaObject@@XZ',
                                                                                            '?minimumSizeHint@QAbstractSpinBox@@UBE?AVQSize@@XZ',
                                                                                            '?mouseMoveEvent@QAbstractSpinBox@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QAbstractSpinBox@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QAbstractSpinBox@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?paintEvent@QAbstractSpinBox@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QSpinBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QSpinBox@@UAEPAXPBD@Z',
                                                                                            '?resizeEvent@QAbstractSpinBox@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?showEvent@QAbstractSpinBox@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?sizeHint@QAbstractSpinBox@@UBE?AVQSize@@XZ',
                                                                                            '?stepBy@QAbstractSpinBox@@UAEXH@Z',
                                                                                            '?stepEnabled@QAbstractSpinBox@@MBE?AV?$QFlags@W4StepEnabledFlag@QAbstractSpinBox@@@@XZ',
                                                                                            '?textFromValue@QSpinBox@@MBE?AVQString@@H@Z',
                                                                                            '?timerEvent@QAbstractSpinBox@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?validate@QSpinBox@@MBE?AW4State@QValidator@@AAVQString@@AAH@Z',
                                                                                            '?valueFromText@QSpinBox@@MBEHABVQString@@@Z',
                                                                                            '?wheelEvent@QAbstractSpinBox@@MAEXPAVQWheelEvent@@@Z',
                                                                                            '??0QStyleOption@@QAE@HH@Z',
                                                                                            '?setIndentation@QTreeView@@QAEXH@Z',
                                                                                            '?isSortingEnabled@QTreeView@@QBE_NXZ',
                                                                                            '?setDisabled@QTreeWidgetItem@@QAEX_N@Z',
                                                                                            '?toolTip@QTreeWidgetItem@@QBE?AVQString@@H@Z',
                                                                                            '?removeChild@QTreeWidgetItem@@QAEXPAV1@@Z',
                                                                                            '?insertChildren@QTreeWidgetItem@@QAEXHABV?$QList@PAVQTreeWidgetItem@@@@@Z',
                                                                                            '?emitDataChanged@QTreeWidgetItem@@IAEXXZ',
                                                                                            '?setItemSelected@QTreeWidget@@QAEXPBVQTreeWidgetItem@@_N@Z',
                                                                                            '?itemBelow@QTreeWidget@@QBEPAVQTreeWidgetItem@@PBV2@@Z',
                                                                                            '?indexOf@QStackedWidget@@QBEHPAVQWidget@@@Z',
                                                                                            '?setCurrentIndex@QStackedWidget@@QAEXH@Z',
                                                                                            '?getExistingDirectory@QFileDialog@@SA?AVQString@@PAVQWidget@@ABV2@1V?$QFlags@W4Option@QFileDialog@@@@@Z',
                                                                                            '?staticMetaObject@QStackedWidget@@2UQMetaObject@@B',
                                                                                            '?setDisabled@QWidget@@QAEX_N@Z',
                                                                                            '?update@QAbstractItemView@@QAEXABVQModelIndex@@@Z',
                                                                                            '?setFont@QTreeWidgetItem@@QAEXHABVQFont@@@Z',
                                                                                            '?isItemSelected@QTreeWidget@@QBE_NPBVQTreeWidgetItem@@@Z',
                                                                                            '?indexFromItem@QTreeWidget@@IBE?AVQModelIndex@@PAVQTreeWidgetItem@@H@Z',
                                                                                            '?metaObject@QStyledItemDelegate@@UBEPBUQMetaObject@@XZ',
                                                                                            '?toolTip@QAction@@QBE?AVQString@@XZ',
                                                                                            '?shortcut@QAction@@QBE?AVQKeySequence@@XZ',
                                                                                            '?setTextFormat@QLabel@@QAEXW4TextFormat@Qt@@@Z',
                                                                                            '?setScaledContents@QLabel@@QAEX_N@Z',
                                                                                            '?setPixmap@QLabel@@QAEXABVQPixmap@@@Z',
                                                                                            '?setTabChangesFocus@QTextEdit@@QAEX_N@Z',
                                                                                            '??0QPlainTextEdit@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QPlainTextEdit@@UAE@XZ',
                                                                                            '?canInsertFromMimeData@QPlainTextEdit@@MBE_NPBVQMimeData@@@Z',
                                                                                            '?changeEvent@QPlainTextEdit@@MAEXPAVQEvent@@@Z',
                                                                                            '?contextMenuEvent@QPlainTextEdit@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?createMimeDataFromSelection@QPlainTextEdit@@MBEPAVQMimeData@@XZ',
                                                                                            '?doSetTextCursor@QPlainTextEdit@@MAEXABVQTextCursor@@@Z',
                                                                                            '?dragEnterEvent@QPlainTextEdit@@MAEXPAVQDragEnterEvent@@@Z',
                                                                                            '?dragLeaveEvent@QPlainTextEdit@@MAEXPAVQDragLeaveEvent@@@Z',
                                                                                            '?dragMoveEvent@QPlainTextEdit@@MAEXPAVQDragMoveEvent@@@Z',
                                                                                            '?dropEvent@QPlainTextEdit@@MAEXPAVQDropEvent@@@Z',
                                                                                            '?event@QPlainTextEdit@@MAE_NPAVQEvent@@@Z',
                                                                                            '?focusInEvent@QPlainTextEdit@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusNextPrevChild@QPlainTextEdit@@MAE_N_N@Z',
                                                                                            '?focusOutEvent@QPlainTextEdit@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?inputMethodEvent@QPlainTextEdit@@MAEXPAVQInputMethodEvent@@@Z',
                                                                                            '?inputMethodQuery@QPlainTextEdit@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?insertFromMimeData@QPlainTextEdit@@MAEXPBVQMimeData@@@Z',
                                                                                            '?keyPressEvent@QPlainTextEdit@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyReleaseEvent@QPlainTextEdit@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?loadResource@QPlainTextEdit@@UAE?AVQVariant@@HABVQUrl@@@Z',
                                                                                            '?metaObject@QPlainTextEdit@@UBEPBUQMetaObject@@XZ',
                                                                                            '?mouseDoubleClickEvent@QPlainTextEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QPlainTextEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QPlainTextEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QPlainTextEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?paintEvent@QPlainTextEdit@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QPlainTextEdit@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QPlainTextEdit@@UAEPAXPBD@Z',
                                                                                            '?resizeEvent@QPlainTextEdit@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?scrollContentsBy@QPlainTextEdit@@MAEXHH@Z',
                                                                                            '?showEvent@QPlainTextEdit@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?timerEvent@QPlainTextEdit@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?wheelEvent@QPlainTextEdit@@MAEXPAVQWheelEvent@@@Z',
                                                                                            '?setBaseSize@QWidget@@QAEXHH@Z',
                                                                                            '?setLayoutDirection@QWidget@@QAEXW4LayoutDirection@Qt@@@Z',
                                                                                            '?addActions@QWidget@@QAEXV?$QList@PAVQAction@@@@@Z',
                                                                                            '?setDuplicatesEnabled@QComboBox@@QAEX_N@Z',
                                                                                            '?setFrame@QComboBox@@QAEX_N@Z',
                                                                                            '?setModelColumn@QComboBox@@QAEXH@Z',
                                                                                            '?setSizeConstraint@QLayout@@QAEXW4SizeConstraint@1@@Z',
                                                                                            '?setHighlightSections@QHeaderView@@QAEX_N@Z',
                                                                                            '?setCascadingSectionResizes@QHeaderView@@QAEX_N@Z',
                                                                                            '?currentColumn@QTreeWidget@@QBEHXZ',
                                                                                            '?text@QLabel@@QBE?AVQString@@XZ',
                                                                                            '?setEditTriggers@QAbstractItemView@@QAEXV?$QFlags@W4EditTrigger@QAbstractItemView@@@@@Z',
                                                                                            '?setAlternatingRowColors@QAbstractItemView@@QAEX_N@Z',
                                                                                            '?setAnimated@QTreeView@@QAEX_N@Z',
                                                                                            '?setAllColumnsShowFocus@QTreeView@@QAEX_N@Z',
                                                                                            '?sortChildren@QTreeWidgetItem@@AAEXHW4SortOrder@Qt@@_N@Z',
                                                                                            '?setStretchLastSection@QHeaderView@@QAEX_N@Z',
                                                                                            '?setDefaultSectionSize@QHeaderView@@QAEXH@Z',
                                                                                            '?setMinimumSectionSize@QHeaderView@@QAEXH@Z',
                                                                                            '?setButtonSymbols@QAbstractSpinBox@@QAEXW4ButtonSymbols@1@@Z',
                                                                                            '?setWrapping@QAbstractSpinBox@@QAEX_N@Z',
                                                                                            '?indexWidget@QAbstractItemView@@QBEPAVQWidget@@ABVQModelIndex@@@Z',
                                                                                            '?setTextColor@QTreeWidgetItem@@QAEXHABVQColor@@@Z',
                                                                                            '?indexOfTopLevelItem@QTreeWidget@@QBEHPAVQTreeWidgetItem@@@Z',
                                                                                            '?closePersistentEditor@QTreeWidget@@QAEXPAVQTreeWidgetItem@@H@Z',
                                                                                            '?setItem@QFormLayout@@QAEXHW4ItemRole@1@PAVQLayoutItem@@@Z',
                                                                                            '?setCheckable@QGroupBox@@QAEX_N@Z',
                                                                                            '?isChecked@QGroupBox@@QBE_NXZ',
                                                                                            '?setChecked@QGroupBox@@QAEX_N@Z',
                                                                                            '?value@QSpinBox@@QBEHXZ',
                                                                                            '?setMinimum@QSpinBox@@QAEXH@Z',
                                                                                            '?setRange@QSpinBox@@QAEXHH@Z',
                                                                                            '?setHidden@QWidget@@QAEX_N@Z',
                                                                                            '?takeTopLevelItem@QTreeWidget@@QAEPAVQTreeWidgetItem@@H@Z',
                                                                                            '?standardButton@QDialogButtonBox@@QBE?AW4StandardButton@1@PAVQAbstractButton@@@Z',
                                                                                            '?insertSeparator@QComboBox@@QAEXH@Z',
                                                                                            '?setEditText@QComboBox@@QAEXABVQString@@@Z',
                                                                                            '?clear@QLabel@@QAEXXZ',
                                                                                            '?setReadOnly@QLineEdit@@QAEX_N@Z',
                                                                                            '??0QListWidgetItem@@QAE@ABVQString@@PAVQListWidget@@H@Z',
                                                                                            '??1QListWidgetItem@@UAE@XZ',
                                                                                            '?text@QListWidgetItem@@QBE?AVQString@@XZ',
                                                                                            '?currentItem@QListWidget@@QBEPAVQListWidgetItem@@XZ',
                                                                                            '?setCurrentRow@QListWidget@@QAEXH@Z',
                                                                                            '?setItemHidden@QListWidget@@QAEXPBVQListWidgetItem@@_N@Z',
                                                                                            '?clear@QListWidget@@QAEXXZ',
                                                                                            '??MQListWidgetItem@@UBE_NABV0@@Z',
                                                                                            '?clone@QListWidgetItem@@UBEPAV1@XZ',
                                                                                            '?data@QListWidgetItem@@UBE?AVQVariant@@H@Z',
                                                                                            '?read@QListWidgetItem@@UAEXAAVQDataStream@@@Z',
                                                                                            '?setBackgroundColor@QListWidgetItem@@UAEXABVQColor@@@Z',
                                                                                            '?setData@QListWidgetItem@@UAEXHABVQVariant@@@Z',
                                                                                            '?write@QListWidgetItem@@UBEXAAVQDataStream@@@Z',
                                                                                            '?buttonRole@QDialogButtonBox@@QBE?AW4ButtonRole@1@PAVQAbstractButton@@@Z',
                                                                                            '?rowCount@QGridLayout@@QBEHXZ',
                                                                                            '?itemAtPosition@QGridLayout@@QBEPAVQLayoutItem@@HH@Z',
                                                                                            '?staticMetaObject@QGridLayout@@2UQMetaObject@@B',
                                                                                            '?moveCursor@QTextEdit@@QAEXW4MoveOperation@QTextCursor@@W4MoveMode@3@@Z',
                                                                                            '?copy@QTextEdit@@QAEXXZ',
                                                                                            '?append@QTextEdit@@QAEXABVQString@@@Z',
                                                                                            '??0QTextBrowser@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QTextBrowser@@UAE@XZ',
                                                                                            '?backward@QTextBrowser@@UAEXXZ',
                                                                                            '?event@QTextBrowser@@MAE_NPAVQEvent@@@Z',
                                                                                            '?focusNextPrevChild@QTextBrowser@@MAE_N_N@Z',
                                                                                            '?focusOutEvent@QTextBrowser@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?forward@QTextBrowser@@UAEXXZ',
                                                                                            '?home@QTextBrowser@@UAEXXZ',
                                                                                            '?keyPressEvent@QTextBrowser@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?loadResource@QTextBrowser@@UAE?AVQVariant@@HABVQUrl@@@Z',
                                                                                            '?metaObject@QTextBrowser@@UBEPBUQMetaObject@@XZ',
                                                                                            '?mouseMoveEvent@QTextBrowser@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QTextBrowser@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QTextBrowser@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?paintEvent@QTextBrowser@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QTextBrowser@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QTextBrowser@@UAEPAXPBD@Z',
                                                                                            '?reload@QTextBrowser@@UAEXXZ',
                                                                                            '?setSource@QTextBrowser@@UAEXABVQUrl@@@Z',
                                                                                            '?text@QAbstractButton@@QBE?AVQString@@XZ',
                                                                                            '?setSingleStep@QAbstractSlider@@QAEXH@Z',
                                                                                            '?setPageStep@QAbstractSlider@@QAEXH@Z',
                                                                                            '?setOrientation@QAbstractSlider@@QAEXW4Orientation@Qt@@@Z',
                                                                                            '?setRange@QAbstractSlider@@QAEXHH@Z',
                                                                                            '?setSpacing@QGridLayout@@QAEXH@Z',
                                                                                            '??0QScrollBar@@QAE@PAVQWidget@@@Z',
                                                                                            '?metaObject@QScrollBar@@UBEPBUQMetaObject@@XZ',
                                                                                            '?mousePressEvent@QScrollBar@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QScrollBar@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?paintEvent@QScrollBar@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QScrollBar@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QScrollBar@@UAEPAXPBD@Z',
                                                                                            '?setPlainText@QPlainTextEdit@@QAEXABVQString@@@Z',
                                                                                            '?addButton@QDialogButtonBox@@QAEXPAVQAbstractButton@@W4ButtonRole@1@@Z',
                                                                                            '?setAlignment@QGroupBox@@QAEXH@Z',
                                                                                            '?updatesEnabled@QWidget@@QBE_NXZ',
                                                                                            '?setWordWrapMode@QPlainTextEdit@@QAEXW4WrapMode@QTextOption@@@Z',
                                                                                            '?setTabStopWidth@QPlainTextEdit@@QAEXH@Z',
                                                                                            '?appendPlainText@QPlainTextEdit@@QAEXABVQString@@@Z',
                                                                                            '?menu@QPushButton@@QBEPAVQMenu@@XZ',
                                                                                            '?clearSelection@QAbstractItemView@@QAEXXZ',
                                                                                            '?setSortIndicator@QHeaderView@@QAEXHW4SortOrder@Qt@@@Z',
                                                                                            '?setBackgroundColor@QTreeWidgetItem@@QAEXHABVQColor@@@Z',
                                                                                            '?setWindowFlags@QWidget@@QAEXV?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?setSelectionBehavior@QAbstractItemView@@QAEXW4SelectionBehavior@1@@Z',
                                                                                            '?setDragDropOverwriteMode@QAbstractItemView@@QAEX_N@Z',
                                                                                            '?horizontalHeader@QTableView@@QBEPAVQHeaderView@@XZ',
                                                                                            '?setColumnWidth@QTableView@@QAEXHH@Z',
                                                                                            '?setColumnHidden@QTableView@@QAEXH_N@Z',
                                                                                            '?setWordWrap@QTableView@@QAEX_N@Z',
                                                                                            '??0QTableWidgetItem@@QAE@H@Z',
                                                                                            '??0QTableWidgetItem@@QAE@ABVQString@@H@Z',
                                                                                            '??1QTableWidgetItem@@UAE@XZ',
                                                                                            '?setText@QTableWidgetItem@@QAEXABVQString@@@Z',
                                                                                            '??0QTableWidget@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QTableWidget@@UAE@XZ',
                                                                                            '?setRowCount@QTableWidget@@QAEXH@Z',
                                                                                            '?rowCount@QTableWidget@@QBEHXZ',
                                                                                            '?setColumnCount@QTableWidget@@QAEXH@Z',
                                                                                            '?columnCount@QTableWidget@@QBEHXZ',
                                                                                            '?row@QTableWidget@@QBEHPBVQTableWidgetItem@@@Z',
                                                                                            '?item@QTableWidget@@QBEPAVQTableWidgetItem@@HH@Z',
                                                                                            '?setItem@QTableWidget@@QAEXHHPAVQTableWidgetItem@@@Z',
                                                                                            '?horizontalHeaderItem@QTableWidget@@QBEPAVQTableWidgetItem@@H@Z',
                                                                                            '?setHorizontalHeaderItem@QTableWidget@@QAEXHPAVQTableWidgetItem@@@Z',
                                                                                            '?setSortingEnabled@QTableWidget@@QAEX_N@Z',
                                                                                            '?selectedItems@QTableWidget@@QBE?AV?$QList@PAVQTableWidgetItem@@@@XZ',
                                                                                            '??MQTableWidgetItem@@UBE_NABV0@@Z',
                                                                                            '?clone@QTableWidgetItem@@UBEPAV1@XZ',
                                                                                            '?currentChanged@QTableView@@MAEXABVQModelIndex@@0@Z',
                                                                                            '?data@QTableWidgetItem@@UBE?AVQVariant@@H@Z',
                                                                                            '?dataChanged@QAbstractItemView@@MAEXABVQModelIndex@@0ABV?$QVector@H@@@Z',
                                                                                            '?doItemsLayout@QTableView@@UAEXXZ',
                                                                                            '?dragMoveEvent@QAbstractItemView@@MAEXPAVQDragMoveEvent@@@Z',
                                                                                            '?dropEvent@QTableWidget@@MAEXPAVQDropEvent@@@Z',
                                                                                            '?dropMimeData@QTableWidget@@MAE_NHHPBVQMimeData@@W4DropAction@Qt@@@Z',
                                                                                            '?event@QTableWidget@@MAE_NPAVQEvent@@@Z',
                                                                                            '?horizontalOffset@QTableView@@MBEHXZ',
                                                                                            '?horizontalScrollbarAction@QTableView@@MAEXH@Z',
                                                                                            '?indexAt@QTableView@@UBE?AVQModelIndex@@ABVQPoint@@@Z',
                                                                                            '?isIndexHidden@QTableView@@MBE_NABVQModelIndex@@@Z',
                                                                                            '?metaObject@QTableWidget@@UBEPBUQMetaObject@@XZ',
                                                                                            '?mimeData@QTableWidget@@MBEPAVQMimeData@@V?$QList@PAVQTableWidgetItem@@@@@Z',
                                                                                            '?mimeTypes@QTableWidget@@MBE?AVQStringList@@XZ',
                                                                                            '?mouseMoveEvent@QAbstractItemView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QAbstractItemView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?moveCursor@QTableView@@MAE?AVQModelIndex@@W4CursorAction@QAbstractItemView@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z',
                                                                                            '?paintEvent@QTableView@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?qt_metacall@QTableWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QTableWidget@@UAEPAXPBD@Z',
                                                                                            '?read@QTableWidgetItem@@UAEXAAVQDataStream@@@Z',
                                                                                            '?reset@QAbstractItemView@@UAEXXZ',
                                                                                            '?rowsAboutToBeRemoved@QAbstractItemView@@MAEXABVQModelIndex@@HH@Z',
                                                                                            '?rowsInserted@QAbstractItemView@@MAEXABVQModelIndex@@HH@Z',
                                                                                            '?scrollContentsBy@QTableView@@MAEXHH@Z',
                                                                                            '?scrollTo@QTableView@@UAEXABVQModelIndex@@W4ScrollHint@QAbstractItemView@@@Z',
                                                                                            '?selectedIndexes@QTableView@@MBE?AV?$QList@VQModelIndex@@@@XZ',
                                                                                            '?selectionChanged@QTableView@@MAEXABVQItemSelection@@0@Z',
                                                                                            '?setData@QTableWidgetItem@@UAEXHABVQVariant@@@Z',
                                                                                            '?setModel@QTableWidget@@EAEXPAVQAbstractItemModel@@@Z',
                                                                                            '?setRootIndex@QTableView@@UAEXABVQModelIndex@@@Z',
                                                                                            '?setSelection@QTableView@@MAEXABVQRect@@V?$QFlags@W4SelectionFlag@QItemSelectionModel@@@@@Z',
                                                                                            '?setSelectionModel@QTableView@@UAEXPAVQItemSelectionModel@@@Z',
                                                                                            '?sizeHintForColumn@QTableView@@MBEHH@Z',
                                                                                            '?sizeHintForRow@QTableView@@MBEHH@Z',
                                                                                            '?supportedDropActions@QTableWidget@@MBE?AV?$QFlags@W4DropAction@Qt@@@@XZ',
                                                                                            '?timerEvent@QTableView@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?updateGeometries@QTableView@@MAEXXZ',
                                                                                            '?verticalOffset@QTableView@@MBEHXZ',
                                                                                            '?verticalScrollbarAction@QTableView@@MAEXH@Z',
                                                                                            '?viewOptions@QTableView@@MBE?AVQStyleOptionViewItem@@XZ',
                                                                                            '?viewportSizeHint@QTableView@@MBE?AVQSize@@XZ',
                                                                                            '?visualRect@QTableView@@UBE?AVQRect@@ABVQModelIndex@@@Z',
                                                                                            '?visualRegionForSelection@QTableView@@MBE?AVQRegion@@ABVQItemSelection@@@Z',
                                                                                            '?write@QTableWidgetItem@@UBEXAAVQDataStream@@@Z',
                                                                                            '?singleStep@QAbstractSlider@@QBEHXZ',
                                                                                            '?setLineWrapMode@QTextEdit@@QAEXW4LineWrapMode@1@@Z',
                                                                                            '?find@QTextEdit@@QAE_NABVQString@@V?$QFlags@W4FindFlag@QTextDocument@@@@@Z',
                                                                                            '?find@QTextEdit@@QAE_NABVQRegExp@@V?$QFlags@W4FindFlag@QTextDocument@@@@@Z',
                                                                                            '?toHtml@QTextEdit@@QBE?AVQString@@XZ',
                                                                                            '?createStandardContextMenu@QTextEdit@@QAEPAVQMenu@@XZ',
                                                                                            '?print@QTextEdit@@QBEXPAVQPagedPaintDevice@@@Z',
                                                                                            '?setCurrentFont@QTextEdit@@QAEXABVQFont@@@Z',
                                                                                            '?setPlainText@QTextEdit@@QAEXABVQString@@@Z',
                                                                                            '??0QButtonGroup@@QAE@PAVQObject@@@Z',
                                                                                            '??1QButtonGroup@@UAE@XZ',
                                                                                            '?addButton@QButtonGroup@@QAEXPAVQAbstractButton@@H@Z',
                                                                                            '?metaObject@QButtonGroup@@UBEPBUQMetaObject@@XZ',
                                                                                            '?qt_metacall@QButtonGroup@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QButtonGroup@@UAEPAXPBD@Z',
                                                                                            '?setSectionResizeMode@QHeaderView@@QAEXW4ResizeMode@1@@Z',
                                                                                            '?insertStretch@QBoxLayout@@QAEXHH@Z',
                                                                                            '?qt_metacast@QMessageBox@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QMessageBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QMessageBox@@2UQMetaObject@@B',
                                                                                            '?foregroundRole@QWidget@@QBE?AW4ColorRole@QPalette@@XZ',
                                                                                            '?styleSheet@QWidget@@QBE?AVQString@@XZ',
                                                                                            '?alignment@QLabel@@QBE?AV?$QFlags@W4AlignmentFlag@Qt@@@@XZ',
                                                                                            '?margin@QLabel@@QBEHXZ',
                                                                                            '?init@QStyleOption@@QAEXPBVQWidget@@@Z',
                                                                                            '?qt_metacast@QStatusBar@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QStatusBar@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QStatusBar@@2UQMetaObject@@B',
                                                                                            '?staticMetaObject@QFrame@@2UQMetaObject@@B',
                                                                                            '?mapFromGlobal@QWidget@@QBE?AVQPoint@@ABV2@@Z',
                                                                                            '?document@QTextEdit@@QBEPAVQTextDocument@@XZ',
                                                                                            '?insertPlainText@QTextEdit@@QAEXABVQString@@@Z',
                                                                                            '?locale@QWidget@@QBE?AVQLocale@@XZ',
                                                                                            '?repaint@QWidget@@QAEXXZ',
                                                                                            '?staticMetaObject@QTabWidget@@2UQMetaObject@@B',
                                                                                            '?addAction@QActionGroup@@QAEPAVQAction@@ABVQString@@@Z',
                                                                                            '?actions@QActionGroup@@QBE?AV?$QList@PAVQAction@@@@XZ',
                                                                                            '??0QAbstractScrollArea@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QAbstractScrollArea@@UAE@XZ',
                                                                                            '?horizontalScrollBar@QAbstractScrollArea@@QBEPAVQScrollBar@@XZ',
                                                                                            '??0QStyleOptionFocusRect@@QAE@XZ',
                                                                                            '??1QStyleOptionFocusRect@@QAE@XZ',
                                                                                            '?dragEnterEvent@QAbstractScrollArea@@MAEXPAVQDragEnterEvent@@@Z',
                                                                                            '?dragLeaveEvent@QAbstractScrollArea@@MAEXPAVQDragLeaveEvent@@@Z',
                                                                                            '?dragMoveEvent@QAbstractScrollArea@@MAEXPAVQDragMoveEvent@@@Z',
                                                                                            '?dropEvent@QAbstractScrollArea@@MAEXPAVQDropEvent@@@Z',
                                                                                            '?event@QAbstractScrollArea@@MAE_NPAVQEvent@@@Z',
                                                                                            '?keyPressEvent@QAbstractScrollArea@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?mouseDoubleClickEvent@QAbstractScrollArea@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QAbstractScrollArea@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?scrollContentsBy@QAbstractScrollArea@@MAEXHH@Z',
                                                                                            '?qt_metacast@QAbstractScrollArea@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QAbstractScrollArea@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QAbstractScrollArea@@2UQMetaObject@@B',
                                                                                            '?staticMetaObject@QScrollBar@@2UQMetaObject@@B',
                                                                                            '?qt_metacast@QFileDialog@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QFileDialog@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QFileDialog@@2UQMetaObject@@B',
                                                                                            '?setInsertPolicy@QComboBox@@QAEXW4InsertPolicy@1@@Z',
                                                                                            '?createStandardContextMenu@QLineEdit@@QAEPAVQMenu@@XZ',
                                                                                            '?cursorForPosition@QPlainTextEdit@@QBE?AVQTextCursor@@ABVQPoint@@@Z',
                                                                                            '?getFont@QFontDialog@@SA?AVQFont@@PA_NABV2@PAVQWidget@@ABVQString@@V?$QFlags@W4FontDialogOption@QFontDialog@@@@@Z',
                                                                                            '?click@QAbstractButton@@QAEXXZ',
                                                                                            '?setItemData@QComboBox@@QAEXHABVQVariant@@H@Z',
                                                                                            '??0QScrollArea@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QScrollArea@@UAE@XZ',
                                                                                            '?setWidget@QScrollArea@@QAEXPAVQWidget@@@Z',
                                                                                            '?setWidgetResizable@QScrollArea@@QAEX_N@Z',
                                                                                            '?resizeEvent@QScrollArea@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?id@QButtonGroup@@QBEHPAVQAbstractButton@@@Z',
                                                                                            '?checkedId@QButtonGroup@@QBEHXZ',
                                                                                            '?group@QAbstractButton@@QBEPAVQButtonGroup@@XZ',
                                                                                            '??0QRadioButton@@QAE@ABVQString@@PAVQWidget@@@Z',
                                                                                            '?event@QScrollArea@@MAE_NPAVQEvent@@@Z',
                                                                                            '?eventFilter@QScrollArea@@MAE_NPAVQObject@@PAVQEvent@@@Z',
                                                                                            '?focusNextPrevChild@QScrollArea@@UAE_N_N@Z',
                                                                                            '?mouseMoveEvent@QAbstractScrollArea@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QAbstractScrollArea@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?paintEvent@QAbstractScrollArea@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?scrollContentsBy@QScrollArea@@MAEXHH@Z',
                                                                                            '?sizeHint@QScrollArea@@UBE?AVQSize@@XZ',
                                                                                            '?viewportSizeHint@QScrollArea@@MBE?AVQSize@@XZ',
                                                                                            '?staticMetaObject@QCheckBox@@2UQMetaObject@@B',
                                                                                            '?staticMetaObject@QPushButton@@2UQMetaObject@@B',
                                                                                            '?setVerticalScrollMode@QAbstractItemView@@QAEXW4ScrollMode@1@@Z',
                                                                                            '?setHorizontalScrollMode@QAbstractItemView@@QAEXW4ScrollMode@1@@Z',
                                                                                            '?verticalHeader@QTableView@@QBEPAVQHeaderView@@XZ',
                                                                                            '?setGridStyle@QTableView@@QAEXW4PenStyle@Qt@@@Z',
                                                                                            '?setShowGrid@QTableView@@QAEX_N@Z',
                                                                                            '?text@QTableWidgetItem@@QBE?AVQString@@XZ',
                                                                                            '?verticalHeaderItem@QTableWidget@@QBEPAVQTableWidgetItem@@H@Z',
                                                                                            '?setVerticalHeaderItem@QTableWidget@@QAEXHPAVQTableWidgetItem@@@Z',
                                                                                            '?currentItem@QTableWidget@@QBEPAVQTableWidgetItem@@XZ',
                                                                                            '?isSortingEnabled@QTableWidget@@QBE_NXZ',
                                                                                            '?setSectionResizeMode@QHeaderView@@QAEXHW4ResizeMode@1@@Z',
                                                                                            '?setCenterButtons@QDialogButtonBox@@QAEX_N@Z',
                                                                                            '??0QListWidgetItem@@QAE@ABVQIcon@@ABVQString@@PAVQListWidget@@H@Z',
                                                                                            '?insertItem@QListWidget@@QAEXHPAVQListWidgetItem@@@Z',
                                                                                            '?setWindowModality@QWidget@@QAEXW4WindowModality@Qt@@@Z',
                                                                                            '?focusPolicy@QWidget@@QBE?AW4FocusPolicy@Qt@@XZ',
                                                                                            '?setFocusProxy@QWidget@@QAEXPAV1@@Z',
                                                                                            '?currentIndex@QTabWidget@@QBEHXZ',
                                                                                            '?setVerticalScrollBarPolicy@QAbstractScrollArea@@QAEXW4ScrollBarPolicy@Qt@@@Z',
                                                                                            '?staticMetaObject@QAbstractButton@@2UQMetaObject@@B',
                                                                                            '??0QLineEdit@@QAE@ABVQString@@PAVQWidget@@@Z',
                                                                                            '?setEchoMode@QLineEdit@@QAEXW4EchoMode@1@@Z',
                                                                                            '?setValidator@QLineEdit@@QAEXPBVQValidator@@@Z',
                                                                                            '?currentData@QComboBox@@QBE?AVQVariant@@H@Z',
                                                                                            '?button@QButtonGroup@@QBEPAVQAbstractButton@@H@Z',
                                                                                            '?contentsMargins@QLayout@@QBE?AVQMargins@@XZ',
                                                                                            '??0QDoubleSpinBox@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QDoubleSpinBox@@UAE@XZ',
                                                                                            '?value@QDoubleSpinBox@@QBENXZ',
                                                                                            '?setSingleStep@QDoubleSpinBox@@QAEXN@Z',
                                                                                            '?setMaximum@QDoubleSpinBox@@QAEXN@Z',
                                                                                            '?setDecimals@QDoubleSpinBox@@QAEXH@Z',
                                                                                            '?setValue@QDoubleSpinBox@@QAEXN@Z',
                                                                                            '?event@QAbstractSpinBox@@UAE_NPAVQEvent@@@Z',
                                                                                            '?fixup@QDoubleSpinBox@@UBEXAAVQString@@@Z',
                                                                                            '?metaObject@QDoubleSpinBox@@UBEPBUQMetaObject@@XZ',
                                                                                            '?qt_metacall@QDoubleSpinBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QDoubleSpinBox@@UAEPAXPBD@Z',
                                                                                            '?textFromValue@QDoubleSpinBox@@UBE?AVQString@@N@Z',
                                                                                            '?validate@QDoubleSpinBox@@UBE?AW4State@QValidator@@AAVQString@@AAH@Z',
                                                                                            '?valueFromText@QDoubleSpinBox@@UBENABVQString@@@Z',
                                                                                            '?hideRow@QTableView@@QAEXH@Z',
                                                                                            '?itemAt@QTableWidget@@QBEPAVQTableWidgetItem@@ABVQPoint@@@Z',
                                                                                            '?clear@QTableWidget@@QAEXXZ',
                                                                                            '?setSectionsMovable@QHeaderView@@QAEX_N@Z',
                                                                                            '?setSectionsClickable@QHeaderView@@QAEX_N@Z',
                                                                                            '?staticMetaObject@QTextEdit@@2UQMetaObject@@B',
                                                                                            '?staticMetaObject@QLabel@@2UQMetaObject@@B',
                                                                                            '?staticMetaObject@QToolButton@@2UQMetaObject@@B',
                                                                                            '?staticMetaObject@QPlainTextEdit@@2UQMetaObject@@B',
                                                                                            '?qt_metacast@QScrollArea@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QScrollArea@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?staticMetaObject@QScrollArea@@2UQMetaObject@@B',
                                                                                            '?setContentsMargins@QWidget@@QAEXHHHH@Z',
                                                                                            '?setExpanded@QTreeView@@QAEXABVQModelIndex@@_N@Z',
                                                                                            '?metaObject@QTreeView@@UBEPBUQMetaObject@@XZ',
                                                                                            '?staticMetaObject@QGroupBox@@2UQMetaObject@@B',
                                                                                            '?qt_metacast@QCheckBox@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QActionGroup@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QToolBar@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QStackedWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QMenuBar@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QLineEdit@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QCheckBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QActionGroup@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?paintEvent@QToolBar@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEvent@QMenuBar@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEvent@QLineEdit@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEvent@QFrame@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEvent@QCheckBox@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?nextCheckState@QCheckBox@@MAEXXZ',
                                                                                            '?mouseReleaseEvent@QMenuBar@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QMenuBar@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QMenuBar@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QCheckBox@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseDoubleClickEvent@QLineEdit@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?minimumSizeHint@QMenuBar@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QLineEdit@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QCheckBox@@UBE?AVQSize@@XZ',
                                                                                            '?metaObject@QWidget@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QToolBar@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QStackedWidget@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QMenuBar@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QLineEdit@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QCheckBox@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QActionGroup@@UBEPBUQMetaObject@@XZ',
                                                                                            '?leaveEvent@QMenuBar@@MAEXPAVQEvent@@@Z',
                                                                                            '?keyPressEvent@QMenuBar@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyPressEvent@QLineEdit@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?inputMethodQuery@QLineEdit@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?inputMethodEvent@QLineEdit@@MAEXPAVQInputMethodEvent@@@Z',
                                                                                            '?hitButton@QCheckBox@@MBE_NABVQPoint@@@Z',
                                                                                            '?heightForWidth@QMenuBar@@UBEHH@Z',
                                                                                            '?focusOutEvent@QMenuBar@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusOutEvent@QLineEdit@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusInEvent@QMenuBar@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusInEvent@QLineEdit@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?eventFilter@QMenuBar@@MAE_NPAVQObject@@PAVQEvent@@@Z',
                                                                                            '?event@QToolBar@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QStackedWidget@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QMenuBar@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QMainWindow@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QLineEdit@@UAE_NPAVQEvent@@@Z',
                                                                                            '?event@QCheckBox@@MAE_NPAVQEvent@@@Z',
                                                                                            '?dropEvent@QLineEdit@@MAEXPAVQDropEvent@@@Z',
                                                                                            '?dragMoveEvent@QLineEdit@@MAEXPAVQDragMoveEvent@@@Z',
                                                                                            '?dragLeaveEvent@QLineEdit@@MAEXPAVQDragLeaveEvent@@@Z',
                                                                                            '?dragEnterEvent@QLineEdit@@MAEXPAVQDragEnterEvent@@@Z',
                                                                                            '?contextMenuEvent@QMainWindow@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?contextMenuEvent@QLineEdit@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?checkStateSet@QCheckBox@@MAEXXZ',
                                                                                            '?changeEvent@QToolBar@@MAEXPAVQEvent@@@Z',
                                                                                            '?changeEvent@QMenuBar@@MAEXPAVQEvent@@@Z',
                                                                                            '?changeEvent@QLineEdit@@MAEXPAVQEvent@@@Z',
                                                                                            '?actionEvent@QToolBar@@MAEXPAVQActionEvent@@@Z',
                                                                                            '?actionEvent@QMenuBar@@MAEXPAVQActionEvent@@@Z',
                                                                                            '?setWindowTitle@QMessageBox@@QAEXABVQString@@@Z',
                                                                                            '?setDetailedText@QMessageBox@@QAEXABVQString@@@Z',
                                                                                            '?setCheckBox@QMessageBox@@QAEXPAVQCheckBox@@@Z',
                                                                                            '?setIcon@QMessageBox@@QAEXW4Icon@1@@Z',
                                                                                            '?clickedButton@QMessageBox@@QBEPAVQAbstractButton@@XZ',
                                                                                            '?setDefaultButton@QMessageBox@@QAEXW4StandardButton@1@@Z',
                                                                                            '?setDefaultButton@QMessageBox@@QAEXPAVQPushButton@@@Z',
                                                                                            '?addButton@QMessageBox@@QAEPAVQPushButton@@W4StandardButton@1@@Z',
                                                                                            '?addButton@QMessageBox@@QAEPAVQPushButton@@ABVQString@@W4ButtonRole@1@@Z',
                                                                                            '?setToolButtonStyle@QToolBar@@QAEXW4ToolButtonStyle@Qt@@@Z',
                                                                                            '?setIconSize@QToolBar@@QAEXABVQSize@@@Z',
                                                                                            '?insertWidget@QToolBar@@QAEPAVQAction@@PAV2@PAVQWidget@@@Z',
                                                                                            '?addWidget@QToolBar@@QAEPAVQAction@@PAVQWidget@@@Z',
                                                                                            '?addSeparator@QToolBar@@QAEPAVQAction@@XZ',
                                                                                            '?setMovable@QToolBar@@QAEX_N@Z',
                                                                                            '??1QToolBar@@UAE@XZ',
                                                                                            '??0QToolBar@@QAE@PAVQWidget@@@Z',
                                                                                            '?setCurrentWidget@QStackedWidget@@QAEXPAVQWidget@@@Z',
                                                                                            '?addWidget@QStackedWidget@@QAEHPAVQWidget@@@Z',
                                                                                            '??1QStackedWidget@@UAE@XZ',
                                                                                            '??0QStackedWidget@@QAE@PAVQWidget@@@Z',
                                                                                            '?addMenu@QMenuBar@@QAEPAVQMenu@@ABVQString@@@Z',
                                                                                            '??1QMenuBar@@UAE@XZ',
                                                                                            '??0QMenuBar@@QAE@PAVQWidget@@@Z',
                                                                                            '?menuAction@QMenu@@QBEPAVQAction@@XZ',
                                                                                            '?insertSeparator@QMenu@@QAEPAVQAction@@PAV2@@Z',
                                                                                            '?addMenu@QMenu@@QAEPAV1@ABVQString@@@Z',
                                                                                            '?insert@QLineEdit@@QAEXABVQString@@@Z',
                                                                                            '?setInputMask@QLineEdit@@QAEXABVQString@@@Z',
                                                                                            '??1QLineEdit@@UAE@XZ',
                                                                                            '??0QLineEdit@@QAE@PAVQWidget@@@Z',
                                                                                            '?focusWidget@QApplication@@SAPAVQWidget@@XZ',
                                                                                            '?setWindowIcon@QApplication@@SAXABVQIcon@@@Z',
                                                                                            '?setDefault@QPushButton@@QAEX_N@Z',
                                                                                            '?setExclusive@QActionGroup@@QAEX_N@Z',
                                                                                            '?addAction@QActionGroup@@QAEPAVQAction@@PAV2@@Z',
                                                                                            '??1QActionGroup@@UAE@XZ',
                                                                                            '??0QActionGroup@@QAE@PAVQObject@@@Z',
                                                                                            '?setVisible@QAction@@QAEX_N@Z',
                                                                                            '?setIconVisibleInMenu@QAction@@QAEX_N@Z',
                                                                                            '?setMenuRole@QAction@@QAEXW4MenuRole@1@@Z',
                                                                                            '?isEnabled@QAction@@QBE_NXZ',
                                                                                            '?shortcuts@QAction@@QBE?AV?$QList@VQKeySequence@@@@XZ',
                                                                                            '?setShortcuts@QAction@@QAEXABV?$QList@VQKeySequence@@@@@Z',
                                                                                            '?setShortcut@QAction@@QAEXABVQKeySequence@@@Z',
                                                                                            '?menu@QAction@@QBEPAVQMenu@@XZ',
                                                                                            '?setToolTip@QAction@@QAEXABVQString@@@Z',
                                                                                            '?setIconText@QAction@@QAEXABVQString@@@Z',
                                                                                            '?text@QAction@@QBE?AVQString@@XZ',
                                                                                            '?setText@QAction@@QAEXABVQString@@@Z',
                                                                                            '?icon@QAction@@QBE?AVQIcon@@XZ',
                                                                                            '?setIcon@QAction@@QAEXABVQIcon@@@Z',
                                                                                            '??0QAction@@QAE@PAVQObject@@@Z',
                                                                                            '?currentText@QComboBox@@QBE?AVQString@@XZ',
                                                                                            '?lineEdit@QComboBox@@QBEPAVQLineEdit@@XZ',
                                                                                            '??1QCheckBox@@UAE@XZ',
                                                                                            '??0QCheckBox@@QAE@PAVQWidget@@@Z',
                                                                                            '?setChecked@QAbstractButton@@QAEX_N@Z',
                                                                                            '?isChecked@QAbstractButton@@QBE_NXZ',
                                                                                            '??0QHBoxLayout@@QAE@PAVQWidget@@@Z',
                                                                                            '?setSpacing@QBoxLayout@@QAEXH@Z',
                                                                                            '?setContentsMargins@QLayout@@QAEXHHHH@Z',
                                                                                            '??1QFileDialog@@UAE@XZ',
                                                                                            '?result@QDialog@@QBEHXZ',
                                                                                            '?sizes@QSplitter@@QBE?AV?$QList@H@@XZ',
                                                                                            '??1QSplitter@@UAE@XZ',
                                                                                            '??0QSplitter@@QAE@PAVQWidget@@@Z',
                                                                                            '?setUnifiedTitleAndToolBarOnMac@QMainWindow@@QAEX_N@Z',
                                                                                            '?addToolBar@QMainWindow@@QAEXW4ToolBarArea@Qt@@PAVQToolBar@@@Z',
                                                                                            '?insertToolBarBreak@QMainWindow@@QAEXPAVQToolBar@@@Z',
                                                                                            '?setCentralWidget@QMainWindow@@QAEXPAVQWidget@@@Z',
                                                                                            '?setStatusBar@QMainWindow@@QAEXPAVQStatusBar@@@Z',
                                                                                            '?setMenuBar@QMainWindow@@QAEXPAVQMenuBar@@@Z',
                                                                                            '??1QMainWindow@@UAE@XZ',
                                                                                            '??0QMainWindow@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?actions@QWidget@@QBE?AV?$QList@PAVQAction@@@@XZ',
                                                                                            '?setSizePolicy@QWidget@@QAEXVQSizePolicy@@@Z',
                                                                                            '?sizePolicy@QWidget@@QBE?AVQSizePolicy@@XZ',
                                                                                            '?setWindowState@QWidget@@QAEXV?$QFlags@W4WindowState@Qt@@@@@Z',
                                                                                            '?isMaximized@QWidget@@QBE_NXZ',
                                                                                            '?setGeometry@QWidget@@QAEXABVQRect@@@Z',
                                                                                            '?resize@QWidget@@QAEXHH@Z',
                                                                                            '?move@QWidget@@QAEXABVQPoint@@@Z',
                                                                                            '?close@QWidget@@QAE_NXZ',
                                                                                            '?hide@QWidget@@QAEXXZ',
                                                                                            '?setTabOrder@QWidget@@SAXPAV1@0@Z',
                                                                                            '?setWindowFilePath@QWidget@@QAEXABVQString@@@Z',
                                                                                            '?setWindowIcon@QWidget@@QAEXABVQIcon@@@Z',
                                                                                            '?setMinimumWidth@QWidget@@QAEXH@Z',
                                                                                            '?setMaximumSize@QWidget@@QAEXABVQSize@@@Z',
                                                                                            '?pos@QWidget@@QBE?AVQPoint@@XZ',
                                                                                            '?setWindowModified@QWidget@@QAEX_N@Z',
                                                                                            '?style@QWidget@@QBEPAVQStyle@@XZ',
                                                                                            '??1QWidget@@UAE@XZ',
                                                                                            '??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?setVerticalStretch@QSizePolicy@@QAEXH@Z',
                                                                                            '?setHorizontalStretch@QSizePolicy@@QAEXH@Z',
                                                                                            '?hasHeightForWidth@QSizePolicy@@QBE_NXZ',
                                                                                            '?setHeightForWidth@QSizePolicy@@QAEX_N@Z',
                                                                                            '??0QSizePolicy@@QAE@W4Policy@0@0W4ControlType@0@@Z',
                                                                                            '?write@QTreeWidgetItem@@UBEXAAVQDataStream@@@Z',
                                                                                            '?widget@QLayoutItem@@UAEPAVQWidget@@XZ',
                                                                                            '?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z',
                                                                                            '?updateEditorGeometry@QStyledItemDelegate@@UBEXPAVQWidget@@ABVQStyleOptionViewItem@@ABVQModelIndex@@@Z',
                                                                                            '?timerEvent@QToolButton@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?timerEvent@QAbstractButton@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?takeAt@QBoxLayout@@UAEPAVQLayoutItem@@H@Z',
                                                                                            '?supportedDropActions@QTreeWidget@@MBE?AV?$QFlags@W4DropAction@Qt@@@@XZ',
                                                                                            '?spacerItem@QSpacerItem@@UAEPAV1@XZ',
                                                                                            '?spacerItem@QLayoutItem@@UAEPAVQSpacerItem@@XZ',
                                                                                            '?sizeHint@QWidget@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QToolButton@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QStyledItemDelegate@@UBE?AVQSize@@ABVQStyleOptionViewItem@@ABVQModelIndex@@@Z',
                                                                                            '?sizeHint@QSpacerItem@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QPushButton@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QLabel@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QDialog@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QBoxLayout@@UBE?AVQSize@@XZ',
                                                                                            '?showEvent@QDialog@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?setVisible@QDialog@@UAEX_N@Z',
                                                                                            '?setSelectionModel@QTreeWidget@@UAEXPAVQItemSelectionModel@@@Z',
                                                                                            '?setModelData@QStyledItemDelegate@@UBEXPAVQWidget@@PAVQAbstractItemModel@@ABVQModelIndex@@@Z',
                                                                                            '?setModel@QTreeWidget@@EAEXPAVQAbstractItemModel@@@Z',
                                                                                            '?setGeometry@QSpacerItem@@UAEXABVQRect@@@Z',
                                                                                            '?setGeometry@QBoxLayout@@UAEXABVQRect@@@Z',
                                                                                            '?setEditorData@QStyledItemDelegate@@UBEXPAVQWidget@@ABVQModelIndex@@@Z',
                                                                                            '?setData@QTreeWidgetItem@@UAEXHHABVQVariant@@@Z',
                                                                                            '?resizeEvent@QDialog@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?reject@QDialog@@UAEXXZ',
                                                                                            '?read@QTreeWidgetItem@@UAEXAAVQDataStream@@@Z',
                                                                                            '?qt_metacast@QVBoxLayout@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QTreeWidget@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QToolButton@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QPushButton@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QLabel@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QHBoxLayout@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QDialogButtonBox@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QVBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QTreeWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QToolButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QPushButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QLabel@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QHBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QDialogButtonBox@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?paintingRoles@QAbstractItemDelegate@@UBE?AV?$QVector@H@@XZ',
                                                                                            '?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEvent@QToolButton@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEvent@QPushButton@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEvent@QLabel@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paint@QStyledItemDelegate@@UBEXPAVQPainter@@ABVQStyleOptionViewItem@@ABVQModelIndex@@@Z',
                                                                                            '?open@QDialog@@UAEXXZ',
                                                                                            '?nextCheckState@QToolButton@@MAEXXZ',
                                                                                            '?nextCheckState@QAbstractButton@@MAEXXZ',
                                                                                            '?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QToolButton@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QLabel@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QToolButton@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QLabel@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QLabel@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?minimumSizeHint@QToolButton@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QPushButton@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QLabel@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QDialog@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSize@QSpacerItem@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSize@QBoxLayout@@UBE?AVQSize@@XZ',
                                                                                            '?minimumHeightForWidth@QLayoutItem@@UBEHH@Z',
                                                                                            '?minimumHeightForWidth@QBoxLayout@@UBEHH@Z',
                                                                                            '?mimeTypes@QTreeWidget@@MBE?AVQStringList@@XZ',
                                                                                            '?mimeData@QTreeWidget@@MBEPAVQMimeData@@V?$QList@PAVQTreeWidgetItem@@@@@Z',
                                                                                            '?metaObject@QVBoxLayout@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QTreeWidget@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QToolButton@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QPushButton@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QLabel@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QHBoxLayout@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QDialogButtonBox@@UBEPBUQMetaObject@@XZ',
                                                                                            '?maximumSize@QSpacerItem@@UBE?AVQSize@@XZ',
                                                                                            '?maximumSize@QBoxLayout@@UBE?AVQSize@@XZ',
                                                                                            '?leaveEvent@QToolButton@@MAEXPAVQEvent@@@Z',
                                                                                            '?layout@QLayoutItem@@UAEPAVQLayout@@XZ',
                                                                                            '?layout@QLayout@@UAEPAV1@XZ',
                                                                                            '?keyReleaseEvent@QAbstractButton@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyPressEvent@QWidget@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyPressEvent@QPushButton@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyPressEvent@QLabel@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyPressEvent@QDialog@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyPressEvent@QAbstractButton@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?itemAt@QBoxLayout@@UBEPAVQLayoutItem@@H@Z',
                                                                                            '?isEmpty@QSpacerItem@@UBE_NXZ',
                                                                                            '?isEmpty@QLayout@@UBE_NXZ',
                                                                                            '?invalidate@QLayoutItem@@UAEXXZ',
                                                                                            '?invalidate@QBoxLayout@@UAEXXZ',
                                                                                            '?initStyleOption@QStyledItemDelegate@@MBEXPAVQStyleOptionViewItem@@ABVQModelIndex@@@Z',
                                                                                            '?indexOf@QLayout@@UBEHPAVQWidget@@@Z',
                                                                                            '?hitButton@QToolButton@@MBE_NABVQPoint@@@Z',
                                                                                            '?hitButton@QAbstractButton@@MBE_NABVQPoint@@@Z',
                                                                                            '?helpEvent@QAbstractItemDelegate@@UAE_NPAVQHelpEvent@@PAVQAbstractItemView@@ABVQStyleOptionViewItem@@ABVQModelIndex@@@Z',
                                                                                            '?heightForWidth@QLayoutItem@@UBEHH@Z',
                                                                                            '?heightForWidth@QLabel@@UBEHH@Z',
                                                                                            '?heightForWidth@QBoxLayout@@UBEHH@Z',
                                                                                            '?hasHeightForWidth@QLayoutItem@@UBE_NXZ',
                                                                                            '?hasHeightForWidth@QBoxLayout@@UBE_NXZ',
                                                                                            '?geometry@QSpacerItem@@UBE?AVQRect@@XZ',
                                                                                            '?geometry@QLayout@@UBE?AVQRect@@XZ',
                                                                                            '?focusOutEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusOutEvent@QLabel@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusOutEvent@QAbstractButton@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusNextPrevChild@QWidget@@MAE_N_N@Z',
                                                                                            '?focusNextPrevChild@QLabel@@MAE_N_N@Z',
                                                                                            '?focusInEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusInEvent@QLabel@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusInEvent@QAbstractButton@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?expandingDirections@QSpacerItem@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ',
                                                                                            '?expandingDirections@QBoxLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ',
                                                                                            '?eventFilter@QStyledItemDelegate@@MAE_NPAVQObject@@PAVQEvent@@@Z',
                                                                                            '?eventFilter@QDialog@@MAE_NPAVQObject@@PAVQEvent@@@Z',
                                                                                            '?event@QWidget@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QTreeWidget@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QToolButton@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QPushButton@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QLabel@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QDialogButtonBox@@MAE_NPAVQEvent@@@Z',
                                                                                            '?enterEvent@QToolButton@@MAEXPAVQEvent@@@Z',
                                                                                            '?editorEvent@QStyledItemDelegate@@MAE_NPAVQEvent@@PAVQAbstractItemModel@@ABVQStyleOptionViewItem@@ABVQModelIndex@@@Z',
                                                                                            '?dropMimeData@QTreeWidget@@MAE_NPAVQTreeWidgetItem@@HPBVQMimeData@@W4DropAction@Qt@@@Z',
                                                                                            '?dropEvent@QTreeWidget@@MAEXPAVQDropEvent@@@Z',
                                                                                            '?done@QDialog@@UAEXH@Z',
                                                                                            '?displayText@QStyledItemDelegate@@UBE?AVQString@@ABVQVariant@@ABVQLocale@@@Z',
                                                                                            '?destroyEditor@QAbstractItemDelegate@@UBEXPAVQWidget@@ABVQModelIndex@@@Z',
                                                                                            '?data@QTreeWidgetItem@@UBE?AVQVariant@@HH@Z',
                                                                                            '?count@QBoxLayout@@UBEHXZ',
                                                                                            '?controlTypes@QLayoutItem@@UBE?AV?$QFlags@W4ControlType@QSizePolicy@@@@XZ',
                                                                                            '?controlTypes@QLayout@@UBE?AV?$QFlags@W4ControlType@QSizePolicy@@@@XZ',
                                                                                            '?contextMenuEvent@QLabel@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?contextMenuEvent@QDialog@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?contextMenuEvent@QAbstractScrollArea@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?closeEvent@QDialog@@MAEXPAVQCloseEvent@@@Z',
                                                                                            '?clone@QTreeWidgetItem@@UBEPAV1@XZ',
                                                                                            '?childEvent@QLayout@@MAEXPAVQChildEvent@@@Z',
                                                                                            '?checkStateSet@QAbstractButton@@MAEXXZ',
                                                                                            '?changeEvent@QWidget@@MAEXPAVQEvent@@@Z',
                                                                                            '?changeEvent@QToolButton@@MAEXPAVQEvent@@@Z',
                                                                                            '?changeEvent@QLabel@@MAEXPAVQEvent@@@Z',
                                                                                            '?changeEvent@QDialogButtonBox@@MAEXPAVQEvent@@@Z',
                                                                                            '?changeEvent@QAbstractButton@@MAEXPAVQEvent@@@Z',
                                                                                            '?addItem@QBoxLayout@@UAEXPAVQLayoutItem@@@Z',
                                                                                            '?actionEvent@QToolButton@@MAEXPAVQActionEvent@@@Z',
                                                                                            '?accept@QDialog@@UAEXXZ',
                                                                                            '??MQTreeWidgetItem@@UBE_NABV0@@Z',
                                                                                            '?setInformativeText@QMessageBox@@QAEXABVQString@@@Z',
                                                                                            '?setText@QMessageBox@@QAEXABVQString@@@Z',
                                                                                            '?setStandardButtons@QMessageBox@@QAEXV?$QFlags@W4StandardButton@QMessageBox@@@@@Z',
                                                                                            '??1QMessageBox@@UAE@XZ',
                                                                                            '??0QMessageBox@@QAE@PAVQWidget@@@Z',
                                                                                            '?getSaveFileName@QFileDialog@@SA?AVQString@@PAVQWidget@@ABV2@11PAV2@V?$QFlags@W4Option@QFileDialog@@@@@Z',
                                                                                            '?getOpenFileName@QFileDialog@@SA?AVQString@@PAVQWidget@@ABV2@11PAV2@V?$QFlags@W4Option@QFileDialog@@@@@Z',
                                                                                            '?currentColor@QColorDialog@@QBE?AVQColor@@XZ',
                                                                                            '?setCurrentColor@QColorDialog@@QAEXABVQColor@@@Z',
                                                                                            '??1QColorDialog@@UAE@XZ',
                                                                                            '??0QColorDialog@@QAE@PAVQWidget@@@Z',
                                                                                            '?setText@QLineEdit@@QAEXABVQString@@@Z',
                                                                                            '?selectedItems@QTreeWidget@@QBE?AV?$QList@PAVQTreeWidgetItem@@@@XZ',
                                                                                            '?editItem@QTreeWidget@@QAEXPAVQTreeWidgetItem@@H@Z',
                                                                                            '?setCurrentItem@QTreeWidget@@QAEXPAVQTreeWidgetItem@@@Z',
                                                                                            '?currentItem@QTreeWidget@@QBEPAVQTreeWidgetItem@@XZ',
                                                                                            '?headerItem@QTreeWidget@@QBEPAVQTreeWidgetItem@@XZ',
                                                                                            '?addTopLevelItem@QTreeWidget@@QAEXPAVQTreeWidgetItem@@@Z',
                                                                                            '?insertTopLevelItem@QTreeWidget@@QAEXHPAVQTreeWidgetItem@@@Z',
                                                                                            '?topLevelItemCount@QTreeWidget@@QBEHXZ',
                                                                                            '?topLevelItem@QTreeWidget@@QBEPAVQTreeWidgetItem@@H@Z',
                                                                                            '?columnCount@QTreeWidget@@QBEHXZ',
                                                                                            '??1QTreeWidget@@UAE@XZ',
                                                                                            '??0QTreeWidget@@QAE@PAVQWidget@@@Z',
                                                                                            '?setCheckState@QTreeWidgetItem@@QAEXHW4CheckState@Qt@@@Z',
                                                                                            '?checkState@QTreeWidgetItem@@QBE?AW4CheckState@Qt@@H@Z',
                                                                                            '?setForeground@QTreeWidgetItem@@QAEXHABVQBrush@@@Z',
                                                                                            '?foreground@QTreeWidgetItem@@QBE?AVQBrush@@H@Z',
                                                                                            '?setBackground@QTreeWidgetItem@@QAEXHABVQBrush@@@Z',
                                                                                            '?background@QTreeWidgetItem@@QBE?AVQBrush@@H@Z',
                                                                                            '?setText@QTreeWidgetItem@@QAEXHABVQString@@@Z',
                                                                                            '?text@QTreeWidgetItem@@QBE?AVQString@@H@Z',
                                                                                            '?setFlags@QTreeWidgetItem@@QAEXV?$QFlags@W4ItemFlag@Qt@@@@@Z',
                                                                                            '?flags@QTreeWidgetItem@@QBE?AV?$QFlags@W4ItemFlag@Qt@@@@XZ',
                                                                                            '??1QTreeWidgetItem@@UAE@XZ',
                                                                                            '??0QTreeWidgetItem@@QAE@H@Z',
                                                                                            '??EQTreeWidgetItemIterator@@QAEAAV0@XZ',
                                                                                            '??1QTreeWidgetItemIterator@@QAE@XZ',
                                                                                            '??0QTreeWidgetItemIterator@@QAE@PAVQTreeWidget@@V?$QFlags@W4IteratorFlag@QTreeWidgetItemIterator@@@@@Z',
                                                                                            '?setExpandsOnDoubleClick@QTreeView@@QAEX_N@Z',
                                                                                            '??1QToolButton@@UAE@XZ',
                                                                                            '??0QToolButton@@QAE@PAVQWidget@@@Z',
                                                                                            '?setFlat@QPushButton@@QAEX_N@Z',
                                                                                            '?setAutoDefault@QPushButton@@QAEX_N@Z',
                                                                                            '??1QPushButton@@UAE@XZ',
                                                                                            '??0QPushButton@@QAE@PAVQWidget@@@Z',
                                                                                            '?setIcon@QAbstractButton@@QAEXABVQIcon@@@Z',
                                                                                            '?setText@QAbstractButton@@QAEXABVQString@@@Z',
                                                                                            '?setText@QLabel@@QAEXABVQString@@@Z',
                                                                                            '?setWordWrap@QLabel@@QAEX_N@Z',
                                                                                            '??1QLabel@@UAE@XZ',
                                                                                            '??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?setDragDropMode@QAbstractItemView@@QAEXW4DragDropMode@1@@Z',
                                                                                            '?setDragEnabled@QAbstractItemView@@QAEX_N@Z',
                                                                                            '?setDropIndicatorShown@QAbstractItemView@@QAEX_N@Z',
                                                                                            '?setSelectionMode@QAbstractItemView@@QAEXW4SelectionMode@1@@Z',
                                                                                            '??1QVBoxLayout@@UAE@XZ',
                                                                                            '??0QVBoxLayout@@QAE@PAVQWidget@@@Z',
                                                                                            '??1QHBoxLayout@@UAE@XZ',
                                                                                            '??0QHBoxLayout@@QAE@XZ',
                                                                                            '?setStretch@QBoxLayout@@QAEXHH@Z',
                                                                                            '?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z',
                                                                                            '?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z',
                                                                                            '??1QSpacerItem@@UAE@XZ',
                                                                                            '?qt_metacall@QMenu@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QAction@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?paintEvent@QMenu@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ',
                                                                                            '?nativeEvent@QWidget@@MAE_NABVQByteArray@@PAXPAJ@Z',
                                                                                            '?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z',
                                                                                            '?moveCursor@QTreeView@@MAE?AVQModelIndex@@W4CursorAction@QAbstractItemView@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z',
                                                                                            '?mouseReleaseEvent@QTreeView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QMenu@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mousePressEvent@QMenu@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QTreeView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QMenu@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?mouseDoubleClickEvent@QTreeView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?minimumSizeHint@QWidget@@UBE?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QAbstractScrollArea@@UBE?AVQSize@@XZ',
                                                                                            '?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z',
                                                                                            '?metaObject@QMenu@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QAction@@UBEPBUQMetaObject@@XZ',
                                                                                            '?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z',
                                                                                            '?leaveEvent@QMenu@@MAEXPAVQEvent@@@Z',
                                                                                            '?keyboardSearch@QTreeView@@UAEXABVQString@@@Z',
                                                                                            '?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyPressEvent@QTreeView@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?keyPressEvent@QMenu@@MAEXPAVQKeyEvent@@@Z',
                                                                                            '?isIndexHidden@QTreeView@@MBE_NABVQModelIndex@@@Z',
                                                                                            '?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?inputMethodQuery@QAbstractItemView@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z',
                                                                                            '?inputMethodEvent@QAbstractItemView@@MAEXPAVQInputMethodEvent@@@Z',
                                                                                            '?initPainter@QWidget@@MBEXPAVQPainter@@@Z',
                                                                                            '?indexAt@QTreeView@@UBE?AVQModelIndex@@ABVQPoint@@@Z',
                                                                                            '?horizontalScrollbarValueChanged@QAbstractItemView@@MAEXH@Z',
                                                                                            '?horizontalScrollbarAction@QTreeView@@MAEXH@Z',
                                                                                            '?horizontalOffset@QTreeView@@MBEHXZ',
                                                                                            '?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z',
                                                                                            '?hideEvent@QMenu@@MAEXPAVQHideEvent@@@Z',
                                                                                            '?heightForWidth@QWidget@@UBEHH@Z',
                                                                                            '?hasHeightForWidth@QWidget@@UBE_NXZ',
                                                                                            '?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusOutEvent@QAbstractItemView@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusNextPrevChild@QMenu@@MAE_N_N@Z',
                                                                                            '?focusNextPrevChild@QAbstractItemView@@MAE_N_N@Z',
                                                                                            '?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?focusInEvent@QAbstractItemView@@MAEXPAVQFocusEvent@@@Z',
                                                                                            '?eventFilter@QAbstractScrollArea@@MAE_NPAVQObject@@PAVQEvent@@@Z',
                                                                                            '?event@QMenu@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QAction@@MAE_NPAVQEvent@@@Z',
                                                                                            '?event@QAbstractItemView@@MAE_NPAVQEvent@@@Z',
                                                                                            '?enterEvent@QWidget@@MAEXPAVQEvent@@@Z',
                                                                                            '?enterEvent@QMenu@@MAEXPAVQEvent@@@Z',
                                                                                            '?editorDestroyed@QAbstractItemView@@MAEXPAVQObject@@@Z',
                                                                                            '?edit@QAbstractItemView@@MAE_NABVQModelIndex@@W4EditTrigger@1@PAVQEvent@@@Z',
                                                                                            '?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z',
                                                                                            '?dropEvent@QAbstractItemView@@MAEXPAVQDropEvent@@@Z',
                                                                                            '?drawBranches@QTreeView@@MBEXPAVQPainter@@ABVQRect@@ABVQModelIndex@@@Z',
                                                                                            '?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z',
                                                                                            '?dragMoveEvent@QTreeView@@MAEXPAVQDragMoveEvent@@@Z',
                                                                                            '?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z',
                                                                                            '?dragLeaveEvent@QAbstractItemView@@MAEXPAVQDragLeaveEvent@@@Z',
                                                                                            '?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z',
                                                                                            '?dragEnterEvent@QAbstractItemView@@MAEXPAVQDragEnterEvent@@@Z',
                                                                                            '?doItemsLayout@QTreeView@@UAEXXZ',
                                                                                            '?devType@QWidget@@UBEHXZ',
                                                                                            '?dataChanged@QTreeView@@UAEXABVQModelIndex@@0ABV?$QVector@H@@@Z',
                                                                                            '?currentChanged@QTreeView@@MAEXABVQModelIndex@@0@Z',
                                                                                            '?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z',
                                                                                            '?commitData@QAbstractItemView@@MAEXPAVQWidget@@@Z',
                                                                                            '?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z',
                                                                                            '?closeEditor@QAbstractItemView@@MAEXPAVQWidget@@W4EndEditHint@QAbstractItemDelegate@@@Z',
                                                                                            '?changeEvent@QMenu@@MAEXPAVQEvent@@@Z',
                                                                                            '?changeEvent@QFrame@@MAEXPAVQEvent@@@Z',
                                                                                            '?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z',
                                                                                            '?actionEvent@QMenu@@MAEXPAVQActionEvent@@@Z',
                                                                                            '?restoreState@QHeaderView@@QAE_NABVQByteArray@@@Z',
                                                                                            '?saveState@QHeaderView@@QBE?AVQByteArray@@XZ',
                                                                                            '?logicalIndex@QHeaderView@@QBEHH@Z',
                                                                                            '?count@QHeaderView@@QBEHXZ',
                                                                                            '?resizeSection@QHeaderView@@QAEXHH@Z',
                                                                                            '?sectionSize@QHeaderView@@QBEHH@Z',
                                                                                            '?logicalIndexAt@QHeaderView@@QBEHABVQPoint@@@Z',
                                                                                            '??1QStyledItemDelegate@@UAE@XZ',
                                                                                            '?setTitle@QMenu@@QAEXABVQString@@@Z',
                                                                                            '?title@QMenu@@QBE?AVQString@@XZ',
                                                                                            '?exec@QMenu@@QAEPAVQAction@@ABVQPoint@@PAV2@@Z',
                                                                                            '?popup@QMenu@@QAEXABVQPoint@@PAVQAction@@@Z',
                                                                                            '?clear@QMenu@@QAEXXZ',
                                                                                            '?addSeparator@QMenu@@QAEPAVQAction@@XZ',
                                                                                            '?addMenu@QMenu@@QAEPAVQAction@@PAV1@@Z',
                                                                                            '?addAction@QMenu@@QAEPAVQAction@@ABVQString@@@Z',
                                                                                            '??1QMenu@@UAE@XZ',
                                                                                            '??0QMenu@@QAE@ABVQString@@PAVQWidget@@@Z',
                                                                                            '??0QMenu@@QAE@PAVQWidget@@@Z',
                                                                                            '?setEnabled@QAction@@QAEX_N@Z',
                                                                                            '?setChecked@QAction@@QAEX_N@Z',
                                                                                            '?isChecked@QAction@@QBE_NXZ',
                                                                                            '?setData@QAction@@QAEXABVQVariant@@@Z',
                                                                                            '?data@QAction@@QBE?AVQVariant@@XZ',
                                                                                            '?setCheckable@QAction@@QAEX_N@Z',
                                                                                            '??1QAction@@UAE@XZ',
                                                                                            '??0QAction@@QAE@ABVQString@@PAVQObject@@@Z',
                                                                                            '?selectionChanged@QTreeView@@MAEXABVQItemSelection@@0@Z',
                                                                                            '?sizeHintForColumn@QTreeView@@MBEHH@Z',
                                                                                            '?mousePressEvent@QTreeView@@MAEXPAVQMouseEvent@@@Z',
                                                                                            '?drawRow@QTreeView@@MBEXPAVQPainter@@ABVQStyleOptionViewItem@@ABVQModelIndex@@@Z',
                                                                                            '?paintEvent@QTreeView@@MAEXPAVQPaintEvent@@@Z',
                                                                                            '?timerEvent@QTreeView@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?rowsInserted@QTreeView@@MAEXABVQModelIndex@@HH@Z',
                                                                                            '?resizeColumnToContents@QTreeView@@QAEXH@Z',
                                                                                            '?hideColumn@QTreeView@@QAEXH@Z',
                                                                                            '?sortByColumn@QTreeView@@QAEXHW4SortOrder@Qt@@@Z',
                                                                                            '?setSortingEnabled@QTreeView@@QAEX_N@Z',
                                                                                            '?setColumnHidden@QTreeView@@QAEXH_N@Z',
                                                                                            '?columnAt@QTreeView@@QBEHH@Z',
                                                                                            '?setColumnWidth@QTreeView@@QAEXHH@Z',
                                                                                            '?columnWidth@QTreeView@@QBEHH@Z',
                                                                                            '?setItemsExpandable@QTreeView@@QAEX_N@Z',
                                                                                            '?setUniformRowHeights@QTreeView@@QAEX_N@Z',
                                                                                            '?setRootIsDecorated@QTreeView@@QAEX_N@Z',
                                                                                            '?header@QTreeView@@QBEPAVQHeaderView@@XZ',
                                                                                            '?setModel@QTreeView@@UAEXPAVQAbstractItemModel@@@Z',
                                                                                            '??1QTreeView@@UAE@XZ',
                                                                                            '??0QTreeView@@QAE@PAVQWidget@@@Z',
                                                                                            '?resizeEvent@QAbstractItemView@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?scrollToBottom@QAbstractItemView@@QAEXXZ',
                                                                                            '?setCurrentIndex@QAbstractItemView@@QAEXABVQModelIndex@@@Z',
                                                                                            '?itemDelegateForColumn@QAbstractItemView@@QBEPAVQAbstractItemDelegate@@H@Z',
                                                                                            '?setItemDelegateForColumn@QAbstractItemView@@QAEXHPAVQAbstractItemDelegate@@@Z',
                                                                                            '?setTextElideMode@QAbstractItemView@@QAEXW4TextElideMode@Qt@@@Z',
                                                                                            '?setAutoScroll@QAbstractItemView@@QAEX_N@Z',
                                                                                            '?currentIndex@QAbstractItemView@@QBE?AVQModelIndex@@XZ',
                                                                                            '?itemDelegate@QAbstractItemView@@QBEPAVQAbstractItemDelegate@@XZ',
                                                                                            '?selectionModel@QAbstractItemView@@QBEPAVQItemSelectionModel@@XZ',
                                                                                            '??1QStyleOptionViewItem@@QAE@XZ',
                                                                                            '?setValue@QAbstractSlider@@QAEXH@Z',
                                                                                            '?value@QAbstractSlider@@QBEHXZ',
                                                                                            '?sliderPosition@QAbstractSlider@@QBEHXZ',
                                                                                            '?maximum@QAbstractSlider@@QBEHXZ',
                                                                                            '?viewport@QAbstractScrollArea@@QBEPAVQWidget@@XZ',
                                                                                            '?setVerticalScrollBar@QAbstractScrollArea@@QAEXPAVQScrollBar@@@Z',
                                                                                            '?verticalScrollBar@QAbstractScrollArea@@QBEPAVQScrollBar@@XZ',
                                                                                            '?fontMetrics@QApplication@@SA?AVQFontMetrics@@XZ',
                                                                                            '?font@QApplication@@SA?AVQFont@@XZ',
                                                                                            '?setCurrentIndex@QTabWidget@@QAEXH@Z',
                                                                                            '?removeAction@QWidget@@QAEXPAVQAction@@@Z',
                                                                                            '?insertAction@QWidget@@QAEXPAVQAction@@0@Z',
                                                                                            '?addAction@QWidget@@QAEXPAVQAction@@@Z',
                                                                                            '?resize@QWidget@@QAEXABVQSize@@@Z',
                                                                                            '?update@QWidget@@QAEXXZ',
                                                                                            '?setUpdatesEnabled@QWidget@@QAEX_N@Z',
                                                                                            '?setContextMenuPolicy@QWidget@@QAEXW4ContextMenuPolicy@Qt@@@Z',
                                                                                            '?setFocus@QWidget@@QAEXW4FocusReason@Qt@@@Z',
                                                                                            '?setAccessibleName@QWidget@@QAEXABVQString@@@Z',
                                                                                            '?setStyleSheet@QWidget@@QAEXABVQString@@@Z',
                                                                                            '?setFont@QWidget@@QAEXABVQFont@@@Z',
                                                                                            '?palette@QWidget@@QBEABVQPalette@@XZ',
                                                                                            '?window@QWidget@@QBEPAV1@XZ',
                                                                                            '?mapToGlobal@QWidget@@QBE?AVQPoint@@ABV2@@Z',
                                                                                            '?rect@QWidget@@QBE?AVQRect@@XZ',
                                                                                            '?warning@QMessageBox@@SA?AW4StandardButton@1@PAVQWidget@@ABVQString@@1V?$QFlags@W4StandardButton@QMessageBox@@@@W421@@Z',
                                                                                            '?exec@QApplication@@SAHXZ',
                                                                                            '??1QApplication@@UAE@XZ',
                                                                                            '?show@QWidget@@QAEXXZ',
                                                                                            '??0QSpacerItem@@QAE@HHW4Policy@QSizePolicy@@0@Z',
                                                                                            '?button@QDialogButtonBox@@QBEPAVQPushButton@@W4StandardButton@1@@Z',
                                                                                            '?setStandardButtons@QDialogButtonBox@@QAEXV?$QFlags@W4StandardButton@QDialogButtonBox@@@@@Z',
                                                                                            '?addButton@QDialogButtonBox@@QAEPAVQPushButton@@ABVQString@@W4ButtonRole@1@@Z',
                                                                                            '?setOrientation@QDialogButtonBox@@QAEXW4Orientation@Qt@@@Z',
                                                                                            '??1QDialogButtonBox@@UAE@XZ',
                                                                                            '??0QDialogButtonBox@@QAE@PAVQWidget@@@Z',
                                                                                            '??0QStyledItemDelegate@@QAE@PAVQObject@@@Z',
                                                                                            '?exec@QDialog@@UAEHXZ',
                                                                                            '??0QDialog@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?setAcceptDrops@QWidget@@QAEX_N@Z',
                                                                                            '?setToolTip@QWidget@@QAEXABVQString@@@Z',
                                                                                            '?setWindowTitle@QWidget@@QAEXABVQString@@@Z',
                                                                                            '?fontMetrics@QWidget@@QBE?AVQFontMetrics@@XZ',
                                                                                            '?setFixedHeight@QWidget@@QAEXH@Z',
                                                                                            '?setEnabled@QWidget@@QAEX_N@Z',
                                                                                            '?staticMetaObject@QMenu@@2UQMetaObject@@B',
                                                                                            '?staticMetaObject@QAction@@2UQMetaObject@@B',
                                                                                            '?wheelEvent@QMenu@@MAEXPAVQWheelEvent@@@Z',
                                                                                            '?wheelEvent@QAbstractScrollArea@@MAEXPAVQWheelEvent@@@Z',
                                                                                            '?visualRegionForSelection@QTreeView@@MBE?AVQRegion@@ABVQItemSelection@@@Z',
                                                                                            '?visualRect@QTreeView@@UBE?AVQRect@@ABVQModelIndex@@@Z',
                                                                                            '?viewportSizeHint@QTreeView@@MBE?AVQSize@@XZ',
                                                                                            '?viewportEvent@QTreeView@@MAE_NPAVQEvent@@@Z',
                                                                                            '?viewOptions@QAbstractItemView@@MBE?AVQStyleOptionViewItem@@XZ',
                                                                                            '?verticalScrollbarValueChanged@QAbstractItemView@@MAEXH@Z',
                                                                                            '?verticalScrollbarAction@QAbstractItemView@@MAEXH@Z',
                                                                                            '?verticalOffset@QTreeView@@MBEHXZ',
                                                                                            '?updateGeometries@QTreeView@@MAEXXZ',
                                                                                            '?updateEditorGeometries@QAbstractItemView@@MAEXXZ',
                                                                                            '?updateEditorData@QAbstractItemView@@MAEXXZ',
                                                                                            '?timerEvent@QMenu@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z',
                                                                                            '?startDrag@QAbstractItemView@@MAEXV?$QFlags@W4DropAction@Qt@@@@@Z',
                                                                                            '?sizeHintForRow@QAbstractItemView@@UBEHH@Z',
                                                                                            '?sizeHint@QMenu@@UBE?AVQSize@@XZ',
                                                                                            '?sizeHint@QAbstractScrollArea@@UBE?AVQSize@@XZ',
                                                                                            '?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z',
                                                                                            '?sharedPainter@QWidget@@MBEPAVQPainter@@XZ',
                                                                                            '?setupViewport@QAbstractScrollArea@@UAEXPAVQWidget@@@Z',
                                                                                            '?setVisible@QWidget@@UAEX_N@Z',
                                                                                            '?setSelectionModel@QTreeView@@UAEXPAVQItemSelectionModel@@@Z',
                                                                                            '?setSelection@QTreeView@@MAEXABVQRect@@V?$QFlags@W4SelectionFlag@QItemSelectionModel@@@@@Z',
                                                                                            '?setRootIndex@QTreeView@@UAEXABVQModelIndex@@@Z',
                                                                                            '?selectionCommand@QAbstractItemView@@MBE?AV?$QFlags@W4SelectionFlag@QItemSelectionModel@@@@ABVQModelIndex@@PBVQEvent@@@Z',
                                                                                            '?selectedIndexes@QTreeView@@MBE?AV?$QList@VQModelIndex@@@@XZ',
                                                                                            '?selectAll@QTreeView@@UAEXXZ',
                                                                                            '?scrollTo@QTreeView@@UAEXABVQModelIndex@@W4ScrollHint@QAbstractItemView@@@Z',
                                                                                            '?scrollContentsBy@QTreeView@@MAEXHH@Z',
                                                                                            '?rowsAboutToBeRemoved@QTreeView@@MAEXABVQModelIndex@@HH@Z',
                                                                                            '?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z',
                                                                                            '?reset@QTreeView@@UAEXXZ',
                                                                                            '?redirected@QWidget@@MBEPAVQPaintDevice@@PAVQPoint@@@Z',
                                                                                            '??0QSpinBox@@QAE@PAVQWidget@@@Z',
                                                                                            '?qt_metacast@QMenu@@UAEPAXPBD@Z',
                                                                                            '?dropEvent@QTextEdit@@MAEXPAVQDropEvent@@@Z',
                                                                                            '?map@QTransform@@QBE?AVQPolygonF@@ABV2@@Z',
                                                                                            '??1QIcon@@QAE@XZ',
                                                                                            '?devicePixelRatio@QPaintDevice@@QBEHXZ',
                                                                                            '??0QColor@@QAE@W4GlobalColor@Qt@@@Z',
                                                                                            '?name@QColor@@QBE?AVQString@@XZ',
                                                                                            '?setAlphaF@QColor@@QAEXN@Z',
                                                                                            '?fromRgb@QColor@@SA?AV1@I@Z',
                                                                                            '??0QImage@@QAE@XZ',
                                                                                            '??0QImage@@QAE@HHW4Format@0@@Z',
                                                                                            '??1QImage@@UAE@XZ',
                                                                                            '?isNull@QImage@@QBE_NXZ',
                                                                                            '?height@QImage@@QBEHXZ',
                                                                                            '?fill@QImage@@QAEXW4GlobalColor@Qt@@@Z',
                                                                                            '?color@QBrush@@QBEABVQColor@@XZ',
                                                                                            '??0QPalette@@QAE@ABV0@@Z',
                                                                                            '??1QPalette@@QAE@XZ',
                                                                                            '?brush@QPalette@@QBEABVQBrush@@W4ColorGroup@1@W4ColorRole@1@@Z',
                                                                                            '??0QFont@@QAE@ABV0@@Z',
                                                                                            '??0QFontMetrics@@QAE@ABVQFont@@@Z',
                                                                                            '??1QFontMetrics@@QAE@XZ',
                                                                                            '?height@QFontMetrics@@QBEHXZ',
                                                                                            '?width@QFontMetrics@@QBEHABVQString@@H@Z',
                                                                                            '?clipboard@QGuiApplication@@SAPAVQClipboard@@XZ',
                                                                                            '??0QPainter@@QAE@PAVQPaintDevice@@@Z',
                                                                                            '??1QPainter@@QAE@XZ',
                                                                                            '?setPen@QPainter@@QAEXABVQColor@@@Z',
                                                                                            '?drawLines@QPainter@@QAEXPBVQLine@@H@Z',
                                                                                            '?fillRect@QPainter@@QAEXABVQRect@@ABVQColor@@@Z',
                                                                                            '?setText@QClipboard@@QAEXABVQString@@W4Mode@1@@Z',
                                                                                            '??0QBrush@@QAE@ABVQColor@@W4BrushStyle@Qt@@@Z',
                                                                                            '??1QBrush@@QAE@XZ',
                                                                                            '?color@QPalette@@QBEABVQColor@@W4ColorRole@1@@Z',
                                                                                            '??0QIcon@@QAE@XZ',
                                                                                            '?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z',
                                                                                            '??0QFont@@QAE@XZ',
                                                                                            '??0QKeySequence@@QAE@ABVQString@@W4SequenceFormat@0@@Z',
                                                                                            '??0QKeySequence@@QAE@HHHH@Z',
                                                                                            '??0QKeySequence@@QAE@ABV0@@Z',
                                                                                            '??1QKeySequence@@QAE@XZ',
                                                                                            '?modifiers@QKeyEvent@@QBE?AV?$QFlags@W4KeyboardModifier@Qt@@@@XZ',
                                                                                            '?text@QKeyEvent@@QBE?AVQString@@XZ',
                                                                                            '?setFamily@QFont@@QAEXABVQString@@@Z',
                                                                                            '?pointSize@QFont@@QBEHXZ',
                                                                                            '?setPointSize@QFont@@QAEXH@Z',
                                                                                            '?setWeight@QFont@@QAEXH@Z',
                                                                                            '?toString@QFont@@QBE?AVQString@@XZ',
                                                                                            '?fromString@QFont@@QAE_NABVQString@@@Z',
                                                                                            '?insertSubstitutions@QFont@@SAXABVQString@@ABVQStringList@@@Z',
                                                                                            '??0QColor@@QAE@I@Z',
                                                                                            '?rgb@QColor@@QBEIXZ',
                                                                                            '?openUrl@QDesktopServices@@SA_NABVQUrl@@@Z',
                                                                                            '?file@QFileOpenEvent@@QBE?AVQString@@XZ',
                                                                                            '?setPointSizeF@QFont@@QAEXN@Z',
                                                                                            '??4QFont@@QAEAAV0@$$QAV0@@Z',
                                                                                            '?write@QStandardItem@@UBEXAAVQDataStream@@@Z',
                                                                                            '?type@QStandardItem@@UBEHXZ',
                                                                                            '?supportedDropActions@QStandardItemModel@@UBE?AV?$QFlags@W4DropAction@Qt@@@@XZ',
                                                                                            '?sort@QStandardItemModel@@UAEXHW4SortOrder@Qt@@@Z',
                                                                                            '?sibling@QStandardItemModel@@UBE?AVQModelIndex@@HHABV2@@Z',
                                                                                            '?setItemData@QStandardItemModel@@UAE_NABVQModelIndex@@ABV?$QMap@HVQVariant@@@@@Z',
                                                                                            '?setHeaderData@QStandardItemModel@@UAE_NHW4Orientation@Qt@@ABVQVariant@@H@Z',
                                                                                            '?setData@QStandardItemModel@@UAE_NABVQModelIndex@@ABVQVariant@@H@Z',
                                                                                            '?setData@QStandardItem@@UAEXABVQVariant@@H@Z',
                                                                                            '?rowCount@QStandardItemModel@@UBEHABVQModelIndex@@@Z',
                                                                                            '?removeRows@QStandardItemModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?removeColumns@QStandardItemModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?read@QStandardItem@@UAEXAAVQDataStream@@@Z',
                                                                                            '?qt_metacast@QStandardItemModel@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QStandardItemModel@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?parent@QStandardItemModel@@UBE?AVQModelIndex@@ABV2@@Z',
                                                                                            '?mimeTypes@QStandardItemModel@@UBE?AVQStringList@@XZ',
                                                                                            '?mimeData@QStandardItemModel@@UBEPAVQMimeData@@ABV?$QList@VQModelIndex@@@@@Z',
                                                                                            '?metaObject@QStandardItemModel@@UBEPBUQMetaObject@@XZ',
                                                                                            '?itemData@QStandardItemModel@@UBE?AV?$QMap@HVQVariant@@@@ABVQModelIndex@@@Z',
                                                                                            '?insertRows@QStandardItemModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?insertColumns@QStandardItemModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?index@QStandardItemModel@@UBE?AVQModelIndex@@HHABV2@@Z',
                                                                                            '?headerData@QStandardItemModel@@UBE?AVQVariant@@HW4Orientation@Qt@@H@Z',
                                                                                            '?hasChildren@QStandardItemModel@@UBE_NABVQModelIndex@@@Z',
                                                                                            '?flags@QStandardItemModel@@UBE?AV?$QFlags@W4ItemFlag@Qt@@@@ABVQModelIndex@@@Z',
                                                                                            '?dropMimeData@QStandardItemModel@@UAE_NPBVQMimeData@@W4DropAction@Qt@@HHABVQModelIndex@@@Z',
                                                                                            '?data@QStandardItemModel@@UBE?AVQVariant@@ABVQModelIndex@@H@Z',
                                                                                            '?data@QStandardItem@@UBE?AVQVariant@@H@Z',
                                                                                            '?columnCount@QStandardItemModel@@UBEHABVQModelIndex@@@Z',
                                                                                            '?clone@QStandardItem@@UBEPAV1@XZ',
                                                                                            '??MQStandardItem@@UBE_NABV0@@Z',
                                                                                            '?appendRow@QStandardItemModel@@QAEXPAVQStandardItem@@@Z',
                                                                                            '?item@QStandardItemModel@@QBEPAVQStandardItem@@HH@Z',
                                                                                            '??1QStandardItemModel@@UAE@XZ',
                                                                                            '??0QStandardItemModel@@QAE@PAVQObject@@@Z',
                                                                                            '?insertRows@QStandardItem@@QAEXHABV?$QList@PAVQStandardItem@@@@@Z',
                                                                                            '?child@QStandardItem@@QBEPAV1@HH@Z',
                                                                                            '?hasChildren@QStandardItem@@QBE_NXZ',
                                                                                            '?rowCount@QStandardItem@@QBEHXZ',
                                                                                            '?index@QStandardItem@@QBE?AVQModelIndex@@XZ',
                                                                                            '?setSelectable@QStandardItem@@QAEX_N@Z',
                                                                                            '?setEditable@QStandardItem@@QAEX_N@Z',
                                                                                            '??1QStandardItem@@UAE@XZ',
                                                                                            '??0QStandardItem@@QAE@ABVQString@@@Z',
                                                                                            '?drawPolygon@QPainter@@QAEXABVQPolygon@@W4FillRule@Qt@@@Z',
                                                                                            '?setOpacity@QPainter@@QAEXN@Z',
                                                                                            '?setDashOffset@QPen@@QAEXN@Z',
                                                                                            '?validate@QIntValidator@@UBE?AW4State@QValidator@@AAVQString@@AAH@Z',
                                                                                            '?validate@QDoubleValidator@@UBE?AW4State@QValidator@@AAVQString@@AAH@Z',
                                                                                            '?setRange@QIntValidator@@UAEXHH@Z',
                                                                                            '?setRange@QDoubleValidator@@UAEXNNH@Z',
                                                                                            '?qt_metacast@QIntValidator@@UAEPAXPBD@Z',
                                                                                            '?qt_metacast@QDoubleValidator@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QIntValidator@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacall@QDoubleValidator@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?metaObject@QIntValidator@@UBEPBUQMetaObject@@XZ',
                                                                                            '?metaObject@QDoubleValidator@@UBEPBUQMetaObject@@XZ',
                                                                                            '?fixup@QValidator@@UBEXAAVQString@@@Z',
                                                                                            '?fixup@QIntValidator@@UBEXAAVQString@@@Z',
                                                                                            '?setTop@QDoubleValidator@@QAEXN@Z',
                                                                                            '?setBottom@QDoubleValidator@@QAEXN@Z',
                                                                                            '??1QDoubleValidator@@UAE@XZ',
                                                                                            '??0QDoubleValidator@@QAE@PAVQObject@@@Z',
                                                                                            '?setTop@QIntValidator@@QAEXH@Z',
                                                                                            '?setBottom@QIntValidator@@QAEXH@Z',
                                                                                            '??1QIntValidator@@UAE@XZ',
                                                                                            '??0QIntValidator@@QAE@PAVQObject@@@Z',
                                                                                            '??0QIcon@@QAE@ABVQString@@@Z',
                                                                                            '?ascent@QFontMetrics@@QBEHXZ',
                                                                                            '?setDefaultFont@QTextDocument@@QAEXABVQFont@@@Z',
                                                                                            '?fillRect@QPainter@@QAEXABVQRectF@@ABVQColor@@@Z',
                                                                                            '?drawText@QPainter@@QAEXABVQRectF@@HABVQString@@PAV2@@Z',
                                                                                            '?width@QFontMetricsF@@QBENVQChar@@@Z',
                                                                                            '?width@QFontMetricsF@@QBENABVQString@@@Z',
                                                                                            '?lineSpacing@QFontMetricsF@@QBENXZ',
                                                                                            '?height@QFontMetricsF@@QBENXZ',
                                                                                            '??1QFontMetricsF@@QAE@XZ',
                                                                                            '??0QFontMetricsF@@QAE@ABVQFont@@@Z',
                                                                                            '?staticMetaObject@QPainter@@2UQMetaObject@@B',
                                                                                            '?setPageLayout@QPagedPaintDevice@@QAE_NABVQPageLayout@@@Z',
                                                                                            '?setMargins@QPageLayout@@QAE_NABVQMarginsF@@@Z',
                                                                                            '?setOrientation@QPageLayout@@QAEXW4Orientation@1@@Z',
                                                                                            '?setPageSize@QPageLayout@@QAEXABVQPageSize@@ABVQMarginsF@@@Z',
                                                                                            '?setMode@QPageLayout@@QAEXW4Mode@1@@Z',
                                                                                            '??1QPageLayout@@QAE@XZ',
                                                                                            '??0QPageLayout@@QAE@XZ',
                                                                                            '??1QPageSize@@QAE@XZ',
                                                                                            '??0QPageSize@@QAE@ABVQSizeF@@W4Unit@0@ABVQString@@W4SizeMatchPolicy@0@@Z',
                                                                                            '?pos@QWheelEvent@@QBE?AVQPoint@@XZ',
                                                                                            '?toPoint@QVector2D@@QBE?AVQPoint@@XZ',
                                                                                            '?dotProduct@QVector2D@@SAMABV1@0@Z',
                                                                                            '?normalized@QVector2D@@QBE?AV1@XZ',
                                                                                            '?lengthSquared@QVector2D@@QBEMXZ',
                                                                                            '?length@QVector2D@@QBEMXZ',
                                                                                            '?isNull@QVector2D@@QBE_NXZ',
                                                                                            '?testRenderHint@QPainter@@QBE_NW4RenderHint@1@@Z',
                                                                                            '?renderHints@QPainter@@QBE?AV?$QFlags@W4RenderHint@QPainter@@@@XZ',
                                                                                            '?fillRect@QPainter@@QAEXABVQRectF@@ABVQBrush@@@Z',
                                                                                            '?drawImage@QPainter@@QAEXABVQRectF@@ABVQImage@@@Z',
                                                                                            '?drawPixmap@QPainter@@QAEXABVQPointF@@ABVQPixmap@@@Z',
                                                                                            '?drawPixmap@QPainter@@QAEXABVQPoint@@ABVQPixmap@@ABVQRect@@@Z',
                                                                                            '?drawConvexPolygon@QPainter@@QAEXPBVQPointF@@H@Z',
                                                                                            '?drawPolygon@QPainter@@QAEXABVQPolygonF@@W4FillRule@Qt@@@Z',
                                                                                            '?drawPolyline@QPainter@@QAEXABVQPolygonF@@@Z',
                                                                                            '?drawPolyline@QPainter@@QAEXPBVQPointF@@H@Z',
                                                                                            '?drawEllipse@QPainter@@QAEXABVQPointF@@NN@Z',
                                                                                            '?drawRects@QPainter@@QAEXPBVQRectF@@H@Z',
                                                                                            '?drawLines@QPainter@@QAEXABV?$QVector@VQPointF@@@@@Z',
                                                                                            '?drawLines@QPainter@@QAEXPBVQLineF@@H@Z',
                                                                                            '?drawPath@QPainter@@QAEXABVQPainterPath@@@Z',
                                                                                            '?setWindow@QPainter@@QAEXABVQRect@@@Z',
                                                                                            '?rotate@QPainter@@QAEXN@Z',
                                                                                            '?scale@QPainter@@QAEXNN@Z',
                                                                                            '?transform@QPainter@@QBEABVQTransform@@XZ',
                                                                                            '?setTransform@QPainter@@QAEXABVQTransform@@_N@Z',
                                                                                            '?setClipRegion@QPainter@@QAEXABVQRegion@@W4ClipOperation@Qt@@@Z',
                                                                                            '?setClipRect@QPainter@@QAEXABVQRect@@W4ClipOperation@Qt@@@Z',
                                                                                            '?setClipRect@QPainter@@QAEXABVQRectF@@W4ClipOperation@Qt@@@Z',
                                                                                            '?clipRegion@QPainter@@QBE?AVQRegion@@XZ',
                                                                                            '?brush@QPainter@@QBEABVQBrush@@XZ',
                                                                                            '?setBrush@QPainter@@QAEXW4BrushStyle@Qt@@@Z',
                                                                                            '?pen@QPainter@@QBEABVQPen@@XZ',
                                                                                            '?font@QPainter@@QBEABVQFont@@XZ',
                                                                                            '?isActive@QPainter@@QBE_NXZ',
                                                                                            '?device@QPainter@@QBEPAVQPaintDevice@@XZ',
                                                                                            '?setCapStyle@QPen@@QAEXW4PenCapStyle@Qt@@@Z',
                                                                                            '?widthF@QPen@@QBENXZ',
                                                                                            '?style@QPen@@QBE?AW4PenStyle@Qt@@XZ',
                                                                                            '??4QPen@@QAEAAV0@$$QAV0@@Z',
                                                                                            '??4QPen@@QAEAAV0@ABV0@@Z',
                                                                                            '??0QPen@@QAE@W4PenStyle@Qt@@@Z',
                                                                                            '??0QPen@@QAE@XZ',
                                                                                            '?boundingRect@QFontMetrics@@QBE?AVQRect@@ABV2@HABVQString@@HPAH@Z',
                                                                                            '??9QFont@@QBE_NABV0@@Z',
                                                                                            '??0QFont@@QAE@ABVQString@@HH_N@Z',
                                                                                            '??8QBrush@@QBE_NABV0@@Z',
                                                                                            '?setColor@QBrush@@QAEXABVQColor@@@Z',
                                                                                            '?setStyle@QBrush@@QAEXW4BrushStyle@Qt@@@Z',
                                                                                            '?style@QBrush@@QBE?AW4BrushStyle@Qt@@XZ',
                                                                                            '??4QBrush@@QAEAAV0@ABV0@@Z',
                                                                                            '??0QBrush@@QAE@ABV0@@Z',
                                                                                            '??0QBrush@@QAE@W4BrushStyle@Qt@@@Z',
                                                                                            '?fromImage@QPixmap@@SA?AV1@$$QAVQImage@@V?$QFlags@W4ImageConversionFlag@Qt@@@@@Z',
                                                                                            '?toImage@QPixmap@@QBE?AVQImage@@XZ',
                                                                                            '?scaled@QPixmap@@QBE?AV1@ABVQSize@@W4AspectRatioMode@Qt@@W4TransformationMode@4@@Z',
                                                                                            '?setDevicePixelRatio@QPixmap@@QAEXN@Z',
                                                                                            '?devicePixelRatio@QPixmap@@QBENXZ',
                                                                                            '?fill@QPixmap@@QAEXABVQColor@@@Z',
                                                                                            '?size@QPixmap@@QBE?AVQSize@@XZ',
                                                                                            '?height@QPixmap@@QBEHXZ',
                                                                                            '?width@QPixmap@@QBEHXZ',
                                                                                            '?isNull@QPixmap@@QBE_NXZ',
                                                                                            '??4QPixmap@@QAEAAV0@ABV0@@Z',
                                                                                            '??0QPixmap@@QAE@ABV0@@Z',
                                                                                            '??0QPixmap@@QAE@ABVQSize@@@Z',
                                                                                            '?mirrored@QImage@@QBE?AV1@_N0@Z',
                                                                                            '?scanLine@QImage@@QAEPAEH@Z',
                                                                                            '?size@QImage@@QBE?AVQSize@@XZ',
                                                                                            '??4QImage@@QAEAAV0@$$QAV0@@Z',
                                                                                            '??0QTransform@@QAE@ABV0@@Z',
                                                                                            '?mapRect@QTransform@@QBE?AVQRect@@ABV2@@Z',
                                                                                            '??1QFont@@QAE@XZ',
                                                                                            '?map@QTransform@@QBE?AVQPointF@@ABV2@@Z',
                                                                                            '?rotate@QTransform@@QAEAAV1@NW4Axis@Qt@@@Z',
                                                                                            '?angleAtPercent@QPainterPath@@QBENN@Z',
                                                                                            '?toSubpathPolygons@QPainterPath@@QBE?AV?$QList@VQPolygonF@@@@ABVQMatrix@@@Z',
                                                                                            '?controlPointRect@QPainterPath@@QBE?AVQRectF@@XZ',
                                                                                            '?cubicTo@QPainterPath@@QAEXABVQPointF@@00@Z',
                                                                                            '?moveTo@QPainterPath@@QAEXABVQPointF@@@Z',
                                                                                            '??4QPainterPath@@QAEAAV0@ABV0@@Z',
                                                                                            '??0QPainterPath@@QAE@ABV0@@Z',
                                                                                            '??0QPainterPath@@QAE@ABVQPointF@@@Z',
                                                                                            '??0QPainterPath@@QAE@XZ',
                                                                                            '??0QMatrix@@QAE@XZ',
                                                                                            '?boundingRect@QRegion@@QBE?AVQRect@@XZ',
                                                                                            '??4QRegion@@QAEAAV0@$$QAV0@@Z',
                                                                                            '??1QRegion@@QAE@XZ',
                                                                                            '??0QRegion@@QAE@ABVQPolygon@@W4FillRule@Qt@@@Z',
                                                                                            '??0QRegion@@QAE@XZ',
                                                                                            '?boundingRect@QPolygonF@@QBE?AVQRectF@@XZ',
                                                                                            '??0QPolygonF@@QAE@$$QAV0@@Z',
                                                                                            '??0QPolygonF@@QAE@ABV0@@Z',
                                                                                            '??0QPolygonF@@QAE@ABVQRectF@@@Z',
                                                                                            '??0QPolygonF@@QAE@ABV?$QVector@VQPointF@@@@@Z',
                                                                                            '??1QPolygonF@@QAE@XZ',
                                                                                            '??0QPolygonF@@QAE@XZ',
                                                                                            '?boundingRect@QPolygon@@QBE?AVQRect@@XZ',
                                                                                            '??0QPolygon@@QAE@ABV?$QVector@VQPoint@@@@@Z',
                                                                                            '??1QPolygon@@QAE@XZ',
                                                                                            '??0QPolygon@@QAE@XZ',
                                                                                            '??9QColor@@QBE_NABV0@@Z',
                                                                                            '??8QColor@@QBE_NABV0@@Z',
                                                                                            '?fromHsvF@QColor@@SA?AV1@NNNN@Z',
                                                                                            '?toHsv@QColor@@QBE?AV1@XZ',
                                                                                            '?valueF@QColor@@QBENXZ',
                                                                                            '?saturationF@QColor@@QBENXZ',
                                                                                            '?hueF@QColor@@QBENXZ',
                                                                                            '?alpha@QColor@@QBEHXZ',
                                                                                            '?setCharFormat@QTextCursor@@QAEXABVQTextCharFormat@@@Z',
                                                                                            '?movePosition@QTextCursor@@QAE_NW4MoveOperation@1@W4MoveMode@1@H@Z',
                                                                                            '?setPosition@QTextCursor@@QAEXHW4MoveMode@1@@Z',
                                                                                            '??0QTextCursor@@QAE@PAVQTextDocument@@@Z',
                                                                                            '??0QTextCharFormat@@QAE@XZ',
                                                                                            '??1QMouseEvent@@UAE@XZ',
                                                                                            '??0QMouseEvent@@QAE@W4Type@QEvent@@ABVQPointF@@W4MouseButton@Qt@@V?$QFlags@W4MouseButton@Qt@@@@V?$QFlags@W4KeyboardModifier@Qt@@@@@Z',
                                                                                            '?pos@QCursor@@SA?AVQPoint@@XZ',
                                                                                            '?availableSizes@QIcon@@QBE?AV?$QList@VQSize@@@@W4Mode@1@W4State@1@@Z',
                                                                                            '?pixmap@QIcon@@QBE?AVQPixmap@@ABVQSize@@W4Mode@1@W4State@1@@Z',
                                                                                            '??4QIcon@@QAEAAV0@$$QAV0@@Z',
                                                                                            '?map@QTransform@@QBE?AVQLineF@@ABV2@@Z',
                                                                                            '?reset@QTransform@@QAEXXZ',
                                                                                            '?scale@QTransform@@QAEAAV1@NN@Z',
                                                                                            '?translate@QTransform@@QAEAAV1@NN@Z',
                                                                                            '?type@QTransform@@QBE?AW4TransformationType@1@XZ',
                                                                                            '??0QTransform@@QAE@XZ',
                                                                                            '?setImage@QClipboard@@QAEXABVQImage@@W4Mode@1@@Z',
                                                                                            '?insertImage@QTextCursor@@QAEXABVQImage@@ABVQString@@@Z',
                                                                                            '?selectionEnd@QTextCursor@@QBEHXZ',
                                                                                            '?selectionStart@QTextCursor@@QBEHXZ',
                                                                                            '?loadFromData@QImage@@QAE_NABVQByteArray@@PBD@Z',
                                                                                            '?averageCharWidth@QFontMetrics@@QBEHXZ',
                                                                                            '?boundingRect@QPainter@@QAE?AVQRect@@ABV2@HABVQString@@@Z',
                                                                                            '?drawText@QPainter@@QAEXABVQRect@@HABVQString@@PAV2@@Z',
                                                                                            '?drawText@QPainter@@QAEXABVQPointF@@ABVQString@@@Z',
                                                                                            '?fontMetrics@QPainter@@QBE?AVQFontMetrics@@XZ',
                                                                                            '?end@QPainter@@QAE_NXZ',
                                                                                            '?begin@QPainter@@QAE_NPAVQPaintDevice@@@Z',
                                                                                            '??0QPainter@@QAE@XZ',
                                                                                            '?pointSizeF@QFont@@QBENXZ',
                                                                                            '??0QBrush@@QAE@W4GlobalColor@Qt@@W4BrushStyle@2@@Z',
                                                                                            '?hasSelection@QTextCursor@@QBE_NXZ',
                                                                                            '?save@QPixmap@@QBE_NABVQString@@PBDH@Z',
                                                                                            '?grabWidget@QPixmap@@SA?AV1@PAVQObject@@HHHH@Z',
                                                                                            '??4QPixmap@@QAEAAV0@$$QAV0@@Z',
                                                                                            '??0QPixmap@@QAE@XZ',
                                                                                            '?toString@QKeySequence@@QBE?AVQString@@W4SequenceFormat@1@@Z',
                                                                                            '?isEmpty@QKeySequence@@QBE_NXZ',
                                                                                            '??0QPixmap@@QAE@ABVQString@@PBDV?$QFlags@W4ImageConversionFlag@Qt@@@@@Z',
                                                                                            '?matches@QKeyEvent@@QBE_NW4StandardKey@QKeySequence@@@Z',
                                                                                            '?characterCount@QTextDocument@@QBEHXZ',
                                                                                            '?anchor@QTextCursor@@QBEHXZ',
                                                                                            '?position@QTextCursor@@QBEHXZ',
                                                                                            '??1QTextCharFormat@@QAE@XZ',
                                                                                            '?setProperty@QTextFormat@@QAEXHABVQVariant@@@Z',
                                                                                            '??1QTextFormat@@QAE@XZ',
                                                                                            '??4QTextFormat@@QAEAAV0@ABV0@@Z',
                                                                                            '?insertHtml@QTextCursor@@QAEXABVQString@@@Z',
                                                                                            '?insertBlock@QTextCursor@@QAEXXZ',
                                                                                            '??1QTextCursor@@QAE@XZ',
                                                                                            '?boundingRect@QPainter@@QAE?AVQRectF@@ABV2@ABVQString@@ABVQTextOption@@@Z',
                                                                                            '?drawText@QPainter@@QAEXABVQRectF@@ABVQString@@ABVQTextOption@@@Z',
                                                                                            '?setFont@QPainter@@QAEXABVQFont@@@Z',
                                                                                            '??1QTextOption@@QAE@XZ',
                                                                                            '??0QTextOption@@QAE@V?$QFlags@W4AlignmentFlag@Qt@@@@@Z',
                                                                                            '??0QTextOption@@QAE@XZ',
                                                                                            '?hasThemeIcon@QIcon@@SA_NABVQString@@@Z',
                                                                                            '?fromTheme@QIcon@@SA?AV1@ABVQString@@ABV1@@Z',
                                                                                            '?addPixmap@QIcon@@QAEXABVQPixmap@@W4Mode@1@W4State@1@@Z',
                                                                                            '?swap@QIcon@@QAEXAAV1@@Z',
                                                                                            '?rect@QPixmap@@QBE?AVQRect@@XZ',
                                                                                            '??0QPixmap@@QAE@HH@Z',
                                                                                            '?setStyle@QFont@@QAEXW4Style@1@@Z',
                                                                                            '?elidedText@QFontMetrics@@QBE?AVQString@@ABV2@W4TextElideMode@Qt@@HH@Z',
                                                                                            '?reason@QFocusEvent@@QBE?AW4FocusReason@Qt@@XZ',
                                                                                            '?fillRect@QPainter@@QAEXABVQRect@@ABVQBrush@@@Z',
                                                                                            '?drawImage@QPainter@@QAEXHHABVQImage@@HHHHV?$QFlags@W4ImageConversionFlag@Qt@@@@@Z',
                                                                                            '?drawImage@QPainter@@QAEXABVQRect@@ABVQImage@@@Z',
                                                                                            '?drawRects@QPainter@@QAEXPBVQRect@@H@Z',
                                                                                            '?setPen@QPainter@@QAEXW4PenStyle@Qt@@@Z',
                                                                                            '?scaled@QImage@@QBE?AV1@ABVQSize@@W4AspectRatioMode@Qt@@W4TransformationMode@4@@Z',
                                                                                            '?setDevicePixelRatio@QImage@@QAEXN@Z',
                                                                                            '?width@QImage@@QBEHXZ',
                                                                                            '??4QImage@@QAEAAV0@ABV0@@Z',
                                                                                            '??0QImage@@QAE@ABVQSize@@W4Format@0@@Z',
                                                                                            '?setRgb@QColor@@QAEXHHHH@Z',
                                                                                            '?blue@QColor@@QBEHXZ',
                                                                                            '?green@QColor@@QBEHXZ',
                                                                                            '?red@QColor@@QBEHXZ',
                                                                                            '?smoothSizes@QFontDatabase@@QAE?AV?$QList@H@@ABVQString@@0@Z',
                                                                                            '??0QFontDatabase@@QAE@XZ',
                                                                                            '?styleName@QFont@@QBE?AVQString@@XZ',
                                                                                            '?family@QFont@@QBE?AVQString@@XZ',
                                                                                            '?setRenderHint@QPainter@@QAEXW4RenderHint@1@_N@Z',
                                                                                            '?drawPolygon@QPainter@@QAEXPBVQPoint@@HW4FillRule@Qt@@@Z',
                                                                                            '?drawPolyline@QPainter@@QAEXPBVQPoint@@H@Z',
                                                                                            '?drawEllipse@QPainter@@QAEXABVQRectF@@@Z',
                                                                                            '?translate@QPainter@@QAEXABVQPointF@@@Z',
                                                                                            '?restore@QPainter@@QAEXXZ',
                                                                                            '?save@QPainter@@QAEXXZ',
                                                                                            '?setBrush@QPainter@@QAEXABVQBrush@@@Z',
                                                                                            '?setPen@QPainter@@QAEXABVQPen@@@Z',
                                                                                            '?setJoinStyle@QPen@@QAEXW4PenJoinStyle@Qt@@@Z',
                                                                                            '?setWidth@QPen@@QAEXH@Z',
                                                                                            '?setStyle@QPen@@QAEXW4PenStyle@Qt@@@Z',
                                                                                            '??0QPen@@QAE@ABVQColor@@@Z',
                                                                                            '?lineWidth@QFontMetrics@@QBEHXZ',
                                                                                            '?color@QPalette@@QBEABVQColor@@W4ColorGroup@1@W4ColorRole@1@@Z',
                                                                                            '?queryKeyboardModifiers@QGuiApplication@@SA?AV?$QFlags@W4KeyboardModifier@Qt@@@@XZ',
                                                                                            '?palette@QGuiApplication@@SA?AVQPalette@@XZ',
                                                                                            '??BQFont@@QBE?AVQVariant@@XZ',
                                                                                            '?setUnderline@QFont@@QAEX_N@Z',
                                                                                            '??BQBrush@@QBE?AVQVariant@@XZ',
                                                                                            '??BQColor@@QBE?AVQVariant@@XZ',
                                                                                            '?setMimeData@QClipboard@@QAEXPAVQMimeData@@W4Mode@1@@Z',
                                                                                            '??4QFont@@QAEAAV0@ABV0@@Z',
                                                                                            '?globalPos@QMouseEvent@@QBE?AVQPoint@@XZ',
                                                                                            '?pos@QMouseEvent@@QBE?AVQPoint@@XZ',
                                                                                            '?setColor@QPen@@QAEXABVQColor@@@Z',
                                                                                            '?color@QPen@@QBE?AVQColor@@XZ',
                                                                                            '?setWidthF@QPen@@QAEXN@Z',
                                                                                            '??1QPen@@QAE@XZ',
                                                                                            '??0QPen@@QAE@ABV0@@Z',
                                                                                            '??0QPen@@QAE@ABVQBrush@@NW4PenStyle@Qt@@W4PenCapStyle@3@W4PenJoinStyle@3@@Z',
                                                                                            '?shape@QCursor@@QBE?AW4CursorShape@Qt@@XZ',
                                                                                            '??1QCursor@@QAE@XZ',
                                                                                            '??0QCursor@@QAE@W4CursorShape@Qt@@@Z',
                                                                                            '??4QBrush@@QAEAAV0@$$QAV0@@Z',
                                                                                            '??0QBrush@@QAE@XZ',
                                                                                            '??1QPixmap@@UAE@XZ',
                                                                                            '??1QPainterPath@@QAE@XZ',
                                                                                            '??0QColor@@QAE@PBD@Z',
                                                                                            '?invalidate@QColor@@AAEXXZ',
                                                                                            '??4QColor@@QAEAAV0@ABV0@@Z',
                                                                                            '?setBrush@QPalette@@QAEXW4ColorGroup@1@W4ColorRole@1@ABVQBrush@@@Z',
                                                                                            '??0QPalette@@QAE@XZ',
                                                                                            '?setProperty@QObject@@QAE_NPBDABVQVariant@@@Z',
                                                                                            '?isWidgetType@QObject@@QBE_NXZ',
                                                                                            '?typeFlags@QMetaType@@SA?AV?$QFlags@W4TypeFlag@QMetaType@@@@H@Z',
                                                                                            '??0QString@@QAE@ABVQByteArray@@@Z',
                                                                                            '?number@QString@@SA?AV1@HH@Z',
                                                                                            '?toInt@QString@@QBEHPA_NH@Z',
                                                                                            '?toLatin1@QString@@QBE?AVQByteArray@@XZ',
                                                                                            '?repeated@QString@@QBE?AV1@H@Z',
                                                                                            '?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z',
                                                                                            '?start@QThread@@QAEXW4Priority@1@@Z',
                                                                                            '??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z',
                                                                                            '?location@QLibraryInfo@@SA?AVQString@@W4LibraryLocation@1@@Z',
                                                                                            '??0QSocketNotifier@@QAE@HW4Type@0@PAVQObject@@@Z',
                                                                                            '??1QSocketNotifier@@UAE@XZ',
                                                                                            '?event@QSocketNotifier@@MAE_NPAVQEvent@@@Z',
                                                                                            '?metaObject@QSocketNotifier@@UBEPBUQMetaObject@@XZ',
                                                                                            '?qt_metacall@QSocketNotifier@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QSocketNotifier@@UAEPAXPBD@Z',
                                                                                            '?self@QCoreApplication@@0PAV1@A',
                                                                                            '?shared_null@QHashData@@2U1@B',
                                                                                            '??0QObject@@QAE@PAV0@@Z',
                                                                                            '??1QObject@@UAE@XZ',
                                                                                            '?baseName@QFileInfo@@QBE?AVQString@@XZ',
                                                                                            '?arg@QString@@QBE?AV1@_KHHVQChar@@@Z',
                                                                                            '?number@QString@@SA?AV1@NDH@Z',
                                                                                            '?property@QObject@@QBE?AVQVariant@@PBD@Z',
                                                                                            '??0QVariant@@QAE@I@Z',
                                                                                            '??0QVariant@@QAE@_K@Z',
                                                                                            '??0QVariant@@QAE@N@Z',
                                                                                            '??0QVariant@@QAE@ABVQString@@@Z',
                                                                                            '?toBool@QVariant@@QBE_NXZ',
                                                                                            '??1QDateTime@@QAE@XZ',
                                                                                            '?toString@QDateTime@@QBE?AVQString@@ABV2@@Z',
                                                                                            '?fromMSecsSinceEpoch@QDateTime@@SA?AV1@_J@Z',
                                                                                            '?toLongLong@QString@@QBE_JPA_NH@Z',
                                                                                            '?toULongLong@QString@@QBE_KPA_NH@Z',
                                                                                            '?toDouble@QString@@QBENPA_N@Z',
                                                                                            '??M@YA_NABVQString@@0@Z',
                                                                                            '?freeNodeAndRebalance@QMapDataBase@@QAEXPAUQMapNodeBase@@@Z',
                                                                                            '??0QVariant@@QAE@_J@Z',
                                                                                            '?fromLocalFile@QUrl@@SA?AV1@ABVQString@@@Z',
                                                                                            '?qBadAlloc@@YAXXZ',
                                                                                            '?invokeMethod@QMetaObject@@SA_NPAVQObject@@PBDW4ConnectionType@Qt@@VQGenericReturnArgument@@VQGenericArgument@@444444444@Z',
                                                                                            '?allocate@QArrayData@@SAPAU1@IIIV?$QFlags@W4AllocationOption@QArrayData@@@@@Z',
                                                                                            '??0QByteArray@@QAE@ABV0@@Z',
                                                                                            '??4QByteArray@@QAEAAV0@ABV0@@Z',
                                                                                            '??4QByteArray@@QAEAAV0@PBD@Z',
                                                                                            '??BQByteArray@@QBEPBDXZ',
                                                                                            '?data@QByteArray@@QAEPADXZ',
                                                                                            '?clear@QByteArray@@QAEXXZ',
                                                                                            '?clear@QString@@QAEXXZ',
                                                                                            '??AQString@@QBE?BVQChar@@H@Z',
                                                                                            '?arg@QString@@QBE?AV1@GHHVQChar@@@Z',
                                                                                            '?arg@QString@@QBE?AV1@VQChar@@H0@Z',
                                                                                            '?sprintf@QString@@QAAAAV1@PBDZZ',
                                                                                            '??1?$QList@VQItemSelectionRange@@@@QAE@XZ',
                                                                                            '??0?$QList@VQItemSelectionRange@@@@QAE@ABV0@@Z',
                                                                                            '?selectedIndexes@QItemSelectionModel@@QBE?AV?$QList@VQModelIndex@@@@XZ',
                                                                                            '?parent@QModelIndex@@QBE?AV1@XZ',
                                                                                            '?currentPath@QDir@@SA?AVQString@@XZ',
                                                                                            '?exists@QFileInfo@@QBE_NXZ',
                                                                                            '?wakeOne@QWaitCondition@@QAEXXZ',
                                                                                            '?wait@QWaitCondition@@QAE_NPAVQMutex@@K@Z',
                                                                                            '?unlock@QMutexLocker@@QAEXXZ',
                                                                                            '??1QMutexLocker@@QAE@XZ',
                                                                                            '??0QMutexLocker@@QAE@PAVQBasicMutex@@@Z',
                                                                                            '?unlock@QMutex@@QAEXXZ',
                                                                                            '?lock@QMutex@@QAEXXZ',
                                                                                            '??0QLineF@@QAE@ABVQLine@@@Z',
                                                                                            '?number@QString@@SA?AV1@_JH@Z',
                                                                                            '?entryList@QDir@@QBE?AVQStringList@@ABV2@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z',
                                                                                            '?languageToString@QLocale@@SA?AVQString@@W4Language@1@@Z',
                                                                                            '?language@QLocale@@QBE?AW4Language@1@XZ',
                                                                                            '?isValid@QRegExp@@QBE_NXZ',
                                                                                            '?staticMetaObject@QThread@@2UQMetaObject@@B',
                                                                                            '?run@QThread@@MAEXXZ',
                                                                                            '?qt_metacast@QThread@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QThread@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?metaObject@QThread@@UBEPBUQMetaObject@@XZ',
                                                                                            '??1QWaitCondition@@QAE@XZ',
                                                                                            '??0QWaitCondition@@QAE@XZ',
                                                                                            '?moveToThread@QObject@@QAEXPAVQThread@@@Z',
                                                                                            '??1QMutex@@QAE@XZ',
                                                                                            '??0QMutex@@QAE@W4RecursionMode@0@@Z',
                                                                                            '?staticMetaObject@QAbstractItemModel@@2UQMetaObject@@B',
                                                                                            '?qt_metacall@QAbstractItemModel@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QAbstractItemModel@@UAEPAXPBD@Z',
                                                                                            '??6QDebug@@QAEAAV0@N@Z',
                                                                                            '??6QDebug@@QAEAAV0@H@Z',
                                                                                            '??6QDebug@@QAEAAV0@D@Z',
                                                                                            '?maybeSpace@QDebug@@QAEAAV1@XZ',
                                                                                            '??6QTextStream@@QAEAAV0@H@Z',
                                                                                            '??6QTextStream@@QAEAAV0@D@Z',
                                                                                            '?setNumberOptions@QLocale@@QAEXV?$QFlags@W4NumberOption@QLocale@@@@@Z',
                                                                                            '?toString@QLocale@@QBE?AVQString@@ABVQDateTime@@ABV2@@Z',
                                                                                            '?toString@QLocale@@QBE?AVQString@@NDH@Z',
                                                                                            '?toTimeSpec@QDateTime@@QBE?AV1@W4TimeSpec@Qt@@@Z',
                                                                                            '?isDetached@QVariant@@QBE_NXZ',
                                                                                            '??4QVariant@@QAEAAV0@ABV0@@Z',
                                                                                            '?previousNode@QMapNodeBase@@QBEPBU1@XZ',
                                                                                            '?toLine@QLineF@@QBE?AVQLine@@XZ',
                                                                                            '?translated@QLineF@@QBE?AV1@ABVQPointF@@@Z',
                                                                                            '?isNull@QLineF@@QBE_NXZ',
                                                                                            '?append@?$QVector@VQPoint@@@@QAEXABVQPoint@@@Z',
                                                                                            '??Y?$QVector@VQPointF@@@@QAEAAV0@ABV0@@Z',
                                                                                            '?last@?$QVector@VQPointF@@@@QAEAAVQPointF@@XZ',
                                                                                            '?first@?$QVector@VQPointF@@@@QAEAAVQPointF@@XZ',
                                                                                            '?remove@?$QVector@VQPointF@@@@QAEXHH@Z',
                                                                                            '?append@?$QVector@VQPointF@@@@QAEX$$QAVQPointF@@@Z',
                                                                                            '?append@?$QVector@VQPointF@@@@QAEXABVQPointF@@@Z',
                                                                                            '??A?$QVector@VQPointF@@@@QAEAAVQPointF@@H@Z',
                                                                                            '?at@?$QVector@VQPointF@@@@QBEABVQPointF@@H@Z',
                                                                                            '?constData@?$QVector@VQPointF@@@@QBEPBVQPointF@@XZ',
                                                                                            '?reserve@?$QVector@VQPointF@@@@QAEXH@Z',
                                                                                            '?resize@?$QVector@VQPointF@@@@QAEXH@Z',
                                                                                            '??1?$QVector@VQPointF@@@@QAE@XZ',
                                                                                            '??0?$QVector@VQPointF@@@@QAE@XZ',
                                                                                            '?toRect@QRectF@@QBE?AVQRect@@XZ',
                                                                                            '?intersects@QRectF@@QBE_NABV1@@Z',
                                                                                            '?contains@QRectF@@QBE_NABVQPointF@@@Z',
                                                                                            '?setTopLeft@QRectF@@QAEXABVQPointF@@@Z',
                                                                                            '?center@QRectF@@QBE?AVQPointF@@XZ',
                                                                                            '?bottomLeft@QRectF@@QBE?AVQPointF@@XZ',
                                                                                            '?bottomRight@QRectF@@QBE?AVQPointF@@XZ',
                                                                                            '?normalized@QRectF@@QBE?AV1@XZ',
                                                                                            '??0QRectF@@QAE@NNNN@Z',
                                                                                            '??0QRectF@@QAE@ABVQPointF@@0@Z',
                                                                                            '?setSize@QRect@@QAEXABVQSize@@@Z',
                                                                                            '?adjusted@QRect@@QBE?AV1@HHHH@Z',
                                                                                            '?translated@QRect@@QBE?AV1@HH@Z',
                                                                                            '??0QRect@@QAE@ABVQPoint@@ABVQSize@@@Z',
                                                                                            '??0QRect@@QAE@ABVQPoint@@0@Z',
                                                                                            '?toPoint@QPointF@@QBE?AVQPoint@@XZ',
                                                                                            '?manhattanLength@QPoint@@QBEHXZ',
                                                                                            '?toSize@QSizeF@@QBE?AVQSize@@XZ',
                                                                                            '??_0QSize@@QAEAAV0@N@Z',
                                                                                            '?scaled@QSize@@QBE?AV1@ABV1@W4AspectRatioMode@Qt@@@Z',
                                                                                            '?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z',
                                                                                            '?move@QListData@@QAEXHH@Z',
                                                                                            '?remove@QListData@@QAEXH@Z',
                                                                                            '?insert@QListData@@QAEPAPAXH@Z',
                                                                                            '??8QString@@QBE_NVQLatin1String@@@Z',
                                                                                            '??4QString@@QAEAAV0@VQLatin1String@@@Z',
                                                                                            '??0QString@@QAE@VQLatin1String@@@Z',
                                                                                            '??0QString@@QAE@VQChar@@@Z',
                                                                                            '?number@QByteArray@@SA?AV1@NDH@Z',
                                                                                            '?number@QByteArray@@SA?AV1@HH@Z',
                                                                                            '?qIsNaN@@YA_NN@Z',
                                                                                            '?matchedLength@QRegExp@@QBEHXZ',
                                                                                            '?indexIn@QRegExp@@QBEHABVQString@@HW4CaretMode@1@@Z',
                                                                                            '?postEvent@QCoreApplication@@SAXPAVQObject@@PAVQEvent@@H@Z',
                                                                                            '?elapsed@QTime@@QBEHXZ',
                                                                                            '?start@QTime@@QAEXXZ',
                                                                                            '?isNull@QString@@QBE_NXZ',
                                                                                            '??0QByteArray@@QAE@$$QAV0@@Z',
                                                                                            '?toString@QLocale@@QBE?AVQString@@H@Z',
                                                                                            '??6QTextStream@@QAEAAV0@ABVQByteArray@@@Z',
                                                                                            '?append@QString@@QAEAAV1@ABVQByteArray@@@Z',
                                                                                            '?fromLatin1@QString@@SA?AV1@PBDH@Z',
                                                                                            '??MQByteRef@@QBE_ND@Z',
                                                                                            '??PQByteRef@@QBE_ND@Z',
                                                                                            '??4QByteRef@@QAEAAV0@D@Z',
                                                                                            '??BQByteRef@@QBEDXZ',
                                                                                            '?replace@QByteArray@@QAEAAV1@DABV1@@Z',
                                                                                            '?mid@QByteArray@@QBE?AV1@HH@Z',
                                                                                            '?resize@QByteArray@@QAEXH@Z',
                                                                                            '?separator@QDir@@SA?AVQChar@@XZ',
                                                                                            '?fill@QString@@QAEAAV1@VQChar@@H@Z',
                                                                                            '?reserve@QString@@QAEXH@Z',
                                                                                            '?qt_metacast@QTemporaryFile@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QTemporaryFile@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?open@QTemporaryFile@@MAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z',
                                                                                            '?metaObject@QTemporaryFile@@UBEPBUQMetaObject@@XZ',
                                                                                            '?fileName@QTemporaryFile@@UBE?AVQString@@XZ',
                                                                                            '?open@QTemporaryFile@@QAE_NXZ',
                                                                                            '??1QTemporaryFile@@UAE@XZ',
                                                                                            '??0QTemporaryFile@@QAE@ABVQString@@PAVQObject@@@Z',
                                                                                            '?tempPath@QDir@@SA?AVQString@@XZ',
                                                                                            '?absoluteFilePath@QDir@@QBE?AVQString@@ABV2@@Z',
                                                                                            '?getChar@QIODevice@@QAE_NPAD@Z',
                                                                                            '?write@QIODevice@@QAE_JPBD@Z',
                                                                                            '?write@QIODevice@@QAE_JPBD_J@Z',
                                                                                            '?read@QIODevice@@QAE?AVQByteArray@@_J@Z',
                                                                                            '?isOpen@QIODevice@@QBE_NXZ',
                                                                                            '?error@QFileDevice@@QBE?AW4FileError@1@XZ',
                                                                                            '?write@QIODevice@@QAE_JABVQByteArray@@@Z',
                                                                                            '?children@QObject@@QBEABV?$QList@PAVQObject@@@@XZ',
                                                                                            '?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ',
                                                                                            '?filePath@QDir@@QBE?AVQString@@ABV2@@Z',
                                                                                            '?hasShrunk@QHashData@@QAEXXZ',
                                                                                            '?freeNode@QHashData@@QAEXPAX@Z',
                                                                                            '?swap@QString@@QAEXAAV1@@Z',
                                                                                            '?remove@QString@@QAEAAV1@HH@Z',
                                                                                            '?setCodec@QTextStream@@QAEXPBD@Z',
                                                                                            '?unregisterConverterFunction@QMetaType@@SAXHH@Z',
                                                                                            '?registerConverterFunction@QMetaType@@SA_NPBUAbstractConverterFunction@QtPrivate@@HH@Z',
                                                                                            '?hasRegisteredConverterFunction@QMetaType@@SA_NHH@Z',
                                                                                            '?typeName@QMetaType@@SAPBDH@Z',
                                                                                            '?endsWith@QByteArray@@QBE_ND@Z',
                                                                                            '?setFileName@QFile@@QAEXABVQString@@@Z',
                                                                                            '??0QFile@@QAE@XZ',
                                                                                            '?handle@QFileDevice@@QBEHXZ',
                                                                                            '?fromUtf16@QString@@SA?AV1@PBGH@Z',
                                                                                            '?fromHex@QByteArray@@SA?AV1@ABV1@@Z',
                                                                                            '?toHex@QByteArray@@QBE?AV1@XZ',
                                                                                            '?toBase64@QByteArray@@QBE?AV1@XZ',
                                                                                            '?append@QByteArray@@QAEAAV1@PBDH@Z',
                                                                                            '??0QLocale@@QAE@W4Language@0@W4Country@0@@Z',
                                                                                            '?deleteLater@QObject@@QAEXXZ',
                                                                                            '?staticMetaObject@QObject@@2UQMetaObject@@B',
                                                                                            '?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?qt_metacast@QObject@@UAEPAXPBD@Z',
                                                                                            '?qUnregisterResourceData@@YA_NHPBE00@Z',
                                                                                            '?qRegisterResourceData@@YA_NHPBE00@Z',
                                                                                            '?event@QThread@@UAE_NPAVQEvent@@@Z',
                                                                                            '?size@QFileInfo@@QBE_JXZ',
                                                                                            '?isFile@QFileInfo@@QBE_NXZ',
                                                                                            '?isReadable@QFileInfo@@QBE_NXZ',
                                                                                            '?setFile@QFileInfo@@QAEXABVQString@@@Z',
                                                                                            '??0QFileInfo@@QAE@XZ',
                                                                                            '??1QThread@@UAE@XZ',
                                                                                            '??0QThread@@QAE@PAVQObject@@@Z',
                                                                                            '?stop@QTimer@@QAEXXZ',
                                                                                            '?toDouble@QVariant@@QBENPA_N@Z',
                                                                                            '?type@QVariant@@QBE?AW4Type@1@XZ',
                                                                                            '?append@QString@@QAEAAV1@VQChar@@@Z',
                                                                                            '?append@QByteArray@@QAEAAV1@ABVQString@@@Z',
                                                                                            '?append@QByteArray@@QAEAAV1@ABV1@@Z',
                                                                                            '?fill@QByteArray@@QAEAAV1@DH@Z',
                                                                                            '??0QRectF@@QAE@ABVQRect@@@Z',
                                                                                            '?writeData@QFileDevice@@MAE_JPBD_J@Z',
                                                                                            '?waitForReadyRead@QIODevice@@UAE_NH@Z',
                                                                                            '?waitForBytesWritten@QIODevice@@UAE_NH@Z',
                                                                                            '?size@QFile@@UBE_JXZ',
                                                                                            '?setPermissions@QFile@@UAE_NV?$QFlags@W4Permission@QFileDevice@@@@@Z',
                                                                                            '?seek@QFileDevice@@UAE_N_J@Z',
                                                                                            '?resize@QFile@@UAE_N_J@Z',
                                                                                            '?reset@QIODevice@@UAE_NXZ',
                                                                                            '?readLineData@QFileDevice@@MAE_JPAD_J@Z',
                                                                                            '?readData@QFileDevice@@MAE_JPAD_J@Z',
                                                                                            '?qt_metacast@QFile@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QFile@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?pos@QFileDevice@@UBE_JXZ',
                                                                                            '?permissions@QFile@@UBE?AV?$QFlags@W4Permission@QFileDevice@@@@XZ',
                                                                                            '?metaObject@QFile@@UBEPBUQMetaObject@@XZ',
                                                                                            '?isSequential@QFileDevice@@UBE_NXZ',
                                                                                            '?fileName@QFile@@UBE?AVQString@@XZ',
                                                                                            '?close@QFileDevice@@UAEXXZ',
                                                                                            '?canReadLine@QIODevice@@UBE_NXZ',
                                                                                            '?bytesToWrite@QIODevice@@UBE_JXZ',
                                                                                            '?bytesAvailable@QIODevice@@UBE_JXZ',
                                                                                            '?atEnd@QFileDevice@@UBE_NXZ',
                                                                                            '??6QDebug@@QAEAAV0@PBX@Z',
                                                                                            '??6QDebug@@QAEAAV0@ABVQString@@@Z',
                                                                                            '??6QDebug@@QAEAAV0@I@Z',
                                                                                            '?cmp@QVariant@@QBE_NABV1@@Z',
                                                                                            '??0QVariant@@QAE@W4Type@0@@Z',
                                                                                            '?toULong@QString@@QBEKPA_NH@Z',
                                                                                            '?toUShort@QString@@QBEGPA_NH@Z',
                                                                                            '?replace@QString@@QAEAAV1@VQChar@@ABV1@W4CaseSensitivity@Qt@@@Z',
                                                                                            '?toHtmlEscaped@QString@@QBE?AV1@XZ',
                                                                                            '?toStdString@QString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?currentValue@QVariantAnimation@@QBE?AVQVariant@@XZ',
                                                                                            '?supportedDropActions@QStringListModel@@UBE?AV?$QFlags@W4DropAction@Qt@@@@XZ',
                                                                                            '?sort@QStringListModel@@UAEXHW4SortOrder@Qt@@@Z',
                                                                                            '?sibling@QStringListModel@@UBE?AVQModelIndex@@HHABV2@@Z',
                                                                                            '?setData@QStringListModel@@UAE_NABVQModelIndex@@ABVQVariant@@H@Z',
                                                                                            '?rowCount@QStringListModel@@UBEHABVQModelIndex@@@Z',
                                                                                            '?removeRows@QStringListModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?qt_metacast@QStringListModel@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QStringListModel@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?parent@QAbstractListModel@@EBE?AVQModelIndex@@ABV2@@Z',
                                                                                            '?metaObject@QStringListModel@@UBEPBUQMetaObject@@XZ',
                                                                                            '?insertRows@QStringListModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?index@QAbstractListModel@@UBE?AVQModelIndex@@HHABV2@@Z',
                                                                                            '?headerData@QAbstractItemModel@@UBE?AVQVariant@@HW4Orientation@Qt@@H@Z',
                                                                                            '?hasChildren@QAbstractListModel@@EBE_NABVQModelIndex@@@Z',
                                                                                            '?flags@QStringListModel@@UBE?AV?$QFlags@W4ItemFlag@Qt@@@@ABVQModelIndex@@@Z',
                                                                                            '?dropMimeData@QAbstractListModel@@UAE_NPBVQMimeData@@W4DropAction@Qt@@HHABVQModelIndex@@@Z',
                                                                                            '?data@QStringListModel@@UBE?AVQVariant@@ABVQModelIndex@@H@Z',
                                                                                            '?columnCount@QAbstractListModel@@EBEHABVQModelIndex@@@Z',
                                                                                            '??1QStringListModel@@UAE@XZ',
                                                                                            '?setStringList@QStringListModel@@QAEXABVQStringList@@@Z',
                                                                                            '??0QStringListModel@@QAE@PAVQObject@@@Z',
                                                                                            '?parent@QObject@@QBEPAV1@XZ',
                                                                                            '?QStringList_contains@QtPrivate@@YA_NPBVQStringList@@ABVQString@@W4CaseSensitivity@Qt@@@Z',
                                                                                            '?QStringList_sort@QtPrivate@@YAXPAVQStringList@@W4CaseSensitivity@Qt@@@Z',
                                                                                            '?count@QString@@QBEHVQChar@@W4CaseSensitivity@Qt@@@Z',
                                                                                            '?stringList@QStringListModel@@QBE?AVQStringList@@XZ',
                                                                                            '?replace@QString@@QAEAAV1@HHABV1@@Z',
                                                                                            '?mid@QString@@QBE?AV1@HH@Z',
                                                                                            '?indexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z',
                                                                                            '?at@QString@@QBE?BVQChar@@H@Z',
                                                                                            '?isSpace@QChar@@SA_NI@Z',
                                                                                            '?moveTopLeft@QRect@@QAEXABVQPoint@@@Z',
                                                                                            '?startDetached@QProcess@@SA_NABVQString@@@Z',
                                                                                            '?dir@QFileInfo@@QBE?AVQDir@@XZ',
                                                                                            '?contains@QRect@@QBE_NABV1@_N@Z',
                                                                                            '?arg@QString@@QBE?AV1@_JHHVQChar@@@Z',
                                                                                            '?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ',
                                                                                            '?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z',
                                                                                            '?data@QModelIndex@@QBE?AVQVariant@@H@Z',
                                                                                            '?supportedDropActions@QAbstractItemModel@@UBE?AV?$QFlags@W4DropAction@Qt@@@@XZ',
                                                                                            '?supportedDragActions@QAbstractItemModel@@UBE?AV?$QFlags@W4DropAction@Qt@@@@XZ',
                                                                                            '?submit@QAbstractItemModel@@UAE_NXZ',
                                                                                            '?span@QAbstractItemModel@@UBE?AVQSize@@ABVQModelIndex@@@Z',
                                                                                            '?sibling@QAbstractItemModel@@UBE?AVQModelIndex@@HHABV2@@Z',
                                                                                            '?setItemData@QAbstractItemModel@@UAE_NABVQModelIndex@@ABV?$QMap@HVQVariant@@@@@Z',
                                                                                            '?setHeaderData@QAbstractItemModel@@UAE_NHW4Orientation@Qt@@ABVQVariant@@H@Z',
                                                                                            '?setData@QAbstractItemModel@@UAE_NABVQModelIndex@@ABVQVariant@@H@Z',
                                                                                            '?roleNames@QAbstractItemModel@@UBE?AV?$QHash@HVQByteArray@@@@XZ',
                                                                                            '?revert@QAbstractItemModel@@UAEXXZ',
                                                                                            '?removeRows@QAbstractItemModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?removeColumns@QAbstractItemModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?moveRows@QAbstractItemModel@@UAE_NABVQModelIndex@@HH0H@Z',
                                                                                            '?moveColumns@QAbstractItemModel@@UAE_NABVQModelIndex@@HH0H@Z',
                                                                                            '?mimeTypes@QAbstractItemModel@@UBE?AVQStringList@@XZ',
                                                                                            '?mimeData@QAbstractItemModel@@UBEPAVQMimeData@@ABV?$QList@VQModelIndex@@@@@Z',
                                                                                            '?match@QAbstractItemModel@@UBE?AV?$QList@VQModelIndex@@@@ABVQModelIndex@@HABVQVariant@@HV?$QFlags@W4MatchFlag@Qt@@@@@Z',
                                                                                            '?itemData@QAbstractItemModel@@UBE?AV?$QMap@HVQVariant@@@@ABVQModelIndex@@@Z',
                                                                                            '?insertRows@QAbstractItemModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?insertColumns@QAbstractItemModel@@UAE_NHHABVQModelIndex@@@Z',
                                                                                            '?hasChildren@QAbstractItemModel@@UBE_NABVQModelIndex@@@Z',
                                                                                            '?flags@QAbstractItemModel@@UBE?AV?$QFlags@W4ItemFlag@Qt@@@@ABVQModelIndex@@@Z',
                                                                                            '?fetchMore@QAbstractItemModel@@UAEXABVQModelIndex@@@Z',
                                                                                            '?dropMimeData@QAbstractItemModel@@UAE_NPBVQMimeData@@W4DropAction@Qt@@HHABVQModelIndex@@@Z',
                                                                                            '?canFetchMore@QAbstractItemModel@@UBE_NABVQModelIndex@@@Z',
                                                                                            '?canDropMimeData@QAbstractItemModel@@UBE_NPBVQMimeData@@W4DropAction@Qt@@HHABVQModelIndex@@@Z',
                                                                                            '?buddy@QAbstractItemModel@@UBE?AVQModelIndex@@ABV2@@Z',
                                                                                            '?isValid@QElapsedTimer@@QBE_NXZ',
                                                                                            '?invalidate@QElapsedTimer@@QAEXXZ',
                                                                                            '?endResetModel@QAbstractItemModel@@IAEXXZ',
                                                                                            '?beginResetModel@QAbstractItemModel@@IAEXXZ',
                                                                                            '?endInsertRows@QAbstractItemModel@@IAEXXZ',
                                                                                            '?beginInsertRows@QAbstractItemModel@@IAEXABVQModelIndex@@HH@Z',
                                                                                            '?headerDataChanged@QAbstractItemModel@@QAEXW4Orientation@Qt@@HH@Z',
                                                                                            '?dataChanged@QAbstractItemModel@@QAEXABVQModelIndex@@0ABV?$QVector@H@@@Z',
                                                                                            '??1QAbstractItemModel@@UAE@XZ',
                                                                                            '??0QAbstractItemModel@@QAE@PAVQObject@@@Z',
                                                                                            '??0QVariant@@QAE@$$QAV0@@Z',
                                                                                            '??0QVariant@@QAE@ABVQSize@@@Z',
                                                                                            '??0QVariant@@QAE@ABVQByteArray@@@Z',
                                                                                            '?toDouble@QByteArray@@QBENPA_N@Z',
                                                                                            '?data@QArrayData@@QBEPBXXZ',
                                                                                            '?retrieveData@QMimeData@@MBE?AVQVariant@@ABVQString@@W4Type@2@@Z',
                                                                                            '?qt_metacast@QMimeData@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QMimeData@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?metaObject@QMimeData@@UBEPBUQMetaObject@@XZ',
                                                                                            '?hasFormat@QMimeData@@UBE_NABVQString@@@Z',
                                                                                            '?formats@QMimeData@@UBE?AVQStringList@@XZ',
                                                                                            '?setData@QMimeData@@QAEXABVQString@@ABVQByteArray@@@Z',
                                                                                            '??1QMimeData@@UAE@XZ',
                                                                                            '??0QMimeData@@QAE@XZ',
                                                                                            '??YQString@@QAEAAV0@VQChar@@@Z',
                                                                                            '??0QString@@QAE@HVQChar@@@Z',
                                                                                            '??9QByteRef@@QBE_ND@Z',
                                                                                            '??8QByteRef@@QBE_ND@Z',
                                                                                            '?fromRawData@QByteArray@@SA?AV1@PBDH@Z',
                                                                                            '??AQByteArray@@QAE?AVQByteRef@@H@Z',
                                                                                            '?qstrcmp@@YAHABVQByteArray@@0@Z',
                                                                                            '??4QDir@@QAEAAV0@$$QAV0@@Z',
                                                                                            '?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z',
                                                                                            '??1QFile@@UAE@XZ',
                                                                                            '??0QFile@@QAE@ABVQString@@@Z',
                                                                                            '?endl@@YAAAVQTextStream@@AAV1@@Z',
                                                                                            '??6QTextStream@@QAEAAV0@PBD@Z',
                                                                                            '??6QTextStream@@QAEAAV0@N@Z',
                                                                                            '?readAll@QTextStream@@QAE?AVQString@@XZ',
                                                                                            '??0QTextStream@@QAE@PAVQIODevice@@@Z',
                                                                                            '?intersects@QRect@@QBE_NABV1@@Z',
                                                                                            '?contains@QRect@@QBE_NABVQPoint@@_N@Z',
                                                                                            '??IQRect@@QBE?AV0@ABV0@@Z',
                                                                                            '?normalized@QRect@@QBE?AV1@XZ',
                                                                                            '?blockSignals@QObject@@QAE_N_N@Z',
                                                                                            '??6QTextStream@@QAEAAV0@ABVQString@@@Z',
                                                                                            '??1QTextStream@@UAE@XZ',
                                                                                            '??0QTextStream@@QAE@PAVQString@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z',
                                                                                            '??6QDebug@@QAEAAV0@PBD@Z',
                                                                                            '??1QDebug@@QAE@XZ',
                                                                                            '?debug@QMessageLogger@@QBE?AVQDebug@@XZ',
                                                                                            '??0QMessageLogger@@QAE@PBDH0@Z',
                                                                                            '??YQString@@QAEAAV0@ABVQByteArray@@@Z',
                                                                                            '?prepend@QString@@QAEAAV1@PBD@Z',
                                                                                            '?simplified@QString@@QBE?AV1@XZ',
                                                                                            '?indexOf@QString@@QBEHAAVQRegExp@@H@Z',
                                                                                            '?toString@QUrl@@QBE?AVQString@@V?$QUrlTwoFlags@W4UrlFormattingOption@QUrl@@W4ComponentFormattingOption@2@@@@Z',
                                                                                            '?fromTime_t@QDateTime@@SA?AV1@I@Z',
                                                                                            '?toLocalTime@QDateTime@@QBE?AV1@XZ',
                                                                                            '?remove@QString@@QAEAAV1@ABVQRegExp@@@Z',
                                                                                            '?insert@QString@@QAEAAV1@HVQChar@@@Z',
                                                                                            '?updateState@QPropertyAnimation@@MAEXW4State@QAbstractAnimation@@0@Z',
                                                                                            '?updateDirection@QAbstractAnimation@@MAEXW4Direction@1@@Z',
                                                                                            '?updateCurrentValue@QPropertyAnimation@@MAEXABVQVariant@@@Z',
                                                                                            '?updateCurrentTime@QVariantAnimation@@MAEXH@Z',
                                                                                            '?qt_metacast@QPropertyAnimation@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QPropertyAnimation@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?metaObject@QPropertyAnimation@@UBEPBUQMetaObject@@XZ',
                                                                                            '?interpolated@QVariantAnimation@@MBE?AVQVariant@@ABV2@0N@Z',
                                                                                            '?event@QPropertyAnimation@@MAE_NPAVQEvent@@@Z',
                                                                                            '?duration@QVariantAnimation@@UBEHXZ',
                                                                                            '??1QPropertyAnimation@@UAE@XZ',
                                                                                            '??0QPropertyAnimation@@QAE@PAVQObject@@ABVQByteArray@@0@Z',
                                                                                            '?setEasingCurve@QVariantAnimation@@QAEXABVQEasingCurve@@@Z',
                                                                                            '?setDuration@QVariantAnimation@@QAEXH@Z',
                                                                                            '?setEndValue@QVariantAnimation@@QAEXABVQVariant@@@Z',
                                                                                            '?setStartValue@QVariantAnimation@@QAEXABVQVariant@@@Z',
                                                                                            '?start@QAbstractAnimation@@QAEXW4DeletionPolicy@1@@Z',
                                                                                            '??1QEasingCurve@@QAE@XZ',
                                                                                            '??0QEasingCurve@@QAE@W4Type@0@@Z',
                                                                                            '??0QByteArray@@QAE@PBDH@Z',
                                                                                            '?vsprintf@QString@@QAEAAV1@PBDPAD@Z',
                                                                                            '?arg@QString@@QBE?AV1@NHDHVQChar@@@Z',
                                                                                            '?arg@QString@@QBE?AV1@KHHVQChar@@@Z',
                                                                                            '?processEvents@QCoreApplication@@SAXV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@H@Z',
                                                                                            '?elapsed@QElapsedTimer@@QBE_JXZ',
                                                                                            '?restart@QElapsedTimer@@QAE_JXZ',
                                                                                            '?start@QElapsedTimer@@QAEXXZ',
                                                                                            '?toUnicode@QTextCodec@@QBE?AVQString@@PBD@Z',
                                                                                            '?codecForLocale@QTextCodec@@SAPAV1@XZ',
                                                                                            '??1QRegExp@@QAE@XZ',
                                                                                            '??0QRegExp@@QAE@ABVQString@@W4CaseSensitivity@Qt@@W4PatternSyntax@0@@Z',
                                                                                            '?replace@QString@@QAEAAV1@ABVQRegExp@@ABV1@@Z',
                                                                                            '?trimmed@QString@@QBE?AV1@XZ',
                                                                                            '?startsWith@QString@@QBE_NABV1@W4CaseSensitivity@Qt@@@Z',
                                                                                            '??0QVariant@@QAE@ABV0@@Z',
                                                                                            '?qHash@@YAIABVQString@@I@Z',
                                                                                            '?number@QString@@SA?AV1@IH@Z',
                                                                                            '?mid@QContainerImplHelper@QtPrivate@@SA?AW4CutResult@12@HPAH0@Z',
                                                                                            '?canonicalPath@QDir@@QBE?AVQString@@XZ',
                                                                                            '?toUInt@QVariant@@QBEIPA_N@Z',
                                                                                            '?canConvert@QVariant@@QBE_NH@Z',
                                                                                            '??4QVariant@@QAEAAV0@$$QAV0@@Z',
                                                                                            '??0QVariant@@QAE@PBD@Z',
                                                                                            '?load@QTranslator@@QAE_NABVQString@@000@Z',
                                                                                            '??0QTranslator@@QAE@PAVQObject@@@Z',
                                                                                            '?singleShot@QTimer@@SAXHPBVQObject@@PBD@Z',
                                                                                            '?setInterval@QTimer@@QAEXH@Z',
                                                                                            '?cleanPath@QDir@@SA?AVQString@@ABV2@@Z',
                                                                                            '?toNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z',
                                                                                            '?absolutePath@QDir@@QBE?AVQString@@XZ',
                                                                                            '?setPath@QDir@@QAEXABVQString@@@Z',
                                                                                            '?exists@QFile@@SA_NABVQString@@@Z',
                                                                                            '?setDefault@QLocale@@SAXABV1@@Z',
                                                                                            '??4QLocale@@QAEAAV0@ABV0@@Z',
                                                                                            '??0QLocale@@QAE@ABVQString@@@Z',
                                                                                            '??0QLocale@@QAE@XZ',
                                                                                            '?nextNode@QHashData@@SAPAUNode@1@PAU21@@Z',
                                                                                            '?rehash@QHashData@@QAEXH@Z',
                                                                                            '?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z',
                                                                                            '?allocateNode@QHashData@@QAEPAXH@Z',
                                                                                            '?removeTranslator@QCoreApplication@@SA_NPAVQTranslator@@@Z',
                                                                                            '?installTranslator@QCoreApplication@@SA_NPAVQTranslator@@@Z',
                                                                                            '?applicationName@QCoreApplication@@SA?AVQString@@XZ',
                                                                                            '?setApplicationName@QCoreApplication@@SAXABVQString@@@Z',
                                                                                            '?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z',
                                                                                            '?connect@QObject@@QBE?AVConnection@QMetaObject@@PBV1@PBD1W4ConnectionType@Qt@@@Z',
                                                                                            '?setParent@QObject@@QAEXPAV1@@Z',
                                                                                            '?prepend@QListData@@QAEPAPAXXZ',
                                                                                            '?append@QListData@@QAEPAPAXABU1@@Z',
                                                                                            '??9QString@@QBE_NPBD@Z',
                                                                                            '??8QString@@QBE_NPBD@Z',
                                                                                            '?toUInt@QString@@QBEIPA_NH@Z',
                                                                                            '?left@QString@@QBE?AV1@H@Z',
                                                                                            '??4QString@@QAEAAV0@ABV0@@Z',
                                                                                            '?timerEvent@QTimer@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?qt_metacast@QTimer@@UAEPAXPBD@Z',
                                                                                            '?qt_metacall@QTimer@@UAEHW4Call@QMetaObject@@HPAPAX@Z',
                                                                                            '?metaObject@QTimer@@UBEPBUQMetaObject@@XZ',
                                                                                            '?urls@QMimeData@@QBE?AV?$QList@VQUrl@@@@XZ',
                                                                                            '?system@QLocale@@SA?AV1@XZ',
                                                                                            '?name@QLocale@@QBE?AVQString@@XZ',
                                                                                            '??1QLocale@@QAE@XZ',
                                                                                            '?toLocalFile@QUrl@@QBE?AVQString@@XZ',
                                                                                            '??1QUrl@@QAE@XZ',
                                                                                            '??0QUrl@@QAE@ABV0@@Z',
                                                                                            '?fileName@QFileInfo@@QBE?AVQString@@XZ',
                                                                                            '??1QFileInfo@@QAE@XZ',
                                                                                            '??0QFileInfo@@QAE@ABVQString@@@Z',
                                                                                            '?start@QTimer@@QAEXH@Z',
                                                                                            '??0QTimer@@QAE@PAVQObject@@@Z',
                                                                                            '?size@QRect@@QBE?AVQSize@@XZ',
                                                                                            '??0QRect@@QAE@HHHH@Z',
                                                                                            '??0QSize@@QAE@HH@Z',
                                                                                            '??0QSize@@QAE@XZ',
                                                                                            '?disconnect@QObject@@SA_NPBV1@PBD01@Z',
                                                                                            '?installEventFilter@QObject@@QAEXPAV1@@Z',
                                                                                            '?qt_qFindChildren_helper@@YAXPBVQObject@@ABVQString@@ABUQMetaObject@@PAV?$QList@PAX@@V?$QFlags@W4FindChildOption@Qt@@@@@Z',
                                                                                            '?erase@QListData@@QAEPAPAXPAPAX@Z',
                                                                                            '?isPrint@QCharRef@@QBE_NXZ',
                                                                                            '??8@YA_NABVQString@@0@Z',
                                                                                            '?compare@QString@@QBEHABV1@W4CaseSensitivity@Qt@@@Z',
                                                                                            '?fromUtf8@QString@@SA?AV1@PBDH@Z',
                                                                                            '?split@QString@@QBE?AVQStringList@@VQChar@@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z',
                                                                                            '?replace@QString@@QAEAAV1@ABV1@0W4CaseSensitivity@Qt@@@Z',
                                                                                            '?toLower@QString@@QBE?AV1@XZ',
                                                                                            '?endsWith@QString@@QBE_NABV1@W4CaseSensitivity@Qt@@@Z',
                                                                                            '?lastIndexOf@QString@@QBEHVQChar@@HW4CaseSensitivity@Qt@@@Z',
                                                                                            '??AQString@@QAE?AVQCharRef@@H@Z',
                                                                                            '?truncate@QString@@QAEXH@Z',
                                                                                            '?isEmpty@QString@@QBE_NXZ',
                                                                                            '?append@QByteArray@@QAEAAV1@PBD@Z',
                                                                                            '?append@QByteArray@@QAEAAV1@D@Z',
                                                                                            '?reserve@QByteArray@@QAEXH@Z',
                                                                                            '?className@QMetaObject@@QBEPBDXZ',
                                                                                            '?event@QObject@@UAE_NPAVQEvent@@@Z',
                                                                                            '?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z',
                                                                                            '?objectName@QObject@@QBE?AVQString@@XZ',
                                                                                            '?toUtf8@QString@@QBE?AVQByteArray@@XZ',
                                                                                            '?prepend@QString@@QAEAAV1@ABV1@@Z',
                                                                                            '?indexOf@QString@@QBEHABV1@HW4CaseSensitivity@Qt@@@Z',
                                                                                            '?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z',
                                                                                            '?qt_assert@@YAXPBD0H@Z',
                                                                                            '?shared_null@QMapDataBase@@2U1@B',
                                                                                            '?shared_null@QListData@@2UData@1@B',
                                                                                            '?shared_null@QArrayData@@2QBU1@B',
                                                                                            '?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z',
                                                                                            '?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z',
                                                                                            '?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z',
                                                                                            '?customEvent@QObject@@MAEXPAVQEvent@@@Z',
                                                                                            '?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z',
                                                                                            '?childEvent@QObject@@MAEXPAVQChildEvent@@@Z',
                                                                                            '?first@?$QList@VQItemSelectionRange@@@@QBEABVQItemSelectionRange@@XZ',
                                                                                            '?hasSelection@QItemSelectionModel@@QBE_NXZ',
                                                                                            '?currentIndex@QItemSelectionModel@@QBE?AVQModelIndex@@XZ',
                                                                                            '?row@QPersistentModelIndex@@QBEHXZ',
                                                                                            '?convert@QVariant@@QBE_NHPAX@Z',
                                                                                            '?constData@QVariant@@QBEPBXXZ',
                                                                                            '?toString@QVariant@@QBE?AVQString@@XZ',
                                                                                            '?toInt@QVariant@@QBEHPA_N@Z',
                                                                                            '?userType@QVariant@@QBEHXZ',
                                                                                            '??0QVariant@@QAE@H@Z',
                                                                                            '??0QVariant@@QAE@HPBXI@Z',
                                                                                            '??1QVariant@@QAE@XZ',
                                                                                            '??0QVariant@@QAE@XZ',
                                                                                            '?freeData@QMapDataBase@@SAXPAU1@@Z',
                                                                                            '?createData@QMapDataBase@@SAPAU1@XZ',
                                                                                            '?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z',
                                                                                            '?createNode@QMapDataBase@@QAEPAUQMapNodeBase@@HHPAU2@_N@Z',
                                                                                            '?recalcMostLeftNode@QMapDataBase@@QAEXXZ',
                                                                                            '?nextNode@QMapNodeBase@@QBEPBU1@XZ',
                                                                                            '?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z',
                                                                                            '??XQSize@@QAEAAV0@N@Z',
                                                                                            '?sender@QObject@@IBEPAV1@XZ',
                                                                                            '?killTimer@QObject@@QAEXH@Z',
                                                                                            '?startTimer@QObject@@QAEHHW4TimerType@Qt@@@Z',
                                                                                            '?setObjectName@QObject@@QAEXABVQString@@@Z',
                                                                                            '?qt_qFindChild_helper@@YAPAVQObject@@PBV1@ABVQString@@ABUQMetaObject@@V?$QFlags@W4FindChildOption@Qt@@@@@Z',
                                                                                            '?registerNormalizedTypedef@QMetaType@@SAHABVQByteArray@@H@Z',
                                                                                            '?registerNormalizedType@QMetaType@@SAHABVQByteArray@@P6AXPAX@ZP6APAX1PBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PBUQMetaObject@@@Z',
                                                                                            '?QStringList_join@QtPrivate@@YA?AVQString@@PBVQStringList@@PBVQChar@@H@Z',
                                                                                            '?append@QListData@@QAEPAPAXXZ',
                                                                                            '?realloc@QListData@@QAEXH@Z',
                                                                                            '?detach_grow@QListData@@QAEPAUData@1@PAHH@Z',
                                                                                            '??YQString@@QAEAAV0@PBD@Z',
                                                                                            '?append@QString@@QAEAAV1@PBD@Z',
                                                                                            '??4QString@@QAEAAV0@PBD@Z',
                                                                                            '?append@QString@@QAEAAV1@ABV1@@Z',
                                                                                            '?arg@QString@@QBE?AV1@ABV1@HVQChar@@@Z',
                                                                                            '?arg@QString@@QBE?AV1@IHHVQChar@@@Z',
                                                                                            '?arg@QString@@QBE?AV1@HHHVQChar@@@Z',
                                                                                            '?constData@QString@@QBEPBVQChar@@XZ',
                                                                                            '??0QString@@QAE@$$QAV0@@Z',
                                                                                            '?constData@QByteArray@@QBEPBDXZ',
                                                                                            '??4QByteArray@@QAEAAV0@$$QAV0@@Z',
                                                                                            '??1QByteArray@@QAE@XZ',
                                                                                            '??0QByteArray@@QAE@XZ',
                                                                                            '?deallocate@QArrayData@@SAXPAU1@II@Z',
                                                                                            '?data@QArrayData@@QAEPAXXZ',
                                                                                            '??0QChar@@QAE@UQLatin1Char@@@Z',
                                                                                            '?normalizedType@QMetaObject@@SA?AVQByteArray@@PBD@Z',
                                                                                            '?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z',
                                                                                            '?cast@QMetaObject@@QBEPAVQObject@@PAV2@@Z',
                                                                                            '?qFlagLocation@@YAPBDPBD@Z',
                                                                                            '?windowsVersion@QSysInfo@@SA?AW4WinVersion@1@XZ',
                                                                                            '?qt_assert_x@@YAXPBD00H@Z',
                                                                                            '??1QTranslator@@UAE@XZ',
                                                                                            '?quit@QCoreApplication@@SAXXZ',
                                                                                            '?removeLibraryPath@QCoreApplication@@SAXABVQString@@@Z',
                                                                                            '?addLibraryPath@QCoreApplication@@SAXABVQString@@@Z',
                                                                                            '?libraryPaths@QCoreApplication@@SA?AVQStringList@@XZ',
                                                                                            '?processEvents@QCoreApplication@@SAXV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z',
                                                                                            '?path@QDir@@QBE?AVQString@@XZ',
                                                                                            '??1QDir@@QAE@XZ',
                                                                                            '??0QDir@@QAE@ABVQString@@@Z',
                                                                                            '??1QTimer@@UAE@XZ',
                                                                                            '?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z',
                                                                                            '?tr@QObject@@SA?AVQString@@PBD0H@Z',
                                                                                            '?dispose@QListData@@SAXPAUData@1@@Z',
                                                                                            '?detach@QListData@@QAEPAUData@1@H@Z',
                                                                                            '?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z',
                                                                                            '?arg@QString@@QBE?AV1@ABV1@0@Z',
                                                                                            '??4QString@@QAEAAV0@$$QAV0@@Z',
                                                                                            '??1QString@@QAE@XZ',
                                                                                            '??0QString@@QAE@ABV0@@Z',
                                                                                            '??0QString@@QAE@XZ',
                                                                                            '??1Connection@QMetaObject@@QAE@XZ',
                                                                                            '??0QVariant@@QAE@_N@Z',
                                                                                            'wtap_get_file_extension_type_name',
                                                                                            'wtap_dump_fdopen_ng',
                                                                                            'wtap_block_add_string_option_format',
                                                                                            'wtap_block_add_uint8_option',
                                                                                            'wtap_block_create',
                                                                                            'wtap_file_get_nrb',
                                                                                            'wtap_encap_requires_phdr',
                                                                                            'wtap_wtap_encap_to_pcap_encap',
                                                                                            'wtap_get_num_encap_types',
                                                                                            'wtap_encap_string',
                                                                                            'wtap_dump_open_tempfile',
                                                                                            'wtap_file_tsprec',
                                                                                            'wtap_default_file_extension',
                                                                                            'open_routines',
                                                                                            'wtap_get_file_extension_type_extensions',
                                                                                            'wtap_get_num_file_type_extensions',
                                                                                            'wtap_free_extensions_list',
                                                                                            'wtap_get_file_extensions_list',
                                                                                            'wtap_get_all_file_extensions_list',
                                                                                            'wtap_get_savable_file_types_subtypes',
                                                                                            'wtap_dump_supports_comment_types',
                                                                                            'wtap_pcap_encap_to_wtap_encap',
                                                                                            'wtap_block_get_custom_option_value',
                                                                                            'wtap_block_get_string_option_value',
                                                                                            'wtap_block_get_uint64_option_value',
                                                                                            'wtap_block_get_mandatory_data',
                                                                                            'merge_files',
                                                                                            'wtap_dump_can_write',
                                                                                            'wtap_dump_close',
                                                                                            'wtap_dump_set_addrinfo_list',
                                                                                            'wtap_dump',
                                                                                            'wtap_dump_open_ng',
                                                                                            'wtap_dump_has_name_resolution',
                                                                                            'wtap_dump_file_encap_type',
                                                                                            'wtap_sequential_close',
                                                                                            'wtap_fdreopen',
                                                                                            'wtap_fdclose',
                                                                                            'wtap_file_get_nrb_for_new_file',
                                                                                            'wtap_file_get_idb_info',
                                                                                            'wtap_write_shb_comment',
                                                                                            'wtap_file_get_shb_for_new_file',
                                                                                            'wtap_file_get_shb',
                                                                                            'wtap_file_encap',
                                                                                            'wtap_file_type_subtype',
                                                                                            'wtap_snapshot_length',
                                                                                            'wtap_iscompressed',
                                                                                            'wtap_file_size',
                                                                                            'wtap_read_so_far',
                                                                                            'wtap_phdr_cleanup',
                                                                                            'wtap_seek_read',
                                                                                            'wtap_set_cb_new_ipv6',
                                                                                            'wtap_set_cb_new_ipv4',
                                                                                            'wtap_block_get_nth_string_option_value',
                                                                                            'wtap_block_set_nth_string_option_value',
                                                                                            'wtap_block_add_string_option',
                                                                                            'wtap_strerror',
                                                                                            'wtap_file_type_subtype_string',
                                                                                            'wtap_close',
                                                                                            'wtap_buf_ptr',
                                                                                            'wtap_phdr',
                                                                                            'wtap_read',
                                                                                            'wtap_cleareof',
                                                                                            'wtap_open_offline',
                                                                                            'open_info_name_to_type',
                                                                                            'register_all_wiretap_modules',
                                                                                            'wtap_init',
                                                                                            'wtap_phdr_init',
                                                                                            'optind',
                                                                                            'optarg',
                                                                                            'cmdarg_err_cont',
                                                                                            'getopt_long',
                                                                                            'file_write_error_message',
                                                                                            'report_failure',
                                                                                            'ws_base64_decode_inplace',
                                                                                            'get_global_profiles_dir',
                                                                                            'get_profiles_dir',
                                                                                            'nstime_copy',
                                                                                            'ulaw2linear',
                                                                                            'alaw2linear',
                                                                                            'create_persconffile_dir',
                                                                                            'plugins_get_descriptions',
                                                                                            'get_systemfile_dir',
                                                                                            'get_plugins_pers_dir',
                                                                                            'get_plugin_dir',
                                                                                            'ieee80211_mhz_to_chan',
                                                                                            'nstime_sum',
                                                                                            'nstime_cmp',
                                                                                            'nstime_to_msec',
                                                                                            'copy_persconffile_profile',
                                                                                            'create_persconffile_profile',
                                                                                            'opterr',
                                                                                            'set_profile_name',
                                                                                            'get_datafile_dir',
                                                                                            'get_profile_name',
                                                                                            'ws_load_library',
                                                                                            'format_size',
                                                                                            'files_identical',
                                                                                            'utf_16to8',
                                                                                            'utf_8to16_snprintf',
                                                                                            'ws_stdio_freopen',
                                                                                            'protect_arg',
                                                                                            'utf_8to16',
                                                                                            'get_extcap_dir',
                                                                                            'get_os_version_info',
                                                                                            'get_copyright_info',
                                                                                            'nstime_to_sec',
                                                                                            'get_persconffile_path',
                                                                                            'get_datafile_path',
                                                                                            'ws_stdio_remove',
                                                                                            'get_basename',
                                                                                            'nstime_delta',
                                                                                            'nstime_set_zero',
                                                                                            'ws_buffer_assure_space',
                                                                                            'ws_buffer_free',
                                                                                            'ws_buffer_init',
                                                                                            'running_in_build_directory',
                                                                                            'create_tempdir',
                                                                                            'delete_persconffile_profile',
                                                                                            'rename_persconffile_profile',
                                                                                            'crc32c_calculate',
                                                                                            'strptime',
                                                                                            'set_persconffile_dir',
                                                                                            'set_persdatafile_dir',
                                                                                            'ws_inet_pton4',
                                                                                            'ws_inet_pton6',
                                                                                            'win32strerror',
                                                                                            'win32strexception',
                                                                                            'ws_module_open',
                                                                                            'ieee80211_chan_to_mhz',
                                                                                            'profile_exists',
                                                                                            'copy_file_binary_mode',
                                                                                            'file_exists',
                                                                                            'ws_stdio_fopen',
                                                                                            'ws_stdio_unlink',
                                                                                            'ws_stdio_rename',
                                                                                            'ws_stdio_open',
                                                                                            'create_tempfile',
                                                                                            'ws_stdio_stat64',
                                                                                            'get_positive_int',
                                                                                            'get_natural_int',
                                                                                            'file_open_error_message',
                                                                                            'get_windows_major_version',
                                                                                            'create_app_running_mutex',
                                                                                            'ws_init_dll_search_path',
                                                                                            'arg_list_utf_16to8',
                                                                                            'init_report_err',
                                                                                            'scan_plugins',
                                                                                            'get_cur_groupname',
                                                                                            'get_cur_username',
                                                                                            'relinquish_special_privs_perm',
                                                                                            'running_with_special_privs',
                                                                                            'init_process_policies',
                                                                                            'test_for_directory',
                                                                                            'get_dirname',
                                                                                            'get_persdatafile_dir',
                                                                                            'get_progfile_dir',
                                                                                            'init_progfile_dir',
                                                                                            'ws_add_crash_info',
                                                                                            'cmdarg_err',
                                                                                            'cmdarg_err_init',
                                                                                            'profile_store_persconffiles',
                                                                                            'g_module_close',
                                                                                            'g_module_symbol',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'g_string_chunk_clear',
                                                                                            'g_hash_table_foreach',
                                                                                            'g_queue_free',
                                                                                            'g_node_children_foreach',
                                                                                            'g_memdup',
                                                                                            'g_queue_peek_nth_link',
                                                                                            'g_queue_push_tail',
                                                                                            'g_queue_new',
                                                                                            'g_hash_table_new',
                                                                                            'g_file_test_utf8',
                                                                                            'g_build_filename',
                                                                                            'g_list_free_1',
                                                                                            'g_strchomp',
                                                                                            'g_strchug',
                                                                                            'g_get_tmp_dir',
                                                                                            'g_byte_array_free',
                                                                                            'g_strlcpy',
                                                                                            'g_error_free',
                                                                                            'g_strv_length',
                                                                                            'g_regex_split_simple',
                                                                                            'g_strndup',
                                                                                            'g_strdup_vprintf',
                                                                                            'g_hash_table_lookup_extended',
                                                                                            'g_filename_to_utf8_utf8',
                                                                                            'g_slist_append',
                                                                                            'g_str_has_prefix',
                                                                                            'g_string_truncate',
                                                                                            'g_utf16_to_utf8',
                                                                                            'g_strescape',
                                                                                            'g_string_sized_new',
                                                                                            'g_utf8_to_utf16',
                                                                                            'g_setenv_utf8',
                                                                                            'g_getenv_utf8',
                                                                                            'g_ascii_strtoll',
                                                                                            'g_ascii_strtoull',
                                                                                            'g_strtod',
                                                                                            'g_strstr_len',
                                                                                            'g_match_info_fetch',
                                                                                            'g_match_info_matches',
                                                                                            'g_match_info_next',
                                                                                            'g_match_info_free',
                                                                                            'g_regex_match_simple',
                                                                                            'g_strconcat',
                                                                                            'g_ascii_strdown',
                                                                                            'g_regex_replace',
                                                                                            'g_regex_unref',
                                                                                            'g_regex_new',
                                                                                            'g_string_printf',
                                                                                            'g_child_watch_add',
                                                                                            'g_source_remove',
                                                                                            'g_str_hash',
                                                                                            'g_str_equal',
                                                                                            'g_hash_table_get_keys',
                                                                                            'g_hash_table_size',
                                                                                            'g_hash_table_foreach_remove',
                                                                                            'g_hash_table_lookup',
                                                                                            'g_hash_table_remove_all',
                                                                                            'g_hash_table_insert',
                                                                                            'g_list_delete_link',
                                                                                            'g_malloc0_n',
                                                                                            'g_path_get_basename',
                                                                                            'g_ptr_array_foreach',
                                                                                            'g_ptr_array_add',
                                                                                            'g_ptr_array_free',
                                                                                            'g_ptr_array_new',
                                                                                            'g_strfreev',
                                                                                            'g_strjoinv',
                                                                                            'g_strsplit',
                                                                                            'g_list_length',
                                                                                            'g_list_last',
                                                                                            'g_list_remove_link',
                                                                                            'g_string_insert_c',
                                                                                            'g_string_free',
                                                                                            'g_string_new',
                                                                                            'g_list_sort',
                                                                                            'g_list_find_custom',
                                                                                            'g_list_append',
                                                                                            'g_dir_read_name_utf8',
                                                                                            'g_dir_open_utf8',
                                                                                            'g_dir_close',
                                                                                            'g_tree_lookup',
                                                                                            'g_tree_replace',
                                                                                            'g_tree_insert',
                                                                                            'g_tree_destroy',
                                                                                            'g_tree_new_full',
                                                                                            'g_timer_elapsed',
                                                                                            'g_timer_start',
                                                                                            'g_timer_destroy',
                                                                                            'g_timer_new',
                                                                                            'g_strcmp0',
                                                                                            'g_ascii_toupper',
                                                                                            'g_match_info_fetch_pos',
                                                                                            'g_regex_match_full',
                                                                                            'g_regex_match',
                                                                                            'g_get_current_time',
                                                                                            'g_list_nth',
                                                                                            'g_list_remove',
                                                                                            'g_list_prepend',
                                                                                            'g_malloc_n',
                                                                                            'g_realloc',
                                                                                            'g_malloc0',
                                                                                            'g_filename_display_basename',
                                                                                            'g_array_free',
                                                                                            'g_array_sized_new',
                                                                                            'g_ascii_table',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_ascii_strncasecmp',
                                                                                            'g_ascii_strcasecmp',
                                                                                            'g_spawn_close_pid',
                                                                                            'g_slist_foreach',
                                                                                            'g_slist_free',
                                                                                            'g_hash_table_unref',
                                                                                            'g_hash_table_ref',
                                                                                            'g_list_nth_data',
                                                                                            'g_list_foreach',
                                                                                            'g_list_first',
                                                                                            'g_list_free',
                                                                                            'g_array_append_vals',
                                                                                            'g_array_new',
                                                                                            'g_strdup_printf',
                                                                                            'g_snprintf',
                                                                                            'g_direct_equal',
                                                                                            'g_direct_hash',
                                                                                            'g_hash_table_destroy',
                                                                                            'g_hash_table_new_full',
                                                                                            'g_strdup',
                                                                                            'g_strerror',
                                                                                            'g_log',
                                                                                            'g_string_append_printf',
                                                                                            'g_string_append',
                                                                                            'g_malloc',
                                                                                            'g_free',
                                                                                            'g_array_remove_index',
                                                                                            'g_array_insert_vals',
                                                                                            'g_string_chunk_insert_const',
                                                                                            'g_rand_new',
                                                                                            'g_rand_free',
                                                                                            'g_rand_int_range',
                                                                                            'g_mutex_init',
                                                                                            'g_mutex_lock',
                                                                                            'g_mutex_unlock',
                                                                                            'g_slist_nth',
                                                                                            'g_log_set_handler',
                                                                                            'g_log_default_handler',
                                                                                            'g_hash_table_remove',
                                                                                            'g_utf8_validate',
                                                                                            'g_strlcat',
                                                                                            'g_slist_length',
                                                                                            'g_slist_nth_data',
                                                                                            'g_list_insert',
                                                                                            'g_filename_to_uri_utf8',
                                                                                            'g_slist_prepend',
                                                                                            'g_string_append_len',
                                                                                            'g_filename_display_name',
                                                                                            'g_try_malloc',
                                                                                            'g_try_realloc',
                                                                                            'g_slist_insert',
                                                                                            'g_slist_remove',
                                                                                            'g_strcanon',
                                                                                            'g_int_equal',
                                                                                            'g_int_hash',
                                                                                            'g_utf8_strlen',
                                                                                            'g_utf8_substring',
                                                                                            'g_string_insert',
                                                                                            'g_string_erase',
                                                                                            'g_queue_free_full',
                                                                                            'g_queue_foreach',
                                                                                            'g_queue_sort',
                                                                                            'g_node_new',
                                                                                            'g_node_destroy',
                                                                                            'g_node_insert_before',
                                                                                            'g_node_traverse',
                                                                                            'g_string_assign',
                                                                                            'g_queue_clear',
                                                                                            'g_queue_insert_before',
                                                                                            'g_queue_unlink',
                                                                                            'g_strrstr',
                                                                                            'g_string_chunk_new',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?_Syserror_map@std@@YAPBDH@Z',
                                                                                            '?_Winerror_map@std@@YAPBDH@Z',
                                                                                            '?_Xbad_alloc@std@@YAXXZ',
                                                                                            '_purecall',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'setlocale',
                                                                                            'memmove',
                                                                                            'strerror',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'vfprintf',
                                                                                            'exit',
                                                                                            '_hypot',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'printf',
                                                                                            '_errno',
                                                                                            'strtol',
                                                                                            'strchr',
                                                                                            'fclose',
                                                                                            'ferror',
                                                                                            '_close',
                                                                                            '_setjmp3',
                                                                                            'strrchr',
                                                                                            '_fstat64',
                                                                                            'getc',
                                                                                            'putc',
                                                                                            'ungetc',
                                                                                            'memset',
                                                                                            'memchr',
                                                                                            '_write',
                                                                                            'strftime',
                                                                                            '_localtime64',
                                                                                            '_time64',
                                                                                            '_get_osfhandle',
                                                                                            'sscanf',
                                                                                            '_open_osfhandle',
                                                                                            '_getch',
                                                                                            'fread',
                                                                                            '_vsnwprintf',
                                                                                            'strstr',
                                                                                            '__RTDynamicCast',
                                                                                            '_invalid_parameter_noinfo_noreturn',
                                                                                            '_libm_sse2_pow_precise',
                                                                                            'strncmp',
                                                                                            'fputs',
                                                                                            '_fdopen',
                                                                                            'fwrite',
                                                                                            '_dup',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__crtGetShowWindowMode',
                                                                                            '_XcptFilter',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_except1',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_cwait',
                                                                                            '_read',
                                                                                            'realloc',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'clearerr',
                                                                                            'strpbrk',
                                                                                            '_mktime64',
                                                                                            'strtoul',
                                                                                            'getenv',
                                                                                            'atoi',
                                                                                            'fgets',
                                                                                            'strtok',
                                                                                            'fflush',
                                                                                            'floor',
                                                                                            'ceil',
                                                                                            '_libm_sse2_sqrt_precise',
                                                                                            '_libm_sse2_sin_precise',
                                                                                            '_libm_sse2_log_precise',
                                                                                            '_libm_sse2_cos_precise',
                                                                                            'modf',
                                                                                            'OpenSCManagerW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'QueryServiceStatus',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'CommandLineToArgvW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 3659,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 669872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 15872,
                                                                                       '.rdata\x00\x00': 2863104,
                                                                                       '.reloc\x00\x00': 304128,
                                                                                       '.rsrc\x00\x00\x00': 670208,
                                                                                       '.text\x00\x00\x00': 2769920},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1c3924ad8d9fb31809c669bb7f5c97b4386b6f5dd713c6816b08a408efdb39c1'},
 '1c446ec18052954b40c095d1787127ea37efab60261288f882b5b99c2ecd523e': {'AddressOfEntryPoint': 9074976,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'AVIFIL32.dll': 'AVIFileExit',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameA',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'MSVFW32.dll': 'ICCompressorChoose',
                                                                                      'OLEAUT32.dll': 'SafeArrayGetUBound',
                                                                                      'SHLWAPI.dll': 'PathCombineA',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'UxTheme.dll': 'IsAppThemed',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'WININET.dll': 'FtpPutFileA',
                                                                                      'WINMM.dll': 'waveOutOpen',
                                                                                      'dbghelp.dll': 'MiniDumpWriteDump',
                                                                                      'gdiplus.dll': 'GdipFree',
                                                                                      'ole32.dll': 'DoDragDrop'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'RegCloseKey',
                                                                                            'AVIFileExit',
                                                                                            'GetOpenFileNameA',
                                                                                            'MiniDumpWriteDump',
                                                                                            'LineTo',
                                                                                            'GdipFree',
                                                                                            'AlphaBlend',
                                                                                            'ICCompressorChoose',
                                                                                            'DoDragDrop',
                                                                                            'SafeArrayGetUBound',
                                                                                            'PathCombineA',
                                                                                            'GetDC',
                                                                                            'IsAppThemed',
                                                                                            'VerQueryValueA',
                                                                                            'FtpPutFileA',
                                                                                            'waveOutOpen'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 22,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 97684,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 98816,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 4639744},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1c446ec18052954b40c095d1787127ea37efab60261288f882b5b99c2ecd523e'},
 '1c99e25179af47a88fa1ef61d02f1774b62d0de08be03aa319ac7b1d43e30f7d': {'AddressOfEntryPoint': 639352,
                                                                      'DebugRVA': 1912688,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1908736,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_GetIconSize',
                                                                                      'DNSAPI.dll': 'DnsQuery_W',
                                                                                      'GDI32.dll': 'SetTextAlign',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'MPR.dll': 'WNetAddConnection3W',
                                                                                      'NETAPI32.dll': 'NetShareGetInfo',
                                                                                      'OLEACC.dll': 'CreateStdAccessibleObject',
                                                                                      'OLEAUT32.dll': 'SafeArrayGetUBound',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'FillRect',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'HttpOpenRequestW',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'WS2_32.dll': 'WSAStringToAddressW',
                                                                                      'WSOCK32.dll': 'WSASetLastError',
                                                                                      'gdiplus.dll': 'GdipDeleteGraphics',
                                                                                      'ntdll.dll': 'NtClose',
                                                                                      'ole32.dll': 'CoRegisterMessageFilter',
                                                                                      'oledlg.dll': 'OleUIAddVerbMenuW'},
                                                                      'ImportedFunctions': ['VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'WNetGetUserW',
                                                                                            'WNetGetUniversalNameW',
                                                                                            'WNetCloseEnum',
                                                                                            'WNetEnumResourceW',
                                                                                            'WNetOpenEnumW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetAddConnection3W',
                                                                                            'inet_ntoa',
                                                                                            'getnameinfo',
                                                                                            'inet_addr',
                                                                                            'htons',
                                                                                            'WSAAddressToStringW',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSAStringToAddressW',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'HeapReAlloc',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetModuleHandleExW',
                                                                                            'WriteConsoleW',
                                                                                            'ExitProcess',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'ExitThread',
                                                                                            'SetStdHandle',
                                                                                            'HeapSize',
                                                                                            'HeapQueryInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetCPInfo',
                                                                                            'TerminateProcess',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetStringTypeW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LCMapStringW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'OutputDebugStringW',
                                                                                            'ReadConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'HeapDestroy',
                                                                                            'lstrlenA',
                                                                                            'EnumResourceTypesW',
                                                                                            'EnumResourceNamesW',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'lstrcpynW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'FormatMessageA',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'GlobalFlags',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'CompareStringW',
                                                                                            'InterlockedIncrement',
                                                                                            'LocalReAlloc',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetFileTime',
                                                                                            'GetFileAttributesExW',
                                                                                            'lstrcmpiW',
                                                                                            'DuplicateHandle',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'ResumeThread',
                                                                                            'SuspendThread',
                                                                                            'SetThreadPriority',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalAddAtomW',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeResource',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'MulDiv',
                                                                                            'CompareStringA',
                                                                                            'lstrcmpW',
                                                                                            'lstrcmpA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentThread',
                                                                                            'InterlockedExchange',
                                                                                            'SystemTimeToFileTime',
                                                                                            'OpenEventW',
                                                                                            'CreateThread',
                                                                                            'FindResourceExW',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'WaitNamedPipeW',
                                                                                            'TransactNamedPipe',
                                                                                            'GetTempFileNameW',
                                                                                            'CreatePipe',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'OutputDebugStringA',
                                                                                            'InterlockedDecrement',
                                                                                            'MoveFileExW',
                                                                                            'MoveFileW',
                                                                                            'GetSystemTime',
                                                                                            'SetLastError',
                                                                                            'GetLocalTime',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetACP',
                                                                                            'FileTimeToSystemTime',
                                                                                            'DeleteFileA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CopyFileW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'SetThreadLocale',
                                                                                            'GetThreadLocale',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'FindVolumeClose',
                                                                                            'FindNextVolumeW',
                                                                                            'FindFirstVolumeW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'DnsHostnameToComputerNameW',
                                                                                            'GetComputerNameW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'QueryDosDeviceW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'FormatMessageW',
                                                                                            'FindClose',
                                                                                            'FlushFileBuffers',
                                                                                            'Sleep',
                                                                                            'SetThreadExecutionState',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetVersion',
                                                                                            'VerSetConditionMask',
                                                                                            'CreateFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SetVolumeLabelW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetDriveTypeW',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetFilePointerEx',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ReadFile',
                                                                                            'GetFileSizeEx',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'GetTickCount',
                                                                                            'SetFilePointer',
                                                                                            'DeviceIoControl',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CreateFileW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'DeleteFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'GetThreadPriority',
                                                                                            'GetFileAttributesW',
                                                                                            'GetTempPathW',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'CreateMutexW',
                                                                                            'CloseHandle',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'SetHandleInformation',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'MoveWindow',
                                                                                            'ShowWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'WinHelpW',
                                                                                            'CallNextHookEx',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'GetWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'GetTopWindow',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongW',
                                                                                            'PtInRect',
                                                                                            'EqualRect',
                                                                                            'CopyRect',
                                                                                            'MapWindowPoints',
                                                                                            'ScreenToClient',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'RemovePropW',
                                                                                            'GetPropW',
                                                                                            'SetPropW',
                                                                                            'RedrawWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'SetMenu',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'EndDialog',
                                                                                            'GetNextDlgTabItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetMenu',
                                                                                            'GetCapture',
                                                                                            'SetFocus',
                                                                                            'GetDlgCtrlID',
                                                                                            'EnableMenuItem',
                                                                                            'EndDeferWindowPos',
                                                                                            'PostThreadMessageW',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'SetParent',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemInfoW',
                                                                                            'LoadBitmapW',
                                                                                            'LoadMenuW',
                                                                                            'WaitMessage',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetActiveWindow',
                                                                                            'GetParent',
                                                                                            'IsWindow',
                                                                                            'IsWindowVisible',
                                                                                            'BeginDeferWindowPos',
                                                                                            'SetWindowPos',
                                                                                            'DestroyWindow',
                                                                                            'GetCursorPos',
                                                                                            'IsChild',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'CallWindowProcW',
                                                                                            'DefWindowProcW',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuState',
                                                                                            'GetMenuStringW',
                                                                                            'PostQuitMessage',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetSysColor',
                                                                                            'MessageBeep',
                                                                                            'ValidateRect',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetKeyState',
                                                                                            'GetFocus',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetClipboardData',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'OemToCharBuffA',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetCursor',
                                                                                            'MapVirtualKeyW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'DrawTextW',
                                                                                            'DrawTextExW',
                                                                                            'GrayStringW',
                                                                                            'TabbedTextOutW',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'CharUpperW',
                                                                                            'SystemParametersInfoW',
                                                                                            'DeleteMenu',
                                                                                            'RealChildWindowFromPoint',
                                                                                            'InvalidateRect',
                                                                                            'GetSysColorBrush',
                                                                                            'LoadCursorW',
                                                                                            'DestroyMenu',
                                                                                            'GetMenuItemInfoW',
                                                                                            'InflateRect',
                                                                                            'GetDialogBaseUnits',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'WindowFromPoint',
                                                                                            'CharNextW',
                                                                                            'OffsetRect',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'InvalidateRgn',
                                                                                            'SetRect',
                                                                                            'IntersectRect',
                                                                                            'IsRectEmpty',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'DestroyIcon',
                                                                                            'UnregisterClassW',
                                                                                            'BringWindowToTop',
                                                                                            'LoadAcceleratorsW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'CreatePopupMenu',
                                                                                            'InsertMenuItemW',
                                                                                            'SetRectEmpty',
                                                                                            'CharToOemBuffA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'TranslateMDISysAccel',
                                                                                            'DefFrameProcW',
                                                                                            'DrawMenuBar',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'IsWindowUnicode',
                                                                                            'UpdateWindow',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'LoadIconW',
                                                                                            'DrawIcon',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'UnionRect',
                                                                                            'GetSystemMenu',
                                                                                            'GetDlgItem',
                                                                                            'SetCursorPos',
                                                                                            'GetKeyboardState',
                                                                                            'GetDCEx',
                                                                                            'LockWindowUpdate',
                                                                                            'DeferWindowPos',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'ToUnicodeEx',
                                                                                            'GetMenuDefaultItem',
                                                                                            'GetWindowRgn',
                                                                                            'IsMenu',
                                                                                            'GetTabbedTextExtentA',
                                                                                            'GetDoubleClickTime',
                                                                                            'ShowCaret',
                                                                                            'HideCaret',
                                                                                            'GetCursor',
                                                                                            'SetWindowRgn',
                                                                                            'DrawEdge',
                                                                                            'DrawFocusRect',
                                                                                            'DrawFrameControl',
                                                                                            'LookupIconIdFromDirectoryEx',
                                                                                            'InvertRect',
                                                                                            'GetIconInfo',
                                                                                            'CreateIconIndirect',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'DrawStateW',
                                                                                            'CopyIcon',
                                                                                            'DrawIconEx',
                                                                                            'IsIconic',
                                                                                            'LoadImageW',
                                                                                            'PostMessageW',
                                                                                            'EnableWindow',
                                                                                            'SendMessageW',
                                                                                            'SetActiveWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'FillRect',
                                                                                            'MoveToEx',
                                                                                            'TextOutW',
                                                                                            'PolyBezierTo',
                                                                                            'SetViewportExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextMetricsW',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'CombineRgn',
                                                                                            'GetMapMode',
                                                                                            'DPtoLP',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateFontW',
                                                                                            'GetCharWidthW',
                                                                                            'StretchDIBits',
                                                                                            'SetStretchBltMode',
                                                                                            'GetLayout',
                                                                                            'SetMapMode',
                                                                                            'SetBkMode',
                                                                                            'ExtSelectClipRgn',
                                                                                            'SelectClipRgn',
                                                                                            'SaveDC',
                                                                                            'RestoreDC',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'LineTo',
                                                                                            'IntersectClipRect',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'GetPixel',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetClipRgn',
                                                                                            'GetClipBox',
                                                                                            'ExcludeClipRect',
                                                                                            'Escape',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePatternBrush',
                                                                                            'CreatePen',
                                                                                            'CreateCompatibleDC',
                                                                                            'BitBlt',
                                                                                            'PatBlt',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateBitmap',
                                                                                            'GetObjectA',
                                                                                            'RoundRect',
                                                                                            'GetWindowOrgEx',
                                                                                            'CreatePolygonRgn',
                                                                                            'GetViewportOrgEx',
                                                                                            'PtInRegion',
                                                                                            'Polyline',
                                                                                            'StrokePath',
                                                                                            'StrokeAndFillPath',
                                                                                            'FillPath',
                                                                                            'EndPath',
                                                                                            'CloseFigure',
                                                                                            'BeginPath',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'GetTextAlign',
                                                                                            'Ellipse',
                                                                                            'Rectangle',
                                                                                            'GetBitmapBits',
                                                                                            'ExtCreateRegion',
                                                                                            'GetCurrentObject',
                                                                                            'Polygon',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'CreateDIBSection',
                                                                                            'StretchBlt',
                                                                                            'SetPixel',
                                                                                            'GetDIBits',
                                                                                            'GetObjectW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'ExtTextOutW',
                                                                                            'SetTextAlign',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'DeregisterEventSource',
                                                                                            'OpenServiceW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'SetEntriesInAclW',
                                                                                            'StartServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegEnumValueW',
                                                                                            'SHAppBarMessage',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHChangeNotify',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'DragFinish',
                                                                                            'DragQueryFileW',
                                                                                            'ShellExecuteW',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_GetImageInfo',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_DrawEx',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_GetIconSize',
                                                                                            'PathFileExistsW',
                                                                                            'PathFindFileNameW',
                                                                                            'UrlUnescapeW',
                                                                                            'PathIsUNCW',
                                                                                            'PathStripToRootW',
                                                                                            'PathFindExtensionW',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CoGetClassObject',
                                                                                            'CoDisconnectObject',
                                                                                            'CoInitialize',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateGuid',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleLoadPicturePath',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantCopy',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysStringLen',
                                                                                            'LoadTypeLib',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayGetUBound',
                                                                                            'OleUIBusyW',
                                                                                            'OleUIAddVerbMenuW',
                                                                                            'WSASetLastError',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'CM_Get_Parent',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'NtCreateFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtClose',
                                                                                            'LresultFromObject',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'InternetSetStatusCallbackW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetCanonicalizeUrlW',
                                                                                            'InternetOpenW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetConnectW',
                                                                                            'InternetReadFile',
                                                                                            'InternetSetFilePointer',
                                                                                            'InternetWriteFile',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'InternetSetOptionExW',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'HttpQueryInfoW',
                                                                                            'HttpEndRequestW',
                                                                                            'HttpSendRequestExW',
                                                                                            'HttpSendRequestW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpOpenRequestW',
                                                                                            'PlaySoundW',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipDrawString',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipSetStringFormatTrimming',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipFillRectangle',
                                                                                            'GdipSetCompositingQuality',
                                                                                            'GdipSetCompositingMode',
                                                                                            'GdipDeleteGraphics',
                                                                                            'NetApiBufferFree',
                                                                                            'NetShareGetInfo',
                                                                                            'GetBestInterfaceEx',
                                                                                            'GetTcpTable',
                                                                                            'GetAdaptersAddresses',
                                                                                            'DnsFree',
                                                                                            'DnsQuery_W'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 25,
                                                                      'NumberOfImportFunctions': 688,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 843824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 41472,
                                                                                       '.rdata\x00\x00': 462848,
                                                                                       '.reloc\x00\x00': 435712,
                                                                                       '.rsrc\x00\x00\x00': 844288,
                                                                                       '.text\x00\x00\x00': 1902592},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1c99e25179af47a88fa1ef61d02f1774b62d0de08be03aa319ac7b1d43e30f7d'},
 '1cd476da02b91b5be2b04dab36514d64abfa12105934b84c8bce8ce83a42e180': {'AddressOfEntryPoint': 19870,
                                                                      'DebugRVA': 19468,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1552,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 11776},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1cd476da02b91b5be2b04dab36514d64abfa12105934b84c8bce8ce83a42e180'},
 '1d417bbe87fcdd84ec500328b538c17c8806547e6f7154c9c10da916f69fcc9b': {'AddressOfEntryPoint': 4874,
                                                                      'DebugRVA': 2627440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 4592656,
                                                                      'ExportSize': 1020,
                                                                      'IATRVA': 2625536,
                                                                      'ImageBase': 1766850560,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGenRandom',
                                                                                      'CRYPT32.dll': 'CryptExportPKCS8',
                                                                                      'GDI32.dll': 'GetPixelFormat',
                                                                                      'KERNEL32.dll': 'GlobalUnlock',
                                                                                      'MSVCR90.dll': '_amsg_exit',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'SetCursorPos',
                                                                                      'WINMM.dll': 'waveInUnprepareHeader',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'WTSAPI32.dll': 'WTSRegisterSessionNotification',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['toupper',
                                                                                            'rewind',
                                                                                            'fread',
                                                                                            '_setjmp3',
                                                                                            '_strtoi64',
                                                                                            'getc',
                                                                                            'feof',
                                                                                            'ceil',
                                                                                            'rand',
                                                                                            '_CIpow',
                                                                                            'bsearch',
                                                                                            'wcstok',
                                                                                            'memcmp',
                                                                                            'fabs',
                                                                                            'pow',
                                                                                            'longjmp',
                                                                                            'strlen',
                                                                                            'floor',
                                                                                            '_CIexp',
                                                                                            '_CIatan',
                                                                                            '_CIsqrt',
                                                                                            'ldexp',
                                                                                            '_CIacos',
                                                                                            '_CIcos',
                                                                                            '_CIlog',
                                                                                            'atof',
                                                                                            '_CIatan2',
                                                                                            'isxdigit',
                                                                                            '_crt_debugger_hook',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_CIlog10',
                                                                                            '_except_handler4_common',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            '_CIsin',
                                                                                            '__argc',
                                                                                            '__wargv',
                                                                                            'sscanf',
                                                                                            'fprintf',
                                                                                            'fputs',
                                                                                            '__iob_func',
                                                                                            'free',
                                                                                            'memset',
                                                                                            'strncpy',
                                                                                            'strcspn',
                                                                                            'strstr',
                                                                                            '_stricmp',
                                                                                            'strtol',
                                                                                            'strncmp',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'strrchr',
                                                                                            'isspace',
                                                                                            '_errno',
                                                                                            'strtok_s',
                                                                                            'qsort',
                                                                                            '_wfullpath',
                                                                                            'realloc',
                                                                                            'wcsncmp',
                                                                                            'strerror',
                                                                                            '_strlwr',
                                                                                            'fclose',
                                                                                            '_fileno',
                                                                                            '_fstat64i32',
                                                                                            '_get_osfhandle',
                                                                                            'malloc',
                                                                                            'calloc',
                                                                                            '_strdup',
                                                                                            'memchr',
                                                                                            'wcsrchr',
                                                                                            'wcsspn',
                                                                                            'towupper',
                                                                                            'wcschr',
                                                                                            'wcscspn',
                                                                                            'tolower',
                                                                                            '_wopen',
                                                                                            '_wfopen',
                                                                                            '_wmkdir',
                                                                                            '_wrename',
                                                                                            '_wunlink',
                                                                                            '_wgetenv',
                                                                                            '_ftime64',
                                                                                            'isdigit',
                                                                                            'isalpha',
                                                                                            '_getpid',
                                                                                            '_snprintf',
                                                                                            'abort',
                                                                                            'wcrtomb',
                                                                                            'localeconv',
                                                                                            'frexp',
                                                                                            '_time64',
                                                                                            'strncat',
                                                                                            '_strupr',
                                                                                            'islower',
                                                                                            '_fcvt_s',
                                                                                            '_ecvt_s',
                                                                                            'mbtowc',
                                                                                            'isalnum',
                                                                                            'getenv',
                                                                                            'sprintf',
                                                                                            'strtoul',
                                                                                            'atol',
                                                                                            'fgetc',
                                                                                            'fflush',
                                                                                            'printf',
                                                                                            'fgets',
                                                                                            'scanf',
                                                                                            'fwrite',
                                                                                            'strtod',
                                                                                            '_strtoui64',
                                                                                            'atoi',
                                                                                            'wcstoul',
                                                                                            '_close',
                                                                                            '_write',
                                                                                            '_read',
                                                                                            '_lseek',
                                                                                            '_dup2',
                                                                                            '_amsg_exit',
                                                                                            'connect',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'WSAEnumNetworkEvents',
                                                                                            'WSASocketA',
                                                                                            'getsockname',
                                                                                            'listen',
                                                                                            'ioctlsocket',
                                                                                            'bind',
                                                                                            'WSAEventSelect',
                                                                                            'recvfrom',
                                                                                            'WSAIoctl',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'inet_ntoa',
                                                                                            'ntohl',
                                                                                            'getpeername',
                                                                                            'WSASetLastError',
                                                                                            'select',
                                                                                            '__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'getsockopt',
                                                                                            'accept',
                                                                                            'socket',
                                                                                            'inet_addr',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'FlushFileBuffers',
                                                                                            'DuplicateHandle',
                                                                                            'GetVolumeInformationW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'LoadLibraryExW',
                                                                                            'OpenProcess',
                                                                                            'GetTempPathW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExW',
                                                                                            'WaitNamedPipeW',
                                                                                            'CreateSemaphoreW',
                                                                                            'DeviceIoControl',
                                                                                            'GetOverlappedResult',
                                                                                            'CancelIo',
                                                                                            'WideCharToMultiByte',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetShortPathNameW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetFileAttributesA',
                                                                                            'GetVersionExA',
                                                                                            'lstrcmpiA',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'TlsFree',
                                                                                            'GetExitCodeThread',
                                                                                            'OpenThread',
                                                                                            'GetACP',
                                                                                            'DebugBreak',
                                                                                            'TerminateThread',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'ExitProcess',
                                                                                            'SetThreadPriority',
                                                                                            'InitializeCriticalSection',
                                                                                            'VerifyVersionInfoA',
                                                                                            'VerSetConditionMask',
                                                                                            'SetDllDirectoryW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'VirtualQuery',
                                                                                            'IsBadReadPtr',
                                                                                            'TlsAlloc',
                                                                                            'RaiseException',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetHandleInformation',
                                                                                            'CloseHandle',
                                                                                            'OutputDebugStringA',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileTime',
                                                                                            'MoveFileExW',
                                                                                            'FindNextFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'FindClose',
                                                                                            'ReleaseSemaphore',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'PostThreadMessageA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetWindowsHookExA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DispatchMessageA',
                                                                                            'CallNextHookEx',
                                                                                            'LoadCursorW',
                                                                                            'MessageBoxW',
                                                                                            'ReleaseDC',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'DestroyWindow',
                                                                                            'GetDC',
                                                                                            'MapVirtualKeyA',
                                                                                            'GetSystemMetrics',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'OpenClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'WindowFromPoint',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'GetCursorPos',
                                                                                            'EndPaint',
                                                                                            'UnionRect',
                                                                                            'BeginPaint',
                                                                                            'GetUpdateRect',
                                                                                            'ScreenToClient',
                                                                                            'TrackMouseEvent',
                                                                                            'SetFocus',
                                                                                            'IsChild',
                                                                                            'GetForegroundWindow',
                                                                                            'GetKeyboardState',
                                                                                            'SetCursor',
                                                                                            'SendInput',
                                                                                            'DestroyCursor',
                                                                                            'CallWindowProcA',
                                                                                            'DefWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'SendNotifyMessageA',
                                                                                            'GetParent',
                                                                                            'RegisterClassA',
                                                                                            'GetWindow',
                                                                                            'CreateIconIndirect',
                                                                                            'CreateCursor',
                                                                                            'SystemParametersInfoA',
                                                                                            'ClientToScreen',
                                                                                            'GetMessageA',
                                                                                            'keybd_event',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetKeyState',
                                                                                            'mouse_event',
                                                                                            'EnumDisplaySettingsExA',
                                                                                            'GetMonitorInfoA',
                                                                                            'MonitorFromWindow',
                                                                                            'EnumDisplayMonitors',
                                                                                            'AttachThreadInput',
                                                                                            'RemovePropW',
                                                                                            'SetPropW',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'GetKeyboardLayout',
                                                                                            'PeekMessageA',
                                                                                            'SetCursorPos',
                                                                                            'CryptReleaseContext',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'DuplicateToken',
                                                                                            'CheckTokenMembership',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'GetUserNameW',
                                                                                            'CryptAcquireContextW',
                                                                                            'LookupAccountNameW',
                                                                                            'DeregisterEventSource',
                                                                                            'OpenThreadToken',
                                                                                            'ImpersonateSelf',
                                                                                            'RevertToSelf',
                                                                                            'GetFileSecurityW',
                                                                                            'MapGenericMask',
                                                                                            'AccessCheck',
                                                                                            'CryptGenRandom',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SHGetFolderPathW',
                                                                                            'CertOpenStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CertGetCertificateChain',
                                                                                            'CertCreateCertificateContext',
                                                                                            'CertAddEncodedCertificateToStore',
                                                                                            'CryptExportPKCS8',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'DescribePixelFormat',
                                                                                            'SetPixelFormat',
                                                                                            'ChoosePixelFormat',
                                                                                            'SwapBuffers',
                                                                                            'CreateDIBSection',
                                                                                            'DeleteObject',
                                                                                            'CreateBitmap',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetPixelFormat',
                                                                                            'waveOutGetNumDevs',
                                                                                            'waveOutGetErrorTextA',
                                                                                            'waveInGetErrorTextA',
                                                                                            'waveInGetDevCapsA',
                                                                                            'waveInGetNumDevs',
                                                                                            'waveInReset',
                                                                                            'waveInStop',
                                                                                            'waveInStart',
                                                                                            'waveInAddBuffer',
                                                                                            'waveOutGetErrorTextW',
                                                                                            'waveOutRestart',
                                                                                            'waveOutClose',
                                                                                            'waveOutUnprepareHeader',
                                                                                            'waveOutReset',
                                                                                            'waveOutWrite',
                                                                                            'waveOutGetDevCapsA',
                                                                                            'waveOutPause',
                                                                                            'waveOutPrepareHeader',
                                                                                            'waveOutOpen',
                                                                                            'waveInOpen',
                                                                                            'waveInClose',
                                                                                            'waveInPrepareHeader',
                                                                                            'waveInUnprepareHeader',
                                                                                            'WTSRegisterSessionNotification'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 454,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2028,
                                                                      'SectionNames': {'.data\x00\x00\x00': 76800,
                                                                                       '.rdata\x00\x00': 1968640,
                                                                                       '.reloc\x00\x00': 157696,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 2620416},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1d417bbe87fcdd84ec500328b538c17c8806547e6f7154c9c10da916f69fcc9b'},
 '1d5cba061142691df9d99380139653fae326ff15fd12d8cc1b91ead79194aa9d': {'AddressOfEntryPoint': 139392,
                                                                      'DebugRVA': 4960,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49600,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 155648,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventUnregister',
                                                                                      'DUI70.dll': '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                      'DUser.dll': 'DeleteHandle',
                                                                                      'GDI32.dll': 'D3DKMTNetDispStopMiracastDisplayDevice',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'POWRPROF.dll': 'PowerDeterminePlatformRoleEx',
                                                                                      'SHLWAPI.dll': 'SHStrDupW',
                                                                                      'USER32.dll': 'CallNextHookEx',
                                                                                      'UxTheme.dll': 'GetCurrentThemeName',
                                                                                      'WINSTA.dll': 'WinStationIsSessionRemoteable',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoReleaseServerProcess',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateError',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoRevokeActivationFactories',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsGetStringRawBuffer',
                                                                                      'dwmapi.dll': 'DwmSetWindowAttribute',
                                                                                      'msvcrt.dll': '_CIpow',
                                                                                      'ntdll.dll': 'RtlQueryWnfStateData',
                                                                                      'ole32.dll': 'CoAllowSetForegroundWindow'},
                                                                      'ImportedFunctions': ['EventRegister',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadLibraryA',
                                                                                            'GetCommandLineW',
                                                                                            'CompareStringOrdinal',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'AcquireSRWLockShared',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'EncodePointer',
                                                                                            'LocalFree',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'DecodePointer',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsGetValue',
                                                                                            'CreateThreadpoolTimer',
                                                                                            'SetThreadpoolTimer',
                                                                                            'WaitForThreadpoolTimerCallbacks',
                                                                                            'CloseThreadpoolTimer',
                                                                                            'TrySubmitThreadpoolCallback',
                                                                                            'CallbackMayRunLong',
                                                                                            'FreeLibraryWhenCallbackReturns',
                                                                                            'CreateEventExW',
                                                                                            'CreateThread',
                                                                                            'OpenSemaphoreW',
                                                                                            'ReleaseSemaphore',
                                                                                            'TlsAlloc',
                                                                                            'CreateSemaphoreW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalReAlloc',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleExW',
                                                                                            'CloseHandle',
                                                                                            'LocalAlloc',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FreeLibrary',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetWindowsHookExW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetThreadDesktop',
                                                                                            'GetKeyState',
                                                                                            'SetDisplayConfig',
                                                                                            'QueryDisplayConfig',
                                                                                            'GetDisplayConfigBufferSizes',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'LoadStringW',
                                                                                            'SystemParametersInfoW',
                                                                                            'DestroyIcon',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetWindowLongW',
                                                                                            'SendInput',
                                                                                            'SetForegroundWindow',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'DestroyWindow',
                                                                                            'GetUserObjectInformationW',
                                                                                            'CallNextHookEx',
                                                                                            '_vsnwprintf',
                                                                                            'strchr',
                                                                                            '_set_errno',
                                                                                            '_get_errno',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_purecall',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memcpy',
                                                                                            '_CIpow',
                                                                                            'RoRegisterActivationFactories',
                                                                                            'RoRevokeActivationFactories',
                                                                                            'WindowsCreateString',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsStringHasEmbeddedNull',
                                                                                            'WindowsIsStringEmpty',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'RoOriginateErrorW',
                                                                                            'RoOriginateError',
                                                                                            'CoGetApartmentType',
                                                                                            'CoRegisterClassObject',
                                                                                            'RoGetAgileReference',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoUninitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'ImmDisableIME',
                                                                                            'CoAllowSetForegroundWindow',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'RtlQueryWnfStateData',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'SHCreateThreadRef',
                                                                                            'SHSetThreadRef',
                                                                                            'SHGetThreadRef',
                                                                                            'SHStrDupW',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'PowerDeterminePlatformRoleEx',
                                                                                            'WinStationIsSessionRemoteable',
                                                                                            'GetCurrentThemeName',
                                                                                            '?WidthProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?HeightProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?SetOverrideScaleFactor@DUIXmlParser@DirectUI@@QAEXM@Z',
                                                                                            '?SetDynamicScaling@DUIXmlParser@DirectUI@@QAEXW4DynamicScaleParsing@2@@Z',
                                                                                            '?GetSheet@DUIXmlParser@DirectUI@@QAEJPBGPAPAVValue@2@@Z',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJPBGPAUHINSTANCE__@@1@Z',
                                                                                            '?SetXMLFromResourceWithTheme@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@00@Z',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QAEXXZ',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z',
                                                                                            'UnInitThread',
                                                                                            'InitThread',
                                                                                            'InitProcessPriv',
                                                                                            '?CreateString@Value@DirectUI@@SGPAV12@PBGPAUHINSTANCE__@@@Z',
                                                                                            'ARGBColorFromEnumI',
                                                                                            '?StartDefer@Element@DirectUI@@QAEXPAK@Z',
                                                                                            '?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?_PostEvent@Element@DirectUI@@AAEXPAUEvent@2@H@Z',
                                                                                            '?FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N1@Z',
                                                                                            '?KeyboardNavigate@Element@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?GetSelection@Selector@DirectUI@@QAEPAVElement@2@XZ',
                                                                                            '?RemoveLocalValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZ@Z',
                                                                                            '?ClassProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?SetClass@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?ShowUIState@HWNDElement@DirectUI@@QAEX_N0@Z',
                                                                                            '?GetRoot@Element@DirectUI@@QAEPAV12@XZ',
                                                                                            '?Click@TouchButton@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z',
                                                                                            '?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ',
                                                                                            '?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ',
                                                                                            '?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?AddChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ',
                                                                                            '?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ',
                                                                                            '?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z',
                                                                                            '?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z',
                                                                                            '?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ',
                                                                                            '?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?Release@ClassInfoBase@DirectUI@@UAEHXZ',
                                                                                            '?AddRef@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?FireRightClickEvent@TouchButton@DirectUI@@UAEXIPAUtagPOINT@@@Z',
                                                                                            '?FireClickEvent@TouchButton@DirectUI@@UAEXIIW4ClickDevice@12@PAUtagPOINT@@@Z',
                                                                                            '?GetForegroundColorRef@TouchButton@DirectUI@@UAEJPAK@Z',
                                                                                            '?DefaultAction@TouchButton@DirectUI@@UAEJXZ',
                                                                                            '?OnUnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?OnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@TouchButton@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?GetContentSize@RichText@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Paint@RichText@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?OnEvent@TouchButton@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnInput@TouchButton@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?SetSelection@Selector@DirectUI@@UAEJPAVElement@2@@Z',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UAEJXZ',
                                                                                            '?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?GetKeyFocused@Element@DirectUI@@UAE_NXZ',
                                                                                            '?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z',
                                                                                            '?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            'UnInitProcessPriv',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?SetKeyFocus@Element@DirectUI@@UAEXXZ',
                                                                                            '?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z',
                                                                                            '?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z',
                                                                                            '?Add@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?OnEvent@Selector@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?OnDestroy@Element@DirectUI@@UAEXXZ',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnKeyFocusMoved@Selector@DirectUI@@UAEXPAVElement@2@0@Z',
                                                                                            '?OnInput@Selector@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@ItemList@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?IsContentProtected@Element@DirectUI@@UAE_NXZ',
                                                                                            'RegisterPVLBehaviorFactory',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            'StrToID',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QAEJH@Z',
                                                                                            '?EndDefer@Element@DirectUI@@QAEXK@Z',
                                                                                            '?Destroy@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?GetClassInfoPtr@ItemList@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '??0TouchButton@DirectUI@@QAE@XZ',
                                                                                            '??1TouchButton@DirectUI@@UAE@XZ',
                                                                                            '?Release@Value@DirectUI@@QAEXXZ',
                                                                                            '?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z',
                                                                                            '?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z',
                                                                                            '?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z',
                                                                                            '?Add@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            '?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHICON__@@_N11@Z',
                                                                                            '?BackgroundProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z',
                                                                                            '?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?Initialize@TouchButton@DirectUI@@QAEJIPAVElement@2@PAK@Z',
                                                                                            '?SetAccName@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?PressedProp@TouchButton@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            'DuiCreateObject',
                                                                                            '?SizeInLayoutProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?OnPropertyChanged@TouchButton@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?Register@ItemList@DirectUI@@SGJXZ',
                                                                                            '??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ',
                                                                                            '??1CritSecLock@DirectUI@@QAE@XZ',
                                                                                            '?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z',
                                                                                            '?Register@ClassInfoBase@DirectUI@@QAEJXZ',
                                                                                            '?Register@TouchButton@DirectUI@@SGJXZ',
                                                                                            '?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z',
                                                                                            '?Initialize@Selector@DirectUI@@QAEJPAVElement@2@PAK@Z',
                                                                                            '?GetClassInfoPtr@TouchButton@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '??0ClassInfoBase@DirectUI@@QAE@XZ',
                                                                                            '??1ClassInfoBase@DirectUI@@UAE@XZ',
                                                                                            '??0ItemList@DirectUI@@QAE@XZ',
                                                                                            '??1ItemList@DirectUI@@UAE@XZ',
                                                                                            '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                            'CreateAction',
                                                                                            'DeleteHandle',
                                                                                            'D3DKMTNetDispQueryMiracastDisplayDeviceSupport',
                                                                                            'D3DKMTNetDispStopMiracastDisplayDevice'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 294,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1716968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 14336,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 1717248,
                                                                                       '.text\x00\x00\x00': 141824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1d5cba061142691df9d99380139653fae326ff15fd12d8cc1b91ead79194aa9d'},
 '1d7b9125aa6528b0287452834f64e01e0ce40019dae2fd9610c45aa139f1e38b': {'AddressOfEntryPoint': 194022,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 266240,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetFilePointer',
                                                                                      'USER32.dll': 'SetWindowTextW',
                                                                                      'libcef.dll': 'cef_string_multimap_alloc'},
                                                                      'ImportedFunctions': ['SetWindowTextW',
                                                                                            'cef_string_utf8_to_utf16',
                                                                                            'cef_string_utf16_set',
                                                                                            'cef_string_utf16_clear',
                                                                                            'cef_string_utf8_clear',
                                                                                            'cef_string_utf16_to_utf8',
                                                                                            'cef_string_list_free',
                                                                                            'cef_string_list_alloc',
                                                                                            'cef_browser_host_create_browser',
                                                                                            'cef_string_userfree_utf16_free',
                                                                                            'cef_window_create_top_level',
                                                                                            'cef_browser_view_create',
                                                                                            'cef_browser_view_get_for_browser',
                                                                                            'cef_string_map_free',
                                                                                            'cef_string_map_alloc',
                                                                                            'cef_api_hash',
                                                                                            'cef_command_line_get_global',
                                                                                            'cef_shutdown',
                                                                                            'cef_run_message_loop',
                                                                                            'cef_quit_message_loop',
                                                                                            'cef_enable_highdpi_support',
                                                                                            'cef_execute_process',
                                                                                            'cef_initialize',
                                                                                            'cef_log',
                                                                                            'cef_string_utf16_cmp',
                                                                                            'cef_string_list_append',
                                                                                            'cef_string_map_append',
                                                                                            'cef_string_multimap_append',
                                                                                            'cef_string_list_value',
                                                                                            'cef_string_list_size',
                                                                                            'cef_string_map_value',
                                                                                            'cef_string_map_key',
                                                                                            'cef_string_map_size',
                                                                                            'cef_string_multimap_value',
                                                                                            'cef_string_multimap_key',
                                                                                            'cef_string_multimap_size',
                                                                                            'cef_string_multimap_free',
                                                                                            'cef_string_multimap_alloc',
                                                                                            'TlsAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedExchange',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'RtlUnwind',
                                                                                            'HeapFree',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'HeapAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetProcAddress',
                                                                                            'HeapCreate',
                                                                                            'ExitProcess',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'LoadLibraryW',
                                                                                            'SetFilePointer'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 108,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 49164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 37888,
                                                                                       '.reloc\x00\x00': 36352,
                                                                                       '.rsrc\x00\x00\x00': 49664,
                                                                                       '.text\x00\x00\x00': 261120},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1d7b9125aa6528b0287452834f64e01e0ce40019dae2fd9610c45aa139f1e38b'},
 '1d8ee4a0b49293560ab4f735a4aa0aeb44ace7c53b7ab4f28526e3b76a27be83': {'AddressOfEntryPoint': 14208,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetModuleHandleA',
                                                                                      'REGAPI.dll': 'RegGetMachinePolicyNew',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'VerSetConditionMask'},
                                                                      'ImportedFunctions': ['LoadStringW',
                                                                                            'VerSetConditionMask',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetVersionExW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'LocalAlloc',
                                                                                            'RegOpenKeyExW',
                                                                                            'HeapSetInformation',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetCommandLineW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'TerminateProcess',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleHandleA',
                                                                                            'RegGetMachinePolicyNew',
                                                                                            'fwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            '_iob',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'memmove',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_wcsnicmp',
                                                                                            '_wcslwr',
                                                                                            'vfwprintf',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'wcschr',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            '_wtoi',
                                                                                            'swprintf_s',
                                                                                            '_wcsdup',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1d8ee4a0b49293560ab4f735a4aa0aeb44ace7c53b7ab4f28526e3b76a27be83'},
 '1d955bc90146a0b73fab61a445de5ad71a153e90e6bf0db4f2e5506b32211466': {'AddressOfEntryPoint': 41556,
                                                                      'DebugRVA': 45600,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 127472,
                                                                      'ExportSize': 1198,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RevertToSelf',
                                                                                      'KERNEL32.dll': 'IsProcessorFeaturePresent',
                                                                                      'MSVCP100.dll': '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z',
                                                                                      'MSVCR100.dll': '_cexit',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'mozalloc.dll': 'moz_free',
                                                                                      'mozglue.dll': 'free',
                                                                                      'xul.dll': 'XRE_InitChildProcess'},
                                                                      'ImportedFunctions': ['GetModuleHandleW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'LocalFree',
                                                                                            'SetHandleInformation',
                                                                                            'GetProcessHandleCount',
                                                                                            'VirtualFree',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'GetTickCount',
                                                                                            'InterlockedExchange',
                                                                                            'SignalObjectAndWait',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'IsDebuggerPresent',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetProcAddress',
                                                                                            'SetDllDirectoryW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'HeapSetInformation',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'timeGetTime',
                                                                                            'OpenProcessToken',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'SetTokenInformation',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetLengthSid',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'RevertToSelf',
                                                                                            'XRE_StringToChildProcessType',
                                                                                            '?Instance@SandboxTarget@mozilla@@SAPAV12@XZ',
                                                                                            'XRE_InitChildProcess',
                                                                                            'moz_xmalloc',
                                                                                            'moz_free',
                                                                                            '_purecall',
                                                                                            'abort',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            'memset',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            '_invoke_watson',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler4_common',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z',
                                                                                            'malloc',
                                                                                            'free'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 117,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2588,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 83968,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 40448},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1d955bc90146a0b73fab61a445de5ad71a153e90e6bf0db4f2e5506b32211466'},
 '1def80fc38ff4742be567d3424fc58a352d50c9f522701305feda4893968b4fe': {'AddressOfEntryPoint': 12514,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['GetTickCount',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryA',
                                                                                            'lstrlenA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'lstrcpyA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'GetProcAddress',
                                                                                            'GlobalAlloc',
                                                                                            'CompareFileTime',
                                                                                            'SetFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalFree',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'SetErrorMode',
                                                                                            'GetCommandLineA',
                                                                                            'LoadLibraryExA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'FindClose',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'MulDiv',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FreeLibrary',
                                                                                            'CreateWindowExA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoA',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'wsprintfA',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'LoadImageA',
                                                                                            'SetWindowLongA',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'EndPaint',
                                                                                            'PostQuitMessage',
                                                                                            'FindWindowExA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 157,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 137776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 138240,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/1def80fc38ff4742be567d3424fc58a352d50c9f522701305feda4893968b4fe'},
 '1dfff55f4fd929f04aaea59ffd69ab8e31474ce0fed11ad034af17b9ea0d0bba': {'AddressOfEntryPoint': 60848,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitiateSystemShutdownW',
                                                                                      'ActionQueue.dll': 'ProcessActionQueue',
                                                                                      'KERNEL32.dll': 'LoadLibraryExW',
                                                                                      'NETAPI32.dll': 'NetUserSetInfo',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'UNATTEND.DLL': 'UnattendCtxSerializeSettingsStream',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'ControlTraceW',
                                                                                            'LsaFreeMemory',
                                                                                            'GetLengthSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'LsaClose',
                                                                                            'LookupAccountSidW',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'GetSidSubAuthority',
                                                                                            'RegSetValueExW',
                                                                                            'RegFlushKey',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'InitiateSystemShutdownW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFullPathNameW',
                                                                                            'CopyFileExW',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'FindClose',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateDirectoryW',
                                                                                            'GetModuleHandleExW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GlobalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'SetThreadExecutionState',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'SetLastError',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'FreeLibrary',
                                                                                            'HeapAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'CompareStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'LocalFree',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'OpenThread',
                                                                                            'LoadLibraryExW',
                                                                                            '_wcsnicmp',
                                                                                            '_XcptFilter',
                                                                                            'wcsrchr',
                                                                                            '_amsg_exit',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            '_vscwprintf',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_vsnprintf',
                                                                                            'wcscmp',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CommandLineToArgvW',
                                                                                            'UnattendCtxReplaceMatchedNodesWithText',
                                                                                            'UnattendCtxDeserializeWithResults',
                                                                                            'UnattendCtxOpenNode',
                                                                                            'UnattendCtxGetEnumValueByNode',
                                                                                            'UnattendCtxGetFlagByNode',
                                                                                            'UnattendAddResults',
                                                                                            'UnattendCtxCommitModify',
                                                                                            'UnattendCtxCleanup',
                                                                                            'UnattendCtxSerialize',
                                                                                            'UnattendMarkPassUsedInCtx',
                                                                                            'UnattendCtxBeginModify',
                                                                                            'UnattendFindFileFromCmdLine',
                                                                                            'UnattendFindAnswerFileWithResults',
                                                                                            'UnattendFreeResults',
                                                                                            'UnattendFreeNode',
                                                                                            'UnattendCtxCancelModify',
                                                                                            'UnattendCtxSerializeSettingsStream',
                                                                                            'GenerateActionQueue',
                                                                                            'ProcessActionQueue',
                                                                                            'RegisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'PostThreadMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LoadStringW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetUserGetInfo',
                                                                                            'NetUserSetInfo',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 146,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 60928},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/1dfff55f4fd929f04aaea59ffd69ab8e31474ce0fed11ad034af17b9ea0d0bba'},
 '1e384e490aff301349d27c37139d304edc83cf62571875540ab468e3b0d65c06': {'AddressOfEntryPoint': 194288,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 200704,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'SetEvent',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'StrToIntExW',
                                                                                      'USER32.dll': 'CreateWindowExW',
                                                                                      'WTSAPI32.dll': 'WTSQueryUserToken',
                                                                                      'dpx.dll': 'DpxNewJob',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmStartSession',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegOpenKeyExW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetTokenInformation',
                                                                                            'CopySid',
                                                                                            'RegDeleteKeyValueW',
                                                                                            'StartTraceW',
                                                                                            'EnableTrace',
                                                                                            'ControlTraceW',
                                                                                            'CloseTrace',
                                                                                            'IsValidSid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGenRandom',
                                                                                            'DecryptFileA',
                                                                                            'CryptReleaseContext',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventEnabled',
                                                                                            'EventWrite',
                                                                                            'GetFileAttributesA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemDirectoryA',
                                                                                            'lstrcmpW',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'FormatMessageW',
                                                                                            'GetFileAttributesW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCommandLineW',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'CreateThread',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetExitCodeProcess',
                                                                                            'OutputDebugStringW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'lstrcmpiW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'CreateEventW',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeThread',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'SetEvent',
                                                                                            'GetStockObject',
                                                                                            'DeleteDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDeviceCaps',
                                                                                            'BeginPaint',
                                                                                            'ReleaseDC',
                                                                                            'FillRect',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SendMessageW',
                                                                                            'EndPaint',
                                                                                            'SetFocus',
                                                                                            'GetDlgItem',
                                                                                            'SetDlgItemTextW',
                                                                                            'EnableWindow',
                                                                                            'SetWindowLongW',
                                                                                            'DialogBoxParamW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'UpdateWindow',
                                                                                            'EndDialog',
                                                                                            'GetDC',
                                                                                            'SetRect',
                                                                                            'GetClientRect',
                                                                                            'ShowWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'PostMessageW',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'TranslateAcceleratorW',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'DestroyWindow',
                                                                                            'ShutdownBlockReasonDestroy',
                                                                                            'ShutdownBlockReasonCreate',
                                                                                            'RegisterClassExW',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'CreateWindowExW',
                                                                                            '_ftol2_sse',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnprintf',
                                                                                            'wcschr',
                                                                                            'iswdigit',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_vsnwprintf',
                                                                                            'wcsrchr',
                                                                                            '_wcmdln',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW',
                                                                                            'StrToIntExW',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmStartSession',
                                                                                            'DpxNewJob',
                                                                                            'WTSQueryUserToken',
                                                                                            'InitCommonControlsEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 185,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 87120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 18432,
                                                                                       '.rsrc\x00\x00\x00': 87552,
                                                                                       '.text\x00\x00\x00': 192512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1e384e490aff301349d27c37139d304edc83cf62571875540ab468e3b0d65c06'},
 '1e97eca81395d1bd5e627debfdb02828bd3655d68c8f7296395d574781faa32e': {'AddressOfEntryPoint': 6080,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 19024,
                                                                      'ExportSize': 69,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStdHandle',
                                                                                      'USER32.dll': 'DispatchMessageA'},
                                                                      'ImportedFunctions': ['RemoveDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'SetErrorMode',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcmpiA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrcatA',
                                                                                            'lstrcpyA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'GetStringTypeA',
                                                                                            'HeapAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'HeapFree',
                                                                                            'RtlUnwind',
                                                                                            'VirtualFree',
                                                                                            'WriteFile',
                                                                                            'HeapDestroy',
                                                                                            'GetFileType',
                                                                                            'HeapCreate',
                                                                                            'GetLastError',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'ExitProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'SetHandleCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetStdHandle',
                                                                                            'CharNextA',
                                                                                            'DefWindowProcA',
                                                                                            'wsprintfA',
                                                                                            'IsWindow',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SetTimer',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassA',
                                                                                            'LoadIconA',
                                                                                            'LoadCursorA',
                                                                                            'GetMessageA',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExA',
                                                                                            'SendMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 67,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10240,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 4096,
                                                                      'filename': './data/clean/1e97eca81395d1bd5e627debfdb02828bd3655d68c8f7296395d574781faa32e'},
 '1e9a13221f6e089d48d8a28c0b28e960f0676ea57470126d6a810c00480e7be6': {'AddressOfEntryPoint': 313856,
                                                                      'DebugRVA': 60848,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 425984,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'GetCurrentDirectoryW',
                                                                                      'MPR.dll': 'WNetDisconnectDialog',
                                                                                      'SHELL32.dll': 'DragAcceptFiles',
                                                                                      'USER32.dll': 'GetForegroundWindow',
                                                                                      'dbgeng.dll': 'DebugConnectWide',
                                                                                      'dbghelp.dll': 'SymSetParentWindow',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['EventWriteTransfer',
                                                                                            'EventRegister',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'EventActivityIdControl',
                                                                                            'RegEnumValueW',
                                                                                            'EventUnregister',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalSize',
                                                                                            'LoadLibraryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'GetPriorityClass',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetFileAttributesW',
                                                                                            'OutputDebugStringW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetTickCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CompareFileTime',
                                                                                            'GetFileTime',
                                                                                            'ExitProcess',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetVersionExW',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'WriteFile',
                                                                                            'Beep',
                                                                                            'MulDiv',
                                                                                            'CloseHandle',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'WideCharToMultiByte',
                                                                                            'DebugBreak',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryExW',
                                                                                            'FormatMessageW',
                                                                                            'CreateEventA',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetComputerNameExW',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreatePen',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateDIBSection',
                                                                                            'TextOutW',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'Polyline',
                                                                                            'GetTextExtentPointW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextMetricsW',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'PatBlt',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'PtVisible',
                                                                                            'CreateSolidBrush',
                                                                                            'RedrawWindow',
                                                                                            'DefWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'GetDCEx',
                                                                                            'GetWindowDC',
                                                                                            'GetSysColorBrush',
                                                                                            'SetRect',
                                                                                            'FillRect',
                                                                                            'DrawIconEx',
                                                                                            'ReleaseDC',
                                                                                            'PtInRect',
                                                                                            'SetCursor',
                                                                                            'IsZoomed',
                                                                                            'GetActiveWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'LoadStringW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetParent',
                                                                                            'OpenIcon',
                                                                                            'IsWindowEnabled',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'WindowFromPoint',
                                                                                            'GetDC',
                                                                                            'GetCapture',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetParent',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetMenuItemCount',
                                                                                            'DeleteMenu',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetDlgItem',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'CheckDlgButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckRadioButton',
                                                                                            'SetDlgItemInt',
                                                                                            'GetMenuState',
                                                                                            'GetMenu',
                                                                                            'AdjustWindowRect',
                                                                                            'PostQuitMessage',
                                                                                            'GetSysColor',
                                                                                            'DrawTextW',
                                                                                            'CallNextHookEx',
                                                                                            'UpdateWindow',
                                                                                            'MessageBoxW',
                                                                                            'DialogBoxParamW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'PeekMessageW',
                                                                                            'IsDialogMessageW',
                                                                                            'OpenClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'CreatePopupMenu',
                                                                                            'GetScrollInfo',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetSubMenu',
                                                                                            'SetWindowsHookExW',
                                                                                            'WaitMessage',
                                                                                            'GetTitleBarInfo',
                                                                                            'CopyRect',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'ShowWindow',
                                                                                            'SetActiveWindow',
                                                                                            'BringWindowToTop',
                                                                                            'SetWindowLongW',
                                                                                            'DestroyMenu',
                                                                                            'GetDesktopWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'ModifyMenuW',
                                                                                            'DrawMenuBar',
                                                                                            'RemoveMenu',
                                                                                            'ScreenToClient',
                                                                                            'GetCursorPos',
                                                                                            'SetWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'SetWindowPlacement',
                                                                                            'OffsetRect',
                                                                                            'ClientToScreen',
                                                                                            'InflateRect',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'MessageBeep',
                                                                                            'InsertMenuItemW',
                                                                                            'CreateMenu',
                                                                                            'MoveWindow',
                                                                                            'IsIconic',
                                                                                            'GetKeyState',
                                                                                            'GetSystemMetrics',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetWindowLongW',
                                                                                            'DestroyWindow',
                                                                                            'InvalidateRect',
                                                                                            'EnableWindow',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SetFocus',
                                                                                            'IsChild',
                                                                                            'GetClientRect',
                                                                                            'EnableMenuItem',
                                                                                            'PostMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'CheckMenuItem',
                                                                                            'SendMessageW',
                                                                                            'GetFocus',
                                                                                            'GetForegroundWindow',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_exit',
                                                                                            'memcmp',
                                                                                            '_itow_s',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBDH@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '_callnewh',
                                                                                            'getenv',
                                                                                            '_wtoi64',
                                                                                            'exit',
                                                                                            'realloc',
                                                                                            'iswalpha',
                                                                                            'iswalnum',
                                                                                            'wcscpy_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wctime',
                                                                                            'wcstoul',
                                                                                            'iswdigit',
                                                                                            '_wgetenv',
                                                                                            '_wtoi',
                                                                                            '_itow',
                                                                                            'towlower',
                                                                                            'iswprint',
                                                                                            'wcsstr',
                                                                                            'towupper',
                                                                                            'wcsrchr',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'wcstok',
                                                                                            '_wcsdup',
                                                                                            'swscanf',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'iswspace',
                                                                                            'fclose',
                                                                                            'fprintf',
                                                                                            '_wfopen',
                                                                                            'calloc',
                                                                                            'memmove',
                                                                                            'wcschr',
                                                                                            'wcsncmp',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            '_spawnlp',
                                                                                            'memset',
                                                                                            'DebugCreate',
                                                                                            'DebugConnectWide',
                                                                                            'SymMatchFileNameW',
                                                                                            'SymSetParentWindow',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'DragAcceptFiles',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_LoadImageW',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_Create',
                                                                                            'CreateStatusWindowW',
                                                                                            'PropertySheetW',
                                                                                            'WNetDisconnectDialog'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 314,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 116216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.idata\x00\x00': 8704,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 25088,
                                                                                       '.rsrc\x00\x00\x00': 116224,
                                                                                       '.text\x00\x00\x00': 329216},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/1e9a13221f6e089d48d8a28c0b28e960f0676ea57470126d6a810c00480e7be6'},
 '1f83f9d9201ed34b18d1452e439d6d2fb51b52a2fa627ccae3b2976d78af83b2': {'AddressOfEntryPoint': 93152,
                                                                      'DebugRVA': 4816,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 135168,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceMessage',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'UuidToStringW',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDevicePropertyW',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'WinSCard.dll': 'SCardAccessStartedEvent',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchAppend',
                                                                                      'bcrypt.dll': 'BCryptOpenAlgorithmProvider',
                                                                                      'ext-ms-win-security-credui-l1-1-0.dll': 'CredUIPromptForWindowsCredentialsW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateWellKnownSid',
                                                                                            'TraceMessage',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'RaiseFailFastException',
                                                                                            'LoadLibraryW',
                                                                                            'GetTickCount64',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetLastError',
                                                                                            'HeapAlloc',
                                                                                            'LocalFree',
                                                                                            'GetProcessHeap',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'FreeLibrary',
                                                                                            'UnregisterClassA',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'CharUpperW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'wcscat_s',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            '_purecall',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'memmove',
                                                                                            'memcpy_s',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            'wcscpy_s',
                                                                                            '_callnewh',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SCardReleaseStartedEvent',
                                                                                            'SCardDisconnect',
                                                                                            'SCardConnectW',
                                                                                            'SCardGetStatusChangeW',
                                                                                            'SCardReleaseContext',
                                                                                            'SCardEstablishContext',
                                                                                            'SCardGetReaderDeviceInstanceIdW',
                                                                                            'SCardFreeMemory',
                                                                                            'SCardListCardsW',
                                                                                            'SCardGetCardTypeProviderNameW',
                                                                                            'SCardBeginTransaction',
                                                                                            'SCardReconnect',
                                                                                            'SCardListReadersWithDeviceInstanceIdW',
                                                                                            'SCardEndTransaction',
                                                                                            'SCardListReadersW',
                                                                                            'SCardAccessStartedEvent',
                                                                                            'CredUIPromptForWindowsCredentialsW',
                                                                                            'BCryptDestroyKey',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptEncrypt',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptGenerateSymmetricKey',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'UuidToStringW',
                                                                                            'SetupGetInfDriverStoreLocationW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiSetDevicePropertyW',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDevicePropertyW',
                                                                                            'PathCchRemoveFileSpec',
                                                                                            'PathCchAppend'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2456,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 113664},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/1f83f9d9201ed34b18d1452e439d6d2fb51b52a2fa627ccae3b2976d78af83b2'},
 '1fa6532e9048c88faab04e5792db3ad5e29a3c714a43f54c8ee35e3cef7ccff0': {'AddressOfEntryPoint': 12688,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'GetLastError',
                                                                                            'CreateEventW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memmove_s',
                                                                                            'wcschr',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CLSIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 59,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 13312},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/1fa6532e9048c88faab04e5792db3ad5e29a3c714a43f54c8ee35e3cef7ccff0'},
 '201382c257d6bb25a318901df532837e3d670db62a32b9f6f1b9606782683f28': {'AddressOfEntryPoint': 68872,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'Framework.dll': '?split@CStringUtils@Caf@@SA?AV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@D@Z',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCP90.dll': '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                      'MSVCR90.dll': '_decode_pointer',
                                                                                      'ProviderFx.dll': '?createClassInstanceProperty@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCClassInstancePropertyDoc@Caf@@V?$TCafObject@VCClassInstancePropertyDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$TCafSmartPtr@VCClassIdentifierDoc@Caf@@V?$TCafObject@VCClassIdentifierDoc@Caf@@@@@@_N22@Z',
                                                                                      'glib-2.0.dll': 'g_atomic_int_dec_and_test'},
                                                                      'ImportedFunctions': ['g_error_free',
                                                                                            'g_atomic_int_inc',
                                                                                            'g_atomic_int_dec_and_test',
                                                                                            '?removeAttribute@CXmlElement@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?log@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDHPEBVCCafException@2@@Z',
                                                                                            '?replaceLiteral@CCafRegex@Caf@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@0@Z',
                                                                                            '?isMatched@CCafRegex@Caf@@QEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??1CLogger@Caf@@UEAA@XZ',
                                                                                            '?logVA@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDH1ZZ',
                                                                                            '?populateVA@CCafException@Caf@@QEAAXJAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PEBDZZ',
                                                                                            '??0NoSuchElementException@Caf@@QEAA@XZ',
                                                                                            '?notEmptyStr@CValidate@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD11@Z',
                                                                                            '?AddRef@CCafException@Caf@@UEAAXXZ',
                                                                                            '?Release@CCafException@Caf@@UEAAXXZ',
                                                                                            '?QueryInterface@CCafException@Caf@@UEAAXAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?throwSelf@NoSuchElementException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@NoSuchElementException@Caf@@UEAAXXZ',
                                                                                            '?getMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getFullMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '??1NoSuchElementException@Caf@@UEAA@XZ',
                                                                                            '??1CIniFile@Caf@@UEAA@XZ',
                                                                                            '??0CIniFile@Caf@@QEAA@XZ',
                                                                                            '??0CLogger@Caf@@QEAA@PEBD@Z',
                                                                                            '?findRequiredChild@CXmlElement@Caf@@QEBA?AV?$TCafSmartPtr@VCXmlElement@Caf@@V?$TCafObject@VCXmlElement@Caf@@@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?getName@CXmlElement@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?notNullPtr@CValidate@Caf@@SAXPEBXPEBD11@Z',
                                                                                            '?notEmptyStl@CValidate@Caf@@SAX_KPEBD11@Z',
                                                                                            '??0InvalidArgumentException@Caf@@QEAA@XZ',
                                                                                            '?saveToFile@CXmlElement@Caf@@QEBAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?createAndAddElement@CXmlElement@Caf@@QEAA?AV?$TCafSmartPtr@VCXmlElement@Caf@@V?$TCafObject@VCXmlElement@Caf@@@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?setAttribute@CXmlElement@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?findOptionalAttribute@CXmlElement@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?setValue@CXmlElement@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?findOptionalChild@CXmlElement@Caf@@QEBA?AV?$TCafSmartPtr@VCXmlElement@Caf@@V?$TCafObject@VCXmlElement@Caf@@@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?parseFile@CXmlUtils@Caf@@SA?AV?$TCafSmartPtr@VCXmlElement@Caf@@V?$TCafObject@VCXmlElement@Caf@@@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?setValue@CIniFile@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '?initialize@CIniFile@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?throwSelf@InvalidArgumentException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@InvalidArgumentException@Caf@@UEAAXXZ',
                                                                                            '??1InvalidArgumentException@Caf@@UEAA@XZ',
                                                                                            '?removeChild@CXmlElement@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?deleteValue@CIniFile@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?findRequiredParameterAsString@ParameterUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@AEBV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@@Z',
                                                                                            '?getParameterCollection@COperationDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@XZ',
                                                                                            '?getName@COperationDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getOperation@CProviderInvokeOperationDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCOperationDoc@Caf@@V?$TCafObject@VCOperationDoc@Caf@@@@@@XZ',
                                                                                            '?getValue@CXmlElement@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getAllChildren@CXmlElement@Caf@@QEBA?AV?$TCafSmartPtr@V?$multimap@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$TCafSmartPtr@VCXmlElement@Caf@@V?$TCafObject@VCXmlElement@Caf@@@@@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$TCafSmartPtr@VCXmlElement@Caf@@V?$TCafObject@VCXmlElement@Caf@@@@@@@std@@@2@@std@@V?$TCafObject@V?$multimap@V?$basic_string@DU?$char_traits@D@std@@V?$',
                                                                                            '?getAllAttributes@CXmlElement@Caf@@QEBA?AV?$TCafSmartPtr@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@V?$TCafObject@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU',
                                                                                            '?getSectionCollection@CIniFile@Caf@@QEAA?AV?$deque@V?$TCafSmartPtr@USIniSection@CIniFile@Caf@@V?$TCafObject@USIniSection@CIniFile@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@USIniSection@CIniFile@Caf@@V?$TCafObject@USIniSection@CIniFile@Caf@@@@@@@std@@@std@@XZ',
                                                                                            '?doesFileExist@FileSystemUtils@Caf@@SA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?getParameterCollection@CProviderCollectInstancesDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@XZ',
                                                                                            '?notInitialized@CValidate@Caf@@SAX_NPEBD1@Z',
                                                                                            '??1CCafRegex@Caf@@UEAA@XZ',
                                                                                            '??0CCafRegex@Caf@@QEAA@XZ',
                                                                                            '?initialize@CCafRegex@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?populate@CCafException@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@J00@Z',
                                                                                            '??0CCafException@Caf@@QEAA@XZ',
                                                                                            '??0InvalidHandleException@Caf@@QEAA@XZ',
                                                                                            '??0FileNotFoundException@Caf@@QEAA@XZ',
                                                                                            '?throwSelf@FileNotFoundException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@FileNotFoundException@Caf@@UEAAXXZ',
                                                                                            '?throwSelf@InvalidHandleException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@InvalidHandleException@Caf@@UEAAXXZ',
                                                                                            '?throwSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '??1FileNotFoundException@Caf@@UEAA@XZ',
                                                                                            '??1InvalidHandleException@Caf@@UEAA@XZ',
                                                                                            '??1CCafException@Caf@@UEAA@XZ',
                                                                                            '?initialized@CValidate@Caf@@SAX_NPEBD1@Z',
                                                                                            '?expandEnv@CStringUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?split@CStringUtils@Caf@@SA?AV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@D@Z',
                                                                                            '?processProviderCommandline@CProviderDriver@Caf@@SAHAEAUIInvokedProvider@2@HQEAPEAD@Z',
                                                                                            '?createDataClassProperty@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?createDataClassSubInstance@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassSubInstanceDoc@Caf@@V?$TCafObject@VCDataClassSubInstanceDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$deque@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '?createDataClassInstance@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassInstanceDoc@Caf@@V?$TCafObject@VCDataClassInstanceDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$deque@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCDataClassSubInstanceDoc@Caf@@V?$TCafObject@VCDataClassSubInstanceDo',
                                                                                            '?createClassProperty@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCClassPropertyDoc@Caf@@V?$TCafObject@VCClassPropertyDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PROPERTY_TYPE@2@_N22@Z',
                                                                                            '?createClassIdentifier@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCClassIdentifierDoc@Caf@@V?$TCafObject@VCClassIdentifierDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '?createDataClass@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$deque@V?$TCafSmartPtr@VCClassPropertyDoc@Caf@@V?$TCafObject@VCClassPropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCClassPropertyDoc@Caf@@V?$TCafObject@VCClassPropertyDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCClassInstancePropertyDoc@Caf@@V?$TCafObject@VCClassInstancePropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPt',
                                                                                            '?createMethodParameter@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PARAMETER_TYPE@2@_N2@Z',
                                                                                            '?createMethod@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$deque@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCInstanceParameterDoc@Caf@@V?$TCafObject@VCInstanceParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCInstanc',
                                                                                            '?createCollectMethod@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCCollectMethodDoc@Caf@@V?$TCafObject@VCCollectMethodDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$deque@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCInstanceParameterDoc@Caf@@V?$TCafObject@VCInstanceParameterDoc@Caf@@@@@@V?$allocator@V?$T',
                                                                                            '?createActionClass@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$TCafSmartPtr@VCCollectMethodDoc@Caf@@V?$TCafObject@VCCollectMethodDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '?createSchema@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCSchemaDoc@Caf@@V?$TCafObject@VCSchemaDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@@std@@@std@@V?$deque@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '?createClassInstanceProperty@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCClassInstancePropertyDoc@Caf@@V?$TCafObject@VCClassInstancePropertyDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$TCafSmartPtr@VCClassIdentifierDoc@Caf@@V?$TCafObject@VCClassIdentifierDoc@Caf@@@@@@_N22@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAHAEBV12@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@PEBD@Z',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KAEBV12@_K@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV12@_K0@Z',
                                                                                            '?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2_KB',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K@Z',
                                                                                            '?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ',
                                                                                            '??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAEAV?$basic_istream@DU?$char_traits@D@std@@@0@AEAV10@AEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z',
                                                                                            '??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAHPEBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@0@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '_onexit',
                                                                                            'fopen_s',
                                                                                            '_lock',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            'fclose',
                                                                                            'fputs',
                                                                                            '__dllonexit',
                                                                                            'fgets',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_unlock',
                                                                                            '_decode_pointer',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 159,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 14336,
                                                                                       '.rdata\x00\x00': 56320,
                                                                                       '.text\x00\x00\x00': 100352},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/201382c257d6bb25a318901df532837e3d670db62a32b9f6f1b9606782683f28'},
 '20a3abd5e7ad32389dc8828873c947db87d43385993c51b811c219619791220c': {'AddressOfEntryPoint': 66176,
                                                                      'DebugRVA': 199192,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 258048,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'RpcServerUseProtseqEpW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoTaskMemFree',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSize',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FindResourceExW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'CreateFileMappingW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharNextW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'DeleteCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-windowserrorreporting-l1-1-0.dll': 'WerRegisterMemoryBlock',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'TraceMessage',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventWrite',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'MakeAbsoluteSD',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'AlpcInitializeMessageAttribute'},
                                                                      'ImportedFunctions': ['exit',
                                                                                            '__set_app_type',
                                                                                            'memcpy_s',
                                                                                            '_vsnwprintf',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_resetstkoflw',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_exit',
                                                                                            'memmove_s',
                                                                                            '_wcsicmp',
                                                                                            'malloc',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'wcsncpy_s',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '_cexit',
                                                                                            '_wcstoui64',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            '__setusermatherr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'free',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy',
                                                                                            'ShipAssertMsgW',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'NtAlpcConnectPort',
                                                                                            'NtAlpcAcceptConnectPort',
                                                                                            'NtAlpcSendWaitReceivePort',
                                                                                            'NtClose',
                                                                                            'RtlRandomEx',
                                                                                            'NtAlpcCreatePort',
                                                                                            'AlpcGetMessageAttribute',
                                                                                            'RtlSetLastWin32ErrorAndNtStatusFromNtStatus',
                                                                                            'RtlDestroyMemoryZone',
                                                                                            'RtlDestroyMemoryBlockLookaside',
                                                                                            'RtlUnlockMemoryZone',
                                                                                            'RtlAllocateMemoryBlockLookaside',
                                                                                            'RtlCreateMemoryZone',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlAllocateMemoryZone',
                                                                                            'RtlLockMemoryZone',
                                                                                            'RtlCreateMemoryBlockLookaside',
                                                                                            'RtlFreeMemoryBlockLookaside',
                                                                                            'RtlExtendMemoryBlockLookaside',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtQueryInformationProcess',
                                                                                            'EtwLogTraceEvent',
                                                                                            'ShipAssert',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventRegister',
                                                                                            'AlpcInitializeMessageAttribute',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitOnceBeginInitialize',
                                                                                            'WaitForSingleObject',
                                                                                            'ResetEvent',
                                                                                            'InitOnceExecuteOnce',
                                                                                            'DeleteCriticalSection',
                                                                                            'DuplicateHandle',
                                                                                            'GetHandleInformation',
                                                                                            'CloseHandle',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'RpcServerUnregisterIfEx',
                                                                                            'RpcServerRegisterIf3',
                                                                                            'NdrServerCallAll',
                                                                                            'NdrServerCall2',
                                                                                            'I_RpcBindingInqTransportType',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CoTaskMemRealloc',
                                                                                            'StringFromCLSID',
                                                                                            'CoRevertToSelf',
                                                                                            'CoImpersonateClient',
                                                                                            'PropVariantClear',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'MakeAbsoluteSD',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapDestroy',
                                                                                            'HeapSetInformation',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadResource',
                                                                                            'GetModuleHandleW',
                                                                                            'SizeofResource',
                                                                                            'FindResourceExW',
                                                                                            'GetCommandLineW',
                                                                                            'VirtualLock',
                                                                                            'SetProcessWorkingSetSizeEx',
                                                                                            'GetProcessWorkingSetSizeEx',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'VirtualUnlock',
                                                                                            'CreateFileMappingW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CharNextW',
                                                                                            'MultiByteToWideChar',
                                                                                            'OutputDebugStringA',
                                                                                            'WerRegisterMemoryBlock',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'lstrcmpiW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'TraceEvent',
                                                                                            'TraceMessage',
                                                                                            'EventWrite',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 178,
                                                                      'NumberOfSections': 11,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 8704,
                                                                                       '.pdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 224768,
                                                                                       'RT_BSS\x00\x00': 0,
                                                                                       'RT_CODE\x00': 1536,
                                                                                       'RT_CONST': 1024,
                                                                                       'RT_DATA\x00': 512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/20a3abd5e7ad32389dc8828873c947db87d43385993c51b811c219619791220c'},
 '20d21eb87a51386492f603ae9e84a961e797009839cdf90450467b623975eba4': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 19992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 20480,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/20d21eb87a51386492f603ae9e84a961e797009839cdf90450467b623975eba4'},
 '21272fa2b2a5b2dfd8741d80a5b4031dd673dd9eee54e0b3d012b1e04efec139': {'AddressOfEntryPoint': 10414,
                                                                      'DebugRVA': 10140,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1520,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/21272fa2b2a5b2dfd8741d80a5b4031dd673dd9eee54e0b3d012b1e04efec139'},
 '218dedc696c79720826f82fe7704824c02c72f057a5ec45d8563e40fec479399': {'AddressOfEntryPoint': 57488,
                                                                      'DebugRVA': 5120,
                                                                      'DebugSize': 28,
                                                                      'Dll': 16704,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 552960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntdll.dll': 'RtlUnwind'},
                                                                      'ImportedFunctions': ['_stricmp',
                                                                                            '_wcsicmp',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtSetInformationFile',
                                                                                            'NtClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'NtDelayExecution',
                                                                                            '_wcsupr',
                                                                                            'LdrSetMUICacheType',
                                                                                            'NtLoadDriver',
                                                                                            'NtOpenFile',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            '_aullshr',
                                                                                            'isspace',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlNormalizeProcessParams',
                                                                                            'NtQueryAttributesFile',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtSetThreadExecutionState',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtFsControlFile',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'wcstoul',
                                                                                            '_wcstoui64',
                                                                                            'NtCreateFile',
                                                                                            'NtReadFile',
                                                                                            'RtlRaiseStatus',
                                                                                            'NtWriteFile',
                                                                                            'memmove',
                                                                                            'RtlQueryRegistryValuesEx',
                                                                                            'RtlRandomEx',
                                                                                            'NtQueryPerformanceCounter',
                                                                                            'NtOpenKey',
                                                                                            'NtQueryValueKey',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            'RtlMultiByteToUnicodeN',
                                                                                            'RtlOemToUnicodeN',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            'RtlUnicodeToOemN',
                                                                                            '_wcslwr',
                                                                                            'wcschr',
                                                                                            'NtDisplayString',
                                                                                            'NtSerializeBoot',
                                                                                            'swprintf_s',
                                                                                            'NtCreateEvent',
                                                                                            'NtWaitForMultipleObjects',
                                                                                            'NtCancelIoFile',
                                                                                            'isprint',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtShutdownSystem',
                                                                                            'NtQuerySystemTime',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'RtlGetVersion',
                                                                                            'RtlTimeToTimeFields',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'RtlSizeHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlLocalTimeToSystemTime',
                                                                                            'wcsncmp',
                                                                                            'RtlFindMessage',
                                                                                            'RtlInitAnsiStringEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlFormatMessage',
                                                                                            'qsort',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'RtlComputeCrc32',
                                                                                            'DbgPrint',
                                                                                            'RtlCrc64',
                                                                                            'RtlUpcaseUnicodeString',
                                                                                            'RtlTimeFieldsToTime',
                                                                                            'RtlSystemTimeToLocalTime',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCopySid',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlQueryInformationAcl',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlNewSecurityObject',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlInitializeGenericTable',
                                                                                            'RtlInsertElementGenericTable',
                                                                                            'RtlInitializeBitMap',
                                                                                            'RtlSetBits',
                                                                                            'RtlLookupElementGenericTable',
                                                                                            'RtlClearBits',
                                                                                            'RtlFindSetBits',
                                                                                            'RtlDeleteElementGenericTable',
                                                                                            'RtlEnumerateGenericTableWithoutSplaying',
                                                                                            'RtlNumberOfSetBits',
                                                                                            'DbgPrintEx',
                                                                                            'NtFlushBuffersFile',
                                                                                            '_alldiv',
                                                                                            '_allmul',
                                                                                            '_allrem',
                                                                                            '_allshl',
                                                                                            '_aulldiv',
                                                                                            '_aulldvrm',
                                                                                            '_chkstk',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'RtlUnwind'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 123,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 271808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 271872,
                                                                                       '.text\x00\x00\x00': 531456},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/218dedc696c79720826f82fe7704824c02c72f057a5ec45d8563e40fec479399'},
 '21cdf6c23feb322ed2fde9cff276b1b1b758cdbaae3268a2b8b025e2f78326dd': {'AddressOfEntryPoint': 39312,
                                                                      'DebugRVA': 46224,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'KERNEL32.dll': 'GlobalMemoryStatusEx',
                                                                                      'MSVCR120.dll': 'memset',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'WSOCK32.dll': 'WSAStartup',
                                                                                      'libglib-2.0-0.dll': 'g_match_info_next',
                                                                                      'libgmodule-2.0-0.dll': 'g_module_close',
                                                                                      'libwireshark.dll': 'epan_free',
                                                                                      'libwiretap.dll': 'wtap_block_get_string_option_value',
                                                                                      'libwsutil.dll': 'nstime_set_zero'},
                                                                      'ImportedFunctions': ['PeekNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'TerminateProcess',
                                                                                            'ReadFile',
                                                                                            'CreatePipe',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'CreateEventW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateFileW',
                                                                                            'WaitNamedPipeW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'DecodePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'VerifyVersionInfoW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'VerSetConditionMask',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetSystemMetrics',
                                                                                            'epan_new',
                                                                                            'epan_dissect_init',
                                                                                            'epan_dissect_reset',
                                                                                            'tvb_ws_mempbrk_pattern_guint8',
                                                                                            'tvb_new',
                                                                                            'prefs_find_module',
                                                                                            'prefs_find_preference',
                                                                                            'prefs_register_string_preference',
                                                                                            'frame_data_destroy',
                                                                                            'frame_data_init',
                                                                                            'frame_data_set_before_dissect',
                                                                                            'frame_data_set_after_dissect',
                                                                                            'wmem_free',
                                                                                            'wmem_packet_scope',
                                                                                            'wmem_strdup_printf',
                                                                                            'register_all_protocols',
                                                                                            'register_all_protocol_handoffs',
                                                                                            'epan_init',
                                                                                            'epan_cleanup',
                                                                                            'epan_dissect_run_with_taps',
                                                                                            'epan_dissect_prime_dfilter',
                                                                                            'epan_dissect_cleanup',
                                                                                            'epan_get_compiled_version_info',
                                                                                            'val_to_str_const',
                                                                                            'val64_to_str_const',
                                                                                            'val_to_str_ext_const',
                                                                                            'rval_to_str_const',
                                                                                            'ftype_name',
                                                                                            'fvalue_string_repr_len',
                                                                                            'fvalue_to_string_repr',
                                                                                            'fvalue_get_uinteger',
                                                                                            'fvalue_get_sinteger',
                                                                                            'fvalue_get_uinteger64',
                                                                                            'fvalue_get_sinteger64',
                                                                                            'proto_report_dissector_bug',
                                                                                            'proto_registrar_get_byname',
                                                                                            'proto_get_finfo_ptr_array',
                                                                                            'proto_field_display_to_string',
                                                                                            'gbl_resolv_flags',
                                                                                            'start_requested_stats',
                                                                                            'register_tap_listener',
                                                                                            'disable_name_resolution',
                                                                                            'build_column_format_array',
                                                                                            'prefs_set_pref',
                                                                                            'read_prefs',
                                                                                            'prefs_apply_all',
                                                                                            'string_to_name_resolve',
                                                                                            'set_disabled_heur_dissector_list',
                                                                                            'read_disabled_heur_dissector_list',
                                                                                            'set_disabled_protos_list',
                                                                                            'read_disabled_protos_list',
                                                                                            'timestamp_set_seconds_type',
                                                                                            'timestamp_set_precision',
                                                                                            'timestamp_set_type',
                                                                                            'dfilter_apply_edt',
                                                                                            'dfilter_compile',
                                                                                            'find_dissector',
                                                                                            'epan_free',
                                                                                            'wtap_file_get_idb_info',
                                                                                            'wtap_seek_read',
                                                                                            'wtap_phdr_init',
                                                                                            'wtap_phdr_cleanup',
                                                                                            'wtap_init',
                                                                                            'wtap_strerror',
                                                                                            'wtap_pcap_encap_to_wtap_encap',
                                                                                            'wtap_block_get_string_option_value',
                                                                                            'ws_buffer_free',
                                                                                            'get_copyright_info',
                                                                                            'get_os_version_info',
                                                                                            'get_extcap_dir',
                                                                                            'file_exists',
                                                                                            'utf_8to16',
                                                                                            'get_progfile_dir',
                                                                                            'protect_arg',
                                                                                            'getopt_long',
                                                                                            'ws_buffer_init',
                                                                                            'cmdarg_err_init',
                                                                                            'cmdarg_err',
                                                                                            'cmdarg_err_cont',
                                                                                            'ws_add_crash_info',
                                                                                            'init_progfile_dir',
                                                                                            'file_open_error_message',
                                                                                            'ws_init_dll_search_path',
                                                                                            'create_app_running_mutex',
                                                                                            'init_process_policies',
                                                                                            'relinquish_special_privs_perm',
                                                                                            'init_report_err',
                                                                                            'utf_16to8',
                                                                                            'arg_list_utf_16to8',
                                                                                            'optarg',
                                                                                            'optind',
                                                                                            'ws_module_open',
                                                                                            'nstime_set_zero',
                                                                                            'g_module_symbol',
                                                                                            'g_module_close',
                                                                                            'WSAStartup',
                                                                                            'g_slist_foreach',
                                                                                            'g_slist_append',
                                                                                            'g_slist_free',
                                                                                            'g_list_prepend',
                                                                                            'g_strlcpy',
                                                                                            'g_strerror',
                                                                                            'g_log_set_handler',
                                                                                            'g_string_truncate',
                                                                                            'g_snprintf',
                                                                                            'g_ptr_array_set_size',
                                                                                            'g_strv_length',
                                                                                            'g_ascii_strncasecmp',
                                                                                            'g_strlcat',
                                                                                            'g_strescape',
                                                                                            'g_string_insert_c',
                                                                                            'g_string_sized_new',
                                                                                            'g_utf8_to_utf16',
                                                                                            'g_setenv_utf8',
                                                                                            'g_getenv_utf8',
                                                                                            'g_ascii_strcasecmp',
                                                                                            'g_ascii_strtoll',
                                                                                            'g_ascii_strtoull',
                                                                                            'g_strtod',
                                                                                            'g_strstr_len',
                                                                                            'g_match_info_fetch',
                                                                                            'g_str_equal',
                                                                                            'g_free',
                                                                                            'g_malloc',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_string_new',
                                                                                            'g_string_append',
                                                                                            'g_string_append_printf',
                                                                                            'g_strsplit',
                                                                                            'g_strjoinv',
                                                                                            'g_strfreev',
                                                                                            'g_array_insert_vals',
                                                                                            'g_array_remove_index',
                                                                                            'g_ptr_array_new',
                                                                                            'g_ptr_array_free',
                                                                                            'g_ptr_array_add',
                                                                                            'g_ptr_array_foreach',
                                                                                            'g_dir_close',
                                                                                            'g_match_info_matches',
                                                                                            'g_dir_read_name_utf8',
                                                                                            'g_path_get_basename',
                                                                                            'g_malloc0',
                                                                                            'g_malloc_n',
                                                                                            'g_malloc0_n',
                                                                                            'g_list_free',
                                                                                            'g_list_append',
                                                                                            'g_list_delete_link',
                                                                                            'g_list_first',
                                                                                            'g_list_foreach',
                                                                                            'g_list_sort',
                                                                                            'g_hash_table_new_full',
                                                                                            'g_hash_table_destroy',
                                                                                            'g_hash_table_insert',
                                                                                            'g_hash_table_remove_all',
                                                                                            'g_hash_table_lookup',
                                                                                            'g_hash_table_foreach_remove',
                                                                                            'g_hash_table_size',
                                                                                            'g_hash_table_get_keys',
                                                                                            'g_dir_open_utf8',
                                                                                            'g_str_hash',
                                                                                            'g_source_remove',
                                                                                            'g_child_watch_add',
                                                                                            'g_string_free',
                                                                                            'g_string_printf',
                                                                                            'g_log',
                                                                                            'g_regex_new',
                                                                                            'g_regex_unref',
                                                                                            'g_regex_replace',
                                                                                            'g_spawn_close_pid',
                                                                                            'g_ascii_strdown',
                                                                                            'g_strdup',
                                                                                            'g_strdup_printf',
                                                                                            'g_strconcat',
                                                                                            'g_strcmp0',
                                                                                            'g_list_find_custom',
                                                                                            'g_regex_match_simple',
                                                                                            'g_regex_match',
                                                                                            'g_regex_match_full',
                                                                                            'g_match_info_free',
                                                                                            'g_match_info_next',
                                                                                            'getenv',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_setmode',
                                                                                            '_read',
                                                                                            'strstr',
                                                                                            'strncmp',
                                                                                            'vfprintf',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            'ferror',
                                                                                            '__iob_func',
                                                                                            'strtol',
                                                                                            'exit',
                                                                                            '_errno',
                                                                                            '_write',
                                                                                            '_open_osfhandle',
                                                                                            'sscanf',
                                                                                            '_get_osfhandle',
                                                                                            '_time64',
                                                                                            '_localtime64',
                                                                                            'strftime',
                                                                                            'setlocale',
                                                                                            'strchr',
                                                                                            'printf',
                                                                                            'memset',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'CloseServiceHandle'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 271,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 290928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 19456,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 291328,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/21cdf6c23feb322ed2fde9cff276b1b1b758cdbaae3268a2b8b025e2f78326dd'},
 '22031a847abe683643a059f08132acf860dce379114e60e57fb03d970f748d9b': {'AddressOfEntryPoint': 5832,
                                                                      'DebugRVA': 185728,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'FindFirstFileW',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SETUPAPI.dll': 'SetupDefaultQueueCallbackW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'WS2_32.dll': 'inet_ntoa',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesW',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['UpdateDriverForPlugAndPlayDevicesW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FatalAppExitA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetFullPathNameW',
                                                                                            'lstrlenA',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'HeapFree',
                                                                                            'FindFirstFileW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegCloseKey',
                                                                                            'StartServiceW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiCreateDeviceInfoW',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'SetupInitDefaultQueueCallback',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupUninstallOEMInfW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupDiDeleteDeviceInfo',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetClassDevsExW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'inet_addr',
                                                                                            'htonl',
                                                                                            'inet_ntoa',
                                                                                            'CLSIDFromString',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'SafeArrayPutElement',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'GetErrorInfo',
                                                                                            'VariantChangeType',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysStringByteLen',
                                                                                            'GetAdaptersAddresses'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 53760,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 180224},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/22031a847abe683643a059f08132acf860dce379114e60e57fb03d970f748d9b'},
 '223bda934134cc5fb68f79c15d4fbef8d6ae271b96942585529ee9fdbdc717f0': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 147104,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 147456,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/223bda934134cc5fb68f79c15d4fbef8d6ae271b96942585529ee9fdbdc717f0'},
 '227699fece9be1f2ce70455de491f57e4c7280f0a16017a55c86c2dad4543ac1': {'AddressOfEntryPoint': 25104,
                                                                      'DebugRVA': 4384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueW',
                                                                                      'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'USER32.dll': 'PostThreadMessageW',
                                                                                      'msvcrt.dll': 'memcmp',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'RaiseException',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'IsWow64Process',
                                                                                            'GetCurrentProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'CharNextW',
                                                                                            'CharUpperW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'PostThreadMessageW',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_lock',
                                                                                            'memset',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '_purecall',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'memcpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcsncpy_s',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            'memcmp',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysFreeString',
                                                                                            'VarUI4FromStr'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 101,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 6456,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 6656,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/227699fece9be1f2ce70455de491f57e4c7280f0a16017a55c86c2dad4543ac1'},
 '2294fed3a1625476ebc1afc219793fa9ed4ce56ae036926b79776cbac1ec2b30': {'AddressOfEntryPoint': 6672,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DelayLoadFailureHook',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'HeapSetInformation',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'DelayLoadFailureHook',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_snwscanf_s',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            'IIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 41,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/2294fed3a1625476ebc1afc219793fa9ed4ce56ae036926b79776cbac1ec2b30'},
 '23056509380a27dbf21376d642cc37b96e1d6afa4e8e4369085def4986d6a5be': {'AddressOfEntryPoint': 42489,
                                                                      'DebugRVA': 115312,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'ole32.dll': 'CoCreateInstance',
                                                                                      'urlmon.dll': 'URLDownloadToFileW'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateDirectoryW',
                                                                                            'WriteFile',
                                                                                            'SetFileTime',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiW',
                                                                                            'LeaveCriticalSection',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'DecodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'MoveFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetLastError',
                                                                                            'GetTempPathW',
                                                                                            'lstrlenW',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'VerSetConditionMask',
                                                                                            'GetStringTypeW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'VerifyVersionInfoW',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetStartupInfoW',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'RtlUnwind',
                                                                                            'GetProcessHeap',
                                                                                            'MessageBoxW',
                                                                                            'DestroyWindow',
                                                                                            'LoadStringW',
                                                                                            'ExitWindowsEx',
                                                                                            'GetActiveWindow',
                                                                                            'wsprintfW',
                                                                                            'CharNextW',
                                                                                            'GetUserNameW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetTokenInformation',
                                                                                            'RegCloseKey',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'VariantInit',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'URLDownloadToFileW',
                                                                                            'InitCommonControlsEx'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 123,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 93177824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 42496,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 93177856,
                                                                                       '.text\x00\x00\x00': 107008},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/23056509380a27dbf21376d642cc37b96e1d6afa4e8e4369085def4986d6a5be'},
 '232074ad00344d60f4f65b3bb900148ba1f50ef6a648b414e7cbb362d8137051': {'AddressOfEntryPoint': 38297,
                                                                      'DebugRVA': 176928,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 176128,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'RestoreDC',
                                                                                      'KERNEL32.dll': 'IsValidLocale',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyW',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'BitBlt',
                                                                                            'SetBkColor',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SaveDC',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'ExcludeClipRect',
                                                                                            'GetObjectW',
                                                                                            'RestoreDC',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'InterlockedCompareExchange',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'Sleep',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'FlushInstructionCache',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'DeleteFileW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetCommandLineW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'FindResourceExW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'TerminateProcess',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetCurrentThread',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetStdHandle',
                                                                                            'HeapFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSize',
                                                                                            'GetStringTypeW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapReAlloc',
                                                                                            'FatalAppExitA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'InterlockedExchange',
                                                                                            'GetLocaleInfoW',
                                                                                            'RtlUnwind',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'SetWindowLongW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBoxW',
                                                                                            'SetProcessDefaultLayout',
                                                                                            'GetWindowLongW',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'ScreenToClient',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetWindow',
                                                                                            'IsWindow',
                                                                                            'GetWindowRect',
                                                                                            'IsWindowVisible',
                                                                                            'GetDlgCtrlID',
                                                                                            'LoadImageW',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'UnregisterClassA',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetParent',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'DestroyWindow',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowTextW',
                                                                                            'wsprintfW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'InflateRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'LoadStringW',
                                                                                            'InitCommonControlsEx'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 166,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 52884060,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.rdata\x00\x00': 42496,
                                                                                       '.reloc\x00\x00': 40960,
                                                                                       '.rsrc\x00\x00\x00': 52884480,
                                                                                       '.text\x00\x00\x00': 169472},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/232074ad00344d60f4f65b3bb900148ba1f50ef6a648b414e7cbb362d8137051'},
 '246d976fbbbf12bce8e095d490d742378b153f96433e7929e6960c5e7453501c': {'AddressOfEntryPoint': 17116,
                                                                      'DebugRVA': 4512,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 268435456,
                                                                      'ImageVersion': 8,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyA'},
                                                                      'ImportedFunctions': ['RegDeleteValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwind',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'SetFilePointer',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'HeapSize',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'SHDeleteKeyA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1588,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 67072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/246d976fbbbf12bce8e095d490d742378b153f96433e7929e6960c5e7453501c'},
 '24902c6b33d83ee0522bfd8a7f1a96fca980c6d9943684570ff70cbbb9a494ae': {'AddressOfEntryPoint': 38727,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemInfo'},
                                                                      'ImportedFunctions': ['GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'DeleteFileA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrlenA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'lstrcpyA',
                                                                                            'FindFirstFileA',
                                                                                            'lstrcatA',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'Sleep',
                                                                                            'GetSystemDirectoryA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CopyFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'lstrcpynA',
                                                                                            'GetCommandLineA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetTickCount',
                                                                                            'SetPriorityClass',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'CreateThread',
                                                                                            'SetEndOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'InterlockedExchange',
                                                                                            'RaiseException',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'GetStdHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'HeapAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'VirtualQuery',
                                                                                            'HeapSize',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 116,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/24902c6b33d83ee0522bfd8a7f1a96fca980c6d9943684570ff70cbbb9a494ae'},
 '249f5d2590d0025d460552c2388a730cb4ce132386d111a27afb8763643da2c9': {'AddressOfEntryPoint': 172816,
                                                                      'DebugRVA': 4800,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 196608,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'CRYPT32.dll': 'CertGetCertificateContextProperty',
                                                                                      'IEADVPACK.dll': 'ExecuteCabW',
                                                                                      'KERNEL32.dll': 'GetUserDefaultLocaleName',
                                                                                      'NETAPI32.dll': 'NetGetJoinInformation',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathIsNetworkPathW',
                                                                                      'USER32.dll': 'GetShellWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeExW',
                                                                                      'WININET.dll': 'InternetReadFile',
                                                                                      'iedkcs32.dll': 'BrandIEActiveSetup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'urlmon.dll': 'CreateUri'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegSetValueW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'CryptGenRandom',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'EventWrite',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'AddMandatoryAce',
                                                                                            'SetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'IsValidSid',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetLengthSid',
                                                                                            'AddAce',
                                                                                            'FreeSid',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeAcl',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'GetAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'DeleteAce',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'CryptVerifySignatureW',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptDeriveKey',
                                                                                            'CryptSetKeyParam',
                                                                                            'CryptGetKeyParam',
                                                                                            'CryptEncrypt',
                                                                                            'CryptSetHashParam',
                                                                                            'CheckTokenMembership',
                                                                                            'OpenThreadToken',
                                                                                            'OpenFileMappingW',
                                                                                            'GetCurrentThread',
                                                                                            'QueueUserWorkItem',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'LCMapStringW',
                                                                                            'GetSystemTime',
                                                                                            'CreateFileMappingW',
                                                                                            'OpenMutexW',
                                                                                            'GetFileSizeEx',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FlushViewOfFile',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetFullPathNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetSystemInfo',
                                                                                            'GetProductInfo',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'VirtualAlloc',
                                                                                            'GetFileAttributesW',
                                                                                            'OpenProcess',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetNativeSystemInfo',
                                                                                            'IsWow64Process',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'DuplicateHandle',
                                                                                            'GetStdHandle',
                                                                                            'GetTempPathW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CompareStringOrdinal',
                                                                                            'WaitForSingleObject',
                                                                                            'GetTempFileNameW',
                                                                                            'SetFilePointer',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExA',
                                                                                            'GetShortPathNameW',
                                                                                            'FindNextFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LockResource',
                                                                                            'FindClose',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'lstrcmpW',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SizeofResource',
                                                                                            'WriteFile',
                                                                                            'GetTickCount',
                                                                                            'FindFirstFileExW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindFirstFileW',
                                                                                            'SetPriorityClass',
                                                                                            'LocalFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetVersionExW',
                                                                                            'Sleep',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetUserDefaultLocaleName',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'PostMessageW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetShellWindow',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_vsnwprintf',
                                                                                            '_time64',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_wcsnicmp',
                                                                                            'wcsrchr',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_wfopen_s',
                                                                                            'fgetws',
                                                                                            'swscanf_s',
                                                                                            'fclose',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            'memcmp',
                                                                                            'sprintf_s',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy_s',
                                                                                            'wcschr',
                                                                                            'iswalpha',
                                                                                            'wcscat_s',
                                                                                            'rand_s',
                                                                                            '_purecall',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_ultow_s',
                                                                                            '_wtoi',
                                                                                            'isalnum',
                                                                                            'strnlen',
                                                                                            'wcsnlen',
                                                                                            'wcsncpy_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'memset',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHSetLocalizedName',
                                                                                            'SHChangeNotify',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHGetFolderPathW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RegRestoreAllW',
                                                                                            'ExecuteCabW',
                                                                                            'StrCmpIW',
                                                                                            'SHRegSetUSValueW',
                                                                                            'PathFileExistsW',
                                                                                            'SHDeleteKeyW',
                                                                                            'StrCmpNIW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'SHDeleteValueW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'StrCmpNIA',
                                                                                            'SHGetValueW',
                                                                                            'UrlApplySchemeW',
                                                                                            'PathIsURLW',
                                                                                            'UrlCanonicalizeW',
                                                                                            'UrlCreateFromPathW',
                                                                                            'SHSetValueW',
                                                                                            'SHStrDupW',
                                                                                            'SHRegDeleteUSValueW',
                                                                                            'StrStrW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'StrTrimW',
                                                                                            'SHCopyKeyW',
                                                                                            'StrCmpNA',
                                                                                            'StrCmpNW',
                                                                                            'UrlEscapeW',
                                                                                            'UrlUnescapeW',
                                                                                            'StrCmpW',
                                                                                            'StrStrIW',
                                                                                            'PathIsNetworkPathW',
                                                                                            'VarBstrCmp',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'VarBstrCat',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy',
                                                                                            'CoInitializeEx',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemFree',
                                                                                            'PropVariantClear',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'BrandIEActiveSetup',
                                                                                            'CryptStringToBinaryA',
                                                                                            'CryptBinaryToStringA',
                                                                                            'CertGetIntendedKeyUsage',
                                                                                            'CertGetEnhancedKeyUsage',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CertGetNameStringW',
                                                                                            'CertOpenStore',
                                                                                            'CertCreateCertificateContext',
                                                                                            'CertAddCertificateContextToStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CryptImportPublicKeyInfo',
                                                                                            'CertGetCertificateChain',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CryptHashCertificate',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CoInternetCreateSecurityManager',
                                                                                            'CreateIUriBuilder',
                                                                                            'CreateUri',
                                                                                            'InternetOpenW',
                                                                                            'InternetCanonicalizeUrlW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetCloseHandle',
                                                                                            'HttpSendRequestW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetReadFile',
                                                                                            'NetApiBufferFree',
                                                                                            'NetGetJoinInformation',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'GetFileVersionInfoSizeExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 309,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 523304,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 12288,
                                                                                       '.pdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 523776,
                                                                                       '.text\x00\x00\x00': 179200},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/249f5d2590d0025d460552c2388a730cb4ce132386d111a27afb8763643da2c9'},
 '25194b41833bc3c2a670ebbebd1fcd488c8ec9c438ec991358ee6e3d1df069c1': {'AddressOfEntryPoint': 10800,
                                                                      'DebugRVA': 4272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WriteConsoleW',
                                                                                      'SHELL32.dll': 'SHGetKnownFolderPath',
                                                                                      'ntdll.dll': 'RtlLookupFunctionEntry',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'GetCommandLineA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStartupInfoW',
                                                                                            'SetHandleCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'OutputDebugStringA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'CoTaskMemFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 37584,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/25194b41833bc3c2a670ebbebd1fcd488c8ec9c438ec991358ee6e3d1df069c1'},
 '252cd8ef43b3c4d21acd2ddcf1bc6a1546c682653c124dfba1289757662cb760': {'AddressOfEntryPoint': 4400,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4294967296,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'MoveFileExA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'CopyFileA',
                                                                                            'GetCommandLineA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 18,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/252cd8ef43b3c4d21acd2ddcf1bc6a1546c682653c124dfba1289757662cb760'},
 '2539f5d1c1adb549b2bbe8d819e3fd7927a65034828aa5606592430cc46dd937': {'AddressOfEntryPoint': 9824,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'StrCmpNIW',
                                                                                      'USER32.dll': 'DialogBoxParamW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'lstrlenW',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'EndDialog',
                                                                                            'SetWindowTextW',
                                                                                            'LoadStringW',
                                                                                            'LoadIconW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'ShowWindow',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgItem',
                                                                                            'DialogBoxParamW',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_vsnwprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__p__commode',
                                                                                            'memset',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteW',
                                                                                            'StrCmpNIW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 68496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 68608,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/2539f5d1c1adb549b2bbe8d819e3fd7927a65034828aa5606592430cc46dd937'},
 '259e2c3bc9b6655876caf607dd15c88c96cb532a26d5520bdebaa5d388714eb5': {'AddressOfEntryPoint': 17360,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSidToSidW',
                                                                                      'FirewallAPI.dll': 'FwFree',
                                                                                      'KERNEL32.dll': 'WaitForSingleObjectEx',
                                                                                      'WS2_32.dll': 'htonl',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'fwpuclnt.dll': 'FwpmEngineOpen0',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwTraceMessage'},
                                                                      'ImportedFunctions': ['ConvertSidToStringSidW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'CloseHandle',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetConsoleOutputCP',
                                                                                            'lstrcmpiW',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObjectEx',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_wsetlocale',
                                                                                            'swprintf_s',
                                                                                            '_except_handler4_common',
                                                                                            'towupper',
                                                                                            'wprintf',
                                                                                            '__p__fmode',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'RtlIpv6AddressToStringW',
                                                                                            'RtlIpv4AddressToStringW',
                                                                                            'RtlIsParentOfChildAppContainer',
                                                                                            'RtlFreeSid',
                                                                                            'RtlEqualSid',
                                                                                            'EtwTraceMessage',
                                                                                            'htonl',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FwpmEngineSetOption0',
                                                                                            'FwpmNetEventSubscribe1',
                                                                                            'FwpmEngineGetOption0',
                                                                                            'FwpmFreeMemory0',
                                                                                            'FwpmNetEventUnsubscribe0',
                                                                                            'FwpmEngineClose0',
                                                                                            'FwpmEngineOpen0',
                                                                                            'FwAlloc',
                                                                                            'IsAddressesEmpty',
                                                                                            'FwEmptyWFAddresses',
                                                                                            'NetworkIsolationEnumAppContainers',
                                                                                            'FwSidAndAttributesFree',
                                                                                            'NetworkIsolationSetAppContainerConfig',
                                                                                            'NetworkIsolationGetAppContainerConfig',
                                                                                            'FwSidCopy',
                                                                                            'FwFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 15360},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/259e2c3bc9b6655876caf607dd15c88c96cb532a26d5520bdebaa5d388714eb5'},
 '25b54326cc1a1388f60a34df319a665d8a9679d251829de498320b221dafc64c': {'AddressOfEntryPoint': 10944,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'NETAPI32.dll': 'NetJoinDomain',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'USERENV.dll': 'GetDefaultUserProfileDirectoryW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlInitUnicodeString'},
                                                                      'ImportedFunctions': ['CloseServiceHandle',
                                                                                            'OpenProcessToken',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'RegCreateKeyExW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegOpenKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegLoadKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'OpenEventW',
                                                                                            'CloseHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'CharUpperW',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            'wcschr',
                                                                                            'exit',
                                                                                            '_stricmp',
                                                                                            'memset',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtCreateEvent',
                                                                                            'NtOpenEvent',
                                                                                            'NtClose',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NetJoinDomain',
                                                                                            'GetDefaultUserProfileDirectoryW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 61,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/25b54326cc1a1388f60a34df319a665d8a9679d251829de498320b221dafc64c'},
 '25e36448bb77600c375eeeb497eff2ee0c519955d1d85fed1d60cd77d3e68825': {'AddressOfEntryPoint': 14511,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 372680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 372736,
                                                                                       '.text\x00\x00\x00': 29696},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/25e36448bb77600c375eeeb497eff2ee0c519955d1d85fed1d60cd77d3e68825'},
 '26200dcafbf67ed312e449bc4a10e09c9794c6a8e02d25eea19432fa45d747df': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 137228,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 137728,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/26200dcafbf67ed312e449bc4a10e09c9794c6a8e02d25eea19432fa45d747df'},
 '2648bf5f04685dc297ebafcf237ba24259d219f726ba7050b5d4739867ccd11f': {'AddressOfEntryPoint': 12864,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-com-l1-1-1.dll': 'CoCreateInstance',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleOutputCP',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileAttributesW',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'SizeofResource',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadPreferredUILanguages',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemDirectoryW',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'GetFileVersionInfoSizeExW',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'RegisterTraceGuidsW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'wbemcomn.dll': '?GetMemLogObject@@YGPAVCMemoryLog@@XZ'},
                                                                      'ImportedFunctions': ['exit',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '__wgetmainargs',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_lock',
                                                                                            '_XcptFilter',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_CxxThrowException',
                                                                                            '_onexit',
                                                                                            'setlocale',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_vsnwprintf',
                                                                                            '_wtol',
                                                                                            '_wtoi',
                                                                                            'towupper',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            'memset',
                                                                                            'LCMapStringW',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceMessage',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadResource',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'LockResource',
                                                                                            'FindResourceExW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'SizeofResource',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetFileAttributesW',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            '?Write@CMemoryLog@@QAEXJ@Z',
                                                                                            '?GetMemLogObject@@YGPAVCMemoryLog@@XZ'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 11776},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2648bf5f04685dc297ebafcf237ba24259d219f726ba7050b5d4739867ccd11f'},
 '2671795bc7c78a0cf195423640d8cd650d0d7b73a43352a6566389957ae82863': {'AddressOfEntryPoint': 100160,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 111120,
                                                                      'ExportSize': 115,
                                                                      'IATRVA': 147456,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ReportEventW',
                                                                                      'KERNEL32.dll': 'GetComputerNameW',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SspiCli.dll': 'LogonUserExExW',
                                                                                      'USER32.dll': 'CharNextA',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'DebugBreak',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'FindClose',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenThreadToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegDeleteValueW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'IsCharAlphaNumericW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForSingleObject',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'VerQueryValueW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AllocateAndInitializeSid',
                                                                                      'api-ms-win-security-lsalookup-l1-1-1.dll': 'LookupAccountNameLocalW',
                                                                                      'api-ms-win-security-lsapolicy-l1-1-0.dll': 'LsaRemoveAccountRights',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': '_wcsnicmp'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'BuildTrusteeWithNameW',
                                                                                            'BuildSecurityDescriptorW',
                                                                                            'LsaLookupNames',
                                                                                            'BuildTrusteeWithSidW',
                                                                                            'RegisterEventSourceW',
                                                                                            'DeregisterEventSource',
                                                                                            'ReportEventW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetLocalTime',
                                                                                            'HeapSetInformation',
                                                                                            'OpenEventW',
                                                                                            'GetVersionExA',
                                                                                            'CloseHandle',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'WriteFile',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetEvent',
                                                                                            'MoveFileExW',
                                                                                            'lstrlenA',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'GetFileSizeEx',
                                                                                            'ReadFile',
                                                                                            'ReadProcessMemory',
                                                                                            'OpenProcess',
                                                                                            'SetFilePointerEx',
                                                                                            'LocalFree',
                                                                                            'LocalSize',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'GetComputerNameW',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '_local_unwind4',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcstombs',
                                                                                            '_strtime',
                                                                                            '_vsnwprintf',
                                                                                            'clock',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_stricmp',
                                                                                            'wcschr',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'realloc',
                                                                                            '_wstrtime',
                                                                                            '_waccess',
                                                                                            '_wstrdate',
                                                                                            'memset',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'CLSIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoGetObjectContext',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoInitializeEx',
                                                                                            'CharNextW',
                                                                                            'CharPrevW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetThreadToken',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcessToken',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetThreadContext',
                                                                                            'OpenThreadToken',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'LoadStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'LockResource',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'RegFlushKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegDeleteValueW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CompareStringW',
                                                                                            'GetTokenInformation',
                                                                                            'GetSidSubAuthority',
                                                                                            'IsWellKnownSid',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'AddAce',
                                                                                            'InitializeAcl',
                                                                                            'CreatePrivateObjectSecurityEx',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'CopySid',
                                                                                            'DestroyPrivateObjectSecurity',
                                                                                            'GetSidLengthRequired',
                                                                                            'GetLengthSid',
                                                                                            'FreeSid',
                                                                                            'AddAccessAllowedAce',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'LogonUserExExW',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringW',
                                                                                            'DebugBreak',
                                                                                            'FormatMessageW',
                                                                                            'VerQueryValueW',
                                                                                            'LookupAccountSidLocalW',
                                                                                            'LookupAccountNameLocalW',
                                                                                            'LsaEnumerateAccountRights',
                                                                                            'LsaAddAccountRights',
                                                                                            'LsaClose',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'LsaStorePrivateData',
                                                                                            'LsaRetrievePrivateData',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaRemoveAccountRights',
                                                                                            'CharPrevA',
                                                                                            'CharNextA',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'wcsrchr',
                                                                                            'NtQueryInformationProcess',
                                                                                            '_wcsnicmp'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 185,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 107520},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/2671795bc7c78a0cf195423640d8cd650d0d7b73a43352a6566389957ae82863'},
 '26807814a3a72c140e09403e8cee276b057421187ee3d473654f15fc31cb3230': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 192456,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 192512,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/26807814a3a72c140e09403e8cee276b057421187ee3d473654f15fc31cb3230'},
 '2686be85f963d0d0bb275e92e5b543280d8742cf10772303e3189d0719b6a277': {'AddressOfEntryPoint': 18912,
                                                                      'DebugRVA': 4288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RevertToSelf',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'SetTaskmanWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINSTA.dll': 'WinStationRevertFromServicesSession',
                                                                                      'WTSAPI32.dll': 'WTSRegisterSessionNotification',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlAllocateAndInitializeSid'},
                                                                      'ImportedFunctions': ['CheckTokenMembership',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'DeregisterEventSource',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RevertToSelf',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'CompareFileTime',
                                                                                            'K32EnumProcessModules',
                                                                                            'K32GetModuleInformation',
                                                                                            'K32GetModuleBaseNameW',
                                                                                            'lstrcmpW',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'K32GetModuleFileNameExW',
                                                                                            'SetLastError',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'CreateEventW',
                                                                                            'HeapSetInformation',
                                                                                            'UnmapViewOfFile',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'DelayLoadFailureHook',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CreateSolidBrush',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'RegisterShellHookWindow',
                                                                                            'SetTimer',
                                                                                            'EnumWindows',
                                                                                            'PostQuitMessage',
                                                                                            'GetLastInputInfo',
                                                                                            'IsWindow',
                                                                                            'DestroyWindow',
                                                                                            'MoveWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'KillTimer',
                                                                                            'DefWindowProcW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'ShowWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetShellWindow',
                                                                                            'GetWindow',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'LoadStringW',
                                                                                            'LoadIconW',
                                                                                            'DestroyIcon',
                                                                                            'FlashWindowEx',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowInfo',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetClassLongW',
                                                                                            'FindWindowW',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'SendMessageW',
                                                                                            'GetClassNameW',
                                                                                            'SetTaskmanWindow',
                                                                                            '_atoi64',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'wcsrchr',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_vsnwprintf',
                                                                                            '_initterm',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            'wcscmp',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmAddToAverageDWORD',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'RtlFreeSid',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'WTSUnRegisterSessionNotification',
                                                                                            'WTSDisconnectSession',
                                                                                            'WTSQueryUserToken',
                                                                                            'WTSRegisterSessionNotification',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'WinStationGetSessionIds',
                                                                                            'WinStationSwitchToServicesSession',
                                                                                            'WinStationRevertFromServicesSession',
                                                                                            'SHGetFolderPathW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 13456,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 18944},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2686be85f963d0d0bb275e92e5b543280d8742cf10772303e3189d0719b6a277'},
 '26d183ff2c2e7157dcf9c04513f0bd368b19711ebb15b58f730c9f23ff1115d4': {'AddressOfEntryPoint': 47331,
                                                                      'DebugRVA': 78320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'HeapSize',
                                                                                      'USER32.dll': 'SendMessageA'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'GetCommandLineA',
                                                                                            'LocalFree',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'DeleteFileA',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'LocalAlloc',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'FreeResource',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'SetStdHandle',
                                                                                            'GetLocalTime',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileType',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'HeapAlloc',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'GetStdHandle',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetHandleCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'DestroyWindow',
                                                                                            'SendMessageA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 100,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 38370064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.reloc\x00\x00': 27648,
                                                                                       '.rsrc\x00\x00\x00': 38370304,
                                                                                       '.text\x00\x00\x00': 72704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/26d183ff2c2e7157dcf9c04513f0bd368b19711ebb15b58f730c9f23ff1115d4'},
 '26fcd3c90e15f1b096c0b5b44c5e4ef251687638222bcdf8eacd71e151963432': {'AddressOfEntryPoint': 18710,
                                                                      'DebugRVA': 25152,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DecodePointer',
                                                                                      'MSVCR120.dll': 'strchr',
                                                                                      'libglib-2.0-0.dll': 'g_strdup',
                                                                                      'libwiretap.dll': 'wtap_snapshot_length',
                                                                                      'libwsutil.dll': 'get_copyright_info'},
                                                                      'ImportedFunctions': ['GlobalMemoryStatusEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'wtap_buf_ptr',
                                                                                            'wtap_block_array_free',
                                                                                            'wtap_block_add_string_option_format',
                                                                                            'wtap_block_get_string_option_value',
                                                                                            'wtap_init',
                                                                                            'wtap_open_offline',
                                                                                            'wtap_read',
                                                                                            'wtap_phdr',
                                                                                            'wtap_file_type_subtype',
                                                                                            'wtap_file_encap',
                                                                                            'wtap_file_get_shb_for_new_file',
                                                                                            'wtap_file_get_idb_info',
                                                                                            'wtap_file_get_nrb_for_new_file',
                                                                                            'wtap_dump_can_open',
                                                                                            'wtap_dump_open_ng',
                                                                                            'wtap_dump_open_stdout_ng',
                                                                                            'wtap_dump',
                                                                                            'wtap_dump_close',
                                                                                            'wtap_file_type_subtype_string',
                                                                                            'wtap_file_type_subtype_short_string',
                                                                                            'wtap_short_string_to_file_type_subtype',
                                                                                            'wtap_encap_string',
                                                                                            'wtap_encap_short_string',
                                                                                            'wtap_short_string_to_encap',
                                                                                            'register_all_wiretap_modules',
                                                                                            'wtap_get_num_file_types_subtypes',
                                                                                            'wtap_get_num_encap_types',
                                                                                            'wtap_strerror',
                                                                                            'wtap_snapshot_length',
                                                                                            'get_os_version_info',
                                                                                            'nstime_set_unset',
                                                                                            'nstime_is_unset',
                                                                                            'nstime_delta',
                                                                                            'nstime_cmp',
                                                                                            'getopt_long',
                                                                                            'arg_list_utf_16to8',
                                                                                            'strptime',
                                                                                            'ws_add_crash_info',
                                                                                            'init_progfile_dir',
                                                                                            'create_app_running_mutex',
                                                                                            'md5_init',
                                                                                            'md5_append',
                                                                                            'md5_finish',
                                                                                            'scan_plugins',
                                                                                            'init_process_policies',
                                                                                            'init_report_err',
                                                                                            'ws_ascii_strnatcmp',
                                                                                            'optarg',
                                                                                            'optind',
                                                                                            'optopt',
                                                                                            'get_copyright_info',
                                                                                            'g_string_new',
                                                                                            'g_string_append',
                                                                                            'g_string_append_printf',
                                                                                            'g_strsplit',
                                                                                            'g_strjoinv',
                                                                                            'g_strfreev',
                                                                                            'g_malloc',
                                                                                            'g_malloc_n',
                                                                                            'g_slist_free',
                                                                                            'g_slist_insert_sorted',
                                                                                            'g_free',
                                                                                            'g_snprintf',
                                                                                            'g_string_free',
                                                                                            'g_strlcpy',
                                                                                            'g_ascii_strtod',
                                                                                            'g_slist_foreach',
                                                                                            'g_strconcat',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_tree_new_full',
                                                                                            'g_tree_destroy',
                                                                                            'g_tree_replace',
                                                                                            'g_tree_lookup',
                                                                                            'g_strdup',
                                                                                            'strtol',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_getpid',
                                                                                            '_time64',
                                                                                            '_mktime64',
                                                                                            '_localtime64',
                                                                                            'strrchr',
                                                                                            'memmove',
                                                                                            'strtoul',
                                                                                            'printf',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            'atoi',
                                                                                            'exit',
                                                                                            'sscanf',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'memset',
                                                                                            'setlocale',
                                                                                            'strchr'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 128,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 289280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 289280,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/26fcd3c90e15f1b096c0b5b44c5e4ef251687638222bcdf8eacd71e151963432'},
 '26fe23ab440c181bab735c5eba34a487a4db2c01d94f9ae26cc7082ccd6797fb': {'AddressOfEntryPoint': 43672,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 41472,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/26fe23ab440c181bab735c5eba34a487a4db2c01d94f9ae26cc7082ccd6797fb'},
 '27035890a36f6d22de9d8043f4006ad84a6fff6423d06d9a3b62a1a2558e8fbb': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 335328,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 335360,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/27035890a36f6d22de9d8043f4006ad84a6fff6423d06d9a3b62a1a2558e8fbb'},
 '27442c2dbdef8c0cb2ff118773a0c1d90ce619139c0d4bdb20e799f6ec421853': {'AddressOfEntryPoint': 1314302,
                                                                      'DebugRVA': 1314064,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12664,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 1306624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/27442c2dbdef8c0cb2ff118773a0c1d90ce619139c0d4bdb20e799f6ec421853'},
 '2747c94d6b0e767ada89d519cb732d898933fe4db9d8a2e446d64686c28fd1b5': {'AddressOfEntryPoint': 5344,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 33352,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualQuery',
                                                                                      'msvcrt.dll': 'vfprintf',
                                                                                      'x64-msvcrt-ruby220.dll': 'ruby_sysinit'},
                                                                      'ImportedFunctions': ['Sleep',
                                                                                            'ruby_init',
                                                                                            'ruby_init_stack',
                                                                                            'ruby_options',
                                                                                            'ruby_run_node',
                                                                                            'ruby_sysinit',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            '__C_specific_handler',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__iob_func',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'vfprintf'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 60,
                                                                      'NumberOfSections': 18,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 16356,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 7680,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.xdata\x00\x00': 512,
                                                                                       '/19\x00\x00\x00\x00\x00': 48128,
                                                                                       '/31\x00\x00\x00\x00\x00': 7168,
                                                                                       '/4\x00\x00\x00\x00\x00\x00': 1536,
                                                                                       '/45\x00\x00\x00\x00\x00': 7680,
                                                                                       '/57\x00\x00\x00\x00\x00': 3072,
                                                                                       '/70\x00\x00\x00\x00\x00': 1024,
                                                                                       '/81\x00\x00\x00\x00\x00': 17408,
                                                                                       '/92\x00\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/2747c94d6b0e767ada89d519cb732d898933fe4db9d8a2e446d64686c28fd1b5'},
 '27a835c4f4c7b44482f991fe82b7163d32fdb4a4b01c9fcf31724789f5017309': {'AddressOfEntryPoint': 16112,
                                                                      'DebugRVA': 159356,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 163840,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateInstance',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileSize',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetThreadLocale',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegGetKeySecurity',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegCreateKeyTransactedW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'SystemTimeToTzSpecificLocalTime',
                                                                                      'api-ms-win-core-wow64-l1-1-0.dll': 'Wow64DisableWow64FsRedirection',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'RegisterTraceGuidsW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetAce',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupAccountSidW',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'msvcrt.dll': 'setlocale',
                                                                                      'ntdll.dll': 'EtwTraceMessage',
                                                                                      'wevtapi.dll': 'EvtClose'},
                                                                      'ImportedFunctions': ['_unlock',
                                                                                            'towupper',
                                                                                            '_itow_s',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'fflush',
                                                                                            'fgetwc',
                                                                                            '_iob',
                                                                                            'wprintf',
                                                                                            'swscanf',
                                                                                            'wcschr',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            '_purecall',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'memcpy_s',
                                                                                            'setlocale',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'TraceMessage',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetCommandLineW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadLocale',
                                                                                            'SetThreadUILanguage',
                                                                                            'LocaleNameToLCID',
                                                                                            'GetThreadLocale',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UuidToStringW',
                                                                                            'UuidFromStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateFileW',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'CloseHandle',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'LookupAccountSidW',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'IsWow64Process',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'EvtSaveChannelConfig',
                                                                                            'EvtSetChannelConfigProperty',
                                                                                            'EvtOpenChannelConfig',
                                                                                            'EvtOpenChannelEnum',
                                                                                            'EvtGetExtendedStatus',
                                                                                            'EvtFormatMessage',
                                                                                            'EvtOpenPublisherEnum',
                                                                                            'EvtGetLogInfo',
                                                                                            'EvtGetObjectArrayProperty',
                                                                                            'EvtNextPublisherId',
                                                                                            'EvtGetObjectArraySize',
                                                                                            'EvtOpenEventMetadataEnum',
                                                                                            'EvtNextEventMetadata',
                                                                                            'EvtOpenPublisherMetadata',
                                                                                            'EvtOpenLog',
                                                                                            'EvtClearLog',
                                                                                            'EvtExportLog',
                                                                                            'EvtArchiveExportedLog',
                                                                                            'EvtQuery',
                                                                                            'EvtGetChannelConfigProperty',
                                                                                            'EvtGetEventMetadataProperty',
                                                                                            'EvtGetPublisherMetadataProperty',
                                                                                            'EvtNextChannelPath',
                                                                                            'EvtCreateBookmark',
                                                                                            'EvtSeek',
                                                                                            'EvtCreateRenderContext',
                                                                                            'EvtNext',
                                                                                            'EvtUpdateBookmark',
                                                                                            'EvtRender',
                                                                                            'EvtOpenSession',
                                                                                            'EvtClose',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegGetKeySecurity',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'MapGenericMask',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'AddAce',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'InitializeAcl',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetAce',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'RegCreateKeyTransactedW',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtCommitTransaction',
                                                                                            'NtCreateTransaction',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'RtlGetVersion',
                                                                                            'EtwTraceMessage'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 31,
                                                                      'NumberOfImportFunctions': 189,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 8704,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 155648},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/27a835c4f4c7b44482f991fe82b7163d32fdb4a4b01c9fcf31724789f5017309'},
 '27d031d7ee3f326ebdf64503bf0788d6c4eafb8192a724974e9e2cb695fc08c3': {'AddressOfEntryPoint': 846425,
                                                                      'DebugRVA': 1296912,
                                                                      'DebugSize': 112,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1146880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'ReadConsoleW'},
                                                                      'ImportedFunctions': ['CreateFileW',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'HeapDestroy',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'MulDiv',
                                                                                            'lstrcmpW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSection',
                                                                                            'lstrcpynW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'DecodePointer',
                                                                                            'Sleep',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetExitCodeThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'lstrlenW',
                                                                                            'GetVersionExW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetTempFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileTime',
                                                                                            'CopyFileW',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'InterlockedExchange',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemInfo',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WriteConsoleW',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'LoadLibraryExA',
                                                                                            'GetShortPathNameW',
                                                                                            'GetStringTypeW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FormatMessageW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCurrentThread',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'SetEndOfFile',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'MoveFileW',
                                                                                            'ResetEvent',
                                                                                            'GlobalFree',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetLocalTime',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'TerminateThread',
                                                                                            'LocalAlloc',
                                                                                            'CompareFileTime',
                                                                                            'CopyFileExW',
                                                                                            'OpenEventW',
                                                                                            'PeekNamedPipe',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'InitializeSListHead',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'FlushInstructionCache',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlUnwind',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetFileType',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'SetFilePointerEx',
                                                                                            'FindFirstFileExW',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetStdHandle',
                                                                                            'ReadConsoleW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 89732,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 345088,
                                                                                       '.reloc\x00\x00': 84480,
                                                                                       '.rsrc\x00\x00\x00': 90112,
                                                                                       '.text\x00\x00\x00': 1142272},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/27d031d7ee3f326ebdf64503bf0788d6c4eafb8192a724974e9e2cb695fc08c3'},
 '2823ee5360bbaf03207bfae624fa187d0c0cb0df338040f93111c213b301e15a': {'AddressOfEntryPoint': 305984,
                                                                      'DebugRVA': 423296,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 421888,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSidIdentifierAuthority',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'SetLayout',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'RPCRT4.dll': 'RpcStringFreeA',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjectsEx',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetOpenW',
                                                                                      'WS2_32.dll': 'socket',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['TerminateProcess',
                                                                                            'GetVersionExW',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetErrorMode',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CopyFileW',
                                                                                            'GetTempPathW',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'CreateFileW',
                                                                                            'DeviceIoControl',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'IsWow64Process',
                                                                                            'FreeLibrary',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryExW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushInstructionCache',
                                                                                            'LoadLibraryW',
                                                                                            'GetFileSize',
                                                                                            'CreateDirectoryW',
                                                                                            'WriteFile',
                                                                                            'GetFileAttributesW',
                                                                                            'ReadFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileType',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'InitializeCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'MoveFileExW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CompareStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CreateThread',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WriteConsoleW',
                                                                                            'SetHandleCount',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'HeapCreate',
                                                                                            'GetStdHandle',
                                                                                            'ExitProcess',
                                                                                            'HeapSize',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'RtlUnwind',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineW',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetFileAttributesExW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'DuplicateHandle',
                                                                                            'OpenEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetLastError',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'SetThreadPriority',
                                                                                            'MultiByteToWideChar',
                                                                                            'ExitThread',
                                                                                            'Sleep',
                                                                                            'TerminateThread',
                                                                                            'GetTickCount',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'MulDiv',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcessId',
                                                                                            'InterlockedExchange',
                                                                                            'CloseHandle',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'GetTempFileNameW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'OpenFileMappingW',
                                                                                            'DebugBreak',
                                                                                            'lstrlenA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetComputerNameW',
                                                                                            'lstrlenW',
                                                                                            'GetStringTypeW',
                                                                                            'GetWindowTextW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetClassNameW',
                                                                                            'FindWindowW',
                                                                                            'IsWindowVisible',
                                                                                            'EnumChildWindows',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'GetClientRect',
                                                                                            'GetWindowRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'wsprintfW',
                                                                                            'MoveWindow',
                                                                                            'UnregisterClassA',
                                                                                            'FindWindowExW',
                                                                                            'LoadIconW',
                                                                                            'ShowWindow',
                                                                                            'SetTimer',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'LoadStringW',
                                                                                            'SetWindowLongW',
                                                                                            'IsDialogMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'CreateDialogParamW',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'GetActiveWindow',
                                                                                            'CharNextW',
                                                                                            'MessageBoxW',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            'WSACleanup',
                                                                                            'closesocket',
                                                                                            'send',
                                                                                            'connect',
                                                                                            'htons',
                                                                                            'getaddrinfo',
                                                                                            'socket',
                                                                                            'CreateFontW',
                                                                                            'GetDeviceCaps',
                                                                                            'SetLayout',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueW',
                                                                                            'RegOpenKeyW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetUserNameW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'LookupAccountNameW',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHFileOperationW',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoCreateGuid',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitialize',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VarUI4FromStr',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'UuidToStringA',
                                                                                            'RpcStringFreeA',
                                                                                            'InitCommonControlsEx',
                                                                                            'InternetConnectW',
                                                                                            'InternetWriteFile',
                                                                                            'InternetReadFile',
                                                                                            'InternetSetOptionW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'HttpSendRequestExW',
                                                                                            'HttpSendRequestW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetCloseHandle',
                                                                                            'HttpEndRequestW',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'InternetOpenW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 263,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 210368,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.rdata\x00\x00': 130048,
                                                                                       '.reloc\x00\x00': 35840,
                                                                                       '.rsrc\x00\x00\x00': 210432,
                                                                                       '.text\x00\x00\x00': 417792},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2823ee5360bbaf03207bfae624fa187d0c0cb0df338040f93111c213b301e15a'},
 '28419489e1de293e5eefdbd6367a0f419fa350324cf52147d71fa1a9d5b3bf3e': {'AddressOfEntryPoint': 825020,
                                                                      'DebugRVA': 1058912,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1056768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyA',
                                                                                      'COMCTL32.dll': 'CreatePropertySheetPageW',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'GDI32.dll': 'CombineRgn',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'NETAPI32.dll': 'NetLocalGroupGetMembers',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathIsDirectoryW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CreateIconFromResourceEx',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'dbghelp.dll': 'SymGetModuleBase',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['CreateDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetExitCodeThread',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'lstrlenW',
                                                                                            'GetVersionExW',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'WriteConsoleA',
                                                                                            'GetModuleHandleA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetCPInfo',
                                                                                            'RtlUnwind',
                                                                                            'ExitProcess',
                                                                                            'lstrcmpiW',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'InterlockedCompareExchange',
                                                                                            'PeekNamedPipe',
                                                                                            'OpenEventW',
                                                                                            'SearchPathW',
                                                                                            'ResetEvent',
                                                                                            'MoveFileW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'TerminateThread',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetLocalTime',
                                                                                            'OutputDebugStringW',
                                                                                            'GetVersion',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleFileNameW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'GlobalFree',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemTime',
                                                                                            'GetTempFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'CopyFileW',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'InterlockedExchange',
                                                                                            'GetSystemInfo',
                                                                                            'TlsFree',
                                                                                            'WaitForMultipleObjects',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'WaitForSingleObject',
                                                                                            'MulDiv',
                                                                                            'lstrcpynW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'SetEndOfFile',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCommandLineW',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'DuplicateHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleOutputCP',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'GetStdHandle',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCurrentThread',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'RaiseException',
                                                                                            'FlushInstructionCache',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetShortPathNameW',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'CreateThread',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LocalFree',
                                                                                            'MapWindowPoints',
                                                                                            'GetParent',
                                                                                            'DefWindowProcW',
                                                                                            'SendMessageW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'FillRect',
                                                                                            'IsWindow',
                                                                                            'ShowWindow',
                                                                                            'GetClientRect',
                                                                                            'UnionRect',
                                                                                            'IsWindowVisible',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'ScreenToClient',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowDC',
                                                                                            'LookupIconIdFromDirectoryEx',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindowRect',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindow',
                                                                                            'DrawFrameControl',
                                                                                            'RegisterWindowMessageW',
                                                                                            'InvalidateRgn',
                                                                                            'GetDesktopWindow',
                                                                                            'GetKeyState',
                                                                                            'DrawStateW',
                                                                                            'DrawTextExW',
                                                                                            'DrawFocusRect',
                                                                                            'ValidateRect',
                                                                                            'DestroyMenu',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'InflateRect',
                                                                                            'LoadBitmapW',
                                                                                            'MessageBeep',
                                                                                            'LoadImageW',
                                                                                            'CharNextW',
                                                                                            'GetClassNameW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'UpdateWindow',
                                                                                            'DestroyIcon',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetCapture',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollPos',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'DrawEdge',
                                                                                            'SetScrollPos',
                                                                                            'SetRect',
                                                                                            'MoveWindow',
                                                                                            'GetScrollInfo',
                                                                                            'GetMessagePos',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetActiveWindow',
                                                                                            'TrackMouseEvent',
                                                                                            'GetAsyncKeyState',
                                                                                            'DestroyCursor',
                                                                                            'GetWindowRgn',
                                                                                            'IsZoomed',
                                                                                            'SetWindowRgn',
                                                                                            'GetComboBoxInfo',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'CreateDialogParamW',
                                                                                            'EndDialog',
                                                                                            'DialogBoxParamW',
                                                                                            'InvalidateRect',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetCursor',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'IsDialogMessageW',
                                                                                            'IsChild',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetCursorPos',
                                                                                            'GetCursorPos',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadCursorW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'GetFocus',
                                                                                            'EnableWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetPropW',
                                                                                            'GetSystemMenu',
                                                                                            'EnableMenuItem',
                                                                                            'ModifyMenuW',
                                                                                            'FindWindowW',
                                                                                            'ExitWindowsEx',
                                                                                            'GetScrollRange',
                                                                                            'SetPropW',
                                                                                            'RemovePropW',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'OpenClipboard',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'GetIconInfo',
                                                                                            'SendMessageTimeoutW',
                                                                                            'UnregisterClassA',
                                                                                            'DrawTextW',
                                                                                            'DrawIconEx',
                                                                                            'GetSystemMetrics',
                                                                                            'ClientToScreen',
                                                                                            'OffsetRect',
                                                                                            'SetRectEmpty',
                                                                                            'PtInRect',
                                                                                            'GetSysColorBrush',
                                                                                            'IntersectRect',
                                                                                            'IsRectEmpty',
                                                                                            'SendMessageA',
                                                                                            'IsWindowEnabled',
                                                                                            'CopyRect',
                                                                                            'RedrawWindow',
                                                                                            'SetFocus',
                                                                                            'GetSysColor',
                                                                                            'CreateWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EqualRect',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'GetLayout',
                                                                                            'GetBrushOrgEx',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateSolidBrush',
                                                                                            'GetRgnBox',
                                                                                            'EqualRgn',
                                                                                            'CreatePolygonRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetStockObject',
                                                                                            'CreateFontW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SetBrushOrgEx',
                                                                                            'CreatePatternBrush',
                                                                                            'FillRgn',
                                                                                            'SelectClipRgn',
                                                                                            'GetBitmapBits',
                                                                                            'CreateRectRgn',
                                                                                            'GetObjectW',
                                                                                            'GetDeviceCaps',
                                                                                            'Rectangle',
                                                                                            'ExcludeClipRect',
                                                                                            'CreatePen',
                                                                                            'ExtTextOutW',
                                                                                            'SetBkColor',
                                                                                            'BitBlt',
                                                                                            'SetViewportOrgEx',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBSection',
                                                                                            'CreateBitmapIndirect',
                                                                                            'CombineRgn',
                                                                                            'RegOpenKeyW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'StartServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'OpenSCManagerW',
                                                                                            'LockServiceDatabase',
                                                                                            'UnlockServiceDatabase',
                                                                                            'CloseServiceHandle',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'LookupAccountSidW',
                                                                                            'RegCreateKeyW',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'GetUserNameW',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyA',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteExW',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'OleInitialize',
                                                                                            'CLSIDFromString',
                                                                                            'CoGetClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleLockRunning',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleUninitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateGuid',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromProgID',
                                                                                            'VarUI4FromStr',
                                                                                            'VarDateFromStr',
                                                                                            'OleLoadPicture',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysStringLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SymGetLineFromAddr',
                                                                                            'SymSetSearchPath',
                                                                                            'SymCleanup',
                                                                                            'SymInitialize',
                                                                                            'SymSetOptions',
                                                                                            'SymFunctionTableAccess',
                                                                                            'StackWalk',
                                                                                            'SymGetModuleBase',
                                                                                            'PathAddBackslashW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsUNCW',
                                                                                            'PathIsDirectoryW',
                                                                                            'ImageList_Create',
                                                                                            'PropertySheetW',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_LoadImageW',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_SetBkColor',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Destroy',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'TransparentBlt',
                                                                                            'AlphaBlend',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'NetUserGetLocalGroups',
                                                                                            'NetApiBufferFree',
                                                                                            'NetLocalGroupGetMembers',
                                                                                            'GetUserNameExW',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 453,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 134912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13312,
                                                                                       '.rdata\x00\x00': 256512,
                                                                                       '.reloc\x00\x00': 99328,
                                                                                       '.rsrc\x00\x00\x00': 135168,
                                                                                       '.text\x00\x00\x00': 1050624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/28419489e1de293e5eefdbd6367a0f419fa350324cf52147d71fa1a9d5b3bf3e'},
 '28b001bb9a72ae7a24242bfab248d767a1ac5dec981c672a3944f7a072375e9a': {'AddressOfEntryPoint': 11128,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetFileAttributesA'},
                                                                      'ImportedFunctions': ['GenerateConsoleCtrlEvent',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetModuleFileNameA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwindEx',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'GetFileAttributesA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/28b001bb9a72ae7a24242bfab248d767a1ac5dec981c672a3944f7a072375e9a'},
 '28e9e1c154aa7b11049aaddebc275341a90f23395c44e07aeeb08907aae7ec26': {'AddressOfEntryPoint': 9792,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'REGAPI.dll': 'RegFreeUtilityCommandList',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegQueryUtilityCommandList',
                                                                                            'RegFreeUtilityCommandList',
                                                                                            'LoadStringW',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'HeapSetInformation',
                                                                                            'SearchPathW',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            '_ultoa',
                                                                                            '_iob',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'memmove',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'free',
                                                                                            'fwprintf',
                                                                                            'vfwprintf',
                                                                                            'wcschr',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            '_wcsnicmp',
                                                                                            'swprintf_s',
                                                                                            '__setusermatherr',
                                                                                            'vswprintf_s',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/28e9e1c154aa7b11049aaddebc275341a90f23395c44e07aeeb08907aae7ec26'},
 '2950ec6f9f3a3ff8e9b18b63aff690323aea8bbdabdf0f0c81d432641195ebfd': {'AddressOfEntryPoint': 51183,
                                                                      'DebugRVA': 144304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 143360,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'CreateCompatibleBitmap',
                                                                                      'KERNEL32.dll': 'MultiByteToWideChar',
                                                                                      'MSVCP100.dll': '?_Xlength_error@std@@YAXPBD@Z',
                                                                                      'MSVCR100.dll': '__dllonexit',
                                                                                      'OLEAUT32.dll': 'VariantTimeToSystemTime',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderA',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['CreateDirectoryW',
                                                                                            'FindResourceA',
                                                                                            'ExitProcess',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'DeleteFileW',
                                                                                            'CopyFileW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetFileAttributesW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFullPathNameW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'MultiByteToWideChar',
                                                                                            'TranslateAcceleratorA',
                                                                                            'LoadAcceleratorsA',
                                                                                            'DefWindowProcA',
                                                                                            'DialogBoxParamA',
                                                                                            'BeginPaint',
                                                                                            'GetMessageA',
                                                                                            'SetWindowPos',
                                                                                            'IsWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'RegisterClassExA',
                                                                                            'EndPaint',
                                                                                            'EnumChildWindows',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'KillTimer',
                                                                                            'InvalidateRect',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetWindowLongA',
                                                                                            'SetTimer',
                                                                                            'GetDC',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetDlgItemTextA',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'SendMessageA',
                                                                                            'GetWindowRect',
                                                                                            'SendMessageW',
                                                                                            'EndDialog',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'LoadStringA',
                                                                                            'LoadCursorA',
                                                                                            'LoadIconA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'SetTextColor',
                                                                                            'GetObjectA',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'BitBlt',
                                                                                            'TextOutA',
                                                                                            'GetTextExtentPointA',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetDIBits',
                                                                                            'CreateDIBSection',
                                                                                            'CreatePen',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetPixel',
                                                                                            'SetPixel',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderA',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateGuid',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            '?_Orphan_all@_Container_base0@std@@QAEXXZ',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            'strtod',
                                                                                            'fflush',
                                                                                            'longjmp',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'strcpy_s',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_except_handler4_common',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_localtime64_s',
                                                                                            '_mktime64',
                                                                                            '_time64',
                                                                                            '_mbsnbcmp',
                                                                                            '_CxxThrowException',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'memset',
                                                                                            'free',
                                                                                            '_wfopen_s',
                                                                                            'wcsnlen',
                                                                                            'memcpy',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            'vsprintf_s',
                                                                                            'malloc',
                                                                                            'fclose',
                                                                                            'fwrite',
                                                                                            '_setjmp3',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_mbsstr',
                                                                                            'wmemcpy_s',
                                                                                            '_wcsicmp',
                                                                                            'wcsrchr',
                                                                                            '_vscwprintf',
                                                                                            'vswprintf_s',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            'strnlen',
                                                                                            '_mbsinc',
                                                                                            '_ismbcspace',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_CIpow',
                                                                                            '_vscprintf',
                                                                                            'fread',
                                                                                            'strncmp',
                                                                                            '_findclose',
                                                                                            '_wfindfirst64i32',
                                                                                            '_wfindnext64i32',
                                                                                            'wprintf',
                                                                                            'isdigit',
                                                                                            'isalpha',
                                                                                            'tolower',
                                                                                            '_unlock',
                                                                                            '__dllonexit'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 203,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3308748,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 33280,
                                                                                       '.reloc\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 3309056,
                                                                                       '.text\x00\x00\x00': 139264,
                                                                                       '.tls\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2950ec6f9f3a3ff8e9b18b63aff690323aea8bbdabdf0f0c81d432641195ebfd'},
 '296ddfd1c924c0eeaf42c33a56052e3157716adb8ac6f84c6ff4b52e6b972a67': {'AddressOfEntryPoint': 40624,
                                                                      'DebugRVA': 4464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CreateWellKnownSid',
                                                                                      'AppXAllUserStore.dll': 'DeleteUserRegistryKeyFromAllUserStore',
                                                                                      'KERNEL32.dll': 'GetCommandLineW',
                                                                                      'OLEAUT32.dll': 'UnRegisterTypeLib',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoRevokeClassObject',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': '__C_specific_handler',
                                                                                      'ntdll.dll': 'RtlNumberGenericTableElements'},
                                                                      'ImportedFunctions': ['EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'EventWrite',
                                                                                            'RegDeleteTreeW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegQueryValueExW',
                                                                                            'CreateWellKnownSid',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'VerSetConditionMask',
                                                                                            'DeleteTimerQueueEx',
                                                                                            'CreateTimerQueue',
                                                                                            'SetLastError',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'SetEvent',
                                                                                            'LoadLibraryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'LeaveCriticalSection',
                                                                                            'FindResourceExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadResource',
                                                                                            'RaiseException',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'GetCommandLineW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharUpperW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'CharNextW',
                                                                                            'wcscpy_s',
                                                                                            'free',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_purecall',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_vsnprintf',
                                                                                            'malloc',
                                                                                            'memcpy_s',
                                                                                            'wcsncpy_s',
                                                                                            'exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcscat_s',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            'RtlFreeSid',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlInsertElementGenericTable',
                                                                                            'RtlInitializeGenericTable',
                                                                                            'RtlEnumerateGenericTable',
                                                                                            'RtlLookupElementGenericTable',
                                                                                            'RtlDeleteResource',
                                                                                            'RtlDeleteElementGenericTable',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlNumberGenericTableElements',
                                                                                            'LoadTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'UnRegisterTypeLib',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoInitializeEx',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoResumeClassObjects',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoRevokeClassObject',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'OutputDebugStringA',
                                                                                            'DeleteUserRegistryKeyFromAllUserStore'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 138,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 43520},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/296ddfd1c924c0eeaf42c33a56052e3157716adb8ac6f84c6ff4b52e6b972a67'},
 '2990059766f4118256b48decfe2d586d469a219c1e5dda038943c97bbfaa661d': {'AddressOfEntryPoint': 5408,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'DestroyIcon',
                                                                                      'appwiz.cpl': 'RunSPADW',
                                                                                      'msvcrt.dll': '__p__fmode'},
                                                                      'ImportedFunctions': ['HeapSetInformation',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'CompareStringOrdinal',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'DestroyWindow',
                                                                                            'SetProcessDPIAware',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetClassNameW',
                                                                                            'GetWindow',
                                                                                            'LoadCursorW',
                                                                                            'DestroyIcon',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__p__fmode',
                                                                                            'RunSPADW',
                                                                                            'GetStockObject'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 28496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/2990059766f4118256b48decfe2d586d469a219c1e5dda038943c97bbfaa661d'},
 '29a9afddbf858cb8cf399f4285eddf31de111505d22ca3634423ca90e71448cf': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/29a9afddbf858cb8cf399f4285eddf31de111505d22ca3634423ca90e71448cf'},
 '29bfb0f5b72c7cc57638fb369037d4857f854bf55629a654ad3322265c80c2bb': {'AddressOfEntryPoint': 24606,
                                                                      'DebugRVA': 24368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1640,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/29bfb0f5b72c7cc57638fb369037d4857f854bf55629a654ad3322265c80c2bb'},
 '29d86a492b627f71ffa7e2b7eeea2687a217acb3290783f53cd214848c538347': {'AddressOfEntryPoint': 11776,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': '_initterm',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'ulib.dll': '?TruncateBase@PATH@@QAEEXZ'},
                                                                      'ImportedFunctions': ['GetCommandLineW',
                                                                                            'CopyFileW',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAVWSTRING@@@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '?QueryPath@PATH@@QBEPAV1@XZ',
                                                                                            '??_7OBJECT@@6B@',
                                                                                            '?Initialize@CLASS_DESCRIPTOR@@QAEEXZ',
                                                                                            '??0CLASS_DESCRIPTOR@@QAE@XZ',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '??MTIMEINFO@@QBEEV0@@Z',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '?AppendBase@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '?Initialize@PATH@@QAEEPBV1@E@Z',
                                                                                            '?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z',
                                                                                            '?Initialize@PATH@@QAEEPBGE@Z',
                                                                                            '?SetAttributes@FSNODE@@QAEEKPAK@Z',
                                                                                            '?UlibRealloc@@YGPAXPAXK@Z',
                                                                                            '?SetAttributes@FSN_FILTER@@QAEEKKK@Z',
                                                                                            '?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z',
                                                                                            '?Initialize@FSN_FILTER@@QAEEXZ',
                                                                                            '??1FSN_FILTER@@UAE@XZ',
                                                                                            '??0FSN_FILTER@@QAE@XZ',
                                                                                            '??0PROGRAM@@IAE@XZ',
                                                                                            '?ValidateVersion@PROGRAM@@UBEXKK@Z',
                                                                                            '?Usage@PROGRAM@@UBEXXZ',
                                                                                            '?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?Fatal@PROGRAM@@UBEXXZ',
                                                                                            '?Fatal@PROGRAM@@UBAXKKPADZZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z',
                                                                                            '?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ',
                                                                                            '??1PROGRAM@@UAE@XZ',
                                                                                            '?Initialize@PROGRAM@@QAEEKKK@Z',
                                                                                            '?Traverse@FSN_DIRECTORY@@QBEEPAXPAVFSN_FILTER@@PAVPATH@@P6GE0PAVFSNODE@@2@Z@Z',
                                                                                            '?QueryFsnodeArray@FSN_DIRECTORY@@QBEPAVARRAY@@PAVFSN_FILTER@@@Z',
                                                                                            '?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z',
                                                                                            '?GotABreak@KEYBOARD@@SGEXZ',
                                                                                            '?EnableLineMode@KEYBOARD@@QAEEXZ',
                                                                                            '?EnableBreakHandling@KEYBOARD@@SGEXZ',
                                                                                            '?DisableLineMode@KEYBOARD@@QAEEXZ',
                                                                                            '?Initialize@KEYBOARD@@QAEEEE@Z',
                                                                                            '??0KEYBOARD@@QAE@XZ',
                                                                                            '?HasWildCard@PATH@@QBEEXZ',
                                                                                            '?QueryString@WSTRING@@QBEPAV1@KK@Z',
                                                                                            '?QueryFullPath@PATH@@QBEPAV1@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?PutMultipleSwitch@ARGUMENT_LEXEMIZER@@QAEXPBVWSTRING@@@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBVWSTRING@@@Z',
                                                                                            '?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?TruncateBase@PATH@@QAEEXZ',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 101,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 9728},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/29d86a492b627f71ffa7e2b7eeea2687a217acb3290783f53cd214848c538347'},
 '2a0040b54311fb62153131d4b201150ab058b7f85f7f5a7f8751a6db2b08669e': {'AddressOfEntryPoint': 59200,
                                                                      'DebugRVA': 4400,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'USER32.dll': 'CharNextExA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'GetVersion',
                                                                                            'GetFullPathNameW',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetFileSize',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesExA',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetProcAddress',
                                                                                            'GetFileAttributesExW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'SetFileAttributesA',
                                                                                            'CreateFileA',
                                                                                            'GetTickCount',
                                                                                            'fprintf',
                                                                                            'clock',
                                                                                            'ctime',
                                                                                            '_iob',
                                                                                            '_open_osfhandle',
                                                                                            '_lseek',
                                                                                            'time',
                                                                                            '_write',
                                                                                            '_eof',
                                                                                            'fclose',
                                                                                            '_open',
                                                                                            '_close',
                                                                                            'memmove_s',
                                                                                            '_tempnam',
                                                                                            '_stat',
                                                                                            '__doserrno',
                                                                                            '_mkdir',
                                                                                            '_vsnprintf',
                                                                                            '_unlink',
                                                                                            'setvbuf',
                                                                                            'tolower',
                                                                                            'fread',
                                                                                            'ferror',
                                                                                            'fwrite',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'fopen',
                                                                                            '_read',
                                                                                            'remove',
                                                                                            '_ltoa_s',
                                                                                            'feof',
                                                                                            '_errno',
                                                                                            '_strnicmp',
                                                                                            'strpbrk',
                                                                                            'atol',
                                                                                            'strspn',
                                                                                            'toupper',
                                                                                            'isdigit',
                                                                                            'printf',
                                                                                            'atoi',
                                                                                            'strchr',
                                                                                            'strncmp',
                                                                                            '_stricmp',
                                                                                            '_strdup',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'exit',
                                                                                            '_ftol2_sse',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'CharNextExA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/2a0040b54311fb62153131d4b201150ab058b7f85f7f5a7f8751a6db2b08669e'},
 '2a13d8f3455c91ea4b156cf0e372470d057e6b87bf3f52f30b393abbb2b7d944': {'AddressOfEntryPoint': 7744,
                                                                      'DebugRVA': 20760,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49216,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'api-ms-win-downlevel-advapi32-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-downlevel-shlwapi-l1-1-0.dll': 'StrStrIW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['wcschr',
                                                                                            'rand_s',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcsncmp',
                                                                                            'iswspace',
                                                                                            '_vsnwprintf',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'iswalpha',
                                                                                            'memset',
                                                                                            'VirtualQuery',
                                                                                            'SetProcessDEPPolicy',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'VirtualProtect',
                                                                                            'GetNativeSystemInfo',
                                                                                            'RaiseException',
                                                                                            'VirtualAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'CreateProcessW',
                                                                                            'LoadLibraryExW',
                                                                                            'SetDllDirectoryW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'InitializeCriticalSection',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'TerminateProcess',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'IsWow64Process',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'RegQueryValueExW',
                                                                                            'EventUnregister',
                                                                                            'RegGetValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'StrStrIW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 775744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 776192,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2a13d8f3455c91ea4b156cf0e372470d057e6b87bf3f52f30b393abbb2b7d944'},
 '2a5c83abaa0351129e0f8d86571ff569e36f06eb209e0d9701c58085624f1cd5': {'AddressOfEntryPoint': 417248,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'ExitProcess',
                                                                                      'advapi32.dll': 'RegCloseKey',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'gdi32.dll': 'BitBlt',
                                                                                      'ole32.dll': 'CoInitialize',
                                                                                      'oleaut32.dll': 'LoadTypeLib',
                                                                                      'shell32.dll': 'ShellExecuteA',
                                                                                      'user32.dll': 'GetDC',
                                                                                      'version.dll': 'VerQueryValueA'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'RegCloseKey',
                                                                                            'InitCommonControls',
                                                                                            'BitBlt',
                                                                                            'CoInitialize',
                                                                                            'LoadTypeLib',
                                                                                            'ShellExecuteA',
                                                                                            'GetDC',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 11,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 6520,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 7168,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 135168},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2a5c83abaa0351129e0f8d86571ff569e36f06eb209e0d9701c58085624f1cd5'},
 '2a8fd361c5d511847a777bedd796806ee18a4c9f6dbca219517a0885e3dbc756': {'AddressOfEntryPoint': 6816,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenSCManagerW',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['OpenServiceW',
                                                                                            'QueryServiceStatusEx',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_acmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            'wcschr',
                                                                                            'printf',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_amsg_exit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            'memset',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromString',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoGetClassObject',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoRegisterSurrogate',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 57,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1816,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/2a8fd361c5d511847a777bedd796806ee18a4c9f6dbca219517a0885e3dbc756'},
 '2b3b0f3d0909eb2b89ef5783bffdcde57fc64f98b6c8c50bbd04c62fc9a291f0': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2b3b0f3d0909eb2b89ef5783bffdcde57fc64f98b6c8c50bbd04c62fc9a291f0'},
 '2b658d0a86220608c9f8fac30494a0368778fd7da5e6529257913b45a52c4a55': {'AddressOfEntryPoint': 263668,
                                                                      'DebugRVA': 288848,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 286720,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetServiceStatus',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'MSVCP90.dll': '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z',
                                                                                      'MSVCR90.dll': '??1exception@std@@UEAA@XZ',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHFOLDER.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__CxxFrameHandler3',
                                                                                            'fprintf',
                                                                                            '_beginthread',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'scanf',
                                                                                            'fgets',
                                                                                            'printf',
                                                                                            'fflush',
                                                                                            'fgetc',
                                                                                            'sprintf',
                                                                                            'getenv',
                                                                                            'isalnum',
                                                                                            '_ecvt_s',
                                                                                            '_fcvt_s',
                                                                                            'islower',
                                                                                            '_strupr',
                                                                                            'strncat',
                                                                                            'frexp',
                                                                                            'localeconv',
                                                                                            'wcrtomb',
                                                                                            'abort',
                                                                                            'tolower',
                                                                                            '_snprintf',
                                                                                            'strtod',
                                                                                            '_strtoui64',
                                                                                            'strtoul',
                                                                                            'strcspn',
                                                                                            '_getpid',
                                                                                            '_wgetenv',
                                                                                            '_wunlink',
                                                                                            '_wrename',
                                                                                            'strtol',
                                                                                            'isdigit',
                                                                                            'memchr',
                                                                                            '_strdup',
                                                                                            'calloc',
                                                                                            'strncpy',
                                                                                            'malloc',
                                                                                            '__iob_func',
                                                                                            'fputs',
                                                                                            '_strlwr',
                                                                                            '_strnicmp',
                                                                                            'strerror',
                                                                                            'memcpy',
                                                                                            'strstr',
                                                                                            'strchr',
                                                                                            'memmove',
                                                                                            'wcsncmp',
                                                                                            'realloc',
                                                                                            '_wfullpath',
                                                                                            'strrchr',
                                                                                            'sscanf',
                                                                                            'qsort',
                                                                                            'strtok_s',
                                                                                            '_stricmp',
                                                                                            '_errno',
                                                                                            'strncmp',
                                                                                            'isspace',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            'free',
                                                                                            '_wsplitpath',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_CxxThrowException',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            'ControlService',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'CloseServiceHandle',
                                                                                            'RegOpenKeyExA',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'GetUserNameW',
                                                                                            'OpenThreadToken',
                                                                                            'ImpersonateSelf',
                                                                                            'RevertToSelf',
                                                                                            'GetFileSecurityW',
                                                                                            'MapGenericMask',
                                                                                            'AccessCheck',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetEntriesInAclW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'FreeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExA',
                                                                                            'RegFlushKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'SetServiceStatus',
                                                                                            'SHGetFolderPathW',
                                                                                            'MessageBoxW',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            '?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KPEB_W_K@Z',
                                                                                            '?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@_K0AEBV12@@Z',
                                                                                            '??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QEAAXXZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QEAA@PEBDHH@Z',
                                                                                            '?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z',
                                                                                            '?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z',
                                                                                            '??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAEAV?$basic_istream@DU?$char_traits@D@std@@@0@AEAV10@AEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z',
                                                                                            '??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PEB_W@Z',
                                                                                            '?_Xran@_String_base@std@@SAXXZ',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@0@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@PEBD@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBD@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ',
                                                                                            '??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@AEBV10@0@Z',
                                                                                            '??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@AEBV10@PEB_W@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W@Z',
                                                                                            '?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV12@_K0@Z',
                                                                                            '?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KPEB_W_K@Z',
                                                                                            '?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2_KB',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTickCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetVolumeInformationW',
                                                                                            'OpenProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'ReadFile',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetCurrentThread',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'LocalAlloc',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'SetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'GetComputerNameExW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTempPathW',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemInfo',
                                                                                            'lstrcmpiA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'LoadLibraryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'IsBadReadPtr',
                                                                                            'TlsSetValue',
                                                                                            'GetExitCodeThread',
                                                                                            'OpenThread',
                                                                                            'TlsGetValue',
                                                                                            'VirtualQuery',
                                                                                            'GetACP',
                                                                                            'RaiseException',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'DeleteFileW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'InitializeCriticalSection'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 249,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1664,
                                                                      'SectionNames': {'.data\x00\x00\x00': 71168,
                                                                                       '.pdata\x00\x00': 16384,
                                                                                       '.rdata\x00\x00': 147968,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 279040},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2b658d0a86220608c9f8fac30494a0368778fd7da5e6529257913b45a52c4a55'},
 '2b94903a1b87ea55f4bc28457be5c602c6194de7e79b8e22d7b723d5ef351587': {'AddressOfEntryPoint': 191964,
                                                                      'DebugRVA': 293520,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 771751936,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'CreateFontIndirectA',
                                                                                      'KERNEL32.dll': 'GetStringTypeA',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['lstrlenW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetFullPathNameA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CopyFileA',
                                                                                            'MoveFileA',
                                                                                            'Sleep',
                                                                                            'Process32Next',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'CreateThread',
                                                                                            'ReadFile',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersionExA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'CompareStringA',
                                                                                            'GetCurrentProcess',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'GetDiskFreeSpaceExA',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetLastError',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'LockResource',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlUnwind',
                                                                                            'GetFileAttributesA',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'HeapAlloc',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'InterlockedExchange',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateFontIndirectA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 21320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 21504,
                                                                                       '.text\x00\x00\x00': 289792},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2b94903a1b87ea55f4bc28457be5c602c6194de7e79b8e22d7b723d5ef351587'},
 '2c123c6acd967cdf1ad2855187cf3d8357b16a4fd9c2f18ae54cfa384165fa11': {'AddressOfEntryPoint': 3002704,
                                                                      'DebugRVA': 28112,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 6422528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 21315,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'CRYPT32.dll': 'CryptQueryObject',
                                                                                      'CRYPTXML.dll': 'CryptXmlGetReference',
                                                                                      'KERNEL32.dll': 'VirtualProtect',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'RpcServerInqCallAttributesW',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'bcrypt.dll': 'BCryptDestroyKey',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'NtQueryInformationThread',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'SetServiceStatus',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'EqualSid',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetTokenInformation',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'LookupAccountNameW',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaClose',
                                                                                            'QueryServiceStatusEx',
                                                                                            'NotifyServiceStatusChangeW',
                                                                                            'RegFlushKey',
                                                                                            'RegOpenKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptExportKey',
                                                                                            'CryptVerifySignatureA',
                                                                                            'CryptSignHashA',
                                                                                            'CryptDecrypt',
                                                                                            'CryptEncrypt',
                                                                                            'CryptGenKey',
                                                                                            'CryptImportKey',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'TraceMessage',
                                                                                            'CloseServiceHandle',
                                                                                            'StartServiceW',
                                                                                            'LsaFreeMemory',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'OpenProcessToken',
                                                                                            'ReleaseMutex',
                                                                                            'LCMapStringW',
                                                                                            'GetSystemInfo',
                                                                                            'CreateSemaphoreW',
                                                                                            'ReleaseSemaphore',
                                                                                            'RaiseException',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'QueueUserWorkItem',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'WriteFile',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'ChangeTimerQueueTimer',
                                                                                            'GetFileSizeEx',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'VirtualFree',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetLastError',
                                                                                            'RaiseFailFastException',
                                                                                            'VirtualAlloc',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlDeleteFunctionTable',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcessHeap',
                                                                                            'GetProcAddress',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'OpenThread',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVersionExA',
                                                                                            'GetComputerNameW',
                                                                                            'DeviceIoControl',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetSystemFirmwareTable',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SleepEx',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCurrentThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'TerminateProcess',
                                                                                            'LocalFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetLocalTime',
                                                                                            'CopyFileW',
                                                                                            'MoveFileExW',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'DeleteFileW',
                                                                                            'GetSystemTime',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'EncodePointer',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteTimerQueueEx',
                                                                                            'DecodePointer',
                                                                                            'DeleteTimerQueue',
                                                                                            'UnregisterWaitEx',
                                                                                            'GetVersionExW',
                                                                                            'SetEvent',
                                                                                            'LocalAlloc',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'CreateTimerQueue',
                                                                                            'VirtualProtect',
                                                                                            '_vsnwprintf',
                                                                                            'swscanf',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            '_wcsicmp',
                                                                                            'wcsncmp',
                                                                                            'wcschr',
                                                                                            'sscanf',
                                                                                            '_purecall',
                                                                                            '_wcsnicmp',
                                                                                            '_XcptFilter',
                                                                                            'strchr',
                                                                                            'swscanf_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'wcsstr',
                                                                                            '_wtof',
                                                                                            '_wtoi',
                                                                                            '_itow',
                                                                                            '_ui64tow',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'srand',
                                                                                            'time',
                                                                                            'rand',
                                                                                            'wcstoul',
                                                                                            '_errno',
                                                                                            'memchr',
                                                                                            'wcscmp',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerInterfaceGroupClose',
                                                                                            'RpcServerInterfaceGroupActivate',
                                                                                            'RpcServerInterfaceGroupCreateW',
                                                                                            'NdrServerCallAll',
                                                                                            'NdrServerCall2',
                                                                                            'RpcRaiseException',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcRevertToSelfEx',
                                                                                            'UuidCreate',
                                                                                            'UuidFromStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidToStringW',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'NtSetInformationThread',
                                                                                            'NtLockProductActivationKeys',
                                                                                            'NtQueryObject',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtQueryInformationThread',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CryptImportPublicKeyInfoEx2',
                                                                                            'CryptQueryObject',
                                                                                            'BCryptDestroyKey',
                                                                                            'CryptXmlVerifySignature',
                                                                                            'CryptXmlClose',
                                                                                            'CryptXmlGetStatus',
                                                                                            'CryptXmlGetSignature',
                                                                                            'CryptXmlOpenToDecode',
                                                                                            'CryptXmlGetDocContext',
                                                                                            'CryptXmlGetReference',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayDestroy',
                                                                                            'GetErrorInfo',
                                                                                            'VariantInit',
                                                                                            'CreateXmlReader'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 259,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 10456,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.idata\x00\x00': 9728,
                                                                                       '.pdata\x00\x00': 121344,
                                                                                       '.reloc\x00\x00': 31232,
                                                                                       '.rsrc\x00\x00\x00': 10752,
                                                                                       '.text\x00\x00\x00': 6269952},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/2c123c6acd967cdf1ad2855187cf3d8357b16a4fd9c2f18ae54cfa384165fa11'},
 '2c214b46f62f87b34b3f02647442d34bd8f9d60371660bb3589b2230b4694db0': {'AddressOfEntryPoint': 243710,
                                                                      'DebugRVA': 473712,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 372736,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SystemFunction036',
                                                                                      'KERNEL32.dll': 'RaiseException',
                                                                                      'USER32.dll': 'GetClipboardOwner'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetUserNameA',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'SystemFunction036',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'FindWindowA',
                                                                                            'SendMessageA',
                                                                                            'GetCursorPos',
                                                                                            'GetForegroundWindow',
                                                                                            'GetCapture',
                                                                                            'GetQueueStatus',
                                                                                            'GetClipboardOwner',
                                                                                            'SetEndOfFile',
                                                                                            'HeapSize',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CreateFileW',
                                                                                            'GetProcessHeap',
                                                                                            'SetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetOverlappedResult',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FormatMessageA',
                                                                                            'DecodePointer',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetProcessTimes',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadTimes',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAdjustment',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'WaitNamedPipeA',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeA',
                                                                                            'GetCurrentThreadId',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'LocalAlloc',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileType',
                                                                                            'SetHandleInformation',
                                                                                            'CreatePipe',
                                                                                            'CreateProcessA',
                                                                                            'OpenProcess',
                                                                                            'ClearCommBreak',
                                                                                            'GetCommState',
                                                                                            'SetCommBreak',
                                                                                            'SetCommState',
                                                                                            'SetCommTimeouts',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'DeleteFileA',
                                                                                            'GetLocalTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'FindClose',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryExW',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleExW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'OutputDebugStringW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'GetStringTypeW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'HeapReAlloc',
                                                                                            'ReadConsoleW',
                                                                                            'SetFilePointerEx',
                                                                                            'FindFirstFileExA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'RaiseException'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 138,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 107008,
                                                                                       '.reloc\x00\x00': 16384,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 365568},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2c214b46f62f87b34b3f02647442d34bd8f9d60371660bb3589b2230b4694db0'},
 '2c8b6b0497ac12ab7641342e07eca16b661b31e81444798799d4b186306a9a77': {'AddressOfEntryPoint': 9843,
                                                                      'DebugRVA': 49552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WriteConsoleW',
                                                                                      'SHLWAPI.dll': 'StrStrIW'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetInformationJobObject',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GenerateConsoleCtrlEvent',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryInformationJobObject',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateJobObjectA',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'EncodePointer',
                                                                                            'RtlUnwind',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'WriteFile',
                                                                                            'HeapCreate',
                                                                                            'ReadFile',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapReAlloc',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'LCMapStringW',
                                                                                            'WriteConsoleW',
                                                                                            'StrStrIW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 80,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 20644,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 20992,
                                                                                       '.text\x00\x00\x00': 44032},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2c8b6b0497ac12ab7641342e07eca16b661b31e81444798799d4b186306a9a77'},
 '2c8f2b69ba1cfd8b3c99c5fc5041b7feb7c4ff8baf442e9e3bf5e0a085405c02': {'AddressOfEntryPoint': 5712,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 1986560,
                                                                      'ExportSize': 14665,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.DLL': 'RegSetValueExA',
                                                                                      'COMCTL32.DLL': 'PropertySheetA',
                                                                                      'GDI32.DLL': 'StretchBlt',
                                                                                      'KERNEL32.DLL': 'GetVolumeInformationA',
                                                                                      'OLE32.DLL': 'RevokeDragDrop',
                                                                                      'SHELL32.DLL': 'SHGetPathFromIDListA',
                                                                                      'USER32.DLL': 'wsprintfA',
                                                                                      'WSOCK32.DLL': 'bind',
                                                                                      'rtl60.bpl': '@Multimon@Finalization$qqrv',
                                                                                      'vcl60.bpl': '@Comctrls@TTabControl@',
                                                                                      'vclx60.bpl': '@Checklst@TCheckListBox@'},
                                                                      'ImportedFunctions': ['@System@initialization$qqrv',
                                                                                            '@System@Finalization$qqrv',
                                                                                            '@System@TInterfacedObject@_Release$qqsv',
                                                                                            '@System@TInterfacedObject@_AddRef$qqsv',
                                                                                            '@System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv',
                                                                                            '@System@TInterfacedObject@NewInstance$qqrp17System@TMetaClass',
                                                                                            '@System@TInterfacedObject@BeforeDestruction$qqrv',
                                                                                            '@System@TInterfacedObject@AfterConstruction$qqrv',
                                                                                            '@System@UnregisterModule$qqrp17System@TLibModule',
                                                                                            '@System@RegisterModule$qqrp17System@TLibModule',
                                                                                            '@System@FindHInstance$qqrpv',
                                                                                            '@System@StringToWideChar$qqrx17System@AnsiStringpbi',
                                                                                            '@System@WideCharToString$qqrpb',
                                                                                            '@System@@WStrLen$qqrx17System@WideString',
                                                                                            '@System@@WStrFromPWChar$qqrr17System@WideStringpb',
                                                                                            '@System@@WStrClr$qqrpv',
                                                                                            '@System@@LStrSetLength$qqrv',
                                                                                            '@System@@LStrPos$qqrv',
                                                                                            '@System@@LStrDelete$qqrv',
                                                                                            '@System@UniqueString$qqrr17System@AnsiString',
                                                                                            '@System@@LStrToPChar$qqrx17System@AnsiString',
                                                                                            '@System@@LStrAddRef$qqrpv',
                                                                                            '@System@@LStrCmp$qqrv',
                                                                                            '@System@@LStrCatN$qqrv',
                                                                                            '@System@@LStrCat3$qqrv',
                                                                                            '@System@@LStrCat$qqrv',
                                                                                            '@System@@LStrLen$qqrx17System@AnsiString',
                                                                                            '@System@@LStrFromPWChar$qqrr17System@AnsiStringpb',
                                                                                            '@System@@LStrFromPChar$qqrr17System@AnsiStringpc',
                                                                                            '@System@@LStrLAsg$qqrpvpxv',
                                                                                            '@System@@LStrAsg$qqrpvpxv',
                                                                                            '@System@@LStrArrayClr$qqrpvi',
                                                                                            '@System@@LStrClr$qqrpv',
                                                                                            '@System@@TryFinallyExit$qqrv',
                                                                                            '@System@@DoneExcept$qqrv',
                                                                                            '@System@@RaiseExcept$qqrv',
                                                                                            '@System@@HandleFinally$qqrv',
                                                                                            '@System@@HandleAnyException$qqrv',
                                                                                            '@System@@BeforeDestruction$qqrp14System@TObjectzc',
                                                                                            '@System@@AfterConstruction$qqrp14System@TObject',
                                                                                            '@System@@ClassDestroy$qqrp14System@TObject',
                                                                                            '@System@@ClassCreate$qqrp17System@TMetaClasso',
                                                                                            '@System@TObject@Dispatch$qqrpv',
                                                                                            '@System@TObject@BeforeDestruction$qqrv',
                                                                                            '@System@TObject@AfterConstruction$qqrv',
                                                                                            '@System@TObject@DefaultHandler$qqrpv',
                                                                                            '@System@TObject@SafeCallException$qqrp14System@TObjectpv',
                                                                                            '@System@TObject@ClassInfo$qqrp17System@TMetaClass',
                                                                                            '@System@TObject@InheritsFrom$qqrp17System@TMetaClasst1',
                                                                                            '@System@@FindDynaInst$qqrv',
                                                                                            '@System@TObject@GetInterface$qqrrx5_GUIDpv',
                                                                                            '@System@TObject@Free$qqrv',
                                                                                            '@System@TObject@$bdtr$qqrv',
                                                                                            '@System@TObject@$bctr$qqrv',
                                                                                            '@System@TObject@FreeInstance$qqrv',
                                                                                            '@System@TObject@NewInstance$qqrp17System@TMetaClass',
                                                                                            '@System@TObject@ClassNameIs$qqrp17System@TMetaClassx17System@AnsiString',
                                                                                            '@System@TObject@ClassName$qqrp17System@TMetaClass',
                                                                                            '@System@TObject@ClassType$qqrv',
                                                                                            '@System@@FillChar$qqrpvic',
                                                                                            '@System@@AbstractError$qqrv',
                                                                                            '@System@ParamStr$qqri',
                                                                                            '@System@ParamCount$qqrv',
                                                                                            '@System@Move$qqrpxvpvi',
                                                                                            '@System@GetMemoryManager$qqrr21System@TMemoryManager',
                                                                                            '@System@IsMultiThread',
                                                                                            '@System@IsConsole',
                                                                                            '@System@ExitProc',
                                                                                            '@System@CmdLine',
                                                                                            '@System@IsLibrary',
                                                                                            '@System@MainInstance',
                                                                                            '@System@TInterfacedObject@',
                                                                                            '@$xp$14System@TObject',
                                                                                            '@System@TObject@',
                                                                                            '@$xp$13System@String',
                                                                                            '@$xp$14System@Integer',
                                                                                            '@$xp$14System@Boolean',
                                                                                            '@Types@initialization$qqrv',
                                                                                            '@Types@Finalization$qqrv',
                                                                                            '@Sysconst@initialization$qqrv',
                                                                                            '@Sysconst@Finalization$qqrv',
                                                                                            '@Sysutils@initialization$qqrv',
                                                                                            '@Sysutils@Finalization$qqrv',
                                                                                            '@Sysutils@Beep$qqrv',
                                                                                            '@Sysutils@Exception@$bctr$qqrx17System@AnsiString',
                                                                                            '@Sysutils@Format$qqrx17System@AnsiStringpx14System@TVarRecxi',
                                                                                            '@Sysutils@StrLFmt$qqrpcuit1px14System@TVarRecxi',
                                                                                            '@Sysutils@StrPCopy$qqrpcx17System@AnsiString',
                                                                                            '@Sysutils@StrCopy$qqrpcpxc',
                                                                                            '@Sysutils@GetCurrentDir$qqrv',
                                                                                            '@Sysutils@ExtractFileExt$qqrx17System@AnsiString',
                                                                                            '@Sysutils@ExtractFileName$qqrx17System@AnsiString',
                                                                                            '@Sysutils@ExtractFileDir$qqrx17System@AnsiString',
                                                                                            '@Sysutils@ExtractFilePath$qqrx17System@AnsiString',
                                                                                            '@Sysutils@AnsiLastChar$qqrx17System@AnsiString',
                                                                                            '@Sysutils@StrToIntDef$qqrx17System@AnsiStringi',
                                                                                            '@Sysutils@StrToInt$qqrx17System@AnsiString',
                                                                                            '@Sysutils@IntToStr$qqrj',
                                                                                            '@Sysutils@IntToStr$qqri',
                                                                                            '@Sysutils@TrimRight$qqrx17System@AnsiString',
                                                                                            '@Sysutils@TrimLeft$qqrx17System@AnsiString',
                                                                                            '@Sysutils@Trim$qqrx17System@AnsiString',
                                                                                            '@Sysutils@AnsiLowerCase$qqrx17System@AnsiString',
                                                                                            '@Sysutils@EControlC@',
                                                                                            '@Sysutils@EStackOverflow@',
                                                                                            '@Sysutils@EPrivilege@',
                                                                                            '@Sysutils@EAccessViolation@',
                                                                                            '@Sysutils@EUnderflow@',
                                                                                            '@Sysutils@EOverflow@',
                                                                                            '@Sysutils@EZeroDivide@',
                                                                                            '@Sysutils@EInvalidOp@',
                                                                                            '@Sysutils@EIntOverflow@',
                                                                                            '@Sysutils@ERangeError@',
                                                                                            '@Sysutils@EDivByZero@',
                                                                                            '@Sysutils@Exception@',
                                                                                            '@Varutils@initialization$qqrv',
                                                                                            '@Varutils@Finalization$qqrv',
                                                                                            '@Variants@initialization$qqrv',
                                                                                            '@Variants@Finalization$qqrv',
                                                                                            '@Rtlconsts@initialization$qqrv',
                                                                                            '@Rtlconsts@Finalization$qqrv',
                                                                                            '@Typinfo@initialization$qqrv',
                                                                                            '@Typinfo@Finalization$qqrv',
                                                                                            '@Typinfo@GetPropInfos$qqrp17Typinfo@TTypeInfopa16380$p17Typinfo@TPropInfo',
                                                                                            '@Typinfo@GetPropInfo$qqrp17Typinfo@TTypeInfox17System@AnsiString',
                                                                                            '@Typinfo@GetTypeData$qqrp17Typinfo@TTypeInfo',
                                                                                            '@Typinfo@SetStrProp$qqrp14System@TObjectx17System@AnsiStringt2',
                                                                                            '@Typinfo@GetStrProp$qqrp14System@TObjectx17System@AnsiString',
                                                                                            '@Typinfo@GetEnumProp$qqrp14System@TObjectx17System@AnsiString',
                                                                                            '@Typinfo@SetOrdProp$qqrp14System@TObjectx17System@AnsiStringi',
                                                                                            '@Typinfo@GetOrdProp$qqrp14System@TObjectx17System@AnsiString',
                                                                                            '@Typinfo@DotSep',
                                                                                            '@Typinfo@BooleanIdents',
                                                                                            '@Activex@initialization$qqrv',
                                                                                            '@Activex@Finalization$qqrv',
                                                                                            '@$xp$11IDataObject',
                                                                                            '@Classes@initialization$qqrv',
                                                                                            '@Classes@Finalization$qqrv',
                                                                                            '@Classes@TBasicAction@$bdtr$qqrv',
                                                                                            '@Classes@TComponent@QueryInterface$qqsrx5_GUIDpv',
                                                                                            '@Classes@TComponent@UpdateRegistry$qqrp17System@TMetaClassox17System@AnsiStringt3',
                                                                                            '@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv',
                                                                                            '@Classes@TComponent@GetComponentCount$qqrv',
                                                                                            '@Classes@TComponent@GetComponent$qqri',
                                                                                            '@Classes@TComponent@SetName$qqrx17System@AnsiString',
                                                                                            '@Classes@TComponent@ValidateRename$qqrp18Classes@TComponentx17System@AnsiStringt2',
                                                                                            '@Classes@TComponent@WriteState$qqrp15Classes@TWriter',
                                                                                            '@Classes@TComponent@ReadState$qqrp15Classes@TReader',
                                                                                            '@Classes@TComponent@Loaded$qqrv',
                                                                                            '@Classes@TComponent@DefineProperties$qqrp14Classes@TFiler',
                                                                                            '@Classes@TComponent@Notification$qqrp18Classes@TComponent18Classes@TOperation',
                                                                                            '@Classes@TComponent@DestroyComponents$qqrv',
                                                                                            '@Classes@TComponent@BeforeDestruction$qqrv',
                                                                                            '@Classes@TComponent@$bdtr$qqrv',
                                                                                            '@Classes@TComponent@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Classes@TThread@Synchronize$qqrynpqqrv$v',
                                                                                            '@Classes@TThread@DoTerminate$qqrv',
                                                                                            '@Classes@TThread@AfterConstruction$qqrv',
                                                                                            '@Classes@TThread@$bdtr$qqrv',
                                                                                            '@Classes@TThread@$bctr$qqro',
                                                                                            '@Classes@TStringList@SetSorted$qqro',
                                                                                            '@Classes@TStringList@$bdtr$qqrv',
                                                                                            '@Classes@TStrings@SetDelimiter$qqrxc',
                                                                                            '@Classes@TStrings@SetDelimitedText$qqrx17System@AnsiString',
                                                                                            '@Classes@TStrings@GetDelimitedText$qqrv',
                                                                                            '@Classes@TStrings@EndUpdate$qqrv',
                                                                                            '@Classes@TStrings@BeginUpdate$qqrv',
                                                                                            '@Classes@TStrings@Append$qqrx17System@AnsiString',
                                                                                            '@Classes@TStrings@$bdtr$qqrv',
                                                                                            '@Classes@TCollection@GetCount$qqrv',
                                                                                            '@Classes@TCollectionItem@GetIndex$qqrv',
                                                                                            '@Classes@TPersistent@AssignTo$qqrp19Classes@TPersistent',
                                                                                            '@Classes@TPersistent@Assign$qqrp19Classes@TPersistent',
                                                                                            '@Classes@TPersistent@$bdtr$qqrv',
                                                                                            '@Classes@TList@Sort$qqrpqqrpvt1$i',
                                                                                            '@Classes@TList@Remove$qqrpv',
                                                                                            '@Classes@TList@Get$qqri',
                                                                                            '@Classes@TList@Add$qqrpv',
                                                                                            '@Classes@TList@$bdtr$qqrv',
                                                                                            '@Classes@RegisterComponents$qqrx17System@AnsiStringpxp17System@TMetaClassxi',
                                                                                            '@Classes@Rect$qqriiii',
                                                                                            '@Classes@Point$qqrii',
                                                                                            '@$xp$18Classes@TComponent',
                                                                                            '@Classes@TComponent@',
                                                                                            '@$xp$15Classes@TThread',
                                                                                            '@Classes@TThread@',
                                                                                            '@Classes@TStringList@',
                                                                                            '@$xp$16Classes@TStrings',
                                                                                            '@Classes@TList@',
                                                                                            '@$xp$20Classes@TNotifyEvent',
                                                                                            '@Math@initialization$qqrv',
                                                                                            '@Math@Finalization$qqrv',
                                                                                            '@Contnrs@initialization$qqrv',
                                                                                            '@Contnrs@Finalization$qqrv',
                                                                                            '@Inifiles@initialization$qqrv',
                                                                                            '@Inifiles@Finalization$qqrv',
                                                                                            '@Registry@initialization$qqrv',
                                                                                            '@Registry@Finalization$qqrv',
                                                                                            '@Registry@TRegistry@KeyExists$qqrx17System@AnsiString',
                                                                                            '@Registry@TRegistry@ValueExists$qqrx17System@AnsiString',
                                                                                            '@Registry@TRegistry@ReadBinaryData$qqrx17System@AnsiStringpvi',
                                                                                            '@Registry@TRegistry@WriteBinaryData$qqrx17System@AnsiStringpvi',
                                                                                            '@Registry@TRegistry@ReadInteger$qqrx17System@AnsiString',
                                                                                            '@Registry@TRegistry@WriteInteger$qqrx17System@AnsiStringi',
                                                                                            '@Registry@TRegistry@ReadString$qqrx17System@AnsiString',
                                                                                            '@Registry@TRegistry@WriteString$qqrx17System@AnsiStringt1',
                                                                                            '@Registry@TRegistry@GetValueNames$qqrp16Classes@TStrings',
                                                                                            '@Registry@TRegistry@GetKeyNames$qqrp16Classes@TStrings',
                                                                                            '@Registry@TRegistry@DeleteValue$qqrx17System@AnsiString',
                                                                                            '@Registry@TRegistry@DeleteKey$qqrx17System@AnsiString',
                                                                                            '@Registry@TRegistry@OpenKeyReadOnly$qqrx17System@AnsiString',
                                                                                            '@Registry@TRegistry@OpenKey$qqrx17System@AnsiStringo',
                                                                                            '@Registry@TRegistry@SetRootKey$qqrui',
                                                                                            '@Registry@TRegistry@CloseKey$qqrv',
                                                                                            '@Registry@TRegistry@$bdtr$qqrv',
                                                                                            '@Registry@TRegistry@$bctr$qqrv',
                                                                                            '@Registry@TRegistry@',
                                                                                            '@Strutils@initialization$qqrv',
                                                                                            '@Strutils@Finalization$qqrv',
                                                                                            '@Helpintfs@initialization$qqrv',
                                                                                            '@Helpintfs@Finalization$qqrv',
                                                                                            '@$xp$22Helpintfs@IHelpManager',
                                                                                            '@Flatsb@initialization$qqrv',
                                                                                            '@Flatsb@Finalization$qqrv',
                                                                                            '@Mapi@initialization$qqrv',
                                                                                            '@Mapi@Finalization$qqrv',
                                                                                            '@Multimon@initialization$qqrv',
                                                                                            '@Multimon@Finalization$qqrv',
                                                                                            '@Consts@initialization$qqrv',
                                                                                            '@Consts@Finalization$qqrv',
                                                                                            '@Graphics@initialization$qqrv',
                                                                                            '@Graphics@Finalization$qqrv',
                                                                                            '@Graphics@TIcon@SetHandle$qqrui',
                                                                                            '@Graphics@TIcon@$bdtr$qqrv',
                                                                                            '@Graphics@TIcon@$bctr$qqrv',
                                                                                            '@Graphics@TBitmap@SetTransparentMode$qqr25Graphics@TTransparentMode',
                                                                                            '@Graphics@TBitmap@SetTransparentColor$qqr15Graphics@TColor',
                                                                                            '@Graphics@TBitmap@SetPixelFormat$qqr21Graphics@TPixelFormat',
                                                                                            '@Graphics@TBitmap@LoadFromResourceID$qqruii',
                                                                                            '@Graphics@TBitmap@GetScanline$qqri',
                                                                                            '@Graphics@TBitmap@GetCanvas$qqrv',
                                                                                            '@Graphics@TBitmap@$bdtr$qqrv',
                                                                                            '@Graphics@TBitmap@$bctr$qqrv',
                                                                                            '@Graphics@TPicture@GetHeight$qqrv',
                                                                                            '@Graphics@TPicture@GetWidth$qqrv',
                                                                                            '@Graphics@TPicture@SetGraphic$qqrp17Graphics@TGraphic',
                                                                                            '@Graphics@TPicture@$bctr$qqrv',
                                                                                            '@Graphics@TCanvas@SetHandle$qqrui',
                                                                                            '@Graphics@TCanvas@GetHandle$qqrv',
                                                                                            '@Graphics@TCanvas@GetClipRect$qqrv',
                                                                                            '@Graphics@TCanvas@SetPixel$qqrii15Graphics@TColor',
                                                                                            '@Graphics@TCanvas@GetPixel$qqrii',
                                                                                            '@Graphics@TCanvas@TextWidth$qqrx17System@AnsiString',
                                                                                            '@Graphics@TCanvas@TextExtent$qqrx17System@AnsiString',
                                                                                            '@Graphics@TCanvas@TextRect$qqrrx11Types@TRectiix17System@AnsiString',
                                                                                            '@Graphics@TCanvas@TextOut$qqriix17System@AnsiString',
                                                                                            '@Graphics@TCanvas@StretchDraw$qqrrx11Types@TRectp17Graphics@TGraphic',
                                                                                            '@Graphics@TCanvas@RoundRect$qqriiiiii',
                                                                                            '@Graphics@TCanvas@Refresh$qqrv',
                                                                                            '@Graphics@TCanvas@Rectangle$qqrrx11Types@TRect',
                                                                                            '@Graphics@TCanvas@Rectangle$qqriiii',
                                                                                            '@Graphics@TCanvas@Polygon$qqrpx12Types@TPointxi',
                                                                                            '@Graphics@TCanvas@MoveTo$qqrii',
                                                                                            '@Graphics@TCanvas@LineTo$qqrii',
                                                                                            '@Graphics@TCanvas@FrameRect$qqrrx11Types@TRect',
                                                                                            '@Graphics@TCanvas@FillRect$qqrrx11Types@TRect',
                                                                                            '@Graphics@TCanvas@Ellipse$qqriiii',
                                                                                            '@Graphics@TCanvas@DrawFocusRect$qqrrx11Types@TRect',
                                                                                            '@Graphics@TCanvas@Draw$qqriip17Graphics@TGraphic',
                                                                                            '@Graphics@TCanvas@CopyRect$qqrrx11Types@TRectp16Graphics@TCanvast1',
                                                                                            '@Graphics@TCanvas@BrushCopy$qqrrx11Types@TRectp16Graphics@TBitmapt115Graphics@TColor',
                                                                                            '@Graphics@TBrush@SetColor$qqr15Graphics@TColor',
                                                                                            '@Graphics@TBrush@GetColor$qqrv',
                                                                                            '@Graphics@TPen@SetWidth$qqri',
                                                                                            '@Graphics@TPen@SetColor$qqr15Graphics@TColor',
                                                                                            '@Graphics@TPen@GetColor$qqrv',
                                                                                            '@Graphics@TFont@SetCharset$qqruc',
                                                                                            '@Graphics@TFont@GetCharset$qqrv',
                                                                                            '@Graphics@TFont@SetPitch$qqr19Graphics@TFontPitch',
                                                                                            '@Graphics@TFont@GetPitch$qqrv',
                                                                                            '@Graphics@TFont@GetStyle$qqrv',
                                                                                            '@Graphics@TFont@SetSize$qqri',
                                                                                            '@Graphics@TFont@GetSize$qqrv',
                                                                                            '@Graphics@TFont@SetName$qqrx17System@AnsiString',
                                                                                            '@Graphics@TFont@GetName$qqrv',
                                                                                            '@Graphics@TFont@GetHeight$qqrv',
                                                                                            '@Graphics@TFont@SetHandle$qqrui',
                                                                                            '@Graphics@TFont@SetColor$qqr15Graphics@TColor',
                                                                                            '@Graphics@TFont@$bdtr$qqrv',
                                                                                            '@Graphics@TFont@$bctr$qqrv',
                                                                                            '@Graphics@ColorToRGB$qqr15Graphics@TColor',
                                                                                            '@Graphics@TIcon@',
                                                                                            '@Graphics@TBitmap@',
                                                                                            '@Graphics@TPicture@',
                                                                                            '@$xp$16Graphics@TCanvas',
                                                                                            '@Graphics@TFont@',
                                                                                            '@Printers@initialization$qqrv',
                                                                                            '@Printers@Finalization$qqrv',
                                                                                            '@Printers@Printer$qqrv',
                                                                                            '@Printers@TPrinter@GetPageWidth$qqrv',
                                                                                            '@Printers@TPrinter@GetPageHeight$qqrv',
                                                                                            '@Printers@TPrinter@GetCanvas$qqrv',
                                                                                            '@Printers@TPrinter@NewPage$qqrv',
                                                                                            '@Printers@TPrinter@EndDoc$qqrv',
                                                                                            '@Printers@TPrinter@BeginDoc$qqrv',
                                                                                            '@Stdctrls@initialization$qqrv',
                                                                                            '@Stdctrls@Finalization$qqrv',
                                                                                            '@Stdctrls@TScrollBar@SetMax$qqri',
                                                                                            '@Stdctrls@TScrollBar@SetPageSize$qqri',
                                                                                            '@Stdctrls@TScrollBar@SetPosition$qqri',
                                                                                            '@Stdctrls@TScrollBar@SetParams$qqriii',
                                                                                            '@Stdctrls@TScrollBar@SetKind$qqr20Forms@TScrollBarKind',
                                                                                            '@Stdctrls@TScrollBar@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TCustomListBox@SelectAll$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@MeasureItem$qqriri',
                                                                                            '@Stdctrls@TCustomListBox@WndProc$qqrr17Messages@TMessage',
                                                                                            '@Stdctrls@TCustomListBox@DestroyWnd$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@CreateWnd$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Stdctrls@TCustomListBox@ItemAtPos$qqrrx12Types@TPointo',
                                                                                            '@Stdctrls@TCustomListBox@SetMultiSelect$qqro',
                                                                                            '@Stdctrls@TCustomListBox@SetItemIndex$qqrxi',
                                                                                            '@Stdctrls@TCustomListBox@GetSelCount$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@GetCount$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@GetItemIndex$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@DeleteSelected$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@CopySelection$qqrp27Controls@TCustomListControl',
                                                                                            '@Stdctrls@TCustomListBox@ClearSelection$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@Clear$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@AddItem$qqr17System@AnsiStringp14System@TObject',
                                                                                            '@Stdctrls@TCustomListBox@$bdtr$qqrv',
                                                                                            '@Stdctrls@TCustomListBox@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TRadioButton@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TCustomCheckBox@CreateWnd$qqrv',
                                                                                            '@Stdctrls@TCustomCheckBox@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Stdctrls@TCustomCheckBox@SetChecked$qqro',
                                                                                            '@Stdctrls@TCustomCheckBox@GetChecked$qqrv',
                                                                                            '@Stdctrls@TCustomCheckBox@Toggle$qqrv',
                                                                                            '@Stdctrls@TCustomCheckBox@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TButton@CreateWnd$qqrv',
                                                                                            '@Stdctrls@TButton@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Stdctrls@TButton@SetDefault$qqro',
                                                                                            '@Stdctrls@TButton@SetButtonStyle$qqro',
                                                                                            '@Stdctrls@TButton@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TButtonControl@WndProc$qqrr17Messages@TMessage',
                                                                                            '@Stdctrls@TButtonControl@SetChecked$qqro',
                                                                                            '@Stdctrls@TButtonControl@GetChecked$qqrv',
                                                                                            '@Stdctrls@TCustomComboBox@$bdtr$qqrv',
                                                                                            '@Stdctrls@TCustomComboBox@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TCustomCombo@SetMaxLength$qqri',
                                                                                            '@Stdctrls@TCustomCombo@SetSelLength$qqri',
                                                                                            '@Stdctrls@TCustomCombo@SetSelStart$qqri',
                                                                                            '@Stdctrls@TCustomCombo@SetDroppedDown$qqro',
                                                                                            '@Stdctrls@TCustomCombo@GetDroppedDown$qqrv',
                                                                                            '@Stdctrls@TCustomCombo@$bdtr$qqrv',
                                                                                            '@Stdctrls@TCustomMemo@SetWordWrap$qqro',
                                                                                            '@Stdctrls@TCustomMemo@SetAlignment$qqr18Classes@TAlignment',
                                                                                            '@Stdctrls@TCustomMemo@Loaded$qqrv',
                                                                                            '@Stdctrls@TCustomMemo@SetCaretPos$qqrrx12Types@TPoint',
                                                                                            '@Stdctrls@TCustomMemo@GetCaretPos$qqrv',
                                                                                            '@Stdctrls@TCustomMemo@CreateWindowHandle$qqrrx22Controls@TCreateParams',
                                                                                            '@Stdctrls@TCustomMemo@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Stdctrls@TCustomMemo@$bdtr$qqrv',
                                                                                            '@Stdctrls@TCustomMemo@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TCustomEdit@DefaultHandler$qqrpv',
                                                                                            '@Stdctrls@TCustomEdit@DestroyWnd$qqrv',
                                                                                            '@Stdctrls@TCustomEdit@CreateWnd$qqrv',
                                                                                            '@Stdctrls@TCustomEdit@SetSelText$qqrx17System@AnsiString',
                                                                                            '@Stdctrls@TCustomEdit@GetSelText$qqrv',
                                                                                            '@Stdctrls@TCustomEdit@GetSelTextBuf$qqrpci',
                                                                                            '@Stdctrls@TCustomEdit@SelectAll$qqrv',
                                                                                            '@Stdctrls@TCustomEdit@Clear$qqrv',
                                                                                            '@Stdctrls@TCustomEdit@SetSelLength$qqri',
                                                                                            '@Stdctrls@TCustomEdit@GetSelLength$qqrv',
                                                                                            '@Stdctrls@TCustomEdit@SetSelStart$qqri',
                                                                                            '@Stdctrls@TCustomEdit@GetSelStart$qqrv',
                                                                                            '@Stdctrls@TCustomEdit@SetReadOnly$qqro',
                                                                                            '@Stdctrls@TCustomEdit@SetMaxLength$qqri',
                                                                                            '@Stdctrls@TCustomEdit@SetBorderStyle$qqr22Forms@TFormBorderStyle',
                                                                                            '@Stdctrls@TCustomEdit@SetAutoSize$qqro',
                                                                                            '@Stdctrls@TCustomEdit@DoSetMaxLength$qqri',
                                                                                            '@Stdctrls@TCustomEdit@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TCustomLabel@Notification$qqrp18Classes@TComponent18Classes@TOperation',
                                                                                            '@Stdctrls@TCustomLabel@SetWordWrap$qqro',
                                                                                            '@Stdctrls@TCustomLabel@SetFocusControl$qqrp20Controls@TWinControl',
                                                                                            '@Stdctrls@TCustomLabel@SetAutoSize$qqro',
                                                                                            '@Stdctrls@TCustomLabel@Loaded$qqrv',
                                                                                            '@Stdctrls@TCustomLabel@Paint$qqrv',
                                                                                            '@Stdctrls@TCustomLabel@GetLabelText$qqrv',
                                                                                            '@Stdctrls@TCustomLabel@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TCustomGroupBox@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Stdctrls@TStaticText@',
                                                                                            '@Stdctrls@TScrollBar@',
                                                                                            '@$xp$17Stdctrls@TListBox',
                                                                                            '@Stdctrls@TListBox@',
                                                                                            '@Stdctrls@TRadioButton@',
                                                                                            '@$xp$18Stdctrls@TCheckBox',
                                                                                            '@Stdctrls@TCheckBox@',
                                                                                            '@$xp$16Stdctrls@TButton',
                                                                                            '@Stdctrls@TButton@',
                                                                                            '@Stdctrls@TComboBox@',
                                                                                            '@$xp$14Stdctrls@TMemo',
                                                                                            '@Stdctrls@TMemo@',
                                                                                            '@Stdctrls@TEdit@',
                                                                                            '@$xp$15Stdctrls@TLabel',
                                                                                            '@Stdctrls@TLabel@',
                                                                                            '@Stdctrls@TGroupBox@',
                                                                                            '@Extctrls@initialization$qqrv',
                                                                                            '@Extctrls@Finalization$qqrv',
                                                                                            '@Extctrls@TSplitter@SetBeveled$qqro',
                                                                                            '@Extctrls@TSplitter@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Extctrls@TCustomRadioGroup@$bdtr$qqrv',
                                                                                            '@Extctrls@TCustomRadioGroup@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Extctrls@TCustomPanel@CanAutoSize$qqrrit1',
                                                                                            '@Extctrls@TCustomPanel@AdjustClientRect$qqrr11Types@TRect',
                                                                                            '@Extctrls@TCustomPanel@SetBorderStyle$qqr22Forms@TFormBorderStyle',
                                                                                            '@Extctrls@TCustomPanel@SetBorderWidth$qqri',
                                                                                            '@Extctrls@TCustomPanel@SetBevelWidth$qqri',
                                                                                            '@Extctrls@TCustomPanel@SetBevelOuter$qqr18Controls@TBevelCut',
                                                                                            '@Extctrls@TCustomPanel@SetBevelInner$qqr18Controls@TBevelCut',
                                                                                            '@Extctrls@TCustomPanel@Paint$qqrv',
                                                                                            '@Extctrls@TCustomPanel@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Extctrls@TCustomPanel@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Extctrls@TTimer@SetOnTimer$qqrynpqqrp14System@TObject$v',
                                                                                            '@Extctrls@TTimer@SetInterval$qqrui',
                                                                                            '@Extctrls@TTimer@SetEnabled$qqro',
                                                                                            '@Extctrls@TTimer@$bdtr$qqrv',
                                                                                            '@Extctrls@TTimer@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Extctrls@TImage@SetPicture$qqrp17Graphics@TPicture',
                                                                                            '@Extctrls@TControlBar@',
                                                                                            '@Extctrls@TSplitter@',
                                                                                            '@Extctrls@TRadioGroup@',
                                                                                            '@$xp$15Extctrls@TPanel',
                                                                                            '@Extctrls@TPanel@',
                                                                                            '@Extctrls@TTimer@',
                                                                                            '@Extctrls@TBevel@',
                                                                                            '@Extctrls@TImage@',
                                                                                            '@Dialogs@initialization$qqrv',
                                                                                            '@Dialogs@Finalization$qqrv',
                                                                                            '@Dialogs@ShowMessage$qqrx17System@AnsiString',
                                                                                            '@Dialogs@TFontDialog@SetFont$qqrp14Graphics@TFont',
                                                                                            '@Dialogs@TOpenDialog@SetInitialDir$qqrx17System@AnsiString',
                                                                                            '@Dialogs@TPrinterSetupDialog@',
                                                                                            '@Dialogs@TFontDialog@',
                                                                                            '@Dialogs@TColorDialog@',
                                                                                            '@Dialogs@TSaveDialog@',
                                                                                            '@Dialogs@TOpenDialog@',
                                                                                            '@Clipbrd@initialization$qqrv',
                                                                                            '@Clipbrd@Finalization$qqrv',
                                                                                            '@Clipbrd@Clipboard$qqrv',
                                                                                            '@Clipbrd@TClipboard@HasFormat$qqrus',
                                                                                            '@Clipbrd@TClipboard@SetAsHandle$qqrusui',
                                                                                            '@Clipbrd@TClipboard@GetAsHandle$qqrus',
                                                                                            '@Clipbrd@TClipboard@SetTextBuf$qqrpc',
                                                                                            '@Stdactns@initialization$qqrv',
                                                                                            '@Stdactns@Finalization$qqrv',
                                                                                            '@Stdactns@TSearchFindNext@',
                                                                                            '@Stdactns@TSearchFind@',
                                                                                            '@Stdactns@TEditCopy@',
                                                                                            '@Winhelpviewer@initialization$qqrv',
                                                                                            '@Winhelpviewer@Finalization$qqrv',
                                                                                            '@Winhelpviewer@WinHelpTester',
                                                                                            '@Actnlist@initialization$qqrv',
                                                                                            '@Actnlist@Finalization$qqrv',
                                                                                            '@Actnlist@TAction@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Actnlist@TCustomAction@SetVisible$qqro',
                                                                                            '@Actnlist@TCustomAction@SetShortCut$qqrus',
                                                                                            '@Actnlist@TCustomAction@SetImageIndex$qqri',
                                                                                            '@Actnlist@TCustomAction@SetHint$qqrx17System@AnsiString',
                                                                                            '@Actnlist@TCustomAction@SetEnabled$qqro',
                                                                                            '@Actnlist@TCustomAction@SetChecked$qqro',
                                                                                            '@Actnlist@TCustomAction@SetCaption$qqrx17System@AnsiString',
                                                                                            '@Actnlist@TCustomAction@$bdtr$qqrv',
                                                                                            '@Actnlist@TCustomActionList@GetActionCount$qqrv',
                                                                                            '@Actnlist@TCustomActionList@GetAction$qqri',
                                                                                            '@Actnlist@TContainedAction@SetCategory$qqrx17System@AnsiString',
                                                                                            '@Actnlist@TContainedAction@$bdtr$qqrv',
                                                                                            '@Actnlist@TAction@',
                                                                                            '@Actnlist@TActionList@',
                                                                                            '@Forms@initialization$qqrv',
                                                                                            '@Forms@Finalization$qqrv',
                                                                                            '@Forms@TApplication@CancelHint$qqrv',
                                                                                            '@Forms@TApplication@SetShowHint$qqro',
                                                                                            '@Forms@TApplication@GetExeName$qqrv',
                                                                                            '@Forms@TApplication@HelpCommand$qqrii',
                                                                                            '@Forms@TApplication@HelpContext$qqri',
                                                                                            '@Forms@TApplication@ShowException$qqrp18Sysutils@Exception',
                                                                                            '@Forms@TApplication@Run$qqrv',
                                                                                            '@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv',
                                                                                            '@Forms@TApplication@Initialize$qqrv',
                                                                                            '@Forms@TApplication@HandleMessage$qqrv',
                                                                                            '@Forms@TApplication@ProcessMessages$qqrv',
                                                                                            '@Forms@TApplication@SetTitle$qqrx17System@AnsiString',
                                                                                            '@Forms@TApplication@GetTitle$qqrv',
                                                                                            '@Forms@TApplication@BringToFront$qqrv',
                                                                                            '@Forms@TScreen@SetCursors$qqriui',
                                                                                            '@Forms@TScreen@SetCursor$qqr16Controls@TCursor',
                                                                                            '@Forms@TScreen@GetFormCount$qqrv',
                                                                                            '@Forms@TScreen@GetForm$qqri',
                                                                                            '@Forms@TScreen@GetMonitorCount$qqrv',
                                                                                            '@Forms@TScreen@GetMonitor$qqri',
                                                                                            '@Forms@TScreen@GetDesktopWidth$qqrv',
                                                                                            '@Forms@TScreen@GetDesktopHeight$qqrv',
                                                                                            '@Forms@TScreen@GetDesktopLeft$qqrv',
                                                                                            '@Forms@TScreen@GetDesktopTop$qqrv',
                                                                                            '@Forms@TScreen@GetWidth$qqrv',
                                                                                            '@Forms@TScreen@GetHeight$qqrv',
                                                                                            '@Forms@TMonitor@GetWidth$qqrv',
                                                                                            '@Forms@TMonitor@GetTop$qqrv',
                                                                                            '@Forms@TMonitor@GetHeight$qqrv',
                                                                                            '@Forms@TMonitor@GetLeft$qqrv',
                                                                                            '@Forms@TForm@ArrangeIcons$qqrv',
                                                                                            '@Forms@TForm@Cascade$qqrv',
                                                                                            '@Forms@TForm@Tile$qqrv',
                                                                                            '@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv',
                                                                                            '@Forms@TCustomForm@UpdateActions$qqrv',
                                                                                            '@Forms@TCustomForm@ShowModal$qqrv',
                                                                                            '@Forms@TCustomForm@SetFocus$qqrv',
                                                                                            '@Forms@TCustomForm@Show$qqrv',
                                                                                            '@Forms@TCustomForm@Hide$qqrv',
                                                                                            '@Forms@TCustomForm@CloseQuery$qqrv',
                                                                                            '@Forms@TCustomForm@Close$qqrv',
                                                                                            '@Forms@TCustomForm@Resizing$qqr18Forms@TWindowState',
                                                                                            '@Forms@TCustomForm@PaintWindow$qqrui',
                                                                                            '@Forms@TCustomForm@SetFocusedControl$qqrp20Controls@TWinControl',
                                                                                            '@Forms@TCustomForm@SetActiveControl$qqrp20Controls@TWinControl',
                                                                                            '@Forms@TCustomForm@DefaultHandler$qqrpv',
                                                                                            '@Forms@TCustomForm@DestroyWindowHandle$qqrv',
                                                                                            '@Forms@TCustomForm@CreateWindowHandle$qqrrx22Controls@TCreateParams',
                                                                                            '@Forms@TCustomForm@CreateWnd$qqrv',
                                                                                            '@Forms@TCustomForm@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Forms@TCustomForm@SetWindowState$qqr18Forms@TWindowState',
                                                                                            '@Forms@TCustomForm@SetPosition$qqr15Forms@TPosition',
                                                                                            '@Forms@TCustomForm@SetMenu$qqrp15Menus@TMainMenu',
                                                                                            '@Forms@TCustomForm@SetFormStyle$qqr16Forms@TFormStyle',
                                                                                            '@Forms@TCustomForm@GetCanvas$qqrv',
                                                                                            '@Forms@TCustomForm@GetMonitor$qqrv',
                                                                                            '@Forms@TCustomForm@GetMDIChildren$qqri',
                                                                                            '@Forms@TCustomForm@GetMDIChildCount$qqrv',
                                                                                            '@Forms@TCustomForm@GetActiveMDIChild$qqrv',
                                                                                            '@Forms@TCustomForm@SetBorderStyle$qqr22Forms@TFormBorderStyle',
                                                                                            '@Forms@TCustomForm@AlignControls$qqrp17Controls@TControlr11Types@TRect',
                                                                                            '@Forms@TCustomForm@WndProc$qqrr17Messages@TMessage',
                                                                                            '@Forms@TCustomForm@ValidateRename$qqrp18Classes@TComponentx17System@AnsiStringt2',
                                                                                            '@Forms@TCustomForm@SetParent$qqrp20Controls@TWinControl',
                                                                                            '@Forms@TCustomForm@WantChildKey$qqrp17Controls@TControlr17Messages@TMessage',
                                                                                            '@Forms@TCustomForm@SetVisible$qqro',
                                                                                            '@Forms@TCustomForm@SetClientHeight$qqri',
                                                                                            '@Forms@TCustomForm@SetClientWidth$qqri',
                                                                                            '@Forms@TCustomForm@SetParentBiDiMode$qqro',
                                                                                            '@Forms@TCustomForm@GetFloating$qqrv',
                                                                                            '@Forms@TCustomForm@GetClientRect$qqrv',
                                                                                            '@Forms@TCustomForm@DefineProperties$qqrp14Classes@TFiler',
                                                                                            '@Forms@TCustomForm@ReadState$qqrp15Classes@TReader',
                                                                                            '@Forms@TCustomForm@Notification$qqrp18Classes@TComponent18Classes@TOperation',
                                                                                            '@Forms@TCustomForm@Loaded$qqrv',
                                                                                            '@Forms@TCustomForm@DoDestroy$qqrv',
                                                                                            '@Forms@TCustomForm@DoCreate$qqrv',
                                                                                            '@Forms@TCustomForm@$bdtr$qqrv',
                                                                                            '@Forms@TCustomForm@BeforeDestruction$qqrv',
                                                                                            '@Forms@TCustomForm@$bctr$qqrp18Classes@TComponenti',
                                                                                            '@Forms@TCustomForm@AfterConstruction$qqrv',
                                                                                            '@Forms@TCustomForm@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Forms@TScrollBox@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Forms@TScrollingWinControl@AdjustClientRect$qqrr11Types@TRect',
                                                                                            '@Forms@TScrollingWinControl@AutoScrollInView$qqrp17Controls@TControl',
                                                                                            '@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv',
                                                                                            '@Forms@TScrollingWinControl@$bdtr$qqrv',
                                                                                            '@Forms@TControlScrollBar@SetVisible$qqro',
                                                                                            '@Forms@TControlScrollBar@SetPosition$qqri',
                                                                                            '@Forms@KeyDataToShiftState$qqri',
                                                                                            '@Forms@KeysToShiftState$qqrus',
                                                                                            '@Forms@EnableTaskWindows$qqrpv',
                                                                                            '@Forms@DisableTaskWindows$qqrui',
                                                                                            '@Forms@Screen',
                                                                                            '@Forms@Application',
                                                                                            '@$xp$11Forms@TForm',
                                                                                            '@Forms@TForm@',
                                                                                            '@Forms@TScrollBox@',
                                                                                            '@Imglist@initialization$qqrv',
                                                                                            '@Imglist@Finalization$qqrv',
                                                                                            '@Imglist@TCustomImageList@GetCount$qqrv',
                                                                                            '@Imglist@TCustomImageList@GetIcon$qqrip14Graphics@TIcon',
                                                                                            '@Imglist@TCustomImageList@GetBitmap$qqrip16Graphics@TBitmap',
                                                                                            '@Imglist@TCustomImageList@AddIcon$qqrp14Graphics@TIcon',
                                                                                            '@Imglist@TCustomImageList@AddMasked$qqrp16Graphics@TBitmap15Graphics@TColor',
                                                                                            '@Imglist@TCustomImageList@GetHandle$qqrv',
                                                                                            '@Imglist@TCustomImageList@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Menus@initialization$qqrv',
                                                                                            '@Menus@Finalization$qqrv',
                                                                                            '@Menus@TPopupMenu@$bdtr$qqrv',
                                                                                            '@Menus@TPopupMenu@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Menus@TMainMenu@Unmerge$qqrp15Menus@TMainMenu',
                                                                                            '@Menus@TMenu@$bdtr$qqrv',
                                                                                            '@Menus@TMenuItem@SetAutoHotkeys$qqrx23Menus@TMenuItemAutoFlag',
                                                                                            '@Menus@TMenuItem@Clear$qqrv',
                                                                                            '@Menus@TMenuItem@Notification$qqrp18Classes@TComponent18Classes@TOperation',
                                                                                            '@Menus@TMenuItem@AssignTo$qqrp19Classes@TPersistent',
                                                                                            '@Menus@TMenuItem@SetAction$qqrp20Classes@TBasicAction',
                                                                                            '@Menus@TMenuItem@MenuChanged$qqro',
                                                                                            '@Menus@TMenuItem@Remove$qqrp15Menus@TMenuItem',
                                                                                            '@Menus@TMenuItem@Add$qqrp15Menus@TMenuItem',
                                                                                            '@Menus@TMenuItem@IndexOf$qqrp15Menus@TMenuItem',
                                                                                            '@Menus@TMenuItem@Delete$qqri',
                                                                                            '@Menus@TMenuItem@Insert$qqrip15Menus@TMenuItem',
                                                                                            '@Menus@TMenuItem@InitiateAction$qqrv',
                                                                                            '@Menus@TMenuItem@GetMenuIndex$qqrv',
                                                                                            '@Menus@TMenuItem@SetImageIndex$qqri',
                                                                                            '@Menus@TMenuItem@SetVisible$qqro',
                                                                                            '@Menus@TMenuItem@SetShortCut$qqrus',
                                                                                            '@Menus@TMenuItem@GetItem$qqri',
                                                                                            '@Menus@TMenuItem@GetCount$qqrv',
                                                                                            '@Menus@TMenuItem@GetAction$qqrv',
                                                                                            '@Menus@TMenuItem@SetEnabled$qqro',
                                                                                            '@Menus@TMenuItem@SetChecked$qqro',
                                                                                            '@Menus@TMenuItem@SetCaption$qqrx17System@AnsiString',
                                                                                            '@Menus@TMenuItem@MeasureItem$qqrp16Graphics@TCanvasrit2',
                                                                                            '@Menus@TMenuItem@DrawItem$qqrp16Graphics@TCanvasrx11Types@TRecto',
                                                                                            '@Menus@TMenuItem@DefineProperties$qqrp14Classes@TFiler',
                                                                                            '@Menus@TMenuItem@Loaded$qqrv',
                                                                                            '@Menus@TMenuItem@$bdtr$qqrv',
                                                                                            '@Menus@TMenuItem@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Menus@TextToShortCut$qqr17System@AnsiString',
                                                                                            '@Menus@ShortCutToText$qqrus',
                                                                                            '@Menus@TPopupMenu@',
                                                                                            '@Menus@TMainMenu@',
                                                                                            '@$xp$15Menus@TMenuItem',
                                                                                            '@Menus@TMenuItem@',
                                                                                            '@Controls@initialization$qqrv',
                                                                                            '@Controls@Finalization$qqrv',
                                                                                            '@Controls@TCustomListControl@MoveSelection$qqrp27Controls@TCustomListControl',
                                                                                            '@Controls@TMouse@GetCursorPos$qqrv',
                                                                                            '@Controls@TCustomControl@Paint$qqrv',
                                                                                            '@Controls@TCustomControl@PaintWindow$qqrui',
                                                                                            '@Controls@TCustomControl@$bdtr$qqrv',
                                                                                            '@Controls@TCustomControl@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Controls@THintWindow@NCPaint$qqrui',
                                                                                            '@Controls@THintWindow@ActivateHintData$qqrrx11Types@TRectx17System@AnsiStringpv',
                                                                                            '@Controls@THintWindow@IsHintMsg$qqrr6tagMSG',
                                                                                            '@Controls@THintWindow@Paint$qqrv',
                                                                                            '@Controls@THintWindow@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Controls@THintWindow@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Controls@TGraphicControl@$bdtr$qqrv',
                                                                                            '@Controls@TWinControl@SetBevelKind$qqrx19Controls@TBevelKind',
                                                                                            '@Controls@TWinControl@SetBevelCut$qqrix18Controls@TBevelCut',
                                                                                            '@Controls@TWinControl@CanAutoSize$qqrrit1',
                                                                                            '@Controls@TWinControl@AssignTo$qqrp19Classes@TPersistent',
                                                                                            '@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1',
                                                                                            '@Controls@TWinControl@CanResize$qqrrit1',
                                                                                            '@Controls@TWinControl@HandleAllocated$qqrv',
                                                                                            '@Controls@TWinControl@SetTabStop$qqro',
                                                                                            '@Controls@TWinControl@SetCtl3D$qqro',
                                                                                            '@Controls@TWinControl@GetClientRect$qqrv',
                                                                                            '@Controls@TWinControl@GetClientOrigin$qqrv',
                                                                                            '@Controls@TWinControl@GetControlExtents$qqrv',
                                                                                            '@Controls@TWinControl@GetHandle$qqrv',
                                                                                            '@Controls@TWinControl@SetFocus$qqrv',
                                                                                            '@Controls@TWinControl@Repaint$qqrv',
                                                                                            '@Controls@TWinControl@Update$qqrv',
                                                                                            '@Controls@TWinControl@Invalidate$qqrv',
                                                                                            '@Controls@TWinControl@GetDeviceContext$qqrrui',
                                                                                            '@Controls@TWinControl@ShowControl$qqrp17Controls@TControl',
                                                                                            '@Controls@TWinControl@SetBounds$qqriiii',
                                                                                            '@Controls@TWinControl@DoEnter$qqrv',
                                                                                            '@Controls@TWinControl@PaintTo$qqrp16Graphics@TCanvasii',
                                                                                            '@Controls@TWinControl@PaintControls$qqruip17Controls@TControl',
                                                                                            '@Controls@TWinControl@PaintWindow$qqrui',
                                                                                            '@Controls@TWinControl@DefaultHandler$qqrpv',
                                                                                            '@Controls@TWinControl@WndProc$qqrr17Messages@TMessage',
                                                                                            '@Controls@TWinControl@SetParentWindow$qqrui',
                                                                                            '@Controls@TWinControl@DestroyHandle$qqrv',
                                                                                            '@Controls@TWinControl@CustomAlignPosition$qqrp17Controls@TControlrit2t2t2r11Types@TRectrx19Controls@TAlignInfo',
                                                                                            '@Controls@TWinControl@CustomAlignInsertBefore$qqrp17Controls@TControlt1',
                                                                                            '@Controls@TWinControl@CreateHandle$qqrv',
                                                                                            '@Controls@TWinControl@DestroyWindowHandle$qqrv',
                                                                                            '@Controls@TWinControl@DestroyWnd$qqrv',
                                                                                            '@Controls@TWinControl@DefineProperties$qqrp14Classes@TFiler',
                                                                                            '@Controls@TWinControl@CreateWindowHandle$qqrrx22Controls@TCreateParams',
                                                                                            '@Controls@TWinControl@CreateWnd$qqrv',
                                                                                            '@Controls@TWinControl@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Controls@TWinControl@GetControlCount$qqrv',
                                                                                            '@Controls@TWinControl@GetControl$qqri',
                                                                                            '@Controls@TWinControl@AlignControls$qqrp17Controls@TControlr11Types@TRect',
                                                                                            '@Controls@TWinControl@AdjustClientRect$qqrr11Types@TRect',
                                                                                            '@Controls@TWinControl@ReadState$qqrp15Classes@TReader',
                                                                                            '@Controls@TWinControl@$bdtr$qqrv',
                                                                                            '@Controls@TControl@InitiateAction$qqrv',
                                                                                            '@Controls@TControl@GetFloatingDockSiteClass$qqrv',
                                                                                            '@Controls@TControl@GetFloating$qqrv',
                                                                                            '@Controls@TControl@AssignTo$qqrp19Classes@TPersistent',
                                                                                            '@Controls@TControl@Loaded$qqrv',
                                                                                            '@Controls@TControl@DblClick$qqrv',
                                                                                            '@Controls@TControl@DefineProperties$qqrp14Classes@TFiler',
                                                                                            '@Controls@TControl@DefaultHandler$qqrpv',
                                                                                            '@Controls@TControl@WndProc$qqrr17Messages@TMessage',
                                                                                            '@Controls@TControl@UpdateBoundsRect$qqrrx11Types@TRect',
                                                                                            '@Controls@TControl@Perform$qqruiii',
                                                                                            '@Controls@TControl@ConstrainedResize$qqrrit1t1t1',
                                                                                            '@Controls@TControl@CanResize$qqrrit1',
                                                                                            '@Controls@TControl@CanAutoSize$qqrrit1',
                                                                                            '@Controls@TControl@ManualFloat$qqrrx11Types@TRect',
                                                                                            '@Controls@TControl@ManualDock$qqrp20Controls@TWinControlp17Controls@TControl15Controls@TAlign',
                                                                                            '@Controls@TControl@Repaint$qqrv',
                                                                                            '@Controls@TControl@Refresh$qqrv',
                                                                                            '@Controls@TControl@Update$qqrv',
                                                                                            '@Controls@TControl@Invalidate$qqrv',
                                                                                            '@Controls@TControl@GetDeviceContext$qqrrui',
                                                                                            '@Controls@TControl@BringToFront$qqrv',
                                                                                            '@Controls@TControl@SetCursor$qqr16Controls@TCursor',
                                                                                            '@Controls@TControl@SetParentBiDiMode$qqro',
                                                                                            '@Controls@TControl@SetColor$qqr15Graphics@TColor',
                                                                                            '@Controls@TControl@SetShowHint$qqro',
                                                                                            '@Controls@TControl@SetFont$qqrp14Graphics@TFont',
                                                                                            '@Controls@TControl@SetBiDiMode$qqr17Classes@TBiDiMode',
                                                                                            '@Controls@TControl@SetText$qqrx17System@AnsiString',
                                                                                            '@Controls@TControl@GetText$qqrv',
                                                                                            '@Controls@TControl@SetPopupMenu$qqrp16Menus@TPopupMenu',
                                                                                            '@Controls@TControl@SetEnabled$qqro',
                                                                                            '@Controls@TControl@SetVisible$qqro',
                                                                                            '@Controls@TControl@SetParent$qqrp20Controls@TWinControl',
                                                                                            '@Controls@TControl@SetName$qqrx17System@AnsiString',
                                                                                            '@Controls@TControl@SetAutoSize$qqro',
                                                                                            '@Controls@TControl@ScreenToClient$qqrrx12Types@TPoint',
                                                                                            '@Controls@TControl@ClientToScreen$qqrrx12Types@TPoint',
                                                                                            '@Controls@TControl@GetClientOrigin$qqrv',
                                                                                            '@Controls@TControl@SetClientHeight$qqri',
                                                                                            '@Controls@TControl@GetClientHeight$qqrv',
                                                                                            '@Controls@TControl@SetClientWidth$qqri',
                                                                                            '@Controls@TControl@GetClientWidth$qqrv',
                                                                                            '@Controls@TControl@GetClientRect$qqrv',
                                                                                            '@Controls@TControl@GetBoundsRect$qqrv',
                                                                                            '@Controls@TControl@SetHelpContext$qqrxi',
                                                                                            '@Controls@TControl@SetHeight$qqri',
                                                                                            '@Controls@TControl@SetWidth$qqri',
                                                                                            '@Controls@TControl@SetTop$qqri',
                                                                                            '@Controls@TControl@SetLeft$qqri',
                                                                                            '@Controls@TControl@SetBounds$qqriiii',
                                                                                            '@Controls@TControl@SetAlign$qqr15Controls@TAlign',
                                                                                            '@Controls@TControl@Notification$qqrp18Classes@TComponent18Classes@TOperation',
                                                                                            '@Controls@TControl@ReadState$qqrp15Classes@TReader',
                                                                                            '@Controls@TControl@Resize$qqrv',
                                                                                            '@Controls@TControl@SetDragMode$qqr18Controls@TDragMode',
                                                                                            '@Controls@TControl@GetAction$qqrv',
                                                                                            '@Controls@TControl@GetEnabled$qqrv',
                                                                                            '@Controls@TControl@GetDragImages$qqrv',
                                                                                            '@Controls@TControl@$bdtr$qqrv',
                                                                                            '@Controls@TSizeConstraints@SetConstraints$qqrii',
                                                                                            '@Controls@Mouse',
                                                                                            '@$xp$19Controls@TImageList',
                                                                                            '@Controls@TImageList@',
                                                                                            '@$xp$20Controls@THintWindow',
                                                                                            '@Controls@THintWindow@',
                                                                                            '@$xp$23Controls@TCustomControl',
                                                                                            '@Controls@TCustomControl@',
                                                                                            '@Controls@TWinControl@',
                                                                                            '@Buttons@initialization$qqrv',
                                                                                            '@Buttons@Finalization$qqrv',
                                                                                            '@Buttons@TBitBtn@GetGlyph$qqrv',
                                                                                            '@Buttons@TBitBtn@SetGlyph$qqrp16Graphics@TBitmap',
                                                                                            '@Buttons@TBitBtn@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Buttons@TSpeedButton@SetLayout$qqr21Buttons@TButtonLayout',
                                                                                            '@Buttons@TSpeedButton@SetGlyph$qqrp16Graphics@TBitmap',
                                                                                            '@Buttons@TSpeedButton@GetGlyph$qqrv',
                                                                                            '@Buttons@TSpeedButton@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Buttons@TBitBtn@',
                                                                                            '@Buttons@TSpeedButton@',
                                                                                            '@Toolwin@initialization$qqrv',
                                                                                            '@Toolwin@Finalization$qqrv',
                                                                                            '@Comstrs@initialization$qqrv',
                                                                                            '@Comstrs@Finalization$qqrv',
                                                                                            '@Extdlgs@initialization$qqrv',
                                                                                            '@Extdlgs@Finalization$qqrv',
                                                                                            '@Extactns@initialization$qqrv',
                                                                                            '@Extactns@Finalization$qqrv',
                                                                                            '@Listactns@initialization$qqrv',
                                                                                            '@Listactns@Finalization$qqrv',
                                                                                            '@Comctrls@initialization$qqrv',
                                                                                            '@Comctrls@Finalization$qqrv',
                                                                                            '@Comctrls@TToolBar@GetButtonCount$qqrv',
                                                                                            '@Comctrls@TToolBar@GetButton$qqri',
                                                                                            '@Comctrls@TToolButton@SetStyle$qqr25Comctrls@TToolButtonStyle',
                                                                                            '@Comctrls@TToolButton@SetImageIndex$qqri',
                                                                                            '@Comctrls@TToolButton@SetDown$qqro',
                                                                                            '@Comctrls@TToolButton@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Comctrls@TCustomListView@Clear$qqrv',
                                                                                            '@Comctrls@TCustomListView@SelectAll$qqrv',
                                                                                            '@Comctrls@TCustomListView@GetCount$qqrv',
                                                                                            '@Comctrls@TCustomListView@DeleteSelected$qqrv',
                                                                                            '@Comctrls@TCustomListView@CopySelection$qqrp27Controls@TCustomListControl',
                                                                                            '@Comctrls@TCustomListView@ClearSelection$qqrv',
                                                                                            '@Comctrls@TCustomListView@DoInfoTip$qqrp18Comctrls@TListItemr17System@AnsiString',
                                                                                            '@Comctrls@TCustomListView@CustomDraw$qqrrx11Types@TRect25Comctrls@TCustomDrawStage',
                                                                                            '@Comctrls@TCustomListView@IsCustomDrawn$qqr26Comctrls@TCustomDrawTarget25Comctrls@TCustomDrawStage',
                                                                                            '@Comctrls@TCustomListView@StringWidth$qqr17System@AnsiString',
                                                                                            '@Comctrls@TCustomListView@GetItemAt$qqrii',
                                                                                            '@Comctrls@TCustomListView@SetFocused$qqrp18Comctrls@TListItem',
                                                                                            '@Comctrls@TCustomListView@SetSelected$qqrp18Comctrls@TListItem',
                                                                                            '@Comctrls@TCustomListView@GetSelected$qqrv',
                                                                                            '@Comctrls@TCustomListView@GetHitTestInfoAt$qqrii',
                                                                                            '@Comctrls@TCustomListView@FindData$qqripvoo',
                                                                                            '@Comctrls@TCustomListView@GetColumnFromIndex$qqri',
                                                                                            '@Comctrls@TCustomListView@SetSmallImages$qqrp24Imglist@TCustomImageList',
                                                                                            '@Comctrls@TCustomListView@SetLargeImages$qqrp24Imglist@TCustomImageList',
                                                                                            '@Comctrls@TCustomListView@AlphaSort$qqrv',
                                                                                            '@Comctrls@TCustomListView@WndProc$qqrr17Messages@TMessage',
                                                                                            '@Comctrls@TCustomListView@GetDragImages$qqrv',
                                                                                            '@Comctrls@TCustomListView@AddItem$qqr17System@AnsiStringp14System@TObject',
                                                                                            '@Comctrls@TCustomListView@GetSelCount$qqrv',
                                                                                            '@Comctrls@TCustomListView@CreateListItems$qqrv',
                                                                                            '@Comctrls@TCustomListView@CreateListItem$qqrv',
                                                                                            '@Comctrls@TCustomListView@OwnerDataHint$qqrii',
                                                                                            '@Comctrls@TCustomListView@OwnerDataFind$qqr18Comctrls@TItemFindx17System@AnsiStringrx12Types@TPointpvi25Comctrls@TSearchDirectiono',
                                                                                            '@Comctrls@TCustomListView@GetItemIndex$qqrv',
                                                                                            '@Comctrls@TCustomListView@SetViewStyle$qqr19Comctrls@TViewStyle',
                                                                                            '@Comctrls@TCustomListView@SetReadOnly$qqro',
                                                                                            '@Comctrls@TCustomListView@SetHideSelection$qqro',
                                                                                            '@Comctrls@TCustomListView@SetMultiSelect$qqro',
                                                                                            '@Comctrls@TCustomListView@SetItemIndex$qqrxi',
                                                                                            '@Comctrls@TCustomListView@SetRowSelect$qqro',
                                                                                            '@Comctrls@TCustomListView@SetOwnerData$qqro',
                                                                                            '@Comctrls@TCustomListView@UpdateItems$qqrii',
                                                                                            '@Comctrls@TCustomListView@Notification$qqrp18Classes@TComponent18Classes@TOperation',
                                                                                            '@Comctrls@TCustomListView@DestroyWnd$qqrv',
                                                                                            '@Comctrls@TCustomListView@CreateWnd$qqrv',
                                                                                            '@Comctrls@TCustomListView@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Comctrls@TCustomListView@$bdtr$qqrv',
                                                                                            '@Comctrls@TCustomListView@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Comctrls@TIconOptions@SetAutoArrange$qqro',
                                                                                            '@Comctrls@TListItems@Delete$qqri',
                                                                                            '@Comctrls@TListItems@EndUpdate$qqrv',
                                                                                            '@Comctrls@TListItems@BeginUpdate$qqrv',
                                                                                            '@Comctrls@TListItems@Clear$qqrv',
                                                                                            '@Comctrls@TListItems@SetCount$qqri',
                                                                                            '@Comctrls@TListItems@GetItem$qqri',
                                                                                            '@Comctrls@TListItems@GetCount$qqrv',
                                                                                            '@Comctrls@TListItems@Add$qqrv',
                                                                                            '@Comctrls@TListItem@SetSubItemImage$qqrixi',
                                                                                            '@Comctrls@TListItem@GetSubItemImage$qqri',
                                                                                            '@Comctrls@TListItem@GetIndex$qqrv',
                                                                                            '@Comctrls@TListItem@SetImage$qqrii',
                                                                                            '@Comctrls@TListItem@SetState$qqrio',
                                                                                            '@Comctrls@TListItem@SetData$qqrpv',
                                                                                            '@Comctrls@TListItem@SetCaption$qqrx17System@AnsiString',
                                                                                            '@Comctrls@TListItem@SetChecked$qqro',
                                                                                            '@Comctrls@TListItem@GetChecked$qqrv',
                                                                                            '@Comctrls@TListItem@MakeVisible$qqro',
                                                                                            '@Comctrls@TListItem@GetListView$qqrv',
                                                                                            '@Comctrls@TListColumns@Add$qqrv',
                                                                                            '@Comctrls@TListColumns@GetItem$qqri',
                                                                                            '@Comctrls@TListColumn@SetMinWidth$qqri',
                                                                                            '@Comctrls@TListColumn@SetMaxWidth$qqri',
                                                                                            '@Comctrls@TListColumn@SetImageIndex$qqri',
                                                                                            '@Comctrls@TListColumn@SetAutoSize$qqro',
                                                                                            '@Comctrls@TListColumn@SetWidth$qqri',
                                                                                            '@Comctrls@TListColumn@GetWidth$qqrv',
                                                                                            '@Comctrls@TListColumn@SetCaption$qqrx17System@AnsiString',
                                                                                            '@Comctrls@TCustomRichEdit@RequestSize$qqrrx11Types@TRect',
                                                                                            '@Comctrls@TCustomRichEdit@Print$qqrx17System@AnsiString',
                                                                                            '@Comctrls@TCustomRichEdit@SetSelStart$qqri',
                                                                                            '@Comctrls@TCustomRichEdit@SetSelLength$qqri',
                                                                                            '@Comctrls@TCustomRichEdit@GetSelText$qqrv',
                                                                                            '@Comctrls@TCustomRichEdit@GetSelTextBuf$qqrpci',
                                                                                            '@Comctrls@TCustomRichEdit@GetSelStart$qqrv',
                                                                                            '@Comctrls@TCustomRichEdit@GetSelLength$qqrv',
                                                                                            '@Comctrls@TCustomRichEdit@SetCaretPos$qqrrx12Types@TPoint',
                                                                                            '@Comctrls@TCustomRichEdit@GetCaretPos$qqrv',
                                                                                            '@Comctrls@TCustomRichEdit@DoSetMaxLength$qqri',
                                                                                            '@Comctrls@TCustomRichEdit@DestroyWnd$qqrv',
                                                                                            '@Comctrls@TCustomRichEdit@CreateWnd$qqrv',
                                                                                            '@Comctrls@TCustomRichEdit@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Comctrls@TCustomRichEdit@Clear$qqrv',
                                                                                            '@Comctrls@TCustomRichEdit@$bdtr$qqrv',
                                                                                            '@Comctrls@TCustomRichEdit@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Comctrls@TTextAttributes@SetColor$qqr15Graphics@TColor',
                                                                                            '@Comctrls@TCustomTreeView@SetSelected$qqrp18Comctrls@TTreeNode',
                                                                                            '@Comctrls@TCustomTreeView@GetSelected$qqrv',
                                                                                            '@Comctrls@TCustomTreeView@GetHitTestInfoAt$qqrii',
                                                                                            '@Comctrls@TCustomTreeView@GetNodeAt$qqrii',
                                                                                            '@Comctrls@TCustomTreeView@AlphaSort$qqro',
                                                                                            '@Comctrls@TTreeNodes@GetNodeFromIndex$qqri',
                                                                                            '@Comctrls@TTreeNodes@AddChild$qqrp18Comctrls@TTreeNodex17System@AnsiString',
                                                                                            '@Comctrls@TTreeNodes@Clear$qqrv',
                                                                                            '@Comctrls@TTreeNodes@GetCount$qqrv',
                                                                                            '@Comctrls@TTreeNode@GetLevel$qqrv',
                                                                                            '@Comctrls@TTreeNode@GetCount$qqrv',
                                                                                            '@Comctrls@TTreeNode@GetItem$qqri',
                                                                                            '@Comctrls@TTreeNode@getPrevSibling$qqrv',
                                                                                            '@Comctrls@TTreeNode@getNextSibling$qqrv',
                                                                                            '@Comctrls@TTreeNode@GetParent$qqrv',
                                                                                            '@Comctrls@TTreeNode@SetChildren$qqro',
                                                                                            '@Comctrls@TTreeNode@GetChildren$qqrv',
                                                                                            '@Comctrls@TTreeNode@GetExpanded$qqrv',
                                                                                            '@Comctrls@TTreeNode@Collapse$qqro',
                                                                                            '@Comctrls@TTreeNode@Expand$qqro',
                                                                                            '@Comctrls@TTreeNode@SetStateIndex$qqri',
                                                                                            '@Comctrls@TTreeNode@SetSelectedIndex$qqri',
                                                                                            '@Comctrls@TTreeNode@SetImageIndex$qqri',
                                                                                            '@Comctrls@TTreeNode@SetData$qqrpv',
                                                                                            '@Comctrls@TCustomStatusBar@SetSizeGrip$qqro',
                                                                                            '@Comctrls@TCustomStatusBar@SetSimpleText$qqrx17System@AnsiString',
                                                                                            '@Comctrls@TCustomStatusBar@SetSimplePanel$qqro',
                                                                                            '@Comctrls@TCustomStatusBar@$bdtr$qqrv',
                                                                                            '@Comctrls@TCustomStatusBar@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Comctrls@TStatusPanels@GetItem$qqri',
                                                                                            '@Comctrls@TStatusPanels@Add$qqrv',
                                                                                            '@Comctrls@TStatusPanel@SetWidth$qqri',
                                                                                            '@Comctrls@TStatusPanel@SetText$qqrx17System@AnsiString',
                                                                                            '@Comctrls@TPageControl@SetActivePage$qqrp18Comctrls@TTabSheet',
                                                                                            '@Comctrls@TPageControl@GetPageCount$qqrv',
                                                                                            '@Comctrls@TPageControl@GetPage$qqri',
                                                                                            '@Comctrls@TTabSheet@SetTabVisible$qqro',
                                                                                            '@Comctrls@TTabSheet@SetPageControl$qqrp21Comctrls@TPageControl',
                                                                                            '@Comctrls@TTabSheet@$bctr$qqrp18Classes@TComponent',
                                                                                            '@Comctrls@TCustomTabControl@IndexOfTabAt$qqrii',
                                                                                            '@Comctrls@TCustomTabControl@SetTabIndex$qqri',
                                                                                            '@Comctrls@TCustomTabControl@SetImages$qqrp24Imglist@TCustomImageList',
                                                                                            '@Comctrls@TCustomTabControl@GetTabIndex$qqrv',
                                                                                            '@Comctrls@TToolBar@',
                                                                                            '@Comctrls@TToolButton@',
                                                                                            '@$xp$18Comctrls@TListView',
                                                                                            '@Comctrls@TListView@',
                                                                                            '@Comctrls@TUpDown@',
                                                                                            '@$xp$18Comctrls@TRichEdit',
                                                                                            '@Comctrls@TRichEdit@',
                                                                                            '@Comctrls@TTreeView@',
                                                                                            '@Comctrls@TStatusBar@',
                                                                                            '@Comctrls@TPageControl@',
                                                                                            '@Comctrls@TTabSheet@',
                                                                                            '@Comctrls@TTabControl@',
                                                                                            '@Checklst@initialization$qqrv',
                                                                                            '@Checklst@Finalization$qqrv',
                                                                                            '@Checklst@TCheckListBox@SetHeader$qqrixo',
                                                                                            '@Checklst@TCheckListBox@GetHeader$qqri',
                                                                                            '@Checklst@TCheckListBox@GetChecked$qqri',
                                                                                            '@Checklst@TCheckListBox@SetChecked$qqrio',
                                                                                            '@Checklst@TCheckListBox@CreateParams$qqrr22Controls@TCreateParams',
                                                                                            '@Checklst@TCheckListBox@DestroyWnd$qqrv',
                                                                                            '@Checklst@TCheckListBox@CreateWnd$qqrv',
                                                                                            '@Checklst@TCheckListBox@$bdtr$qqrv',
                                                                                            '@Checklst@TCheckListBox@$bctr$qqrp18Classes@TComponent',
                                                                                            '@$xp$22Checklst@TCheckListBox',
                                                                                            '@Checklst@TCheckListBox@',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'CreateMutexA',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'DuplicateHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindResourceA',
                                                                                            'FreeLibrary',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetDriveTypeA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileType',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLastError',
                                                                                            'GetLocalTime',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLogicalDrives',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetOEMCP',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'GetStdHandle',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetTickCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetVersion',
                                                                                            'GetVersionExA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'InitializeCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedIncrement',
                                                                                            'IsValidLocale',
                                                                                            'LCMapStringA',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LoadResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'OutputDebugStringA',
                                                                                            'RaiseException',
                                                                                            'ReadFile',
                                                                                            'ReleaseMutex',
                                                                                            'RtlUnwind',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetFilePointer',
                                                                                            'SetHandleCount',
                                                                                            'SetLastError',
                                                                                            'SetThreadLocale',
                                                                                            'SizeofResource',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            'WinExec',
                                                                                            'WriteFile',
                                                                                            'GetVolumeInformationA',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'htons',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'setsockopt',
                                                                                            'socket',
                                                                                            'bind',
                                                                                            'CreatePropertySheetPageA',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_GetDragImage',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'PropertySheetA',
                                                                                            'CreateFontIndirectA',
                                                                                            'CreateRectRgn',
                                                                                            'DeleteObject',
                                                                                            'GetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'GetStockObject',
                                                                                            'GetTextColor',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SelectClipRgn',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'SetBrushOrgEx',
                                                                                            'SetStretchBltMode',
                                                                                            'SetTextColor',
                                                                                            'StretchBlt',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'AppendMenuA',
                                                                                            'BeginPaint',
                                                                                            'CallNextHookEx',
                                                                                            'ClientToScreen',
                                                                                            'CreateCaret',
                                                                                            'CreateWindowExA',
                                                                                            'DestroyCaret',
                                                                                            'DrawFocusRect',
                                                                                            'EnableWindow',
                                                                                            'EndPaint',
                                                                                            'EnumChildWindows',
                                                                                            'EnumThreadWindows',
                                                                                            'GetCaretPos',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'GetForegroundWindow',
                                                                                            'GetKeyState',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetKeyboardState',
                                                                                            'GetParent',
                                                                                            'GetSystemMenu',
                                                                                            'GetWindowLongA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'IntersectRect',
                                                                                            'InvalidateRect',
                                                                                            'IsWindow',
                                                                                            'LoadCursorA',
                                                                                            'LoadIconA',
                                                                                            'LockWindowUpdate',
                                                                                            'MapDialogRect',
                                                                                            'MapVirtualKeyExA',
                                                                                            'MessageBoxA',
                                                                                            'ModifyMenuA',
                                                                                            'OemToCharA',
                                                                                            'PostMessageA',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'ReleaseDC',
                                                                                            'ScreenToClient',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'SetActiveWindow',
                                                                                            'SetCaretPos',
                                                                                            'SetFocus',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowLongA',
                                                                                            'SetWindowPlacement',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowTextA',
                                                                                            'SetWindowsHookExA',
                                                                                            'ShowCaret',
                                                                                            'ShowWindow',
                                                                                            'SystemParametersInfoA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'VkKeyScanA',
                                                                                            'WinHelpA',
                                                                                            'wsprintfA',
                                                                                            'DoDragDrop',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'RegisterDragDrop',
                                                                                            'ReleaseStgMedium',
                                                                                            'RevokeDragDrop'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 50,
                                                                      'NumberOfImportFunctions': 1139,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 597504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 334848,
                                                                                       '.edata\x00\x00': 14848,
                                                                                       '.idata\x00\x00': 62464,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 79872,
                                                                                       '.rsrc\x00\x00\x00': 597504,
                                                                                       '.text\x00\x00\x00': 1505792,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2c8f2b69ba1cfd8b3c99c5fc5041b7feb7c4ff8baf442e9e3bf5e0a085405c02'},
 '2cb3312e0a7c242ebe04620ad49a96b6cbbaeff559ed811ff51cd62f41ab3474': {'AddressOfEntryPoint': 43672,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 41472,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2cb3312e0a7c242ebe04620ad49a96b6cbbaeff559ed811ff51cd62f41ab3474'},
 '2cd08349d03899fecd24217c18fa7c8f7c5dabda96218d8777aa3e66b2542014': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 82844,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 82944,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2cd08349d03899fecd24217c18fa7c8f7c5dabda96218d8777aa3e66b2542014'},
 '2d209c2b823e350c1f1661f87a3a013804302477afe56877f94adbafe7a2e06d': {'AddressOfEntryPoint': 11854,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1424,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2d209c2b823e350c1f1661f87a3a013804302477afe56877f94adbafe7a2e06d'},
 '2d812e482415a44f20806ecd7060e1ca0fabe9458dea8f128593fac9a624a5fa': {'AddressOfEntryPoint': 56910,
                                                                      'DebugRVA': 62576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.dll': 'LoadLibraryW',
                                                                                      'MSVCP100.dll': '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                      'MSVCR100.dll': 'memcpy_s',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'GetPropW',
                                                                                      'WININET.dll': 'InternetCloseHandle'},
                                                                      'ImportedFunctions': ['GetFileAttributesW',
                                                                                            'MoveFileW',
                                                                                            'DeleteFileW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'CreateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateDirectoryW',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'InterlockedExchange',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareFileTime',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'IsWindowEnabled',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetFocus',
                                                                                            'CallWindowProcW',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'OpenClipboard',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetWindowLongW',
                                                                                            'EnableWindow',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DialogBoxParamW',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetDlgItemTextW',
                                                                                            'PostMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'ChildWindowFromPoint',
                                                                                            'SetTimer',
                                                                                            'SetPropW',
                                                                                            'SetWindowLongW',
                                                                                            'CheckDlgButton',
                                                                                            'LoadIconW',
                                                                                            'MessageBoxW',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'EndDialog',
                                                                                            'GetDC',
                                                                                            'MapWindowPoints',
                                                                                            'GetWindowRect',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'MoveWindow',
                                                                                            'SendMessageW',
                                                                                            'GetWindowTextW',
                                                                                            'RemovePropW',
                                                                                            'InvalidateRect',
                                                                                            'EndPaint',
                                                                                            'DrawTextW',
                                                                                            'GetPropW',
                                                                                            'SetTextColor',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetBkMode',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'InitCommonControlsEx',
                                                                                            'SHGetFolderPathW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetOpenW',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'InternetSetOptionW',
                                                                                            'HttpSendRequestW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'InternetReadFile',
                                                                                            'InternetCloseHandle',
                                                                                            'PathAppendW',
                                                                                            '?always_noconv@codecvt_base@std@@QBE_NXZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z',
                                                                                            '?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z',
                                                                                            '?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '??Bid@locale@std@@QAEIXZ',
                                                                                            '?id@?$codecvt@DDH@std@@2V0locale@2@A',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ',
                                                                                            '?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z',
                                                                                            '?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z',
                                                                                            '?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z',
                                                                                            '?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z',
                                                                                            '?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ',
                                                                                            '?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z',
                                                                                            '?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA',
                                                                                            '?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            'wcsrchr',
                                                                                            '_putenv',
                                                                                            '_controlfp_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '_crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__CxxFrameHandler3',
                                                                                            'fputs',
                                                                                            '_wfopen_s',
                                                                                            'fgets',
                                                                                            'fscanf_s',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'fwprintf',
                                                                                            'wcstol',
                                                                                            'swprintf_s',
                                                                                            'sprintf',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'fsetpos',
                                                                                            '_fseeki64',
                                                                                            'fgetpos',
                                                                                            '_invoke_watson',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memchr',
                                                                                            'memset',
                                                                                            '_localtime64',
                                                                                            '_time64',
                                                                                            'rand',
                                                                                            'srand',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'getenv',
                                                                                            'strftime',
                                                                                            'fwrite',
                                                                                            'fclose',
                                                                                            '_snprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_wgetenv',
                                                                                            '__wargv',
                                                                                            '__argc',
                                                                                            'ceil',
                                                                                            '_strdup',
                                                                                            'wcsncpy_s',
                                                                                            'abort',
                                                                                            'fgetc',
                                                                                            'fputc',
                                                                                            'ungetc',
                                                                                            '_lock_file',
                                                                                            '_unlock_file',
                                                                                            'fflush',
                                                                                            'setvbuf',
                                                                                            'memcpy_s'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 249,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 33032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 13312,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 33280,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2d812e482415a44f20806ecd7060e1ca0fabe9458dea8f128593fac9a624a5fa'},
 '2de57f405329e93944e23b701aea4702ffc11167ea29f0bddd6c92f004b20a2e': {'AddressOfEntryPoint': 13824,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'msvcrt.dll': 'memcmp',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoRegisterSurrogate'},
                                                                      'ImportedFunctions': ['RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'RaiseException',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'UnregisterClassA',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'wcscat_s',
                                                                                            'free',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            'wcscpy_s',
                                                                                            'wcsncpy_s',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            'memcmp',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoGetClassObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoRegisterSurrogate',
                                                                                            'RegisterTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'LoadTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 80,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 13312},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/2de57f405329e93944e23b701aea4702ffc11167ea29f0bddd6c92f004b20a2e'},
 '2ebbbb962b3a87dbb89e18794a39b19820773be64a70a4f58318b00aa1432f52': {'AddressOfEntryPoint': 29703,
                                                                      'DebugRVA': 4512,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'NPPTools.dll': 'SetNPPAddress2FilterInBlob',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'iphlpapi.dll': 'NhGetInterfaceNameFromGuid',
                                                                                      'msvcrt.dll': '_exit',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetFileAttributesW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'GetVersionExW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetTickCount',
                                                                                            'IsBadWritePtr',
                                                                                            'GetProcessHeap',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapFree',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'FormatMessageW',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'MoveFileExW',
                                                                                            'IsBadReadPtr',
                                                                                            'GetLastError',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_wgetenv',
                                                                                            '__CxxFrameHandler',
                                                                                            'wcspbrk',
                                                                                            '_initterm',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'wcscmp',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'wcsncpy',
                                                                                            '_wgetcwd',
                                                                                            'wcscpy',
                                                                                            'wcstoul',
                                                                                            'swprintf',
                                                                                            '_wtol',
                                                                                            'wprintf',
                                                                                            'memset',
                                                                                            '_kbhit',
                                                                                            '_getch',
                                                                                            'time',
                                                                                            'wcsrchr',
                                                                                            'wcslen',
                                                                                            'wcscat',
                                                                                            '__wgetmainargs',
                                                                                            '_wtoi',
                                                                                            '__winitenv',
                                                                                            '_exit',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetNPPPatternFilterInBlob',
                                                                                            'DuplicateBlob',
                                                                                            'SetDwordInBlob',
                                                                                            'SetBoolInBlob',
                                                                                            'DestroyBlob',
                                                                                            'CreateNPPInterface',
                                                                                            'SetNPPEtypeSapFilter',
                                                                                            'SetNPPTriggerInBlob',
                                                                                            'GetNPPBlobTable',
                                                                                            'CreateBlob',
                                                                                            'GetBoolFromBlob',
                                                                                            'GetMacAddressFromBlob',
                                                                                            'GetStringFromBlob',
                                                                                            'SetNPPAddress2FilterInBlob',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromString',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetAdaptersInfo',
                                                                                            'NhGetInterfaceNameFromGuid',
                                                                                            'wsprintfW',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 17872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 17920,
                                                                                       '.text\x00\x00\x00': 29184},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/2ebbbb962b3a87dbb89e18794a39b19820773be64a70a4f58318b00aa1432f52'},
 '2ecf87b88eef8e4617d039dc53ce1512fe1620af2a5a737e2413500770053fb7': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 428376,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 428544,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2ecf87b88eef8e4617d039dc53ce1512fe1620af2a5a737e2413500770053fb7'},
 '2f567b1d522fdd8a9cc1a2e8807550fc078b21b0d85a80a4c8997d69a1d94646': {'AddressOfEntryPoint': 13872,
                                                                      'DebugRVA': 6528,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'dbghelp.dll': 'EnumDirTree',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['SymMatchString',
                                                                                            'EnumDirTree',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'CreateFileA',
                                                                                            'FreeLibrary',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetFileAttributesExA',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'LocalReAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'FindClose',
                                                                                            'GetLocalTime',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'FindNextFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'Sleep',
                                                                                            '_splitpath_s',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'strcat_s',
                                                                                            'strcpy_s',
                                                                                            'printf',
                                                                                            'atoi',
                                                                                            'strchr',
                                                                                            '_atoi64',
                                                                                            'sprintf_s',
                                                                                            '_strnicmp',
                                                                                            '_getche',
                                                                                            '_stricmp',
                                                                                            'qsort',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 11776},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/2f567b1d522fdd8a9cc1a2e8807550fc078b21b0d85a80a4c8997d69a1d94646'},
 '2f981cac425fb96b5243c4b0edd422ef946e386c767f9f2cee9a516f78b38fe9': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 113128,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 113152,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2f981cac425fb96b5243c4b0edd422ef946e386c767f9f2cee9a516f78b38fe9'},
 '2fff5000e045b846cda16d0c46320239c83e698ec5bff608b3b60d7ea4920701': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 72440,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 72704,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/2fff5000e045b846cda16d0c46320239c83e698ec5bff608b3b60d7ea4920701'},
 '305b924a5e413bfdb610ab31d1b2687be86f6b88997ba848845c41d2141c5f48': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 9736,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/305b924a5e413bfdb610ab31d1b2687be86f6b88997ba848845c41d2141c5f48'},
 '305dee238a9dd240dc22b0ff547fd3398d9104ce93e75606ab46d5974d1e9a57': {'AddressOfEntryPoint': 13333,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'FindWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 46176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 46592,
                                                                                       '.text\x00\x00\x00': 26624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/305dee238a9dd240dc22b0ff547fd3398d9104ce93e75606ab46d5974d1e9a57'},
 '30951db8bfc21640645aa9144cfeaa294bb7c6980ef236d28552b6f4f3f92a96': {'AddressOfEntryPoint': 105248,
                                                                      'DebugRVA': 4352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventRegister',
                                                                                      'AUTHZ.dll': 'AuthzFreeResourceManager',
                                                                                      'KERNEL32.dll': 'GetVersionExW',
                                                                                      'RPCRT4.dll': 'I_RpcMapWin32Status',
                                                                                      'SAMLIB.dll': 'SamQueryInformationDomain',
                                                                                      'USER32.dll': 'UpdatePerUserSystemParameters',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netutils.dll': 'NetApiBufferFree',
                                                                                      'ntdll.dll': 'NtClose',
                                                                                      'ole32.dll': 'CoAddRefServerProcess',
                                                                                      'samcli.dll': 'NetUserGetInfo',
                                                                                      'winbio.dll': 'WinBioGetDomainLogonSetting'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'RegGetValueW',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'MakeAbsoluteSD',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'CreateWellKnownSid',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteValueW',
                                                                                            'PrivilegeCheck',
                                                                                            'CheckTokenMembership',
                                                                                            'RegSetValueExW',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'CreateFileW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetComputerNameExW',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExW',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'memcpy',
                                                                                            '_purecall',
                                                                                            '_wtoi',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'NtOpenProcessToken',
                                                                                            'RtlCopySid',
                                                                                            'RtlLengthSid',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlDeleteResource',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlEqualSid',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtDuplicateToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtGetCachedSigningLevel',
                                                                                            'RtlInitializeResource',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtClose',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoAddRefServerProcess',
                                                                                            'SystemParametersInfoW',
                                                                                            'UpdatePerUserSystemParameters',
                                                                                            'RpcBindingCreateW',
                                                                                            'RpcBindingBind',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcSsDestroyClientContext',
                                                                                            'RpcBindingFree',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcStringFreeW',
                                                                                            'NdrClientCall3',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'SamFreeMemory',
                                                                                            'SamConnect',
                                                                                            'SamOpenDomain',
                                                                                            'SamCloseHandle',
                                                                                            'SamQuerySecurityObject',
                                                                                            'SamQueryInformationUser',
                                                                                            'SamOpenUser',
                                                                                            'SamQueryInformationDomain',
                                                                                            'WinBioGetLogonSetting',
                                                                                            'WinBioGetEnabledSetting',
                                                                                            'WinBioRemoveAllCredentials',
                                                                                            'WinBioGetDomainLogonSetting',
                                                                                            'NetUserGetInfo',
                                                                                            'NetApiBufferFree',
                                                                                            'AuthzFreeContext',
                                                                                            'AuthzAccessCheck',
                                                                                            'AuthzAddSidsToContext',
                                                                                            'AuthzInitializeContextFromSid',
                                                                                            'AuthzInitializeResourceManager',
                                                                                            'AuthzFreeResourceManager'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 149,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2304,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 105472},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/30951db8bfc21640645aa9144cfeaa294bb7c6980ef236d28552b6f4f3f92a96'},
 '30d28d509768bb7e71bc49477afc7faa0167c45a321d0fe42b92acfef91db000': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 163248,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 163328,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/30d28d509768bb7e71bc49477afc7faa0167c45a321d0fe42b92acfef91db000'},
 '30f9d677e81dd561ebe084ad3d0c71f20711dfb99584af68e2b4ee2c495cbf9b': {'AddressOfEntryPoint': 14864,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'LocalAlloc',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netutils.dll': 'NetApiBufferFree',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'schedcli.dll': 'NetScheduleJobAdd'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'SetThreadUILanguage',
                                                                                            'ReadConsoleW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'GetConsoleMode',
                                                                                            'FormatMessageW',
                                                                                            'GetTimeFormatW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetThreadLocale',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'GetSystemTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetProfileStringA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetProfileIntA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'LocalAlloc',
                                                                                            'wcscpy_s',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_stricmp',
                                                                                            '_except_handler4_common',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_itoa_s',
                                                                                            'strspn',
                                                                                            'strcpy_s',
                                                                                            'sscanf',
                                                                                            'exit',
                                                                                            '_wcsupr',
                                                                                            '_controlfp',
                                                                                            'strpbrk',
                                                                                            'wcstok_s',
                                                                                            '_iob',
                                                                                            '_vsnwprintf',
                                                                                            'wcsrchr',
                                                                                            'fgets',
                                                                                            'strchr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcstoul',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'strcat_s',
                                                                                            'memset',
                                                                                            'NetApiBufferFree',
                                                                                            'NetScheduleJobEnum',
                                                                                            'NetScheduleJobDel',
                                                                                            'NetScheduleJobGetInfo',
                                                                                            'NetScheduleJobAdd',
                                                                                            'CommandLineToArgvW',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmAddToStream'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 14336},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/30f9d677e81dd561ebe084ad3d0c71f20711dfb99584af68e2b4ee2c495cbf9b'},
 '3116ce7edcde2dcca4b888c0f9c0213aca044480edc7b4247a0f2682e367e952': {'AddressOfEntryPoint': 5632,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CompareStringOrdinal',
                                                                                      'MaintenanceUI.dll': 'StopMaintenance',
                                                                                      'msvcrt.dll': '_amsg_exit',
                                                                                      'ntdll.dll': 'RtlLookupFunctionEntry'},
                                                                      'ImportedFunctions': ['_XcptFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'CompareStringOrdinal',
                                                                                            'StartMaintenance',
                                                                                            'StopMaintenance'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 75160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 75264,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/3116ce7edcde2dcca4b888c0f9c0213aca044480edc7b4247a0f2682e367e952'},
 '31368d980d418dbfd72d4e3331614bdc8ba215159a42b437349e239280c9a91d': {'AddressOfEntryPoint': 57840,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'WS2_32.dll': 'WSAGetLastError',
                                                                                      'framedynos.dll': '?Find@CHString@@QBEHG@Z',
                                                                                      'msvcrt.dll': '_fileno',
                                                                                      'ntdll.dll': 'VerSetConditionMask',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['RegConnectRegistryW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'SetLastError',
                                                                                            'GetTimeFormatW',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'WriteConsoleW',
                                                                                            'GetNumberFormatW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetStdHandle',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetDateFormatW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'ReadFile',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'lstrlenW',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'GetLastError',
                                                                                            'HeapValidate',
                                                                                            'LocalFree',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            '__wgetmainargs',
                                                                                            'memcpy',
                                                                                            '_ftol2',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'wcstok',
                                                                                            'fflush',
                                                                                            'fprintf',
                                                                                            '_get_osfhandle',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wcsicmp',
                                                                                            '_ui64tow',
                                                                                            '_wtoi64',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__iob_func',
                                                                                            '_memicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'wsprintfW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetLastErrorW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetElement',
                                                                                            'VariantChangeType',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SysFreeString',
                                                                                            '?Empty@CHString@@QAEXXZ',
                                                                                            '?Left@CHString@@QBE?AV1@H@Z',
                                                                                            '??1CHString@@QAE@XZ',
                                                                                            '??0CHString@@QAE@XZ',
                                                                                            '?GetBufferSetLength@CHString@@QAEPAGH@Z',
                                                                                            '?Compare@CHString@@QBEHPBG@Z',
                                                                                            '?Mid@CHString@@QBE?AV1@H@Z',
                                                                                            '??4CHString@@QAEABV0@ABV0@@Z',
                                                                                            '?FindOneOf@CHString@@QBEHPBG@Z',
                                                                                            '?GetBuffer@CHString@@QAEPAGH@Z',
                                                                                            '?Mid@CHString@@QBE?AV1@HH@Z',
                                                                                            '?ReleaseBuffer@CHString@@QAEXH@Z',
                                                                                            '?Right@CHString@@QBE?AV1@H@Z',
                                                                                            '??0CHString@@QAE@PBG@Z',
                                                                                            '??H@YG?AVCHString@@PBGABV0@@Z',
                                                                                            '??YCHString@@QAEABV0@ABV0@@Z',
                                                                                            '??4CHString@@QAEABV0@PBG@Z',
                                                                                            '?Format@CHString@@QAAXPBGZZ',
                                                                                            '?GetData@CHString@@IBEPAUCHStringData@@XZ',
                                                                                            '?Find@CHString@@QBEHG@Z',
                                                                                            'GetUserNameExW',
                                                                                            'GetAddrInfoW',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetNameInfoW',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            'StrChrIW',
                                                                                            'StrChrW',
                                                                                            'StrStrW',
                                                                                            'StrStrIW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 148,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 65024},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/31368d980d418dbfd72d4e3331614bdc8ba215159a42b437349e239280c9a91d'},
 '31fe6da399914a64f1053c2ff632546ccf707202b02b9292e83612af3fba306b': {'AddressOfEntryPoint': 39664,
                                                                      'DebugRVA': 4592,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'UnRegisterTypeLib',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'StringFromGUID2',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'RaiseException',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetStartupInfoA',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'SizeofResource',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'MapViewOfFile',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegDeleteValueW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventWrite',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'msvcrt.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['CharUpperW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'UnregisterClassA',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '_lock',
                                                                                            '_purecall',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memset',
                                                                                            '_unlock',
                                                                                            'wcscat_s',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            'exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'memcpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            'wcsncpy_s',
                                                                                            'wcscpy_s',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_except_handler4_common',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_callnewh',
                                                                                            '__setusermatherr',
                                                                                            '_CxxThrowException',
                                                                                            '_controlfp',
                                                                                            '_XcptFilter',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_exit',
                                                                                            'memmove',
                                                                                            '__p__commode',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'SysFreeString',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocString',
                                                                                            'UnRegisterTypeLib',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoTaskMemAlloc',
                                                                                            'StringFromGUID2',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'GetCurrentThread',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'TerminateProcess',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'GetTokenInformation',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadResource',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceExW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'SizeofResource',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'CreateEventW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'SetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'OpenMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenFileMappingW',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetStartupInfoA',
                                                                                            'lstrcmpiW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 125,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5648,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 45568},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/31fe6da399914a64f1053c2ff632546ccf707202b02b9292e83612af3fba306b'},
 '320f6fa6e3686d70aab61e064182aa3d17cbc8c3be3355f832f66ae640ec4c88': {'AddressOfEntryPoint': 107127,
                                                                      'DebugRVA': 111152,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'MSCOREE.DLL': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 46388,
                                                                      'SectionNames': {'.rdata\x00\x00': 101376,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 46592,
                                                                                       '.text\x00\x00\x00': 105472},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/320f6fa6e3686d70aab61e064182aa3d17cbc8c3be3355f832f66ae640ec4c88'},
 '32862f08cefc88829f64e1483c4a06cde6666c3f062881e32872dd44a6d7cae9': {'AddressOfEntryPoint': 12991,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpynA',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 211592,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 211968,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/32862f08cefc88829f64e1483c4a06cde6666c3f062881e32872dd44a6d7cae9'},
 '3288fc005cc6e942c398362b994960b42e5773715318c941dbe94b22b3afdb9d': {'AddressOfEntryPoint': 975808,
                                                                      'DebugRVA': 1744384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 4190288,
                                                                      'ExportSize': 79,
                                                                      'IATRVA': 1740800,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'CRYPT32.dll': 'CertAddEncodedCertificateToStore',
                                                                                      'KERNEL32.dll': 'InterlockedExchange',
                                                                                      'MSVCP90.dll': '?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z',
                                                                                      'MSVCR90.dll': 'strlen',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'WS2_32.dll': 'WSAGetLastError',
                                                                                      'libcurl.dll': 'curl_easy_setopt',
                                                                                      'ole32.dll': 'CoQueryProxyBlanket',
                                                                                      'vim-types.dll': '??$GetType@VFolder@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                      'vmacore.dll': 'MemPool_InitOnStdHeap',
                                                                                      'vmomi.dll': '??1Any@Vmomi@@UAE@XZ'},
                                                                      'ImportedFunctions': ['curl_global_init',
                                                                                            'curl_slist_append',
                                                                                            'curl_slist_free_all',
                                                                                            'curl_easy_perform',
                                                                                            'curl_global_cleanup',
                                                                                            'curl_easy_init',
                                                                                            'curl_easy_strerror',
                                                                                            'curl_easy_cleanup',
                                                                                            'curl_easy_getinfo',
                                                                                            'curl_easy_setopt',
                                                                                            'wcsrchr',
                                                                                            '_wcsdup',
                                                                                            '_ftime64',
                                                                                            'memchr',
                                                                                            '_strdup',
                                                                                            'calloc',
                                                                                            '_get_osfhandle',
                                                                                            'fputs',
                                                                                            '_wgetenv',
                                                                                            '_wunlink',
                                                                                            '_wrename',
                                                                                            '_wfopen',
                                                                                            '_fileno',
                                                                                            'fclose',
                                                                                            'qsort',
                                                                                            '_stricmp',
                                                                                            'isspace',
                                                                                            '_strlwr',
                                                                                            'strtok_s',
                                                                                            'strerror',
                                                                                            'strstr',
                                                                                            'memmove',
                                                                                            'wcsncmp',
                                                                                            'realloc',
                                                                                            '_wgetdcwd',
                                                                                            '_errno',
                                                                                            '_wfullpath',
                                                                                            'strrchr',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            'strncmp',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'sscanf',
                                                                                            '_gmtime64',
                                                                                            '_beginthreadex',
                                                                                            'memcpy_s',
                                                                                            'fread',
                                                                                            'fflush',
                                                                                            'memset',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            '_purecall',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_CxxThrowException',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??0exception@std@@QAE@XZ',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '??1bad_cast@std@@UAE@XZ',
                                                                                            '??0bad_cast@std@@QAE@PBD@Z',
                                                                                            'strcspn',
                                                                                            'isdigit',
                                                                                            'strtol',
                                                                                            '_getpid',
                                                                                            'tolower',
                                                                                            'abort',
                                                                                            'wcrtomb',
                                                                                            'localeconv',
                                                                                            'wcsspn',
                                                                                            'towupper',
                                                                                            'wcschr',
                                                                                            'wcscspn',
                                                                                            'frexp',
                                                                                            'strncat',
                                                                                            '_strupr',
                                                                                            'islower',
                                                                                            '_fcvt_s',
                                                                                            '_ecvt_s',
                                                                                            '__RTDynamicCast',
                                                                                            '__RTtypeid',
                                                                                            'atoi',
                                                                                            '??8type_info@@QBE_NABV0@@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'memmove_s',
                                                                                            'memcpy',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '??0bad_cast@std@@QAE@ABV01@@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            'getenv',
                                                                                            'isalnum',
                                                                                            'strncpy',
                                                                                            'sprintf',
                                                                                            '_itoa_s',
                                                                                            'strcpy',
                                                                                            'strcmp',
                                                                                            'wcslen',
                                                                                            'strcat',
                                                                                            'memcmp',
                                                                                            'strtoul',
                                                                                            '_time64',
                                                                                            'fseek',
                                                                                            'fgets',
                                                                                            '_chsize',
                                                                                            'fwrite',
                                                                                            'ftell',
                                                                                            'fputc',
                                                                                            '_aligned_malloc',
                                                                                            '_aligned_free',
                                                                                            'strspn',
                                                                                            'strpbrk',
                                                                                            'wcsncpy',
                                                                                            '_snwprintf',
                                                                                            '_wtoi',
                                                                                            'wcsstr',
                                                                                            'fsetpos',
                                                                                            'fgetpos',
                                                                                            '_fstat64i32',
                                                                                            'fgetc',
                                                                                            'printf',
                                                                                            'scanf',
                                                                                            'strtod',
                                                                                            '_strtoui64',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '_snprintf',
                                                                                            'isxdigit',
                                                                                            'feof',
                                                                                            'getc',
                                                                                            'rewind',
                                                                                            '??0exception@std@@QAE@ABQBDH@Z',
                                                                                            'ispunct',
                                                                                            'strlen',
                                                                                            '?tolower@?$ctype@D@std@@QBEDD@Z',
                                                                                            '?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ',
                                                                                            '?widen@?$ctype@D@std@@QBEDD@Z',
                                                                                            '?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z',
                                                                                            '?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z',
                                                                                            '??4locale@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?exceptions@ios_base@std@@QAEXH@Z',
                                                                                            '?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??1ios_base@std@@UAE@XZ',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z',
                                                                                            '?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z',
                                                                                            '?construct@?$allocator@D@std@@QAEXPADABD@Z',
                                                                                            '?allocate@?$allocator@D@std@@QAEPADI@Z',
                                                                                            '?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z',
                                                                                            '??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ',
                                                                                            '??0locale@std@@QAE@ABV01@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@00@Z',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@000@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z',
                                                                                            '?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z',
                                                                                            '?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z',
                                                                                            '?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z',
                                                                                            '?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z',
                                                                                            '?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z',
                                                                                            '?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z',
                                                                                            '??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z',
                                                                                            '?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ',
                                                                                            '?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z',
                                                                                            '??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?destroy@?$allocator@D@std@@QAEXPAD@Z',
                                                                                            '?narrow@?$ctype@D@std@@QBEDDD@Z',
                                                                                            '?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z',
                                                                                            '?toupper@?$ctype@D@std@@QBEDD@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?allocate@?$allocator@D@std@@QAEPADIPBX@Z',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z',
                                                                                            '?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?id@?$ctype@D@std@@2V0locale@2@A',
                                                                                            '?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z',
                                                                                            '?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z',
                                                                                            '??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z',
                                                                                            '?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z',
                                                                                            '?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z',
                                                                                            '??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z',
                                                                                            '?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z',
                                                                                            '??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z',
                                                                                            '?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z',
                                                                                            '??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?deallocate@?$allocator@D@std@@QAEXPADI@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?_Init@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?classic@locale@std@@SAABV12@XZ',
                                                                                            '??9locale@std@@QBE_NABV01@@Z',
                                                                                            '?grouping@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?thousands_sep@?$numpunct@D@std@@QBEDXZ',
                                                                                            '??1locale@std@@QAE@XZ',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '?id@?$numpunct@D@std@@2V0locale@2@A',
                                                                                            '?_Id_cnt@id@locale@std@@0HA',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z',
                                                                                            '?_Getcat@?$numpunct@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '?_Unlock@_Mutex@std@@QAEXXZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ',
                                                                                            '?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ',
                                                                                            '?capacity@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ',
                                                                                            '?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ',
                                                                                            '?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ',
                                                                                            '?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z',
                                                                                            '?width@ios_base@std@@QAEHH@Z',
                                                                                            '?width@ios_base@std@@QBEHXZ',
                                                                                            '?flags@ios_base@std@@QBEHXZ',
                                                                                            '?good@ios_base@std@@QBE_NXZ',
                                                                                            '?eof@?$char_traits@D@std@@SAHXZ',
                                                                                            '?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z',
                                                                                            '?length@?$char_traits@D@std@@SAIPBD@Z',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '??1strstreambuf@std@@UAE@XZ',
                                                                                            '??0strstreambuf@std@@QAE@H@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z',
                                                                                            '??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@D@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z',
                                                                                            '?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??0?$codecvt@_WDH@std@@QAE@I@Z',
                                                                                            '?do_length@?$codecvt@_WDH@std@@MBEHABHPBD1I@Z',
                                                                                            '??1?$codecvt@_WDH@std@@MAE@XZ',
                                                                                            '?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z',
                                                                                            '?id@?$codecvt@_WDH@std@@2V0locale@2@A',
                                                                                            '??0_Locimp@locale@std@@AAE@ABV012@@Z',
                                                                                            '??1_Locimp@locale@std@@MAE@XZ',
                                                                                            '?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z',
                                                                                            '?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z',
                                                                                            '?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z',
                                                                                            '?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z',
                                                                                            '?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z',
                                                                                            '?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ',
                                                                                            '?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeExA',
                                                                                            'LCMapStringA',
                                                                                            'AreFileApisANSI',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'OpenEventA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateWaitableTimerA',
                                                                                            'FormatMessageA',
                                                                                            'GetExitCodeThread',
                                                                                            'OpenThread',
                                                                                            'RaiseException',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'IsBadReadPtr',
                                                                                            'TerminateProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetThreadLocale',
                                                                                            'GetACP',
                                                                                            'GetFileAttributesA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetShortPathNameW',
                                                                                            'VirtualQuery',
                                                                                            'GetDriveTypeA',
                                                                                            'GetSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CancelIo',
                                                                                            'GetOverlappedResult',
                                                                                            'FindFirstVolumeW',
                                                                                            'FindNextVolumeW',
                                                                                            'FindVolumeClose',
                                                                                            'DeviceIoControl',
                                                                                            'LoadLibraryW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpiA',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetVersionExW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetTempPathW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'OutputDebugStringA',
                                                                                            'LoadLibraryExW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'WriteConsoleW',
                                                                                            'ResetEvent',
                                                                                            'CreateEventA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlushFileBuffers',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetVolumeInformationW',
                                                                                            'Sleep',
                                                                                            'GetDriveTypeW',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileAttributesExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetCurrentThread',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InterlockedCompareExchange',
                                                                                            'SetLastError',
                                                                                            'CreateEventW',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'SetEvent',
                                                                                            'SleepEx',
                                                                                            'SetWaitableTimer',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'TlsAlloc',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'WaitForMultipleObjects',
                                                                                            'TerminateThread',
                                                                                            'QueueUserAPC',
                                                                                            'WaitForSingleObject',
                                                                                            'TlsFree',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'CloseHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedExchange',
                                                                                            'RegQueryValueExA',
                                                                                            'MapGenericMask',
                                                                                            'GetFileSecurityW',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateSelf',
                                                                                            'OpenThreadToken',
                                                                                            'CryptAcquireContextW',
                                                                                            'GetUserNameW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetLengthSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'EqualSid',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'AccessCheck',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'RegCreateKeyExW',
                                                                                            'inet_addr',
                                                                                            'WSAEventSelect',
                                                                                            'bind',
                                                                                            'getsockname',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'WSASetLastError',
                                                                                            'freeaddrinfo',
                                                                                            'ntohl',
                                                                                            'htonl',
                                                                                            'WSASocketA',
                                                                                            'WSAAddressToStringA',
                                                                                            'getaddrinfo',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'closesocket',
                                                                                            '__WSAFDIsSet',
                                                                                            'select',
                                                                                            'setsockopt',
                                                                                            'gethostbyname',
                                                                                            'connect',
                                                                                            'htons',
                                                                                            'WSAIoctl',
                                                                                            'socket',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'SHGetFolderPathW',
                                                                                            'LoadStringA',
                                                                                            'MessageBoxW',
                                                                                            'CryptExportPKCS8',
                                                                                            'CertOpenStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CertGetCertificateChain',
                                                                                            'CertCreateCertificateContext',
                                                                                            'CertAddEncodedCertificateToStore',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            '?DecRef@ObjectImpl@Vmacore@@UBEXXZ',
                                                                                            '?IncRef@ObjectImpl@Vmacore@@UBEXXZ',
                                                                                            '?FinalDecRef@ObjectImpl@Vmacore@@MAEXABVtype_info@@@Z',
                                                                                            '?FirstIncRef@ObjectImpl@Vmacore@@MAEXABVtype_info@@@Z',
                                                                                            '?ThrowTypeMismatchException@Vmacore@@YAXABVtype_info@@0@Z',
                                                                                            '??0Throwable@Vmacore@@IAE@ABV01@@Z',
                                                                                            '?Where@Throwable@Vmacore@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?Dump@Throwable@Vmacore@@UBEXXZ',
                                                                                            '?GetBacktrace@Throwable@Vmacore@@UBEPAVBacktrace@System@2@XZ',
                                                                                            '?what@Throwable@Vmacore@@UBEPBDXZ',
                                                                                            '??0Throwable@Vmacore@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??1Throwable@Vmacore@@UAE@XZ',
                                                                                            'MXUser_CreateSingletonRWLock',
                                                                                            'MXUser_CreateRWLock',
                                                                                            'MXUser_AcquireForRead',
                                                                                            'MXUser_IsCurThreadHoldingRWLock',
                                                                                            'MXUser_AcquireForWrite',
                                                                                            'MXUser_DestroyRWLock',
                                                                                            'MXUser_ReleaseRWLock',
                                                                                            '?CreateXMLDocumentHandler@Xml@Vmacore@@YAXAAV?$Ref@VXMLHandler@Xml@Vmacore@@@2@@Z',
                                                                                            '?CreateXMLParser@Xml@Vmacore@@YAXPAVXMLHandler@12@AAV?$Ref@VXMLParser@Xml@Vmacore@@@2@@Z',
                                                                                            '?CreateStringReader@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$Ref@UStringReader@Vmacore@@@1@@Z',
                                                                                            '?Trim@StringUtil@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '?ASPrint@MessageFormatter@Vmacore@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDABVPrintFormatter@2@111@Z',
                                                                                            '?ASPrint@MessageFormatter@Vmacore@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDABVPrintFormatter@2@11@Z',
                                                                                            '?ASPrint@MessageFormatter@Vmacore@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDABVPrintFormatter@2@@Z',
                                                                                            '?GetThreadPool@System@Vmacore@@YAPAVThreadPool@12@XZ',
                                                                                            '??1WaitableObjectImpl@System@Vmacore@@UAE@XZ',
                                                                                            '??0WaitableObjectImpl@System@Vmacore@@QAE@XZ',
                                                                                            '?PanicNotReached@Vmacore@@YAXPBDH@Z',
                                                                                            '?SetLevelByName@Logger@Service@Vmacore@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?InitSSL@Ssl@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?CreateScratchConfig@Service@Vmacore@@YAXAAV?$Ref@VConfig@Service@Vmacore@@@2@@Z',
                                                                                            '?InitApp@Service@Vmacore@@YAXPAVConfig@12@@Z',
                                                                                            '?LogInternal@Service@Vmacore@@YAXPAVLogger@12@W4LogLevel@312@PBDABVPrintFormatter@2@33@Z',
                                                                                            '?LogInternal@Service@Vmacore@@YAXPAVLogger@12@W4LogLevel@312@PBDABVPrintFormatter@2@3@Z',
                                                                                            '?LogInternal@Service@Vmacore@@YAXPAVLogger@12@W4LogLevel@312@PBDABVPrintFormatter@2@@Z',
                                                                                            '?GetDefaultLogger@Service@Vmacore@@YAPAVLogger@12@XZ',
                                                                                            '?StartsWith@StringUtil@Vmacore@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H0@Z',
                                                                                            '?CreateLogWriter@Service@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVWriter@2@0AAV?$Ref@VLogWriter@Service@Vmacore@@@2@@Z',
                                                                                            '?LogInternal@Service@Vmacore@@YAXPAVLogger@12@W4LogLevel@312@PBD@Z',
                                                                                            '?Print@MessageFormatter@Vmacore@@SAXPAVWriter@2@PBDABVPrintFormatter@2@@Z',
                                                                                            '?PanicVerify@Vmacore@@YAXPBD0H@Z',
                                                                                            '?SetVerifySSLCertificates@Ssl@Vmacore@@YAXW4VerifyType@12@@Z',
                                                                                            '?SetVerifyLocations@Ssl@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?CreateHttpUserAgent@Http@Vmacore@@YAXPAVConnectionSpec@12@AAV?$Ref@VUserAgent@Http@Vmacore@@@2@@Z',
                                                                                            '?GetApp@Service@Vmacore@@YAPAVApp@12@XZ',
                                                                                            '?ToLower@StringUtil@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '?EvaluateSimplePath@Xml@Vmacore@@YA_NPAVElementNode@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV45@@Z',
                                                                                            '?FormatInt@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?FormatString@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?CreateKeyStore@Crypto@Vmacore@@YAXPAVPrivateKey@12@PAVCertificate@12@ABV?$RefList@VCertificate@Crypto@Vmacore@@@2@AAV?$Ref@VKeyStore@Crypto@Vmacore@@@2@@Z',
                                                                                            '?CreateSSLContext@Ssl@Vmacore@@YAXPAVKeyStore@Crypto@2@W4SupportedVersion@12@AAV?$Ref@VSSLContext@Ssl@Vmacore@@@2@@Z',
                                                                                            '?CreateTunneledConnectionSpec@Http@Vmacore@@YAXPAVConnectionSpec@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1AAV?$Ref@VConnectionSpec@Http@Vmacore@@@2@@Z',
                                                                                            '?CreateTCPConnectionSpec@Http@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H_NAAV?$Ref@VConnectionSpec@Http@Vmacore@@@2@@Z',
                                                                                            '?CreateSSLConnectionSpec@Http@Vmacore@@YAXPAVConnectionSpec@12@PAVSSLContext@Ssl@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2AAV?$Ref@VConnectionSpec@Http@Vmacore@@@2@@Z',
                                                                                            '?DowngradeWriteLock@RWLockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '?UpgradeReadLock@RWLockableObjectImpl@System@Vmacore@@UAE_NXZ',
                                                                                            '?IsWriteLocked@RWLockableObjectImpl@System@Vmacore@@UBE_NXZ',
                                                                                            '?Unlock@RWLockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '?WriteLock@RWLockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '?IsUnlocked@RWLockableObjectImpl@System@Vmacore@@UBE_NXZ',
                                                                                            '?ReadLock@RWLockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '?IsReadLocked@RWLockableObjectImpl@System@Vmacore@@UBE_NXZ',
                                                                                            '??0RWLockableObjectImpl@System@Vmacore@@QAE@XZ',
                                                                                            '??1RWLockableObjectImpl@System@Vmacore@@UAE@XZ',
                                                                                            '?GetSystemFactory@System@Vmacore@@YAPAVSystemFactory@12@XZ',
                                                                                            '??0ObjectImpl@Vmacore@@IAE@XZ',
                                                                                            '?ToString@ObjectImpl@Vmacore@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?FormatSTLString@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '??1ObjectImpl@Vmacore@@MAE@XZ',
                                                                                            '?GetRefCount@ObjectImpl@Vmacore@@UBEHXZ',
                                                                                            'MemPool_InitOnStdHeap',
                                                                                            '?InitializeStaticTypes@Vmomi@@YAXXZ',
                                                                                            '?GetTypeMap@Vmomi@@YAPAVTypeMap@1@XZ',
                                                                                            '?FindVersion@Vmomi@@YAPAVVersion@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?CreateSoapStubAdapter@Vmomi@@YAXPAVUserAgent@Http@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVVersion@1@PAVLogger@Service@4@PAVResultFilter@1@V?$Optional@_J@4@55AAV?$Ref@VStubAdapter@Vmomi@@@4@@Z',
                                                                                            '??$GetType@_J@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??1RetrieveOptions@PropertyCollector@Core@Vmomi@@UAE@XZ',
                                                                                            '??1TraversalSpec@PropertyCollector@Core@Vmomi@@UAE@XZ',
                                                                                            '??1ObjectSpec@PropertyCollector@Core@Vmomi@@UAE@XZ',
                                                                                            '??1PropertySpec@PropertyCollector@Core@Vmomi@@UAE@XZ',
                                                                                            '??1FilterSpec@PropertyCollector@Core@Vmomi@@UAE@XZ',
                                                                                            '?_GetDataType@RetrieveOptions@PropertyCollector@Core@Vmomi@@UBEPAVDataObjectType@4@XZ',
                                                                                            '?_DiffProperties@RetrieveOptions@PropertyCollector@Core@Vmomi@@UBEXPAVAny@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@RetrieveOptions@PropertyCollector@Core@Vmomi@@UBE_NPAVAny@4@_N@Z',
                                                                                            '?_Clone@RetrieveOptions@PropertyCollector@Core@Vmomi@@UBEPAV1234@XZ',
                                                                                            '?_GetSize@RetrieveOptions@PropertyCollector@Core@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@RetrieveOptions@PropertyCollector@Core@Vmomi@@UBEPAVType@4@XZ',
                                                                                            '?_GetDataType@FilterSpec@PropertyCollector@Core@Vmomi@@UBEPAVDataObjectType@4@XZ',
                                                                                            '?_DiffProperties@FilterSpec@PropertyCollector@Core@Vmomi@@UBEXPAVAny@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@FilterSpec@PropertyCollector@Core@Vmomi@@UBE_NPAVAny@4@_N@Z',
                                                                                            '?_Clone@FilterSpec@PropertyCollector@Core@Vmomi@@UBEPAV1234@XZ',
                                                                                            '?_GetSize@FilterSpec@PropertyCollector@Core@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@FilterSpec@PropertyCollector@Core@Vmomi@@UBEPAVType@4@XZ',
                                                                                            '?_GetDataType@PropertySpec@PropertyCollector@Core@Vmomi@@UBEPAVDataObjectType@4@XZ',
                                                                                            '?_DiffProperties@PropertySpec@PropertyCollector@Core@Vmomi@@UBEXPAVAny@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@PropertySpec@PropertyCollector@Core@Vmomi@@UBE_NPAVAny@4@_N@Z',
                                                                                            '?_Clone@PropertySpec@PropertyCollector@Core@Vmomi@@UBEPAV1234@XZ',
                                                                                            '?_GetSize@PropertySpec@PropertyCollector@Core@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@PropertySpec@PropertyCollector@Core@Vmomi@@UBEPAVType@4@XZ',
                                                                                            '?_GetDataType@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEPAVDataObjectType@4@XZ',
                                                                                            '?_DiffProperties@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEXPAVAny@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@ObjectSpec@PropertyCollector@Core@Vmomi@@UBE_NPAVAny@4@_N@Z',
                                                                                            '?_Clone@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEPAV1234@XZ',
                                                                                            '?_GetSize@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEPAVType@4@XZ',
                                                                                            '?_GetDataType@TraversalSpec@PropertyCollector@Core@Vmomi@@UBEPAVDataObjectType@4@XZ',
                                                                                            '?_DiffProperties@TraversalSpec@PropertyCollector@Core@Vmomi@@UBEXPAVAny@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@TraversalSpec@PropertyCollector@Core@Vmomi@@UBE_NPAVAny@4@_N@Z',
                                                                                            '?_Clone@TraversalSpec@PropertyCollector@Core@Vmomi@@UBEPAV1234@XZ',
                                                                                            '?_GetSize@TraversalSpec@PropertyCollector@Core@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@TraversalSpec@PropertyCollector@Core@Vmomi@@UBEPAVType@4@XZ',
                                                                                            '??0PropertyPath@Vmomi@@QAE@PBD@Z',
                                                                                            '??0TraversalSpec@PropertyCollector@Core@Vmomi@@QAE@ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@ABVTypeName@3@ABVPropertyPath@3@ABV?$Optional@_N@5@PAV?$DataArray@VSelectionSpec@PropertyCollector@Core@Vmomi@@@3@@Z',
                                                                                            '??0ObjectSpec@PropertyCollector@Core@Vmomi@@QAE@PAVMoRef@3@ABV?$Optional@_N@Vmacore@@PAV?$DataArray@VSelectionSpec@PropertyCollector@Core@Vmomi@@@3@@Z',
                                                                                            '??0PropertySpec@PropertyCollector@Core@Vmomi@@QAE@XZ',
                                                                                            '?SetType@PropertySpec@PropertyCollector@Core@Vmomi@@QAEXABVTypeName@4@@Z',
                                                                                            '?SetPathSet@PropertySpec@PropertyCollector@Core@Vmomi@@QAEXPAV?$Array@VPropertyPath@Vmomi@@@4@@Z',
                                                                                            '??0FilterSpec@PropertyCollector@Core@Vmomi@@QAE@PAV?$DataArray@VPropertySpec@PropertyCollector@Core@Vmomi@@@3@PAV?$DataArray@VObjectSpec@PropertyCollector@Core@Vmomi@@@3@ABV?$Optional@_N@Vmacore@@@Z',
                                                                                            '??0RetrieveOptions@PropertyCollector@Core@Vmomi@@QAE@ABV?$Optional@H@Vmacore@@@Z',
                                                                                            '?GetObjects@RetrieveResult@PropertyCollector@Core@Vmomi@@QBEPAV?$DataArray@VObjectContent@PropertyCollector@Core@Vmomi@@@4@XZ',
                                                                                            '?GetObj@ObjectContent@PropertyCollector@Core@Vmomi@@QBEPAVMoRef@4@XZ',
                                                                                            '?GetPropSet@ObjectContent@PropertyCollector@Core@Vmomi@@QBEPAV?$DataArray@VDynamicProperty@Vmomi@@@4@XZ',
                                                                                            '?GetVal@DynamicProperty@Vmomi@@QBEPAVAny@2@XZ',
                                                                                            '??$GetType@VFilterSpec@PropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VObjectSpec@PropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPropertySpec@PropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0DataArrayBase@Vmomi@@IAE@ABV01@@Z',
                                                                                            '??$GetType@VSelectionSpec@PropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?_DiffProperties@DataArrayBase@Vmomi@@UBEXPAVAny@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@2@@Z',
                                                                                            '?_IsEqual@DataArrayBase@Vmomi@@UBE_NPAVAny@2@_N@Z',
                                                                                            '?_GetSize@DataArrayBase@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '??0PropertyPath@Vmomi@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?Compare@PropertyPath@Vmomi@@QBEHABV12@@Z',
                                                                                            '??$GetExtraSize@VPropertyPath@Vmomi@@@Vmomi@@YAIABV?$vector@VPropertyPath@Vmomi@@V?$allocator@VPropertyPath@Vmomi@@@std@@@std@@P6AII@Z@Z',
                                                                                            '??$GetType@VPropertyPath@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0Any@Vmomi@@IAE@ABV01@@Z',
                                                                                            '??0PropertyPath@Vmomi@@QAE@XZ',
                                                                                            '??4PropertyPath@Vmomi@@QAEAAV01@ABV01@@Z',
                                                                                            '??$GetType@VPropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??1PropertyPath@Vmomi@@QAE@XZ',
                                                                                            '??0PropertyPath@Vmomi@@QAE@ABV01@@Z',
                                                                                            '??$GetType@VMoRef@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?_DiffProperties@MoRef@Vmomi@@UBEXPAVAny@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@2@@Z',
                                                                                            '?_IsEqual@MoRef@Vmomi@@UBE_NPAVAny@2@_N@Z',
                                                                                            '?_GetSize@MoRef@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '??0Any@Vmomi@@IAE@XZ',
                                                                                            '??1Any@Vmomi@@UAE@XZ',
                                                                                            '??$GetType@VComputeResource@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VServiceInstance@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0ProgramSpec@ProcessManager@Guest@Vm@Vim@@QAE@XZ',
                                                                                            '??0FileAttributes@FileManager@Guest@Vm@Vim@@QAE@XZ',
                                                                                            '??0NamePasswordAuthentication@Guest@Vm@Vim@@QAE@XZ',
                                                                                            '??$GetType@VProcessInfo@ProcessManager@Guest@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFileManager@Guest@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VProcessManager@Guest@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VGuestOperationsManager@Guest@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?CONNECTIONSTATE_CONNECTED@HostSystem@Vim@@2QBDB',
                                                                                            '?CONNECTIONSTATE_NOTRESPONDING@HostSystem@Vim@@2QBDB',
                                                                                            '?CONNECTIONSTATE_DISCONNECTED@HostSystem@Vim@@2QBDB',
                                                                                            '??$GetType@VManagedEntity@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VClusterComputeResource@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VHostSystem@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDatastore@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?ACCESSMODE_READWRITE@MountInfo@Host@Vim@@2QBDB',
                                                                                            '??$GetType@VDistributedVirtualPortgroup@Dvs@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VNetwork@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualMachine@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSessionManager@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDatacenter@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFolder@Vim@@@Vmomi@@YAPAVType@0@XZ'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 745,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 102912,
                                                                                       '.rdata\x00\x00': 2449920,
                                                                                       '.reloc\x00\x00': 164864,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 1736192,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3288fc005cc6e942c398362b994960b42e5773715318c941dbe94b22b3afdb9d'},
 '329fd76a7b34efca3ae366f2047ec75ccedd56fd940a5d5564eb9a43b92cc346': {'AddressOfEntryPoint': 329077,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 454656,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'GDI32.dll': 'ExtTextOutW',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'FreeEnvironmentStringsA',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'DefWindowProcW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINHTTP.dll': 'WinHttpCrackUrl',
                                                                                      'WS2_32.dll': 'gethostbyname',
                                                                                      'gdiplus.dll': 'GdipCreateFontFromLogfontA',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            '_TrackMouseEvent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'lstrcmpW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateProcessW',
                                                                                            'TerminateProcess',
                                                                                            'SetErrorMode',
                                                                                            'CreateSemaphoreW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'ExitProcess',
                                                                                            'FreeResource',
                                                                                            'GetACP',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetFileType',
                                                                                            'DuplicateHandle',
                                                                                            'SystemTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileTime',
                                                                                            'GetFileSize',
                                                                                            'MulDiv',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetHandleCount',
                                                                                            'LCMapStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'HeapCreate',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'LCMapStringW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'RtlUnwind',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitThread',
                                                                                            'MoveFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetStringTypeW',
                                                                                            'VirtualQuery',
                                                                                            'GetProcAddress',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'lstrcatW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'lstrlenA',
                                                                                            'GetTempPathW',
                                                                                            'TerminateThread',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEndOfFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileSizeEx',
                                                                                            'Sleep',
                                                                                            'DeleteFileW',
                                                                                            'GetTickCount',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'GetLastError',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetWindowTextW',
                                                                                            'wvsprintfW',
                                                                                            'SetCursor',
                                                                                            'InflateRect',
                                                                                            'OffsetRect',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SetWindowTextW',
                                                                                            'CharNextW',
                                                                                            'IntersectRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'CharPrevW',
                                                                                            'SetRect',
                                                                                            'EnableWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'wsprintfW',
                                                                                            'PostMessageW',
                                                                                            'InvalidateRgn',
                                                                                            'MoveWindow',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'MessageBoxW',
                                                                                            'FindWindowW',
                                                                                            'IsIconic',
                                                                                            'ShowWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'CreatePopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'TrackPopupMenu',
                                                                                            'ScreenToClient',
                                                                                            'PtInRect',
                                                                                            'LoadIconW',
                                                                                            'PostQuitMessage',
                                                                                            'GetCursorPos',
                                                                                            'BringWindowToTop',
                                                                                            'SetActiveWindow',
                                                                                            'GetKeyState',
                                                                                            'GetDC',
                                                                                            'GetClientRect',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'InvalidateRect',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'IsWindow',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'ReleaseDC',
                                                                                            'DestroyWindow',
                                                                                            'SetFocus',
                                                                                            'GetFocus',
                                                                                            'LoadImageW',
                                                                                            'CreateWindowExW',
                                                                                            'MapWindowPoints',
                                                                                            'SendMessageW',
                                                                                            'IsRectEmpty',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetUpdateRect',
                                                                                            'GetWindow',
                                                                                            'GetParent',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'SetWindowRgn',
                                                                                            'IsZoomed',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            'GetMenu',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'CallWindowProcW',
                                                                                            'DefWindowProcW',
                                                                                            'CreateRoundRectRgn',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SaveDC',
                                                                                            'BitBlt',
                                                                                            'Rectangle',
                                                                                            'SetWindowOrgEx',
                                                                                            'DeleteDC',
                                                                                            'CreatePen',
                                                                                            'GetStockObject',
                                                                                            'GetObjectW',
                                                                                            'SelectClipRgn',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'GetTextMetricsW',
                                                                                            'CreateSolidBrush',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'CreatePenIndirect',
                                                                                            'RoundRect',
                                                                                            'TextOutW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetCharABCWidthsW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'ExtSelectClipRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetClipBox',
                                                                                            'CombineRgn',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'StretchBlt',
                                                                                            'CreateDIBSection',
                                                                                            'SetStretchBltMode',
                                                                                            'CreateFontIndirectW',
                                                                                            'RestoreDC',
                                                                                            'ExtTextOutW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'OleLockRunning',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateGuid',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'PathFileExistsW',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipDrawString',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipCreateLineBrushI',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'select',
                                                                                            'WSAGetLastError',
                                                                                            'connect',
                                                                                            'htons',
                                                                                            'closesocket',
                                                                                            'ioctlsocket',
                                                                                            'inet_ntoa',
                                                                                            'socket',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'gethostbyname',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpAddRequestHeaders',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpCrackUrl',
                                                                                            'GetAdaptersAddresses'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 328,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 391776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 90112,
                                                                                       '.reloc\x00\x00': 32256,
                                                                                       '.rsrc\x00\x00\x00': 392192,
                                                                                       '.text\x00\x00\x00': 447488},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/329fd76a7b34efca3ae366f2047ec75ccedd56fd940a5d5564eb9a43b92cc346'},
 '33243e2da132cb73fe15b690a4a3cc04dea824fd687399bcb9577002f6126c72': {'AddressOfEntryPoint': 62128,
                                                                      'DebugRVA': 33936,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'KERNEL32.dll': 'ReleaseSemaphore',
                                                                                      'MSVCR120_CLR0400.dll': 'wcsncpy_s',
                                                                                      'OLEAUT32.dll': 'SetErrorInfo',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'mscoree.dll': 'GetRequestedRuntimeInfo'},
                                                                      'ImportedFunctions': ['DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'TlsFree',
                                                                                            'CloseHandle',
                                                                                            'TlsAlloc',
                                                                                            'ReleaseMutex',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualProtect',
                                                                                            'CreateEventW',
                                                                                            'CreateSemaphoreW',
                                                                                            'ResetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'RaiseException',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SwitchToThread',
                                                                                            'DebugBreak',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'FormatMessageW',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringW',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'CreateMutexW',
                                                                                            'TlsGetValue',
                                                                                            'VirtualQuery',
                                                                                            'SetEvent',
                                                                                            'SleepEx',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'VirtualFree',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'HeapDestroy',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapCreate',
                                                                                            'HeapValidate',
                                                                                            'ReleaseSemaphore',
                                                                                            'CLRCreateInstance',
                                                                                            'GetRequestedRuntimeInfo',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_wcsicmp',
                                                                                            'tolower',
                                                                                            'exit',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'strcpy_s',
                                                                                            '_errno',
                                                                                            '_vsnprintf_s',
                                                                                            'memmove',
                                                                                            '_purecall',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcscpy_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'wcscat_s',
                                                                                            'fflush',
                                                                                            '__iob_func',
                                                                                            '_snprintf_s',
                                                                                            'fwprintf',
                                                                                            'wcsncpy_s',
                                                                                            'LoadStringW',
                                                                                            'SetErrorInfo',
                                                                                            'EventWrite'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3864,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 69120},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/33243e2da132cb73fe15b690a4a3cc04dea824fd687399bcb9577002f6126c72'},
 '3368f84c5c1e52d416ae74615088b6af101adf2167b1fb009125bdcd4ca15bf0': {'AddressOfEntryPoint': 5504,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetTickCount',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_wcmdln',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'ShellExecuteExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 101456,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 101888,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3368f84c5c1e52d416ae74615088b6af101adf2167b1fb009125bdcd4ca15bf0'},
 '337e0047c26483876b4211c206e40943b5cd73dbe890658471f07b7dd03232dd': {'AddressOfEntryPoint': 12942,
                                                                      'DebugRVA': 12684,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2152,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/337e0047c26483876b4211c206e40943b5cd73dbe890658471f07b7dd03232dd'},
 '33883048abd6bc511eec3f417855a1e9e2be94f01cf43380e1deca35a381716e': {'AddressOfEntryPoint': 13386,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'MoveFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareFileTime',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'lstrcpyW',
                                                                                            'MoveFileExW',
                                                                                            'lstrcatW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetShortPathNameW',
                                                                                            'SearchPathW',
                                                                                            'lstrcmpiW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrcmpW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableMenuItem',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapW',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'wsprintfW',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharPrevW',
                                                                                            'CharNextA',
                                                                                            'wsprintfA',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EndDialog',
                                                                                            'RegisterClassW',
                                                                                            'SystemParametersInfoW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'CharNextW',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'LoadImageW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowExW',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetForegroundWindow',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 41888,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 41984,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/33883048abd6bc511eec3f417855a1e9e2be94f01cf43380e1deca35a381716e'},
 '33a4a3cbe560276a4760563963a86df68e4307ead88702a299ad6ab717546ce5': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 376548,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 376832,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/33a4a3cbe560276a4760563963a86df68e4307ead88702a299ad6ab717546ce5'},
 '33a61b0a1c921599b3eeb47e1b8ea758c94edcdb8a033bc13c5fd3f23637fd27': {'AddressOfEntryPoint': 300285,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 348160,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'RaiseException',
                                                                                      'USER32.dll': 'GetDlgItemInt',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'comdlg32.dll': 'GetSaveFileNameW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['timeGetTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersion',
                                                                                            'ReadFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetProcAddress',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryW',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetModuleHandleA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'lstrcpynA',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileW',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsBadCodePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSize',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'IsBadWritePtr',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetVersionExA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlUnwind',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'LocalFree',
                                                                                            'SetFilePointer',
                                                                                            'CreateEventA',
                                                                                            'WriteFile',
                                                                                            'GetLastError',
                                                                                            'GetOverlappedResult',
                                                                                            'ResetEvent',
                                                                                            'CloseHandle',
                                                                                            'GetOEMCP',
                                                                                            'RaiseException',
                                                                                            'GetDlgItemTextA',
                                                                                            'CheckDlgButton',
                                                                                            'GetIconInfo',
                                                                                            'SetCapture',
                                                                                            'EndDialog',
                                                                                            'UnregisterHotKey',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetCursorPos',
                                                                                            'GetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'InvalidateRect',
                                                                                            'SetWindowRgn',
                                                                                            'DrawIconEx',
                                                                                            'GetAsyncKeyState',
                                                                                            'SendDlgItemMessageA',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SetFocus',
                                                                                            'RegisterHotKey',
                                                                                            'EnableWindow',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'LoadIconA',
                                                                                            'SetClassLongA',
                                                                                            'SetDlgItemInt',
                                                                                            'SetTimer',
                                                                                            'GetDesktopWindow',
                                                                                            'DialogBoxParamA',
                                                                                            'IsWindowVisible',
                                                                                            'ScreenToClient',
                                                                                            'BeginDeferWindowPos',
                                                                                            'IsWindow',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'InvalidateRgn',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'SendMessageA',
                                                                                            'GetClassNameA',
                                                                                            'EnumChildWindows',
                                                                                            'FindWindowExA',
                                                                                            'ShowWindow',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'CreateDialogParamA',
                                                                                            'GetWindowLongA',
                                                                                            'GetClientRect',
                                                                                            'CallWindowProcA',
                                                                                            'SetWindowLongA',
                                                                                            'PostMessageA',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgItemInt',
                                                                                            'CombineRgn',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateDIBSection',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'CreateRectRgn',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameA',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 142,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2704,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16384,
                                                                                       '.data1\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 45056,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 339968,
                                                                                       '.text1\x00\x00': 4096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/33a61b0a1c921599b3eeb47e1b8ea758c94edcdb8a033bc13c5fd3f23637fd27'},
 '33bcf34ae9648a6b1be524b6939be10b43d81785f01d0cc85b86d6be75f35346': {'AddressOfEntryPoint': 48928,
                                                                      'DebugRVA': 4448,
                                                                      'DebugSize': 28,
                                                                      'Dll': 17728,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 135168,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntdll.dll': '_aullrem'},
                                                                      'ImportedFunctions': ['sprintf_s',
                                                                                            'NtWriteFile',
                                                                                            'NtQuerySystemTime',
                                                                                            'NtOpenFile',
                                                                                            'NtSetInformationFile',
                                                                                            'NtClose',
                                                                                            'NtCreateFile',
                                                                                            'NtSetCachedSigningLevel',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'RtlFindMessage',
                                                                                            'RtlFormatMessage',
                                                                                            'NtDrawText',
                                                                                            'NtDisplayString',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtOpenProcess',
                                                                                            'NtQueryInformationProcess',
                                                                                            '_wcstoui64',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtOpenKey',
                                                                                            'NtLoadKey',
                                                                                            'NtUnloadKey',
                                                                                            'NtCreateTransaction',
                                                                                            'NtCommitTransaction',
                                                                                            'RtlLockBootStatusData',
                                                                                            'RtlGetSetBootStatusData',
                                                                                            'RtlUnlockBootStatusData',
                                                                                            'NtShutdownSystem',
                                                                                            'NtCreateKey',
                                                                                            'NtFlushKey',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'NtFlushBuffersFile',
                                                                                            'NtReadFile',
                                                                                            'RtlSetHeapInformation',
                                                                                            'DbgPrintEx',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlRaiseStatus',
                                                                                            'memmove',
                                                                                            'NtDelayExecution',
                                                                                            'NtRollbackTransaction',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'NtQueryAttributesFile',
                                                                                            'NtQuerySecurityObject',
                                                                                            'NtSetSecurityObject',
                                                                                            'NtCreateKeyTransacted',
                                                                                            'NtOpenKeyTransactedEx',
                                                                                            'NtOpenKeyEx',
                                                                                            'NtDeleteKey',
                                                                                            'NtQueryValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtDeleteValueKey',
                                                                                            'NtFsControlFile',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            '_aullshr',
                                                                                            'RtlNormalizeProcessParams',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlDeleteSecurityObject',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlGetSaclSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlGetGroupSecurityDescriptor',
                                                                                            'RtlNewSecurityObjectEx',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlDuplicateUnicodeString',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlDowncaseUnicodeChar',
                                                                                            'RtlReAllocateHeap',
                                                                                            'iswspace',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_allmul',
                                                                                            '_allshl',
                                                                                            '_aullrem'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 119296},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/33bcf34ae9648a6b1be524b6939be10b43d81785f01d0cc85b86d6be75f35346'},
 '33d7b0893ad2a7565ed27a360e233405d3d41186e276264fe29e0577fc17720d': {'AddressOfEntryPoint': 69088,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'SHLWAPI.dll': 'StrCmpNW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeExW',
                                                                                      'WS2_32.dll': 'WSAGetLastError',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVerifyVersionInfo'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'CreateFileW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetComputerNameExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'ReadFile',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'lstrlenA',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'VerSetConditionMask',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetFileSize',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrlenW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'fclose',
                                                                                            '_ltow',
                                                                                            'wcstok',
                                                                                            '_itow',
                                                                                            '_vsnwprintf',
                                                                                            'wcsstr',
                                                                                            'wcsrchr',
                                                                                            '_wfopen',
                                                                                            '__iob_func',
                                                                                            '_wchmod',
                                                                                            'wcsncpy_s',
                                                                                            'wcschr',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            'memset',
                                                                                            'CharUpperW',
                                                                                            'CharLowerW',
                                                                                            'LoadStringW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetLastErrorW',
                                                                                            'NetServerGetInfo',
                                                                                            'NetApiBufferFree',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'GetAddrInfoW',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetNameInfoW',
                                                                                            'WSAGetLastError',
                                                                                            'GetUserNameExW',
                                                                                            'StrChrIW',
                                                                                            'StrStrIW',
                                                                                            'StrStrW',
                                                                                            'StrChrW',
                                                                                            'StrRChrW',
                                                                                            'StrCmpNW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'RtlVerifyVersionInfo'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 121,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 67072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/33d7b0893ad2a7565ed27a360e233405d3d41186e276264fe29e0577fc17720d'},
 '33e0694012804397159c9e4634dd749d497de5a47c6ddc805510edb2e7f222dc': {'AddressOfEntryPoint': 19040,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'UTILDLL.dll': 'StrAsyncConnectState',
                                                                                      'WINSTA.dll': 'WinStationFreeEXECENVDATAEX',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['WinStationGetTermSrvCountersValue',
                                                                                            'WinStationEnumerateW',
                                                                                            'WinStationQueryInformationW',
                                                                                            'WinStationOpenServerExW',
                                                                                            'WinStationFreeMemory',
                                                                                            'WinStationGetAllSessionsEx',
                                                                                            'WinStationOpenServerW',
                                                                                            'WinStationFreeEXECENVDATAEX',
                                                                                            'StrConnectState',
                                                                                            'StrAsyncConnectState',
                                                                                            'CharToOemW',
                                                                                            'LoadStringW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetThreadUILanguage',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'LocalAlloc',
                                                                                            'GetOEMCP',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'Sleep',
                                                                                            'setlocale',
                                                                                            '_wsetlocale',
                                                                                            'wcscpy_s',
                                                                                            'wcschr',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            '_wcsnicmp',
                                                                                            'wcstol',
                                                                                            'iswdigit',
                                                                                            'wprintf',
                                                                                            'printf',
                                                                                            'memmove',
                                                                                            'wcstoul',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'wcscat_s',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            '_snwprintf_s',
                                                                                            '_wcslwr',
                                                                                            'fflush',
                                                                                            'memcpy',
                                                                                            'swprintf_s',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 89,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/33e0694012804397159c9e4634dd749d497de5a47c6ddc805510edb2e7f222dc'},
 '33fffe32220150b341d88e7e7c9dae4e297e317770fa9a4f9f96eaa38ad7e055': {'AddressOfEntryPoint': 4564,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LockResource',
                                                                                      'SETUPAPI.dll': 'SetupIterateCabinetW',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['SetupIterateCabinetW',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxW',
                                                                                            'WriteFile',
                                                                                            'VerSetConditionMask',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'DeleteFileW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadResource',
                                                                                            'CloseHandle',
                                                                                            'lstrcpyW',
                                                                                            'ExitProcess',
                                                                                            'SizeofResource',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LoadLibraryA',
                                                                                            'GetTempPathW',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LockResource'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 5001164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5001216,
                                                                                       '.text\x00\x00\x00': 2048},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/33fffe32220150b341d88e7e7c9dae4e297e317770fa9a4f9f96eaa38ad7e055'},
 '3441d2ca0928f7d90cf1d6818095160fa56716841e49fc15042934d7452cf376': {'AddressOfEntryPoint': 129360,
                                                                      'DebugRVA': 4368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 176128,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SystemTimeToFileTime',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'SHLWAPI.dll': 'StrRChrIW',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetDateFormatW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CompareFileTime',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetLocaleInfoW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetSidSubAuthority',
                                                                                      'ktmw32.dll': 'CommitTransaction',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmIsOptedIn',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_except_handler4_common',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            '_ultow_s',
                                                                                            'wcschr',
                                                                                            '_wtoi',
                                                                                            'iswdigit',
                                                                                            'iswpunct',
                                                                                            'wcstok_s',
                                                                                            'iswspace',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            'wcstok',
                                                                                            'srand',
                                                                                            '_wcsnicmp',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_iob',
                                                                                            'memcpy',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcspbrk',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            '_get_osfhandle',
                                                                                            '_controlfp',
                                                                                            'isspace',
                                                                                            '_wtol',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '__p__commode',
                                                                                            'memset',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'WriteConsoleW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetFileType',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'CompareFileTime',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetStdHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'GetLocalTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CreateWellKnownSid',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'RtlInitUnicodeString',
                                                                                            'EtwTraceMessage',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'RtlCreateVirtualAccountSid',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'MessageBeep',
                                                                                            'CharUpperW',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateGuid',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'IIDFromString',
                                                                                            'CoInitializeEx',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'VarBstrCat',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'GetErrorInfo',
                                                                                            'StrStrW',
                                                                                            'StrChrIW',
                                                                                            'StrChrW',
                                                                                            'StrStrIW',
                                                                                            'StrRChrIW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'EnterCriticalSection',
                                                                                            'DebugBreak',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateFileTransactedW',
                                                                                            'SetFileInformationByHandle',
                                                                                            'GetFinalPathNameByHandleW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetComputerNameExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'VerSetConditionMask',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'lstrlenW',
                                                                                            'GetComputerNameW',
                                                                                            'LocalFree',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateTransaction',
                                                                                            'CommitTransaction'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 24,
                                                                      'NumberOfImportFunctions': 156,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 24064,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 142848},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3441d2ca0928f7d90cf1d6818095160fa56716841e49fc15042934d7452cf376'},
 '34aef088190d020b1684d7433c2f9393bbbe37cc33dfe40ed63195a16a735a85': {'AddressOfEntryPoint': 6944,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'ifsutil.dll': '?QueryFileSystemName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@PAJ1@Z',
                                                                                      'msvcrt.dll': '_initterm',
                                                                                      'ulib.dll': '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ'},
                                                                      'ImportedFunctions': ['HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '__p__commode',
                                                                                            '_except_handler4_common',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_controlfp',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_XcptFilter',
                                                                                            '_initterm',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '?QueryString@WSTRING@@QBEPAV1@KK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z',
                                                                                            '?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0STREAM_MESSAGE@@QAE@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?Display@MESSAGE@@QAAEPBDZZ',
                                                                                            '?FreeLibraryHandle@SYSTEM@@SGXPAX@Z',
                                                                                            '?QueryLibraryEntryPoint@SYSTEM@@SGP6GHXZPBVWSTRING@@0PAPAX@Z',
                                                                                            '?QueryDriveType@SYSTEM@@SG?AW4DRIVE_TYPE@@PBVWSTRING@@@Z',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '?QueryFullPath@PATH@@QBEPAV1@XZ',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '??1STREAM_MESSAGE@@UAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?DosDriveNameToNtDriveName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@@Z',
                                                                                            '?QueryFileSystemName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@PAJ1@Z'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 66,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/34aef088190d020b1684d7433c2f9393bbbe37cc33dfe40ed63195a16a735a85'},
 '34d94e88c0a4b7827d4870bad34ae3b9dc5ae694ff463ef0efa1f4ba474a7a6e': {'AddressOfEntryPoint': 15292,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '__CxxFrameHandler3'},
                                                                      'ImportedFunctions': ['EnableWindow',
                                                                                            'UpdateWindow',
                                                                                            'LoadStringW',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 38,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 106704,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 107008,
                                                                                       '.text\x00\x00\x00': 14336},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/34d94e88c0a4b7827d4870bad34ae3b9dc5ae694ff463ef0efa1f4ba474a7a6e'},
 '34de9036d0d16ef10129962be5ebb4f6d001d1ff6677c0aec6ff530322ea099c': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 63920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 64000,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/34de9036d0d16ef10129962be5ebb4f6d001d1ff6677c0aec6ff530322ea099c'},
 '3510df9d6df9e90fd9a6a1e75dc1bb3a38ef0ab54ec07585613be1fd0bb441f8': {'AddressOfEntryPoint': 19116,
                                                                      'DebugRVA': 53744,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceStatusEx',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHLWAPI.dll': 'PathQuoteSpacesW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetTempFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'VerSetConditionMask',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateDirectoryW',
                                                                                            'SizeofResource',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'lstrlenW',
                                                                                            'GetTempPathW',
                                                                                            'RaiseException',
                                                                                            'VerifyVersionInfoW',
                                                                                            'Process32FirstW',
                                                                                            'LockResource',
                                                                                            'RemoveDirectoryW',
                                                                                            'Process32NextW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'LocalFree',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileMappingW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'PathQuoteSpacesW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatusEx',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'wvsprintfW',
                                                                                            'CharLowerBuffW',
                                                                                            'MessageBoxW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 104,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 84933184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 84933632,
                                                                                       '.text\x00\x00\x00': 48128},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3510df9d6df9e90fd9a6a1e75dc1bb3a38ef0ab54ec07585613be1fd0bb441f8'},
 '3513c2b2d4f8d55e07f74b3c841b131155212439d3697d8c2865caf93fca3fcb': {'AddressOfEntryPoint': 4336,
                                                                      'DebugRVA': 4112,
                                                                      'DebugSize': 28,
                                                                      'Dll': 50496,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3513c2b2d4f8d55e07f74b3c841b131155212439d3697d8c2865caf93fca3fcb'},
 '351800b0e186fdf3cf9a4894a37dac26515f85d4ec980379deb3ca72df3fe092': {'AddressOfEntryPoint': 34336,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ISCSIDSC.dll': 'SetIScsiIKEInfoW',
                                                                                      'ISCSIUM.dll': 'DiscpExecuteMethod',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'SETUPAPI.dll': 'CM_Get_DevNode_Registry_Property_ExW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'DeviceIoControl',
                                                                                            'GetFileType',
                                                                                            'GetLastError',
                                                                                            'GetStdHandle',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'WideCharToMultiByte',
                                                                                            'RegisterApplicationRestart',
                                                                                            'WriteFile',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wcstoui64',
                                                                                            '_iob',
                                                                                            '_vsnwprintf',
                                                                                            'fgetws',
                                                                                            'vswprintf_s',
                                                                                            '_wtoi',
                                                                                            'feof',
                                                                                            '_wcsicmp',
                                                                                            '__getmainargs',
                                                                                            '_exit',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'CommandLineToArgvW',
                                                                                            'WSAStringToAddressA',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'LoadStringW',
                                                                                            'CM_Get_DevNode_Registry_Property_ExW',
                                                                                            'RemoveIScsiStaticTargetW',
                                                                                            'ClearPersistentIScsiDevices',
                                                                                            'AddIScsiStaticTargetW',
                                                                                            'AddPersistentIScsiDeviceW',
                                                                                            'SetIScsiInitiatorNodeNameW',
                                                                                            'GetDevicesForIScsiSessionW',
                                                                                            'GetIScsiTargetInformationW',
                                                                                            'AddISNSServerW',
                                                                                            'ReportISNSServerListW',
                                                                                            'SendScsiInquiry',
                                                                                            'GetIScsiVersionInformation',
                                                                                            'RemoveISNSServerW',
                                                                                            'LoginIScsiTargetW',
                                                                                            'ReportPersistentIScsiDevicesW',
                                                                                            'GetIScsiInitiatorNodeNameW',
                                                                                            'SendScsiReadCapacity',
                                                                                            'GetIScsiSessionListW',
                                                                                            'RemovePersistentIScsiDeviceW',
                                                                                            'SetIScsiTunnelModeOuterAddressW',
                                                                                            'RemoveIScsiConnection',
                                                                                            'GetIScsiIKEInfoW',
                                                                                            'ReportActiveIScsiTargetMappingsW',
                                                                                            'RefreshIScsiSendTargetPortalW',
                                                                                            'SetIScsiGroupPresharedKey',
                                                                                            'AddIScsiSendTargetPortalW',
                                                                                            'ReportIScsiTargetsW',
                                                                                            'ReportIScsiSendTargetPortalsExW',
                                                                                            'SetupPersistentIScsiVolumes',
                                                                                            'SendScsiReportLuns',
                                                                                            'AddIScsiConnectionW',
                                                                                            'ReportIScsiInitiatorListW',
                                                                                            'ReportIScsiPersistentLoginsW',
                                                                                            'LogoutIScsiTarget',
                                                                                            'RemoveIScsiSendTargetPortalW',
                                                                                            'RemoveIScsiPersistentTargetW',
                                                                                            'RefreshISNSServerW',
                                                                                            'SetIScsiInitiatorCHAPSharedSecret',
                                                                                            'SetIScsiIKEInfoW',
                                                                                            'DiscpTextAddrToBinary',
                                                                                            'DiscpFreeDeviceInterfaceList',
                                                                                            'DiscpEnumerateDeviceInterfaces',
                                                                                            'DiscpAllocMemory',
                                                                                            'DiscpFreeMemory',
                                                                                            'DiscpSetRegistryValue',
                                                                                            'DiscpExecuteMethod'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 103,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 107720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 108032,
                                                                                       '.text\x00\x00\x00': 32256},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/351800b0e186fdf3cf9a4894a37dac26515f85d4ec980379deb3ca72df3fe092'},
 '352cedd04fd2bc1c7b83ebf7d34ef892e0a1a05f93d526cab101a44263c95b5d': {'AddressOfEntryPoint': 8368,
                                                                      'DebugRVA': 4352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'SHLWAPI.dll': 'StrCmpNIW',
                                                                                      'msvcrt.dll': 'isspace',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            'isspace',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'StrCmpNIW',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 38,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 52648,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 52736,
                                                                                       '.text\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/352cedd04fd2bc1c7b83ebf7d34ef892e0a1a05f93d526cab101a44263c95b5d'},
 '3530a30a2d62f158ccbb9f2af51722f658bbcc179e559ecc06a0cbdf3007871f': {'AddressOfEntryPoint': 8752,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadPreferredUILanguages',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': '_wcsicmp',
                                                                                      'prvdmofcomp.dll': 'CompileSchemaToWMI'},
                                                                      'ImportedFunctions': ['_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            'exit',
                                                                                            'setlocale',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            '_wcsicmp',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateRegisterParameter',
                                                                                            'GetProviderSchema',
                                                                                            'CompileSchemaToWMI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 39,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3530a30a2d62f158ccbb9f2af51722f658bbcc179e559ecc06a0cbdf3007871f'},
 '353196fc80da93a9e96efacb32ae29955c3487341695e65412bbe73c8d328c42': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 64536,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 7656,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/clean/353196fc80da93a9e96efacb32ae29955c3487341695e65412bbe73c8d328c42'},
 '353a798807d0825b216a821c6344220d25518c2b4e6fb32da97fca3b1ae31a08': {'AddressOfEntryPoint': 78336,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'CreateDIBSection',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'SXSHARED.dll': 'SxTracerDebuggerBreak',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '_vscwprintf',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'TraceMessage',
                                                                                            'DuplicateToken',
                                                                                            'ControlTraceW',
                                                                                            'StartTraceW',
                                                                                            'EnableTraceEx2',
                                                                                            'CheckTokenMembership',
                                                                                            'GetTokenInformation',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegQueryValueExW',
                                                                                            'FormatMessageW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetLocalTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'CreateThread',
                                                                                            'InitializeSListHead',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExW',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'SetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentProcess',
                                                                                            'FindClose',
                                                                                            'SetErrorMode',
                                                                                            'GetProcessHeap',
                                                                                            'CreateFileW',
                                                                                            'DeviceIoControl',
                                                                                            'MoveFileExW',
                                                                                            'HeapSetInformation',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetCommandLineW',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateDirectoryW',
                                                                                            'LoadLibraryExW',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'DeleteFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'TerminateProcess',
                                                                                            'SetBkColor',
                                                                                            'DeleteDC',
                                                                                            'GdiFlush',
                                                                                            'SelectObject',
                                                                                            'SetLayout',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDeviceCaps',
                                                                                            'ExtTextOutW',
                                                                                            'SetTextColor',
                                                                                            'CreateDIBSection',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckDlgButton',
                                                                                            'DrawFrameControl',
                                                                                            'OffsetRect',
                                                                                            'InflateRect',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'GetSysColorBrush',
                                                                                            'DestroyWindow',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'EndPaint',
                                                                                            'GetSysColor',
                                                                                            'MapWindowPoints',
                                                                                            'BeginPaint',
                                                                                            'ShowWindow',
                                                                                            'PostMessageW',
                                                                                            'SetWindowPos',
                                                                                            'LoadImageW',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'GetDesktopWindow',
                                                                                            'SetFocus',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'DestroyIcon',
                                                                                            'MoveWindow',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'ClientToScreen',
                                                                                            'GetSystemMetrics',
                                                                                            'DialogBoxParamW',
                                                                                            'SetForegroundWindow',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SetWindowTextW',
                                                                                            'SendMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetWindowTextW',
                                                                                            'EnumWindows',
                                                                                            'RegisterWindowMessageW',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'iswspace',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_purecall',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcstok',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_cexit',
                                                                                            '_vsnwprintf',
                                                                                            '_vscwprintf',
                                                                                            'SHGetStockIconInfo',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFileInfoW',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoDisconnectObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'SysStringLen',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlGetLastNtStatus',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'SxTracerGetThreadContextRetail',
                                                                                            'SxTracerShouldTrackFailure',
                                                                                            'SxTracerDebuggerBreak'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 192,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 473832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 474112,
                                                                                       '.text\x00\x00\x00': 76800},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/353a798807d0825b216a821c6344220d25518c2b4e6fb32da97fca3b1ae31a08'},
 '35416b914ca8d758410d917174454d02cc0afbe1a7eac941b2f1e65207501c5e': {'AddressOfEntryPoint': 40544,
                                                                      'DebugRVA': 8032,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'msvcrt.dll': 'memcmp'},
                                                                      'ImportedFunctions': ['WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'FillConsoleOutputCharacterA',
                                                                                            'WriteConsoleOutputCharacterA',
                                                                                            'FillConsoleOutputAttribute',
                                                                                            'SetConsoleActiveScreenBuffer',
                                                                                            'GetCurrentThread',
                                                                                            'GetConsoleCP',
                                                                                            'SetThreadPriority',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'FindNextFileA',
                                                                                            'CreateThread',
                                                                                            'ExitProcess',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'GlobalAlloc',
                                                                                            'ReadConsoleInputA',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'ReadFile',
                                                                                            'GetLastError',
                                                                                            'PeekConsoleInputA',
                                                                                            'ScrollConsoleScreenBufferA',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'SetFilePointer',
                                                                                            'CompareFileTime',
                                                                                            'GetFileAttributesExA',
                                                                                            'WriteFile',
                                                                                            'FileTimeToSystemTime',
                                                                                            'IsDBCSLeadByte',
                                                                                            'CloseHandle',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetConsoleMode',
                                                                                            'CreateEventA',
                                                                                            'SetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'CreateConsoleScreenBuffer',
                                                                                            'WriteConsoleOutputA',
                                                                                            'Beep',
                                                                                            'GlobalFree',
                                                                                            'SetConsoleWindowInfo',
                                                                                            'SetConsoleCursorInfo',
                                                                                            'GetConsoleCursorInfo',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'RtlUnwind',
                                                                                            'OutputDebugStringA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'exit',
                                                                                            'free',
                                                                                            'puts',
                                                                                            'atol',
                                                                                            'strpbrk',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            'isleadbyte',
                                                                                            '_fileno',
                                                                                            '_iob',
                                                                                            '_snprintf',
                                                                                            '_itoa',
                                                                                            'wctomb',
                                                                                            '__badioinfo',
                                                                                            '__pioinfo',
                                                                                            '_isatty',
                                                                                            '_write',
                                                                                            '_lseeki64',
                                                                                            'getenv',
                                                                                            'strrchr',
                                                                                            '_strdup',
                                                                                            'printf',
                                                                                            'strtok',
                                                                                            'fgets',
                                                                                            '_strupr',
                                                                                            'atoi',
                                                                                            'strstr',
                                                                                            'malloc',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'fputc',
                                                                                            '_errno',
                                                                                            '__iob_func',
                                                                                            'memcmp'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 104,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 45056},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/35416b914ca8d758410d917174454d02cc0afbe1a7eac941b2f1e65207501c5e'},
 '358ee9d6c7f8ab2479b13ec9bfc546ef7ecd9e2161c6a5d5ed97976c4365f301': {'AddressOfEntryPoint': 14880,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'msvcrt.dll': '__p__fmode',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'ulib.dll': '??0FLAG_ARGUMENT@@QAE@XZ'},
                                                                      'ImportedFunctions': ['GetFileAttributesW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'towupper',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_wcsicmp',
                                                                                            '__p__fmode',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?FillAndReadByte@BYTE_STREAM@@AAEEPAE@Z',
                                                                                            '?Initialize@BYTE_STREAM@@QAEEPAVSTREAM@@K@Z',
                                                                                            '??1BYTE_STREAM@@UAE@XZ',
                                                                                            '??0BYTE_STREAM@@QAE@XZ',
                                                                                            '?TruncateBase@PATH@@QAEEXZ',
                                                                                            '?SetName@PATH@@QAEEPBVWSTRING@@@Z',
                                                                                            '?QueryWCExpansion@PATH@@QAEPAV1@PAV1@@Z',
                                                                                            '?QueryFullPathString@PATH@@QBEPAVWSTRING@@XZ',
                                                                                            '?QueryFullPath@PATH@@QBEPAV1@XZ',
                                                                                            '?IsDrive@PATH@@QBEEXZ',
                                                                                            '?HasWildCard@PATH@@QBEEXZ',
                                                                                            '?AppendBase@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '?Initialize@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '?Initialize@PATH@@QAEEPBV1@E@Z',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0CLASS_DESCRIPTOR@@QAE@XZ',
                                                                                            '?Initialize@LONG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0LONG_ARGUMENT@@QAE@XZ',
                                                                                            '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '?DeleteChAt@WSTRING@@QAEXKK@Z',
                                                                                            '?Initialize@CLASS_DESCRIPTOR@@QAEEXZ',
                                                                                            '?QueryString@WSTRING@@QBEPAV1@KK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?SetAttributes@FSN_FILTER@@QAEEKKK@Z',
                                                                                            '?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '??1FSN_FILTER@@UAE@XZ',
                                                                                            '??0FSN_FILTER@@QAE@XZ',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?GetLexeme@ARGUMENT@@QAEPAVWSTRING@@XZ',
                                                                                            '??0PROGRAM@@IAE@XZ',
                                                                                            '?ValidateVersion@PROGRAM@@UBEXKK@Z',
                                                                                            '?Usage@PROGRAM@@UBEXXZ',
                                                                                            '?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?Fatal@PROGRAM@@UBEXXZ',
                                                                                            '?Fatal@PROGRAM@@UBAXKKPADZZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z',
                                                                                            '?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ',
                                                                                            '??1PROGRAM@@UAE@XZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?QueryFsnodeArray@FSN_DIRECTORY@@QBEPAVARRAY@@PAVFSN_FILTER@@@Z',
                                                                                            '?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z',
                                                                                            '??0STREAM_MESSAGE@@QAE@XZ',
                                                                                            '?QueryResourceString@BASE_SYSTEM@@SAEPAVWSTRING@@KPBDZZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?Display@MESSAGE@@QAAEPBDZZ',
                                                                                            '?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z',
                                                                                            '?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z',
                                                                                            '?IsCorrectVersion@SYSTEM@@SGEXZ',
                                                                                            '?Strcspn@WSTRING@@QBEKPBV1@K@Z',
                                                                                            '?Get_Standard_Error_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?Initialize@FSN_FILTER@@QAEEXZ',
                                                                                            '?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?PutMultipleSwitch@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?QueryNumber@WSTRING@@QBEEPAJKK@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 113,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/358ee9d6c7f8ab2479b13ec9bfc546ef7ecd9e2161c6a5d5ed97976c4365f301'},
 '35fd9608d1147d191d8689ac10e75934ba93dfe54c1432545bc8a10cb20cf72b': {'AddressOfEntryPoint': 4784,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'MsCtfMonitor.DLL': 'DoMsCtfMonitor',
                                                                                      'msvcrt.dll': '_XcptFilter'},
                                                                      'ImportedFunctions': ['RegisterApplicationRestart',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'DoMsCtfMonitor'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 34,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/35fd9608d1147d191d8689ac10e75934ba93dfe54c1432545bc8a10cb20cf72b'},
 '36030217bac63be5f1bda4da6d7bb728d9b16b6d352192ef818f66e10027aa8a': {'AddressOfEntryPoint': 5616,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['LoadStringW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 31,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 69768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 70144,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/36030217bac63be5f1bda4da6d7bb728d9b16b6d352192ef818f66e10027aa8a'},
 '36783a5027fd3140b97eae048aedb1d23e7f950a52d730e32d4a086402cd0f16': {'AddressOfEntryPoint': 1422208,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1593344,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_GetIconSize',
                                                                                      'COMDLG32.dll': 'GetFileTitleW',
                                                                                      'GDI32.dll': 'GetLayout',
                                                                                      'IMM32.dll': 'ImmGetContext',
                                                                                      'KERNEL32.dll': 'RtlVirtualUnwind',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEACC.dll': 'LresultFromObject',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'CloseClipboard',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'WS2_32.dll': 'getnameinfo',
                                                                                      'WSOCK32.dll': 'WSAStartup',
                                                                                      'WTSAPI32.dll': 'WTSEnumerateSessionsW',
                                                                                      'framedyn.dll': '?Release@CInstance@@QEAAJXZ',
                                                                                      'gdiplus.dll': 'GdipDrawImageI',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['??1CWbemGlueFactory@@QEAA@XZ',
                                                                                            '??0CWbemGlueFactory@@QEAA@XZ',
                                                                                            '?GetStringArray@CInstance@@QEBA_NPEBGAEAPEAUtagSAFEARRAY@@@Z',
                                                                                            '?GetDWORD@CInstance@@QEBA_NPEBGAEAK@Z',
                                                                                            '?SetDWORD@CInstance@@QEAA_NPEBGK@Z',
                                                                                            '?SetStringArray@CInstance@@QEAA_NPEBGAEBUtagSAFEARRAY@@@Z',
                                                                                            '?CreateNewInstance@Provider@@IEAAPEAVCInstance@@PEAVMethodContext@@@Z',
                                                                                            '?Commit@CInstance@@QEAAJXZ',
                                                                                            '?FrameworkLoginDLL@CWbemProviderGlue@@SAHPEBG@Z',
                                                                                            '??1Provider@@UEAA@XZ',
                                                                                            '?ValidatePutInstanceFlags@Provider@@MEAAJJ@Z',
                                                                                            '?ValidateDeletionFlags@Provider@@MEAAJJ@Z',
                                                                                            '?ValidateQueryFlags@Provider@@MEAAJJ@Z',
                                                                                            '?ValidateMethodFlags@Provider@@MEAAJJ@Z',
                                                                                            '?ValidateGetObjFlags@Provider@@MEAAJJ@Z',
                                                                                            '?ValidateEnumerationFlags@Provider@@MEAAJJ@Z',
                                                                                            '?Flush@Provider@@MEAAXXZ',
                                                                                            '?GetObject@Provider@@MEAAJPEAVCInstance@@JAEAVCFrameworkQuery@@@Z',
                                                                                            '?OnFinalRelease@CThreadBase@@MEAAXXZ',
                                                                                            '??0Provider@@QEAA@PEBG0@Z',
                                                                                            '?AddRef@CWbemGlueFactory@@UEAAKXZ',
                                                                                            '?Release@CInstance@@QEAAJXZ',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSQuerySessionInformationW',
                                                                                            'WTSEnumerateSessionsW',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetOEMCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetVersionExW',
                                                                                            'SizeofResource',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'FlsAlloc',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStdHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'HeapSize',
                                                                                            'HeapQueryInformation',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'VirtualAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'SearchPathW',
                                                                                            'GetProfileIntW',
                                                                                            'GetTickCount',
                                                                                            'GetNumberFormatW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'GlobalFlags',
                                                                                            'lstrcpyW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileAttributesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToSystemTime',
                                                                                            'lstrlenA',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'TlsFree',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalFindAtomW',
                                                                                            'CompareStringW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FreeResource',
                                                                                            'VirtualProtect',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GlobalAddAtomW',
                                                                                            'ResumeThread',
                                                                                            'SetThreadPriority',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'lstrcmpA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'lstrcmpW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DuplicateHandle',
                                                                                            'GetFileSize',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'ActivateActCtx',
                                                                                            'DeactivateActCtx',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'CopyFileW',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'FormatMessageW',
                                                                                            'MulDiv',
                                                                                            'HeapReAlloc',
                                                                                            'CreateMutexA',
                                                                                            'UnmapViewOfFile',
                                                                                            'LoadLibraryA',
                                                                                            'OpenFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateWaitableTimerA',
                                                                                            'SetWaitableTimer',
                                                                                            'CreateEventA',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetOverlappedResult',
                                                                                            'ReadFile',
                                                                                            'CancelIo',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'ReleaseMutex',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'OpenEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrlenW',
                                                                                            'SetLastError',
                                                                                            'lstrcmpiW',
                                                                                            'GetProcAddress',
                                                                                            'GetExitCodeThread',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLocalTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersion',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'SetMenuDefaultItem',
                                                                                            'CreateMenu',
                                                                                            'IsMenu',
                                                                                            'UpdateLayeredWindow',
                                                                                            'UnionRect',
                                                                                            'MonitorFromPoint',
                                                                                            'TranslateMDISysAccel',
                                                                                            'DrawMenuBar',
                                                                                            'DefMDIChildProcW',
                                                                                            'DefFrameProcW',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'InsertMenuItemW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'LoadImageW',
                                                                                            'GetIconInfo',
                                                                                            'EnableScrollBar',
                                                                                            'HideCaret',
                                                                                            'InvertRect',
                                                                                            'GetMenuDefaultItem',
                                                                                            'LockWindowUpdate',
                                                                                            'BringWindowToTop',
                                                                                            'SetCursorPos',
                                                                                            'SetRect',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyboardLayout',
                                                                                            'ToUnicodeEx',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'DrawFocusRect',
                                                                                            'DrawFrameControl',
                                                                                            'DrawEdge',
                                                                                            'DrawIconEx',
                                                                                            'DrawStateW',
                                                                                            'MessageBeep',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetSystemMenu',
                                                                                            'IntersectRect',
                                                                                            'SetClassLongPtrW',
                                                                                            'NotifyWinEvent',
                                                                                            'WindowFromPoint',
                                                                                            'CreatePopupMenu',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'SetParent',
                                                                                            'SetWindowRgn',
                                                                                            'IsZoomed',
                                                                                            'OffsetRect',
                                                                                            'IsRectEmpty',
                                                                                            'LoadMenuW',
                                                                                            'MapVirtualKeyW',
                                                                                            'GetKeyNameTextW',
                                                                                            'CopyImage',
                                                                                            'DestroyMenu',
                                                                                            'GetMenuItemInfoW',
                                                                                            'InflateRect',
                                                                                            'DestroyIcon',
                                                                                            'IsIconic',
                                                                                            'UnregisterClassW',
                                                                                            'InvalidateRect',
                                                                                            'RealChildWindowFromPoint',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'TabbedTextOutW',
                                                                                            'FillRect',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'EnumDisplayMonitors',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetRectEmpty',
                                                                                            'DeleteMenu',
                                                                                            'LoadCursorW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'CheckDlgButton',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpW',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetTopWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MapWindowPoints',
                                                                                            'ScrollWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'SetMenu',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'GetScrollPos',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowScrollBar',
                                                                                            'RedrawWindow',
                                                                                            'UpdateWindow',
                                                                                            'GetClientRect',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'GetSysColor',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ScreenToClient',
                                                                                            'EqualRect',
                                                                                            'DeferWindowPos',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowPlacement',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'GetMenu',
                                                                                            'SetWindowLongW',
                                                                                            'CopyRect',
                                                                                            'PtInRect',
                                                                                            'GetWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'SetPropW',
                                                                                            'GetCapture',
                                                                                            'SetActiveWindow',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetFocus',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowLongW',
                                                                                            'GetDlgItem',
                                                                                            'IsWindowEnabled',
                                                                                            'WaitMessage',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetCursor',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'LoadBitmapW',
                                                                                            'GetFocus',
                                                                                            'GetParent',
                                                                                            'ModifyMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'FrameRect',
                                                                                            'GetUpdateRect',
                                                                                            'OpenClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'CopyIcon',
                                                                                            'CharUpperBuffW',
                                                                                            'GetDoubleClickTime',
                                                                                            'IsCharLowerW',
                                                                                            'MapVirtualKeyExW',
                                                                                            'SubtractRect',
                                                                                            'DrawIcon',
                                                                                            'DestroyCursor',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'CharUpperW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetMenuState',
                                                                                            'GetMenuStringW',
                                                                                            'AppendMenuW',
                                                                                            'GetMenuItemID',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'GetWindowRgn',
                                                                                            'IsChild',
                                                                                            'RemoveMenu',
                                                                                            'PostMessageW',
                                                                                            'LoadIconW',
                                                                                            'PostThreadMessageW',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'MessageBoxW',
                                                                                            'SetTimer',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'KillTimer',
                                                                                            'LoadStringW',
                                                                                            'GetSysColorBrush',
                                                                                            'CloseClipboard',
                                                                                            'PatBlt',
                                                                                            'CreateDIBSection',
                                                                                            'CreateRoundRectRgn',
                                                                                            'CreatePolygonRgn',
                                                                                            'CombineRgn',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'CreateEllipticRgn',
                                                                                            'Polyline',
                                                                                            'Ellipse',
                                                                                            'Polygon',
                                                                                            'SetRectRgn',
                                                                                            'DPtoLP',
                                                                                            'CreatePalette',
                                                                                            'GetPaletteEntries',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'RealizePalette',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'OffsetRgn',
                                                                                            'GetRgnBox',
                                                                                            'SetDIBColorTable',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'SetPixel',
                                                                                            'CreateHatchBrush',
                                                                                            'LPtoDP',
                                                                                            'GetWindowOrgEx',
                                                                                            'GetViewportOrgEx',
                                                                                            'PtInRegion',
                                                                                            'FillRgn',
                                                                                            'FrameRgn',
                                                                                            'GetBoundsRect',
                                                                                            'ExtFloodFill',
                                                                                            'SetPaletteEntries',
                                                                                            'GetTextFaceW',
                                                                                            'SetPixelV',
                                                                                            'StretchBlt',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetTextAlign',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'GetObjectType',
                                                                                            'SelectPalette',
                                                                                            'DeleteDC',
                                                                                            'ExtSelectClipRgn',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'ExtTextOutW',
                                                                                            'TextOutW',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetPixel',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'CreateRectRgn',
                                                                                            'SelectClipRgn',
                                                                                            'SetLayout',
                                                                                            'SetMapMode',
                                                                                            'SetROP2',
                                                                                            'SetPolyFillMode',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'DeleteObject',
                                                                                            'GetTextCharsetInfo',
                                                                                            'EnumFontFamiliesW',
                                                                                            'GetTextMetricsW',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreatePatternBrush',
                                                                                            'CreateSolidBrush',
                                                                                            'CreatePen',
                                                                                            'GetStockObject',
                                                                                            'CreateDIBitmap',
                                                                                            'GetObjectW',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'CreateBitmap',
                                                                                            'CreateDCW',
                                                                                            'CopyMetaFileW',
                                                                                            'Rectangle',
                                                                                            'GetDeviceCaps',
                                                                                            'IntersectClipRect',
                                                                                            'ExcludeClipRect',
                                                                                            'GetClipBox',
                                                                                            'GetLayout',
                                                                                            'TransparentBlt',
                                                                                            'AlphaBlend',
                                                                                            'GetFileTitleW',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesW',
                                                                                            'OpenPrinterW',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegQueryValueA',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegEnumKeyExA',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'RegDeleteKeyExA',
                                                                                            'EqualPrefixSid',
                                                                                            'RegCreateKeyExA',
                                                                                            'RevertToSelf',
                                                                                            'RegisterEventSourceA',
                                                                                            'ReportEventA',
                                                                                            'SetThreadToken',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupAccountNameW',
                                                                                            'IsValidSid',
                                                                                            'RegCloseKey',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'CreateServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'RegDeleteKeyW',
                                                                                            'OpenThreadToken',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'RegCreateKeyW',
                                                                                            'SHAppBarMessage',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ImageList_GetIconSize',
                                                                                            'PathIsUNCW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathStripToRootW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'DoDragDrop',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleLockRunning',
                                                                                            'IsAccelerator',
                                                                                            'OleTranslateAccelerator',
                                                                                            'OleDestroyMenuDescriptor',
                                                                                            'OleCreateMenuDescriptor',
                                                                                            'CoCreateGuid',
                                                                                            'OleDuplicateData',
                                                                                            'ReleaseStgMedium',
                                                                                            'CoQueryClientBlanket',
                                                                                            'CoInitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromString',
                                                                                            'OleGetClipboard',
                                                                                            'RegisterDragDrop',
                                                                                            'CoLockObjectExternal',
                                                                                            'RevokeDragDrop',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SysStringLen',
                                                                                            'VarBstrFromDate',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'getpeername',
                                                                                            'WSASetLastError',
                                                                                            'connect',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'WSAAsyncSelect',
                                                                                            'recv',
                                                                                            'listen',
                                                                                            'WSAGetLastError',
                                                                                            'setsockopt',
                                                                                            'ntohl',
                                                                                            'shutdown',
                                                                                            'bind',
                                                                                            'select',
                                                                                            'send',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'htonl',
                                                                                            'closesocket',
                                                                                            'WSACleanup',
                                                                                            'ntohs',
                                                                                            'socket',
                                                                                            'inet_addr',
                                                                                            'WSAStartup',
                                                                                            'freeaddrinfo',
                                                                                            'getaddrinfo',
                                                                                            'getnameinfo',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'LresultFromObject',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdipDrawImageI',
                                                                                            'ImmGetOpenStatus',
                                                                                            'ImmReleaseContext',
                                                                                            'ImmGetContext',
                                                                                            'PlaySoundW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 699,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 134496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 33792,
                                                                                       '.pdata\x00\x00': 80384,
                                                                                       '.rdata\x00\x00': 571904,
                                                                                       '.reloc\x00\x00': 79360,
                                                                                       '.rsrc\x00\x00\x00': 134656,
                                                                                       '.text\x00\x00\x00': 1586688,
                                                                                       'data\x00\x00\x00\x00': 2048,
                                                                                       'text\x00\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/36783a5027fd3140b97eae048aedb1d23e7f950a52d730e32d4a086402cd0f16'},
 '367931c915d8e804a0120ec4917c4b4e79b79cffbbb84ef5d14425b80dbc26e0': {'AddressOfEntryPoint': 43672,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 41472,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/367931c915d8e804a0120ec4917c4b4e79b79cffbbb84ef5d14425b80dbc26e0'},
 '3694913609062fd45cce3733eecac8e6cf6b9100164d94218d378916cf86c6ec': {'AddressOfEntryPoint': 21856,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'SHELL32.dll': 'ShellAboutW',
                                                                                      'TAPI32.dll': 'lineGetRequestW',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'LocalAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpW',
                                                                                            'FormatMessageW',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateMutexW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'LPtoDP',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkColor',
                                                                                            'SelectObject',
                                                                                            'GetStockObject',
                                                                                            'SetFocus',
                                                                                            'GetClientRect',
                                                                                            'FindWindowW',
                                                                                            'DrawIcon',
                                                                                            'LoadCursorW',
                                                                                            'GetParent',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'DialogBoxParamW',
                                                                                            'GetFocus',
                                                                                            'SetForegroundWindow',
                                                                                            'DefDlgProcW',
                                                                                            'PostMessageW',
                                                                                            'FillRect',
                                                                                            'IsIconic',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'GetWindowRect',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'DestroyWindow',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetDC',
                                                                                            'LoadAcceleratorsW',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadIconW',
                                                                                            'GetClipboardData',
                                                                                            'SystemParametersInfoW',
                                                                                            'PeekMessageW',
                                                                                            'ReleaseDC',
                                                                                            'EnableMenuItem',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetSysColor',
                                                                                            'SetWindowPos',
                                                                                            'CheckDlgButton',
                                                                                            'LoadStringW',
                                                                                            'ShowWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'CreateDialogParamW',
                                                                                            'GetActiveWindow',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SendMessageW',
                                                                                            'UpdateWindow',
                                                                                            'EnableWindow',
                                                                                            'WinHelpW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcscspn',
                                                                                            'wcsspn',
                                                                                            '_itow',
                                                                                            '_vsnwprintf',
                                                                                            '_wtoi',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'ShellAboutW',
                                                                                            'lineSetAppPriorityW',
                                                                                            'lineShutdown',
                                                                                            'lineDrop',
                                                                                            'lineConfigDialogW',
                                                                                            'lineGetTranslateCapsW',
                                                                                            'lineDeallocateCall',
                                                                                            'lineMakeCallW',
                                                                                            'lineOpenW',
                                                                                            'lineGetAddressCapsW',
                                                                                            'lineGetAppPriorityW',
                                                                                            'lineRegisterRequestRecipient',
                                                                                            'lineTranslateAddressW',
                                                                                            'lineNegotiateAPIVersion',
                                                                                            'lineGetDevCapsW',
                                                                                            'lineTranslateDialogW',
                                                                                            'lineInitializeExW',
                                                                                            'lineClose',
                                                                                            'lineGetRequestW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3694913609062fd45cce3733eecac8e6cf6b9100164d94218d378916cf86c6ec'},
 '36b3b5c705c560ac45e25ec9e06e2fb17df0bd0edbe0ac880bec8cb010d9c2ea': {'AddressOfEntryPoint': 82688,
                                                                      'DebugRVA': 8032,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 475136,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 21315,
                                                                      'ImportedDLL': {'CRYPTSP.dll': 'CryptHashData',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateGuid',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'RaiseFailFastException',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenProcessToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceEnableLevel',
                                                                                      'api-ms-win-eventing-obsolete-l1-1-0.dll': 'RegisterTraceGuidsA',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_snwprintf_s',
                                                                                            '_stricmp',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcscpy_s',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcessToken',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExA',
                                                                                            'GetTickCount',
                                                                                            'RaiseFailFastException',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceMessage',
                                                                                            'GetTraceEnableLevel',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'CoCreateGuid',
                                                                                            'GetTokenInformation',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegisterTraceGuidsA',
                                                                                            'LocalFree',
                                                                                            'CryptExportKey',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptCreateHash',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptGetDefaultProviderW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptSetProvParam',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptGenKey',
                                                                                            'CryptHashData',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 466944},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/36b3b5c705c560ac45e25ec9e06e2fb17df0bd0edbe0ac880bec8cb010d9c2ea'},
 '36e1069708e8160a70c628608bed85d8d45dfcf73d243a6f327ed9984391e88f': {'AddressOfEntryPoint': 365680,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 372736,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'SetFocus',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'msvcrt.dll': '_onexit',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['CommDlgExtendedError',
                                                                                            'GetOpenFileNameW',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'CoCreateInstance',
                                                                                            'OleInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetDlgItem',
                                                                                            'MapDialogRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'MoveWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBoxW',
                                                                                            'EndDialog',
                                                                                            'SetWindowTextW',
                                                                                            'CheckDlgButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetParent',
                                                                                            'InvalidateRect',
                                                                                            'PostMessageW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'SetDlgItemTextW',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SendMessageW',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'IsWindowEnabled',
                                                                                            'GetFocus',
                                                                                            'EnableWindow',
                                                                                            'GetKeyState',
                                                                                            'SetCursor',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'SetFocus',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetFileSecurityW',
                                                                                            'SetFileSecurityW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'memmove',
                                                                                            'strcmp',
                                                                                            '_CxxThrowException',
                                                                                            'wcsstr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'strlen',
                                                                                            '_purecall',
                                                                                            '_isatty',
                                                                                            'wcscmp',
                                                                                            'wcslen',
                                                                                            'wcscat',
                                                                                            '_beginthreadex',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__dllonexit',
                                                                                            '_XcptFilter',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '__CxxFrameHandler',
                                                                                            'memcpy',
                                                                                            '_iob',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_onexit',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetCommandLineW',
                                                                                            'lstrcatW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetPriorityClass',
                                                                                            'Sleep',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'AreFileApisANSI',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetProcessTimes',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetProcessAffinityMask',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingW',
                                                                                            'GetStdHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetSystemInfo',
                                                                                            'lstrlenW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CompareFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'OpenEventW',
                                                                                            'GetFileSize',
                                                                                            'DeviceIoControl',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetLastError',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'MoveFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'RtlCaptureContext',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 185,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 22960,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 31232,
                                                                                       '.rdata\x00\x00': 130560,
                                                                                       '.rsrc\x00\x00\x00': 23040,
                                                                                       '.text\x00\x00\x00': 366080},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/36e1069708e8160a70c628608bed85d8d45dfcf73d243a6f327ed9984391e88f'},
 '3768dbbb83c7ee7d87ec008d271c0d1288273e62191fc87acd6572e8f55c22ed': {'AddressOfEntryPoint': 13680,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CheckTokenMembership',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlFreeSid'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'GetCommandLineW',
                                                                                            'SetLastError',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'SetTermsrvAppInstallMode',
                                                                                            'TermsrvAppInstallMode',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'HeapSetInformation',
                                                                                            'GetFileType',
                                                                                            'Sleep',
                                                                                            'LoadStringW',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlFreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'swprintf_s',
                                                                                            '_wsetlocale',
                                                                                            'memmove',
                                                                                            'wcscpy_s',
                                                                                            'wcschr',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            '_iob',
                                                                                            'wcscat_s',
                                                                                            'wcstoul',
                                                                                            '_wcsnicmp',
                                                                                            'wcstol',
                                                                                            'setlocale',
                                                                                            '_wcslwr',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 11776},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3768dbbb83c7ee7d87ec008d271c0d1288273e62191fc87acd6572e8f55c22ed'},
 '37846104b4c23175c27cfa3e20a7edfcc24902edbcde88dc6d97db6f1e15b398': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/37846104b4c23175c27cfa3e20a7edfcc24902edbcde88dc6d97db6f1e15b398'},
 '37a120563d3d48293c34df4fa4d49d814fe5cd92c325e46bda3027c8a8503241': {'AddressOfEntryPoint': 95312,
                                                                      'DebugRVA': 20288,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 200704,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueW',
                                                                                      'COMCTL32.dll': 'ImageList_LoadImageA',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'CreateFileMappingA',
                                                                                      'USER32.dll': 'GetDlgItemTextA',
                                                                                      'ntdll.dll': 'LdrUnloadDll',
                                                                                      'ole32.dll': 'StringFromCLSID'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileSize',
                                                                                            'GetFileSizeEx',
                                                                                            'ReadFile',
                                                                                            'HeapAlloc',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameA',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FormatMessageA',
                                                                                            'GetModuleHandleA',
                                                                                            'LocalFree',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FlushFileBuffers',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'WriteConsoleW',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'LoadLibraryExA',
                                                                                            'HeapFree',
                                                                                            'CreateFileA',
                                                                                            'GetProcessHeap',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'VirtualAlloc',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'CreateFileMappingA',
                                                                                            'Polyline',
                                                                                            'SetROP2',
                                                                                            'SetBkMode',
                                                                                            'CreateFontA',
                                                                                            'CreatePen',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'GetStockObject',
                                                                                            'SetTextColor',
                                                                                            'CreateSolidBrush',
                                                                                            'TranslateMessage',
                                                                                            'MessageBoxA',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'GetCursorPos',
                                                                                            'DefWindowProcA',
                                                                                            'PostQuitMessage',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CallWindowProcA',
                                                                                            'TrackPopupMenuEx',
                                                                                            'SetMenuItemInfoA',
                                                                                            'DestroyWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'ClientToScreen',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DrawTextW',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'GetSysColor',
                                                                                            'SetRect',
                                                                                            'GetScrollInfo',
                                                                                            'ScrollWindowEx',
                                                                                            'SetCursor',
                                                                                            'SetWindowPos',
                                                                                            'SetScrollInfo',
                                                                                            'InsertMenuItemA',
                                                                                            'CreatePopupMenu',
                                                                                            'EnableMenuItem',
                                                                                            'ScreenToClient',
                                                                                            'DispatchMessageA',
                                                                                            'GetMenu',
                                                                                            'TranslateAcceleratorA',
                                                                                            'GetMessageA',
                                                                                            'LoadAcceleratorsA',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExA',
                                                                                            'RegisterClassExA',
                                                                                            'LoadIconA',
                                                                                            'GetSubMenu',
                                                                                            'LoadMenuA',
                                                                                            'LoadCursorA',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'CreateDialogParamA',
                                                                                            'EndDialog',
                                                                                            'MessageBeep',
                                                                                            'SendDlgItemMessageA',
                                                                                            'LoadStringA',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'GetDlgItemTextA',
                                                                                            'RtlGetVersion',
                                                                                            'LdrGetProcedureAddress',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlUnwind',
                                                                                            'LdrLoadDll',
                                                                                            'LdrUnloadDll',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetSaveFileNameA',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_LoadImageA',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 178,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 15856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 15872,
                                                                                       '.text\x00\x00\x00': 174592},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/37a120563d3d48293c34df4fa4d49d814fe5cd92c325e46bda3027c8a8503241'},
 '38287977c89d179dade5e875cbb601753128ebacd56279e9529697c70080a32c': {'AddressOfEntryPoint': 39196,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 10240,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37376,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/38287977c89d179dade5e875cbb601753128ebacd56279e9529697c70080a32c'},
 '38515483413002d884d7354be2a724117ca9e6b0baecfc9d47292a194996f72b': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 37664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12664,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 32768},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/clean/38515483413002d884d7354be2a724117ca9e6b0baecfc9d47292a194996f72b'},
 '386ca84bad61431c446b34e22b331eeb202b9acbd0465ce804a0de71a0b03112': {'AddressOfEntryPoint': 10416,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'ulib.dll': '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z'},
                                                                      'ImportedFunctions': ['?Stricmp@WSTRING@@QBEJPBV1@@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?DeleteChAt@WSTRING@@QAEXKK@Z',
                                                                                            '?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z',
                                                                                            '?DisplayMsg@MESSAGE@@QAAEKW4MESSAGE_TYPE@@KPBDZZ',
                                                                                            '?Strchr@WSTRING@@QBEKGK@Z',
                                                                                            '?Initialize@LONG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '?Display@MESSAGE@@QAAEPBDZZ',
                                                                                            '?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z',
                                                                                            '??0LONG_ARGUMENT@@QAE@XZ',
                                                                                            '?MakeFileToken@MESSAGE@@SG_KPBD@Z',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0REST_OF_LINE_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@REST_OF_LINE_ARGUMENT@@QAEEXZ',
                                                                                            '??0STREAM_MESSAGE@@QAE@XZ',
                                                                                            '??1STREAM_MESSAGE@@UAE@XZ',
                                                                                            '?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z',
                                                                                            '?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleAliasesW',
                                                                                            'SetConsoleNumberOfCommandsW',
                                                                                            'GetConsoleCommandHistoryW',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleAliasExesLengthW',
                                                                                            'GetConsoleMode',
                                                                                            'ExpungeConsoleCommandHistoryW',
                                                                                            'GetConsoleAliasExesW',
                                                                                            'AddConsoleAliasW',
                                                                                            'GetConsoleCommandHistoryLengthW',
                                                                                            'GetConsoleAliasesLengthW',
                                                                                            'GetCurrentProcess',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 88,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/386ca84bad61431c446b34e22b331eeb202b9acbd0465ce804a0de71a0b03112'},
 '388557172f87d67a033d7b8ea0124246af2e7c041e93fb6cfb35bb9cf733578b': {'AddressOfEntryPoint': 8576,
                                                                      'DebugRVA': 16964,
                                                                      'DebugSize': 56,
                                                                      'Dll': 50496,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'RpcMgmtWaitServerListen',
                                                                                      'api-ms-win-core-crt-l1-1-0.dll': 'memcpy',
                                                                                      'api-ms-win-core-crt-l2-1-0.dll': '__wgetmainargs',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetErrorMode',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'LCMapStringW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'SetProcessAffinityUpdateMode',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryValueExW',
                                                                                      'api-ms-win-core-sidebyside-l1-1-0.dll': 'ReleaseActCtx',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ReleaseSRWLockExclusive',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-threadpool-private-l1-1-0.dll': 'RegisterWaitForSingleObjectEx',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'SetSecurityDescriptorDacl',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'StartServiceCtrlDispatcherW',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'RegisterServiceCtrlHandlerW',
                                                                                      'ntdll.dll': 'RtlSubAuthorityCountSid'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '_initterm_e',
                                                                                            '__wgetmainargs',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'SetProcessAffinityUpdateMode',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetErrorMode',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'AcquireSRWLockShared',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeSRWLock',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'RegDisablePredefinedCacheEx',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'GetCommandLineW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'RpcMgmtStopServerListening',
                                                                                            'I_RpcServerDisableExceptionFilter',
                                                                                            'RpcServerRegisterIf',
                                                                                            'RpcServerUnregisterIfEx',
                                                                                            'RpcServerListen',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcMgmtSetServerStackSize',
                                                                                            'RpcMgmtWaitServerListen',
                                                                                            'HeapSetInformation',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'LCMapStringW',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'AddAccessAllowedAce',
                                                                                            'GetLengthSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetTokenInformation',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpW',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'ActivateActCtx',
                                                                                            'DeactivateActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'ReleaseActCtx',
                                                                                            'RegisterWaitForSingleObjectEx',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'RtlImageNtHeader',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventEnabled',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlFreeHeap',
                                                                                            'EtwEventWrite',
                                                                                            'RtlCopySid',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 24,
                                                                      'NumberOfImportFunctions': 91,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 13312},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/388557172f87d67a033d7b8ea0124246af2e7c041e93fb6cfb35bb9cf733578b'},
 '38de01d5dccfc6380b35df88bba624c15c86f1399562db1e9fe333ff1f734c23': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 284408,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 284672,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/38de01d5dccfc6380b35df88bba624c15c86f1399562db1e9fe333ff1f734c23'},
 '3953bd1e2e229a0d612418469f69c81bfa641534caefdeb61669f0de882722b8': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 296296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 296448,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3953bd1e2e229a0d612418469f69c81bfa641534caefdeb61669f0de882722b8'},
 '39c87d5b63b00d602b647947dea10594fd77ab074c48a890a1b192a8d7498759': {'AddressOfEntryPoint': 14819,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrcpynA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcpynA',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 129168,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 129536,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/39c87d5b63b00d602b647947dea10594fd77ab074c48a890a1b192a8d7498759'},
 '39c901f0272171afdc7f16e27bc33899373a063f9b7b09b4bb1f89a70be056bd': {'AddressOfEntryPoint': 152912,
                                                                      'DebugRVA': 4784,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExW',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'USERENV.dll': 'GetProfileType',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['CLSIDFromString',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'RaiseException',
                                                                                            'HeapValidate',
                                                                                            'GetProcessHeap',
                                                                                            'SetLastError',
                                                                                            'GetProfileSectionA',
                                                                                            'GetProfileSectionW',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateFileA',
                                                                                            'CreateFileW',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetModuleFileNameA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'OutputDebugStringW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'GetVersion',
                                                                                            'MultiByteToWideChar',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'OutputDebugStringA',
                                                                                            'GetFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'DebugBreak',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetStdHandle',
                                                                                            'LoadLibraryExW',
                                                                                            'FormatMessageW',
                                                                                            'FreeLibrary',
                                                                                            'GetLocalTime',
                                                                                            'GetTickCount',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'lstrcpynW',
                                                                                            'OpenMutexW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'LocalFree',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetLastError',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetComputerNameExW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetFilePointer',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'HeapFree',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'HeapSize',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'WriteFile',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedDecrement',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindClose',
                                                                                            'GetLocaleInfoW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'InterlockedIncrement',
                                                                                            'RtlUnwind',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxA',
                                                                                            'MessageBoxW',
                                                                                            'OpenEventLogW',
                                                                                            'ReadEventLogW',
                                                                                            'CloseEventLog',
                                                                                            'LookupAccountSidW',
                                                                                            'GetTokenInformation',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExA',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegEnumKeyExW',
                                                                                            'GetProfileType',
                                                                                            'LsaGetLogonSessionData',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'GetUserNameExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHGetMalloc'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 198144},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/39c901f0272171afdc7f16e27bc33899373a063f9b7b09b4bb1f89a70be056bd'},
 '3a0fc1f0bdb2f8797d37dc8b3815f41007f0a0de1d5a67649f3db33a148e4048': {'AddressOfEntryPoint': 54040,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetLengthSid',
                                                                                      'KERNEL32.dll': 'ReleaseMutex',
                                                                                      'OLEAUT32.dll': 'VariantTimeToSystemTime',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'iesetup.dll': 'IEHardenLMSettings',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetLengthSid',
                                                                                            'OutputDebugStringA',
                                                                                            'DeviceIoControl',
                                                                                            'FlushFileBuffers',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFileSizeEx',
                                                                                            'DeleteFileA',
                                                                                            'DebugBreak',
                                                                                            'DeleteFileW',
                                                                                            'GetVersion',
                                                                                            'HeapDestroy',
                                                                                            'HeapSize',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'IsDebuggerPresent',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'ExitProcess',
                                                                                            'GetTempFileNameW',
                                                                                            'HeapReAlloc',
                                                                                            'GetFileSize',
                                                                                            'TlsGetValue',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'VirtualQuery',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'FormatMessageW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileAttributesW',
                                                                                            'GetTempPathW',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'GetLocalTime',
                                                                                            'CreateFileMappingW',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'LocalFree',
                                                                                            'TlsFree',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'FreeLibrary',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentThread',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'CreateFileMappingA',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'ReleaseMutex',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            'iswctype',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'feof',
                                                                                            '_wtoi',
                                                                                            '_wfopen',
                                                                                            'fgetws',
                                                                                            'swscanf_s',
                                                                                            'wcstok_s',
                                                                                            'fclose',
                                                                                            'towlower',
                                                                                            'free',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'IEHardenLMSettings',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'UnregisterClassA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 134,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10240,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 59904},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/3a0fc1f0bdb2f8797d37dc8b3815f41007f0a0de1d5a67649f3db33a148e4048'},
 '3a26e84b22e7665a55f0857da23a05e3ef3ed430242b6f7635909981cdbeba94': {'AddressOfEntryPoint': 296350,
                                                                      'DebugRVA': 296116,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 11464,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 11776,
                                                                                       '.text\x00\x00\x00': 288256},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3a26e84b22e7665a55f0857da23a05e3ef3ed430242b6f7635909981cdbeba94'},
 '3a8e8f5ce80dcb09c56d68025bf83881187ddb5df27cab96b44686f1879514cc': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 80484,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 80896,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3a8e8f5ce80dcb09c56d68025bf83881187ddb5df27cab96b44686f1879514cc'},
 '3aa7bf50609c661a9d8c81e850e55dc4ffb4f77877d4e69c6f75cc7328c96389': {'AddressOfEntryPoint': 43672,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 25740,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 26112,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 41472,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3aa7bf50609c661a9d8c81e850e55dc4ffb4f77877d4e69c6f75cc7328c96389'},
 '3ab2e5c73f6cce79d4abc021d584442915dd96d7e1aed32ede3b4bfe9b3fd01b': {'AddressOfEntryPoint': 12800,
                                                                      'DebugRVA': 6096,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['FindFirstFileW',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetProcAddress',
                                                                                            'MoveFileW',
                                                                                            'FindClose',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'CreateDirectoryW',
                                                                                            'FindFirstFileExW',
                                                                                            'GetProcessHeap',
                                                                                            'GetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'towupper',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'wcsncmp',
                                                                                            'wcstok_s',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf',
                                                                                            'rand',
                                                                                            'wcsrchr',
                                                                                            'tolower',
                                                                                            'wprintf',
                                                                                            '_wcsnicmp',
                                                                                            'exit',
                                                                                            'memcpy',
                                                                                            'memset'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 61,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 10752},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3ab2e5c73f6cce79d4abc021d584442915dd96d7e1aed32ede3b4bfe9b3fd01b'},
 '3ac80e0562022b833dc9291d1375317fee90b5fef564ce028972b04b50b58c5f': {'AddressOfEntryPoint': 12707,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'ExitProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalUnlock',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 180904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 181248,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3ac80e0562022b833dc9291d1375317fee90b5fef564ce028972b04b50b58c5f'},
 '3af0c080f7eabc7da8a65a695dfb01621cb68cd0a905dd3a33a6af70e4a09b50': {'AddressOfEntryPoint': 51840,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'IMM32.dll': 'ImmAssociateContext',
                                                                                      'KERNEL32.dll': 'GetLocalTime',
                                                                                      'OLEAUT32.dll': 'SafeArrayAccessData',
                                                                                      'SHELL32.dll': 'SHGetKnownFolderIDList',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'bcrypt.dll': 'BCryptGenRandom',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExA',
                                                                                            'CreateWellKnownSid',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'LookupAccountSidW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetEntriesInAclW',
                                                                                            'FreeSid',
                                                                                            'BuildExplicitAccessWithNameW',
                                                                                            'RegOpenKeyExA',
                                                                                            'CreateThread',
                                                                                            'GetFullPathNameW',
                                                                                            'DeleteFileW',
                                                                                            'ExitThread',
                                                                                            'GetVersionExW',
                                                                                            'OutputDebugStringW',
                                                                                            'RaiseException',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTimeFormatW',
                                                                                            'FormatMessageW',
                                                                                            'GetLocaleInfoW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleW',
                                                                                            'GetComputerNameW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CreateMutexW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapSize',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'lstrcmpW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetDriveTypeW',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExA',
                                                                                            'GetDateFormatW',
                                                                                            'GetCommandLineW',
                                                                                            'GetLocalTime',
                                                                                            'EnumWindows',
                                                                                            'LoadIconW',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindowTextW',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'PostMessageW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SendNotifyMessageW',
                                                                                            'SetWindowLongW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'LoadStringW',
                                                                                            'SendMessageW',
                                                                                            'GetParent',
                                                                                            'SetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcstok',
                                                                                            '_vsnwprintf',
                                                                                            'wcstoul',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'memcpy_s',
                                                                                            'memcpy',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'PropertySheetW',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoTaskMemFree',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreate',
                                                                                            'SysStringByteLen',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantInit',
                                                                                            'SafeArrayAccessData',
                                                                                            'GetOpenFileNameW',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetSaveFileNameW',
                                                                                            'SHCreateItemFromIDList',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetKnownFolderIDList',
                                                                                            'GetUserNameExW',
                                                                                            'ImmAssociateContext',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptGenRandom'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 136,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 28568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 51712},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3af0c080f7eabc7da8a65a695dfb01621cb68cd0a905dd3a33a6af70e4a09b50'},
 '3b05ef54e43cbf4e5200647ba733a1f1b1239a56dcf99d03ed6cf16108828d38': {'AddressOfEntryPoint': 12514,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['GetTickCount',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryA',
                                                                                            'lstrlenA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'lstrcpyA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'GetProcAddress',
                                                                                            'GlobalAlloc',
                                                                                            'CompareFileTime',
                                                                                            'SetFileTime',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalFree',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'SetErrorMode',
                                                                                            'GetCommandLineA',
                                                                                            'LoadLibraryExA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'FindClose',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'MulDiv',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FreeLibrary',
                                                                                            'CreateWindowExA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoA',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'wsprintfA',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'LoadImageA',
                                                                                            'SetWindowLongA',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'EndPaint',
                                                                                            'PostQuitMessage',
                                                                                            'FindWindowExA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 157,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 37264,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 37376,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3b05ef54e43cbf4e5200647ba733a1f1b1239a56dcf99d03ed6cf16108828d38'},
 '3b5706b0cf0969a9f82060fd4dcc745f2d83c066b663fe8a4f0f493b64032c9c': {'AddressOfEntryPoint': 5776,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'StartServiceCtrlDispatcherW',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'RegisterServiceCtrlHandlerW',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 35,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/3b5706b0cf0969a9f82060fd4dcc745f2d83c066b663fe8a4f0f493b64032c9c'},
 '3b73639fb7ecb324ce0a87bee012cf4cbe528717c6255eb140b280840fe91b48': {'AddressOfEntryPoint': 302000,
                                                                      'DebugRVA': 3084080,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 3080192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetFileTitleW',
                                                                                      'GDI32.dll': 'GetTextFaceW',
                                                                                      'KERNEL32.dll': 'CreateFileA',
                                                                                      'OLEACC.dll': 'CreateStdAccessibleObject',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'UpdateWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'DocumentPropertiesW',
                                                                                      'gdiplus.dll': 'GdipCreateFromHDC',
                                                                                      'ole32.dll': 'CoTaskMemFree',
                                                                                      'oledlg.dll': 'OleUIBusyW'},
                                                                      'ImportedFunctions': ['GdipBitmapUnlockBits',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipCreateBitmapFromFileICM',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipFillEllipseI',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCreateFromHDC',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetTimeZoneInformation',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'HeapReAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'FindResourceExW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetProcessHeap',
                                                                                            'SearchPathW',
                                                                                            'GetTempPathW',
                                                                                            'lstrcpyW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetProfileIntW',
                                                                                            'WriteProfileStringW',
                                                                                            'GetVersionExW',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrlenW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'MulDiv',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalSize',
                                                                                            'CopyFileW',
                                                                                            'GlobalFree',
                                                                                            'FreeResource',
                                                                                            'GetVersionExA',
                                                                                            'lstrcmpW',
                                                                                            'CompareStringW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalAddAtomW',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'SetErrorMode',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetFileSizeEx',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetFileAttributesExW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetShortPathNameW',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DuplicateHandle',
                                                                                            'GetFileSize',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'lstrcmpiW',
                                                                                            'GetStringTypeExW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetThreadLocale',
                                                                                            'lstrlenA',
                                                                                            'GlobalFlags',
                                                                                            'TlsFree',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'InterlockedIncrement',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFileTime',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThread',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'lstrcmpA',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryExW',
                                                                                            'CompareStringA',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedDecrement',
                                                                                            'ResumeThread',
                                                                                            'SetThreadPriority',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateFileA',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'TranslateMDISysAccel',
                                                                                            'DrawMenuBar',
                                                                                            'DefMDIChildProcW',
                                                                                            'DefFrameProcW',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'DestroyMenu',
                                                                                            'ReleaseCapture',
                                                                                            'LoadAcceleratorsW',
                                                                                            'InsertMenuItemW',
                                                                                            'CreatePopupMenu',
                                                                                            'BringWindowToTop',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'OffsetRect',
                                                                                            'SetCursor',
                                                                                            'IsWindow',
                                                                                            'KillTimer',
                                                                                            'EndPaint',
                                                                                            'IsRectEmpty',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'GrayStringW',
                                                                                            'CharNextW',
                                                                                            'DrawTextW',
                                                                                            'TabbedTextOutW',
                                                                                            'LoadMenuW',
                                                                                            'MapVirtualKeyW',
                                                                                            'GetKeyNameTextW',
                                                                                            'ReleaseDC',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'ModifyMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadIconW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpW',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetClassLongW',
                                                                                            'GetClassNameW',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'SetRect',
                                                                                            'InvalidateRgn',
                                                                                            'SetCapture',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MessageBeep',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'DeleteMenu',
                                                                                            'GetSystemMenu',
                                                                                            'SetParent',
                                                                                            'UnionRect',
                                                                                            'UnregisterClassW',
                                                                                            'BeginPaint',
                                                                                            'PostThreadMessageW',
                                                                                            'SetTimer',
                                                                                            'SetRectEmpty',
                                                                                            'InflateRect',
                                                                                            'LoadBitmapW',
                                                                                            'MessageBoxW',
                                                                                            'GetDC',
                                                                                            'CopyRect',
                                                                                            'RemoveMenu',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuItemID',
                                                                                            'AppendMenuW',
                                                                                            'GetMenuStringW',
                                                                                            'DestroyIcon',
                                                                                            'CharUpperW',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'DrawTextExW',
                                                                                            'GetMenuState',
                                                                                            'EndDialog',
                                                                                            'GetNextDlgTabItem',
                                                                                            'IsWindowEnabled',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'LoadCursorW',
                                                                                            'PostMessageW',
                                                                                            'EnableWindow',
                                                                                            'GetParent',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'MapWindowPoints',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'GetSysColor',
                                                                                            'RedrawWindow',
                                                                                            'RemovePropW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'DispatchMessageW',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetTopWindow',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'PeekMessageW',
                                                                                            'ScrollWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'GetKeyState',
                                                                                            'SetMenu',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollRange',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowScrollBar',
                                                                                            'IsWindowVisible',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ScreenToClient',
                                                                                            'EqualRect',
                                                                                            'DeferWindowPos',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'SetWindowPlacement',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'PtInRect',
                                                                                            'GetMenu',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'IsIconic',
                                                                                            'GetWindowPlacement',
                                                                                            'GetSystemMetrics',
                                                                                            'GetFocus',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'SetActiveWindow',
                                                                                            'GetActiveWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'SetFocus',
                                                                                            'GetWindow',
                                                                                            'SetScrollPos',
                                                                                            'GetScrollPos',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateMenu',
                                                                                            'DrawIcon',
                                                                                            'SendNotifyMessageW',
                                                                                            'GetClipboardData',
                                                                                            'GetWindowRgn',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'DrawFocusRect',
                                                                                            'HideCaret',
                                                                                            'InvertRect',
                                                                                            'EnableScrollBar',
                                                                                            'GetAsyncKeyState',
                                                                                            'SetWindowRgn',
                                                                                            'GetIconInfo',
                                                                                            'CopyImage',
                                                                                            'LoadImageW',
                                                                                            'GetCaretPos',
                                                                                            'DrawIconEx',
                                                                                            'DrawStateW',
                                                                                            'IsZoomed',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'SetClassLongW',
                                                                                            'IsMenu',
                                                                                            'DrawFrameControl',
                                                                                            'DrawEdge',
                                                                                            'FrameRect',
                                                                                            'CharUpperBuffW',
                                                                                            'CopyIcon',
                                                                                            'SetCursorPos',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'GetUpdateRect',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'ToUnicodeEx',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetKeyboardState',
                                                                                            'SetMenuDefaultItem',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetMenuDefaultItem',
                                                                                            'WaitMessage',
                                                                                            'GetDoubleClickTime',
                                                                                            'SubtractRect',
                                                                                            'DestroyCursor',
                                                                                            'EnumChildWindows',
                                                                                            'IsCharLowerW',
                                                                                            'MapVirtualKeyExW',
                                                                                            'UpdateWindow',
                                                                                            'CreateDCW',
                                                                                            'CopyMetaFileW',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteDC',
                                                                                            'CreatePatternBrush',
                                                                                            'SelectObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'Rectangle',
                                                                                            'GetStockObject',
                                                                                            'BitBlt',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetViewportOrgEx',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteObject',
                                                                                            'CreateSolidBrush',
                                                                                            'SetBrushOrgEx',
                                                                                            'CreateRectRgn',
                                                                                            'GetViewportExtEx',
                                                                                            'GetWindowExtEx',
                                                                                            'GetPixel',
                                                                                            'PtVisible',
                                                                                            'SetTextColor',
                                                                                            'TextOutW',
                                                                                            'ExtTextOutW',
                                                                                            'Escape',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'GetDCOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ExtSelectClipRgn',
                                                                                            'SelectPalette',
                                                                                            'GetObjectType',
                                                                                            'CreatePen',
                                                                                            'CreateHatchBrush',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'GetMapMode',
                                                                                            'DPtoLP',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextMetricsW',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'GetRgnBox',
                                                                                            'ScaleViewportExtEx',
                                                                                            'GetClipBox',
                                                                                            'SetBkColor',
                                                                                            'CreateBitmap',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SaveDC',
                                                                                            'RestoreDC',
                                                                                            'SetBkMode',
                                                                                            'SetPolyFillMode',
                                                                                            'SetROP2',
                                                                                            'SetMapMode',
                                                                                            'ExcludeClipRect',
                                                                                            'IntersectClipRect',
                                                                                            'OffsetClipRgn',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'SetTextAlign',
                                                                                            'SelectClipRgn',
                                                                                            'RectVisible',
                                                                                            'PatBlt',
                                                                                            'CreatePolygonRgn',
                                                                                            'EnumFontFamiliesW',
                                                                                            'GetTextCharsetInfo',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateRoundRectRgn',
                                                                                            'SetPixel',
                                                                                            'Polyline',
                                                                                            'Polygon',
                                                                                            'Ellipse',
                                                                                            'CreateEllipticRgn',
                                                                                            'RoundRect',
                                                                                            'CreateDIBSection',
                                                                                            'StretchBlt',
                                                                                            'GetDIBits',
                                                                                            'RealizePalette',
                                                                                            'SetDIBColorTable',
                                                                                            'LPtoDP',
                                                                                            'GetPaletteEntries',
                                                                                            'CreatePalette',
                                                                                            'OffsetRgn',
                                                                                            'FrameRgn',
                                                                                            'FillRgn',
                                                                                            'SetPaletteEntries',
                                                                                            'ExtFloodFill',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'PtInRegion',
                                                                                            'GetBoundsRect',
                                                                                            'SetPixelV',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'GetWindowOrgEx',
                                                                                            'GetTextFaceW',
                                                                                            'GetFileTitleW',
                                                                                            'OpenPrinterW',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesW',
                                                                                            'RegSetValueW',
                                                                                            'RegCreateKeyW',
                                                                                            'GetFileSecurityW',
                                                                                            'SetFileSecurityW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'SHAppBarMessage',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ExtractIconW',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'ShellExecuteW',
                                                                                            'ImageList_GetIconSize',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_DrawEx',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathIsUNCW',
                                                                                            'PathStripToRootW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'OleUIBusyW',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoGetClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoDisconnectObject',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'OleInitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleUninitialize',
                                                                                            'OleDuplicateData',
                                                                                            'CoTaskMemAlloc',
                                                                                            'ReleaseStgMedium',
                                                                                            'OleLockRunning',
                                                                                            'DoDragDrop',
                                                                                            'RegisterDragDrop',
                                                                                            'CoLockObjectExternal',
                                                                                            'RevokeDragDrop',
                                                                                            'OleGetClipboard',
                                                                                            'OleTranslateAccelerator',
                                                                                            'IsAccelerator',
                                                                                            'OleCreateMenuDescriptor',
                                                                                            'OleDestroyMenuDescriptor',
                                                                                            'CoTaskMemFree',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'LoadTypeLib',
                                                                                            'VariantCopy',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayDestroy',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VarBstrFromDate',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'VarBstrCmp',
                                                                                            'VarUdateFromDate',
                                                                                            'VariantClear',
                                                                                            'LresultFromObject',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'PlaySoundW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 620,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 810276,
                                                                      'SectionNames': {'.data\x00\x00\x00': 33280,
                                                                                       '.rdata\x00\x00': 457728,
                                                                                       '.rsrc\x00\x00\x00': 810496,
                                                                                       '.text\x00\x00\x00': 3075072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3b73639fb7ecb324ce0a87bee012cf4cbe528717c6255eb140b280840fe91b48'},
 '3bddf1082465673d656b60bbafd2ef257933eeb976a486eccedab933f9d0d231': {'AddressOfEntryPoint': 5759102,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 9497696,
                                                                      'ExportSize': 1062,
                                                                      'IATRVA': 6713344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'CreateCompatibleBitmap',
                                                                                      'IMM32.dll': 'ImmGetDefaultIMEWnd',
                                                                                      'KERNEL32.dll': 'MultiByteToWideChar',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'OPENGL32.dll': 'glEnable',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjectsEx',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WS2_32.dll': 'select',
                                                                                      'ole32.dll': 'DoDragDrop'},
                                                                      'ImportedFunctions': ['FindCloseChangeNotification',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'FindNextChangeNotification',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'FindResourceW',
                                                                                            'GetLastError',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'FreeResource',
                                                                                            'CreateThread',
                                                                                            'CompareStringW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'DuplicateHandle',
                                                                                            'GetStdHandle',
                                                                                            'SetFilePointer',
                                                                                            'WaitForSingleObject',
                                                                                            'GetConsoleWindow',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetLocalTime',
                                                                                            'GetSystemTime',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetVersionExW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCommandLineW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemInfo',
                                                                                            'SwitchToThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'TlsAlloc',
                                                                                            'TerminateThread',
                                                                                            'TlsGetValue',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ResumeThread',
                                                                                            'GetThreadPriority',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'OutputDebugStringW',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetErrorMode',
                                                                                            'Sleep',
                                                                                            'FindFirstFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileW',
                                                                                            'LoadLibraryW',
                                                                                            'DeviceIoControl',
                                                                                            'GetFullPathNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetLogicalDrives',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetTickCount',
                                                                                            'CancelIo',
                                                                                            'GetModuleHandleA',
                                                                                            'PeekNamedPipe',
                                                                                            'GetOverlappedResult',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileType',
                                                                                            'SetFilePointerEx',
                                                                                            'MoveFileExW',
                                                                                            'SetEndOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrencyFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'VirtualFree',
                                                                                            'ResetEvent',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'CreateSemaphoreW',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileExW',
                                                                                            'GetGeoInfoW',
                                                                                            'GetUserGeoID',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FreeLibrary',
                                                                                            'ExitProcess',
                                                                                            'lstrlenA',
                                                                                            'DisconnectNamedPipe',
                                                                                            'WaitNamedPipeW',
                                                                                            'SetHandleInformation',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetDriveTypeW',
                                                                                            'lstrcmpW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'IsValidLocale',
                                                                                            'IsValidLanguageGroup',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalSize',
                                                                                            'LoadLibraryA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'CheckRemoteDebuggerPresent',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'ExitThread',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetFileAttributesW',
                                                                                            'InterlockedExchange',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetHandleCount',
                                                                                            'SetLastError',
                                                                                            'HeapCreate',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapSize',
                                                                                            'GetCPInfo',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WriteConsoleW',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetStringTypeW',
                                                                                            'CreateFileA',
                                                                                            'GetProcessHeap',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'OpenProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'CreatePipe',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetExitCodeProcess',
                                                                                            'WideCharToMultiByte',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateCaret',
                                                                                            'ChangeClipboardChain',
                                                                                            'SetClipboardViewer',
                                                                                            'DestroyCursor',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetIconInfo',
                                                                                            'LoadCursorW',
                                                                                            'NotifyWinEvent',
                                                                                            'GetMonitorInfoW',
                                                                                            'EnumDisplayMonitors',
                                                                                            'TrackMouseEvent',
                                                                                            'HideCaret',
                                                                                            'GetCursorInfo',
                                                                                            'SetCursorPos',
                                                                                            'CreateIconIndirect',
                                                                                            'CreateCursor',
                                                                                            'GetCursor',
                                                                                            'GetWindowTextW',
                                                                                            'RealGetWindowClassW',
                                                                                            'DestroyCaret',
                                                                                            'IsZoomed',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetCaretPos',
                                                                                            'LoadIconW',
                                                                                            'ToAscii',
                                                                                            'GetMenu',
                                                                                            'PostMessageW',
                                                                                            'DrawIconEx',
                                                                                            'GetDesktopWindow',
                                                                                            'GetKeyboardState',
                                                                                            'GetMessageExtraInfo',
                                                                                            'SetMenuItemInfoW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetKeyState',
                                                                                            'ToUnicode',
                                                                                            'GetClipboardFormatNameW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'IsIconic',
                                                                                            'SetWindowPlacement',
                                                                                            'MoveWindow',
                                                                                            'SetParent',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowLongW',
                                                                                            'RegisterClassW',
                                                                                            'GetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'SetWindowsHookExW',
                                                                                            'GetQueueStatus',
                                                                                            'CallNextHookEx',
                                                                                            'DestroyWindow',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'PeekMessageW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'UnregisterClassW',
                                                                                            'GetUpdateRect',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'SetCapture',
                                                                                            'SetForegroundWindow',
                                                                                            'SetFocus',
                                                                                            'SetWindowTextW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'FlashWindowEx',
                                                                                            'SetCursor',
                                                                                            'ReleaseCapture',
                                                                                            'GetForegroundWindow',
                                                                                            'IsChild',
                                                                                            'IsWindowVisible',
                                                                                            'GetAncestor',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'DestroyIcon',
                                                                                            'GetCapture',
                                                                                            'GetSysColorBrush',
                                                                                            'GetClassInfoW',
                                                                                            'LoadImageW',
                                                                                            'RegisterClassExW',
                                                                                            'ClientToScreen',
                                                                                            'GetCursorPos',
                                                                                            'GetFocus',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'GetParent',
                                                                                            'EnumWindows',
                                                                                            'PostThreadMessageW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'GetClientRect',
                                                                                            'ScreenToClient',
                                                                                            'GetCaretBlinkTime',
                                                                                            'GetDoubleClickTime',
                                                                                            'MessageBeep',
                                                                                            'SetWindowRgn',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSysColor',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'MessageBoxW',
                                                                                            'CharNextExA',
                                                                                            'MapVirtualKeyW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHChangeNotify',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'OleSetClipboard',
                                                                                            'OleGetClipboard',
                                                                                            'ReleaseStgMedium',
                                                                                            'RegisterDragDrop',
                                                                                            'CoLockObjectExternal',
                                                                                            'RevokeDragDrop',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'CoGetMalloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleInitialize',
                                                                                            'CoCreateGuid',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'DoDragDrop',
                                                                                            'FreeSid',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegFlushKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'glClear',
                                                                                            'glBlendFunc',
                                                                                            'glBindTexture',
                                                                                            'glFinish',
                                                                                            'glFlush',
                                                                                            'glFrontFace',
                                                                                            'glGenTextures',
                                                                                            'glGetBooleanv',
                                                                                            'glGetError',
                                                                                            'glGetFloatv',
                                                                                            'glGetIntegerv',
                                                                                            'glGetString',
                                                                                            'glGetTexParameterfv',
                                                                                            'glClearColor',
                                                                                            'glHint',
                                                                                            'glIsEnabled',
                                                                                            'glIsTexture',
                                                                                            'glLineWidth',
                                                                                            'glPixelStorei',
                                                                                            'glPolygonOffset',
                                                                                            'glReadPixels',
                                                                                            'glScissor',
                                                                                            'glStencilFunc',
                                                                                            'glStencilMask',
                                                                                            'glStencilOp',
                                                                                            'glTexImage2D',
                                                                                            'glTexParameterf',
                                                                                            'glTexParameterfv',
                                                                                            'glClearStencil',
                                                                                            'glColorMask',
                                                                                            'glCopyTexImage2D',
                                                                                            'glCopyTexSubImage2D',
                                                                                            'glCullFace',
                                                                                            'glDeleteTextures',
                                                                                            'glDepthFunc',
                                                                                            'glDepthMask',
                                                                                            'glDisable',
                                                                                            'glDrawArrays',
                                                                                            'glDrawElements',
                                                                                            'glGetTexParameteriv',
                                                                                            'glTexParameteri',
                                                                                            'glTexParameteriv',
                                                                                            'glTexSubImage2D',
                                                                                            'glViewport',
                                                                                            'glDepthRange',
                                                                                            'glClearDepth',
                                                                                            'glEnable',
                                                                                            'gethostbyname',
                                                                                            'WSASendTo',
                                                                                            'ntohl',
                                                                                            'bind',
                                                                                            'WSAConnect',
                                                                                            'getsockname',
                                                                                            'getpeername',
                                                                                            'WSAHtons',
                                                                                            'WSAHtonl',
                                                                                            'WSANtohs',
                                                                                            'WSANtohl',
                                                                                            'WSASend',
                                                                                            'closesocket',
                                                                                            'gethostbyaddr',
                                                                                            '__WSAFDIsSet',
                                                                                            'WSARecv',
                                                                                            'WSARecvFrom',
                                                                                            'WSAAccept',
                                                                                            'listen',
                                                                                            'setsockopt',
                                                                                            'WSASocketW',
                                                                                            'WSAIoctl',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            'getsockopt',
                                                                                            'htonl',
                                                                                            'WSAAsyncSelect',
                                                                                            'inet_addr',
                                                                                            'select',
                                                                                            'SelectObject',
                                                                                            'GetRegionData',
                                                                                            'SelectClipRgn',
                                                                                            'BitBlt',
                                                                                            'GetDeviceCaps',
                                                                                            'OffsetRgn',
                                                                                            'SetPixelFormat',
                                                                                            'ChoosePixelFormat',
                                                                                            'SwapBuffers',
                                                                                            'DescribePixelFormat',
                                                                                            'GetDIBits',
                                                                                            'GetPixelFormat',
                                                                                            'GetStockObject',
                                                                                            'GetFontData',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetObjectW',
                                                                                            'RemoveFontMemResourceEx',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'GdiFlush',
                                                                                            'CreateBitmap',
                                                                                            'CreateRectRgn',
                                                                                            'CombineRgn',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'RemoveFontResourceExW',
                                                                                            'GetTextMetricsW',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'AddFontMemResourceEx',
                                                                                            'AddFontResourceExW',
                                                                                            'GetBitmapBits',
                                                                                            'GetTextFaceW',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SetTextAlign',
                                                                                            'ExtTextOutW',
                                                                                            'GetCharABCWidthsW',
                                                                                            'GetCharABCWidthsI',
                                                                                            'GetCharABCWidthsFloatW',
                                                                                            'SetGraphicsMode',
                                                                                            'SetWorldTransform',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetGlyphOutlineW',
                                                                                            'GetOutlineTextMetricsW',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'ImmGetCompositionStringW',
                                                                                            'ImmReleaseContext',
                                                                                            'ImmNotifyIME',
                                                                                            'ImmGetContext',
                                                                                            'ImmAssociateContext',
                                                                                            'ImmSetCandidateWindow',
                                                                                            'ImmSetCompositionWindow',
                                                                                            'ImmGetDefaultIMEWnd',
                                                                                            'PlaySoundW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 484,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 339182024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 67584,
                                                                                       '.qtmetad': 512,
                                                                                       '.rdata\x00\x00': 2785792,
                                                                                       '.reloc\x00\x00': 1119744,
                                                                                       '.rsrc\x00\x00\x00': 339182080,
                                                                                       '.text\x00\x00\x00': 6708736},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3bddf1082465673d656b60bbafd2ef257933eeb976a486eccedab933f9d0d231'},
 '3c677c3b2552414b11013deac07c80c12139f71d66064c8e0a255c92cc625e0c': {'AddressOfEntryPoint': 18736,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'IsTextUnicode',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'SHLWAPI.dll': 'StrStrW',
                                                                                      'USER32.dll': 'OpenClipboard',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'VerSetConditionMask'},
                                                                      'ImportedFunctions': ['IsTextUnicode',
                                                                                            'HeapSetInformation',
                                                                                            'SetLastError',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GetLastError',
                                                                                            'ReadFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'GetConsoleMode',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            'memcpy',
                                                                                            'fflush',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__iob_func',
                                                                                            '_memicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            'fprintf',
                                                                                            'memset',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'EmptyClipboard',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'OpenClipboard',
                                                                                            'WSACleanup',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'StrChrIW',
                                                                                            'StrChrW',
                                                                                            'StrStrIW',
                                                                                            'StrStrW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 16384},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3c677c3b2552414b11013deac07c80c12139f71d66064c8e0a255c92cc625e0c'},
 '3c6a9a4adc6bd75027924997abddc1b26f859675cf6f4e5f996b645e0f53d7d0': {'AddressOfEntryPoint': 4986,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2652,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/3c6a9a4adc6bd75027924997abddc1b26f859675cf6f4e5f996b645e0f53d7d0'},
 '3cdfd58346f9f1116ed6716c40d69aa19c8bf04225496a2e60d62a425df57198': {'AddressOfEntryPoint': 35575,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'IsBadReadPtr',
                                                                                      'LZ32.dll': 'LZClose',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'PeekMessageA'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'FormatMessageA',
                                                                                            'DeleteFileA',
                                                                                            'MulDiv',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'WaitForSingleObject',
                                                                                            'CompareStringA',
                                                                                            'Sleep',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindNextFileA',
                                                                                            'WritePrivateProfileSectionA',
                                                                                            'GetStartupInfoA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFileAttributesA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'SizeofResource',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpiA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'lstrcpynA',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'FindClose',
                                                                                            'GetLastError',
                                                                                            'FindFirstFileA',
                                                                                            'lstrlenA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'lstrcpyA',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'LoadLibraryA',
                                                                                            'MoveFileExA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetShortPathNameA',
                                                                                            'FlushFileBuffers',
                                                                                            'IsBadCodePtr',
                                                                                            'CloseHandle',
                                                                                            'SetStdHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'IsBadWritePtr',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetVersionExA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetVersion',
                                                                                            'GetCommandLineA',
                                                                                            'RtlUnwind',
                                                                                            'IsBadReadPtr',
                                                                                            'SetFocus',
                                                                                            'PostMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetParent',
                                                                                            'GetDC',
                                                                                            'LoadImageA',
                                                                                            'MessageBoxA',
                                                                                            'wsprintfA',
                                                                                            'CheckRadioButton',
                                                                                            'EnableWindow',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetDlgItemTextA',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextA',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowTextA',
                                                                                            'CharNextA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowTextA',
                                                                                            'GetWindow',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'FillRect',
                                                                                            'BeginPaint',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'GetClientRect',
                                                                                            'ScreenToClient',
                                                                                            'MoveWindow',
                                                                                            'SetParent',
                                                                                            'MapDialogRect',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetWindowRect',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'IsWindow',
                                                                                            'InvalidateRect',
                                                                                            'IsWindowEnabled',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'IsDialogMessageA',
                                                                                            'SetWindowPos',
                                                                                            'GetActiveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'SetWindowLongA',
                                                                                            'LoadStringA',
                                                                                            'LoadIconA',
                                                                                            'DispatchMessageA',
                                                                                            'SendMessageA',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageA',
                                                                                            'CreateFontIndirectA',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'CreatePalette',
                                                                                            'GetObjectA',
                                                                                            'GetStockObject',
                                                                                            'CreateDIBitmap',
                                                                                            'GetTextExtentPointA',
                                                                                            'SelectObject',
                                                                                            'EnumFontFamiliesExA',
                                                                                            'DeleteDC',
                                                                                            'BitBlt',
                                                                                            'TextOutA',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetMalloc',
                                                                                            'LZOpenFileA',
                                                                                            'LZCopy',
                                                                                            'LZClose'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 185,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 183532,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16384,
                                                                                       '.rdata\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 184320,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3cdfd58346f9f1116ed6716c40d69aa19c8bf04225496a2e60d62a425df57198'},
 '3cefaa966d5e204fe6601160e7ba4d27910437bd1e83b8e0e9f2c4c3de210227': {'AddressOfEntryPoint': 16302,
                                                                      'DebugRVA': 16068,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4872,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3cefaa966d5e204fe6601160e7ba4d27910437bd1e83b8e0e9f2c4c3de210227'},
 '3d0689d906f39cfe1ecb872685fe5db9a151af0db6114f925195da25880b1242': {'AddressOfEntryPoint': 17216,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'UnregisterTraceGuids',
                                                                                      'KERNEL32.dll': 'RegCloseKey',
                                                                                      'faultrep.dll': 'WerpInitiateCrashReporting',
                                                                                      'msvcrt.dll': '__p__commode',
                                                                                      'ntdll.dll': 'EtwTraceMessage',
                                                                                      'wer.dll': 'MmsFree'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'SetEvent',
                                                                                            'GetProcessId',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'WaitForThreadpoolWaitCallbacks',
                                                                                            'CloseThreadpoolWait',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetThreadpoolWait',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'CreateThreadpoolWait',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'OpenProcess',
                                                                                            'K32GetModuleFileNameExW',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'OpenThread',
                                                                                            'GetThreadContext',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Thread32First',
                                                                                            'Thread32Next',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'WaitForSingleObject',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CompareStringW',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapSetInformation',
                                                                                            'SetErrorMode',
                                                                                            'GetLastError',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetModuleHandleA',
                                                                                            'RegQueryValueExW',
                                                                                            'IsDebuggerPresent',
                                                                                            'DebugBreak',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            '_XcptFilter',
                                                                                            '_wtoi',
                                                                                            '_wtoi64',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcscat_s',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'DbgPrint',
                                                                                            'RtlCompareMemory',
                                                                                            'ShipAssert',
                                                                                            'DbgPrintEx',
                                                                                            'NtQueryInformationProcess',
                                                                                            'EtwTraceMessage',
                                                                                            'WerpInitiateCrashReporting',
                                                                                            'FwsWrap',
                                                                                            'MmsGetSize',
                                                                                            'MmsCreate',
                                                                                            'MmsFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 93,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 16384},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3d0689d906f39cfe1ecb872685fe5db9a151af0db6114f925195da25880b1242'},
 '3d79b80cc025550b7010cd3fe4b566f14f70b2fedf9dbe0b557373e1c6276f43': {'AddressOfEntryPoint': 6637934,
                                                                      'DebugRVA': 6637716,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1560,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 6629888},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3d79b80cc025550b7010cd3fe4b566f14f70b2fedf9dbe0b557373e1c6276f43'},
 '3d821bafa1c5097fbcf652a79baca75a87d7ba6843fba06c7e7ebcf46d570095': {'AddressOfEntryPoint': 98112,
                                                                      'DebugRVA': 4960,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 107712,
                                                                      'ExportSize': 8297,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LsaOpenPolicy',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'Secur32.dll': 'LsaFreeReturnBuffer',
                                                                                      'USER32.dll': 'LoadStringA',
                                                                                      'USERENV.dll': 'UnloadUserProfile',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'nativerd.dll': 'InitializeNativeConfiguration',
                                                                                      'ntdll.dll': 'RtlLengthRequiredSid'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegCreateKeyExW',
                                                                                            'IsValidSid',
                                                                                            'LookupAccountSidW',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'RegGetKeySecurity',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegSetKeySecurity',
                                                                                            'GetFileSecurityW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'EqualSid',
                                                                                            'DeleteAce',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'SetEntriesInAclW',
                                                                                            'LogonUserExW',
                                                                                            'LsaAddAccountRights',
                                                                                            'LsaNtStatusToWinError',
                                                                                            'LsaManageSidNameMapping',
                                                                                            'LsaClose',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaOpenPolicy',
                                                                                            'GlobalFree',
                                                                                            'GetLocalTime',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'WideCharToMultiByte',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FormatMessageA',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'SetLastError',
                                                                                            'GetStdHandle',
                                                                                            'GlobalAlloc',
                                                                                            'LocalAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcmpW',
                                                                                            'FindFirstFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'LocalFree',
                                                                                            'GetFileAttributesW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'OutputDebugStringA',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_callnewh',
                                                                                            'wcschr',
                                                                                            '_wcslwr',
                                                                                            'memcpy',
                                                                                            'wprintf',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'swscanf',
                                                                                            '_cexit',
                                                                                            'malloc',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'strcpy_s',
                                                                                            'sprintf_s',
                                                                                            'strcat_s',
                                                                                            'strnlen',
                                                                                            '_vsnwprintf_s',
                                                                                            'wcsnlen',
                                                                                            'iswxdigit',
                                                                                            'memmove',
                                                                                            'iswalnum',
                                                                                            '_vscwprintf',
                                                                                            '_stricmp',
                                                                                            'strchr',
                                                                                            'isxdigit',
                                                                                            '_vsnprintf',
                                                                                            '_wcslwr_s',
                                                                                            '_exit',
                                                                                            'free',
                                                                                            '_wcsnicmp',
                                                                                            '__p__fmode',
                                                                                            'towlower',
                                                                                            'memset',
                                                                                            'TerminateNativeConfiguration',
                                                                                            'CreateNativeConfigurationSystem',
                                                                                            'InitializeNativeConfiguration',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'LoadStringA',
                                                                                            'LoadUserProfileW',
                                                                                            'UnloadUserProfile',
                                                                                            'LsaFreeReturnBuffer'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 140,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 112128},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3d821bafa1c5097fbcf652a79baca75a87d7ba6843fba06c7e7ebcf46d570095'},
 '3d9e7de6c7c3736a3038541fb5d0917d6ba5d1f2cc4596c406689dfee3d03716': {'AddressOfEntryPoint': 39196,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 10240,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37376,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3d9e7de6c7c3736a3038541fb5d0917d6ba5d1f2cc4596c406689dfee3d03716'},
 '3db92c5315e5c60a968f9f5b4e2ca8a5051d981364e82328df2949e9cffb393c': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 120696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 120832,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3db92c5315e5c60a968f9f5b4e2ca8a5051d981364e82328df2949e9cffb393c'},
 '3dc6eb43d4026447d8d3e3a1116d72bc5750074bbe0071ec27c39e5285d4a228': {'AddressOfEntryPoint': 12586,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetTickCount',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'Sleep',
                                                                                            'lstrcmpiA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GlobalFree',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalAlloc',
                                                                                            'lstrlenA',
                                                                                            'GetCommandLineA',
                                                                                            'GetProcAddress',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeLibrary',
                                                                                            'SetCursor',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowLongA',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'SetTimer',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowLongA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'LoadImageA',
                                                                                            'wsprintfA',
                                                                                            'GetDlgItem',
                                                                                            'FindWindowExA',
                                                                                            'IsWindow',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'EndPaint',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHFileOperationA',
                                                                                            'ShellExecuteA',
                                                                                            'RegDeleteValueA',
                                                                                            'SetFileSecurityA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 16880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 16896,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3dc6eb43d4026447d8d3e3a1116d72bc5750074bbe0071ec27c39e5285d4a228'},
 '3de978b005bf2e88ba858ce37d9e27bd3584642b8412e22c300a1e739743838a': {'AddressOfEntryPoint': 11289,
                                                                      'DebugRVA': 4128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'NdrServerCall2',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-threadpool-l1-2-0.dll': 'CreateThreadpoolWork',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'StartServiceCtrlDispatcherW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlAcquireSRWLockExclusive'},
                                                                      'ImportedFunctions': ['_wcsicmp',
                                                                                            '_amsg_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__wgetmainargs',
                                                                                            '__p__commode',
                                                                                            'memcpy',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '__set_app_type',
                                                                                            '_except_handler4_common',
                                                                                            'memset',
                                                                                            'RtlExpandEnvironmentStrings',
                                                                                            'NtClose',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtOpenThreadToken',
                                                                                            'EtwEventWrite',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwEventRegister',
                                                                                            'RtlReleaseSRWLockShared',
                                                                                            'RtlAcquireSRWLockShared',
                                                                                            'RtlReleaseSRWLockExclusive',
                                                                                            'RtlAcquireSRWLockExclusive',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcEpUnregister',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcBindingInqAuthClientW',
                                                                                            'RpcImpersonateClient',
                                                                                            'NdrServerCall2',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'InitializeSRWLock',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CloseThreadpoolWork',
                                                                                            'SubmitThreadpoolWork',
                                                                                            'CreateThreadpoolWork',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3de978b005bf2e88ba858ce37d9e27bd3584642b8412e22c300a1e739743838a'},
 '3df31cd4267ded90794e6a5e0bbff97e74c2c3e6a051e7024c97a5c1960f4cc9': {'AddressOfEntryPoint': 113104,
                                                                      'DebugRVA': 4768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegGetValueW',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'MsCtfMonitor.DLL': 'InitLocalMsCtfMonitor',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'PROPSYS.dll': 'PSCreateMemoryPropertyStore',
                                                                                      'SHELL32.dll': 'SHGetFolderPathEx',
                                                                                      'SHLWAPI.dll': 'SHStrDupW',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'msvcrt.dll': '_onexit',
                                                                                      'ntdll.dll': 'WinSqmSetDWORD',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'EventWrite',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatus',
                                                                                            'StartServiceW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'QueryServiceStatusEx',
                                                                                            'RegGetValueW',
                                                                                            'DuplicateHandle',
                                                                                            'GetLastError',
                                                                                            'OpenMutexW',
                                                                                            'CloseHandle',
                                                                                            'CreateMutexW',
                                                                                            'HeapSetInformation',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'FreeLibrary',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'SetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'OpenEventW',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFileAttributesW',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CompareStringOrdinal',
                                                                                            'GetSystemTime',
                                                                                            'GetThreadUILanguage',
                                                                                            'RaiseException',
                                                                                            'CreateEventW',
                                                                                            'GetUserGeoID',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleExW',
                                                                                            'HeapFree',
                                                                                            'wcsrchr',
                                                                                            '_wcsnicmp',
                                                                                            'memmove',
                                                                                            'strtok_s',
                                                                                            '_purecall',
                                                                                            '_wtol',
                                                                                            '_vsnprintf',
                                                                                            'free',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '__setusermatherr',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'strchr',
                                                                                            'wcschr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_acmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoTaskMemRealloc',
                                                                                            'PropVariantClear',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoGetApartmentType',
                                                                                            'CoTaskMemFree',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromCLSID',
                                                                                            'CoGetMalloc',
                                                                                            'CoCreateInstance',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmEndSession',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'WinSqmSetDWORD',
                                                                                            'PropVariantToUInt32',
                                                                                            'PropVariantToBoolean',
                                                                                            'PSCreateMemoryPropertyStore',
                                                                                            'UninitLocalMsCtfMonitor',
                                                                                            'InitLocalMsCtfMonitor',
                                                                                            'PostQuitMessage',
                                                                                            'LoadCursorW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'DefWindowProcW',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'DispatchMessageW',
                                                                                            'PostMessageW',
                                                                                            'SetCursor',
                                                                                            'DestroyWindow',
                                                                                            'IsHungAppWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'PathAppendW',
                                                                                            'SHEnumKeyExW',
                                                                                            'StrCmpIW',
                                                                                            'StrStrW',
                                                                                            'SHStrDupW',
                                                                                            'SHGetFolderPathEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 157,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4584,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 119296},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/3df31cd4267ded90794e6a5e0bbff97e74c2c3e6a051e7024c97a5c1960f4cc9'},
 '3dfa41f89abfeb121bf98d70a94c4c7f01960e8d48195ae82c7045dab46f7366': {'AddressOfEntryPoint': 242352,
                                                                      'DebugRVA': 5888,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 368640,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ESENT.dll': 'JetSetSystemParameterW',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetTimeFormatW',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'DebugBreak',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetDiskFreeSpaceExW',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapFree',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'GetQueuedCompletionStatus',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetSystemPowerStatus',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'MapViewOfFileEx',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-processtopology-obsolete-l1-1-0.dll': 'GetProcessAffinityMask',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ReleaseSemaphore',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'DeleteTimerQueueEx',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['atol',
                                                                                            'vprintf',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'iswalpha',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'wcsrchr',
                                                                                            '_mbspbrk',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_snwscanf_s',
                                                                                            '_getch',
                                                                                            'wcscpy_s',
                                                                                            '_wtol',
                                                                                            'wcscat_s',
                                                                                            '_wfullpath',
                                                                                            'swscanf_s',
                                                                                            '_purecall',
                                                                                            '_vsnwprintf',
                                                                                            '_wmakepath_s',
                                                                                            '_wcsupr_s',
                                                                                            'wcstol',
                                                                                            '_wsplitpath_s',
                                                                                            'swprintf_s',
                                                                                            'printf',
                                                                                            'wprintf',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_amsg_exit',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_exit',
                                                                                            'iswascii',
                                                                                            'fwprintf',
                                                                                            '_iob',
                                                                                            'isprint',
                                                                                            '_vsnprintf',
                                                                                            'strcspn',
                                                                                            'strtoul',
                                                                                            'strrchr',
                                                                                            'memset',
                                                                                            'JetGetSystemParameterW',
                                                                                            'JetBeginSessionW',
                                                                                            'JetEndSession',
                                                                                            'JetDetachDatabaseW',
                                                                                            'JetTerm2',
                                                                                            'JetGetDatabaseFileInfoW',
                                                                                            'JetRestore2W',
                                                                                            'JetCompactW',
                                                                                            'JetInit4W',
                                                                                            'JetGetLogFileInfoW',
                                                                                            'JetInit',
                                                                                            'JetDBUtilitiesW',
                                                                                            'JetSetSystemParameterW',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetFileValidData',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'GetVolumePathNameW',
                                                                                            'FindClose',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'GetFileSizeEx',
                                                                                            'CreateFileW',
                                                                                            'GetDriveTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'WriteFileGather',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFileScatter',
                                                                                            'SetEndOfFile',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'CopyFileExW',
                                                                                            'MoveFileExW',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetOverlappedResult',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'DeviceIoControl',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetLocalTime',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetHandleInformation',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'SetThreadPriority',
                                                                                            'CreateThread',
                                                                                            'ResumeThread',
                                                                                            'TlsGetValue',
                                                                                            'SetThreadPriorityBoost',
                                                                                            'TlsSetValue',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetExitCodeThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventA',
                                                                                            'CreateEventW',
                                                                                            'SleepEx',
                                                                                            'Sleep',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualQueryEx',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'CreateFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFileEx',
                                                                                            'LCMapStringW',
                                                                                            'FormatMessageW',
                                                                                            'OutputDebugStringA',
                                                                                            'DebugBreak',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetProcessAffinityMask',
                                                                                            'GetSystemPowerStatus',
                                                                                            'DeleteTimerQueueEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 179,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 243200},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3dfa41f89abfeb121bf98d70a94c4c7f01960e8d48195ae82c7045dab46f7366'},
 '3e0f073af5d60118cb2904686c08e90440967519ba60c21ad6b518290815eb84': {'AddressOfEntryPoint': 117949,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 163840,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'TlsAlloc',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryA',
                                                                                            'AreFileApisANSI',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'FormatMessageW',
                                                                                            'SetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetTempPathA',
                                                                                            'GetTempPathW',
                                                                                            'GetFullPathNameW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileA',
                                                                                            'FindNextFileW',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'ReadFile',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileW',
                                                                                            'CreateEventA',
                                                                                            'GetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetUserDefaultLangID',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetVersionExA',
                                                                                            'Sleep',
                                                                                            'SetLastError',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'Process32Next',
                                                                                            'OpenProcess',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'GetCommandLineW',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'HeapCreate',
                                                                                            'HeapReAlloc',
                                                                                            'InterlockedDecrement',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedIncrement',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'CharLowerA',
                                                                                            'CharUpperA',
                                                                                            'DestroyWindow',
                                                                                            'PostMessageA',
                                                                                            'ShowWindow',
                                                                                            'EndDialog',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'SendMessageA',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxW',
                                                                                            'DialogBoxParamW',
                                                                                            'DialogBoxParamA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowTextA',
                                                                                            'GetWindowTextA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'LoadStringW',
                                                                                            'LoadStringA',
                                                                                            'CharLowerW',
                                                                                            'CharUpperW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHCreateDirectoryExA',
                                                                                            'ShellExecuteExA',
                                                                                            'SHBrowseForFolderW',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'SysAllocString',
                                                                                            'VariantClear'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 73320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 33792,
                                                                                       '.rsrc\x00\x00\x00': 73728,
                                                                                       '.text\x00\x00\x00': 156672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3e0f073af5d60118cb2904686c08e90440967519ba60c21ad6b518290815eb84'},
 '3e364e1aef8caee5d643f3d258232b403c52a5a4945f2b000c2ab47a1a39876a': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 410496,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 410624,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3e364e1aef8caee5d643f3d258232b403c52a5a4945f2b000c2ab47a1a39876a'},
 '3e808c7d0d1728d81d1754e068dfbbfc76d162a404d3820080bcf86d597d22ba': {'AddressOfEntryPoint': 10192,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'KERNEL32.dll': 'HeapAlloc',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '__wgetmainargs',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['SetThreadPreferredUILanguages',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'GetFileType',
                                                                                            'LocalAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'GetProcessHeap',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'GetVersionExW',
                                                                                            'HeapAlloc',
                                                                                            '__C_specific_handler',
                                                                                            '_wcsicmp',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegSetValueExW',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/3e808c7d0d1728d81d1754e068dfbbfc76d162a404d3820080bcf86d597d22ba'},
 '3e875f1dbb8251d0e8b95c4bbad89ac1626f0a59042a5d18f281d6eecd0648fb': {'AddressOfEntryPoint': 130992,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSVCRT.dll': 'free',
                                                                                      'OLEAUT32.dll': 'OleLoadPicture',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'DeleteDC',
                                                                                            'free',
                                                                                            'CoInitialize',
                                                                                            'OleLoadPicture',
                                                                                            'SHGetMalloc',
                                                                                            'GetDC'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 12,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 15352,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 15872,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 45568},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3e875f1dbb8251d0e8b95c4bbad89ac1626f0a59042a5d18f281d6eecd0648fb'},
 '3e9efaaa73476bb719630664c6ab041c2624e3c11e18fb50d6a3450d774153ef': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 58360,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 58368,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3e9efaaa73476bb719630664c6ab041c2624e3c11e18fb50d6a3450d774153ef'},
 '3ed9c592c8058fb68ee5939af579b7aeb0bcf2510cb3e724b23f31fecbfab04f': {'AddressOfEntryPoint': 16176,
                                                                      'DebugRVA': 4272,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49600,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegGetValueW',
                                                                                      'KERNEL32.dll': 'DebugBreak',
                                                                                      'USER32.dll': 'GetProcessWindowStation',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlDeleteBoundaryDescriptor',
                                                                                      'wer.dll': 'WerpEnumerateStoreNext'},
                                                                      'ImportedFunctions': ['malloc',
                                                                                            'free',
                                                                                            'wcsncmp',
                                                                                            'realloc',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wcsicmp',
                                                                                            '_wtoi',
                                                                                            '_wtoi64',
                                                                                            '_vsnwprintf',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'MapViewOfFile',
                                                                                            'SetEvent',
                                                                                            'UnmapViewOfFile',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineW',
                                                                                            'GlobalFree',
                                                                                            'GetApplicationRecoveryCallback',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrlenW',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'WaitForMultipleObjects',
                                                                                            'DuplicateHandle',
                                                                                            'ClosePrivateNamespace',
                                                                                            'OpenFileMappingW',
                                                                                            'HeapFree',
                                                                                            'OpenPrivateNamespaceW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetLastError',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'IsWow64Process',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'OpenProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'CreateEventW',
                                                                                            'CreateFileMappingW',
                                                                                            'OpenMutexW',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'ReadProcessMemory',
                                                                                            'IsDebuggerPresent',
                                                                                            'DebugBreak',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'DbgPrintEx',
                                                                                            'NtClose',
                                                                                            'RtlFreeSid',
                                                                                            'NtAlpcSendWaitReceivePort',
                                                                                            'NtAlpcConnectPort',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtOpenEvent',
                                                                                            'NtQuerySystemInformation',
                                                                                            'EtwEventWriteNoRegistration',
                                                                                            'ZwUpdateWnfStateData',
                                                                                            'ZwQueryWnfStateNameInformation',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlCreateBoundaryDescriptor',
                                                                                            'RtlCreateServiceSid',
                                                                                            'RtlAddSIDToBoundaryDescriptor',
                                                                                            'RtlDeleteBoundaryDescriptor',
                                                                                            'WerpIsTransportAvailable',
                                                                                            'WerpOpenMachineQueue',
                                                                                            'WerpSubmitReportFromStore',
                                                                                            'WerpCloseStore',
                                                                                            'WerpLaunchResponse',
                                                                                            'WerpOpenUserQueue',
                                                                                            'WerpCreateUserStore',
                                                                                            'WerpOpenUserArchive',
                                                                                            'WerpPruneStore',
                                                                                            'WerReportCloseHandle',
                                                                                            'WerpLoadReportFromBuffer',
                                                                                            'WerpGetReportSettings',
                                                                                            'WerpGetReportType',
                                                                                            'WerpGetReportInformation',
                                                                                            'WerpSetReportInformation',
                                                                                            'WerpSetCallBack',
                                                                                            'WerReportSubmit',
                                                                                            'WerReportAddDump',
                                                                                            'WerpEnumerateStoreStart',
                                                                                            'WerpEnumerateStoreNext',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetThreadDesktop',
                                                                                            'GetProcessWindowStation'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 138,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 80424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 80896,
                                                                                       '.text\x00\x00\x00': 35840},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3ed9c592c8058fb68ee5939af579b7aeb0bcf2510cb3e724b23f31fecbfab04f'},
 '3edff1058b2134342da0c161c739d8f4665883dc3407434b46ca966982922f74': {'AddressOfEntryPoint': 31899,
                                                                      'DebugRVA': 4128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGetHashParam',
                                                                                      'KERNEL32.dll': 'lstrcmpA',
                                                                                      'NETAPI32.dll': 'DsGetDcNameA',
                                                                                      'NTDSAPI.dll': 'DsFreeNameResultA',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WSOCK32.dll': 'ntohl',
                                                                                      'cryptdll.dll': 'CDLocateCSystem',
                                                                                      'msvcrt.dll': '_iob',
                                                                                      'ntdll.dll': 'RtlDowncaseUnicodeChar'},
                                                                      'ImportedFunctions': ['LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'lstrcmpiA',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetStdHandle',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'lstrcmpA',
                                                                                            'sprintf_s',
                                                                                            'free',
                                                                                            'calloc',
                                                                                            'malloc',
                                                                                            'strtoul',
                                                                                            'printf',
                                                                                            '_vsnwprintf',
                                                                                            '_strdup',
                                                                                            'strchr',
                                                                                            'fgets',
                                                                                            'swprintf_s',
                                                                                            '_wcsnicmp',
                                                                                            '_strnicmp',
                                                                                            '_snprintf_s',
                                                                                            'memset',
                                                                                            '_snwprintf_s',
                                                                                            'fwprintf',
                                                                                            '_wsetlocale',
                                                                                            'getchar',
                                                                                            'strtol',
                                                                                            'getenv',
                                                                                            'isxdigit',
                                                                                            'isspace',
                                                                                            'memcpy',
                                                                                            'fprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            'time',
                                                                                            '_iob',
                                                                                            'ntohs',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'ntohl',
                                                                                            'LoadStringA',
                                                                                            'LoadStringW',
                                                                                            'CDLocateCSystem',
                                                                                            'RtlUniform',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlDowncaseUnicodeString',
                                                                                            'RtlDowncaseUnicodeChar',
                                                                                            'NetUserSetInfo',
                                                                                            'NetUserGetInfo',
                                                                                            'NetApiBufferFree',
                                                                                            'DsGetDcNameA',
                                                                                            'DsBindA',
                                                                                            'DsCrackNamesA',
                                                                                            'DsUnBindA',
                                                                                            'DsFreeNameResultA',
                                                                                            'CryptHashData',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptCreateHash',
                                                                                            'CryptGetHashParam'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 29696},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3edff1058b2134342da0c161c739d8f4665883dc3407434b46ca966982922f74'},
 '3f14b8e521bce17f8499c6ebaef4ed0ad851fa84736c0aefe3b92e2622b58452': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3f14b8e521bce17f8499c6ebaef4ed0ad851fa84736c0aefe3b92e2622b58452'},
 '3f1bfc4be00fa0c07778a986e81bf21453ba45f76fecd261d7e88e7db76a15a1': {'AddressOfEntryPoint': 51650,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'lstrcmpW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'FindWindowW',
                                                                                      'msvcrt.dll': '_wfopen'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'SetErrorMode',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeThread',
                                                                                            'lstrcatA',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'lstrcmpA',
                                                                                            'UnlockFile',
                                                                                            'SetFilePointer',
                                                                                            'LockFile',
                                                                                            'CreateFileW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetLocalTime',
                                                                                            'SetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentThreadId',
                                                                                            'WriteFile',
                                                                                            'FormatMessageA',
                                                                                            'EnterCriticalSection',
                                                                                            'GetStdHandle',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetExitCodeProcess',
                                                                                            'ReadFile',
                                                                                            'SetHandleInformation',
                                                                                            'CreatePipe',
                                                                                            'FreeLibrary',
                                                                                            'DuplicateHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetStdHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetProcessHeap',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCurrentProcessId',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GenerateConsoleCtrlEvent',
                                                                                            'DeleteFileW',
                                                                                            'AllocConsole',
                                                                                            'GetConsoleWindow',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'AttachConsole',
                                                                                            'ExitProcess',
                                                                                            'VirtualFree',
                                                                                            'GlobalFree',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'HeapCreate',
                                                                                            'GetCommandLineW',
                                                                                            'HeapDestroy',
                                                                                            'ResumeThread',
                                                                                            'CreateEventW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'lstrlenA',
                                                                                            'lstrcpyA',
                                                                                            'SetEvent',
                                                                                            'TerminateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'ResetEvent',
                                                                                            'SwitchToThread',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'ExitThread',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrcpyW',
                                                                                            'lstrcatW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetLastError',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'TerminateProcess',
                                                                                            'lstrcmpW',
                                                                                            'QueryServiceConfigW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'SetServiceStatus',
                                                                                            'DeleteService',
                                                                                            'CreateServiceW',
                                                                                            'StartServiceW',
                                                                                            'EnumDependentServicesW',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatusEx',
                                                                                            'ChangeServiceConfigW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'RegCloseKey',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'CreateProcessAsUserW',
                                                                                            'LogonUserW',
                                                                                            'DuplicateTokenEx',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'wvsprintfA',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'WaitForInputIdle',
                                                                                            'ShowWindow',
                                                                                            'SendMessageW',
                                                                                            'wsprintfW',
                                                                                            'FindWindowW',
                                                                                            'fflush',
                                                                                            'towlower',
                                                                                            '_wputenv',
                                                                                            'setvbuf',
                                                                                            '_dup2',
                                                                                            '_fileno',
                                                                                            'iswctype',
                                                                                            'fwprintf',
                                                                                            'fputc',
                                                                                            '_snprintf',
                                                                                            'towupper',
                                                                                            '_flushall',
                                                                                            'fprintf',
                                                                                            'atoi',
                                                                                            'strncmp',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '__getmainargs',
                                                                                            '_iob',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            'fputs',
                                                                                            'memset',
                                                                                            'wcsrchr',
                                                                                            '_cexit',
                                                                                            'wcschr',
                                                                                            '_wfopen'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 177,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11776,
                                                                                       '.rdata\x00\x00': 14848,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 49152},
                                                                      'StackReserveSize': 409600,
                                                                      'filename': './data/clean/3f1bfc4be00fa0c07778a986e81bf21453ba45f76fecd261d7e88e7db76a15a1'},
 '3f579132a39aec2513cd286ab9a43534dc05f9502fd1a369126236f69ef76282': {'AddressOfEntryPoint': 235059,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 352256,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyW',
                                                                                      'CRYPT32.dll': 'CryptBinaryToStringA',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'GetModuleHandleA',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'SetWindowLongA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'WININET.dll': 'InternetConnectA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['IIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'Shell_NotifyIconA',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteA',
                                                                                            'InternetTimeToSystemTime',
                                                                                            'InternetCrackUrlA',
                                                                                            'InternetTimeFromSystemTime',
                                                                                            'InternetCloseHandle',
                                                                                            'HttpQueryInfoA',
                                                                                            'InternetReadFile',
                                                                                            'HttpOpenRequestA',
                                                                                            'InternetErrorDlg',
                                                                                            'HttpSendRequestA',
                                                                                            'InternetOpenA',
                                                                                            'InternetConnectA',
                                                                                            'GetDesktopWindow',
                                                                                            'CharNextA',
                                                                                            'wsprintfA',
                                                                                            'DispatchMessageW',
                                                                                            'RegisterClassA',
                                                                                            'LoadImageA',
                                                                                            'GetSystemMetrics',
                                                                                            'DispatchMessageA',
                                                                                            'PostMessageA',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'ShowWindow',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'GetCursorPos',
                                                                                            'DefWindowProcA',
                                                                                            'IsWindowUnicode',
                                                                                            'PeekMessageA',
                                                                                            'CreateWindowExA',
                                                                                            'GetWindowLongA',
                                                                                            'MessageBoxA',
                                                                                            'DestroyWindow',
                                                                                            'GetMessageA',
                                                                                            'GetMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'TrackPopupMenu',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadStringA',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'LCMapStringW',
                                                                                            'RtlUnwind',
                                                                                            'HeapReAlloc',
                                                                                            'SetStdHandle',
                                                                                            'FindFirstFileExW',
                                                                                            'GetDriveTypeW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStringTypeW',
                                                                                            'InterlockedExchange',
                                                                                            'GetCPInfo',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetTimeZoneInformation',
                                                                                            'HeapCreate',
                                                                                            'FindResourceA',
                                                                                            'lstrcmpA',
                                                                                            'lstrlenA',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCommandLineA',
                                                                                            'WideCharToMultiByte',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'SetDllDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'lstrcatA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'GetProcAddress',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'CreateThread',
                                                                                            'lstrcpyA',
                                                                                            'lstrcpynA',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTempPathA',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FormatMessageW',
                                                                                            'GetLocalTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'PeekNamedPipe',
                                                                                            'SetHandleInformation',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'TerminateProcess',
                                                                                            'CreatePipe',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FindClose',
                                                                                            'LoadLibraryA',
                                                                                            'LockResource',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetThreadLocale',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetFileAttributesA',
                                                                                            'GetStdHandle',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleExA',
                                                                                            'GetModuleHandleExW',
                                                                                            'LoadLibraryW',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetHandleCount',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'WriteConsoleW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetModuleHandleA',
                                                                                            'RegSetValueExA',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegEnumKeyA',
                                                                                            'CryptHashData',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptCreateHash',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptReleaseContext',
                                                                                            'RegQueryValueExA',
                                                                                            'CryptGetHashParam',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegCloseKey',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'VarUI4FromStr',
                                                                                            'GetStockObject',
                                                                                            'CryptStringToBinaryA',
                                                                                            'CryptUnprotectData',
                                                                                            'CryptProtectData',
                                                                                            'CryptBinaryToStringA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 219,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 81832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 105472,
                                                                                       '.reloc\x00\x00': 32256,
                                                                                       '.rsrc\x00\x00\x00': 81920,
                                                                                       '.text\x00\x00\x00': 348160},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3f579132a39aec2513cd286ab9a43534dc05f9502fd1a369126236f69ef76282'},
 '3f8b18728f607789c4b910bcc745c5bce6252ebfd3c8224a1cdcabeb3579e250': {'AddressOfEntryPoint': 8304,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'msvcrt.dll': 'wcsrchr',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError'},
                                                                      'ImportedFunctions': ['GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'SetLastError',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'wcschr',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'swscanf',
                                                                                            '_resetstkoflw',
                                                                                            'wcsrchr',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'CommandLineToArgvW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 58,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 61744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 61952,
                                                                                       '.text\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3f8b18728f607789c4b910bcc745c5bce6252ebfd3c8224a1cdcabeb3579e250'},
 '3fdd342d11e9f1e845d766ea2ff70e465afcf8ea45700f5eb696450b3b1a3900': {'AddressOfEntryPoint': 92624,
                                                                      'DebugRVA': 4768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetTokenInformation',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'IMM32.dll': 'ImmNotifyIME',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'ClientToScreen',
                                                                                      'msvcrt.dll': '_vsnwprintf_s',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'IsValidSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'OpenProcessToken',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetTokenInformation',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'CompareStringW',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetFileAttributesExW',
                                                                                            'IsValidCodePage',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'DeleteFileW',
                                                                                            'GetCommandLineW',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'MulDiv',
                                                                                            'MapViewOfFileEx',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryExW',
                                                                                            'LocalFree',
                                                                                            'SetTextColor',
                                                                                            'CreatePen',
                                                                                            'SelectObject',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'SaveDC',
                                                                                            'CreateSolidBrush',
                                                                                            'Rectangle',
                                                                                            'GetFontData',
                                                                                            'GetDeviceCaps',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'DeleteObject',
                                                                                            'GetTextColor',
                                                                                            'RestoreDC',
                                                                                            'CreateFontIndirectW',
                                                                                            'EnableWindow',
                                                                                            'GetKeyboardState',
                                                                                            'GetParent',
                                                                                            'SetWindowPos',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetKeyboardLayout',
                                                                                            'SendMessageCallbackW',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'FindWindowW',
                                                                                            'PostMessageW',
                                                                                            'KillTimer',
                                                                                            'MoveWindow',
                                                                                            'GetKeyState',
                                                                                            'SetTimer',
                                                                                            'DrawTextW',
                                                                                            'UpdateWindow',
                                                                                            'IsWindow',
                                                                                            'GetSysColor',
                                                                                            'TrackPopupMenuEx',
                                                                                            'FillRect',
                                                                                            'GetLastActivePopup',
                                                                                            'MessageBeep',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetMessageW',
                                                                                            'SetFocus',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'CallWindowProcW',
                                                                                            'EndDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'PostQuitMessage',
                                                                                            'MessageBoxW',
                                                                                            'SystemParametersInfoW',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'IsWindowVisible',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'LoadMenuW',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadImageW',
                                                                                            'DestroyIcon',
                                                                                            'DestroyMenu',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'EnableMenuItem',
                                                                                            'SetWindowTextW',
                                                                                            'CheckMenuItem',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'DefWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadStringW',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowInfo',
                                                                                            'GetWindowLongW',
                                                                                            'LoadBitmapW',
                                                                                            'GetClientRect',
                                                                                            'SendMessageW',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadCursorW',
                                                                                            'UnregisterClassW',
                                                                                            'DestroyWindow',
                                                                                            'GetClassNameW',
                                                                                            'SetDlgItemTextW',
                                                                                            'ClientToScreen',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'memmove',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'strncmp',
                                                                                            '_wtoi',
                                                                                            'iswspace',
                                                                                            'wcsstr',
                                                                                            'wcsncmp',
                                                                                            'wcsnlen',
                                                                                            '_wcslwr_s',
                                                                                            'wcsncat_s',
                                                                                            'wcsncpy_s',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            'memcpy_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_vsnwprintf_s',
                                                                                            'ImmGetContext',
                                                                                            'ImmAssociateContext',
                                                                                            'ImmSetConversionStatus',
                                                                                            'ImmGetCompositionStringW',
                                                                                            'ImmNotifyIME',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Add',
                                                                                            'CreateStatusWindowW',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_GetIconSize',
                                                                                            'ImageList_DrawEx',
                                                                                            'ImageList_Destroy',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'PathFileExistsW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 221,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 268200,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 268288,
                                                                                       '.text\x00\x00\x00': 94208},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/3fdd342d11e9f1e845d766ea2ff70e465afcf8ea45700f5eb696450b3b1a3900'},
 '3fee0c58334856837b41b201c03dd974ae293ae6bcca96a38d6066d159b3534a': {'AddressOfEntryPoint': 38608,
                                                                      'DebugRVA': 4384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 41120,
                                                                      'ExportSize': 645,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 25165824,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'SysAllocString',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'SetConsoleActiveScreenBuffer',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'SetFilePointer',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapReAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegDeleteValueW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'SetEvent',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetVersionExW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'CreateWellKnownSid',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmAddToStream'},
                                                                      'ImportedFunctions': ['free',
                                                                                            'wcsrchr',
                                                                                            '_wcsdup',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            'wcstok',
                                                                                            '_wcslwr',
                                                                                            '_wcsicmp',
                                                                                            'iswctype',
                                                                                            '_wfopen',
                                                                                            'fclose',
                                                                                            'wprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_wcsupr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_vsnwprintf',
                                                                                            'qsort',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'fgets',
                                                                                            'fflush',
                                                                                            'memcpy',
                                                                                            'fputwc',
                                                                                            'wcspbrk',
                                                                                            '_wcsnicmp',
                                                                                            '_iob',
                                                                                            'memset',
                                                                                            'HeapFree',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetComputerNameExW',
                                                                                            'GetVersionExW',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetStdHandle',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CheckTokenMembership',
                                                                                            'CreateWellKnownSid',
                                                                                            'OpenEventW',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'FillConsoleOutputAttribute',
                                                                                            'FillConsoleOutputCharacterW',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'CreateConsoleScreenBuffer',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'SetConsoleActiveScreenBuffer',
                                                                                            'SysFreeString',
                                                                                            'VariantChangeType',
                                                                                            'SysAllocString',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitializeEx',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpiW',
                                                                                            'LocalFree',
                                                                                            'RtlGUIDFromString',
                                                                                            'WinSqmAddToStream',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 110,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 33792,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 37888},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/3fee0c58334856837b41b201c03dd974ae293ae6bcca96a38d6066d159b3534a'},
 '40674a67d6201c7b2fbd9c81f4704ca6f0d259c6bf036456b36bad6bdce52937': {'AddressOfEntryPoint': 198599,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 249856,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'GDI32.dll': 'TranslateCharsetInfo',
                                                                                      'KERNEL32.dll': 'SetEndOfFile',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'RpcStringFreeA',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'EnableWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'ShellExecuteA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetMalloc',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'RemoveDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetErrorMode',
                                                                                            'GetTempPathA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiA',
                                                                                            'GetTickCount',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'CopyFileA',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'CreateEventA',
                                                                                            'lstrcatA',
                                                                                            'GetTempFileNameA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'GetVersionExA',
                                                                                            'SetFilePointer',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GlobalHandle',
                                                                                            'VerLanguageNameA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'CompareFileTime',
                                                                                            'FindFirstFileA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'MulDiv',
                                                                                            'IsValidCodePage',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileTime',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetDriveTypeA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetCurrentThread',
                                                                                            'DuplicateHandle',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsBadWritePtr',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapSize',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedExchange',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SystemTimeToFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'GetShortPathNameA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'GetFileType',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SearchPathA',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadCodePtr',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GlobalAlloc',
                                                                                            'CloseHandle',
                                                                                            'GlobalLock',
                                                                                            'ReadFile',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GetThreadContext',
                                                                                            'VirtualProtectEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'WriteProcessMemory',
                                                                                            'FlushInstructionCache',
                                                                                            'SetThreadContext',
                                                                                            'ResumeThread',
                                                                                            'GetFileAttributesA',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'lstrcpynA',
                                                                                            'GetModuleFileNameA',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetLocaleInfoA',
                                                                                            'lstrlenA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'SetEndOfFile',
                                                                                            'GetWindowPlacement',
                                                                                            'DrawIcon',
                                                                                            'DestroyIcon',
                                                                                            'GetDlgCtrlID',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSystemMetrics',
                                                                                            'SetRect',
                                                                                            'FindWindowA',
                                                                                            'MoveWindow',
                                                                                            'GetWindowTextA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetParent',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetWindow',
                                                                                            'SetCursor',
                                                                                            'UpdateWindow',
                                                                                            'GetClassInfoA',
                                                                                            'wvsprintfA',
                                                                                            'IntersectRect',
                                                                                            'SubtractRect',
                                                                                            'CreateDialogParamA',
                                                                                            'LoadStringA',
                                                                                            'IsDialogMessageA',
                                                                                            'SendMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SetWindowTextA',
                                                                                            'GetWindowRect',
                                                                                            'ScreenToClient',
                                                                                            'IsWindow',
                                                                                            'DestroyWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'GetWindowLongA',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'SetWindowLongA',
                                                                                            'GetClientRect',
                                                                                            'ClientToScreen',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowDC',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDesktopWindow',
                                                                                            'wsprintfA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'PostMessageA',
                                                                                            'KillTimer',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'LoadIconA',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'CharPrevA',
                                                                                            'ExitWindowsEx',
                                                                                            'SendDlgItemMessageA',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'CharLowerBuffA',
                                                                                            'EnableWindow',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'GetObjectA',
                                                                                            'CreateFontIndirectA',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'CreateFontA',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'CreatePalette',
                                                                                            'GetDeviceCaps',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'CreateDIBitmap',
                                                                                            'BitBlt',
                                                                                            'TranslateCharsetInfo',
                                                                                            'RegQueryValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenThreadToken',
                                                                                            'RegSetValueExA',
                                                                                            'UuidToStringA',
                                                                                            'UuidCreate',
                                                                                            'RpcStringFreeA',
                                                                                            'StgIsStorageFile',
                                                                                            'StgOpenStorage',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 276,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 42604,
                                                                      'SectionNames': {'.data\x00\x00\x00': 24576,
                                                                                       '.rdata\x00\x00': 32768,
                                                                                       '.rsrc\x00\x00\x00': 45056,
                                                                                       '.text\x00\x00\x00': 245760},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/40674a67d6201c7b2fbd9c81f4704ca6f0d259c6bf036456b36bad6bdce52937'},
 '407ce8b8b076c5e7c127fbd0395379dfbf6ac2dcda2fb043a979628e0610ad06': {'AddressOfEntryPoint': 10518,
                                                                      'DebugRVA': 53680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'SHLWAPI.dll': 'PathFileExistsA'},
                                                                      'ImportedFunctions': ['CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteFileA',
                                                                                            'CopyFileA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'lstrlenA',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'GetCommandLineA',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetModuleHandleW',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'LCMapStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSize',
                                                                                            'CreateFileA',
                                                                                            'GetProcessHeap',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'PathFileExistsA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 49152},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/407ce8b8b076c5e7c127fbd0395379dfbf6ac2dcda2fb043a979628e0610ad06'},
 '40b35149333e31d7253b7cc4a857da4ec9bd8142daf00058b023c2bf7cf74355': {'AddressOfEntryPoint': 7724,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['Sleep',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_XcptFilter',
                                                                                            '_fmode',
                                                                                            'exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_commode',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcsncat_s',
                                                                                            '_setmode',
                                                                                            '_wsystem',
                                                                                            '_iob',
                                                                                            '_fileno',
                                                                                            'wprintf_s',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__C_specific_handler',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'ChangeDisplaySettingsA',
                                                                                            'EnumDisplayMonitors',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/40b35149333e31d7253b7cc4a857da4ec9bd8142daf00058b023c2bf7cf74355'},
 '40d10661c6c94501d48e581d52bfe184f8949d66bfef8327f35cedfbb9c5387d': {'AddressOfEntryPoint': 6768,
                                                                      'DebugRVA': 4576,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'api-ms-win-core-errorhandling-l1-1-0.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-libraryloader-l1-1-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-misc-l1-1-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-processthreads-l1-1-0.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-1-0.dll': 'OpenProcess',
                                                                                      'api-ms-win-core-sysinfo-l1-1-0.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-1-0.dll': 'AdjustTokenPrivileges',
                                                                                      'msvcrt.dll': '__iob_func'},
                                                                      'ImportedFunctions': ['_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'fprintf',
                                                                                            'atoi',
                                                                                            '__iob_func',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenProcessToken',
                                                                                            'CreateRemoteThread',
                                                                                            'TerminateProcess',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 37,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/40d10661c6c94501d48e581d52bfe184f8949d66bfef8327f35cedfbb9c5387d'},
 '40e78e3fc3268144880e9543b6f09bfdf120d98d26be0319e8b325a5043b885b': {'AddressOfEntryPoint': 1624320,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'WS2_32.dll': 'WSAGetLastError'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'RegCloseKey',
                                                                                            'GetOpenFileNameW',
                                                                                            'ShellExecuteA',
                                                                                            'MessageBoxA',
                                                                                            'WSAGetLastError'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 11,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 15348,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 15360,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 493056,
                                                                                       'UPX2\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 16777216,
                                                                      'filename': './data/clean/40e78e3fc3268144880e9543b6f09bfdf120d98d26be0319e8b325a5043b885b'},
 '40f21b38bd31a72f864a5214ebf63853524948e8e0be7659a9b0742b8bbeb8d0': {'AddressOfEntryPoint': 72366,
                                                                      'DebugRVA': 72132,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 65536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/40f21b38bd31a72f864a5214ebf63853524948e8e0be7659a9b0742b8bbeb8d0'},
 '41011e17f51f36ee20baa8d1d33f5c085b3a4c0fcfb02937fa86f54ca8a87e40': {'AddressOfEntryPoint': 82592,
                                                                      'DebugRVA': 8032,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 475136,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 21315,
                                                                      'ImportedDLL': {'CRYPTSP.dll': 'CryptHashData',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateGuid',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'RaiseFailFastException',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenProcessToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceEnableLevel',
                                                                                      'api-ms-win-eventing-obsolete-l1-1-0.dll': 'RegisterTraceGuidsA',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_snwprintf_s',
                                                                                            '_stricmp',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcscpy_s',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcessToken',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExA',
                                                                                            'GetTickCount',
                                                                                            'RaiseFailFastException',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceMessage',
                                                                                            'GetTraceEnableLevel',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'CoCreateGuid',
                                                                                            'GetTokenInformation',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegisterTraceGuidsA',
                                                                                            'LocalFree',
                                                                                            'CryptExportKey',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptCreateHash',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptGetDefaultProviderW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptSetProvParam',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptGenKey',
                                                                                            'CryptHashData',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2232,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 465920},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/41011e17f51f36ee20baa8d1d33f5c085b3a4c0fcfb02937fa86f54ca8a87e40'},
 '411ea79b87fb9b44746c2a711333b45e369f5583f4bb3286653fc1a15e457a9d': {'AddressOfEntryPoint': 58196,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33248,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'DUI70.dll': '?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SETUPAPI.dll': 'SetupGetStringFieldW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'SLC.dll': 'SLGetLicensingStatusInformation',
                                                                                      'USER32.dll': 'CharUpperBuffW',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoInitialize',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoTaskMemAlloc',
                                                                                      'sppcext.dll': 'SLFreeTokenActivationGrants'},
                                                                      'ImportedFunctions': ['EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventWrite',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetGeoInfoW',
                                                                                            'CompareStringEx',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueueUserWorkItem',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'OpenEventW',
                                                                                            'CreateMutexW',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'OpenProcess',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'UnregisterWaitEx',
                                                                                            'CloseHandle',
                                                                                            'VirtualQuery',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'LocalFree',
                                                                                            'CompareStringW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleExW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetTickCount',
                                                                                            'CharNextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'PostQuitMessage',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'CharUpperW',
                                                                                            'CharUpperBuffW',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_wcsicmp',
                                                                                            'swscanf_s',
                                                                                            '_wtoi',
                                                                                            'wcsstr',
                                                                                            'towlower',
                                                                                            'memmove',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            'floorf',
                                                                                            'wcschr',
                                                                                            'wcscmp',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHCreateItemInKnownFolder',
                                                                                            'SHGetIDListFromObject',
                                                                                            'ShellExecuteExW',
                                                                                            'PathFileExistsW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmSetDWORD',
                                                                                            'RtlVirtualUnwind',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'RoUninitialize',
                                                                                            'RoInitialize',
                                                                                            'SLGetTokenActivationGrants',
                                                                                            'SLFreeTokenActivationGrants',
                                                                                            '?Release@Value@DirectUI@@QEAAXXZ',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QEAAJH@Z',
                                                                                            '?SetDirection@Element@DirectUI@@QEAAJH@Z',
                                                                                            '?GetContentString@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z',
                                                                                            'DuiCreateObject',
                                                                                            '?GetRoot@Element@DirectUI@@QEAAPEAV12@XZ',
                                                                                            '?ClearButtonClicked@TouchEdit2@DirectUI@@SA?AVUID@@XZ',
                                                                                            '?UserTextChanged@TouchEditBase@DirectUI@@SA?AVUID@@XZ',
                                                                                            '?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ',
                                                                                            '?SetContentString@Element@DirectUI@@QEAAJPEBG@Z',
                                                                                            '?CreateString@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z',
                                                                                            '?SetCaretPosition@TouchEdit2@DirectUI@@QEAAJJ@Z',
                                                                                            '?GetSelection@TouchEdit2@DirectUI@@QEAAJPEAJ0@Z',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z',
                                                                                            'GetScaleFactor',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ',
                                                                                            '?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z',
                                                                                            '?Click@TouchButton@DirectUI@@SA?AVUID@@XZ',
                                                                                            '?AddString@TouchSelect@DirectUI@@QEAAJPEBG@Z',
                                                                                            '?SetSelectionIndex@TouchSelect@DirectUI@@QEAAJH@Z',
                                                                                            '?GetSelectionIndex@TouchSelect@DirectUI@@QEAAHXZ',
                                                                                            '?SetInputScope@TouchEdit2@DirectUI@@QEAAJW4__MIDL___MIDL_itf_inputscope_0000_0000_0001@@@Z',
                                                                                            'StrToID',
                                                                                            '?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z',
                                                                                            '?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z',
                                                                                            'SLConsumeWindowsRight',
                                                                                            'SLDepositOfflineConfirmationId',
                                                                                            'SLOpen',
                                                                                            'SLGetProductSkuInformation',
                                                                                            'SLGetSLIDList',
                                                                                            'SLGetWindowsInformation',
                                                                                            'SLGenerateOfflineInstallationId',
                                                                                            'SLClose',
                                                                                            'SLGetLicensingStatusInformation',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupGetLineByIndexW',
                                                                                            'SetupGetLineCountW',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetStringFieldW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 146,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 18976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/411ea79b87fb9b44746c2a711333b45e369f5583f4bb3286653fc1a15e457a9d'},
 '417feff43085f5380344cf9c959dd90b1d1d30811e4e02184f85d7fdb7d3d0d6': {'AddressOfEntryPoint': 60888,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'GPAPI.dll': 'LeaveCriticalPolicySectionInternal',
                                                                                      'GPSVC.dll': 'GenerateRsopPolicy',
                                                                                      'KERNEL32.dll': 'GetSystemTime',
                                                                                      'NTDSAPI.dll': 'DsCrackNamesW',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'Secur32.dll': 'TranslateNameW',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'NtQueryInformationToken',
                                                                                      'ole32.dll': 'CoRevertToSelf'},
                                                                      'ImportedFunctions': ['OpenThreadToken',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'SetServiceStatus',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'CopySid',
                                                                                            'IsValidSid',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'AccessCheckByType',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'AccessCheck',
                                                                                            'SetThreadToken',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'FreeSid',
                                                                                            'DuplicateTokenEx',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegQueryValueExW',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'MoveFileExW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalReAlloc',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'CompareStringW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThread',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrlenW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetProcAddress',
                                                                                            'lstrcmpiW',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTime',
                                                                                            'UnregisterClassA',
                                                                                            'CharNextW',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'GetMessageW',
                                                                                            'memcpy_s',
                                                                                            'wcsncmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            '_purecall',
                                                                                            '_wcsicmp',
                                                                                            'memset',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_except_handler4_common',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            'wcsrchr',
                                                                                            'memcpy',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoCreateInstance',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoImpersonateClient',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateGuid',
                                                                                            'CoInitializeEx',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevertToSelf',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetDim',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'VarUI4FromStr',
                                                                                            'LeaveCriticalPolicySectionInternal',
                                                                                            'GenerateRsopPolicy',
                                                                                            'DsFreeNameResultW',
                                                                                            'DsCrackNamesW',
                                                                                            'TranslateNameW',
                                                                                            'RtlCopySid',
                                                                                            'RtlLengthSid',
                                                                                            'NtQueryInformationToken'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3256,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 60416},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/417feff43085f5380344cf9c959dd90b1d1d30811e4e02184f85d7fdb7d3d0d6'},
 '418b7b5180e7bf8ebc5763c414da5388299e55465c96fbc0ebad78ce95ec096c': {'AddressOfEntryPoint': 26864,
                                                                      'DebugRVA': 13104,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegGetValueW',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceInstanceIdW',
                                                                                      'SHLWAPI.dll': 'StrStrW',
                                                                                      'WS2_32.dll': 'FreeAddrInfoW',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'CheckTokenMembership',
                                                                                            'RegCloseKey',
                                                                                            'RegGetValueW',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcessHeap',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            'exit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_cexit',
                                                                                            '_except_handler4_common',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'isdigit',
                                                                                            '__set_app_type',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_controlfp',
                                                                                            '_exit',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcscpy_s',
                                                                                            'wcsncmp',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '_onexit',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_vsnwprintf',
                                                                                            'wcsstr',
                                                                                            'wcsrchr',
                                                                                            '_wcslwr',
                                                                                            'wprintf',
                                                                                            'swscanf',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsicmp',
                                                                                            'memmove_s',
                                                                                            '__wgetmainargs',
                                                                                            'memset',
                                                                                            'NtQuerySystemInformation',
                                                                                            'SetupDiGetDevicePropertyW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'CreateXmlReader',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'StrCmpIW',
                                                                                            'StrStrW',
                                                                                            'WSACleanup',
                                                                                            'WSAGetLastError',
                                                                                            'WSAStartup',
                                                                                            'WSAAddressToStringW',
                                                                                            'GetAddrInfoW',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetAdaptersAddresses'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 27136},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/418b7b5180e7bf8ebc5763c414da5388299e55465c96fbc0ebad78ce95ec096c'},
 '419310da612cfc53c800d17542f3c25e2475a7f7499fad36a3313bb1c3c4eada': {'AddressOfEntryPoint': 27120,
                                                                      'DebugRVA': 114592,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'MSVCR120_CLR0400.dll': 'memmove',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'mscoree.dll': 'CorGetSvc'},
                                                                      'ImportedFunctions': ['DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'IsDebuggerPresent',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'ReleaseMutex',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualProtect',
                                                                                            'CreateEventW',
                                                                                            'CreateSemaphoreW',
                                                                                            'ResetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'ReleaseSemaphore',
                                                                                            'HeapValidate',
                                                                                            'HeapCreate',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapDestroy',
                                                                                            'TlsSetValue',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SleepEx',
                                                                                            'SetEvent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'TlsGetValue',
                                                                                            'CreateMutexW',
                                                                                            'CreateProcessW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileSizeEx',
                                                                                            'ReadFile',
                                                                                            'MoveFileExW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DebugBreak',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'OutputDebugStringW',
                                                                                            'SetLastError',
                                                                                            'LCMapStringW',
                                                                                            'LocalFree',
                                                                                            'GetACP',
                                                                                            'IsDBCSLeadByte',
                                                                                            'FormatMessageW',
                                                                                            'GetCPInfo',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateFileW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'GetFullPathNameW',
                                                                                            'GetLocalTime',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'WerSetFlags',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateDirectoryW',
                                                                                            'SetErrorMode',
                                                                                            'VirtualQuery',
                                                                                            'FreeLibrary',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            '__wgetmainargs',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_wcsicmp',
                                                                                            '_wtoi',
                                                                                            '_wcsnicmp',
                                                                                            'tolower',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'exit',
                                                                                            'wcsncpy_s',
                                                                                            'wcstoul',
                                                                                            '_errno',
                                                                                            'iswspace',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_putws',
                                                                                            '_flushall',
                                                                                            '_vsnwprintf_s',
                                                                                            'strcpy_s',
                                                                                            '_vsnprintf_s',
                                                                                            'memmove',
                                                                                            'GetRequestedRuntimeInfo',
                                                                                            'GetRealProcAddress',
                                                                                            'CLRCreateInstance',
                                                                                            'GetCORSystemDirectory',
                                                                                            'CorBindToRuntime',
                                                                                            'CorGetSvc',
                                                                                            'SysAllocString',
                                                                                            'SetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'LoadStringW',
                                                                                            'EventWrite',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 140,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 111104},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/419310da612cfc53c800d17542f3c25e2475a7f7499fad36a3313bb1c3c4eada'},
 '41f45a46ee56626ff2699d525bb56a3bb4718c5ca5f4fb5b3b38add64584026b': {'AddressOfEntryPoint': 22898,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'ReadFile',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenProcessToken',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5236,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 4174848,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/41f45a46ee56626ff2699d525bb56a3bb4718c5ca5f4fb5b3b38add64584026b'},
 '42146c80a122f6d4e348851926f8d8f454cee9f511cc0ea1acb17ddda614df60': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 180812,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 181248,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/42146c80a122f6d4e348851926f8d8f454cee9f511cc0ea1acb17ddda614df60'},
 '421bd619eafb8ce48990654c61420de25b8c06e4234c1c7a4a227f5c673f855c': {'AddressOfEntryPoint': 10448,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'SETUPAPI.dll': 'SetupWriteTextLog',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'PeekMessageW',
                                                                                      'msvcrt.dll': '_controlfp',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['GetCommandLineW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'FreeLibrary',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetProcAddress',
                                                                                            'ResetEvent',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'OpenFileMappingW',
                                                                                            'OpenEventW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '_wcsicmp',
                                                                                            '__iob_func',
                                                                                            'wcsrchr',
                                                                                            'fprintf',
                                                                                            '_vsnwprintf',
                                                                                            'exit',
                                                                                            '_except_handler4_common',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'fwprintf',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_controlfp',
                                                                                            'DbgPrintEx',
                                                                                            'NtQueryInformationProcess',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'SetupWriteTextLog',
                                                                                            'CommandLineToArgvW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'LoadStringW',
                                                                                            'PeekMessageW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 57,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/421bd619eafb8ce48990654c61420de25b8c06e4234c1c7a4a227f5c673f855c'},
 '42399cd03b656fe537d902681c705b921e9f350876fb19c7a3a0b5a38c39cf3c': {'AddressOfEntryPoint': 14320,
                                                                      'DebugRVA': 18944,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetExitCodeProcess',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW'},
                                                                      'ImportedFunctions': ['GetTokenInformation',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'OpenProcessToken',
                                                                                            'SystemFunction036',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'ExitProcess',
                                                                                            'SizeofResource',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LocalFree',
                                                                                            'lstrcmpiW',
                                                                                            'ReadFile',
                                                                                            'HeapFree',
                                                                                            'lstrlenW',
                                                                                            'WriteFile',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetFileTime',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CloseHandle',
                                                                                            'HeapAlloc',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessHeap',
                                                                                            'WideCharToMultiByte',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstFileW',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'GetCurrentProcess',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'EnumResourceNamesW',
                                                                                            'GetTempPathW',
                                                                                            'FindClose',
                                                                                            'GetVolumePathNameW',
                                                                                            'WaitForSingleObject',
                                                                                            'LocalAlloc',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'GetExitCodeProcess',
                                                                                            'CommandLineToArgvW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 57,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 16121808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 0,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 16121856,
                                                                                       '.text\x00\x00\x00': 10752},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/42399cd03b656fe537d902681c705b921e9f350876fb19c7a3a0b5a38c39cf3c'},
 '42497534cdf28b26ce51a2dc26e5e5262e403cd512b725d47df97b43a6ff21fb': {'AddressOfEntryPoint': 249456,
                                                                      'DebugRVA': 4496,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'IPHLPAPI.DLL': 'IcmpCloseHandle',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleMode',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'GetConsoleScreenBufferInfo',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'DeleteFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'GlobalUnlock',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'CopyFileW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetUserPreferredUILanguages',
                                                                                      'api-ms-win-core-localization-obsolete-l1-2-0.dll': 'GetSystemDefaultUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenProcessToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-shlwapi-obsolete-l1-1-0.dll': 'StrStrW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharUpperW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForSingleObject',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AdjustTokenPrivileges',
                                                                                      'framedynos.dll': '??4CHString@@QAEABV0@PBG@Z',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memcpy_s',
                                                                                            '_kbhit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_wremove',
                                                                                            '_filelength',
                                                                                            '_fileno',
                                                                                            'wcstombs',
                                                                                            'wcsncmp',
                                                                                            'fputws',
                                                                                            'fwprintf',
                                                                                            'fflush',
                                                                                            'fprintf',
                                                                                            'fseek',
                                                                                            'fread',
                                                                                            'swscanf',
                                                                                            'towlower',
                                                                                            'wctomb',
                                                                                            'feof',
                                                                                            'fgets',
                                                                                            'fwrite',
                                                                                            '_wfopen',
                                                                                            'wcstoul',
                                                                                            'fclose',
                                                                                            'ceil',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_iob',
                                                                                            'fgetws',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            'iswcntrl',
                                                                                            'wcsstr',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnprintf',
                                                                                            '_wtol',
                                                                                            '_ltow',
                                                                                            'wcstok',
                                                                                            '_wcsicmp',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'swprintf_s',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '_getch',
                                                                                            '_wsystem',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            '_itow',
                                                                                            '_ftol2_sse',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenProcessToken',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleA',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetFileSizeEx',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'DeleteFileW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLocalTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'GetCommandLineW',
                                                                                            'GetStdHandle',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'WriteConsoleW',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'IcmpCreateFile',
                                                                                            'IcmpSendEcho',
                                                                                            'Icmp6CreateFile',
                                                                                            'Icmp6SendEcho2',
                                                                                            'IcmpCloseHandle',
                                                                                            'GetTokenInformation',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'HeapSetInformation',
                                                                                            'EnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetComputerNameW',
                                                                                            'CopyFileW',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'LocalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'StrStrIW',
                                                                                            'StrStrW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            '?Mid@CHString@@QBE?AV1@H@Z',
                                                                                            '??4CHString@@QAEABV0@ABV0@@Z',
                                                                                            '?Left@CHString@@QBE?AV1@H@Z',
                                                                                            '??H@YG?AVCHString@@ABV0@PBG@Z',
                                                                                            '??YCHString@@QAEABV0@ABV0@@Z',
                                                                                            '?Find@CHString@@QBEHPBG@Z',
                                                                                            '??0CHString@@QAE@ABV0@@Z',
                                                                                            '?GetBuffer@CHString@@QAEPAGH@Z',
                                                                                            '?FindOneOf@CHString@@QBEHPBG@Z',
                                                                                            '?TrimRight@CHString@@QAEXXZ',
                                                                                            '?TrimLeft@CHString@@QAEXXZ',
                                                                                            '?GetData@CHString@@IBEPAUCHStringData@@XZ',
                                                                                            '??YCHString@@QAEABV0@PBG@Z',
                                                                                            '?Empty@CHString@@QAEXXZ',
                                                                                            '??0CHString@@QAE@PBD@Z',
                                                                                            '?Right@CHString@@QBE?AV1@H@Z',
                                                                                            '??0CHString@@QAE@PBG@Z',
                                                                                            '?Format@CHString@@QAAXPBGZZ',
                                                                                            '??1CHString@@QAE@XZ',
                                                                                            '??0CHString@@QAE@XZ',
                                                                                            '??4CHString@@QAEABV0@PBG@Z',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 28,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 72992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 16896,
                                                                                       '.rsrc\x00\x00\x00': 73216,
                                                                                       '.text\x00\x00\x00': 305664},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/42497534cdf28b26ce51a2dc26e5e5262e403cd512b725d47df97b43a6ff21fb'},
 '426b19f26c03dfc5db649f980b77dfbdb0aed7623dd0451418cdcc6c535eb696': {'AddressOfEntryPoint': 409867,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'advapi32.dll': 'RegFlushKey',
                                                                                      'gdi32.dll': 'PatBlt',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'ole32.dll': 'CoInitialize',
                                                                                      'oleaut32.dll': 'VariantClear',
                                                                                      'shell32.dll': 'SHGetMalloc',
                                                                                      'user32.dll': 'GetDC'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'GlobalAlloc',
                                                                                            'MessageBoxA',
                                                                                            'wsprintfA',
                                                                                            'RegCloseKey',
                                                                                            'VariantClear',
                                                                                            'LocalAlloc',
                                                                                            'RegFlushKey',
                                                                                            'Sleep',
                                                                                            'PatBlt',
                                                                                            'GetDC',
                                                                                            'CoInitialize',
                                                                                            'ShellAboutA',
                                                                                            'SHGetMalloc'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 79360,
                                                                      'SectionNames': {'\x00\x00\x00\x00\x00\x00\x00\x00': 6656,
                                                                                       '.petite\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/426b19f26c03dfc5db649f980b77dfbdb0aed7623dd0451418cdcc6c535eb696'},
 '42c14420e1f53023c6f89ba91dfc0a739c34c998452528677c622e534a1884cd': {'AddressOfEntryPoint': 260622,
                                                                      'DebugRVA': 260220,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 81544,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 81920,
                                                                                       '.text\x00\x00\x00': 252928},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/42c14420e1f53023c6f89ba91dfc0a739c34c998452528677c622e534a1884cd'},
 '42d508b3bc7fa06be6d49978b469ea556bef6e5f7b3e8041ca6341c817655a00': {'AddressOfEntryPoint': 227248,
                                                                      'DebugRVA': 5120,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 344064,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'UuidCreate',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoAddRefServerProcess',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileAttributesW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadLibraryExA',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'UnmapViewOfFile',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetEnvironmentVariableW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharUpperW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'CreateEventW',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'RevertToSelf',
                                                                                      'msvcrt.dll': 'swscanf',
                                                                                      'ntdll.dll': 'RtlRaiseStatus'},
                                                                      'ImportedFunctions': ['iswspace',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_amsg_exit',
                                                                                            'memcmp',
                                                                                            '_controlfp',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_except_handler4_common',
                                                                                            'exit',
                                                                                            '_lock',
                                                                                            '__p__commode',
                                                                                            '_vscwprintf',
                                                                                            '_XcptFilter',
                                                                                            'memcpy_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'memmove_s',
                                                                                            '_exit',
                                                                                            'qsort',
                                                                                            '_purecall',
                                                                                            '_vsnprintf',
                                                                                            'wcschr',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_cexit',
                                                                                            'towupper',
                                                                                            'memcpy',
                                                                                            '_initterm',
                                                                                            'wcsncmp',
                                                                                            '__p__fmode',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'swscanf_s',
                                                                                            '__setusermatherr',
                                                                                            'memmove',
                                                                                            'free',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'swscanf',
                                                                                            'ReleaseSemaphore',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'GetHGlobalFromStream',
                                                                                            'CoMarshalInterface',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoAddRefServerProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'DuplicateHandle',
                                                                                            'GetHandleInformation',
                                                                                            'CloseHandle',
                                                                                            'GetFileSizeEx',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointerEx',
                                                                                            'UnlockFileEx',
                                                                                            'GetTempFileNameW',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'LockFileEx',
                                                                                            'GetVolumeInformationW',
                                                                                            'WriteFile',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'TlsGetValue',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcessToken',
                                                                                            'TlsFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'MapViewOfFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'CreateFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'NtSetSecurityObject',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlFreeHeap',
                                                                                            'NtCreateFile',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtClose',
                                                                                            'RtlImpersonateSelf',
                                                                                            'RtlCompressBuffer',
                                                                                            'RtlGetCompressionWorkSpaceSize',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlDeleteResource',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'RtlReAllocateHeap',
                                                                                            'RtlDeleteCriticalSection',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'NtYieldExecution',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlRaiseStatus',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CompareStringW',
                                                                                            'GetOverlappedResult',
                                                                                            'DeviceIoControl',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'GetAclInformation',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'RevertToSelf',
                                                                                            'UuidCreate',
                                                                                            'CharUpperW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'LocalFree',
                                                                                            'GlobalSize',
                                                                                            'LocalAlloc',
                                                                                            'ApiSetQueryApiSetPresence'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 166,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1336,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 333824,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/42d508b3bc7fa06be6d49978b469ea556bef6e5f7b3e8041ca6341c817655a00'},
 '43360727acb28ea5da50a4fc7eaa21c502539afa384b1bd19dab62658fe112c9': {'AddressOfEntryPoint': 1460960,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'SHLWAPI.dll': 'StrTrimA',
                                                                                      'USER32.dll': 'SetFocus',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetOpenW',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'RegCloseKey',
                                                                                            'DeleteObject',
                                                                                            'CoInitialize',
                                                                                            'EnumProcessModules',
                                                                                            'UuidCreate',
                                                                                            'SHGetMalloc',
                                                                                            'StrTrimA',
                                                                                            'SetFocus',
                                                                                            'VerQueryValueW',
                                                                                            'InternetOpenW',
                                                                                            'inet_addr'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 17,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 41928,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 43008,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 282112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/43360727acb28ea5da50a4fc7eaa21c502539afa384b1bd19dab62658fe112c9'},
 '435603112d830db82a3622f7a3387ae91ba828435a7a8dba35f010c6f8b792e3': {'AddressOfEntryPoint': 15840,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterServiceCtrlHandlerExA',
                                                                                      'Framework.dll': '?readEnvironmentVar@CEnvironmentUtils@Caf@@SAXPEBDAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'MSVCP90.dll': '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                      'MSVCR90.dll': '??0exception@std@@QEAA@XZ',
                                                                                      'glib-2.0.dll': 'g_atomic_int_inc'},
                                                                      'ImportedFunctions': ['g_setenv_utf8',
                                                                                            'g_error_free',
                                                                                            'g_atomic_int_dec_and_test',
                                                                                            'g_atomic_int_inc',
                                                                                            '?serviceConfig@CafInitialize@Caf@@SAJXZ',
                                                                                            '??1CLogger@Caf@@UEAA@XZ',
                                                                                            '?notInitialized@CValidate@Caf@@SAX_NPEBD1@Z',
                                                                                            '?initialized@CValidate@Caf@@SAX_NPEBD1@Z',
                                                                                            '??1CIntegrationAppContext@Caf@@UEAA@XZ',
                                                                                            '??0CIntegrationAppContext@Caf@@QEAA@XZ',
                                                                                            '?getIntegrationObject@CIntegrationAppContext@Caf@@UEBAXAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?getIntegrationObject@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@UIIntegrationObject@Caf@@U12@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?getIntegrationObjects@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@V?$deque@V?$TCafSmartPtr@UICafObject@@U1@@@V?$allocator@V?$TCafSmartPtr@UICafObject@@U1@@@@std@@@std@@V?$TCafObject@V?$deque@V?$TCafSmartPtr@UICafObject@@U1@@@V?$allocator@V?$TCafSmartPtr@UICafObject@@U1@@@@std@@@std@@@@@@AEBU_GUID@@@Z',
                                                                                            '?getBean@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@UIBean@Caf@@U12@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?resolveChannelName@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@UIMessageChannel@Caf@@U12@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?resolveChannelNameToObject@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@UIIntegrationObject@Caf@@U12@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0CLogger@Caf@@QEAA@PEBD@Z',
                                                                                            '?populate@CCafException@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@J00@Z',
                                                                                            '??0CCafException@Caf@@QEAA@XZ',
                                                                                            '?terminate@CIntegrationAppContext@Caf@@QEAAXI@Z',
                                                                                            '?log@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDHPEBVCCafException@2@@Z',
                                                                                            '?sleep@CThreadUtils@Caf@@SAXI@Z',
                                                                                            '?initialize@CIntegrationAppContext@Caf@@QEAAXI@Z',
                                                                                            '?getRequiredUint32@AppConfigUtils@Caf@@YAIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?_sManagementAgentArea@Caf@@3PEBDEB',
                                                                                            '?setStartupConfigFile@CLoggingUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?getRequiredString@AppConfigUtils@Caf@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?_sAppConfigGlobalParamLogConfigFile@Caf@@3PEBDEB',
                                                                                            '?_sAppConfigGlobalParamLogDir@Caf@@3PEBDEB',
                                                                                            '?AddRef@CCafException@Caf@@UEAAXXZ',
                                                                                            '?Release@CCafException@Caf@@UEAAXXZ',
                                                                                            '?QueryInterface@CCafException@Caf@@UEAAXAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?throwSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '?getMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getFullMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '??1CCafException@Caf@@UEAA@XZ',
                                                                                            '??1CWinServiceState@Caf@@UEAA@XZ',
                                                                                            '??0CWinServiceState@Caf@@QEAA@XZ',
                                                                                            '??1CWinServiceInstance@Caf@@UEAA@XZ',
                                                                                            '??0CWinServiceInstance@Caf@@QEAA@XZ',
                                                                                            '?signalServiceStop@CWinServiceState@Caf@@QEAAXXZ',
                                                                                            '?logMessage@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDH1@Z',
                                                                                            '?runWorkerThread@CWinServiceInstance@Caf@@QEAAXXZ',
                                                                                            '?putCurrentServiceState@CWinServiceState@Caf@@QEAAXK@Z',
                                                                                            '?setStatus@CWinServiceState@Caf@@QEAAXXZ',
                                                                                            '?logVA@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDH1ZZ',
                                                                                            '?populateVA@CCafException@Caf@@QEAAXJAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PEBDZZ',
                                                                                            '?GetApiErrorMessage@PlatformApi@BasePlatform@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z',
                                                                                            '?initialize@CWinServiceInstance@Caf@@QEAAXAEBV?$TCafSmartPtr@VCWinServiceState@Caf@@V?$TCafObject@VCWinServiceState@Caf@@@@@@@Z',
                                                                                            '?initialize@CWinServiceState@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00AEBV?$TCafSmartPtr@UIWork@Caf@@U12@@@@Z',
                                                                                            '?notNullPtr@CValidate@Caf@@SAXPEBXPEBD11@Z',
                                                                                            '?term@CafInitialize@Caf@@SAJXZ',
                                                                                            '?close@CWinServiceState@Caf@@QEAAXXZ',
                                                                                            '?runService@CWinServiceInstance@Caf@@QEAAXXZ',
                                                                                            '?putServiceHandle@CWinServiceState@Caf@@QEAAXQEAUSERVICE_STATUS_HANDLE__@@@Z',
                                                                                            '?getIsService@CWinServiceState@Caf@@QEBA_NXZ',
                                                                                            '?getServiceName@CWinServiceState@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?init@CafInitialize@Caf@@SAJXZ',
                                                                                            '?putIsService@CWinServiceState@Caf@@QEAAX_N@Z',
                                                                                            '?install@CWinServiceInstance@Caf@@QEBAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?getCurrentFile@FileSystemUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?uninstall@CWinServiceInstance@Caf@@QEBAXXZ',
                                                                                            '??0InvalidHandleException@Caf@@QEAA@XZ',
                                                                                            '?processCommandLine@CWinServiceInstance@Caf@@QEBA?AUSCommandLineParams@12@HPEAPEAD@Z',
                                                                                            '?throwSelf@InvalidHandleException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@InvalidHandleException@Caf@@UEAAXXZ',
                                                                                            '??1InvalidHandleException@Caf@@UEAA@XZ',
                                                                                            '?getRequiredString@AppConfigUtils@Caf@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@0@Z',
                                                                                            '?getAppConfig@Caf@@YA?AV?$TCafSmartPtr@UIAppConfig@Caf@@U12@@@XZ',
                                                                                            '?getAppConfig@Caf@@YA?AV?$TCafSmartPtr@UIAppConfig@Caf@@U12@@@AEBV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z',
                                                                                            '?readEnvironmentVar@CEnvironmentUtils@Caf@@SAXPEBDAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegisterServiceCtrlHandlerExA',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@0@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            'strnlen',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_beginthreadex',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_CxxThrowException',
                                                                                            '_purecall',
                                                                                            'exit',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetLastError'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 137,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 26112,
                                                                                       '.text\x00\x00\x00': 27648},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/435603112d830db82a3622f7a3387ae91ba828435a7a8dba35f010c6f8b792e3'},
 '43759b0c441fd4f71fe5eeb69f548cd2eb40ac0abfa02ea3afc44fbddf28dc16': {'AddressOfEntryPoint': 39116,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 10440,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 10752,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 36864,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/43759b0c441fd4f71fe5eeb69f548cd2eb40ac0abfa02ea3afc44fbddf28dc16'},
 '439ac0824e46703a11c9ba1b35bc8ec3129eacdbed219b7d440b1e079f757fed': {'AddressOfEntryPoint': 137362,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 147456,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CloseHandle',
                                                                                      'MSVCRT.dll': 'fputs',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'USER32.dll': 'CharUpperW'},
                                                                      'ImportedFunctions': ['SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'CharUpperW',
                                                                                            '_controlfp',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__p___initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_except_handler3',
                                                                                            '_beginthreadex',
                                                                                            'memset',
                                                                                            'strlen',
                                                                                            'fputc',
                                                                                            'fflush',
                                                                                            'fgetc',
                                                                                            'fclose',
                                                                                            '_iob',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcscmp',
                                                                                            'wcsstr',
                                                                                            'strcmp',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            '_purecall',
                                                                                            'memcmp',
                                                                                            '__CxxFrameHandler',
                                                                                            '_CxxThrowException',
                                                                                            'fputs',
                                                                                            'InitializeCriticalSection',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'GetVersionExW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetStdHandle',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleA',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetLastError',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'MoveFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineW',
                                                                                            'SetFileApisToOEM',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleFileNameW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'CloseHandle'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 91,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 24064,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.sxdata\x00': 512,
                                                                                       '.text\x00\x00\x00': 142336},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/439ac0824e46703a11c9ba1b35bc8ec3129eacdbed219b7d440b1e079f757fed'},
 '445b913ebc4829d3bedb2dea89aa541fb4a03d055bf2dadea21b9125a57f5f10': {'AddressOfEntryPoint': 18720,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'msvcrt.dll': '_controlfp'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFullPathNameA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            '_vsnprintf',
                                                                                            'fputs',
                                                                                            '_iob',
                                                                                            'exit',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'fprintf',
                                                                                            'strchr',
                                                                                            '_stricmp',
                                                                                            'sprintf',
                                                                                            '_except_handler3',
                                                                                            'strtol',
                                                                                            'strncmp',
                                                                                            'atol',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_controlfp'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 51,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/445b913ebc4829d3bedb2dea89aa541fb4a03d055bf2dadea21b9125a57f5f10'},
 '44bcf8043bfc163d4ecd92d88a69fa29179e84ab0862f2333b6de39f7d3ed1d5': {'AddressOfEntryPoint': 45425,
                                                                      'DebugRVA': 53952,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetExitCodeProcess',
                                                                                      'MSVCR100.dll': '_mbscmp',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'ole32.dll': 'StringFromCLSID'},
                                                                      'ImportedFunctions': ['_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_ismbblead',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'getenv',
                                                                                            '_vsnprintf_s',
                                                                                            '_ftime64_s',
                                                                                            'strftime',
                                                                                            '_localtime64',
                                                                                            'fprintf_s',
                                                                                            '_dupenv_s',
                                                                                            'fopen_s',
                                                                                            '_wstat64i32',
                                                                                            'strcat_s',
                                                                                            'memcpy_s',
                                                                                            '_splitpath_s',
                                                                                            'strcpy_s',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'fopen',
                                                                                            'fgets',
                                                                                            'atoi',
                                                                                            'fclose',
                                                                                            'fseek',
                                                                                            'sprintf_s',
                                                                                            '_vsnprintf',
                                                                                            '_mbsnbicmp',
                                                                                            '_mbstok_s',
                                                                                            '_mbsrchr',
                                                                                            '_access',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            '_ismbcspace',
                                                                                            'memcpy',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            'sscanf',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_putenv',
                                                                                            'exit',
                                                                                            'sprintf',
                                                                                            'memmove',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '_CxxThrowException',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'realloc',
                                                                                            '_snprintf_s',
                                                                                            '_stat64i32',
                                                                                            '_snprintf',
                                                                                            '_time64',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '_mbslen',
                                                                                            '_mbsstr',
                                                                                            '_mbsnbcpy_s',
                                                                                            '_mbschr',
                                                                                            'strrchr',
                                                                                            'memset',
                                                                                            'calloc',
                                                                                            '_strdup',
                                                                                            '_mbsnbcmp',
                                                                                            '_mbsicmp',
                                                                                            '_fmode',
                                                                                            '_mbscmp',
                                                                                            'wsprintfA',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'RaiseException',
                                                                                            'GetModuleHandleExA',
                                                                                            'GetSystemWindowsDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringA',
                                                                                            'GetLocalTime',
                                                                                            'GetTempPathA',
                                                                                            'InterlockedDecrement',
                                                                                            'GetShortPathNameA',
                                                                                            'FormatMessageA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'GetNativeSystemInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoA',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalAlloc',
                                                                                            'Process32First',
                                                                                            'GetCurrentProcessId',
                                                                                            'Process32Next',
                                                                                            'CreateEventA',
                                                                                            'SetEvent',
                                                                                            'OpenProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Sleep',
                                                                                            'Module32First',
                                                                                            'GetLongPathNameA',
                                                                                            'CloseHandle',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LocalFree',
                                                                                            'GetVersionExA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrcpyA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindClose',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetLastError',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'DecodePointer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetExitCodeProcess'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 159,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2376,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 46592},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/44bcf8043bfc163d4ecd92d88a69fa29179e84ab0862f2333b6de39f7d3ed1d5'},
 '44e326c5f6c67cd3271c256ce4fdb16fca74256157f20b320811cc8d87c4ddf9': {'AddressOfEntryPoint': 62396,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94972,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 67152,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 67584,
                                                                                       '.text\x00\x00\x00': 57344,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/44e326c5f6c67cd3271c256ce4fdb16fca74256157f20b320811cc8d87c4ddf9'},
 '4606e69cd87382f2c6afcfc461b9a6517362d7d8eba05b4d024a93567e9fdc80': {'AddressOfEntryPoint': 5872,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess'},
                                                                      'ImportedFunctions': ['CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'MessageBoxW',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            'memset',
                                                                                            'NtQueryInformationProcess'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 36,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2408,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/4606e69cd87382f2c6afcfc461b9a6517362d7d8eba05b4d024a93567e9fdc80'},
 '46328a0146053b658c19f39a9cc4fa6f27fafbf3b408eff21a66ab2639b52444': {'AddressOfEntryPoint': 23552,
                                                                      'DebugRVA': 4464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'DNSAPI.dll': 'DnsQuery_A',
                                                                                      'KERNEL32.dll': 'GetComputerNameA',
                                                                                      'NETAPI32.dll': 'Netbios',
                                                                                      'RPCRT4.dll': 'RpcMgmtEpEltInqDone',
                                                                                      'WS2_32.dll': 'connect',
                                                                                      'msvcrt.dll': '_vsnprintf'},
                                                                      'ImportedFunctions': ['GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetComputerNameA',
                                                                                            'exit',
                                                                                            '_controlfp',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'tolower',
                                                                                            '_strlwr',
                                                                                            'isalpha',
                                                                                            'fopen',
                                                                                            '_getche',
                                                                                            'toupper',
                                                                                            'time',
                                                                                            'localtime',
                                                                                            'asctime',
                                                                                            '_stricmp',
                                                                                            '_itoa',
                                                                                            'isdigit',
                                                                                            'atoi',
                                                                                            'fprintf',
                                                                                            'fclose',
                                                                                            'printf',
                                                                                            '_vsnprintf',
                                                                                            'getservbyport',
                                                                                            'WSAStartup',
                                                                                            'gethostbyname',
                                                                                            'gethostbyaddr',
                                                                                            'WSACleanup',
                                                                                            'inet_addr',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'setsockopt',
                                                                                            'closesocket',
                                                                                            'htons',
                                                                                            'WSAGetLastError',
                                                                                            'socket',
                                                                                            'connect',
                                                                                            'RpcStringBindingComposeA',
                                                                                            'RpcBindingFromStringBindingA',
                                                                                            'RpcMgmtEpEltInqBegin',
                                                                                            'RpcMgmtEpEltInqNextA',
                                                                                            'UuidToStringA',
                                                                                            'RpcBindingToStringBindingA',
                                                                                            'RpcStringFreeA',
                                                                                            'RpcBindingFree',
                                                                                            'RpcMgmtEpEltInqDone',
                                                                                            'Netbios',
                                                                                            'DnsQuery_A'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 21504},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/46328a0146053b658c19f39a9cc4fa6f27fafbf3b408eff21a66ab2639b52444'},
 '46693d9b74d12454d117cc61ff2e9481cabb100b4d74eb5367d3cf88b89a0e71': {'AddressOfEntryPoint': 25692,
                                                                      'DebugRVA': 4656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'LockResource',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrlenA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpyA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetShortPathNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcmpiA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'FreeResource',
                                                                                            'GetProcAddress',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'lstrcatA',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'LoadLibraryExA',
                                                                                            'lstrcpynA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FormatMessageA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'TerminateThread',
                                                                                            'GetDriveTypeA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ReadFile',
                                                                                            'LoadLibraryA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'MulDiv',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'FreeLibrary',
                                                                                            'LockResource',
                                                                                            'GetDeviceCaps',
                                                                                            'ExitWindowsEx',
                                                                                            'wsprintfA',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'CharPrevA',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'CallWindowProcA',
                                                                                            'DispatchMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'SendMessageA',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetWindowRect',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBeep',
                                                                                            'SetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 23462260,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 23462400,
                                                                                       '.text\x00\x00\x00': 39424},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/46693d9b74d12454d117cc61ff2e9481cabb100b4d74eb5367d3cf88b89a0e71'},
 '468c2119d5886942fb2e419086124847cad7d49a457a74e250e974adc52d1925': {'AddressOfEntryPoint': 7280,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterEventSourceW',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'mscoree.dll': 'ClrCreateManagedInstance',
                                                                                      'msvcrt.dll': '_fmode',
                                                                                      'ole32.dll': 'CoInitializeSecurity'},
                                                                      'ImportedFunctions': ['DeregisterEventSource',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterEventSourceW',
                                                                                            'GetProcAddress',
                                                                                            'SetEvent',
                                                                                            'GetVersionExW',
                                                                                            'CreateEventW',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryExW',
                                                                                            'WaitForSingleObject',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'wcscpy_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '__C_specific_handler',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'wcscat_s',
                                                                                            '_fmode',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'LoadStringW',
                                                                                            'CorBindToRuntimeEx',
                                                                                            'LoadLibraryShim',
                                                                                            'ClrCreateManagedInstance'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/468c2119d5886942fb2e419086124847cad7d49a457a74e250e974adc52d1925'},
 '46b3537ac50fb5382443e98b1e962edca6f5d916efcb1af5182ea3ca45ba9b55': {'AddressOfEntryPoint': 19751,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'dbghelp.dll': 'GetTimestampForLoadedLibrary',
                                                                                      'msvcrt.dll': 'toupper'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'GetDriveTypeA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'exit',
                                                                                            'localtime',
                                                                                            'time',
                                                                                            'asctime',
                                                                                            'fprintf',
                                                                                            'fclose',
                                                                                            'atol',
                                                                                            '_getche',
                                                                                            'fopen',
                                                                                            '_chdir',
                                                                                            '_chdrive',
                                                                                            '_getdcwd',
                                                                                            '_getdrive',
                                                                                            'getenv',
                                                                                            '_strupr',
                                                                                            'fscanf',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            'printf',
                                                                                            'toupper',
                                                                                            'GetTimestampForLoadedLibrary'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 52,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 17408},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/46b3537ac50fb5382443e98b1e962edca6f5d916efcb1af5182ea3ca45ba9b55'},
 '46c2deb946de70ac2193e70e263fa6dc1839a44793344e57cf2dcb8effe9bb0e': {'AddressOfEntryPoint': 12707,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'ExitProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalUnlock',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 180824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 181248,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/46c2deb946de70ac2193e70e263fa6dc1839a44793344e57cf2dcb8effe9bb0e'},
 '47a333285ce7aad631389f1b3eb842e9056177faf5670fc923da636bf4eaed7d': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 817260,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 805306368,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1364,
                                                                      'SectionNames': {'.data\x00\x00\x00': 112640,
                                                                                       '.reloc\x00\x00': 33792,
                                                                                       '.text\x00\x00\x00': 670208,
                                                                                       '.xdata\x00\x00': 28160},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/47a333285ce7aad631389f1b3eb842e9056177faf5670fc923da636bf4eaed7d'},
 '47ae116740e08a6b163f8f1cc9edabaedf5460aa7ecc2d7012dbd9728ed450ae': {'AddressOfEntryPoint': 339184,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 413696,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigA',
                                                                                      'CRYPT32.dll': 'CertDeleteCertificateFromStore',
                                                                                      'DNSAPI.dll': 'DnsRecordTypeForName',
                                                                                      'DSPARSE.dll': 'DsMakeSpnW',
                                                                                      'KERNEL32.dll': 'UnmapViewOfFile',
                                                                                      'NETAPI32.dll': 'DsEnumerateDomainTrustsA',
                                                                                      'RPCRT4.dll': 'I_RpcGetExtendedError',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WS2_32.dll': 'htonl',
                                                                                      'msvcrt.dll': '?what@exception@@UEBAPEBDXZ',
                                                                                      'ncrypt.dll': 'NCryptDeleteKey',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsA',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'OpenSCManagerA',
                                                                                            'QueryServiceStatus',
                                                                                            'ChangeServiceConfigA',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'TraceMessage',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'RegCreateKeyExA',
                                                                                            'QueryServiceConfigA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapCreate',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileSize',
                                                                                            'CompareFileTime',
                                                                                            'CreateFileW',
                                                                                            'GetTickCount64',
                                                                                            'GetModuleHandleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseMutex',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalAlloc',
                                                                                            'GetComputerNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetLastError',
                                                                                            'GetTickCount',
                                                                                            'RaiseException',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'OutputDebugStringA',
                                                                                            'lstrcmpiW',
                                                                                            'HeapSetInformation',
                                                                                            'LoadLibraryA',
                                                                                            'GetComputerNameExW',
                                                                                            'GetProcAddress',
                                                                                            'GetStringTypeW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileType',
                                                                                            'LCMapStringW',
                                                                                            'SetLastError',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'FileTimeToSystemTime',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleMode',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'UnmapViewOfFile',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_callnewh',
                                                                                            'wcschr',
                                                                                            '_strupr_s',
                                                                                            '_vsnprintf_s',
                                                                                            'strcmp',
                                                                                            'atoi',
                                                                                            '_lock',
                                                                                            'isdigit',
                                                                                            'wcstoul',
                                                                                            'wcsnlen',
                                                                                            'strnlen',
                                                                                            'swscanf_s',
                                                                                            'localeconv',
                                                                                            'memchr',
                                                                                            'strcspn',
                                                                                            'memmove_s',
                                                                                            '_vsnwprintf',
                                                                                            'tolower',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            'strerror',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            '__uncaught_exception',
                                                                                            '___mb_cur_max_func',
                                                                                            '_errno',
                                                                                            '__pctype_func',
                                                                                            '___lc_handle_func',
                                                                                            '___lc_codepage_func',
                                                                                            'wcscmp',
                                                                                            'calloc',
                                                                                            '__crtLCMapStringW',
                                                                                            'abort',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'free',
                                                                                            '_wctime',
                                                                                            'sprintf_s',
                                                                                            '_itoa',
                                                                                            'memset',
                                                                                            '__RTDynamicCast',
                                                                                            'memcmp',
                                                                                            'malloc',
                                                                                            'fflush',
                                                                                            '_iob',
                                                                                            '_itow',
                                                                                            '_stricmp',
                                                                                            '_wcsicmp',
                                                                                            '_strnicmp',
                                                                                            'gmtime',
                                                                                            'strncmp',
                                                                                            '_wcslwr_s',
                                                                                            'printf',
                                                                                            'fprintf',
                                                                                            '_vsnprintf',
                                                                                            'asctime',
                                                                                            'fgetwc',
                                                                                            'toupper',
                                                                                            'time',
                                                                                            'setlocale',
                                                                                            'strtoul',
                                                                                            'getenv',
                                                                                            'memmove',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '_purecall',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'getservbyname',
                                                                                            'GetNameInfoW',
                                                                                            'htons',
                                                                                            'getservbyport',
                                                                                            'FreeAddrInfoW',
                                                                                            'WSACleanup',
                                                                                            'GetAddrInfoW',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            'getprotobynumber',
                                                                                            'inet_addr',
                                                                                            'getprotobyname',
                                                                                            'inet_ntoa',
                                                                                            'ntohl',
                                                                                            'ntohs',
                                                                                            'htonl',
                                                                                            'RtlDestroyHeap',
                                                                                            'RtlIpv6StringToAddressExA',
                                                                                            'RtlIpv6AddressToStringA',
                                                                                            'RtlIpv4StringToAddressA',
                                                                                            'RtlIpv6StringToAddressA',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'DsMakeSpnW',
                                                                                            'NetApiBufferFree',
                                                                                            'DsEnumerateDomainTrustsA',
                                                                                            'RpcErrorGetNextRecord',
                                                                                            'RpcBindingSetAuthInfoA',
                                                                                            'RpcMgmtSetComTimeout',
                                                                                            'RpcBindingSetAuthInfoExA',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingSetOption',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'NdrClientCall3',
                                                                                            'RpcErrorStartEnumeration',
                                                                                            'RpcErrorEndEnumeration',
                                                                                            'I_RpcGetExtendedError',
                                                                                            'DnsFree',
                                                                                            'DnsQuery_UTF8',
                                                                                            'DnsValidateName_W',
                                                                                            'DnsRecordStringForWritableType',
                                                                                            'DnsRecordTypeForName',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateGuid',
                                                                                            'LoadStringW',
                                                                                            'NCryptFreeObject',
                                                                                            'BCryptDestroyHash',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptCreateHash',
                                                                                            'BCryptHashData',
                                                                                            'BCryptFinishHash',
                                                                                            'NCryptSetProperty',
                                                                                            'NCryptOpenStorageProvider',
                                                                                            'NCryptGetProperty',
                                                                                            'NCryptFinalizeKey',
                                                                                            'NCryptExportKey',
                                                                                            'NCryptCreatePersistedKey',
                                                                                            'NCryptSignHash',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptVerifySignature',
                                                                                            'BCryptImportKeyPair',
                                                                                            'BCryptDestroyKey',
                                                                                            'NCryptDeleteKey',
                                                                                            'CertCloseStore',
                                                                                            'CryptEncodeObjectEx',
                                                                                            'CertStrToNameW',
                                                                                            'CertCreateSelfSignCertificate',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertSetCertificateContextProperty',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertAddCertificateContextToStore',
                                                                                            'CertCompareIntegerBlob',
                                                                                            'CertCompareCertificateName',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertOpenStore',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CertGetNameStringW',
                                                                                            'CertDeleteCertificateFromStore',
                                                                                            'PathAppendW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 254,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2128,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14336,
                                                                                       '.idata\x00\x00': 9216,
                                                                                       '.pdata\x00\x00': 10240,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 373248,
                                                                                       '.tls\x00\x00\x00\x00': 11264},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/47ae116740e08a6b163f8f1cc9edabaedf5460aa7ecc2d7012dbd9728ed450ae'},
 '47ddc47f579cdf2afcd1fe1fa1fa4241746775273cf82bff02388e20aec1554a': {'AddressOfEntryPoint': 14400,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RaiseException',
                                                                                      'SETUPAPI.dll': 'SetupOpenInfFileW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'drvstore.dll': 'DriverStoreGetObjectPropertyW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'newdev.dll': 'DiInstallDriverW',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['GetFullPathNameW',
                                                                                            'FindFirstFileW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'FindClose',
                                                                                            'GetSystemInfo',
                                                                                            'FindNextFileW',
                                                                                            'LocalFree',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'RaiseException',
                                                                                            'wcschr',
                                                                                            'wcsrchr',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_resetstkoflw',
                                                                                            'memset',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'LoadStringW',
                                                                                            'SetupUninstallOEMInfW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupDiGetClassDescriptionExW',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupEnumPublishedInfW',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupVerifyInfFileW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'DriverStoreOpenW',
                                                                                            'DriverStoreClose',
                                                                                            'DriverStoreGetObjectPropertyW',
                                                                                            'DiInstallDriverW',
                                                                                            'CLSIDFromString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/47ddc47f579cdf2afcd1fe1fa1fa4241746775273cf82bff02388e20aec1554a'},
 '48331be81db4474aa078c976b4635737b87f10974b11832fbdcc387bb6869fc8': {'AddressOfEntryPoint': 581966,
                                                                      'DebugRVA': 581728,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4872,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 573952},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/48331be81db4474aa078c976b4635737b87f10974b11832fbdcc387bb6869fc8'},
 '483bbaf89f4afc406a7b9ca9459be1b87b2bcdb11447090382120e5a60b24820': {'AddressOfEntryPoint': 4564,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CreateDirectoryW',
                                                                                      'SETUPAPI.dll': 'SetupIterateCabinetW',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['SetupIterateCabinetW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxW',
                                                                                            'SizeofResource',
                                                                                            'GetLastError',
                                                                                            'DeleteFileW',
                                                                                            'LoadResource',
                                                                                            'GetModuleFileNameW',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'LockResource',
                                                                                            'FindResourceW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetModuleHandleW',
                                                                                            'VerSetConditionMask',
                                                                                            'lstrcpyW',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryA',
                                                                                            'GetTempPathW',
                                                                                            'CreateDirectoryW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 286796,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 287232,
                                                                                       '.text\x00\x00\x00': 2048},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/483bbaf89f4afc406a7b9ca9459be1b87b2bcdb11447090382120e5a60b24820'},
 '484b2f751a965339025a2ae832c0475d9af2ba9e3ddc1835ba18d5cd08059f96': {'AddressOfEntryPoint': 62624,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'CFGMGR32.dll': 'DevFreeObjectProperties',
                                                                                      'KERNEL32.dll': 'CreateFileW',
                                                                                      'NETAPI32.dll': 'NetShareDelEx',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SETUPAPI.dll': 'SetupDiOpenDeviceInterfaceW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'StrToIntExW',
                                                                                      'USER32.dll': 'DefWindowProcW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtQueryObject',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['AllocateAndInitializeSid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'FreeSid',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexExW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ResetEvent',
                                                                                            'ReleaseMutex',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'CreateEventExW',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstVolumeW',
                                                                                            'SetLastError',
                                                                                            'FindVolumeMountPointClose',
                                                                                            'GetProcAddress',
                                                                                            'FindNextVolumeMountPointW',
                                                                                            'FindNextVolumeW',
                                                                                            'FindVolumeClose',
                                                                                            'DefineDosDeviceW',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'DeleteVolumeMountPointW',
                                                                                            'SetVolumeMountPointW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'SetFilePointerEx',
                                                                                            'GetExitCodeThread',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'PeekNamedPipe',
                                                                                            'GetProcessId',
                                                                                            'GetProcessIdOfThread',
                                                                                            'GetCommandLineW',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'DuplicateHandle',
                                                                                            'HeapReAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'SetVolumeLabelW',
                                                                                            'SleepEx',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'LocalSize',
                                                                                            'CancelIo',
                                                                                            'GetOverlappedResult',
                                                                                            'LocalAlloc',
                                                                                            'DeviceIoControl',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'GetLastError',
                                                                                            'FindFirstVolumeMountPointW',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CreateMutexW',
                                                                                            'CreateFileW',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassExW',
                                                                                            'DestroyWindow',
                                                                                            'GetMessageW',
                                                                                            'PeekMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '__setusermatherr',
                                                                                            '_vsnwprintf',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            'memset',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtQueryObject',
                                                                                            'CoInitializeSecurity',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'StrCmpNIW',
                                                                                            'StrToIntExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SetupDiCreateDeviceInfoListExA',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiGetClassDevsExA',
                                                                                            'SetupDiDeleteDeviceInterfaceData',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDevicePropertyW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiGetClassPropertyW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiDeleteDeviceInfo',
                                                                                            'SetupDiCreateDeviceInfoListExW',
                                                                                            'SetupDiOpenDeviceInterfaceW',
                                                                                            'DevGetObjectProperties',
                                                                                            'DevFreeObjectProperties',
                                                                                            'NetShareEnum',
                                                                                            'NetApiBufferFree',
                                                                                            'NetShareDelEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 28776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 29184,
                                                                                       '.text\x00\x00\x00': 64512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/484b2f751a965339025a2ae832c0475d9af2ba9e3ddc1835ba18d5cd08059f96'},
 '4859684e359b34a60f11ee19532df88abfc16b151581951d263f72e070e83ac4': {'AddressOfEntryPoint': 261408,
                                                                      'DebugRVA': 7184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ReadEventLogW',
                                                                                      'CLUSAPI.dll': 'ClusterCloseEnum',
                                                                                      'CRYPT32.dll': 'CryptProtectData',
                                                                                      'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'MPR.dll': 'WNetGetUniversalNameW',
                                                                                      'MSVCR100.dll': 'wscanf_s',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'PSAPI.DLL': 'EnumProcesses',
                                                                                      'RESUTILS.dll': 'ResUtilFindSzProperty',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'EnumWindows',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'dbghelp.dll': 'SymCleanup',
                                                                                      'ole32.dll': 'OleRun',
                                                                                      'pdh.dll': 'PdhConnectMachineW'},
                                                                      'ImportedFunctions': ['GetUserNameW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'IsTextUnicode',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetSecurityInfo',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'SetServiceStatus',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CheckTokenMembership',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSaveKeyW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'CreateServiceW',
                                                                                            'DeleteService',
                                                                                            'LockServiceDatabase',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatusEx',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'StartServiceW',
                                                                                            'UnlockServiceDatabase',
                                                                                            'CloseEventLog',
                                                                                            'GetNumberOfEventLogRecords',
                                                                                            'GetOldestEventLogRecord',
                                                                                            'OpenEventLogW',
                                                                                            'ReadEventLogW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetComputerNameW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'LocalFree',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocalTime',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'WriteConsoleW',
                                                                                            'VerSetConditionMask',
                                                                                            'FreeLibrary',
                                                                                            'GlobalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetThreadPriority',
                                                                                            'TerminateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateIoCompletionPort',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SetErrorMode',
                                                                                            'QueueUserAPC',
                                                                                            'InitializeCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'ReleaseSemaphore',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'DuplicateHandle',
                                                                                            'GetSystemInfo',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'ConnectNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'CreateSemaphoreW',
                                                                                            'CreateWaitableTimerW',
                                                                                            'SetWaitableTimer',
                                                                                            'LoadLibraryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileW',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetVersionExW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleTitleW',
                                                                                            'SetConsoleTitleW',
                                                                                            'LockResource',
                                                                                            'OpenProcess',
                                                                                            'TerminateProcess',
                                                                                            'SetLastError',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateProcessW',
                                                                                            'FindResourceW',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetOverlappedResult',
                                                                                            'LoadLibraryExW',
                                                                                            'OutputDebugStringW',
                                                                                            'SleepEx',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'CloseHandle',
                                                                                            'lstrlenA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'FindClose',
                                                                                            'GetFileInformationByHandle',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_configthreadlocale',
                                                                                            '_CxxThrowException',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_mktime64',
                                                                                            '_localtime64_s',
                                                                                            '_wcsnicmp',
                                                                                            '_local_unwind',
                                                                                            '__C_specific_handler',
                                                                                            'memmove',
                                                                                            '_beginthreadex',
                                                                                            '_time64',
                                                                                            '_localtime64',
                                                                                            'wcstoul',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            'wcsncpy_s',
                                                                                            'free',
                                                                                            '__CxxFrameHandler3',
                                                                                            'strncat_s',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            'remove',
                                                                                            '_snprintf_s',
                                                                                            '_errno',
                                                                                            '_close',
                                                                                            '_lseek',
                                                                                            '_read',
                                                                                            '_write',
                                                                                            '?_open@@YAHPEBDHH@Z',
                                                                                            '_unlock',
                                                                                            'memset',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            '_purecall',
                                                                                            '_wtoi',
                                                                                            '_wtol',
                                                                                            '_snwprintf_s',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '__iob_func',
                                                                                            'wprintf',
                                                                                            'fflush',
                                                                                            'iswlower',
                                                                                            'iswdigit',
                                                                                            'towupper',
                                                                                            'memcpy_s',
                                                                                            'strstr',
                                                                                            'wcsncat_s',
                                                                                            '_getwch',
                                                                                            '_getwche',
                                                                                            '_vsnwprintf',
                                                                                            'wscanf_s',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'ClusterResourceControl',
                                                                                            'CloseClusterResource',
                                                                                            'OpenClusterResource',
                                                                                            'GetNodeClusterState',
                                                                                            'ClusterEnum',
                                                                                            'ClusterOpenEnum',
                                                                                            'CloseCluster',
                                                                                            'OpenCluster',
                                                                                            'ClusterCloseEnum',
                                                                                            'ResUtilFindSzProperty',
                                                                                            'WNetGetUniversalNameW',
                                                                                            'EnumProcesses',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SendMessageTimeoutW',
                                                                                            'EnumWindows',
                                                                                            'CommandLineToArgvW',
                                                                                            'FindExecutableW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'OleRun',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'GetErrorInfo',
                                                                                            'PdhAddCounterW',
                                                                                            'PdhOpenQueryW',
                                                                                            'PdhUpdateLogW',
                                                                                            'PdhGetLogFileSize',
                                                                                            'PdhCollectQueryDataEx',
                                                                                            'PdhCloseLog',
                                                                                            'PdhOpenLogW',
                                                                                            'PdhConnectMachineW',
                                                                                            'NetServerEnum',
                                                                                            'NetApiBufferFree',
                                                                                            'CryptUnprotectData',
                                                                                            'CryptProtectData',
                                                                                            'SymInitialize',
                                                                                            'SymCleanup',
                                                                                            'GetUserNameExW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 277,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 877424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 877568,
                                                                                       '.text\x00\x00\x00': 400384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4859684e359b34a60f11ee19532df88abfc16b151581951d263f72e070e83ac4'},
 '4878c77955611f9641100aae97867c5d3bd4183aa8ddf4b45ca453990f5f51fa': {'AddressOfEntryPoint': 18112,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGetHashParam',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR120_CLR0400.dll': 'memset'},
                                                                      'ImportedFunctions': ['CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'SetErrorMode',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFileEx',
                                                                                            'CloseHandle',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'GetVersion',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'EncodePointer',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FindFirstFileW',
                                                                                            'UnmapViewOfFile',
                                                                                            'HeapAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetLastError',
                                                                                            'FindClose',
                                                                                            'DecodePointer',
                                                                                            'FindNextFileW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            '_wmakepath_s',
                                                                                            '_wfullpath',
                                                                                            '_tzset',
                                                                                            '_time64',
                                                                                            'calloc',
                                                                                            '_wfsopen',
                                                                                            '_get_osfhandle',
                                                                                            '_fileno',
                                                                                            'fread',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            '_fcloseall',
                                                                                            '_wremove',
                                                                                            '__iob_func',
                                                                                            '_wsplitpath_s',
                                                                                            'fputwc',
                                                                                            '_cputws',
                                                                                            'fputws',
                                                                                            '_vcwprintf',
                                                                                            'vfwprintf',
                                                                                            'wcsncpy_s',
                                                                                            'sprintf_s',
                                                                                            'wcstoul',
                                                                                            '_wpgmptr',
                                                                                            'free',
                                                                                            '_wgetcwd',
                                                                                            '_ultow_s',
                                                                                            '_chsize',
                                                                                            '_itow_s',
                                                                                            'swscanf_s',
                                                                                            'memcpy_s',
                                                                                            'wcsncat_s',
                                                                                            'wcscpy_s',
                                                                                            'fclose',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_crt_debugger_hook',
                                                                                            '__crtUnhandledException',
                                                                                            '__crtTerminateProcess',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '_calloc_crt',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_except_handler4_common',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            'setlocale',
                                                                                            'exit',
                                                                                            'memmove',
                                                                                            '_putwch',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 108,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4076,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4878c77955611f9641100aae97867c5d3bd4183aa8ddf4b45ca453990f5f51fa'},
 '48985b22a895154cc44f9eb77489cfdf54fa54506e8ecaef492fe30f40d27e90': {'AddressOfEntryPoint': 40736,
                                                                      'DebugRVA': 152488,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 270336,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'SetConsoleTextAttribute',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetTimeFormatW',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetErrorMode',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'GetFileInformationByHandleEx',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'GlobalAlloc',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'CopyFileW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetACP',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'ReadProcessMemory',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'DeleteProcThreadAttributeList',
                                                                                      'api-ms-win-core-processtopology-l1-2-0.dll': 'GetThreadGroupAffinity',
                                                                                      'api-ms-win-core-processtopology-obsolete-l1-1-0.dll': 'SetProcessAffinityMask',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetWindowsDirectoryW',
                                                                                      'api-ms-win-core-systemtopology-l1-1-0.dll': 'GetNumaHighestNodeNumber',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'SystemTimeToFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetFileSecurityW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCreateUnicodeStringFromAsciiz'},
                                                                      'ImportedFunctions': ['calloc',
                                                                                            'free',
                                                                                            '_wcslwr',
                                                                                            'qsort',
                                                                                            '_dup2',
                                                                                            '_dup',
                                                                                            '_close',
                                                                                            '_open_osfhandle',
                                                                                            'swscanf',
                                                                                            '_pipe',
                                                                                            'wcsncmp',
                                                                                            '_setmode',
                                                                                            'exit',
                                                                                            'iswxdigit',
                                                                                            'time',
                                                                                            'srand',
                                                                                            '_wtol',
                                                                                            'fflush',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'wcsstr',
                                                                                            'iswalpha',
                                                                                            'wcstoul',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            'rand',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'wcsrchr',
                                                                                            'realloc',
                                                                                            'towlower',
                                                                                            'setlocale',
                                                                                            'memcpy',
                                                                                            '_wcsupr',
                                                                                            'memcmp',
                                                                                            '_setjmp3',
                                                                                            'iswdigit',
                                                                                            '_wcsicmp',
                                                                                            'iswspace',
                                                                                            'wcschr',
                                                                                            'memmove',
                                                                                            'fgets',
                                                                                            '_pclose',
                                                                                            '_local_unwind4',
                                                                                            'ferror',
                                                                                            'feof',
                                                                                            '_wpopen',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_except_handler4_common',
                                                                                            '_wcsnicmp',
                                                                                            '_controlfp',
                                                                                            '_vsnwprintf',
                                                                                            '_cexit',
                                                                                            'wcstol',
                                                                                            '_get_osfhandle',
                                                                                            '_errno',
                                                                                            'longjmp',
                                                                                            '__p__fmode',
                                                                                            '_initterm',
                                                                                            '_getch',
                                                                                            'towupper',
                                                                                            'wcsspn',
                                                                                            'printf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_tell',
                                                                                            '_ultoa',
                                                                                            'memset',
                                                                                            'RtlFreeHeap',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtFsControlFile',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlFindLeastSignificantBit',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlReleaseRelativeName',
                                                                                            'NtOpenFile',
                                                                                            'RtlDosPathNameToRelativeNtPathName_U_WithStatus',
                                                                                            'NtSetInformationFile',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtCancelSynchronousIoFile',
                                                                                            'RtlCreateUnicodeStringFromAsciiz',
                                                                                            'CopyFileW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'VirtualFree',
                                                                                            'ReadProcessMemory',
                                                                                            'SetThreadLocale',
                                                                                            'GetCPInfo',
                                                                                            'FormatMessageW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetThreadLocale',
                                                                                            'GetACP',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ReadConsoleW',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindFirstFileExW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetFileSize',
                                                                                            'SetFileTime',
                                                                                            'DeleteFileW',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileType',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ReadFile',
                                                                                            'GetVolumeInformationW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'GetFullPathNameW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateFileW',
                                                                                            'CompareFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetFileAttributesExW',
                                                                                            'WriteFile',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'SetErrorMode',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'NeedCurrentDirectoryForExePathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SearchPathW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FillConsoleOutputCharacterW',
                                                                                            'GetConsoleTitleW',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'ScrollConsoleScreenBufferW',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'SetConsoleTitleW',
                                                                                            'FillConsoleOutputAttribute',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'RevertToSelf',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetFileSecurityW',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'EnterCriticalSection',
                                                                                            'TryAcquireSRWLockExclusive',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockShared',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetVersion',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTime',
                                                                                            'SetLocalTime',
                                                                                            'GetLocalTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetNumaNodeProcessorMaskEx',
                                                                                            'GetNumaHighestNodeNumber',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenThread',
                                                                                            'ResumeThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'GetCurrentProcessId',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'CreateHardLinkW',
                                                                                            'CreateSymbolicLinkW',
                                                                                            'MoveFileWithProgressW',
                                                                                            'MoveFileExW',
                                                                                            'GetFileInformationByHandleEx',
                                                                                            'DeviceIoControl',
                                                                                            'GetThreadGroupAffinity',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpW',
                                                                                            'lstrcmpiW',
                                                                                            'GlobalFree',
                                                                                            'LocalFree',
                                                                                            'GlobalAlloc',
                                                                                            'SetProcessAffinityMask',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 31,
                                                                      'NumberOfImportFunctions': 237,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 33872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 113664,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 34304,
                                                                                       '.text\x00\x00\x00': 148992},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/48985b22a895154cc44f9eb77489cfdf54fa54506e8ecaef492fe30f40d27e90'},
 '48b43418d70943cff4a78ec8ecf5b59c2d34208c263c6b1cf131d6329a745ecc': {'AddressOfEntryPoint': 5780,
                                                                      'DebugRVA': 5408,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'SetProcessWorkingSetSize',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'SystemFunction036',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'LocalFree',
                                                                                            'lstrcmpiW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateFileW',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'ReadFile',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetVolumePathNameW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'EnumResourceNamesW',
                                                                                            'LocalAlloc',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'CommandLineToArgvW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 43654616,
                                                                      'SectionNames': {'.data\x00\x00\x00': 0,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 43654656,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/48b43418d70943cff4a78ec8ecf5b59c2d34208c263c6b1cf131d6329a745ecc'},
 '48fa68f3e77eb91e1347f02bf464bb84542275141921f22132fd614ee7d5436d': {'AddressOfEntryPoint': 46768,
                                                                      'DebugRVA': 19792,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'HeapAlloc',
                                                                                      'SymbolCheck.dll': '_SymbolCheckByFilenameExA@20',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'dbgeng.dll': 'DebugCreate',
                                                                                      'dbghelp.dll': 'MakeSureDirectoryPathExists',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'CreateFileA',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesExA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WriteFile',
                                                                                            'GetFileAttributesA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'CopyFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindNextFileA',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetTempPathA',
                                                                                            'DeleteFileA',
                                                                                            'GetFullPathNameA',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'OpenProcess',
                                                                                            'SetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'ReadFile',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'CreateFileMappingA',
                                                                                            'FlushViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileSize',
                                                                                            'SetFileAttributesA',
                                                                                            'FindFirstFileExA',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'HeapAlloc',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'tolower',
                                                                                            'atoi',
                                                                                            '__p__fmode',
                                                                                            'time',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'isdigit',
                                                                                            'strrchr',
                                                                                            '_vsnprintf',
                                                                                            'fopen',
                                                                                            'fgets',
                                                                                            'strstr',
                                                                                            'isspace',
                                                                                            'strncmp',
                                                                                            '_stricmp',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'realloc',
                                                                                            'fprintf',
                                                                                            'printf',
                                                                                            'strchr',
                                                                                            'strtok_s',
                                                                                            '_msize',
                                                                                            'malloc',
                                                                                            '__iob_func',
                                                                                            'rand',
                                                                                            'srand',
                                                                                            'fseek',
                                                                                            'getenv',
                                                                                            '_splitpath_s',
                                                                                            'puts',
                                                                                            'free',
                                                                                            '_XcptFilter',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'SymSrvGetFileIndexString',
                                                                                            'SymSrvGetFileIndexInfo',
                                                                                            'SymSetSearchPath',
                                                                                            'SymInitialize',
                                                                                            'SymCleanup',
                                                                                            'SymRegisterCallback64',
                                                                                            'SymSetOptions',
                                                                                            'SymFindFileInPath',
                                                                                            'MakeSureDirectoryPathExists',
                                                                                            'DebugCreate',
                                                                                            '_SymbolCheckResultA@16',
                                                                                            '_SymbolCheckByFilenameExA@20',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 116,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 45056},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/48fa68f3e77eb91e1347f02bf464bb84542275141921f22132fd614ee7d5436d'},
 '4931c588348442831826aeb9d14b65e40f3bf4d018778cff3132742117ad7d4c': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 716444,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 805306368,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1368,
                                                                      'SectionNames': {'.data\x00\x00\x00': 42496,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.text\x00\x00\x00': 655872,
                                                                                       '.xdata\x00\x00': 11776},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/4931c588348442831826aeb9d14b65e40f3bf4d018778cff3132742117ad7d4c'},
 '4962ece5176ace02dea2b8d0a61321c0595b9d0970bd56cb04192c422bbf77cc': {'AddressOfEntryPoint': 18780,
                                                                      'DebugRVA': 4384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'msvcrt.dll': '_controlfp'},
                                                                      'ImportedFunctions': ['FileTimeToDosDateTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'CloseHandle',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetLastError',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'printf',
                                                                                            'toupper',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'isdigit',
                                                                                            'atoi',
                                                                                            'exit',
                                                                                            '_vsnprintf',
                                                                                            'strrchr',
                                                                                            'free',
                                                                                            '_tempnam',
                                                                                            'strchr',
                                                                                            'rand',
                                                                                            'srand',
                                                                                            'time',
                                                                                            'strncpy',
                                                                                            'memmove',
                                                                                            '_getch',
                                                                                            'isspace',
                                                                                            'fclose',
                                                                                            'fgets',
                                                                                            'fopen',
                                                                                            'malloc',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 62464},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/4962ece5176ace02dea2b8d0a61321c0595b9d0970bd56cb04192c422bbf77cc'},
 '496fa6bf30f3205fb2232a1706d6de91b3a5e27cd2c2cccb70b7a3a0e29c091b': {'AddressOfEntryPoint': 88160,
                                                                      'DebugRVA': 97448,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49600,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'ImageList_Remove',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'DelayLoadFailureHook',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconGetRect',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'KillTimer',
                                                                                      'UxTheme.dll': 'IsThemeBackgroundPartiallyTransparent',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegSetValueExW',
                                                                                      'dwmapi.dll': 'DwmRegisterThumbnail',
                                                                                      'gdiplus.dll': 'GdipCreateLineBrush',
                                                                                      'msvcrt.dll': '_exit',
                                                                                      'ntdll.dll': 'EtwGetTraceEnableFlags',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['GetObjectW',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDeviceCaps',
                                                                                            'Rectangle',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteDC',
                                                                                            'PathToRegion',
                                                                                            'EndPath',
                                                                                            'BitBlt',
                                                                                            'Polygon',
                                                                                            'GetStockObject',
                                                                                            'SetBkMode',
                                                                                            'CreatePen',
                                                                                            'BeginPath',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'ScriptStringAnalyse',
                                                                                            'ScriptString_pLogAttr',
                                                                                            'ScriptStringFree',
                                                                                            'DeleteObject',
                                                                                            'ValidateRect',
                                                                                            'FrameRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromRect',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetRectEmpty',
                                                                                            'SetCursor',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'DrawFocusRect',
                                                                                            'GetFocus',
                                                                                            'OffsetRect',
                                                                                            'IsWindowEnabled',
                                                                                            'LoadImageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'ClientToScreen',
                                                                                            'EqualRect',
                                                                                            'SetForegroundWindow',
                                                                                            'PostMessageW',
                                                                                            'BringWindowToTop',
                                                                                            'SetProcessDPIAware',
                                                                                            'SetProcessDefaultLayout',
                                                                                            'GetActiveWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'RegisterClassExW',
                                                                                            'GetClassInfoExW',
                                                                                            'PrivateExtractIconsW',
                                                                                            'FindWindowW',
                                                                                            'LoadCursorW',
                                                                                            'DestroyWindow',
                                                                                            'SendMessageW',
                                                                                            'InvalidateRect',
                                                                                            'GetSysColor',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'GetClientRect',
                                                                                            'MapWindowPoints',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowRect',
                                                                                            'SetFocus',
                                                                                            'CallWindowProcW',
                                                                                            'DefWindowProcW',
                                                                                            'LoadStringW',
                                                                                            'SetWindowTextW',
                                                                                            'GetSysColorBrush',
                                                                                            'FillRect',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowRgn',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'IntersectRect',
                                                                                            'CreateDialogParamW',
                                                                                            'PostQuitMessage',
                                                                                            'GetDlgCtrlID',
                                                                                            'SubtractRect',
                                                                                            'PtInRect',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SendNotifyMessageW',
                                                                                            'LoadIconW',
                                                                                            'SetTimer',
                                                                                            'NotifyWinEvent',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetDC',
                                                                                            'DrawTextW',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'DestroyMenu',
                                                                                            'CreateWindowExW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowBand',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'UnregisterClassA',
                                                                                            'InflateRect',
                                                                                            'GetSystemMetrics',
                                                                                            'CreatePopupMenu',
                                                                                            'InsertMenuItemW',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemCount',
                                                                                            'TrackPopupMenuEx',
                                                                                            'DrawEdge',
                                                                                            'SetClassLongW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetClassLongW',
                                                                                            'EnumWindows',
                                                                                            'IsWindowVisible',
                                                                                            'GetWindow',
                                                                                            'InternalGetWindowText',
                                                                                            'GetIconInfoExW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollPos',
                                                                                            'GetDoubleClickTime',
                                                                                            'GetParent',
                                                                                            'CopyRect',
                                                                                            'CheckDlgButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SetRect',
                                                                                            'EndDialog',
                                                                                            'EnableWindow',
                                                                                            'EnumChildWindows',
                                                                                            'DestroyIcon',
                                                                                            'CalculatePopupWindowPosition',
                                                                                            'KillTimer',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_ftol2',
                                                                                            '_ftol2_sse',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '_CxxThrowException',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            'memset',
                                                                                            '_isnan',
                                                                                            'calloc',
                                                                                            '_purecall',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'iswspace',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_resetstkoflw',
                                                                                            'vswprintf_s',
                                                                                            '_vscwprintf',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '_vsnwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'swprintf_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcstol',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '__wgetmainargs',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegGetValueW',
                                                                                            'RegSetValueExW',
                                                                                            'ImageList_SetBkColor',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_Remove',
                                                                                            'PropVariantClear',
                                                                                            'CoCreateGuid',
                                                                                            'CoAllowSetForegroundWindow',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFileInfoW',
                                                                                            'CommandLineToArgvW',
                                                                                            'Shell_NotifyIconGetRect',
                                                                                            'GdipCreatePath',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDrawLine',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeletePath',
                                                                                            'GdipAddPathLine',
                                                                                            'GdipFillPath',
                                                                                            'GdipFillRectangle',
                                                                                            'GdipCreateLineBrush',
                                                                                            'EtwEventWrite',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwEventRegister',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'GetThemeColor',
                                                                                            'DrawThemeParentBackground',
                                                                                            'GetThemeSysColor',
                                                                                            'DrawThemeParentBackgroundEx',
                                                                                            'GetThemeTextExtent',
                                                                                            'SetWindowTheme',
                                                                                            'IsThemeActive',
                                                                                            'CloseThemeData',
                                                                                            'DrawThemeText',
                                                                                            'DrawThemeBackground',
                                                                                            'OpenThemeData',
                                                                                            'BufferedPaintUnInit',
                                                                                            'BufferedPaintInit',
                                                                                            'BeginBufferedPaint',
                                                                                            'BufferedPaintSetAlpha',
                                                                                            'EndBufferedPaint',
                                                                                            'DrawThemeTextEx',
                                                                                            'IsThemeBackgroundPartiallyTransparent',
                                                                                            'DwmUnregisterThumbnail',
                                                                                            'DwmUpdateThumbnailProperties',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'DwmIsCompositionEnabled',
                                                                                            'DwmQueryThumbnailSourceSize',
                                                                                            'DwmRegisterThumbnail',
                                                                                            'PathFindFileNameW',
                                                                                            'PathParseIconLocationW',
                                                                                            'StrTrimW',
                                                                                            'PathFindExtensionW',
                                                                                            'ImmDisableIME',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'LoadLibraryExA',
                                                                                            'DecodePointer',
                                                                                            'VirtualAlloc',
                                                                                            'GetProcAddress',
                                                                                            'FlushInstructionCache',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualFree',
                                                                                            'GetCurrentProcess',
                                                                                            'EncodePointer',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'OpenProcess',
                                                                                            'QueueUserWorkItem',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'SetThreadPriority',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'GlobalFree',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateMutexW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapDestroy',
                                                                                            'GetLocaleInfoEx',
                                                                                            'MulDiv',
                                                                                            'LoadLibraryExW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FreeResource',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 329,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 66880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 9216,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 7168,
                                                                                       '.rsrc\x00\x00\x00': 67072,
                                                                                       '.text\x00\x00\x00': 93696},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/496fa6bf30f3205fb2232a1706d6de91b3a5e27cd2c2cccb70b7a3a0e29c091b'},
 '499010e852571b6bbfe8e7a6b9f396283efffac99fd844d2ca390e61aee2ce8f': {'AddressOfEntryPoint': 75326,
                                                                      'DebugRVA': 75108,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2120,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 69632},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/499010e852571b6bbfe8e7a6b9f396283efffac99fd844d2ca390e61aee2ce8f'},
 '49e6e7f0fdd9bd16e30d827ac421bd9afd5dd281577a9b08e8a0c3f91bad62a1': {'AddressOfEntryPoint': 39716,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 36484,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 36864,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/49e6e7f0fdd9bd16e30d827ac421bd9afd5dd281577a9b08e8a0c3f91bad62a1'},
 '4a222e7ee0513f62594e490bc2eb448427b3660ef7178defb0db30935bcc42d6': {'AddressOfEntryPoint': 582542,
                                                                      'DebugRVA': 829040,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 1436224,
                                                                      'ExportSize': 29036,
                                                                      'IATRVA': 827392,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateChain',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'CreateFileW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'UxTheme.dll': 'GetThemeFont',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINHTTP.dll': 'WinHttpQueryDataAvailable',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'gdiplus.dll': 'GdipDeleteGraphics',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['MulDiv',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetCommandLineW',
                                                                                            'LocalFree',
                                                                                            'GetLocalTime',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileAttributesW',
                                                                                            'MoveFileW',
                                                                                            'GetComputerNameW',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'GetTempPathW',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'FormatMessageW',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'OpenProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetACP',
                                                                                            'MultiByteToWideChar',
                                                                                            'FlushInstructionCache',
                                                                                            'GlobalReAlloc',
                                                                                            'SetLastError',
                                                                                            'RaiseException',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'ReleaseMutex',
                                                                                            'GetExitCodeThread',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'FindResourceExW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'RemoveDirectoryW',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryExW',
                                                                                            'Sleep',
                                                                                            'lstrcmpW',
                                                                                            'FormatMessageA',
                                                                                            'AreFileApisANSI',
                                                                                            'CompareStringW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetLocaleInfoW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetModuleHandleA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetStringTypeA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'ExitProcess',
                                                                                            'HeapCreate',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'CompareStringA',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetStringTypeW',
                                                                                            'RtlUnwind',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCPInfo',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeExW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'InterlockedCompareExchange',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateMutexW',
                                                                                            'MoveFileExW',
                                                                                            'DeleteFileW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersionExW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleFileNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'GetFileSize',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'CreateFileW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'RedrawWindow',
                                                                                            'FillRect',
                                                                                            'IsChild',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendMessageW',
                                                                                            'OffsetRect',
                                                                                            'BeginPaint',
                                                                                            'ReleaseDC',
                                                                                            'GetParent',
                                                                                            'GetClassNameW',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'InvalidateRgn',
                                                                                            'DrawTextW',
                                                                                            'GetWindowLongW',
                                                                                            'GetClientRect',
                                                                                            'IsWindow',
                                                                                            'UnregisterClassA',
                                                                                            'GetFocus',
                                                                                            'GetSysColor',
                                                                                            'IsWindowEnabled',
                                                                                            'PtInRect',
                                                                                            'SetCapture',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'UnionRect',
                                                                                            'InvalidateRect',
                                                                                            'DefWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'CallWindowProcW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'LoadStringW',
                                                                                            'EndPaint',
                                                                                            'IsDialogMessageW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'GetDesktopWindow',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'PeekMessageW',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'PostQuitMessage',
                                                                                            'MessageBoxW',
                                                                                            'MoveWindow',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'SetFocus',
                                                                                            'PostMessageW',
                                                                                            'ShowWindow',
                                                                                            'MapDialogRect',
                                                                                            'CreateWindowExW',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'EnableWindow',
                                                                                            'GetCursor',
                                                                                            'GetCursorPos',
                                                                                            'GetCapture',
                                                                                            'SetCursor',
                                                                                            'ReleaseCapture',
                                                                                            'DestroyCursor',
                                                                                            'LoadCursorW',
                                                                                            'SystemParametersInfoW',
                                                                                            'BringWindowToTop',
                                                                                            'AttachThreadInput',
                                                                                            'GetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'SetViewportOrgEx',
                                                                                            'DeleteDC',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteObject',
                                                                                            'BitBlt',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'GetCurrentObject',
                                                                                            'SetWindowOrgEx',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoGetClassObject',
                                                                                            'OleLockRunning',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'SysAllocStringLen',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VarUI4FromStr',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFileExistsW',
                                                                                            'InitCommonControlsEx',
                                                                                            'GetThemeColor',
                                                                                            'OpenThemeData',
                                                                                            'GetThemeFont',
                                                                                            'GetModuleFileNameExW',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdiplusStartup',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdipLoadImageFromStream',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipDeleteGraphics',
                                                                                            'UuidCreate',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'CertGetCertificateChain',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertNameToStrW',
                                                                                            'CryptProtectData',
                                                                                            'CertCreateCertificateChainEngine',
                                                                                            'CertFreeCertificateChainEngine',
                                                                                            'CertFreeCertificateChain',
                                                                                            'WinVerifyTrust',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpSetOption',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpCrackUrl',
                                                                                            'WinHttpQueryOption',
                                                                                            'WinHttpSetStatusCallback',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpQueryDataAvailable'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 322,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 73080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 32768,
                                                                                       '.rdata\x00\x00': 637952,
                                                                                       '.reloc\x00\x00': 73728,
                                                                                       '.rsrc\x00\x00\x00': 73216,
                                                                                       '.text\x00\x00\x00': 820224},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4a222e7ee0513f62594e490bc2eb448427b3660ef7178defb0db30935bcc42d6'},
 '4a3387a54eeca83f3a8ff1f5f282f7966c9e7bfe159c8eb45444cab01b3e167e': {'AddressOfEntryPoint': 27885,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExA',
                                                                                      'COMCTL32.dll': 'PropertySheetA',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'UnmapViewOfFile',
                                                                                      'MSVCR71.dll': 'qsort',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'EndPaint',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'GetVersionExA',
                                                                                            'DeleteFileA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'ResumeThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleHandleA',
                                                                                            'GetTempPathA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'GetStartupInfoA',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetLastError',
                                                                                            'CreateFileA',
                                                                                            'SetLastError',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'lstrlenA',
                                                                                            'GetTempFileNameA',
                                                                                            'UnmapViewOfFile',
                                                                                            'SendMessageA',
                                                                                            'GetFocus',
                                                                                            'GetWindowRect',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxA',
                                                                                            'MoveWindow',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetParent',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'PostMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'DeleteObject',
                                                                                            'TextOutA',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'CreateFontA',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_controlfp',
                                                                                            '_strnicmp',
                                                                                            '_strcmpi',
                                                                                            '_strdup',
                                                                                            '_tempnam',
                                                                                            '_close',
                                                                                            '_read',
                                                                                            '__p___argc',
                                                                                            '__p___argv',
                                                                                            '_open',
                                                                                            'strncmp',
                                                                                            'fgets',
                                                                                            'realloc',
                                                                                            'strchr',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'strncat',
                                                                                            'strcat',
                                                                                            'strlen',
                                                                                            'strcpy',
                                                                                            'strcmp',
                                                                                            'strrchr',
                                                                                            'fprintf',
                                                                                            '_vsnprintf',
                                                                                            'malloc',
                                                                                            '_snprintf',
                                                                                            'strncpy',
                                                                                            'free',
                                                                                            'sscanf',
                                                                                            '_putenv',
                                                                                            'remove',
                                                                                            'fread',
                                                                                            'ftell',
                                                                                            'fseek',
                                                                                            'fopen',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'freopen',
                                                                                            '_iob',
                                                                                            'fwrite',
                                                                                            'strftime',
                                                                                            'localtime',
                                                                                            'time',
                                                                                            'sprintf',
                                                                                            '_fstat',
                                                                                            'strtol',
                                                                                            '_pctype',
                                                                                            '_isctype',
                                                                                            '__mb_cur_max',
                                                                                            'qsort'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 16384,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4a3387a54eeca83f3a8ff1f5f282f7966c9e7bfe159c8eb45444cab01b3e167e'},
 '4ad5b51e70a14e6729c487edcec8ff8ae1c17a6b3274b764d872644e336048b1': {'AddressOfEntryPoint': 12707,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'ExitProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalUnlock',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 19536,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 19968,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4ad5b51e70a14e6729c487edcec8ff8ae1c17a6b3274b764d872644e336048b1'},
 '4ad70fb78f58aa38a579f2e0a293bf5c4dc63706b70799942be2a091ea35c21f': {'AddressOfEntryPoint': 24308,
                                                                      'DebugRVA': 29072,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DecodePointer',
                                                                                      'MSVCR120.dll': '__set_app_type',
                                                                                      'libglib-2.0-0.dll': 'g_free',
                                                                                      'libwsutil.dll': 'strptime'},
                                                                      'ImportedFunctions': ['GlobalMemoryStatusEx',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'EncodePointer',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DecodePointer',
                                                                                            'getopt_long',
                                                                                            'optind',
                                                                                            'optarg',
                                                                                            'arg_list_utf_16to8',
                                                                                            'ws_inet_pton6',
                                                                                            'ws_inet_pton4',
                                                                                            'ws_add_crash_info',
                                                                                            'create_app_running_mutex',
                                                                                            'ws_stdio_fopen',
                                                                                            'get_os_version_info',
                                                                                            'get_copyright_info',
                                                                                            'strptime',
                                                                                            'g_string_new',
                                                                                            'g_ascii_table',
                                                                                            'g_strdup_printf',
                                                                                            'g_strdup',
                                                                                            'g_strlcpy',
                                                                                            'g_strerror',
                                                                                            'g_string_free',
                                                                                            'g_malloc',
                                                                                            'g_strfreev',
                                                                                            'g_strjoinv',
                                                                                            'g_strsplit',
                                                                                            'g_string_append_printf',
                                                                                            'g_string_append',
                                                                                            'g_free',
                                                                                            'memmove',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            'printf',
                                                                                            'strchr',
                                                                                            'setlocale',
                                                                                            'memset',
                                                                                            '__iob_func',
                                                                                            'clearerr',
                                                                                            'ferror',
                                                                                            'fprintf',
                                                                                            'fread',
                                                                                            'fwrite',
                                                                                            'getc',
                                                                                            '_errno',
                                                                                            'exit',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_exit',
                                                                                            'fclose',
                                                                                            'sscanf',
                                                                                            'strtol',
                                                                                            'strtoul',
                                                                                            'realloc',
                                                                                            'strncmp',
                                                                                            '_localtime64',
                                                                                            '_mktime64',
                                                                                            '_time64',
                                                                                            '_setmode',
                                                                                            '_crt_debugger_hook',
                                                                                            '__crtUnhandledException',
                                                                                            '__crtTerminateProcess',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 87,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 289192,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 289280,
                                                                                       '.text\x00\x00\x00': 22016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4ad70fb78f58aa38a579f2e0a293bf5c4dc63706b70799942be2a091ea35c21f'},
 '4b487075f31cfca0a480b2c8be0d265655298f26e95b00f132285c784b3da4eb': {'AddressOfEntryPoint': 17440,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'IPHLPAPI.DLL': 'GetCurrentThreadCompartmentId',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleOutputCP',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'PeekConsoleInputW',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetDriveTypeW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'LoadLibraryW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleFileNameW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryValueExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'browcli.dll': 'NetServerEnum',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netutils.dll': 'NetpwNameValidate',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'samcli.dll': 'NetUserGetInfo',
                                                                                      'srvcli.dll': 'NetShareEnum',
                                                                                      'wkscli.dll': 'NetUseGetInfo'},
                                                                      'ImportedFunctions': ['_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'memmove',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '_wcsdup',
                                                                                            'wcstok',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'wcsrchr',
                                                                                            'wcsncmp',
                                                                                            '_wcsupr',
                                                                                            'iswctype',
                                                                                            'wcspbrk',
                                                                                            'wcsncat_s',
                                                                                            '_ultow',
                                                                                            'wcscspn',
                                                                                            'calloc',
                                                                                            'wcsspn',
                                                                                            'qsort',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsicmp',
                                                                                            'exit',
                                                                                            '_local_unwind4',
                                                                                            'wcscpy_s',
                                                                                            'setlocale',
                                                                                            'wcscat_s',
                                                                                            '_setmode',
                                                                                            '_iob',
                                                                                            '_fileno',
                                                                                            '_wcsnicmp',
                                                                                            '_XcptFilter',
                                                                                            'sprintf_s',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf_s',
                                                                                            'putchar',
                                                                                            '_snwprintf_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memset',
                                                                                            'GetCommandLineW',
                                                                                            'GetStdHandle',
                                                                                            'GetCPInfo',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'ReadConsoleW',
                                                                                            'WriteConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'WNetCloseEnum',
                                                                                            'WNetOpenEnumW',
                                                                                            'WNetGetConnectionW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetEnumResourceW',
                                                                                            'WNetGetLastErrorW',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'GetDriveTypeW',
                                                                                            'NetWkstaGetInfo',
                                                                                            'NetUseEnum',
                                                                                            'NetWkstaUserGetInfo',
                                                                                            'NetUseGetInfo',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'NetUserGetInfo',
                                                                                            'NetapipBufferAllocate',
                                                                                            'NetpwPathType',
                                                                                            'NetApiBufferFree',
                                                                                            'NetApiBufferAllocate',
                                                                                            'NetApiBufferReallocate',
                                                                                            'NetpwNameValidate',
                                                                                            'NetServerGetInfo',
                                                                                            'NetShareEnum',
                                                                                            'GetCurrentThreadCompartmentId',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'PeekConsoleInputW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'NetServerEnum',
                                                                                            'RtlAllocateHeap',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 28,
                                                                      'NumberOfImportFunctions': 117,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 34304},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/4b487075f31cfca0a480b2c8be0d265655298f26e95b00f132285c784b3da4eb'},
 '4b4cba9b7be3c0e3768e78e7a393f73f85323c67a3f5900ce029d963d65a29f7': {'AddressOfEntryPoint': 107227,
                                                                      'DebugRVA': 193200,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetOEMCP',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'SHLWAPI.dll': 'PathAddBackslashA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'WININET.dll': 'InternetOpenA',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'lstrlenA',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'LocalSize',
                                                                                            'LocalFree',
                                                                                            'CreateThread',
                                                                                            'TerminateThread',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetFileSize',
                                                                                            'FindClose',
                                                                                            'CloseHandle',
                                                                                            'GetTickCount',
                                                                                            'FormatMessageA',
                                                                                            'UnmapViewOfFile',
                                                                                            'lstrcmpA',
                                                                                            'CreateMutexA',
                                                                                            'CreateEventA',
                                                                                            'CreateFileMappingA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateProcessA',
                                                                                            'GetCommandLineA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetTempPathA',
                                                                                            'GetFullPathNameA',
                                                                                            'CreateFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'MapViewOfFileEx',
                                                                                            'MultiByteToWideChar',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'DecodePointer',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateFileW',
                                                                                            'ReadConsoleW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'HeapReAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetFilePointerEx',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FlushFileBuffers',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'AreFileApisANSI',
                                                                                            'GetModuleHandleExW',
                                                                                            'ExitProcess',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SetEvent',
                                                                                            'GetSystemInfo',
                                                                                            'CreateDirectoryA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStringTypeW',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringW',
                                                                                            'RtlUnwind',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCurrentThreadId',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCPInfo',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetActiveWindow',
                                                                                            'LoadStringA',
                                                                                            'CharLowerA',
                                                                                            'MessageBoxA',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'SHFileOperationA',
                                                                                            'ShellExecuteExA',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'PathCombineA',
                                                                                            'PathFindExtensionA',
                                                                                            'PathRemoveFileSpecA',
                                                                                            'PathAddBackslashA',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlA',
                                                                                            'InternetOpenA'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 126,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 58664,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.init\x00\x00\x00': 3082752,
                                                                                       '.packet\x00': 54606336,
                                                                                       '.rdata\x00\x00': 40448,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 58880,
                                                                                       '.text\x00\x00\x00': 188416},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4b4cba9b7be3c0e3768e78e7a393f73f85323c67a3f5900ce029d963d65a29f7'},
 '4b9c70d118803fbc80d0269caa2809e1842d7d5a155da6df7eefdbf0b511bd12': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4b9c70d118803fbc80d0269caa2809e1842d7d5a155da6df7eefdbf0b511bd12'},
 '4bb9cb059aac1b4e185d5ce1692d75497f25d5e979ffb89a8e22881fa42110e4': {'AddressOfEntryPoint': 44592,
                                                                      'DebugRVA': 22944,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 147456,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetLastError',
                                                                                      'dbghelp.dll': 'SymDeleteSymbol'},
                                                                      'ImportedFunctions': ['SearchTreeForFile',
                                                                                            'SymEnumTypes',
                                                                                            'SymSetSearchPath',
                                                                                            'SymSrvIsStore',
                                                                                            'FindDebugInfoFileEx',
                                                                                            'UnDecorateSymbolName',
                                                                                            'SymEnumerateModules64',
                                                                                            'SymGetLineFromName',
                                                                                            'EnumDirTree',
                                                                                            'SymFromAddr',
                                                                                            'SymGetHomeDirectory',
                                                                                            'SymEnumSymbols',
                                                                                            'SymSrvGetFileIndexInfo',
                                                                                            'SymNext',
                                                                                            'SymEnumSourceFiles',
                                                                                            'SymInitialize',
                                                                                            'SymGetModuleInfo64',
                                                                                            'SymGetLineFromName64',
                                                                                            'SymSearch',
                                                                                            'SymUnloadModule64',
                                                                                            'SymEnumTypesByName',
                                                                                            'FindExecutableImageEx',
                                                                                            'SymSrvStoreSupplement',
                                                                                            'SymEnumSymbolsForAddr',
                                                                                            'SymSrvDeltaName',
                                                                                            'SymSrvGetSupplement',
                                                                                            'SymGetLinePrev64',
                                                                                            'SymSrvStoreFile',
                                                                                            'EnumerateLoadedModulesEx',
                                                                                            'SymCleanup',
                                                                                            'SymEnumSourceLines',
                                                                                            'SymGetSearchPath',
                                                                                            'SymFromName',
                                                                                            'SymGetLineNext64',
                                                                                            'SymGetOptions',
                                                                                            'SymSetHomeDirectory',
                                                                                            'SymGetUnwindInfo',
                                                                                            'SymAddSymbol',
                                                                                            'SymSrvGetFileIndexString',
                                                                                            'SymRegisterCallback64',
                                                                                            'SymGetOmaps',
                                                                                            'SymSetScopeFromIndex',
                                                                                            'SymPrev',
                                                                                            'SymGetSymbolFile',
                                                                                            'SymEnumLines',
                                                                                            'SymLoadModuleEx',
                                                                                            'SymSetOptions',
                                                                                            'SymRefreshModuleList',
                                                                                            'SymSetScopeFromAddr',
                                                                                            'SymGetScope',
                                                                                            'SymFindFileInPath',
                                                                                            'SymGetTypeFromName',
                                                                                            'SymFromIndex',
                                                                                            'SymGetLineFromAddr64',
                                                                                            'SymDeleteSymbol',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleA',
                                                                                            'ReadFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetStringTypeA',
                                                                                            'GetLocaleInfoA',
                                                                                            'RtlUnwind',
                                                                                            'LoadLibraryExA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'Sleep',
                                                                                            'LCMapStringA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'OutputDebugStringA',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'ExitProcess',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'CreateFileA',
                                                                                            'FreeLibrary',
                                                                                            'WriteFile',
                                                                                            'OpenProcess',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFileAttributesA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'SetLastError'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 121,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 18944,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 109568},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/4bb9cb059aac1b4e185d5ce1692d75497f25d5e979ffb89a8e22881fa42110e4'},
 '4c05306cb13722d9d83ba02757233d907e7dd260ec705eb5bb0c001deff9e8bb': {'AddressOfEntryPoint': 8623,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 18192,
                                                                      'ExportSize': 105,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 4,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LookupPrivilegeValueA',
                                                                                      'GDI32.dll': 'CreatePalette',
                                                                                      'KERNEL32.dll': 'GlobalLock',
                                                                                      'USER32.dll': 'LoadCursorA'},
                                                                      'ImportedFunctions': ['lstrcpyA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'GetTempFileNameA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'FormatMessageA',
                                                                                            'lstrcatA',
                                                                                            'GetLastError',
                                                                                            '_lwrite',
                                                                                            '_llseek',
                                                                                            'GlobalUnlock',
                                                                                            '_lopen',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            '_lclose',
                                                                                            '_lcreat',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'OpenFile',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentProcess',
                                                                                            'WinExec',
                                                                                            'ExitProcess',
                                                                                            '_lread',
                                                                                            'LocalFree',
                                                                                            'GetTempPathA',
                                                                                            'GlobalLock',
                                                                                            'GetDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'InvalidateRect',
                                                                                            'PostQuitMessage',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'GetClientRect',
                                                                                            'CreateWindowExA',
                                                                                            'DrawTextA',
                                                                                            'ReleaseDC',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'UpdateWindow',
                                                                                            'SetTimer',
                                                                                            'LoadIconA',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'ExitWindowsEx',
                                                                                            'RegisterClassA',
                                                                                            'LoadCursorA',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'PatBlt',
                                                                                            'CreateSolidBrush',
                                                                                            'TextOutA',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'StretchDIBits',
                                                                                            'CreateFontA',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'CreatePalette',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1600,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4c05306cb13722d9d83ba02757233d907e7dd260ec705eb5bb0c001deff9e8bb'},
 '4c948318b04dadb58926818d02776129b651a134e01e28d7b6707994a83a0227': {'AddressOfEntryPoint': 94272,
                                                                      'DebugRVA': 4720,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LoadLibraryW',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetDateFormatW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CreateDirectoryW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'CreateProcessW',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemInfo',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'CheckTokenMembership',
                                                                                      'api-ms-win-security-lsalookup-l1-1-1.dll': 'LookupAccountSidLocalW',
                                                                                      'ktmw32.dll': 'RollbackTransaction',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtClose',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['_wcsnicmp',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'swprintf_s',
                                                                                            'wprintf',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            'calloc',
                                                                                            'isalpha',
                                                                                            'setlocale',
                                                                                            'toupper',
                                                                                            'isdigit',
                                                                                            'wcscat_s',
                                                                                            'wcsrchr',
                                                                                            '_wtoi',
                                                                                            'towupper',
                                                                                            'realloc',
                                                                                            'wcscpy_s',
                                                                                            'memcpy_s',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsdup',
                                                                                            'exit',
                                                                                            '_errno',
                                                                                            'iswctype',
                                                                                            'wcstoul',
                                                                                            '_wcstoui64',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            'wcschr',
                                                                                            'memset',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlLookupElementGenericTableAvl',
                                                                                            'RtlInsertElementGenericTableAvl',
                                                                                            'RtlInitializeGenericTableAvl',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlTimeToTimeFields',
                                                                                            'RtlStringFromGUID',
                                                                                            'NtEnumerateTransactionObject',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtQuerySecurityObject',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'NtCreateFile',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlSetCurrentTransaction',
                                                                                            'RtlGetCurrentTransaction',
                                                                                            'NtSetQuotaInformationFile',
                                                                                            'NtQueryQuotaInformationFile',
                                                                                            'RtlLengthSid',
                                                                                            'NtSetVolumeInformationFile',
                                                                                            'NtOpenFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'NtQueryInformationFile',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtClose',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CreateFileW',
                                                                                            'QueryDosDeviceW',
                                                                                            'SetFilePointerEx',
                                                                                            'SetEndOfFile',
                                                                                            'DeleteFileW',
                                                                                            'GetFinalPathNameByHandleW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'WriteFile',
                                                                                            'FindFirstFileW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileType',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'RegEnumValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTickCount',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'LookupAccountNameLocalW',
                                                                                            'LookupAccountSidLocalW',
                                                                                            'CommitTransaction',
                                                                                            'GetTransactionInformation',
                                                                                            'OpenTransaction',
                                                                                            'RollbackTransaction',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromIID',
                                                                                            'StringFromGUID2',
                                                                                            'IIDFromString',
                                                                                            'GetComputerNameW',
                                                                                            'LocalFree',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'WaitForSingleObject',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SetThreadUILanguage',
                                                                                            'HeapSetInformation',
                                                                                            'FindNextFileNameW',
                                                                                            'FindFirstFileNameW',
                                                                                            'CreateHardLinkW',
                                                                                            'FormatMessageW',
                                                                                            'OpenFileById',
                                                                                            'GetFileInformationByHandleEx',
                                                                                            'Sleep',
                                                                                            'LoadLibraryW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 170,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 95232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/4c948318b04dadb58926818d02776129b651a134e01e28d7b6707994a83a0227'},
 '4d14ffbaacc4eea946ddfdd34d34310e5ff9e0626656fd876df5c35867b3e011': {'AddressOfEntryPoint': 588528,
                                                                      'DebugRVA': 2274748,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 2274660,
                                                                      'ExportSize': 86,
                                                                      'IATRVA': 2342912,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptAcquireContextA',
                                                                                      'KERNEL32.dll': 'EncodePointer',
                                                                                      'MSVCP120_CLR0400.dll': '??1_Container_base12@std@@QAE@XZ',
                                                                                      'MSVCR120_CLR0400.dll': 'bsearch',
                                                                                      'OLEAUT32.dll': 'VarR8FromStr',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHLWAPI.dll': 'PathIsUNCW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'mscoree.dll': 'GetCORSystemDirectory',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['TraceEvent',
                                                                                            'ControlTraceW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'GetUserNameW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptAcquireContextA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'GetProcAddress',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersionExW',
                                                                                            'GetFileType',
                                                                                            'IsValidCodePage',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetModuleFileNameA',
                                                                                            'AreFileApisANSI',
                                                                                            'FindClose',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetVersionExA',
                                                                                            'HeapSetInformation',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'GetACP',
                                                                                            'DecodePointer',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetStdHandle',
                                                                                            'GetStringTypeExW',
                                                                                            'CompareFileTime',
                                                                                            'GetModuleHandleExW',
                                                                                            'SetFileInformationByHandle',
                                                                                            'GetShortPathNameA',
                                                                                            'GetShortPathNameW',
                                                                                            'SetLastError',
                                                                                            'GetFileTime',
                                                                                            'Module32NextW',
                                                                                            'Module32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'lstrlenW',
                                                                                            'ReadProcessMemory',
                                                                                            'GetSystemDirectoryW',
                                                                                            'OpenThread',
                                                                                            'HeapReAlloc',
                                                                                            'SetEvent',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'DuplicateHandle',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetVersion',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'HeapDestroy',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'SwitchToThread',
                                                                                            'GetSystemInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'CompareStringW',
                                                                                            'CreateFileMappingA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'LockResource',
                                                                                            'GetProcessHeap',
                                                                                            'GetTempPathW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFullPathNameA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateFileW',
                                                                                            'CreateFileA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'wcsncpy_s',
                                                                                            '_vsnwprintf',
                                                                                            'free',
                                                                                            'wcstok_s',
                                                                                            '_wcslwr_s',
                                                                                            '?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                            '_CIfmod',
                                                                                            '_CIpow',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'malloc',
                                                                                            'strcat_s',
                                                                                            '_wtol',
                                                                                            '_wmakepath_s',
                                                                                            '_snwprintf_s',
                                                                                            '_isnan',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_wtoi',
                                                                                            '_mbspbrk',
                                                                                            '_mbsinc',
                                                                                            '_waccess',
                                                                                            '_wcstoi64',
                                                                                            '_wsplitpath_s',
                                                                                            'wcsrchr',
                                                                                            '_errno',
                                                                                            'wcstoul',
                                                                                            '_open_osfhandle',
                                                                                            '_fdopen',
                                                                                            'fclose',
                                                                                            'fwprintf',
                                                                                            '_localtime64',
                                                                                            'wcsftime',
                                                                                            '_time64',
                                                                                            'fwrite',
                                                                                            'fputws',
                                                                                            '__iob_func',
                                                                                            'fgetws',
                                                                                            '_recalloc',
                                                                                            'wcsstr',
                                                                                            'memcpy_s',
                                                                                            'memset',
                                                                                            '_waccess_s',
                                                                                            '_access_s',
                                                                                            'memcpy',
                                                                                            '_swab',
                                                                                            'memmove',
                                                                                            '_stricmp',
                                                                                            '_strnicmp',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            '_itow_s',
                                                                                            'iswalpha',
                                                                                            'wcscpy_s',
                                                                                            'iswspace',
                                                                                            'wcschr',
                                                                                            '_purecall',
                                                                                            '_ecvt_s',
                                                                                            'floor',
                                                                                            'strncat_s',
                                                                                            'sprintf_s',
                                                                                            'atof',
                                                                                            'swprintf_s',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '??0exception@std@@QAE@XZ',
                                                                                            'printf',
                                                                                            '_vsnwprintf_s',
                                                                                            '_ultow_s',
                                                                                            'wcscat_s',
                                                                                            'qsort',
                                                                                            '_i64tow_s',
                                                                                            '_ui64tow_s',
                                                                                            'wcstol',
                                                                                            'isdigit',
                                                                                            'wmemcpy_s',
                                                                                            'tolower',
                                                                                            '_vscwprintf',
                                                                                            '_mktime64',
                                                                                            'wcsncmp',
                                                                                            'wcspbrk',
                                                                                            'bsearch',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoGetClassObject',
                                                                                            'IIDFromString',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'VarDecMul',
                                                                                            'VarBstrCmp',
                                                                                            'VarUI4FromDec',
                                                                                            'VarUI4FromR8',
                                                                                            'VarUI4FromR4',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            'SysStringLen',
                                                                                            'VarBstrCat',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'VarDecNeg',
                                                                                            'VarDecFix',
                                                                                            'VarDecDiv',
                                                                                            'VarDecSub',
                                                                                            'VarDecAdd',
                                                                                            'VarDecFromR8',
                                                                                            'VarR8FromDec',
                                                                                            'VarR4FromR8',
                                                                                            'VarBstrFromDec',
                                                                                            'VarDecCmp',
                                                                                            'VarDecFromStr',
                                                                                            'VarR8FromStr',
                                                                                            'PathIsURLW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathAppendW',
                                                                                            'PathIsUNCW',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z',
                                                                                            '?_Xbad_alloc@std@@YAXXZ',
                                                                                            '?_Xbad_function_call@std@@YAXXZ',
                                                                                            '??1_Container_base12@std@@QAE@XZ',
                                                                                            'CorBindToCurrentRuntime',
                                                                                            'LoadStringRCEx',
                                                                                            'GetRealProcAddress',
                                                                                            'LoadLibraryShim',
                                                                                            'GetCORSystemDirectory',
                                                                                            'GetModuleFileNameExW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 305,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 256076,
                                                                      'SectionNames': {'.data\x00\x00\x00': 55296,
                                                                                       '.idata\x00\x00': 7680,
                                                                                       '.reloc\x00\x00': 79872,
                                                                                       '.rsrc\x00\x00\x00': 256512,
                                                                                       '.text\x00\x00\x00': 2271232,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4d14ffbaacc4eea946ddfdd34d34310e5ff9e0626656fd876df5c35867b3e011'},
 '4d6cf01e84a2e02b1732de1d3d845fae18359b8f0252a9f2f3b18405304d0d13': {'AddressOfEntryPoint': 14511,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 37744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 37888,
                                                                                       '.text\x00\x00\x00': 29696},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4d6cf01e84a2e02b1732de1d3d845fae18359b8f0252a9f2f3b18405304d0d13'},
 '4e2f6a6effc06e758dc5107084598f7dcf73b51b90d37c427e2d3736d6acb4f4': {'AddressOfEntryPoint': 27088,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '__setusermatherr'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetFileAttributesA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GlobalUnlock',
                                                                                            'GetShortPathNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindNextFileA',
                                                                                            'CompareStringA',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'FindResourceA',
                                                                                            'GlobalAlloc',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageA',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'GetVolumeInformationA',
                                                                                            'TerminateThread',
                                                                                            'SizeofResource',
                                                                                            'CreateEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            '_llseek',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'LockResource',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetTempPathA',
                                                                                            'CreateThread',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SetFilePointer',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcmpA',
                                                                                            '_lclose',
                                                                                            'GlobalLock',
                                                                                            'GetCurrentProcess',
                                                                                            'FreeResource',
                                                                                            'FreeLibrary',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlUnwind',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'ReadFile',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDC',
                                                                                            'SendMessageA',
                                                                                            'SetForegroundWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowRect',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'DispatchMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'MessageBeep',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharPrevA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetWindowLongA',
                                                                                            'GetSystemMetrics',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            'memcpy',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_errno',
                                                                                            '_vsnprintf',
                                                                                            '__setusermatherr',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 101312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 101376,
                                                                                       '.text\x00\x00\x00': 27136},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/4e2f6a6effc06e758dc5107084598f7dcf73b51b90d37c427e2d3736d6acb4f4'},
 '4e31e7ccecda241b1874fea801d97d5f1f295a8b7c1f949a81d7ce56cc4f2cf3': {'AddressOfEntryPoint': 39512,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 10752,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 10752,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37376,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4e31e7ccecda241b1874fea801d97d5f1f295a8b7c1f949a81d7ce56cc4f2cf3'},
 '4e62c0e369b1eb045548d9c9bb2ba27137e6456d12f5c97f61bcd5890239fe1d': {'AddressOfEntryPoint': 46384,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSid',
                                                                                      'AUTHZ.dll': 'GetClaimDefinitions',
                                                                                      'KERNEL32.dll': 'CompareStringA',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CharLowerW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'VerSetConditionMask'},
                                                                      'ImportedFunctions': ['LookupPrivilegeNameW',
                                                                                            'LookupPrivilegeDisplayNameW',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'OpenProcessToken',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'CopySid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'LookupAccountSidW',
                                                                                            'IsValidSid',
                                                                                            'GetLengthSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetTokenInformation',
                                                                                            'EqualSid',
                                                                                            'InitializeSid',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'Sleep',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'CompareStringA',
                                                                                            'wcstok',
                                                                                            'fflush',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memmove_s',
                                                                                            '_vsnwprintf',
                                                                                            '_ultow',
                                                                                            '_iob',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'memset',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'CharLowerW',
                                                                                            'LsaLookupAuthenticationPackage',
                                                                                            'LsaCallAuthenticationPackage',
                                                                                            'LsaConnectUntrusted',
                                                                                            'GetUserNameExW',
                                                                                            'WSACleanup',
                                                                                            'StrChrW',
                                                                                            'StrStrW',
                                                                                            'StrChrIW',
                                                                                            'StrStrIW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW',
                                                                                            'InitializeClaimDictionary',
                                                                                            'FreeClaimDefinitions',
                                                                                            'FreeClaimDictionary',
                                                                                            'GetClaimDefinitions',
                                                                                            'NetGetJoinInformation',
                                                                                            'NetApiBufferFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 123,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 47104},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/4e62c0e369b1eb045548d9c9bb2ba27137e6456d12f5c97f61bcd5890239fe1d'},
 '4e780d73364401249299787505e10d9cc220f87d1e5316a122ec81ee08167b8c': {'AddressOfEntryPoint': 125008,
                                                                      'DebugRVA': 5664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 167936,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateFreeThreadedMarshaler',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'WaitForMultipleObjects',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadPreferredUILanguages',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-shlwapi-obsolete-l1-1-0.dll': 'StrTrimW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ResetEvent',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-url-l1-1-0.dll': 'ParseURLW',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateErrorW',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoActivateInstance',
                                                                                      'api-ms-win-core-winrt-robuffer-l1-1-0.dll': 'RoGetBufferMarshaler',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsGetStringRawBuffer',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceEnableLevel',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventUnregister',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['memset',
                                                                                            'wcstoul',
                                                                                            'memcpy',
                                                                                            '_XcptFilter',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcsncmp',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'memcpy_s',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_purecall',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_wcsnicmp',
                                                                                            'wcscmp',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'ExitProcess',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadStringW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'EventWrite',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'InitializeSRWLock',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'SetEvent',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'Sleep',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'AcquireSRWLockShared',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'RaiseException',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CloseHandle',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoGetApartmentType',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'GetCommandLineW',
                                                                                            'GetTokenInformation',
                                                                                            'WindowsCreateStringReference',
                                                                                            'WindowsCreateString',
                                                                                            'WindowsDuplicateString',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'RoOriginateErrorW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'StrTrimW',
                                                                                            'ParseURLW',
                                                                                            'RoGetBufferMarshaler',
                                                                                            'OutputDebugStringA',
                                                                                            'RoGetActivationFactory',
                                                                                            'RoActivateInstance',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 28,
                                                                      'NumberOfImportFunctions': 114,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 10584,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 10752,
                                                                                       '.text\x00\x00\x00': 144896},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/4e780d73364401249299787505e10d9cc220f87d1e5316a122ec81ee08167b8c'},
 '4e996adc72b7232ea68bbcf7cadd1463c8dd4899ae31d7b8456f5a62e4a585b4': {'AddressOfEntryPoint': 82733,
                                                                      'DebugRVA': 168640,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 167936,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetLastError',
                                                                                      'OLEAUT32.dll': 'SysAllocStringByteLen',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'WSOCK32.dll': 'WSAGetLastError',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['LoadLibraryW',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetTickCount',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'GetThreadLocale',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'OpenProcess',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetModuleFileNameW',
                                                                                            'InterlockedIncrement',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetVersionExW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetCurrentProcess',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrlenW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetShortPathNameW',
                                                                                            'InterlockedDecrement',
                                                                                            'GetTempPathW',
                                                                                            'GetLocalTime',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetFileAttributesW',
                                                                                            'lstrlenA',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSize',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ReadFile',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'HeapCreate',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryA',
                                                                                            'RaiseException',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'FindFirstFileExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'RtlUnwind',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'GetFileType',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'LoadCursorW',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'SetTimer',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxW',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'closesocket',
                                                                                            'WSAAsyncSelect',
                                                                                            'connect',
                                                                                            'htons',
                                                                                            'getsockname',
                                                                                            'ioctlsocket',
                                                                                            'socket',
                                                                                            'bind',
                                                                                            'recv',
                                                                                            'accept',
                                                                                            'ntohs',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'WSAGetLastError'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 149,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 32904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 30720,
                                                                                       '.rdata\x00\x00': 25600,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 33280,
                                                                                       '.text\x00\x00\x00': 160256},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4e996adc72b7232ea68bbcf7cadd1463c8dd4899ae31d7b8456f5a62e4a585b4'},
 '4ea9ce843b80dab6822b5df59af534c517c5b14ed157c64e966254d2495cfd96': {'AddressOfEntryPoint': 541342,
                                                                      'DebugRVA': 636464,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 634880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'CRYPT32.dll': 'CertNameToStrW',
                                                                                      'DNSAPI.dll': 'DnsQuery_W',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'IPHLPAPI.DLL': 'IcmpCreateFile',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CharNextA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetCrackUrlW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'gdiplus.dll': 'GdipFillRectangleI',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal',
                                                                                      'urlmon.dll': 'IsValidURL'},
                                                                      'ImportedFunctions': ['CertNameToStrW',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WinVerifyTrust',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'InternetGetCookieW',
                                                                                            'InternetOpenA',
                                                                                            'InternetConnectA',
                                                                                            'InternetWriteFile',
                                                                                            'InternetSetOptionA',
                                                                                            'HttpOpenRequestA',
                                                                                            'HttpAddRequestHeadersA',
                                                                                            'InternetOpenUrlW',
                                                                                            'HttpEndRequestA',
                                                                                            'HttpSendRequestExW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetReadFile',
                                                                                            'InternetSetStatusCallbackW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetConnectW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetGetConnectedState',
                                                                                            'HttpEndRequestW',
                                                                                            'HttpQueryInfoW',
                                                                                            'HttpSendRequestExA',
                                                                                            'InternetCrackUrlW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathAddBackslashW',
                                                                                            'StrTrimA',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFileExistsW',
                                                                                            'InitCommonControlsEx',
                                                                                            '_TrackMouseEvent',
                                                                                            'timeGetTime',
                                                                                            'AlphaBlend',
                                                                                            'DnsFree',
                                                                                            'DnsQuery_W',
                                                                                            'FindMimeFromData',
                                                                                            'IsValidURL',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'inet_addr',
                                                                                            'IcmpSendEcho2',
                                                                                            'GetAdaptersInfo',
                                                                                            'IcmpCreateFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FindResourceW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetVersionExW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WriteProcessMemory',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'K32EnumProcessModules',
                                                                                            'K32GetModuleBaseNameW',
                                                                                            'K32GetModuleInformation',
                                                                                            'DeleteFileA',
                                                                                            'FindClose',
                                                                                            'GetModuleFileNameA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExA',
                                                                                            'FindResourceExW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetGeoInfoW',
                                                                                            'GetUserGeoID',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetTempPathW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetLocalTime',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'LocalAlloc',
                                                                                            'RaiseException',
                                                                                            'ReleaseMutex',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTickCount',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenW',
                                                                                            'CreateMutexA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'FindResourceA',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetComputerNameW',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'IsDBCSLeadByte',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'TerminateThread',
                                                                                            'CreateEventA',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileA',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'InterlockedCompareExchange',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'LockFileEx',
                                                                                            'UnlockFileEx',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'FormatMessageA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'LoadLibraryA',
                                                                                            'GetTempPathA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'AreFileApisANSI',
                                                                                            'ExitThread',
                                                                                            'HeapFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'RtlUnwind',
                                                                                            'GetCommandLineW',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'CreateDirectoryW',
                                                                                            'HeapReAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'GetProcessHeap',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetConsoleCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStringTypeW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetCurrentProcessId',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'SetWindowRgn',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowW',
                                                                                            'SendMessageW',
                                                                                            'PostMessageW',
                                                                                            'DestroyWindow',
                                                                                            'ShowWindow',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'EnableWindow',
                                                                                            'GetDC',
                                                                                            'UpdateWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetGuiResources',
                                                                                            'GetWindowRect',
                                                                                            'MonitorFromPoint',
                                                                                            'PeekMessageW',
                                                                                            'MessageBoxW',
                                                                                            'SetWindowTextW',
                                                                                            'DrawTextW',
                                                                                            'LoadIconW',
                                                                                            'wsprintfA',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'LoadCursorW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'DispatchMessageW',
                                                                                            'wsprintfW',
                                                                                            'CharNextA',
                                                                                            'SetBkColor',
                                                                                            'CreateRectRgn',
                                                                                            'DeleteDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'CombineRgn',
                                                                                            'GetPixel',
                                                                                            'CreateDCW',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'BitBlt',
                                                                                            'CreateSolidBrush',
                                                                                            'RegEnumKeyA',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetEntriesInAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegSetValueExW',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'LookupAccountNameW',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'IsValidSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'CoCreateInstance',
                                                                                            'OleSetContainedObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipFillRectangleI',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'GetUserNameExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 344,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 330253,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 143360,
                                                                                       '.reloc\x00\x00': 33792,
                                                                                       '.rsrc\x00\x00\x00': 330752,
                                                                                       '.text\x00\x00\x00': 630784},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4ea9ce843b80dab6822b5df59af534c517c5b14ed157c64e966254d2495cfd96'},
 '4ef8089452331a127262a9841001c12ae5757f8c4c39ad69c06e1a6d64a6ce40': {'AddressOfEntryPoint': 5222,
                                                                      'DebugRVA': 68096,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RaiseException',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'CreateFileW',
                                                                                            'DecodePointer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'RaiseException',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 66,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 22528,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 43008},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4ef8089452331a127262a9841001c12ae5757f8c4c39ad69c06e1a6d64a6ce40'},
 '4f162db6af3d885a51c2a9d67b1263c4f0bb091472891f7070b2eeddfdd99a34': {'AddressOfEntryPoint': 41616,
                                                                      'DebugRVA': 4736,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterTraceGuidsW',
                                                                                      'DUI70.dll': '?SetKeyFocus@Element@DirectUI@@UEAAXXZ',
                                                                                      'DUser.dll': 'CreateAction',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameW',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'SHLWAPI.dll': 'SHStrDupW',
                                                                                      'USER32.dll': 'GetUserObjectInformationW',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'RaiseException',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'FreeLibrary',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'OutputDebugStringA',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'LockResource',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetThreadDesktop',
                                                                                            'DispatchMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'CharNextW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharUpperW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetUserObjectInformationW',
                                                                                            '_CxxThrowException',
                                                                                            '_vsnprintf',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memcpy',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            '_purecall',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'memcpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcsncpy_s',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_XcptFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitialize',
                                                                                            'CoInitializeEx',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SHStrDupW',
                                                                                            'DeleteHandle',
                                                                                            'CreateAction',
                                                                                            '?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z',
                                                                                            '?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z',
                                                                                            '?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z',
                                                                                            '?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z',
                                                                                            '?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z',
                                                                                            '?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z',
                                                                                            '?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z',
                                                                                            '?OnDestroy@Element@DirectUI@@UEAAXXZ',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z',
                                                                                            '?OnInput@Element@DirectUI@@UEAAXPEAUInputEvent@2@@Z',
                                                                                            '?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z',
                                                                                            '??1ClassInfoBase@DirectUI@@UEAA@XZ',
                                                                                            '??0ClassInfoBase@DirectUI@@QEAA@XZ',
                                                                                            '??1Element@DirectUI@@UEAA@XZ',
                                                                                            '??0Element@DirectUI@@QEAA@XZ',
                                                                                            '?GetClassInfoPtr@Element@DirectUI@@SAPEAUIClassInfo@2@XZ',
                                                                                            '?_PostEvent@Element@DirectUI@@AEAAXPEAUEvent@2@H@Z',
                                                                                            '?Destroy@Element@DirectUI@@QEAAJ_N@Z',
                                                                                            '?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z',
                                                                                            '?Register@ClassInfoBase@DirectUI@@QEAAJXZ',
                                                                                            '?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z',
                                                                                            '?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ',
                                                                                            '?Register@Element@DirectUI@@SAJXZ',
                                                                                            '?OnEvent@Element@DirectUI@@UEAAXPEAUEvent@2@@Z',
                                                                                            'UnInitProcessPriv',
                                                                                            'UnInitThread',
                                                                                            'InitThread',
                                                                                            'InitProcessPriv',
                                                                                            '?EndDefer@Element@DirectUI@@QEAAXK@Z',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ',
                                                                                            'StrToID',
                                                                                            '?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z',
                                                                                            '?Initialize@Element@DirectUI@@QEAAJIPEAV12@PEAK@Z',
                                                                                            '?AddBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z',
                                                                                            '?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UEAAXPEAUtagRECT@@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z',
                                                                                            '?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z',
                                                                                            '?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z',
                                                                                            '?GetAccessibleImpl@Element@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UEAAJXZ',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z',
                                                                                            'StartMessagePump',
                                                                                            '?AccNameProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ',
                                                                                            '?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ',
                                                                                            '?_ZeroRelease@Value@DirectUI@@AEAAXXZ',
                                                                                            '?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z',
                                                                                            '?CreateString@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z',
                                                                                            '?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ',
                                                                                            '?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ',
                                                                                            '?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ',
                                                                                            '?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ',
                                                                                            '?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ',
                                                                                            '?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ',
                                                                                            '?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z',
                                                                                            '?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z',
                                                                                            '?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ',
                                                                                            '?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ',
                                                                                            '?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ',
                                                                                            '?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z',
                                                                                            '?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z',
                                                                                            '?Release@ClassInfoBase@DirectUI@@UEAAHXZ',
                                                                                            '?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UEAAPEAV12@XZ',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z',
                                                                                            '?SetKeyFocus@Element@DirectUI@@UEAAXXZ'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 204,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5984,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 10752,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 46080},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/4f162db6af3d885a51c2a9d67b1263c4f0bb091472891f7070b2eeddfdd99a34'},
 '4f2fdeeffce4812b6aa1f02b245f32b080db791a63ac81013c9f39ae121eb235': {'AddressOfEntryPoint': 18958,
                                                                      'DebugRVA': 18752,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1280,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1560,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4f2fdeeffce4812b6aa1f02b245f32b080db791a63ac81013c9f39ae121eb235'},
 '4f34d7c266b6cf16bbcbf1c55a20d9bafd49366011c85b76229bb6523332c280': {'AddressOfEntryPoint': 168416,
                                                                      'DebugRVA': 4384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 176128,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-com-l1-1-1.dll': 'CoSuspendClassObjects',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'DeleteFileW',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'LoadLibraryW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleFileNameW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetEnvironmentVariableW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'TryEnterCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemDirectoryW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'CheckTokenMembership',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertStringSidToSidW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_errno',
                                                                                            '_except_handler4_common',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'free',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__p__fmode',
                                                                                            'memmove',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'malloc',
                                                                                            '_vsnprintf',
                                                                                            '_onexit',
                                                                                            'wcstoul',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_vsnwprintf',
                                                                                            '__setusermatherr',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_purecall',
                                                                                            'wcsrchr',
                                                                                            'memset',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoDisconnectContext',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoGetMalloc',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoSuspendClassObjects',
                                                                                            'Sleep',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetOsSafeBootMode',
                                                                                            'GetSystemDirectoryW',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LoadLibraryW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesExW',
                                                                                            'FindFirstFileW',
                                                                                            'CompareFileTime',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'MoveFileExW',
                                                                                            'CheckTokenMembership',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'DeviceIoControl',
                                                                                            'LocalFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1328,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 16896,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 166400},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/4f34d7c266b6cf16bbcbf1c55a20d9bafd49366011c85b76229bb6523332c280'},
 '4f3ae133a46d42b6a0fe75e95bf8b915f9f0890ff5e79ae10a5b308523c917fd': {'AddressOfEntryPoint': 91134,
                                                                      'DebugRVA': 90920,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 59608,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 59904,
                                                                                       '.text\x00\x00\x00': 83456},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/4f3ae133a46d42b6a0fe75e95bf8b915f9f0890ff5e79ae10a5b308523c917fd'},
 '4f57f549aea9065ca3d487b18ee3048689cdb1a93947bd1368bb4bd9f2581e6b': {'AddressOfEntryPoint': 285600,
                                                                      'DebugRVA': 5456,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 335872,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'IsTextUnicode',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CertGetCertificateChain',
                                                                                      'KERNEL32.dll': 'LoadLibraryExW',
                                                                                      'OLEAUT32.dll': 'UnRegisterTypeLib',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathIsContentTypeW',
                                                                                      'USER32.dll': 'DialogBoxParamW',
                                                                                      'WININET.dll': 'InternetCombineUrlW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ole32.dll': 'CoTaskMemFree',
                                                                                      'webservices.dll': 'WsGetErrorString'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'EventActivityIdControl',
                                                                                            'TraceMessage',
                                                                                            'RegQueryValueExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegGetValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteTreeW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegSetKeyValueW',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptCreateHash',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'IsTextUnicode',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'TerminateThread',
                                                                                            'CreateThread',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'SearchPathW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CompareStringW',
                                                                                            'SetEvent',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueEx',
                                                                                            'CreateTimerQueue',
                                                                                            'GetModuleHandleExA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'DeleteFileW',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'Sleep',
                                                                                            'SetLastError',
                                                                                            'CreateEventW',
                                                                                            'GetCommandLineW',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'GetVersionExW',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LoadLibraryW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetACP',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'LoadLibraryExA',
                                                                                            'DecodePointer',
                                                                                            'VirtualAlloc',
                                                                                            'FlushInstructionCache',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'EncodePointer',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryExW',
                                                                                            'RemoveMenu',
                                                                                            'EndMenu',
                                                                                            'PostQuitMessage',
                                                                                            'GetCursorPos',
                                                                                            'SetForegroundWindow',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetMenuItemInfoW',
                                                                                            'EndDialog',
                                                                                            'GetMenuItemCount',
                                                                                            'GetClientRect',
                                                                                            'UnregisterClassW',
                                                                                            'CharNextW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'PostMessageW',
                                                                                            'SendMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'EnableMenuItem',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'RegisterClassExW',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'CreateWindowExW',
                                                                                            'CharUpperW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyMenu',
                                                                                            'InsertMenuItemW',
                                                                                            'CreatePopupMenu',
                                                                                            'ShowWindow',
                                                                                            'LoadIconW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadStringW',
                                                                                            'UnregisterClassA',
                                                                                            'CreateDialogParamW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'CallWindowProcW',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetWindowTextW',
                                                                                            'GetActiveWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'memmove',
                                                                                            '_resetstkoflw',
                                                                                            'swprintf_s',
                                                                                            'swscanf',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'memcpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcsncpy_s',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            '_XcptFilter',
                                                                                            '_purecall',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'realloc',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcsncmp',
                                                                                            'bsearch',
                                                                                            'memcmp',
                                                                                            'wcscat_s',
                                                                                            'calloc',
                                                                                            '_amsg_exit',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_wcslwr',
                                                                                            'towlower',
                                                                                            'wcstol',
                                                                                            'wcstok_s',
                                                                                            '_wcsnicmp',
                                                                                            'toupper',
                                                                                            'memmove_s',
                                                                                            '__C_specific_handler',
                                                                                            '_wfopen_s',
                                                                                            '_errno',
                                                                                            'fputws',
                                                                                            'fclose',
                                                                                            '_initterm',
                                                                                            'memset',
                                                                                            'wcscpy_s',
                                                                                            'memcpy',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateGuid',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoResumeClassObjects',
                                                                                            'StringFromGUID2',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoTaskMemFree',
                                                                                            'RegisterTypeLib',
                                                                                            'SafeArrayRedim',
                                                                                            'SysFreeString',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocString',
                                                                                            'VarBstrCmp',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreate',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SysStringLen',
                                                                                            'UnRegisterTypeLib',
                                                                                            'InitCommonControlsEx',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetIDListFromObject',
                                                                                            'SHCreateItemInKnownFolder',
                                                                                            'ShellExecuteW',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertDuplicateCertificateChain',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CryptSignMessage',
                                                                                            'CryptVerifyDetachedMessageSignature',
                                                                                            'CertCloseStore',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CryptMsgUpdate',
                                                                                            'CertOpenStore',
                                                                                            'CryptMsgClose',
                                                                                            'CryptBinaryToStringW',
                                                                                            'CryptProtectData',
                                                                                            'CryptDecodeObject',
                                                                                            'CertFindExtension',
                                                                                            'CertGetCertificateChain',
                                                                                            'WsCall',
                                                                                            'WsAddMappedHeader',
                                                                                            'WsCreateError',
                                                                                            'WsCreateHeap',
                                                                                            'WsCreateServiceProxy',
                                                                                            'WsOpenServiceProxy',
                                                                                            'WsFreeError',
                                                                                            'WsCloseServiceProxy',
                                                                                            'WsFreeServiceProxy',
                                                                                            'WsFreeHeap',
                                                                                            'WsGetErrorProperty',
                                                                                            'WsGetErrorString',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsContentTypeW',
                                                                                            'InternetCanonicalizeUrlW',
                                                                                            'InternetCombineUrlW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 297,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 93184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 10752,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 93184,
                                                                                       '.text\x00\x00\x00': 314880},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/4f57f549aea9065ca3d487b18ee3048689cdb1a93947bd1368bb4bd9f2581e6b'},
 '4f8adc6306e241bfffd1f86c4ba362d0d255c00b92d967d810e8288e3394b864': {'AddressOfEntryPoint': 23440,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Wow64RevertWow64FsRedirection',
                                                                                      'SHLWAPI.dll': 'PathStripToRootW',
                                                                                      'SspiCli.dll': 'GetUserNameExW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleFileNameW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ReleaseMutex',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemDirectoryW',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'SystemTimeToTzSpecificLocalTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'CopySid',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmIncrementDWORD'},
                                                                      'ImportedFunctions': ['memmove',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'memset',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'GetCommandLineW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AddAccessAllowedAce',
                                                                                            'FreeSid',
                                                                                            'GetLengthSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'IsValidSid',
                                                                                            'InitializeAcl',
                                                                                            'CopySid',
                                                                                            'OutputDebugStringW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'GetUserNameExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'Wow64DisableWow64FsRedirection',
                                                                                            'IsWow64Process',
                                                                                            'Wow64RevertWow64FsRedirection',
                                                                                            'StrChrW',
                                                                                            'StrRChrW',
                                                                                            'PathIsRelativeW',
                                                                                            'PathIsRootW',
                                                                                            'PathIsUNCW',
                                                                                            'PathStripToRootW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 99,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 20992},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/4f8adc6306e241bfffd1f86c4ba362d0d255c00b92d967d810e8288e3394b864'},
 '503b45ea3b23a86070c72c7d28df59c43539e5ec1cc134ee3f38c8eb84c61bbe': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 21424,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 21504,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/503b45ea3b23a86070c72c7d28df59c43539e5ec1cc134ee3f38c8eb84c61bbe'},
 '50fb0252fbb7b76643d830638c5190ef9724845fa24966caf6e3fc55fbcf6bca': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 75496,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 75776,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/50fb0252fbb7b76643d830638c5190ef9724845fa24966caf6e3fc55fbcf6bca'},
 '515437a6721142081c0706dbb18d11f6b294490389f688addda41ced8301c094': {'AddressOfEntryPoint': 5664,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49216,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetVersionExA',
                                                                                      'msvcrt.dll': '_except_handler4_common'},
                                                                      'ImportedFunctions': ['RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'LoadLibraryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'VirtualAlloc',
                                                                                            'SetProcessDEPPolicy',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersion',
                                                                                            'GetVersionExA',
                                                                                            'rand_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 44,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/515437a6721142081c0706dbb18d11f6b294490389f688addda41ced8301c094'},
 '516ef56be418e630cc3e16cbe1932d0a6d2e5a402546a723780a0282d7ca60f0': {'AddressOfEntryPoint': 11184,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CheckTokenMembership',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'apphelp.dll': 'SdbIsNullGUID',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmAddToStreamEx'},
                                                                      'ImportedFunctions': ['CreateWellKnownSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetTickCount64',
                                                                                            'ProcessIdToSessionId',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'GetTickCount',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wtoi',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            '_wcmdln',
                                                                                            'memset',
                                                                                            'SdbGetEntryFlags',
                                                                                            'SdbSetEntryFlags',
                                                                                            'ApphelpDebugPrintf',
                                                                                            'SdbIsNullGUID',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlGUIDFromString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlFreeHeap',
                                                                                            'WinSqmAddToStreamEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 53,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2328,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 9728},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/516ef56be418e630cc3e16cbe1932d0a6d2e5a402546a723780a0282d7ca60f0'},
 '517c9292281404b4735c860f4d84b868e01430979fbfb84f40a4e18363b528b6': {'AddressOfEntryPoint': 7520,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'UnregisterTraceGuids',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'SETUPAPI.dll': 'SetupDiReportGenericDriverInstalled',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateInstance',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlCaptureContext',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetLastError',
                                                                                            '_initterm',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'wcstok_s',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'SetupDiReportAdditionalSoftwareRequested',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiReportDriverNotFoundError',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiReportGenericDriverInstalled'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 52,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/517c9292281404b4735c860f4d84b868e01430979fbfb84f40a4e18363b528b6'},
 '518f6481d6bebe5c0851090118b018237c489219e60dc4f7b01bc638b5fe0611': {'AddressOfEntryPoint': 4400,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.DLL': 'ReportEventA',
                                                                                      'AdbWinApi.dll': 'AdbWriteEndpointSync',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'WriteFile',
                                                                                      'SHELL32.DLL': 'SHGetFolderPathA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'WS2_32.DLL': 'socket',
                                                                                      'msvcrt.dll': 'wcsstr'},
                                                                      'ImportedFunctions': ['DeregisterEventSource',
                                                                                            'RegisterEventSourceA',
                                                                                            'ReportEventA',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDCA',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetBitmapBits',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'SelectObject',
                                                                                            'CloseHandle',
                                                                                            'CreateEventA',
                                                                                            'CreateFileA',
                                                                                            'CreatePipe',
                                                                                            'CreateProcessA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'GetFileType',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetTickCount',
                                                                                            'GetVersion',
                                                                                            'GetVersionExA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'InitializeCriticalSection',
                                                                                            'InterlockedCompareExchange',
                                                                                            'InterlockedExchange',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ReadFile',
                                                                                            'ResetEvent',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetEvent',
                                                                                            'SetFilePointer',
                                                                                            'SetHandleInformation',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            '_access',
                                                                                            '_chmod',
                                                                                            '_getcwd',
                                                                                            '_getpid',
                                                                                            '_read',
                                                                                            '_stat',
                                                                                            '_strdup',
                                                                                            '_stricmp',
                                                                                            '_umask',
                                                                                            '_unlink',
                                                                                            '__getmainargs',
                                                                                            '__lc_codepage',
                                                                                            '__mb_cur_max',
                                                                                            '__p__environ',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_beginthread',
                                                                                            '_beginthreadex',
                                                                                            '_cexit',
                                                                                            '_endthreadex',
                                                                                            '_errno',
                                                                                            '_exit',
                                                                                            '_findclose',
                                                                                            '_findfirst',
                                                                                            '_findnext',
                                                                                            '_fullpath',
                                                                                            '_getch',
                                                                                            '_iob',
                                                                                            '_isctype',
                                                                                            '_mkdir',
                                                                                            '_onexit',
                                                                                            '_pctype',
                                                                                            '_setmode',
                                                                                            '_stricmp',
                                                                                            '_strnicmp',
                                                                                            '_vsnprintf',
                                                                                            '_wfopen',
                                                                                            'abort',
                                                                                            'atexit',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'fgets',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'fputs',
                                                                                            'fread',
                                                                                            'free',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'gmtime',
                                                                                            'localeconv',
                                                                                            'localtime',
                                                                                            'malloc',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'perror',
                                                                                            'qsort',
                                                                                            'raise',
                                                                                            'realloc',
                                                                                            'setvbuf',
                                                                                            'signal',
                                                                                            'sscanf',
                                                                                            'strcat',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncat',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'strpbrk',
                                                                                            'strrchr',
                                                                                            'strtol',
                                                                                            'strtoul',
                                                                                            'time',
                                                                                            'tolower',
                                                                                            'vfprintf',
                                                                                            'wcslen',
                                                                                            'wcsstr',
                                                                                            'SHGetFolderPathA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetUserObjectInformationW',
                                                                                            'MessageBoxA',
                                                                                            'WSACleanup',
                                                                                            'WSACreateEvent',
                                                                                            'WSAEnumNetworkEvents',
                                                                                            'WSAEventSelect',
                                                                                            'WSAGetLastError',
                                                                                            'WSAStartup',
                                                                                            'accept',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'gethostbyname',
                                                                                            'htonl',
                                                                                            'htons',
                                                                                            'listen',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'setsockopt',
                                                                                            'shutdown',
                                                                                            'socket',
                                                                                            'AdbCloseHandle',
                                                                                            'AdbCreateInterfaceByName',
                                                                                            'AdbEnumInterfaces',
                                                                                            'AdbGetEndpointInformation',
                                                                                            'AdbGetInterfaceName',
                                                                                            'AdbGetSerialNumber',
                                                                                            'AdbGetUsbDeviceDescriptor',
                                                                                            'AdbGetUsbInterfaceDescriptor',
                                                                                            'AdbNextInterface',
                                                                                            'AdbOpenDefaultBulkReadEndpoint',
                                                                                            'AdbOpenDefaultBulkWriteEndpoint',
                                                                                            'AdbReadEndpointSync',
                                                                                            'AdbWriteEndpointSync'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 184,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 173568,
                                                                                       '.text\x00\x00\x00': 629760},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/518f6481d6bebe5c0851090118b018237c489219e60dc4f7b01bc638b5fe0611'},
 '51b4643a1c8080ffbebee73ac7d86d66aa9ba811b7c71782fd38bd004b8cc64c': {'AddressOfEntryPoint': 9232,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'ExitWindowsEx',
                                                                                      'ifsutil.dll': '?IsEntryPresent@AUTOREG@@SAEPEBVWSTRING@@@Z',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'ulib.dll': '?Strcat@WSTRING@@QEAAEPEBG@Z'},
                                                                      'ImportedFunctions': ['LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'LoadLibraryW',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'ExitWindowsEx',
                                                                                            'free',
                                                                                            'realloc',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            'memset',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            '?PushEntry@AUTOREG@@SAEPEBVWSTRING@@@Z',
                                                                                            '?IsEntryPresent@AUTOREG@@SAEPEBVWSTRING@@@Z',
                                                                                            '?Put@ARRAY@@UEAAEPEAVOBJECT@@@Z',
                                                                                            '?Initialize@ARRAY@@QEAAEKK@Z',
                                                                                            '??1ARRAY@@UEAA@XZ',
                                                                                            '??0ARRAY@@QEAA@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QEAAEPEAD@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QEAAEXZ',
                                                                                            '??0STRING_ARGUMENT@@QEAA@XZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QEAA@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UEAA@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QEAAEPEAVARRAY@@@Z',
                                                                                            '?Initialize@WSTRING@@QEAAEPEBDK@Z',
                                                                                            '??1STRING_ARGUMENT@@UEAA@XZ',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QEAAEPEAVARRAY@@@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QEAAXPEBD@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QEAAXPEBD@Z',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QEAAEPEAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QEAAXE@Z',
                                                                                            '??0FLAG_ARGUMENT@@QEAA@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QEAAEPEAD@Z',
                                                                                            '??0DSTRING@@QEAA@XZ',
                                                                                            '??1DSTRING@@UEAA@XZ',
                                                                                            '??1OBJECT@@UEAA@XZ',
                                                                                            '?Strcat@WSTRING@@QEAAEPEBG@Z',
                                                                                            'CoInitializeEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/51b4643a1c8080ffbebee73ac7d86d66aa9ba811b7c71782fd38bd004b8cc64c'},
 '51cd26a60d77b16d7bf4458fb5e54ba7c4d1f3b0df3de51bb95391b54da33c21': {'AddressOfEntryPoint': 8528,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'msvcrt.dll': '_initterm',
                                                                                      'ntdll.dll': 'RtlDosPathNameToNtPathName_U',
                                                                                      'ulib.dll': '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'DefineDosDeviceW',
                                                                                            'QueryDosDeviceW',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_XcptFilter',
                                                                                            '_initterm',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z',
                                                                                            '?DeleteChAt@WSTRING@@QAEXKK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '??0FSTRING@@QAE@XZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '?GetPattern@ARGUMENT@@QAEPAVWSTRING@@XZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z',
                                                                                            '?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z',
                                                                                            '??1STREAM_MESSAGE@@UAE@XZ',
                                                                                            '??0STREAM_MESSAGE@@QAE@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?Display@MESSAGE@@QAAEPBDZZ',
                                                                                            '?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z',
                                                                                            '??1FSTRING@@UAE@XZ',
                                                                                            '?Initialize@FSTRING@@QAEPAVWSTRING@@PAGK@Z',
                                                                                            '?Strstr@WSTRING@@QBEKPBV1@@Z',
                                                                                            '?Strupr@WSTRING@@QAEPAV1@XZ',
                                                                                            '?Initialize@PATH@@QAEEPBV1@E@Z',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '?Get_Standard_Error_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?GetLexemeAt@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@K@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlDosPathNameToNtPathName_U'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/51cd26a60d77b16d7bf4458fb5e54ba7c4d1f3b0df3de51bb95391b54da33c21'},
 '51e399b2f922ae18b257866c29c9df2db33bc5df7e178e007e42c89e893cb57a': {'AddressOfEntryPoint': 27506,
                                                                      'DebugRVA': 4768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'CreateProcessA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': '_vsnprintf'},
                                                                      'ImportedFunctions': ['__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_controlfp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_vsnprintf',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'SetFileTime',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'FindResourceA',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersion',
                                                                                            'CompareStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetShortPathNameA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GlobalAlloc',
                                                                                            'FreeResource',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetTempFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateFileA',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'RtlUnwind',
                                                                                            'GetStartupInfoA',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetDriveTypeA',
                                                                                            'TerminateThread',
                                                                                            'ResetEvent',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'SetEvent',
                                                                                            'CreateMutexA',
                                                                                            'GetSystemInfo',
                                                                                            'GetTempPathA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FormatMessageA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExA',
                                                                                            'GetVersionExA',
                                                                                            'FindFirstFileA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrlenA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'GlobalLock',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'CreateProcessA',
                                                                                            'GetDeviceCaps',
                                                                                            'MessageBeep',
                                                                                            'SetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'GetDesktopWindow',
                                                                                            'EndDialog',
                                                                                            'ExitWindowsEx',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'CharPrevA',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'CallWindowProcA',
                                                                                            'DispatchMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'SendMessageA',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetWindowRect',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 259448,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 259584,
                                                                                       '.text\x00\x00\x00': 43520},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/51e399b2f922ae18b257866c29c9df2db33bc5df7e178e007e42c89e893cb57a'},
 '5220b5a0cb9cbe0979cd257b40c38a44839a6ab71ded9f143047e2a3268b0948': {'AddressOfEntryPoint': 26462,
                                                                      'DebugRVA': 26204,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 48,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 19416,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 18432},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5220b5a0cb9cbe0979cd257b40c38a44839a6ab71ded9f143047e2a3268b0948'},
 '522745441391e5f0936954fa9b07eaca486b40fbb5a3df4ce7fabd561e45c5d9': {'AddressOfEntryPoint': 107491,
                                                                      'DebugRVA': 209648,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 208896,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'InterlockedIncrement',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'GetThreadDesktop',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'HttpQueryInfoW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminCalcHashFromFileHandle',
                                                                                      'urlmon.dll': 'URLDownloadToFileW'},
                                                                      'ImportedFunctions': ['FindFirstFileW',
                                                                                            'CreateThread',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCommandLineW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'GetModuleFileNameW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeThread',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentThreadId',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'GetTempPathW',
                                                                                            'FindNextFileW',
                                                                                            'CompareStringW',
                                                                                            'GetProcessHeap',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapReAlloc',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetModuleFileNameA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'HeapCreate',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringW',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DeleteFileW',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetStringTypeW',
                                                                                            'InterlockedDecrement',
                                                                                            'WideCharToMultiByte',
                                                                                            'InterlockedIncrement',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowTextW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'EndDialog',
                                                                                            'EnableWindow',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyWindow',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringW',
                                                                                            'CloseDesktop',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'UpdateWindow',
                                                                                            'GetThreadDesktop',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'PathFileExistsW',
                                                                                            'URLDownloadToFileW',
                                                                                            'InternetOpenW',
                                                                                            'InternetGetConnectedState',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlW',
                                                                                            'HttpQueryInfoW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 137,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 371656,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 38400,
                                                                                       '.reloc\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 371712,
                                                                                       '.text\x00\x00\x00': 204800},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/522745441391e5f0936954fa9b07eaca486b40fbb5a3df4ce7fabd561e45c5d9'},
 '5233a3654ef37c6c5f1ecf4efdb89fa135bb9ff3f81e3195a4e35cfe02ccd337': {'AddressOfEntryPoint': 13333,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'FindWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 26624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5233a3654ef37c6c5f1ecf4efdb89fa135bb9ff3f81e3195a4e35cfe02ccd337'},
 '52360f17c9c70c9cea3316560b40c4d89fd705ed7e6b6088c99fc54d4cc35eb5': {'AddressOfEntryPoint': 36901,
                                                                      'DebugRVA': 82544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterServiceCtrlHandlerA',
                                                                                      'KERNEL32.dll': 'TlsGetValue',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'WS2_32.dll': 'WSAGetLastError',
                                                                                      'packet.dll': 'PacketSetLoopbackBehavior',
                                                                                      'pthreadVC.dll': 'pthread_create',
                                                                                      'wpcap.dll': 'pcap_next_ex'},
                                                                      'ImportedFunctions': ['install_bpf_program',
                                                                                            'pcap_compile',
                                                                                            'pcap_open_offline',
                                                                                            'pcap_create',
                                                                                            'pcap_open_live',
                                                                                            'bpf_validate',
                                                                                            'pcap_findalldevs',
                                                                                            'pcap_strerror',
                                                                                            'pcap_freealldevs',
                                                                                            'pcap_geterr',
                                                                                            'pcap_close',
                                                                                            'pcap_setfilter',
                                                                                            'pcap_stats',
                                                                                            'pcap_next_ex',
                                                                                            'gethostbyaddr',
                                                                                            'closesocket',
                                                                                            'WSASetLastError',
                                                                                            'getsockname',
                                                                                            'htonl',
                                                                                            'inet_addr',
                                                                                            'getservbyname',
                                                                                            'ntohl',
                                                                                            'inet_ntoa',
                                                                                            'ntohs',
                                                                                            'accept',
                                                                                            'htons',
                                                                                            'connect',
                                                                                            'WSAStartup',
                                                                                            'shutdown',
                                                                                            'WSACleanup',
                                                                                            'recv',
                                                                                            'bind',
                                                                                            'socket',
                                                                                            'send',
                                                                                            'listen',
                                                                                            'getservbyport',
                                                                                            'select',
                                                                                            'gethostbyname',
                                                                                            'getpeername',
                                                                                            'WSAGetLastError',
                                                                                            'pthread_attr_init',
                                                                                            'pthread_attr_setdetachstate',
                                                                                            'pthread_exit',
                                                                                            'pthread_cancel',
                                                                                            'pthread_attr_destroy',
                                                                                            'pthread_setcancelstate',
                                                                                            'pthread_setcanceltype',
                                                                                            'pthread_create',
                                                                                            'PacketSetMinToCopy',
                                                                                            'PacketSetLoopbackBehavior',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'HeapSize',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileA',
                                                                                            'ReadFile',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'InitializeCriticalSection',
                                                                                            'WriteConsoleW',
                                                                                            'RtlUnwind',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FormatMessageA',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'LoadLibraryA',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'SetEndOfFile',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetProcessHeap',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'TlsGetValue',
                                                                                            'MessageBoxA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'SetServiceStatus',
                                                                                            'LogonUserA',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'RegisterServiceCtrlHandlerA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 132,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1336,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 16384,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/52360f17c9c70c9cea3316560b40c4d89fd705ed7e6b6088c99fc54d4cc35eb5'},
 '52b7b43d7ae52d505e48d25bedaedee9e2a7e337e5752c15cd4a66f79a928a94': {'AddressOfEntryPoint': 39956,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/52b7b43d7ae52d505e48d25bedaedee9e2a7e337e5752c15cd4a66f79a928a94'},
 '52cf5f74e4a061edf5d69f1c56a0c23c8982a3f981fdab08ed7ae42b031cb448': {'AddressOfEntryPoint': 54734,
                                                                      'DebugRVA': 54532,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 46592},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/52cf5f74e4a061edf5d69f1c56a0c23c8982a3f981fdab08ed7ae42b031cb448'},
 '536b4d837d1653134545f46f2df75a4e717f545639865e448aacc8317e2873d8': {'AddressOfEntryPoint': 14584,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 31344,
                                                                      'ExportSize': 50,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetDriveTypeA',
                                                                                      'SHELL32.dll': 'FindExecutableA',
                                                                                      'USER32.dll': 'SetWindowPos'},
                                                                      'ImportedFunctions': ['ShellExecuteA',
                                                                                            'FindExecutableA',
                                                                                            'CharNextA',
                                                                                            'DefWindowProcA',
                                                                                            'GetWindowWord',
                                                                                            'SetWindowWord',
                                                                                            'BeginPaint',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'SetRect',
                                                                                            'EndPaint',
                                                                                            'RegisterClassA',
                                                                                            'OemToCharBuffA',
                                                                                            'LoadCursorA',
                                                                                            'GetLastActivePopup',
                                                                                            'ShowWindow',
                                                                                            'PostMessageA',
                                                                                            'EnableWindow',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'GetWindowRect',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'SendMessageA',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetParent',
                                                                                            'SetDlgItemTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            '_lread',
                                                                                            '_lwrite',
                                                                                            'LocalFree',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'RtlUnwind',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'GetACP',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetErrorMode',
                                                                                            'GetVersion',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'lstrcmpiA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'LocalAlloc',
                                                                                            '_llseek',
                                                                                            'GlobalHandle',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'lstrlenA',
                                                                                            'CreateDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'SetFileTime',
                                                                                            '_lclose',
                                                                                            'DosDateTimeToFileTime',
                                                                                            '_lcreat',
                                                                                            'lstrcpyA',
                                                                                            '_lopen',
                                                                                            'GetVolumeInformationA',
                                                                                            'WinExec',
                                                                                            'GetDriveTypeA',
                                                                                            'GetBkColor',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'SetTextAlign',
                                                                                            'DeleteObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'ExtTextOutA',
                                                                                            'CreateDCA',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'RegQueryValueA'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 102,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1288,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11776,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 20992,
                                                                                       '_winzip_': 15872},
                                                                      'StackReserveSize': 32000,
                                                                      'filename': './data/clean/536b4d837d1653134545f46f2df75a4e717f545639865e448aacc8317e2873d8'},
 '538c214cf4c2e105ce443522798496cc8f112543bf062712f91d7fc0dbe6f7d7': {'AddressOfEntryPoint': 7550,
                                                                      'DebugRVA': 4384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime'},
                                                                      'ImportedFunctions': ['DeviceIoControl',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'InterlockedExchange',
                                                                                            'VirtualQuery',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'SetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 56,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 22016},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/538c214cf4c2e105ce443522798496cc8f112543bf062712f91d7fc0dbe6f7d7'},
 '5440388229f609e47c74734c78beb85d68abd1d79f3cb7a6b6596627d053d0ff': {'AddressOfEntryPoint': 4496,
                                                                      'DebugRVA': 23012,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'DNSAPI.dll': 'DnsGetCacheDataTable',
                                                                                      'IPHLPAPI.DLL': 'ConvertGuidToStringW',
                                                                                      'NSI.dll': 'NsiFreeTable',
                                                                                      'WS2_32.dll': 'InetNtopW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateInstance',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleMode',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetTimeFormatW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileType',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetEnvironmentVariableW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'CheckTokenMembership',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'OpenSCManagerW',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'QueryServiceStatus',
                                                                                      'dhcpcsvc.DLL': 'DhcpHandlePnPEvent',
                                                                                      'dhcpcsvc6.DLL': 'Dhcpv6IsEnabled',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlStringFromGUID'},
                                                                      'ImportedFunctions': ['_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'memcpy',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            'fwprintf',
                                                                                            'fgetpos',
                                                                                            'fflush',
                                                                                            '_fileno',
                                                                                            '_setmode',
                                                                                            '_get_osfhandle',
                                                                                            '_write',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__p__fmode',
                                                                                            'exit',
                                                                                            'setlocale',
                                                                                            '_vsnwprintf',
                                                                                            '_iob',
                                                                                            'toupper',
                                                                                            'memset',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetAdaptersAddresses',
                                                                                            'ConvertInterfaceLuidToGuid',
                                                                                            'SetCurrentThreadCompartmentId',
                                                                                            'GetCurrentThreadCompartmentId',
                                                                                            'ConvertInterfaceLuidToNameW',
                                                                                            'ConvertLengthToIpv4Mask',
                                                                                            'ConvertInterfaceIndexToLuid',
                                                                                            'GetNetworkParams',
                                                                                            'ConvertGuidToStringW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'InetNtopW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileType',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'DnsFree',
                                                                                            'DnsQuery_W',
                                                                                            'DnsResolverOp',
                                                                                            'DnsFlushResolverCache',
                                                                                            'DnsFreeConfigStructure',
                                                                                            'DnsQueryConfigAllocEx',
                                                                                            'DnsGetCacheDataTable',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleMode',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'QueryServiceStatus',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'DhcpEnumClasses',
                                                                                            'DhcpReleaseParameters',
                                                                                            'DhcpAcquireParameters',
                                                                                            'DhcpHandlePnPEvent',
                                                                                            'NsiSetAllParameters',
                                                                                            'NsiGetAllParameters',
                                                                                            'NsiAllocateAndGetTable',
                                                                                            'NsiFreeTable',
                                                                                            'Dhcpv6SetUserClass',
                                                                                            'Dhcpv6GetUserClasses',
                                                                                            'Dhcpv6AcquireParameters',
                                                                                            'Dhcpv6ReleaseParameters',
                                                                                            'Dhcpv6IsEnabled',
                                                                                            'RtlIpv6AddressToStringW',
                                                                                            'RtlIpv6AddressToStringExW',
                                                                                            'RtlIpv4AddressToStringExW',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlStringFromGUID',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 28,
                                                                      'NumberOfImportFunctions': 113,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 19456},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/5440388229f609e47c74734c78beb85d68abd1d79f3cb7a6b6596627d053d0ff'},
 '544a20393e3e0c2935924ee0b5826bc65ae6a256fc041a865d4e84e3c1cfb4d8': {'AddressOfEntryPoint': 22013,
                                                                      'DebugRVA': 4880,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 48064,
                                                                      'ExportSize': 178,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'VirtualFree',
                                                                                      'MSVCP100.dll': '??0_Lockit@std@@QAE@H@Z',
                                                                                      'MSVCR100.dll': 'wcsncpy_s',
                                                                                      'OLEAUT32.dll': 'SafeArrayUnlock',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'CreateEventW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'ExitProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'ReadProcessMemory',
                                                                                            'HeapCreate',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetHandleInformation',
                                                                                            'ReleaseMutex',
                                                                                            'FindFirstFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'LoadLibraryW',
                                                                                            'FindClose',
                                                                                            'SetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'IsWow64Process',
                                                                                            'GetVersionExW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'WriteFile',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStartupInfoW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcAddress',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'CreateMutexW',
                                                                                            'InterlockedExchange',
                                                                                            'VirtualFree',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'MessageBoxW',
                                                                                            'GetMessageW',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'swprintf_s',
                                                                                            'wcsstr',
                                                                                            'memcpy',
                                                                                            'wcsncmp',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'free',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_purecall',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_vsnwprintf',
                                                                                            '_resetstkoflw',
                                                                                            '_vsnwprintf_l',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_crt_debugger_hook',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            'wcsncpy_s',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoCreateInstance',
                                                                                            'IIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'RegisterActiveObject',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnlock',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcessModules'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5540,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 44544},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/544a20393e3e0c2935924ee0b5826bc65ae6a256fc041a865d4e84e3c1cfb4d8'},
 '550a619015a3d74cc3a47c1347d67e251aeb5ea6d0af33bf1404a8ce1b4a148d': {'AddressOfEntryPoint': 14047,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MulDiv',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'RegisterClassA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'wvsprintfA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'EmptyClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'SetForegroundWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 157,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 26160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 26624,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/550a619015a3d74cc3a47c1347d67e251aeb5ea6d0af33bf1404a8ce1b4a148d'},
 '5516375c7bf9f770fc3c31863a9bf217e098e8e45ecbd93464616b458f1b7f35': {'AddressOfEntryPoint': 22512,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSidSubAuthority',
                                                                                      'KERNEL32.dll': 'CreateDirectoryW',
                                                                                      'USER32.dll': 'LockSetForegroundWindow',
                                                                                      'msvcrt.dll': '_vsnwprintf',
                                                                                      'ntdll.dll': 'RtlFreeHeap',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetUserNameW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'LsaFreeMemory',
                                                                                            'GetLengthSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'LsaClose',
                                                                                            'LookupAccountSidW',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'GetSidSubAuthority',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetModuleHandleExW',
                                                                                            'CloseHandle',
                                                                                            'OpenEventW',
                                                                                            'CreateEventW',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'CompareStringW',
                                                                                            'Sleep',
                                                                                            'GetProcessHeap',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'SetLastError',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetVersionExW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'memcpy',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'memset',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_purecall',
                                                                                            'wcsrchr',
                                                                                            '_vsnprintf',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SendInput',
                                                                                            'LockSetForegroundWindow',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlFreeHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 93,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1888,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 21504},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/5516375c7bf9f770fc3c31863a9bf217e098e8e45ecbd93464616b458f1b7f35'},
 '551886804fd55a4b795cc2e465e8199bc798f71d5fda79f3c3ad853ca14c31cd': {'AddressOfEntryPoint': 21042,
                                                                      'DebugRVA': 4560,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'SETUPAPI.dll': 'CM_Get_First_Log_Conf_Ex',
                                                                                      'USER32.dll': 'CharPrevW',
                                                                                      'msvcrt.dll': 'wcsrchr'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'lstrcpynW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetDateFormatW',
                                                                                            'lstrcpyW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetTickCount',
                                                                                            'fputws',
                                                                                            'fputs',
                                                                                            '_iob',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcschr',
                                                                                            'towlower',
                                                                                            'towupper',
                                                                                            'iswalpha',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            '_controlfp',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'wcscmp',
                                                                                            'wprintf',
                                                                                            'wcsrchr',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SetupDiClassGuidsFromNameExW',
                                                                                            'CM_Free_Log_Conf_Handle',
                                                                                            'CM_Get_Next_Res_Des_Ex',
                                                                                            'CM_Free_Res_Des_Handle',
                                                                                            'CM_Get_Res_Des_Data_Size_Ex',
                                                                                            'CM_Connect_MachineW',
                                                                                            'CM_Locate_DevNode_ExW',
                                                                                            'CM_Reenumerate_DevNode_Ex',
                                                                                            'CM_Disconnect_Machine',
                                                                                            'SetupDiGetINFClassW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiCreateDeviceInfoW',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiBuildClassInfoListExW',
                                                                                            'SetupDiClassNameFromGuidExW',
                                                                                            'SetupDiGetClassDescriptionExW',
                                                                                            'SetupDiOpenClassRegKeyExW',
                                                                                            'SetupDiGetDriverInstallParamsW',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupOpenFileQueue',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupScanFileQueueW',
                                                                                            'SetupCloseFileQueue',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'CM_Get_Device_ID_ExW',
                                                                                            'SetupDiGetDeviceInfoListDetailW',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiGetClassDevsExW',
                                                                                            'SetupDiCreateDeviceInfoListExW',
                                                                                            'CM_Get_Res_Des_Data_Ex',
                                                                                            'CM_Get_DevNode_Status_Ex',
                                                                                            'CM_Get_First_Log_Conf_Ex',
                                                                                            'ExitWindowsEx',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'CharPrevW'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 108,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 33592,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 33792,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/551886804fd55a4b795cc2e465e8199bc798f71d5fda79f3c3ad853ca14c31cd'},
 '552b590ee6c54f05aff5faf910615ef897328b3338cf69f35cd5924a2ba6eb1b': {'AddressOfEntryPoint': 4992,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 33,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/552b590ee6c54f05aff5faf910615ef897328b3338cf69f35cd5924a2ba6eb1b'},
 '554cf2abbfab4481d32bea81616cee8b1a1f043af8c83dfd81df48c15d5349e3': {'AddressOfEntryPoint': 5280,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': '_XcptFilter'},
                                                                      'ImportedFunctions': ['_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 27,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/554cf2abbfab4481d32bea81616cee8b1a1f043af8c83dfd81df48c15d5349e3'},
 '556fb4023100c734b18bd59eff82087922defc89845bc20f285ad2def7611bab': {'AddressOfEntryPoint': 102672,
                                                                      'DebugRVA': 5824,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 241664,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegNotifyChangeKeyValue',
                                                                                      'DUI70.dll': '?SetEnabled@Element@DirectUI@@QAEJ_N@Z',
                                                                                      'DUser.dll': 'InvalidateGadget',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'CreateMutexW',
                                                                                      'OLEACC.dll': 'AccSetRunningUtilityState',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'OskSupport.dll': 'InitializeOSKSupport',
                                                                                      'SHLWAPI.dll': 'StrToIntExW',
                                                                                      'UIAutomationCore.DLL': 'UiaClientsAreListening',
                                                                                      'USER32.dll': 'GetKeyState',
                                                                                      'WINMM.dll': 'waveOutGetNumDevs',
                                                                                      'WMsgAPI.dll': 'WmsgSendMessage',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'dwmapi.dll': 'DwmSetWindowAttribute',
                                                                                      'gdiplus.dll': 'GdiplusStartup',
                                                                                      'msvcrt.dll': 'wcschr',
                                                                                      'ntdll.dll': 'WinSqmIncrementDWORD',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'EventWrite',
                                                                                            'GetTraceEnableFlags',
                                                                                            'EventUnregister',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegOpenKeyExW',
                                                                                            'EventRegister',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegCloseKey',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegGetValueW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'OutputDebugStringA',
                                                                                            'CreateActCtxW',
                                                                                            'ReleaseActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'DeactivateActCtx',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'FreeLibrary',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'CompareStringEx',
                                                                                            'CompareStringOrdinal',
                                                                                            'GetLocaleInfoW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetAtomNameW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FindResourceW',
                                                                                            'GetUserGeoID',
                                                                                            'IsProcessInJob',
                                                                                            'OpenJobObjectW',
                                                                                            'InitializeCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'GetStringTypeExW',
                                                                                            'GetSystemDefaultLocaleName',
                                                                                            'OpenMutexW',
                                                                                            'GetModuleHandleW',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocaleNameToLCID',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'MulDiv',
                                                                                            'GetLocaleInfoEx',
                                                                                            'ResolveLocaleName',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryExW',
                                                                                            'LCIDToLocaleName',
                                                                                            'FreeResource',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetTickCount64',
                                                                                            'CloseHandle',
                                                                                            'ReleaseMutex',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'HeapSetInformation',
                                                                                            'LockResource',
                                                                                            'GetLastError',
                                                                                            'SizeofResource',
                                                                                            'RegisterApplicationRestart',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'CreateMutexW',
                                                                                            'CreateDIBSection',
                                                                                            'SelectClipRgn',
                                                                                            'CreateCompatibleDC',
                                                                                            'TextOutW',
                                                                                            'GdiAlphaBlend',
                                                                                            'SetTextAlign',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'PatBlt',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetObjectW',
                                                                                            'DeleteObject',
                                                                                            'PeekMessageW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetPropW',
                                                                                            'MapWindowPoints',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'MapVirtualKeyExW',
                                                                                            'ReleaseDC',
                                                                                            'GetClassNameW',
                                                                                            'GetWindowLongW',
                                                                                            'FindWindowW',
                                                                                            'OffsetRect',
                                                                                            'VkKeyScanExW',
                                                                                            'IsRectEmpty',
                                                                                            'SetRectEmpty',
                                                                                            'CopyRect',
                                                                                            'LoadStringW',
                                                                                            'CharUpperBuffW',
                                                                                            'PostThreadMessageW',
                                                                                            'InvalidateRect',
                                                                                            'SetForegroundWindow',
                                                                                            'GetKeyboardLayout',
                                                                                            'SetWinEventHook',
                                                                                            'GetCursorInfo',
                                                                                            'GetGUIThreadInfo',
                                                                                            'CreateDialogParamW',
                                                                                            'UnregisterClassA',
                                                                                            'GetWindowMinimizeRect',
                                                                                            'GetForegroundWindow',
                                                                                            'WindowFromPhysicalPoint',
                                                                                            'GetDC',
                                                                                            'PtInRect',
                                                                                            'UnhookWinEvent',
                                                                                            'ShowWindow',
                                                                                            'DispatchMessageW',
                                                                                            'MonitorFromRect',
                                                                                            'SetTimer',
                                                                                            'ScreenToClient',
                                                                                            'LoadImageW',
                                                                                            'KillTimer',
                                                                                            'GetClientRect',
                                                                                            'SetWindowFeedbackSetting',
                                                                                            'PostMessageW',
                                                                                            'IsIconic',
                                                                                            'GetMessageW',
                                                                                            'DestroyWindow',
                                                                                            'SendMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'GetCursorPos',
                                                                                            'CallNextHookEx',
                                                                                            'LoadCursorW',
                                                                                            'GetParent',
                                                                                            'GetMessageExtraInfo',
                                                                                            'SendInput',
                                                                                            'SystemParametersInfoW',
                                                                                            'ClientToScreen',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'AdjustWindowRectEx',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'MonitorFromWindow',
                                                                                            'SetClassLongW',
                                                                                            'LoadIconW',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'SetPropW',
                                                                                            'GetDoubleClickTime',
                                                                                            'MonitorFromPoint',
                                                                                            'RemovePropW',
                                                                                            'SetWindowPlacement',
                                                                                            'EnableWindow',
                                                                                            'SetDlgItemTextW',
                                                                                            'MessageBoxW',
                                                                                            'CheckDlgButton',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetFocus',
                                                                                            'GetKeyState',
                                                                                            'wcscspn',
                                                                                            'wcsspn',
                                                                                            'memcpy_s',
                                                                                            '_wcsicmp',
                                                                                            'memmove_s',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            'wcstoul',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_vsnwprintf',
                                                                                            'free',
                                                                                            'calloc',
                                                                                            'wcscpy_s',
                                                                                            'wcsstr',
                                                                                            'memset',
                                                                                            'malloc',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '_cexit',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '_purecall',
                                                                                            '_itow_s',
                                                                                            '_itow',
                                                                                            'wcstol',
                                                                                            '_wtoi',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_ftol2',
                                                                                            '_ftol2_sse',
                                                                                            'floor',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            'wcschr',
                                                                                            'UninitializeOSKSupport',
                                                                                            'InitializeOSKSupport',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemFree',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'AccSetRunningUtilityState',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'VarBstrCmp',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'PlaySoundW',
                                                                                            'joyReleaseCapture',
                                                                                            'joySetCapture',
                                                                                            'waveOutGetNumDevs',
                                                                                            'WmsgSendMessage',
                                                                                            'InvalidateGadget',
                                                                                            '?CreateInt@Value@DirectUI@@SGPAV12@HW4DynamicScaleValue@@@Z',
                                                                                            '?CreateGraphic@Value@DirectUI@@SGPAV12@PBGGGPAUHINSTANCE__@@_N2@Z',
                                                                                            '?Release@Value@DirectUI@@QAEXXZ',
                                                                                            '??1CritSecLock@DirectUI@@QAE@XZ',
                                                                                            'GetScaleFactor',
                                                                                            '??1Element@DirectUI@@UAE@XZ',
                                                                                            '?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z',
                                                                                            '?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z',
                                                                                            '?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z',
                                                                                            '?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N1@Z',
                                                                                            '?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?Add@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            '?GetRoot@Element@DirectUI@@QAEPAV12@XZ',
                                                                                            '?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ',
                                                                                            '?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?ClassProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?AccNameProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?GetWidth@Element@DirectUI@@QAEHXZ',
                                                                                            '?GetHeight@Element@DirectUI@@QAEHXZ',
                                                                                            '?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z',
                                                                                            '?GetX@Element@DirectUI@@QAEHXZ',
                                                                                            '?GetY@Element@DirectUI@@QAEHXZ',
                                                                                            '?GetPadding@Element@DirectUI@@QAEPBUtagRECT@@PAPAVValue@2@@Z',
                                                                                            '?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z',
                                                                                            '?GetFontSize@Element@DirectUI@@QAEHXZ',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetPadding@Element@DirectUI@@QAEJHHHH@Z',
                                                                                            '??0Element@DirectUI@@QAE@XZ',
                                                                                            '?SetContentString@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetFontFace@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetFontSize@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetActive@Element@DirectUI@@QAEJH@Z',
                                                                                            '?Destroy@NativeHWNDHost@DirectUI@@QAEXXZ',
                                                                                            '??0NativeHWNDHost@DirectUI@@QAE@XZ',
                                                                                            '?Initialize@NativeHWNDHost@DirectUI@@QAEJPBG0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@I@Z',
                                                                                            '??1NativeHWNDHost@DirectUI@@UAE@XZ',
                                                                                            '?CreateHostWindow@NativeHWNDHost@DirectUI@@UAEPAUHWND__@@KPBG0KHHHHPAU3@PAUHMENU__@@PAUHINSTANCE__@@PAX@Z',
                                                                                            '?SetWidth@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetHeight@Element@DirectUI@@QAEJH@Z',
                                                                                            '?GetLocation@Element@DirectUI@@QAEPBUtagPOINT@@PAPAVValue@2@@Z',
                                                                                            '?GetExtent@Element@DirectUI@@QAEPBUtagSIZE@@PAPAVValue@2@@Z',
                                                                                            '?Paint@AnimationStrip@DirectUI@@MAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?OnDestroy@AnimationStrip@DirectUI@@MAEXXZ',
                                                                                            '?OnPropertyChanged@AnimationStrip@DirectUI@@MAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?SetPlay@AnimationStrip@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetFrameIndex@AnimationStrip@DirectUI@@QAEJH@Z',
                                                                                            '?GetPlay@AnimationStrip@DirectUI@@QAE_NXZ',
                                                                                            '?GetFrameIndex@AnimationStrip@DirectUI@@QAEHXZ',
                                                                                            '?PlayProp@AnimationStrip@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?FrameIndexProp@AnimationStrip@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '??1AnimationStrip@DirectUI@@UAE@XZ',
                                                                                            '??0AnimationStrip@DirectUI@@QAE@XZ',
                                                                                            '?Initialize@AnimationStrip@DirectUI@@QAEJIPAVElement@2@PAK@Z',
                                                                                            '?Register@AnimationStrip@DirectUI@@SGJXZ',
                                                                                            '?GetClassInfoPtr@AnimationStrip@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?GetValue@Element@DirectUI@@QAEPAVValue@2@PBUPropertyInfo@2@HPAUUpdateCache@2@@Z',
                                                                                            '?GetBoolTrue@Value@DirectUI@@SGPAV12@XZ',
                                                                                            '?IsEqual@Value@DirectUI@@QAE_NPAV12@@Z',
                                                                                            '?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHBITMAP__@@EI_N11@Z',
                                                                                            'ProcessAlphaBitmapI',
                                                                                            '?ValuePattern@Schema@DirectUI@@2HA',
                                                                                            '?TogglePattern@Schema@DirectUI@@2HA',
                                                                                            '?ExpandCollapsePattern@Schema@DirectUI@@2HA',
                                                                                            '?InvokePattern@Schema@DirectUI@@2HA',
                                                                                            '?get_ProviderOptions@ElementProvider@DirectUI@@UAGJPAW4ProviderOptions@@@Z',
                                                                                            '?get_HostRawElementProvider@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderSimple@@@Z',
                                                                                            '?get_FragmentRoot@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderFragmentRoot@@@Z',
                                                                                            '?get_BoundingRectangle@ElementProvider@DirectUI@@UAGJPAUUiaRect@@@Z',
                                                                                            '?TossElement@ElementProvider@DirectUI@@UAEXXZ',
                                                                                            '?SetFocus@ElementProvider@DirectUI@@UAGJXZ',
                                                                                            '?Navigate@ElementProvider@DirectUI@@UAGJW4NavigateDirection@@PAPAUIRawElementProviderFragment@@@Z',
                                                                                            '?Init@ProviderProxy@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?GetRuntimeId@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z',
                                                                                            '?GetPropertyValue@ElementProvider@DirectUI@@UAGJHPAUtagVARIANT@@@Z',
                                                                                            '?GetEmbeddedFragmentRoots@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z',
                                                                                            '?GetElement@ElementProvider@DirectUI@@UAEPDVElement@2@XZ',
                                                                                            '?AdviseEventRemoved@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z',
                                                                                            '?AdviseEventAdded@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z',
                                                                                            '?DoInvoke@ElementProvider@DirectUI@@IAAJHZZ',
                                                                                            '?Init@ElementProvider@DirectUI@@MAEJPAVElement@2@PAVInvokeHelper@2@@Z',
                                                                                            '?DoInvokeArgs@ElementProvider@DirectUI@@QAEJHP6GPAVProviderProxy@2@PAVElement@2@@ZPAD@Z',
                                                                                            '?Release@ElementProvider@DirectUI@@UAGKXZ',
                                                                                            '?AddRef@ElementProvider@DirectUI@@UAGKXZ',
                                                                                            '?QueryInterface@ElementProvider@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?TossPatternProvider@ElementProvider@DirectUI@@QAEXW4Pattern@Schema@2@@Z',
                                                                                            '??1ElementProvider@DirectUI@@UAE@XZ',
                                                                                            '??0ElementProvider@DirectUI@@QAE@XZ',
                                                                                            '?IsPatternSupported@ElementProxy@DirectUI@@IAEJW4Pattern@Schema@2@PA_N@Z',
                                                                                            '?GetProperty@ElementProxy@DirectUI@@IAEJPAUtagVARIANT@@H@Z',
                                                                                            '?Init@ElementProxy@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?DoMethod@ElementProxy@DirectUI@@UAEJHPAD@Z',
                                                                                            '??1AutoLock@DirectUI@@QAE@XZ',
                                                                                            '?Release@RefcountBase@DirectUI@@QAEJXZ',
                                                                                            '?AddRef@RefcountBase@DirectUI@@QAEJXZ',
                                                                                            '??1RefcountBase@DirectUI@@UAE@XZ',
                                                                                            '??0RefcountBase@DirectUI@@QAE@XZ',
                                                                                            '?PatternFromPatternId@Schema@DirectUI@@SG?AW4Pattern@12@H@Z',
                                                                                            '?CreatePatternProvider@Schema@DirectUI@@SGJW4Pattern@12@PAVElementProvider@2@PAPAUIUnknown@@@Z',
                                                                                            '?QueueDefaultAction@Element@DirectUI@@QAEJXZ',
                                                                                            '?AccValueProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?_PostEvent@Element@DirectUI@@AAEXPAUEvent@2@H@Z',
                                                                                            '?PaintContent@Element@DirectUI@@QAEXPAUHDC__@@PBUtagRECT@@@Z',
                                                                                            '?SetFrameDuration@AnimationStrip@DirectUI@@QAEJH@Z',
                                                                                            '?SetFrameWidth@AnimationStrip@DirectUI@@QAEJH@Z',
                                                                                            '?SetBorderThickness@Element@DirectUI@@QAEJHHHH@Z',
                                                                                            '?GetRootRelativeBounds@Element@DirectUI@@QAEJPAUtagRECT@@@Z',
                                                                                            '?SetValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@HPAVValue@2@@Z',
                                                                                            '?CreateBool@Value@DirectUI@@SGPAV12@_N@Z',
                                                                                            '?ForegroundProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            'ARGBColorFromEnumI',
                                                                                            '?UiaRaiseAutomationEvent@Schema@DirectUI@@2P6GJPAUIRawElementProviderSimple@@H@ZA',
                                                                                            '?UiaRaiseAutomationPropertyChangedEvent@Schema@DirectUI@@2P6GJPAUIRawElementProviderSimple@@HUtagVARIANT@@1@ZA',
                                                                                            '?OnReceivedDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z',
                                                                                            '?OnPropertyChanged@Button@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnLostDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z',
                                                                                            '?OnInput@Button@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '??1Button@DirectUI@@UAE@XZ',
                                                                                            '?Initialize@Button@DirectUI@@QAEJIPAVElement@2@PAK@Z',
                                                                                            '??0Button@DirectUI@@QAE@XZ',
                                                                                            '?Register@Button@DirectUI@@SGJXZ',
                                                                                            '?GetClassInfoPtr@Button@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?SetPressed@Button@DirectUI@@QAEJ_N@Z',
                                                                                            '?GetBoolFalse@Value@DirectUI@@SGPAV12@XZ',
                                                                                            '?GetIntZero@Value@DirectUI@@SGPAV12@XZ',
                                                                                            '?GetSheet@DUIXmlParser@DirectUI@@QAEJPBGPAPAVValue@2@@Z',
                                                                                            '?SetAccRole@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetTooltip@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetAccDesc@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?GetAccRole@Element@DirectUI@@QAEHXZ',
                                                                                            '?ExtentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?LocationProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?UiaRaiseStructureChangedEvent@Schema@DirectUI@@2P6GJPAUIRawElementProviderSimple@@W4StructureChangeType@@PAHH@ZA',
                                                                                            '?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?Release@ClassInfoBase@DirectUI@@UAEHXZ',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnDestroy@Element@DirectUI@@UAEXXZ',
                                                                                            '?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z',
                                                                                            '?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z',
                                                                                            '?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ',
                                                                                            '?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ',
                                                                                            '?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ',
                                                                                            '?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ',
                                                                                            '?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ',
                                                                                            '?AddRef@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?AddChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z',
                                                                                            '?Find@ElementProviderManager@DirectUI@@SGPAVElementProvider@2@PAVElement@2@@Z',
                                                                                            '?Create@HWNDElementProvider@DirectUI@@SGJPAVHWNDElement@2@PAVInvokeHelper@2@PAPAV12@@Z',
                                                                                            '?Create@ElementProvider@DirectUI@@SGJPAVElement@2@PAVInvokeHelper@2@PAPAV12@@Z',
                                                                                            '?GetInvokeHelper@InvokeManager@DirectUI@@SGJPAPAVInvokeHelper@2@@Z',
                                                                                            '?Init@Schema@DirectUI@@SGJXZ',
                                                                                            'GetElementDataEntry',
                                                                                            '??1IDataEntry@DirectUI@@UAE@XZ',
                                                                                            '??0IDataEntry@DirectUI@@QAE@XZ',
                                                                                            '?SetVerticalScript@RichText@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetLocale@RichText@DirectUI@@QAEJPBG@Z',
                                                                                            '?GetClassInfoPtr@RichText@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?GetPressed@Button@DirectUI@@QAE_NXZ',
                                                                                            '?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z',
                                                                                            '?Register@ClassInfoBase@DirectUI@@QAEJXZ',
                                                                                            '?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z',
                                                                                            '??1ClassInfoBase@DirectUI@@UAE@XZ',
                                                                                            '??0ClassInfoBase@DirectUI@@QAE@XZ',
                                                                                            'DisableAnimations',
                                                                                            'EnableAnimations',
                                                                                            '?Register@Element@DirectUI@@SGJXZ',
                                                                                            '?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?SetFont@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetAccValue@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetAccName@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetAlpha@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetSelected@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetID@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetX@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetY@Element@DirectUI@@QAEJH@Z',
                                                                                            'InitThread',
                                                                                            'UnInitThread',
                                                                                            '?EndDefer@Element@DirectUI@@QAEXK@Z',
                                                                                            'UnInitProcessPriv',
                                                                                            'InitProcessPriv',
                                                                                            '?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QAEXXZ',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z',
                                                                                            '?Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UAEJXZ',
                                                                                            '?DoubleBuffered@Element@DirectUI@@QAEX_N@Z',
                                                                                            '?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?SetKeyFocus@Element@DirectUI@@UAEXXZ',
                                                                                            '?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z',
                                                                                            '?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z',
                                                                                            '?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z',
                                                                                            '?Add@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?StartDefer@Element@DirectUI@@QAEXPAK@Z',
                                                                                            '?Destroy@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?Destroy@Layout@DirectUI@@QAEXXZ',
                                                                                            '?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z',
                                                                                            '?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z',
                                                                                            '??1HWNDElement@DirectUI@@UAE@XZ',
                                                                                            '??0HWNDElement@DirectUI@@QAE@XZ',
                                                                                            '?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?Register@HWNDElement@DirectUI@@SGJXZ',
                                                                                            '?ThemeChange@HWNDElement@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z',
                                                                                            '?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z',
                                                                                            '?ElementFromPoint@HWNDElement@DirectUI@@QAEPAVElement@2@PAUtagPOINT@@@Z',
                                                                                            '?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z',
                                                                                            '?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z',
                                                                                            '?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z',
                                                                                            '?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z',
                                                                                            '?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?OnDestroy@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?GetClassInfoW@HWNDElement@DirectUI@@UAEPAUIClassInfo@2@XZ',
                                                                                            '?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ',
                                                                                            '?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?SetAccessible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z',
                                                                                            '?SetVisible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?GetKeyFocused@Element@DirectUI@@UAE_NXZ',
                                                                                            '?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?IsContentProtected@Element@DirectUI@@UAE_NXZ',
                                                                                            '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            '?Remove@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            'StrToID',
                                                                                            '?SetEnabled@Element@DirectUI@@QAEJ_N@Z',
                                                                                            'CreateXmlReader',
                                                                                            'UiaClientsAreListening',
                                                                                            'StrToIntExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 557,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 480704,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.idata\x00\x00': 25088,
                                                                                       '.reloc\x00\x00': 13824,
                                                                                       '.rsrc\x00\x00\x00': 480768,
                                                                                       '.text\x00\x00\x00': 232960},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/556fb4023100c734b18bd59eff82087922defc89845bc20f285ad2def7611bab'},
 '5587cea38b44259178bbc4fc45fedbef86f0273bf662eebdf397c9e58c168954': {'AddressOfEntryPoint': 5472,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-errorhandling-l1-1-1.dll': 'RaiseException',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoUninitialize',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsCreateStringReference',
                                                                                      'msvcrt.dll': '_XcptFilter'},
                                                                      'ImportedFunctions': ['_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'RoGetActivationFactory',
                                                                                            'RoInitialize',
                                                                                            'RoUninitialize',
                                                                                            'WindowsCreateStringReference',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 30,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1816,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/5587cea38b44259178bbc4fc45fedbef86f0273bf662eebdf397c9e58c168954'},
 '55f6d2483307499de4bd0fe81359b648734c905e3ef02dac2ff04b0a1331ce6d': {'AddressOfEntryPoint': 22016,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleMode',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileAttributesW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalSize',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AddAce',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupAccountNameW',
                                                                                      'api-ms-win-security-provider-l1-1-0.dll': 'GetSecurityInfo',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertStringSidToSidW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlIsCapabilitySid'},
                                                                      'ImportedFunctions': ['fclose',
                                                                                            'fgetwc',
                                                                                            'wcscpy_s',
                                                                                            'fputws',
                                                                                            'wcsrchr',
                                                                                            'wcscat_s',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '_ultow',
                                                                                            '_wperror',
                                                                                            '_wfopen',
                                                                                            '_local_unwind4',
                                                                                            'realloc',
                                                                                            'printf',
                                                                                            'malloc',
                                                                                            '_wcsnicmp',
                                                                                            'calloc',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            'free',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'wcsncpy_s',
                                                                                            '__p__fmode',
                                                                                            'feof',
                                                                                            '_cexit',
                                                                                            'wcschr',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_wcsicmp',
                                                                                            'swprintf_s',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'memcpy',
                                                                                            'NtOpenFile',
                                                                                            'RtlReleaseRelativeName',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlDosPathNameToRelativeNtPathName_U',
                                                                                            'NtQueryInformationFile',
                                                                                            'RtlIsPackageSid',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlIsCapabilitySid',
                                                                                            'IsValidSid',
                                                                                            'InitializeAcl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetLengthSid',
                                                                                            'IsValidAcl',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'EqualSid',
                                                                                            'SetSecurityAccessMask',
                                                                                            'DeleteAce',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'CopySid',
                                                                                            'AddAce',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'WriteFile',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFinalPathNameByHandleW',
                                                                                            'GetFileType',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesW',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'FormatMessageW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'LookupAccountSidW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'LookupAccountNameW',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'SetSecurityInfo',
                                                                                            'GetSecurityInfo',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LocalSize'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 100,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 19968},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/55f6d2483307499de4bd0fe81359b648734c905e3ef02dac2ff04b0a1331ce6d'},
 '56274fda657cbf79840e6e9b7c9d3f2cbc7cefb4840e9826958cc59b6f8eff2d': {'AddressOfEntryPoint': 76912,
                                                                      'DebugRVA': 34224,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'ReadConsoleA',
                                                                                      'api-ms-win-core-debug-l1-1-0.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-0.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-0.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-1-0.dll': 'DeleteFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-1-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-libraryloader-l1-1-0.dll': 'GetModuleFileNameA',
                                                                                      'api-ms-win-core-localregistry-l1-1-0.dll': 'RegOpenKeyExA',
                                                                                      'api-ms-win-core-memory-l1-1-0.dll': 'VirtualQuery',
                                                                                      'api-ms-win-core-misc-l1-1-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-namedpipe-l1-1-0.dll': 'PeekNamedPipe',
                                                                                      'api-ms-win-core-processenvironment-l1-1-0.dll': 'SetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-0.dll': 'CreateProcessA',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-1-0.dll': 'DeleteCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-1-0.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'Beep',
                                                                                      'dbgeng.dll': 'DebugConnect',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['??1exception@@UAE@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '_XcptFilter',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'fopen',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memcpy',
                                                                                            '__iob_func',
                                                                                            'realloc',
                                                                                            'isprint',
                                                                                            '__p__commode',
                                                                                            '_spawnlp',
                                                                                            'strrchr',
                                                                                            '??0exception@@QAE@ABQBDH@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '_callnewh',
                                                                                            'strtoul',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'rewind',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            'fgetwc',
                                                                                            '_onexit',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'feof',
                                                                                            'tolower',
                                                                                            '_vsnprintf',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            'getenv',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'free',
                                                                                            'wcsstr',
                                                                                            'malloc',
                                                                                            'isspace',
                                                                                            'printf',
                                                                                            '_purecall',
                                                                                            'memmove',
                                                                                            '_unlock',
                                                                                            '_strlwr',
                                                                                            'strstr',
                                                                                            'strchr',
                                                                                            'fclose',
                                                                                            'fgets',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'FormatMessageA',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'InitializeCriticalSection',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'EnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetStdHandle',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'ReadConsoleA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFileType',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'CreateFileA',
                                                                                            'DeleteFileW',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'SetThreadPriority',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'OutputDebugStringA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'PeekNamedPipe',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemInfo',
                                                                                            'GetComputerNameExA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Beep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DebugCreate',
                                                                                            'DebugConnect',
                                                                                            'DelayLoadFailureHook',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 134,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 23936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 7168,
                                                                                       '.rsrc\x00\x00\x00': 24064,
                                                                                       '.text\x00\x00\x00': 76800},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/56274fda657cbf79840e6e9b7c9d3f2cbc7cefb4840e9826958cc59b6f8eff2d'},
 '562aa49e875b9cebe7f7701816cecfab6b59dd132ccb0754480efec80ef315a2': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 47120,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 47616,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/562aa49e875b9cebe7f7701816cecfab6b59dd132ccb0754480efec80ef315a2'},
 '563bf71d86e17cee2324b7b0b6f0f67f1e887bb413b138b359777096b926928f': {'AddressOfEntryPoint': 3088738,
                                                                      'DebugRVA': 3088344,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 80,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 308132,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 308224,
                                                                                       '.text\x00\x00\x00': 3080704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/563bf71d86e17cee2324b7b0b6f0f67f1e887bb413b138b359777096b926928f'},
 '5677d8babce093f8b67ae7bda6ec28b1f9196a8398c7fe482ed7eba03272ea26': {'AddressOfEntryPoint': 88606,
                                                                      'DebugRVA': 88376,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4824,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 81920},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5677d8babce093f8b67ae7bda6ec28b1f9196a8398c7fe482ed7eba03272ea26'},
 '567c21be2e1832abe66883996013624155a4f6e0e9e53e3f11886425d593f90b': {'AddressOfEntryPoint': 912224,
                                                                      'DebugRVA': 5824,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 999424,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptContextAddRef',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CertGetCertificateContextProperty',
                                                                                      'CRYPTUI.dll': 'CryptUIDlgViewCertificateW',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'NETAPI32.dll': 'DsRoleFreeMemory',
                                                                                      'NTDSAPI.dll': 'DsBindW',
                                                                                      'Normaliz.dll': 'IdnToUnicode',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SETUPAPI.dll': 'SetupGetIntField',
                                                                                      'SHELL32.dll': 'SHGetKnownFolderPath',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'SendDlgItemMessageA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'certcli.dll': 'CACountCAs',
                                                                                      'msvcrt.dll': 'fprintf',
                                                                                      'ncrypt.dll': 'BCryptResolveProviders',
                                                                                      'ntdll.dll': 'RtlTimeToSecondsSince1970',
                                                                                      'ole32.dll': 'PropVariantClear'},
                                                                      'ImportedFunctions': ['CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'LookupAccountNameW',
                                                                                            'IsValidSid',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ImpersonateSelf',
                                                                                            'RevertToSelf',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'LookupAccountSidW',
                                                                                            'CryptGetProvParam',
                                                                                            'CryptGetUserKey',
                                                                                            'CryptGetKeyParam',
                                                                                            'CryptDestroyKey',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'OpenProcessToken',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'CryptSetProvParam',
                                                                                            'CryptGenRandom',
                                                                                            'CryptCreateHash',
                                                                                            'CryptVerifySignatureW',
                                                                                            'CryptHashData',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptSetKeyParam',
                                                                                            'CryptDecrypt',
                                                                                            'CryptImportKey',
                                                                                            'RegOpenKeyW',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDuplicateKey',
                                                                                            'CryptEncrypt',
                                                                                            'CryptGenKey',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'AddAccessDeniedAce',
                                                                                            'AddAccessAllowedAce',
                                                                                            'AddAccessDeniedObjectAce',
                                                                                            'AddAccessAllowedObjectAce',
                                                                                            'AddAce',
                                                                                            'InitializeAcl',
                                                                                            'LsaStorePrivateData',
                                                                                            'LsaRetrievePrivateData',
                                                                                            'RegConnectRegistryW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'CryptEnumProvidersA',
                                                                                            'CryptGetDefaultProviderW',
                                                                                            'LogonUserExW',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CreateWellKnownSid',
                                                                                            'MakeAbsoluteSD',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'LsaClose',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaOpenPolicy',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'DuplicateToken',
                                                                                            'OpenThreadToken',
                                                                                            'RegCreateKeyExW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'DeleteAce',
                                                                                            'EqualSid',
                                                                                            'GetAce',
                                                                                            'GetAclInformation',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'CryptSignHashW',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptExportKey',
                                                                                            'CryptDuplicateHash',
                                                                                            'CryptContextAddRef',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'EnterCriticalSection',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetVersionExW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetComputerNameW',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryW',
                                                                                            'DecodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'GetTickCount64',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'LocalReAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'RaiseException',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'FormatMessageW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'lstrcmpW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcmpiW',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'SetConsoleMode',
                                                                                            'EncodePointer',
                                                                                            'VerSetConditionMask',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'CompareFileTime',
                                                                                            'FreeLibrary',
                                                                                            'GetStartupInfoW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetTempFileNameW',
                                                                                            'OpenEventW',
                                                                                            'PulseEvent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LocalFree',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalAlloc',
                                                                                            'GetFileAttributesW',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetLocaleInfoW',
                                                                                            'FindResourceExW',
                                                                                            'SearchPathW',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProfileStringA',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'GetFileTime',
                                                                                            'lstrlenW',
                                                                                            'GetCommandLineW',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetTempPathW',
                                                                                            'WriteConsoleW',
                                                                                            'GetACP',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLocalTime',
                                                                                            'OpenProcess',
                                                                                            'HeapSetInformation',
                                                                                            'LoadLibraryExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetSystemInfo',
                                                                                            'GetCurrentThread',
                                                                                            'FoldStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_itoa_s',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'wcscpy_s',
                                                                                            'towupper',
                                                                                            'iswlower',
                                                                                            'towlower',
                                                                                            'iswupper',
                                                                                            'sscanf',
                                                                                            'wcstok',
                                                                                            'memmove',
                                                                                            'wcschr',
                                                                                            'wcsrchr',
                                                                                            'iswdigit',
                                                                                            'strpbrk',
                                                                                            'strcat_s',
                                                                                            'strcpy_s',
                                                                                            'strspn',
                                                                                            'fwrite',
                                                                                            'ftell',
                                                                                            '_fileno',
                                                                                            '_setmode',
                                                                                            'wcstoul',
                                                                                            'fgetws',
                                                                                            'feof',
                                                                                            'fgetc',
                                                                                            '_wfopen',
                                                                                            'fputws',
                                                                                            'atoi',
                                                                                            'isdigit',
                                                                                            '__iob_func',
                                                                                            'vfwprintf',
                                                                                            '_wgetenv',
                                                                                            '_except_handler4_common',
                                                                                            'iswxdigit',
                                                                                            '_wsetlocale',
                                                                                            'iswalpha',
                                                                                            'isxdigit',
                                                                                            '__isascii',
                                                                                            'gmtime',
                                                                                            'iswspace',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'malloc',
                                                                                            '_vsnwprintf',
                                                                                            'fwprintf',
                                                                                            '_iob',
                                                                                            '_wfopen_s',
                                                                                            'fclose',
                                                                                            '_strnicmp',
                                                                                            '_purecall',
                                                                                            'fflush',
                                                                                            '_fgetwchar',
                                                                                            'wcsspn',
                                                                                            '_wcsnicmp',
                                                                                            'wcsstr',
                                                                                            '?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                            'qsort',
                                                                                            'wcscspn',
                                                                                            'getenv',
                                                                                            'free',
                                                                                            '_wcsicmp',
                                                                                            'memcmp',
                                                                                            'swscanf',
                                                                                            '_stricmp',
                                                                                            '_wtoi',
                                                                                            '_vsnprintf',
                                                                                            '_wcslwr',
                                                                                            'strstr',
                                                                                            'wcsncmp',
                                                                                            '_ultow',
                                                                                            'strncmp',
                                                                                            'bsearch',
                                                                                            'fopen',
                                                                                            'fgets',
                                                                                            'strchr',
                                                                                            'fputs',
                                                                                            'fseek',
                                                                                            'strcspn',
                                                                                            'ferror',
                                                                                            '_swab',
                                                                                            '_strlwr',
                                                                                            'fprintf',
                                                                                            'CACertTypeAccessCheck',
                                                                                            'CAEnumCertTypesEx',
                                                                                            'CAFindCertTypeByName',
                                                                                            'CAGetCertTypeFlagsEx',
                                                                                            'CAGetCertTypePropertyEx',
                                                                                            'CAFreeCertTypeProperty',
                                                                                            'CAGetCertTypeKeySpec',
                                                                                            'CAGetCertTypeExpiration',
                                                                                            'CAGetCertTypeExtensions',
                                                                                            'CAFreeCertTypeExtensions',
                                                                                            'CAEnumCertTypesForCAEx',
                                                                                            'CAGetCertTypeProperty',
                                                                                            'CACertTypeAccessCheckEx',
                                                                                            'CAEnumNextCertType',
                                                                                            'CACloseCertType',
                                                                                            'CAEnumFirstCA',
                                                                                            'CAFindByName',
                                                                                            'CAGetCAProperty',
                                                                                            'CAFreeCAProperty',
                                                                                            'CAEnumNextCA',
                                                                                            'CACloseCA',
                                                                                            'CAGetCAFlags',
                                                                                            'CAGetCAExpiration',
                                                                                            'CAAccessCheck',
                                                                                            'CAGetCACertificate',
                                                                                            'CAGetCASecurity',
                                                                                            'CASetCAProperty',
                                                                                            'CAUpdateCAEx',
                                                                                            'CAFindByCertType',
                                                                                            'CAEnumCertTypesForCA',
                                                                                            'CACountCertTypes',
                                                                                            'CARemoveCACertificateTypeEx',
                                                                                            'CAAddCACertificateTypeEx',
                                                                                            'CAUpdateCA',
                                                                                            'CASetCASecurity',
                                                                                            'CASetCACertificate',
                                                                                            'CASetCAFlags',
                                                                                            'CACreateNewCA',
                                                                                            'CACountCAs',
                                                                                            'CryptEncodeObjectEx',
                                                                                            'CryptFindOIDInfo',
                                                                                            'CertFindExtension',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'PFXExportCertStoreEx',
                                                                                            'PFXExportCertStore',
                                                                                            'CryptFreeOIDFunctionAddress',
                                                                                            'CryptGetOIDFunctionAddress',
                                                                                            'CryptInitOIDFunctionSet',
                                                                                            'CertNameToStrW',
                                                                                            'CertStrToNameW',
                                                                                            'PFXImportCertStore',
                                                                                            'CryptFormatObject',
                                                                                            'CryptDecryptMessage',
                                                                                            'CryptEncryptMessage',
                                                                                            'CryptSignMessage',
                                                                                            'CertAddCertificateLinkToStore',
                                                                                            'CertGetIntendedKeyUsage',
                                                                                            'CryptHashPublicKeyInfo',
                                                                                            'CryptSignCertificate',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CryptSignAndEncodeCertificate',
                                                                                            'CryptImportPublicKeyInfoEx2',
                                                                                            'CertDuplicateStore',
                                                                                            'CryptMsgUpdate',
                                                                                            'CryptMsgOpenToEncode',
                                                                                            'CertCreateCTLContext',
                                                                                            'CertSetCertificateContextPropertiesFromCTLEntry',
                                                                                            'CertCreateContext',
                                                                                            'I_CertProtectFunction',
                                                                                            'CertAddStoreToCollection',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptMemFree',
                                                                                            'CertVerifySubjectCertificateContext',
                                                                                            'CryptVerifyCertificateSignatureEx',
                                                                                            'CertGetEnhancedKeyUsage',
                                                                                            'CertVerifyCRLTimeValidity',
                                                                                            'CertVerifyRevocation',
                                                                                            'CertVerifyTimeValidity',
                                                                                            'CryptVerifyCertificateSignature',
                                                                                            'CryptEnumKeyIdentifierProperties',
                                                                                            'CryptImportPublicKeyInfo',
                                                                                            'CertDuplicateCRLContext',
                                                                                            'CertDeleteCRLFromStore',
                                                                                            'CertAddCTLContextToStore',
                                                                                            'CertAddCRLContextToStore',
                                                                                            'CertEnumSystemStore',
                                                                                            'CertEnumSystemStoreLocation',
                                                                                            'CertEnumPhysicalStore',
                                                                                            'CertControlStore',
                                                                                            'CertSaveStore',
                                                                                            'CryptFindLocalizedName',
                                                                                            'CertAddSerializedElementToStore',
                                                                                            'CertAddEncodedCTLToStore',
                                                                                            'CertAddEncodedCRLToStore',
                                                                                            'CertAddEncodedCertificateToStore',
                                                                                            'CertFreeCTLContext',
                                                                                            'CertSetCTLContextProperty',
                                                                                            'CertSetCRLContextProperty',
                                                                                            'CryptFindCertificateKeyProvInfo',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CertEnumCertificateContextProperties',
                                                                                            'CertGetCRLContextProperty',
                                                                                            'CertEnumCRLContextProperties',
                                                                                            'CertGetCTLContextProperty',
                                                                                            'CertEnumCTLContextProperties',
                                                                                            'CertSetStoreProperty',
                                                                                            'CertAddCertificateContextToStore',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CertGetCertificateChain',
                                                                                            'CertSetCertificateContextProperty',
                                                                                            'CertComparePublicKeyInfo',
                                                                                            'CryptExportPublicKeyInfo',
                                                                                            'CryptHashCertificate2',
                                                                                            'CryptDecodeObjectEx',
                                                                                            'CertEnumCTLsInStore',
                                                                                            'CertDeleteCertificateFromStore',
                                                                                            'CertGetNameStringW',
                                                                                            'CertOpenStore',
                                                                                            'CryptQueryObject',
                                                                                            'CryptMsgClose',
                                                                                            'CryptMsgGetParam',
                                                                                            'CryptMsgGetAndVerifySigner',
                                                                                            'CryptMsgControl',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'PFXIsPFXBlob',
                                                                                            'CertGetPublicKeyLength',
                                                                                            'CryptGetKeyIdentifierProperty',
                                                                                            'CertFindAttribute',
                                                                                            'CryptHashCertificate',
                                                                                            'CertCompareCertificateName',
                                                                                            'CryptDecodeObject',
                                                                                            'CryptRegisterOIDInfo',
                                                                                            'CertCreateCertificateContext',
                                                                                            'CryptEnumOIDInfo',
                                                                                            'CertCreateCRLContext',
                                                                                            'CertFreeCRLContext',
                                                                                            'CertEnumCRLsInStore',
                                                                                            'CertCloseStore',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'InitCommonControlsEx',
                                                                                            'CryptUIDlgViewCRLW',
                                                                                            'CryptUIDlgFreeCAContext',
                                                                                            'CryptUIDlgViewCertificateW',
                                                                                            'GetStockObject',
                                                                                            'NCryptIsKeyHandle',
                                                                                            'NCryptOpenStorageProvider',
                                                                                            'NCryptImportKey',
                                                                                            'NCryptFreeObject',
                                                                                            'NCryptGetProperty',
                                                                                            'BCryptFreeBuffer',
                                                                                            'NCryptSetProperty',
                                                                                            'NCryptFinalizeKey',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptCreateHash',
                                                                                            'BCryptDecrypt',
                                                                                            'BCryptDestroyHash',
                                                                                            'BCryptDestroyKey',
                                                                                            'BCryptEncrypt',
                                                                                            'BCryptExportKey',
                                                                                            'BCryptFinishHash',
                                                                                            'BCryptGenRandom',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptHashData',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptSetProperty',
                                                                                            'BCryptSignHash',
                                                                                            'BCryptVerifySignature',
                                                                                            'NCryptCreatePersistedKey',
                                                                                            'NCryptDecrypt',
                                                                                            'NCryptDeleteKey',
                                                                                            'NCryptDeriveKey',
                                                                                            'NCryptEncrypt',
                                                                                            'NCryptExportKey',
                                                                                            'NCryptOpenKey',
                                                                                            'NCryptSecretAgreement',
                                                                                            'NCryptSignHash',
                                                                                            'NCryptVerifySignature',
                                                                                            'NCryptEnumAlgorithms',
                                                                                            'NCryptIsAlgSupported',
                                                                                            'NCryptEnumKeys',
                                                                                            'NCryptEnumStorageProviders',
                                                                                            'NCryptFreeBuffer',
                                                                                            'BCryptEnumAlgorithms',
                                                                                            'BCryptQueryProviderRegistration',
                                                                                            'BCryptEnumContexts',
                                                                                            'BCryptQueryContextConfiguration',
                                                                                            'BCryptEnumContextFunctions',
                                                                                            'BCryptResolveProviders',
                                                                                            'DsGetSiteNameW',
                                                                                            'DsGetDcNameW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetUserGetGroups',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'DsRoleFreeMemory',
                                                                                            'IdnToUnicode',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'NtQuerySystemTime',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'DsFreeDomainControllerInfoW',
                                                                                            'DsGetDomainControllerInfoW',
                                                                                            'DsFreeNameResultW',
                                                                                            'DsUnBindW',
                                                                                            'DsCrackNamesW',
                                                                                            'DsBindW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupFindNextLine',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetLineCountW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupGetIntField',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'StringFromCLSID',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StgOpenStorageEx',
                                                                                            'PropVariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringLen',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantCopyInd',
                                                                                            'CreateErrorInfo',
                                                                                            'VariantInit',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocString',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'NdrClientCall2',
                                                                                            'UuidCreate',
                                                                                            'GetComputerObjectNameW',
                                                                                            'TranslateNameW',
                                                                                            'GetUserNameExW',
                                                                                            'GetDlgItemInt',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetDlgItemTextW',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'LoadCursorW',
                                                                                            'MessageBoxW',
                                                                                            'SendMessageW',
                                                                                            'SetCursor',
                                                                                            'CharLowerW',
                                                                                            'GetDesktopWindow',
                                                                                            'SetDlgItemInt',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextW',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowLongW',
                                                                                            'CallWindowProcW',
                                                                                            'GetWindowTextW',
                                                                                            'SetFocus',
                                                                                            'SetWindowLongW',
                                                                                            'UpdateWindow',
                                                                                            'LoadStringW',
                                                                                            'DispatchMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'LoadIconW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'PostMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'SendDlgItemMessageA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 613,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 32256,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 54784,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 949248},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/567c21be2e1832abe66883996013624155a4f6e0e9e53e3f11886425d593f90b'},
 '568dd7194d79796bb90410b01041188010f6c0e76cf357e5882c62617c3af65e': {'AddressOfEntryPoint': 5600,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'SETUPAPI.dll': 'SetupOpenInfFileW',
                                                                                      'msvcrt.dll': '_XcptFilter'},
                                                                      'ImportedFunctions': ['_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupCloseFileQueue',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenFileQueue',
                                                                                            'SetupCommitFileQueueA',
                                                                                            'SetupInstallFilesFromInfSectionW',
                                                                                            'SetupScanFileQueueA',
                                                                                            'SetupOpenAppendInfFileW',
                                                                                            'SetupInstallFromInfSectionW',
                                                                                            'SetupInitDefaultQueueCallbackEx',
                                                                                            'SetupOpenInfFileW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 37,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/568dd7194d79796bb90410b01041188010f6c0e76cf357e5882c62617c3af65e'},
 '569bc163dd5ff6623e1800a8ebbca012c8d375afc68bad7fda0ffbe2876791ff': {'AddressOfEntryPoint': 64048,
                                                                      'DebugRVA': 18688,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetErrorMode',
                                                                                      'SYMSRV.DLL': 'SymbolServerSetOptions',
                                                                                      'dbghelp.dll': 'SymSetOptions',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['LeaveCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'LocalFree',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'FindFirstFileA',
                                                                                            'SetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'InitializeCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetFileInformationByHandle',
                                                                                            'LocalSize',
                                                                                            'ReadFile',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexA',
                                                                                            'CreateThread',
                                                                                            'FormatMessageA',
                                                                                            'WaitForSingleObject',
                                                                                            'FreeLibrary',
                                                                                            'CreateFileMappingA',
                                                                                            'FlushViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'FindFirstFileExA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLocalTime',
                                                                                            'SetErrorMode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_tempnam',
                                                                                            'sprintf_s',
                                                                                            '_splitpath_s',
                                                                                            'getenv',
                                                                                            'isdigit',
                                                                                            'strcpy_s',
                                                                                            '_msize',
                                                                                            'atol',
                                                                                            'strrchr',
                                                                                            'rand',
                                                                                            'strncmp',
                                                                                            'fclose',
                                                                                            'toupper',
                                                                                            'fopen',
                                                                                            'fgets',
                                                                                            'strchr',
                                                                                            'strstr',
                                                                                            'isspace',
                                                                                            '_stricmp',
                                                                                            'freopen',
                                                                                            '_vsnprintf',
                                                                                            '__iob_func',
                                                                                            '_strnicmp',
                                                                                            'srand',
                                                                                            'time',
                                                                                            'realloc',
                                                                                            'fprintf',
                                                                                            'printf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'ImageDirectoryEntryToData',
                                                                                            'SymInitialize',
                                                                                            'SymGetModuleInfo64',
                                                                                            'SymUnloadModule64',
                                                                                            'SymCleanup',
                                                                                            'SymLoadModuleEx',
                                                                                            'MakeSureDirectoryPathExists',
                                                                                            'SymSetOptions',
                                                                                            'SymbolServerGetIndexString',
                                                                                            'SymbolServerSetOptions'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 118,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 61952},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/569bc163dd5ff6623e1800a8ebbca012c8d375afc68bad7fda0ffbe2876791ff'},
 '56c7926c9658f915b115e99b02fc3ac710e472af2f65305d1c99a13fe316e2f8': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 69776,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1008,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 61952},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/clean/56c7926c9658f915b115e99b02fc3ac710e472af2f65305d1c99a13fe316e2f8'},
 '56cdba9e78ba58bf95456c1773b2d565cd0073039cd138f8aa8f7f8d247a37f8': {'AddressOfEntryPoint': 12557,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_AddMasked',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileAttributesA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'CreateDirectoryA',
                                                                                            'lstrcmpiA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GlobalFree',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetProcAddress',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'MulDiv',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'ScreenToClient',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetForegroundWindow',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassA',
                                                                                            'EndDialog',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'SendMessageTimeoutA',
                                                                                            'GetDC',
                                                                                            'LoadImageA',
                                                                                            'GetDlgItem',
                                                                                            'FindWindowExA',
                                                                                            'IsWindow',
                                                                                            'SetClipboardData',
                                                                                            'SetWindowLongA',
                                                                                            'EmptyClipboard',
                                                                                            'SetTimer',
                                                                                            'CreateDialogParamA',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteValueA',
                                                                                            'SetFileSecurityA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_AddMasked',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 295104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 295424,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/56cdba9e78ba58bf95456c1773b2d565cd0073039cd138f8aa8f7f8d247a37f8'},
 '56d8cfcae7af7fb6adcc748e43657989ae333d46a25cb52aecf2454734387747': {'AddressOfEntryPoint': 267760,
                                                                      'DebugRVA': 4816,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49600,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 290816,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'CreateFileW',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'USER32.dll': 'RegisterWindowMessageW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WakeByAddressSingle',
                                                                                      'faultrep.dll': 'WerpInitiateCrashReporting',
                                                                                      'msvcrt.dll': 'free',
                                                                                      'ntdll.dll': 'DbgPrint',
                                                                                      'ole32.dll': 'ProgIDFromCLSID',
                                                                                      'wer.dll': 'WerReportAddFile'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'MD5Final',
                                                                                            'MD5Update',
                                                                                            'MD5Init',
                                                                                            'BuildSecurityDescriptorW',
                                                                                            'RegSetKeyValueW',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'EqualSid',
                                                                                            'CloseThreadWaitChainSession',
                                                                                            'GetThreadWaitChain',
                                                                                            'OpenThreadWaitChainSession',
                                                                                            'RegisterWaitChainCOMCallback',
                                                                                            'SetFileSecurityW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclW',
                                                                                            'OpenThreadToken',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'CreateWellKnownSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetFileSecurityW',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetTokenInformation',
                                                                                            'StopTraceW',
                                                                                            'EnableTrace',
                                                                                            'StartTraceW',
                                                                                            'QueryTraceW',
                                                                                            'DeregisterEventSource',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'RegOpenKeyW',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceConfigW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegDeleteKeyW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'OpenProcessToken',
                                                                                            'GetFileAttributesExW',
                                                                                            'WriteFile',
                                                                                            'FileTimeToSystemTime',
                                                                                            'RegQueryValueExW',
                                                                                            'RegGetValueW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetSystemInfo',
                                                                                            'GetProductInfo',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'SetFileAttributesW',
                                                                                            'MoveFileExW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'OpenProcess',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'DeviceIoControl',
                                                                                            'GetFileAttributesW',
                                                                                            'ReadProcessMemory',
                                                                                            'GetApplicationRestartSettings',
                                                                                            'GetProcessTimes',
                                                                                            'IsDebuggerPresent',
                                                                                            'DebugBreak',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'GetModuleHandleExW',
                                                                                            'CreateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'FreeLibrary',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'OpenFileMappingW',
                                                                                            'DuplicateHandle',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetThreadUILanguage',
                                                                                            'IsWow64Process',
                                                                                            'SearchPathW',
                                                                                            'GetFileSize',
                                                                                            'MultiByteToWideChar',
                                                                                            'FormatMessageW',
                                                                                            'lstrlenW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetTempPathW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'RemoveDirectoryW',
                                                                                            'VirtualQuery',
                                                                                            'CheckRemoteDebuggerPresent',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetModuleHandleW',
                                                                                            'CompareStringW',
                                                                                            'GetPriorityClass',
                                                                                            'SetEvent',
                                                                                            'GetStringTypeExW',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'K32GetModuleFileNameExW',
                                                                                            'GetPackageFullName',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'WerGetFlags',
                                                                                            'Module32FirstW',
                                                                                            'RegDeleteTreeW',
                                                                                            'Thread32First',
                                                                                            'OpenThread',
                                                                                            'Thread32Next',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetProcessIoCounters',
                                                                                            'LocalFree',
                                                                                            'PssQuerySnapshot',
                                                                                            'PssWalkMarkerCreate',
                                                                                            'PssWalkMarkerFree',
                                                                                            'GetThreadId',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetThreadpoolWait',
                                                                                            'CloseThreadpoolWait',
                                                                                            'WaitForThreadpoolWaitCallbacks',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateThreadpoolWait',
                                                                                            'GetThreadContext',
                                                                                            'GetProcessId',
                                                                                            'GetApplicationUserModelId',
                                                                                            'LCMapStringW',
                                                                                            'GetProcAddress',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'SetLastError',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'QueryDosDeviceW',
                                                                                            'GetDriveTypeW',
                                                                                            'FindFirstFileNameW',
                                                                                            'FindNextFileNameW',
                                                                                            'K32EnumProcessModules',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'SetThreadErrorMode',
                                                                                            'LoadLibraryW',
                                                                                            'OpenEventW',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegSetKeySecurity',
                                                                                            'FindFirstFileExW',
                                                                                            'CompareFileTime',
                                                                                            'RegEnumKeyExW',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'CreateMutexW',
                                                                                            'OpenMutexW',
                                                                                            'DeleteFileW',
                                                                                            'GetLastError',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadPriority',
                                                                                            'GetVersionExW',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'Module32NextW',
                                                                                            'SetPriorityClass',
                                                                                            'GetLocalTime',
                                                                                            'CreateDirectoryW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'SetErrorMode',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'ReadFile',
                                                                                            'GetThreadTimes',
                                                                                            'CreateFileW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetClassNameW',
                                                                                            'IsHungAppWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetShellWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'GetWindow',
                                                                                            'SendMessageW',
                                                                                            'IsWindow',
                                                                                            'GetWindowLongW',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'EndDialog',
                                                                                            'PostMessageW',
                                                                                            'LoadIconW',
                                                                                            'ChangeWindowMessageFilter',
                                                                                            'SetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'GetWindowBand',
                                                                                            'RegisterErrorReportingDialog',
                                                                                            'CheckWindowThreadDesktop',
                                                                                            'LoadStringW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetThreadDesktop',
                                                                                            'EnumWindows',
                                                                                            'GetMessageW',
                                                                                            'GetProcessWindowStation',
                                                                                            'RegisterWindowMessageW',
                                                                                            '_purecall',
                                                                                            '_wcstoui64',
                                                                                            'wcsstr',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'realloc',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'towlower',
                                                                                            'isspace',
                                                                                            'tolower',
                                                                                            '_unlock',
                                                                                            'wcsncmp',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memset',
                                                                                            'wcsrchr',
                                                                                            '_wtoi64',
                                                                                            '_wtoi',
                                                                                            'memmove',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            '_vscwprintf',
                                                                                            'iswspace',
                                                                                            'wcspbrk',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlGetUnloadEventTraceEx',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'NtSetSystemInformation',
                                                                                            'NtQueryObject',
                                                                                            'NtQueryInformationToken',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'NtClose',
                                                                                            'RtlFreeSid',
                                                                                            'NtAlpcSendWaitReceivePort',
                                                                                            'DbgPrintEx',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlCreateProcessReflection',
                                                                                            'WinSqmSetString',
                                                                                            'NtAlpcConnectPort',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtOpenEvent',
                                                                                            'NtPowerInformation',
                                                                                            'NtQuerySystemInformation',
                                                                                            'EtwEventWriteNoRegistration',
                                                                                            'ZwUpdateWnfStateData',
                                                                                            'ZwQueryWnfStateNameInformation',
                                                                                            'NtQueryInformationThread',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlImageNtHeaderEx',
                                                                                            'RtlGetVersion',
                                                                                            'NtQueryEvent',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmStartSession',
                                                                                            'ShipAssert',
                                                                                            'WinSqmEndSession',
                                                                                            'NtSuspendProcess',
                                                                                            'NtResumeProcess',
                                                                                            'NtSystemDebugControl',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'RtlUpcaseUnicodeChar',
                                                                                            'RtlCompareMemory',
                                                                                            'DbgPrint',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoGetMalloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateGuid',
                                                                                            'CoGetActivationState',
                                                                                            'CoGetCallState',
                                                                                            'CoInitialize',
                                                                                            'CoUnmarshalInterface',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CLSIDFromString',
                                                                                            'ProgIDFromCLSID',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'ImmDisableIME',
                                                                                            'WerpHashApplicationParameters',
                                                                                            'WerpSetReportApplicationIdentity',
                                                                                            'WerpValidateReportKey',
                                                                                            'WerpGetStorePath',
                                                                                            'WerpReserveMachineQueueReportDir',
                                                                                            'WerpPromptUser',
                                                                                            'WerpAuxmdDumpRegisteredBlocks',
                                                                                            'WerpAuxmdDumpProcessImages',
                                                                                            'WerpAuxmdInitialize',
                                                                                            'WerpRestartApplication',
                                                                                            'WerpIsTransportAvailable',
                                                                                            'WerReportSetUIOption',
                                                                                            'WerpSetReportFlags',
                                                                                            'WerpGetReportFlags',
                                                                                            'WerpStitchedMinidumpVmPostReadCallback',
                                                                                            'WerpStitchedMinidumpVmPreReadCallback',
                                                                                            'WerpSetEventName',
                                                                                            'WerpResetTransientImageCacheStatistics',
                                                                                            'WerpTraceImageCacheStatistics',
                                                                                            'WerpTraceUnmappedVaRangesStatistics',
                                                                                            'WerpTraceAuxMemDumpStatistics',
                                                                                            'WerpTraceSnapshotStatistics',
                                                                                            'WerpForceDeferredCollection',
                                                                                            'WerpFreeUnmappedVaRanges',
                                                                                            'WerpFlushImageCache',
                                                                                            'WerpAuxmdFree',
                                                                                            'WerpInitializeImageCache',
                                                                                            'WerReportCloseHandle',
                                                                                            'WerReportSubmit',
                                                                                            'WerpAddFile',
                                                                                            'WerpSetCallBack',
                                                                                            'WerpSetIntegratorReportId',
                                                                                            'WerReportCreate',
                                                                                            'WerpSetReportNamespaceParameter',
                                                                                            'WerpReportSprintfParameter',
                                                                                            'WerReportSetParameter',
                                                                                            'WerpSetDynamicParameter',
                                                                                            'WerpAddMemoryBlock',
                                                                                            'WerpGetExtendedDiagData',
                                                                                            'WerpAddRegisteredDataToReport',
                                                                                            'WerReportAddDump',
                                                                                            'WerpAddAppCompatData',
                                                                                            'WerpGetFileByIndex',
                                                                                            'WerpGetNumFiles',
                                                                                            'WerpFreeString',
                                                                                            'WerpCreateIntegratorReportId',
                                                                                            'WerpReportCancel',
                                                                                            'WerpAuxmdFreeCopyBuffer',
                                                                                            'WerpAuxmdMapFile',
                                                                                            'WerpStitchedMinidumpVmQueryCallback',
                                                                                            'WerpAuxmdHashVaRanges',
                                                                                            'WerpUnmapProcessViews',
                                                                                            'WerReportAddFile',
                                                                                            'WerpInitiateCrashReporting',
                                                                                            'WaitOnAddress',
                                                                                            'WakeByAddressSingle'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 407,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 88480,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 12288,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 19456,
                                                                                       '.rsrc\x00\x00\x00': 88576,
                                                                                       '.text\x00\x00\x00': 276992},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/56d8cfcae7af7fb6adcc748e43657989ae333d46a25cb52aecf2454734387747'},
 '56dbf8ee9f5c65fa76e0cfabe6c997d5ec7f4500bf421098a5fd9f91d3b79d3c': {'AddressOfEntryPoint': 147792,
                                                                      'DebugRVA': 4624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 200704,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SleepEx',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'USERENV.dll': 'LeaveCriticalPolicySection',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumKeyExW',
                                                                                      'appidapi.dll': 'AppIDFreeAttributeString',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'EtwTraceMessage'},
                                                                      'ImportedFunctions': ['_vsnwprintf_s',
                                                                                            '_wtoi',
                                                                                            'towupper',
                                                                                            '__CxxFrameHandler3',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '_onexit',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            'memcpy_s',
                                                                                            '_CxxThrowException',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_callnewh',
                                                                                            '_wcsnicmp',
                                                                                            'qsort',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            'strchr',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            'wcstol',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '__RTDynamicCast',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_ui64tow_s',
                                                                                            '__wgetmainargs',
                                                                                            '_purecall',
                                                                                            '_wsetlocale',
                                                                                            'wcscmp',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwEventWrite',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'EtwEventRegister',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwTraceMessage',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'EnterCriticalPolicySection',
                                                                                            'LeaveCriticalPolicySection',
                                                                                            'CreateBoundaryDescriptorW',
                                                                                            'AddSIDToBoundaryDescriptor',
                                                                                            'CreatePrivateNamespaceW',
                                                                                            'OpenPrivateNamespaceW',
                                                                                            'DeleteBoundaryDescriptor',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleExW',
                                                                                            'LocalAlloc',
                                                                                            'SetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'MoveFileExW',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteFile',
                                                                                            'Sleep',
                                                                                            'DeleteFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'LocalFree',
                                                                                            'ClosePrivateNamespace',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'ReleaseMutex',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'CreateMutexExW',
                                                                                            'WaitForSingleObject',
                                                                                            'SleepEx',
                                                                                            'AppIDEncodeAttributeString',
                                                                                            'AppIDFreeAttributeString',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidFromStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 180224},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/56dbf8ee9f5c65fa76e0cfabe6c997d5ec7f4500bf421098a5fd9f91d3b79d3c'},
 '57402f55eee4634ff8616f208903e57633e08387988532ae2de0bcf24b860693': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 444916,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 805306368,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1332,
                                                                      'SectionNames': {'.data\x00\x00\x00': 29184,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 396288,
                                                                                       '.xdata\x00\x00': 11264},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/57402f55eee4634ff8616f208903e57633e08387988532ae2de0bcf24b860693'},
 '57fe5c5932e87e77cad9742efa2216d81e5b496e5081607af982eceff3b94252': {'AddressOfEntryPoint': 15872,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'DbgPrintEx',
                                                                                      'wdi.dll': 'WdiCreateInstance'},
                                                                      'ImportedFunctions': ['EventUnregister',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'InitiateShutdownW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetLastError',
                                                                                            'GetThreadLocale',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetDateFormatW',
                                                                                            'CreateMutexW',
                                                                                            'FindFirstFileW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcessHeap',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'OpenProcess',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FindClose',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapSetInformation',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            '_vsnprintf',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'DbgPrintEx',
                                                                                            'WdiCloseInstance',
                                                                                            'WdiGetParameterData',
                                                                                            'WdiAddParameter',
                                                                                            'WdiDiagnose',
                                                                                            'WdiGetParameterDataLength',
                                                                                            'WdiGetParameterByName',
                                                                                            'WdiGetResult',
                                                                                            'WdiResolve',
                                                                                            'WdiCreateInstance',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2624,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 14336},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/57fe5c5932e87e77cad9742efa2216d81e5b496e5081607af982eceff3b94252'},
 '5836b9e06e9fc8692c0321320e934accadc716ee5d016722135fcdcc38c902dc': {'AddressOfEntryPoint': 70208,
                                                                      'DebugRVA': 4576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventUnregister',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryW',
                                                                                      'OLEAUT32.dll': 'VariantChangeType',
                                                                                      'ReAgent.dll': 'WinReGetLogDirPath',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'msvcrt.dll': '_vsnwprintf',
                                                                                      'ntdll.dll': 'WinSqmSetDWORD',
                                                                                      'ole32.dll': 'CoInitializeSecurity',
                                                                                      'wer.dll': 'WerReportCloseHandle'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'EventRegister',
                                                                                            'RegDeleteValueW',
                                                                                            'EventWrite',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'EventUnregister',
                                                                                            'CreateDirectoryW',
                                                                                            'WriteConsoleW',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetSystemTime',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'FindNextFileW',
                                                                                            'HeapSetInformation',
                                                                                            'FindClose',
                                                                                            'GetLastError',
                                                                                            'GetFileSizeEx',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'SetLastError',
                                                                                            'GetFileSize',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'wcstoul',
                                                                                            'wcstol',
                                                                                            '_wcsicmp',
                                                                                            '_fmode',
                                                                                            '_purecall',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memcpy',
                                                                                            '_vsnwprintf',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmSetDWORD64',
                                                                                            'WinSqmSetDWORD',
                                                                                            'CoCreateGuid',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'WinReSetTriggerFile',
                                                                                            'WinReGetLogDirPath',
                                                                                            'LoadStringW',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'WerReportSetUIOption',
                                                                                            'WerReportSubmit',
                                                                                            'WerReportAddFile',
                                                                                            'WerReportSetParameter',
                                                                                            'WerReportCreate',
                                                                                            'WerReportCloseHandle',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 71200,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 71680,
                                                                                       '.text\x00\x00\x00': 71168},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/5836b9e06e9fc8692c0321320e934accadc716ee5d016722135fcdcc38c902dc'},
 '58c7de7ee7fe19eb39c3069a567f31c636dd25c7e4e314edbcca8e678705e5dc': {'AddressOfEntryPoint': 449564,
                                                                      'DebugRVA': 980896,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 978944,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'UnrealizeObject',
                                                                                      'KERNEL32.dll': 'EncodePointer',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'GetWindowDC',
                                                                                      'gdiplus.dll': 'GdipDisposeImage',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['GetSystemTimeAsFileTime',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'MoveFileW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemInfo',
                                                                                            'MulDiv',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVersion',
                                                                                            'GetLocalTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileTime',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'VirtualQuery',
                                                                                            'IsBadReadPtr',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetCurrentThread',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryExA',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileSize',
                                                                                            'CloseHandle',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'lstrlenA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'HeapAlloc',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareFileTime',
                                                                                            'VerLanguageNameW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'lstrcpyA',
                                                                                            'ExitThread',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'FreeResource',
                                                                                            'GetPrivateProfileSectionNamesA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcatA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcpynA',
                                                                                            'LocalAlloc',
                                                                                            'lstrcmpA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'FindResourceExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetFileTime',
                                                                                            'OpenProcess',
                                                                                            'GetProcessTimes',
                                                                                            'ReadConsoleW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'lstrcatW',
                                                                                            'GetVersionExW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'CreateEventW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetTempFileNameW',
                                                                                            'CopyFileW',
                                                                                            'GetTickCount',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'FindResourceW',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'lstrcpyW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'SetErrorMode',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'MoveFileExW',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FlushInstructionCache',
                                                                                            'SetThreadContext',
                                                                                            'GetThreadContext',
                                                                                            'CreateProcessW',
                                                                                            'ResumeThread',
                                                                                            'TerminateProcess',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'DuplicateHandle',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'FatalAppExitA',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'OutputDebugStringW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'CreateSemaphoreW',
                                                                                            'GetStartupInfoW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStringTypeW',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapSize',
                                                                                            'AreFileApisANSI',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetStdHandle',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlUnwind',
                                                                                            'LCMapStringW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'MapWindowPoints',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'wsprintfW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetDesktopWindow',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'LoadImageW',
                                                                                            'CreateDialogParamW',
                                                                                            'MoveWindow',
                                                                                            'GetParent',
                                                                                            'GetWindowTextW',
                                                                                            'SetCursor',
                                                                                            'GetWindow',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'SetDlgItemTextW',
                                                                                            'FindWindowW',
                                                                                            'SubtractRect',
                                                                                            'IntersectRect',
                                                                                            'SetRect',
                                                                                            'FillRect',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetDC',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDlgCtrlID',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperW',
                                                                                            'wsprintfA',
                                                                                            'CallWindowProcW',
                                                                                            'DrawIcon',
                                                                                            'DrawTextW',
                                                                                            'UpdateWindow',
                                                                                            'InvalidateRect',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetSysColorBrush',
                                                                                            'DrawFocusRect',
                                                                                            'CopyRect',
                                                                                            'InflateRect',
                                                                                            'EnumChildWindows',
                                                                                            'GetClassNameW',
                                                                                            'MapDialogRect',
                                                                                            'RegisterClassExW',
                                                                                            'MonitorFromPoint',
                                                                                            'CharNextW',
                                                                                            'IsDialogMessageW',
                                                                                            'FindWindowExW',
                                                                                            'ScreenToClient',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowRect',
                                                                                            'EnableWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'SendMessageW',
                                                                                            'WaitForInputIdle',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowDC',
                                                                                            'CreateHalftonePalette',
                                                                                            'GetDIBColorTable',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'CreatePalette',
                                                                                            'CreateFontW',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateSolidBrush',
                                                                                            'GetObjectW',
                                                                                            'TranslateCharsetInfo',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetStretchBltMode',
                                                                                            'StretchBlt',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'BitBlt',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateDCW',
                                                                                            'CreatePatternBrush',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'DeleteMetaFile',
                                                                                            'CreateBitmap',
                                                                                            'CreateRectRgn',
                                                                                            'PatBlt',
                                                                                            'PlayMetaFile',
                                                                                            'SelectClipRgn',
                                                                                            'SetBkColor',
                                                                                            'SetMapMode',
                                                                                            'SetMetaFileBitsEx',
                                                                                            'SetPixel',
                                                                                            'SetViewportExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'UnrealizeObject',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CryptVerifySignatureW',
                                                                                            'CryptSignHashW',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptImportKey',
                                                                                            'CryptExportKey',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptDeriveKey',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegOverridePredefKey',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemRealloc',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromProgID',
                                                                                            'GetRunningObjectTable',
                                                                                            'CreateItemMoniker',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'SysReAllocStringLen',
                                                                                            'VarUI4FromStr',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VarBstrCmp',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'UnRegisterTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VarBstrCat',
                                                                                            'VarBstrFromDate',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'GetErrorInfo',
                                                                                            'UuidToStringW',
                                                                                            'UuidFromStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipCreateBitmapFromFileICM',
                                                                                            'GdipCreateBitmapFromResource',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 415,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 674296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10752,
                                                                                       '.rdata\x00\x00': 267776,
                                                                                       '.rsrc\x00\x00\x00': 674304,
                                                                                       '.text\x00\x00\x00': 971264},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/58c7de7ee7fe19eb39c3069a567f31c636dd25c7e4e314edbcca8e678705e5dc'},
 '58d7de2ffac0360f24f0fa9afc268c9d0225f5cab27b40bd0a74acd41943a327': {'AddressOfEntryPoint': 5608,
                                                                      'DebugRVA': 185728,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'FindFirstFileW',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SETUPAPI.dll': 'SetupDefaultQueueCallbackW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'WS2_32.dll': 'inet_ntoa',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesW',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['UpdateDriverForPlugAndPlayDevicesW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'RtlVirtualUnwind',
                                                                                            'FatalAppExitA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetFullPathNameW',
                                                                                            'lstrlenA',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'RaiseException',
                                                                                            'HeapFree',
                                                                                            'FindFirstFileW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegCloseKey',
                                                                                            'StartServiceW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiCreateDeviceInfoW',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'SetupInitDefaultQueueCallback',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupUninstallOEMInfW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupDiDeleteDeviceInfo',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetClassDevsExW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'inet_addr',
                                                                                            'htonl',
                                                                                            'inet_ntoa',
                                                                                            'CLSIDFromString',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'SafeArrayPutElement',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'GetErrorInfo',
                                                                                            'VariantChangeType',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysStringByteLen',
                                                                                            'GetAdaptersAddresses'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 53248,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 180224},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/58d7de2ffac0360f24f0fa9afc268c9d0225f5cab27b40bd0a74acd41943a327'},
 '592485374cdd9efbfc90d82da94d5c250aadbe75b9316baefdccbdb23c8f683e': {'AddressOfEntryPoint': 4988,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2664,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/592485374cdd9efbfc90d82da94d5c250aadbe75b9316baefdccbdb23c8f683e'},
 '593e8cd7bcf2ec412443a6bab81d04011693bd8783aaadc30af62047e916471f': {'AddressOfEntryPoint': 46964,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EnumDependentServicesW',
                                                                                      'CLUSAPI.dll': 'CloseCluster',
                                                                                      'KERNEL32.dll': 'MoveFileW',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RESUTILS.dll': 'ResUtilResourceTypesEqual',
                                                                                      'SETUPAPI.dll': 'SetupFindFirstLineW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WSOCK32.dll': 'WSAStartup',
                                                                                      'msvcrt.dll': '??_V@YAXPEAX@Z',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['AllocateAndInitializeSid',
                                                                                            'LookupAccountNameW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'FreeSid',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'EqualSid',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'StartServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'EnumDependentServicesW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'LocalFree',
                                                                                            'CreateFileW',
                                                                                            'LeaveCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLocalTime',
                                                                                            'WriteFile',
                                                                                            'SetLastError',
                                                                                            'lstrcmpW',
                                                                                            'CompareStringW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'Sleep',
                                                                                            'LocalReAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentThreadId',
                                                                                            'lstrcmpiW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'OutputDebugStringW',
                                                                                            'FormatMessageW',
                                                                                            'GetComputerNameW',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'MoveFileW',
                                                                                            '_XcptFilter',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_wcsicmp',
                                                                                            'wprintf',
                                                                                            '_vsnwprintf',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            '_vsnprintf',
                                                                                            '_wsplitpath_s',
                                                                                            'wcstok',
                                                                                            '_wtoi',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_commode',
                                                                                            'free',
                                                                                            '_fmode',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'SetupGetLineTextW',
                                                                                            'SetupFindNextLine',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupFindFirstLineW',
                                                                                            'LoadStringW',
                                                                                            'ClusterCloseEnum',
                                                                                            'CloseClusterResource',
                                                                                            'OfflineClusterResource',
                                                                                            'OpenClusterResource',
                                                                                            'ClusterEnum',
                                                                                            'ClusterOpenEnum',
                                                                                            'OpenCluster',
                                                                                            'CloseCluster',
                                                                                            'ResUtilResourceTypesEqual',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoGetClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'ord1118',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 145,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 52736},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/593e8cd7bcf2ec412443a6bab81d04011693bd8783aaadc30af62047e916471f'},
 '59868a0b228cdd2a69efc6b46e2d252f8bf694491e437bb32618adc771541e51': {'AddressOfEntryPoint': 6464,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['DeactivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'GetCurrentActCtx',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateActCtxW',
                                                                                            'ActivateActCtx',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '__p__fmode',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'memcpy_s',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFileExistsW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 86808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 87040,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/59868a0b228cdd2a69efc6b46e2d252f8bf694491e437bb32618adc771541e51'},
 '59dbb842eb105b68f22d78ac200c7bd55aa12ea528e5c9c4ae6cb36c356e9505': {'AddressOfEntryPoint': 4912,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'PostMessageW',
                                                                                      'msvcrt.dll': '?terminate@@YAXXZ'},
                                                                      'ImportedFunctions': ['GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'FindWindowW',
                                                                                            'PostMessageW',
                                                                                            '_acmdln',
                                                                                            '__p__fmode',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '?terminate@@YAXXZ'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2240,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/59dbb842eb105b68f22d78ac200c7bd55aa12ea528e5c9c4ae6cb36c356e9505'},
 '5a29ebb6da036e303611eb1304192655021405bb05452fd37886dde604ff0d9d': {'AddressOfEntryPoint': 125088,
                                                                      'DebugRVA': 5520,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 171248,
                                                                      'ExportSize': 9533,
                                                                      'IATRVA': 200704,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'UnmapViewOfFile',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegDeleteValueW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlLookupFunctionEntry',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharNextW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetVersionExA',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'MakeAbsoluteSD',
                                                                                      'loadperf.dll': 'LoadPerfCounterTextStringsW',
                                                                                      'msvcrt.dll': '__dllonexit',
                                                                                      'ntdll.dll': 'NtQuerySecurityObject',
                                                                                      'wbemcomn.dll': '??0CStaticCritSec@@QEAA@XZ'},
                                                                      'ImportedFunctions': ['wcschr',
                                                                                            '__CxxFrameHandler3',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '__set_app_type',
                                                                                            'iswspace',
                                                                                            'atol',
                                                                                            'wcscoll',
                                                                                            '_wtoi',
                                                                                            'wcsspn',
                                                                                            'iswdigit',
                                                                                            'wcspbrk',
                                                                                            'wcsstr',
                                                                                            '_wcsupr',
                                                                                            '_wcslwr',
                                                                                            'memcpy',
                                                                                            '_wcsrev',
                                                                                            'wcscspn',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_wcsicmp',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '_wtol',
                                                                                            'realloc',
                                                                                            'wcslen',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'strlen',
                                                                                            '_unlock',
                                                                                            '__wgetmainargs',
                                                                                            'memmove_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcsrchr',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            'memmove',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'free',
                                                                                            'memset',
                                                                                            'malloc',
                                                                                            '__dllonexit',
                                                                                            'CloseHandle',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseSemaphore',
                                                                                            'TryEnterCriticalSection',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'Sleep',
                                                                                            'CreateMutexW',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'CreateSemaphoreExW',
                                                                                            'CreateEventW',
                                                                                            'OpenEventW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenCurrentUser',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetStartupInfoW',
                                                                                            'SwitchToThread',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'MakeAbsoluteSD',
                                                                                            'SetLastError',
                                                                                            'RaiseException',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'CharNextW',
                                                                                            'HeapSetInformation',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'LoadStringW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FlushViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersionExA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'NtQueryObject',
                                                                                            'RtlGetOwnerSecurityDescriptor',
                                                                                            'RtlEqualSid',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlGetAce',
                                                                                            'NtQuerySecurityObject',
                                                                                            '?Throttle@@YAJKKKKK@Z',
                                                                                            '?anyFailure@CStaticCritSec@@SAHXZ',
                                                                                            '??1CStaticCritSec@@QEAA@XZ',
                                                                                            '??0CStaticCritSec@@QEAA@XZ',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetLocaleInfoW',
                                                                                            'FormatMessageW',
                                                                                            'MoveFileExW',
                                                                                            'CreateFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringA',
                                                                                            'UnloadPerfCounterTextStringsW',
                                                                                            'LoadPerfCounterTextStringsW',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 177152},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/5a29ebb6da036e303611eb1304192655021405bb05452fd37886dde604ff0d9d'},
 '5a2ec46602e5323a66051ee2470dee4a67f6aad3ddb89b8e195c27a51e9aea8d': {'AddressOfEntryPoint': 10816,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwTraceMessage'},
                                                                      'ImportedFunctions': ['?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventRegister',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwTraceMessage',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'ClosePrivateNamespace',
                                                                                            'CompareFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateFileW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'DeviceIoControl',
                                                                                            'DeleteBoundaryDescriptor',
                                                                                            'OpenPrivateNamespaceW',
                                                                                            'CreatePrivateNamespaceW',
                                                                                            'AddSIDToBoundaryDescriptor',
                                                                                            'CreateBoundaryDescriptorW',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateMutexExW',
                                                                                            'CloseHandle',
                                                                                            'ReleaseMutex',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'SetUnhandledExceptionFilter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 57,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 10240},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/5a2ec46602e5323a66051ee2470dee4a67f6aad3ddb89b8e195c27a51e9aea8d'},
 '5a4a83478e07d34e14bd8dc9955b37fe573dbd592388cf1774b8beec0c96d2eb': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 57636,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 57856,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5a4a83478e07d34e14bd8dc9955b37fe573dbd592388cf1774b8beec0c96d2eb'},
 '5a4e18cc99c7da8453da6258fdb8072cf398a0d9bfeaf65a576cb2c9ff8e74f7': {'AddressOfEntryPoint': 8323,
                                                                      'DebugRVA': 4384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ReportEventA',
                                                                                      'KERNEL32.dll': 'WaitForSingleObject',
                                                                                      'NETAPI32.dll': 'NetMessageBufferSend',
                                                                                      'USER32.dll': 'MessageBeep',
                                                                                      'WSOCK32.dll': 'htons',
                                                                                      'msvcrt.dll': 'printf',
                                                                                      'ntdll.dll': 'RtlxOemStringToUnicodeSize'},
                                                                      'ImportedFunctions': ['_controlfp',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'atoi',
                                                                                            '_getch',
                                                                                            '_initterm',
                                                                                            'time',
                                                                                            '_stricmp',
                                                                                            'printf',
                                                                                            'DeregisterEventSource',
                                                                                            'RegisterEventSourceA',
                                                                                            'ReportEventA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CreateThread',
                                                                                            'GetLocalTime',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'WaitForSingleObject',
                                                                                            'NetMessageBufferSend',
                                                                                            'MessageBeep',
                                                                                            'socket',
                                                                                            'sendto',
                                                                                            'inet_addr',
                                                                                            'recvfrom',
                                                                                            'select',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            'WSAStartup',
                                                                                            'setsockopt',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'htons',
                                                                                            'NlsMbOemCodePageTag',
                                                                                            'RtlInitString',
                                                                                            'RtlOemStringToUnicodeString',
                                                                                            'RtlxOemStringToUnicodeSize'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 58,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/5a4e18cc99c7da8453da6258fdb8072cf398a0d9bfeaf65a576cb2c9ff8e74f7'},
 '5a58676b0ad7d87336106be0d88c0161572f580b1b510c117420c72b4f2948af': {'AddressOfEntryPoint': 370439,
                                                                      'DebugRVA': 572832,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 3680340,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'DNSAPI.dll': 'DnsFree',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersInfo',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'PSAPI.DLL': 'GetModuleInformation',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'USER32.dll': 'GetDlgItem',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'inet_ntoa',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'HeapAlloc',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'TerminateProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'UnregisterWaitEx',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringW',
                                                                                            'lstrcpynA',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateEventW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InterlockedExchange',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'LoadLibraryA',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'lstrcmpiW',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetLastError',
                                                                                            'FindCloseChangeNotification',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'CreateSemaphoreW',
                                                                                            'ReleaseSemaphore',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'CreateFileA',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'FatalAppExitA',
                                                                                            'GetFileType',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetHandleCount',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'VirtualQuery',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentThread',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'IsValidLocale',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'RaiseException',
                                                                                            'ExitThread',
                                                                                            'lstrcmpW',
                                                                                            'GlobalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'GetExitCodeProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'MulDiv',
                                                                                            'SetDllDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'WaitForSingleObject',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'GetProcessHeap',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapFree',
                                                                                            'CharPrevW',
                                                                                            'CharUpperW',
                                                                                            'CharNextA',
                                                                                            'MessageBoxIndirectW',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'wvsprintfW',
                                                                                            'SystemParametersInfoW',
                                                                                            'DispatchMessageW',
                                                                                            'GetClassInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'SetWindowPos',
                                                                                            'EndPaint',
                                                                                            'DrawTextW',
                                                                                            'FillRect',
                                                                                            'GetClientRect',
                                                                                            'BeginPaint',
                                                                                            'DefWindowProcW',
                                                                                            'SendMessageW',
                                                                                            'InvalidateRect',
                                                                                            'EnableWindow',
                                                                                            'PeekMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'wsprintfA',
                                                                                            'CharPrevExA',
                                                                                            'CharLowerW',
                                                                                            'CharToOemW',
                                                                                            'RegisterClassW',
                                                                                            'DestroyWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'SetClassLongW',
                                                                                            'GetDC',
                                                                                            'LoadImageW',
                                                                                            'SetWindowLongW',
                                                                                            'CallWindowProcW',
                                                                                            'GetSystemMenu',
                                                                                            'EnableMenuItem',
                                                                                            'CreateDialogParamW',
                                                                                            'EndDialog',
                                                                                            'GetSystemMetrics',
                                                                                            'CreatePopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'GetWindowRect',
                                                                                            'TrackPopupMenu',
                                                                                            'OpenClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'LoadBitmapW',
                                                                                            'IsWindowVisible',
                                                                                            'GetMessagePos',
                                                                                            'ScreenToClient',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetAsyncKeyState',
                                                                                            'CheckDlgButton',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'ExitWindowsEx',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'FindWindowExW',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'SetTextColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'GetModuleInformation',
                                                                                            'DnsQuery_A',
                                                                                            'DnsFree',
                                                                                            'inet_addr',
                                                                                            'htonl',
                                                                                            'inet_ntoa',
                                                                                            'GetPerAdapterInfo',
                                                                                            'GetAdaptersInfo'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 271,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 156360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.idata\x00\x00': 9728,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 101888,
                                                                                       '.reloc\x00\x00': 32256,
                                                                                       '.rsrc\x00\x00\x00': 156672,
                                                                                       '.text\x00\x00\x00': 563712},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5a58676b0ad7d87336106be0d88c0161572f580b1b510c117420c72b4f2948af'},
 '5a9d1be3ce1c7b4ca2382715f1db0594f1fb26a7e8815e31126d928b71e12c8b': {'AddressOfEntryPoint': 89568,
                                                                      'DebugRVA': 4720,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LookupPrivilegeValueW',
                                                                                      'KERNEL32.dll': 'SetEvent',
                                                                                      'MSVCP60.dll': '??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z',
                                                                                      'NTDSAPI.dll': 'DsIsMangledRdnValueW',
                                                                                      'RPCRT4.dll': 'UuidToStringW',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'msvcrt.dll': 'srand',
                                                                                      'ntdll.dll': 'RtlConvertSidToUnicodeString'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ResetEvent',
                                                                                            'GetTickCount',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'Sleep',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'ResumeThread',
                                                                                            'OutputDebugStringW',
                                                                                            'TerminateThread',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'memcpy',
                                                                                            'wcscpy',
                                                                                            'wcschr',
                                                                                            '_itow',
                                                                                            'time',
                                                                                            'wcstombs',
                                                                                            'swprintf',
                                                                                            'wcscat',
                                                                                            '_wtol',
                                                                                            '_wtoi',
                                                                                            'wcscmp',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'wcslen',
                                                                                            '_wcsnicmp',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            'mbstowcs',
                                                                                            '__CxxFrameHandler',
                                                                                            '_wcsicmp',
                                                                                            'sprintf',
                                                                                            'strcpy',
                                                                                            'strlen',
                                                                                            'rand',
                                                                                            'wprintf',
                                                                                            'calloc',
                                                                                            'isalpha',
                                                                                            'tolower',
                                                                                            'memcmp',
                                                                                            '_snprintf',
                                                                                            '_purecall',
                                                                                            '_CxxThrowException',
                                                                                            'vswprintf',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'free',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'printf',
                                                                                            'exit',
                                                                                            '_wcsdup',
                                                                                            '__wgetmainargs',
                                                                                            '__winitenv',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            'wcsstr',
                                                                                            'wcstok',
                                                                                            '_wsetlocale',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'srand',
                                                                                            '??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z',
                                                                                            '?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z',
                                                                                            '?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB',
                                                                                            '??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z',
                                                                                            '??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z',
                                                                                            '??0_Lockit@std@@QAE@XZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ',
                                                                                            '?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ',
                                                                                            '??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'wsprintfW',
                                                                                            'DsIsMangledRdnValueW',
                                                                                            'RtlLargeIntegerToChar',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidToStringW'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 114,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 122368},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/5a9d1be3ce1c7b4ca2382715f1db0594f1fb26a7e8815e31126d928b71e12c8b'},
 '5ac8aad3353e5a3979ceb907f86b796b5e63c217fc4a41002fde97b2ac816341': {'AddressOfEntryPoint': 228496,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSVCRT.dll': 'free'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'free'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 7,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 61456,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 61952,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 57344},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5ac8aad3353e5a3979ceb907f86b796b5e63c217fc4a41002fde97b2ac816341'},
 '5accc2123982804781f324e33ed124f94af039de49baa400d7d632060bfb1946': {'AddressOfEntryPoint': 1657973,
                                                                      'DebugRVA': 2311552,
                                                                      'DebugSize': 112,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2007040,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptReleaseContext',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'GDI32.dll': 'CopyMetaFileW',
                                                                                      'IMM32.dll': 'ImmGetOpenStatus',
                                                                                      'KERNEL32.dll': 'RtlUnwind',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'Normaliz.dll': 'IdnToAscii',
                                                                                      'OLEACC.dll': 'LresultFromObject',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHCreateItemFromParsingName',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'MonitorFromWindow',
                                                                                      'UxTheme.dll': 'DrawThemeBackground',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'WS2_32.dll': 'connect',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'gdiplus.dll': 'GdipBitmapUnlockBits',
                                                                                      'ole32.dll': 'OleDestroyMenuDescriptor',
                                                                                      'oledlg.dll': 'OleUIBusyW'},
                                                                      'ImportedFunctions': ['PlaySoundW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'CreateXmlReader',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenProcessToken',
                                                                                            'CryptGenRandom',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'RegCloseKey',
                                                                                            'CryptEncrypt',
                                                                                            'CryptImportKey',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptReleaseContext',
                                                                                            'sendto',
                                                                                            'recvfrom',
                                                                                            'listen',
                                                                                            'accept',
                                                                                            'freeaddrinfo',
                                                                                            'getaddrinfo',
                                                                                            'getpeername',
                                                                                            'WSAIoctl',
                                                                                            'ioctlsocket',
                                                                                            'gethostname',
                                                                                            'htonl',
                                                                                            'ntohl',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'ntohs',
                                                                                            'htons',
                                                                                            'getsockopt',
                                                                                            'getsockname',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'WSASetLastError',
                                                                                            'select',
                                                                                            '__WSAFDIsSet',
                                                                                            'socket',
                                                                                            'WSAGetLastError',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'connect',
                                                                                            'CertFreeCertificateContext',
                                                                                            'IdnToAscii',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalHandle',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GlobalFlags',
                                                                                            'GetThreadLocale',
                                                                                            'lstrcmpiW',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFullPathNameW',
                                                                                            'GetVolumeInformationW',
                                                                                            'LockFile',
                                                                                            'GlobalAddAtomW',
                                                                                            'SetFilePointer',
                                                                                            'UnlockFile',
                                                                                            'DuplicateHandle',
                                                                                            'VirtualProtect',
                                                                                            'lstrcpyW',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetTickCount',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FindResourceExW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetProfileIntW',
                                                                                            'SearchPathW',
                                                                                            'ResetEvent',
                                                                                            'TlsGetValue',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemDirectoryW',
                                                                                            'EncodePointer',
                                                                                            'FreeResource',
                                                                                            'lstrcmpW',
                                                                                            'lstrcmpA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThread',
                                                                                            'OutputDebugStringA',
                                                                                            'CopyFileW',
                                                                                            'MulDiv',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalSize',
                                                                                            'GlobalAlloc',
                                                                                            'ResumeThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WaitForMultipleObjects',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'VerifyVersionInfoA',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'FormatMessageA',
                                                                                            'SetLastError',
                                                                                            'SleepEx',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetTickCount64',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStringTypeW',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetExitCodeThread',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'ExitProcess',
                                                                                            'GetProcessHeap',
                                                                                            'DeleteCriticalSection',
                                                                                            'DecodePointer',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'TryEnterCriticalSection',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'GlobalFindAtomW',
                                                                                            'HeapFree',
                                                                                            'DeleteFileW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCurrentProcess',
                                                                                            'IsWow64Process',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetTempPathW',
                                                                                            'GetLocalTime',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'CloseHandle',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedFlushSList',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetACP',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetDriveTypeW',
                                                                                            'HeapQueryInformation',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'SetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WriteConsoleW',
                                                                                            'CreateTimerQueue',
                                                                                            'SignalObjectAndWait',
                                                                                            'SwitchToThread',
                                                                                            'GetThreadPriority',
                                                                                            'GetLogicalProcessorInformation',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'ChangeTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetNumaHighestNodeNumber',
                                                                                            'GetProcessAffinityMask',
                                                                                            'SetThreadAffinityMask',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'UnregisterWait',
                                                                                            'GetThreadTimes',
                                                                                            'VirtualFree',
                                                                                            'ReleaseSemaphore',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'QueryDepthSList',
                                                                                            'UnregisterWaitEx',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'WaitMessage',
                                                                                            'GetComboBoxInfo',
                                                                                            'MonitorFromPoint',
                                                                                            'UpdateLayeredWindow',
                                                                                            'UnionRect',
                                                                                            'ReuseDDElParam',
                                                                                            'UnpackDDElParam',
                                                                                            'InsertMenuItemW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'PostThreadMessageW',
                                                                                            'FrameRect',
                                                                                            'CopyIcon',
                                                                                            'SetCursorPos',
                                                                                            'BringWindowToTop',
                                                                                            'GetSystemMenu',
                                                                                            'IsZoomed',
                                                                                            'DrawFrameControl',
                                                                                            'DrawEdge',
                                                                                            'DrawStateW',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'OpenClipboard',
                                                                                            'SetParent',
                                                                                            'SetWindowRgn',
                                                                                            'SetClassLongW',
                                                                                            'EnumDisplayMonitors',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'NotifyWinEvent',
                                                                                            'InvertRect',
                                                                                            'HideCaret',
                                                                                            'EnableScrollBar',
                                                                                            'GetIconInfo',
                                                                                            'DrawIconEx',
                                                                                            'DrawFocusRect',
                                                                                            'WindowFromPoint',
                                                                                            'GetMenuDefaultItem',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'LoadImageW',
                                                                                            'TrackMouseEvent',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetMenuItemInfoW',
                                                                                            'DestroyMenu',
                                                                                            'CharUpperW',
                                                                                            'DestroyIcon',
                                                                                            'LoadMenuW',
                                                                                            'InflateRect',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'MessageBeep',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'IsRectEmpty',
                                                                                            'IntersectRect',
                                                                                            'SetRect',
                                                                                            'InvalidateRgn',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CharNextW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'RealChildWindowFromPoint',
                                                                                            'DeleteMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'CopyImage',
                                                                                            'GetSysColorBrush',
                                                                                            'OffsetRect',
                                                                                            'SetRectEmpty',
                                                                                            'SendDlgItemMessageA',
                                                                                            'IsDialogMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'GetKeyboardLayout',
                                                                                            'CheckDlgButton',
                                                                                            'MoveWindow',
                                                                                            'ShowWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'WinHelpW',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'GetTopWindow',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongW',
                                                                                            'PtInRect',
                                                                                            'EqualRect',
                                                                                            'MapWindowPoints',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'RemovePropW',
                                                                                            'GetPropW',
                                                                                            'SetPropW',
                                                                                            'ShowScrollBar',
                                                                                            'GetScrollRange',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollPos',
                                                                                            'ScrollWindow',
                                                                                            'RedrawWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'SetMenu',
                                                                                            'GetMenu',
                                                                                            'GetCapture',
                                                                                            'SetFocus',
                                                                                            'GetDlgCtrlID',
                                                                                            'EndDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowPlacement',
                                                                                            'IsChild',
                                                                                            'IsMenu',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'CallWindowProcW',
                                                                                            'DefWindowProcW',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetFocus',
                                                                                            'CopyRect',
                                                                                            'MapVirtualKeyW',
                                                                                            'GetKeyNameTextW',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'ScreenToClient',
                                                                                            'ClientToScreen',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowDC',
                                                                                            'GetDC',
                                                                                            'TabbedTextOutW',
                                                                                            'GrayStringW',
                                                                                            'IsCharLowerW',
                                                                                            'MapVirtualKeyExW',
                                                                                            'ToUnicodeEx',
                                                                                            'GetKeyboardState',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'LockWindowUpdate',
                                                                                            'SetMenuDefaultItem',
                                                                                            'GetDoubleClickTime',
                                                                                            'DestroyCursor',
                                                                                            'GetWindowRgn',
                                                                                            'CreateMenu',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'SubtractRect',
                                                                                            'TranslateMDISysAccel',
                                                                                            'DefMDIChildProcW',
                                                                                            'DefFrameProcW',
                                                                                            'DrawMenuBar',
                                                                                            'GetUpdateRect',
                                                                                            'CharUpperBuffW',
                                                                                            'GetLastActivePopup',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'MapDialogRect',
                                                                                            'GetWindow',
                                                                                            'GetParent',
                                                                                            'SetWindowContextHelpId',
                                                                                            'SetWindowPos',
                                                                                            'ModifyMenuW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'PostQuitMessage',
                                                                                            'RemoveMenu',
                                                                                            'AppendMenuW',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuState',
                                                                                            'GetMenuStringW',
                                                                                            'CallNextHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'GetKeyState',
                                                                                            'GetActiveWindow',
                                                                                            'PeekMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'IsWindowVisible',
                                                                                            'UpdateWindow',
                                                                                            'InvalidateRect',
                                                                                            'DrawIcon',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'IsIconic',
                                                                                            'LoadBitmapW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'SendMessageW',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'GetWindowRect',
                                                                                            'RegisterWindowMessageW',
                                                                                            'EnableWindow',
                                                                                            'LoadIconW',
                                                                                            'PostMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'MessageBoxW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetTextMetricsW',
                                                                                            'DPtoLP',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetMapMode',
                                                                                            'SetRectRgn',
                                                                                            'GetBkColor',
                                                                                            'PatBlt',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CombineRgn',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'CreatePalette',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'GetPaletteEntries',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'RealizePalette',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SetWindowOrgEx',
                                                                                            'EnumFontFamiliesW',
                                                                                            'GetTextCharsetInfo',
                                                                                            'SetPixel',
                                                                                            'CreateDIBSection',
                                                                                            'SetDIBColorTable',
                                                                                            'CreateEllipticRgn',
                                                                                            'CreateFontW',
                                                                                            'CreateCompatibleDC',
                                                                                            'Ellipse',
                                                                                            'SetWindowExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'CreatePolygonRgn',
                                                                                            'GetRgnBox',
                                                                                            'Polygon',
                                                                                            'Polyline',
                                                                                            'CreateRoundRectRgn',
                                                                                            'StretchBlt',
                                                                                            'LPtoDP',
                                                                                            'Rectangle',
                                                                                            'OffsetRgn',
                                                                                            'RoundRect',
                                                                                            'FillRgn',
                                                                                            'FrameRgn',
                                                                                            'GetBoundsRect',
                                                                                            'PtInRegion',
                                                                                            'ExtFloodFill',
                                                                                            'SetPaletteEntries',
                                                                                            'SetPixelV',
                                                                                            'GetWindowOrgEx',
                                                                                            'GetViewportOrgEx',
                                                                                            'GetTextFaceW',
                                                                                            'SetTextAlign',
                                                                                            'SetTextColor',
                                                                                            'ExtTextOutW',
                                                                                            'TextOutW',
                                                                                            'MoveToEx',
                                                                                            'GetObjectW',
                                                                                            'CreateDIBitmap',
                                                                                            'SetROP2',
                                                                                            'SetPolyFillMode',
                                                                                            'GetLayout',
                                                                                            'SetLayout',
                                                                                            'SetMapMode',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SelectPalette',
                                                                                            'SelectObject',
                                                                                            'ExtSelectClipRgn',
                                                                                            'SelectClipRgn',
                                                                                            'SaveDC',
                                                                                            'RestoreDC',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'LineTo',
                                                                                            'IntersectClipRect',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'GetStockObject',
                                                                                            'GetPixel',
                                                                                            'GetObjectType',
                                                                                            'GetClipBox',
                                                                                            'ExcludeClipRect',
                                                                                            'Escape',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePatternBrush',
                                                                                            'CreatePen',
                                                                                            'CreateHatchBrush',
                                                                                            'CreateBitmap',
                                                                                            'BitBlt',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateDCW',
                                                                                            'CopyMetaFileW',
                                                                                            'TransparentBlt',
                                                                                            'AlphaBlend',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetDesktopFolder',
                                                                                            'DragQueryFileW',
                                                                                            'SHAppBarMessage',
                                                                                            'SHBrowseForFolderW',
                                                                                            'DragFinish',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathFindFileNameW',
                                                                                            'PathQuoteSpacesW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsUNCW',
                                                                                            'PathStripToRootW',
                                                                                            'StrFormatKBSizeW',
                                                                                            'PathFindExtensionW',
                                                                                            'GetThemePartSize',
                                                                                            'DrawThemeText',
                                                                                            'DrawThemeParentBackground',
                                                                                            'OpenThemeData',
                                                                                            'CloseThemeData',
                                                                                            'GetThemeSysColor',
                                                                                            'IsAppThemed',
                                                                                            'GetWindowTheme',
                                                                                            'IsThemeBackgroundPartiallyTransparent',
                                                                                            'GetCurrentThemeName',
                                                                                            'GetThemeColor',
                                                                                            'DrawThemeBackground',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleDuplicateData',
                                                                                            'ReleaseStgMedium',
                                                                                            'CoCreateGuid',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitialize',
                                                                                            'CoDisconnectObject',
                                                                                            'CoGetClassObject',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'DoDragDrop',
                                                                                            'OleGetClipboard',
                                                                                            'CoLockObjectExternal',
                                                                                            'RegisterDragDrop',
                                                                                            'RevokeDragDrop',
                                                                                            'OleLockRunning',
                                                                                            'OleCreateMenuDescriptor',
                                                                                            'IsAccelerator',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'OleTranslateAccelerator',
                                                                                            'OleDestroyMenuDescriptor',
                                                                                            'VariantCopy',
                                                                                            'VarBstrFromDate',
                                                                                            'SafeArrayDestroy',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SysStringLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'LoadTypeLib',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'OleUIBusyW',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'LresultFromObject',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'ImmReleaseContext',
                                                                                            'ImmGetContext',
                                                                                            'ImmGetOpenStatus'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 24,
                                                                      'NumberOfImportFunctions': 695,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 78590192,
                                                                      'SectionNames': {'.data\x00\x00\x00': 31232,
                                                                                       '.rdata\x00\x00': 449536,
                                                                                       '.reloc\x00\x00': 150528,
                                                                                       '.rsrc\x00\x00\x00': 78590464,
                                                                                       '.text\x00\x00\x00': 2001408},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5accc2123982804781f324e33ed124f94af039de49baa400d7d632060bfb1946'},
 '5b41af2140f0d69577ddfa1e0833342dbe86dc1aa73252853fac81eb5e5cb7f6': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5b41af2140f0d69577ddfa1e0833342dbe86dc1aa73252853fac81eb5e5cb7f6'},
 '5bc52fad56943f55301d51831680ee03e31422251452d1c36963ba49160afc59': {'AddressOfEntryPoint': 6084,
                                                                      'DebugRVA': 17120,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'MSVCR100.dll': '_wcsicmp',
                                                                                      'SETUPAPI.dll': 'SetupFindFirstLineW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'VBoxRT.dll': 'RTR3InitExe',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesW'},
                                                                      'ImportedFunctions': ['free',
                                                                                            'memcpy',
                                                                                            '_wsplitpath',
                                                                                            'wcsrchr',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'printf',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            '_vsnprintf',
                                                                                            '_wcsicmp',
                                                                                            'RTPathExecDir',
                                                                                            'RTPrintf',
                                                                                            'RTErrConvertFromWin32',
                                                                                            'RTR3InitExe',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'StartServiceW',
                                                                                            'CreateServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceA',
                                                                                            'ChangeServiceConfigA',
                                                                                            'CloseServiceHandle',
                                                                                            'SHGetFolderPathW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupUninstallOEMInfW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupFindFirstLineW',
                                                                                            'UpdateDriverForPlugAndPlayDevicesW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 10240},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5bc52fad56943f55301d51831680ee03e31422251452d1c36963ba49160afc59'},
 '5bf579687281524933e8ab09e59ae90f02d91fce7fe65796f25fd036b0cd6622': {'AddressOfEntryPoint': 42672,
                                                                      'DebugRVA': 4448,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'IsDebuggerPresent',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CompareFileTime',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'CopyFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'MapViewOfFile',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenProcessToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForSingleObjectEx',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetWindowsDirectoryW',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AllocateAndInitializeSid',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwGetTraceEnableLevel'},
                                                                      'ImportedFunctions': ['memcpy',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcsrchr',
                                                                                            '_resetstkoflw',
                                                                                            'wcschr',
                                                                                            'swscanf',
                                                                                            'memset',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenKey',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtClose',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlFormatCurrentUserKeyPath',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtQuerySystemInformation',
                                                                                            'DbgPrintEx',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'EtwEventRegister',
                                                                                            'NtQueryInformationProcess',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetErrorMode',
                                                                                            'RaiseException',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'CompareFileTime',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenProcessToken',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CopyFileExW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'CompareStringW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 47104},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/5bf579687281524933e8ab09e59ae90f02d91fce7fe65796f25fd036b0cd6622'},
 '5bfceb053fde7dc45d89694a71c2dc427dcc96124e29e8e31e5afb5299a05725': {'AddressOfEntryPoint': 28272,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-base-util-l1-1-0.dll': 'IsTextUnicode',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileType',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapReAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryInfoKeyW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegEnumKeyW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventRegister',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AllocateAndInitializeSid',
                                                                                      'api-ms-win-security-provider-l1-1-0.dll': 'SetEntriesInAclW',
                                                                                      'loadperf.dll': 'LpAcquireInstallationMutex',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['__p__fmode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcsnicmp',
                                                                                            '_controlfp',
                                                                                            '_cexit',
                                                                                            '_except_handler4_common',
                                                                                            '__setusermatherr',
                                                                                            'wcstoul',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_vsnwprintf',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_exit',
                                                                                            '__p__commode',
                                                                                            '_wtof',
                                                                                            '_XcptFilter',
                                                                                            'setlocale',
                                                                                            'floor',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'UnloadPerfCounterTextStringsW',
                                                                                            'LpReleaseInstallationMutex',
                                                                                            'LpAcquireInstallationMutex',
                                                                                            'GetStdHandle',
                                                                                            'GetCommandLineW',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'Sleep',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapReAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CloseHandle',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'FreeSid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'WriteConsoleW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'IsTextUnicode',
                                                                                            'SetEntriesInAclW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/5bfceb053fde7dc45d89694a71c2dc427dcc96124e29e8e31e5afb5299a05725'},
 '5c1af46c7300e87a73dacf6cf41ce397e3f05df6bd9c7e227b4ac59f85769160': {'AddressOfEntryPoint': 9747,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetFileAttributesA'},
                                                                      'ImportedFunctions': ['GenerateConsoleCtrlEvent',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetModuleFileNameA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlUnwind',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'GetFileAttributesA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 79,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 51712},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5c1af46c7300e87a73dacf6cf41ce397e3f05df6bd9c7e227b4ac59f85769160'},
 '5c1e7c316ec5bbb74472f813b7e527473fc7b0b7d0e16f6bbed12201bfc485e6': {'AddressOfEntryPoint': 16719,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetFileSecurityA',
                                                                                      'COMCTL32.DLL': 'InitCommonControls',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'lstrlenA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'SetFileSecurityA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'InitCommonControls',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'CloseHandle',
                                                                                            'CompareFileTime',
                                                                                            'CopyFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateThread',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetProcAddress',
                                                                                            'GetShortPathNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetTickCount',
                                                                                            'GetVersion',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryExA',
                                                                                            'MoveFileA',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'SearchPathA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetErrorMode',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'WriteFile',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'lstrcatA',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcpynA',
                                                                                            'lstrlenA',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteA',
                                                                                            'AppendMenuA',
                                                                                            'BeginPaint',
                                                                                            'CallWindowProcA',
                                                                                            'CharNextA',
                                                                                            'CharPrevA',
                                                                                            'CheckDlgButton',
                                                                                            'CloseClipboard',
                                                                                            'CreateDialogParamA',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateWindowExA',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'DialogBoxParamA',
                                                                                            'DispatchMessageA',
                                                                                            'DrawTextA',
                                                                                            'EmptyClipboard',
                                                                                            'EnableMenuItem',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'EndPaint',
                                                                                            'ExitWindowsEx',
                                                                                            'FillRect',
                                                                                            'FindWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'GetDlgItem',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetMessagePos',
                                                                                            'GetSysColor',
                                                                                            'GetSystemMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowLongA',
                                                                                            'GetWindowRect',
                                                                                            'InvalidateRect',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapA',
                                                                                            'LoadCursorA',
                                                                                            'LoadImageA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'OpenClipboard',
                                                                                            'PeekMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassA',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'SetClassLongA',
                                                                                            'SetClipboardData',
                                                                                            'SetCursor',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetTimer',
                                                                                            'SetWindowLongA',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowTextA',
                                                                                            'ShowWindow',
                                                                                            'SystemParametersInfoA',
                                                                                            'TrackPopupMenu',
                                                                                            'wsprintfA'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 29032,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.ndata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 27648,
                                                                                       '.rsrc\x00\x00\x00': 29184,
                                                                                       '.text\x00\x00\x00': 35328},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/5c1e7c316ec5bbb74472f813b7e527473fc7b0b7d0e16f6bbed12201bfc485e6'},
 '5c3eccf7bd5b294d0ebe99483278713075f372debd1cb8333f2fea09c25b3e49': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 451252,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 451584,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5c3eccf7bd5b294d0ebe99483278713075f372debd1cb8333f2fea09c25b3e49'},
 '5c6ba7844252ef3b207953fc2de7860801cf9213173823bb203a187adf6e5e5c': {'AddressOfEntryPoint': 23936,
                                                                      'DebugRVA': 4288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LsaSetTrustedDomainInfoByName',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'NETAPI32.dll': 'NetServerGetInfo',
                                                                                      'Secur32.dll': 'LsaLookupAuthenticationPackage',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCompareUnicodeString'},
                                                                      'ImportedFunctions': ['LsaClose',
                                                                                            'LsaOpenPolicy',
                                                                                            'RegCreateKeyExW',
                                                                                            'LsaQueryTrustedDomainInfoByName',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegCloseKey',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaStorePrivateData',
                                                                                            'LsaSetInformationPolicy',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'LsaSetTrustedDomainInfoByName',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetConsoleMode',
                                                                                            'FormatMessageW',
                                                                                            'SetConsoleMode',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'GetComputerNameW',
                                                                                            'SetComputerNameExW',
                                                                                            'LocalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'SetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcsncmp',
                                                                                            'wcsstr',
                                                                                            'exit',
                                                                                            'wcstoul',
                                                                                            '_wcsdup',
                                                                                            'realloc',
                                                                                            'wcschr',
                                                                                            '_vsnprintf',
                                                                                            'getchar',
                                                                                            'iswalpha',
                                                                                            'isspace',
                                                                                            'iswupper',
                                                                                            '_wcsicmp',
                                                                                            'wcscpy_s',
                                                                                            'wcsncat_s',
                                                                                            'fwprintf',
                                                                                            '_vsnwprintf',
                                                                                            '_wsetlocale',
                                                                                            '_snwprintf_s',
                                                                                            'printf',
                                                                                            'fgetws',
                                                                                            'free',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'malloc',
                                                                                            '_cexit',
                                                                                            'memset',
                                                                                            'DsGetDcNameW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetServerGetInfo',
                                                                                            'RtlInitString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'LoadStringW',
                                                                                            'LsaCallAuthenticationPackage',
                                                                                            'LsaConnectUntrusted',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'LsaLookupAuthenticationPackage'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 103,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1288,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 22016},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/5c6ba7844252ef3b207953fc2de7860801cf9213173823bb203a187adf6e5e5c'},
 '5c70a83d54f72e1f06c93328a19456fa2bbd752fe321a7a8aff59c58f9456436': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 472952,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 473088,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5c70a83d54f72e1f06c93328a19456fa2bbd752fe321a7a8aff59c58f9456436'},
 '5c7ef0e0f9f35c90d304c56bfc04c85ab4476d83fbb91f38fc207809fbc38210': {'AddressOfEntryPoint': 38048,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceEvent',
                                                                                      'KERNEL32.dll': 'GetConsoleOutputCP',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'logoncli.dll': 'DsGetDcNameW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netjoin.dll': 'NetpAnalyzeProvisioningPackage',
                                                                                      'netutils.dll': 'NetApiBufferFree',
                                                                                      'ntdll.dll': 'RtlFreeHeap',
                                                                                      'wkscli.dll': 'NetUseDel'},
                                                                      'ImportedFunctions': ['ControlTraceW',
                                                                                            'EnableTrace',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'StartTraceW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'TraceEvent',
                                                                                            'ReadFile',
                                                                                            'OpenEventW',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'SetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleFileNameW',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetFileSize',
                                                                                            'GetVersionExW',
                                                                                            'CreateEventW',
                                                                                            'GetFileAttributesW',
                                                                                            'WriteFile',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'CreateFileW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetTickCount64',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalFree',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            '_wcsnicmp',
                                                                                            'free',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            'memcpy',
                                                                                            'malloc',
                                                                                            'wcsrchr',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'wprintf',
                                                                                            'fwprintf',
                                                                                            'swprintf_s',
                                                                                            'wcscpy_s',
                                                                                            'setlocale',
                                                                                            '_iob',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            'printf',
                                                                                            'wcschr',
                                                                                            'memset',
                                                                                            'LoadStringW',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'DbgPrint',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlFreeHeap',
                                                                                            'DsGetDcNameW',
                                                                                            'NetJoinDomain',
                                                                                            'NetUseAdd',
                                                                                            'NetUseDel',
                                                                                            'NetApiBufferAllocate',
                                                                                            'NetApiBufferFree',
                                                                                            'NetCreateProvisioningPackage',
                                                                                            'NetRequestOfflineDomainJoin',
                                                                                            'NetpDomainJoinLicensingCheck',
                                                                                            'NetProvisionComputerAccount',
                                                                                            'NetpAnalyzeProvisioningPackage'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 116,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 18048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 18432,
                                                                                       '.text\x00\x00\x00': 37888},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/5c7ef0e0f9f35c90d304c56bfc04c85ab4476d83fbb91f38fc207809fbc38210'},
 '5cbeea096c7a0ad76e40f461c1a2c1d79bab42c1730ed70ecd8183302f9be357': {'AddressOfEntryPoint': 5376,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'msvcrt.dll': '_controlfp'},
                                                                      'ImportedFunctions': ['ShellExecuteW',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'Sleep',
                                                                                            '_wcmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '_except_handler4_common',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_controlfp'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 29,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/5cbeea096c7a0ad76e40f461c1a2c1d79bab42c1730ed70ecd8183302f9be357'},
 '5cf3ba35a2b439763d96cee5200a3a1b63365b2e7717d5e4d29fc42c7863a3c4': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 996484,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 5368971264,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1044,
                                                                      'SectionNames': {'.data\x00\x00\x00': 221184,
                                                                                       '.reloc\x00\x00': 25088,
                                                                                       '.text\x00\x00\x00': 735232,
                                                                                       '.xdata\x00\x00': 34304},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/5cf3ba35a2b439763d96cee5200a3a1b63365b2e7717d5e4d29fc42c7863a3c4'},
 '5cf41740e977391bd9d70fd8266979c0973ddfd85ece2c62b848f27df9872253': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 83304,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 83456,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5cf41740e977391bd9d70fd8266979c0973ddfd85ece2c62b848f27df9872253'},
 '5cff7956bb913609bea64e5a88bab1e385ef44f7c3c7297440ba989a1ea7ea68': {'AddressOfEntryPoint': 9836,
                                                                      'DebugRVA': 4400,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryRecoveryAgentsOnEncryptedFile',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'CharToOemW',
                                                                                      'msvcrt.dll': 'wcslen'},
                                                                      'ImportedFunctions': ['lstrlenW',
                                                                                            'lstrcatW',
                                                                                            'lstrcpyW',
                                                                                            'GetComputerNameW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FormatMessageW',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'WriteConsoleW',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            'malloc',
                                                                                            'wcscpy',
                                                                                            'wcscat',
                                                                                            'free',
                                                                                            '_get_osfhandle',
                                                                                            'wcslen',
                                                                                            'LookupAccountSidW',
                                                                                            'FreeEncryptionCertificateHashList',
                                                                                            'QueryUsersOnEncryptedFile',
                                                                                            'EncryptedFileKeyInfo',
                                                                                            'FreeEncryptedFileKeyInfo',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'QueryRecoveryAgentsOnEncryptedFile',
                                                                                            'CommandLineToArgvW',
                                                                                            'wsprintfW',
                                                                                            'CharToOemW'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/5cff7956bb913609bea64e5a88bab1e385ef44f7c3c7297440ba989a1ea7ea68'},
 '5d3921091a11880c143db8a6f5c55b6fec76f24d4d8bec56a8fc37e0b43b8be2': {'AddressOfEntryPoint': 4784,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 213568,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.DLL': 'SetTokenInformation',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'SHELL32.DLL': 'SHGetFolderPathA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'wcslen'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'SetTokenInformation',
                                                                                            'AddAtomA',
                                                                                            'AllocConsole',
                                                                                            'CloseHandle',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateSemaphoreA',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'FindAtomA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FormatMessageA',
                                                                                            'FreeLibrary',
                                                                                            'GetAtomNameA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'InitializeCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedIncrement',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetDllDirectoryA',
                                                                                            'SetErrorMode',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            '_itoa',
                                                                                            '__getmainargs',
                                                                                            '__mb_cur_max',
                                                                                            '__p__environ',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_assert',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_fullpath',
                                                                                            '_iob',
                                                                                            '_onexit',
                                                                                            '_setmode',
                                                                                            '_snprintf',
                                                                                            'abort',
                                                                                            'atexit',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'fclose',
                                                                                            'fgets',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strlen',
                                                                                            'strncat',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'strrchr',
                                                                                            'strstr',
                                                                                            'strtoul',
                                                                                            'vfprintf',
                                                                                            'wcslen',
                                                                                            'SHGetFolderPathA',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 103,
                                                                      'NumberOfSections': 17,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 21516,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 77312,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 22016,
                                                                                       '.text\x00\x00\x00': 108032,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '/102\x00\x00\x00\x00': 512,
                                                                                       '/113\x00\x00\x00\x00': 30208,
                                                                                       '/124\x00\x00\x00\x00': 1536,
                                                                                       '/19\x00\x00\x00\x00\x00': 2048,
                                                                                       '/35\x00\x00\x00\x00\x00': 2560,
                                                                                       '/4\x00\x00\x00\x00\x00\x00': 1024,
                                                                                       '/51\x00\x00\x00\x00\x00': 27648,
                                                                                       '/63\x00\x00\x00\x00\x00': 6144,
                                                                                       '/77\x00\x00\x00\x00\x00': 10752,
                                                                                       '/89\x00\x00\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/5d3921091a11880c143db8a6f5c55b6fec76f24d4d8bec56a8fc37e0b43b8be2'},
 '5ded98e52f73e6bfb412dc5533adb4177f8ddd4b2cba433943b07b7838c72bbe': {'AddressOfEntryPoint': 590580,
                                                                      'DebugRVA': 879632,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 886176,
                                                                      'ExportSize': 1596,
                                                                      'IATRVA': 753664,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'IPHLPAPI.DLL': 'GetNetworkParams',
                                                                                      'KERNEL32.dll': 'EncodePointer',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'GetClassInfoExW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'ntohs',
                                                                                      'gdiplus.dll': 'GdipCreateHBITMAPFromBitmap',
                                                                                      'ole32.dll': 'CoInitializeSecurity'},
                                                                      'ImportedFunctions': ['GdipCreateBitmapFromResource',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdipAlloc',
                                                                                            'GdiplusStartup',
                                                                                            'GdipFree',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GetNetworkParams',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetTextFaceW',
                                                                                            'CreateDIBSection',
                                                                                            'PtInRegion',
                                                                                            'CreateRectRgn',
                                                                                            'SetWindowOrgEx',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRoundRectRgn',
                                                                                            'CreatePen',
                                                                                            'GetStockObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetObjectW',
                                                                                            'SetViewportOrgEx',
                                                                                            'ExtTextOutW',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SelectObject',
                                                                                            'PatBlt',
                                                                                            'DeleteObject',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateFontW',
                                                                                            'CreatePatternBrush',
                                                                                            'DeleteDC',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WriteConsoleW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'ReadConsoleW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetACP',
                                                                                            'GetCommandLineW',
                                                                                            'DecodePointer',
                                                                                            'CloseHandle',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateProcessW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'lstrcmpiW',
                                                                                            'SetDllDirectoryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTickCount',
                                                                                            'FindResourceExW',
                                                                                            'LockResource',
                                                                                            'lstrlenW',
                                                                                            'FreeResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'LocalFree',
                                                                                            'CompareStringW',
                                                                                            'GlobalFree',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'CreateEventW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetExitCodeProcess',
                                                                                            'OpenProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'GetModuleHandleExW',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'OutputDebugStringA',
                                                                                            'FormatMessageA',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetVolumeInformationW',
                                                                                            'ReadFile',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CopyFileW',
                                                                                            'MoveFileExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetVersionExW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetThreadPriority',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'TzSpecificLocalTimeToSystemTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'IsDebuggerPresent',
                                                                                            'DuplicateHandle',
                                                                                            'CreateThread',
                                                                                            'GetUserDefaultLangID',
                                                                                            'TerminateProcess',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleInformation',
                                                                                            'ResumeThread',
                                                                                            'AssignProcessToJobObject',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ReadProcessMemory',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetFileSizeEx',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointerEx',
                                                                                            'SetFileTime',
                                                                                            'GetProcessId',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'TryEnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'CreateMutexW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindFirstVolumeW',
                                                                                            'FindNextVolumeW',
                                                                                            'FindVolumeClose',
                                                                                            'GetDriveTypeW',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'RtlCaptureContext',
                                                                                            'SetErrorMode',
                                                                                            'InitializeCriticalSection',
                                                                                            'SleepEx',
                                                                                            'FormatMessageW',
                                                                                            'GetFileType',
                                                                                            'PeekNamedPipe',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'SetFilePointer',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'SetStdHandle',
                                                                                            'GetFullPathNameW',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'RtlUnwind',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LoadLibraryExA',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'FlushInstructionCache',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'InitializeSListHead',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LCMapStringW',
                                                                                            'EncodePointer',
                                                                                            'AlphaBlend',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'SysFreeString',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'GetModuleFileNameExW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'GetCapture',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'IsWindowEnabled',
                                                                                            'DrawTextW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowTextW',
                                                                                            'GetClientRect',
                                                                                            'GetWindowRect',
                                                                                            'SetCursor',
                                                                                            'MapWindowPoints',
                                                                                            'GetSysColor',
                                                                                            'OffsetRect',
                                                                                            'GetWindowLongW',
                                                                                            'GetParent',
                                                                                            'DestroyCursor',
                                                                                            'SetFocus',
                                                                                            'EnableWindow',
                                                                                            'RegisterClassExW',
                                                                                            'MessageBoxW',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetCursorPos',
                                                                                            'ScreenToClient',
                                                                                            'FillRect',
                                                                                            'SetRectEmpty',
                                                                                            'GetDlgCtrlID',
                                                                                            'PtInRect',
                                                                                            'GetClassNameW',
                                                                                            'LoadCursorW',
                                                                                            'PostMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowRgn',
                                                                                            'ClientToScreen',
                                                                                            'GetWindow',
                                                                                            'LoadImageW',
                                                                                            'IsDialogMessageW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'RedrawWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetMenu',
                                                                                            'AdjustWindowRectEx',
                                                                                            'MoveWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadStringW',
                                                                                            'EnumChildWindows',
                                                                                            'GetWindowRgn',
                                                                                            'PeekMessageW',
                                                                                            'CharNextW',
                                                                                            'CreateDialogParamW',
                                                                                            'ShowWindow',
                                                                                            'DestroyWindow',
                                                                                            'UnregisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'SetWindowPos',
                                                                                            'IsWindow',
                                                                                            'CreateWindowExW',
                                                                                            'CallWindowProcW',
                                                                                            'SendMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'CopyRect',
                                                                                            'SetWindowLongW',
                                                                                            'GetClassInfoExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'timeBeginPeriod',
                                                                                            'timeEndPeriod',
                                                                                            'timeGetTime',
                                                                                            '__WSAFDIsSet',
                                                                                            'select',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'accept',
                                                                                            'listen',
                                                                                            'gethostname',
                                                                                            'htons',
                                                                                            'freeaddrinfo',
                                                                                            'getsockname',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'WSAGetLastError',
                                                                                            'socket',
                                                                                            'closesocket',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'ioctlsocket',
                                                                                            'getaddrinfo',
                                                                                            'WSASetLastError',
                                                                                            'setsockopt',
                                                                                            'getsockopt',
                                                                                            'bind',
                                                                                            'getpeername',
                                                                                            'connect',
                                                                                            'ntohs',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            '_TrackMouseEvent'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 357,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 423800,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.gfids\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 142336,
                                                                                       '.reloc\x00\x00': 28160,
                                                                                       '.rsrc\x00\x00\x00': 423936,
                                                                                       '.text\x00\x00\x00': 746496,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5ded98e52f73e6bfb412dc5533adb4177f8ddd4b2cba433943b07b7838c72bbe'},
 '5ef1c94c5c2c118b1dcc95525dd054ab5475972c8e02f06e6e0ee311e40d7a1b': {'AddressOfEntryPoint': 5716,
                                                                      'DebugRVA': 74112,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetStdHandle',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW'},
                                                                      'ImportedFunctions': ['GetConsoleOutputCP',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'InterlockedDecrement',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'WriteConsoleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'RtlUnwind',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateFileA',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'lstrlenW',
                                                                                            'lstrcpyW',
                                                                                            'HeapFree',
                                                                                            'GetCommandLineW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'CommandLineToArgvW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 68096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5ef1c94c5c2c118b1dcc95525dd054ab5475972c8e02f06e6e0ee311e40d7a1b'},
 '5f4c607f64acee3b3300c8e4ec360fa69c01681026e681a7f9297e446f55816b': {'AddressOfEntryPoint': 10556,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlCaptureContext',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'iisutil.dll': 'PuDeleteDebugPrintsObject',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegisterServiceCtrlHandlerA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'SetServiceStatus',
                                                                                            'RegCloseKey',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'LoadLibraryExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'OutputDebugStringA',
                                                                                            'LocalFree',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'strcat_s',
                                                                                            'strcpy_s',
                                                                                            'sprintf_s',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'PuCreateDebugPrintsObject',
                                                                                            'PuDbgPrint',
                                                                                            'PuDeleteDebugPrintsObject'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/5f4c607f64acee3b3300c8e4ec360fa69c01681026e681a7f9297e446f55816b'},
 '5f692c3fb2827db7ac0d86b6f671b27b17176adfc0be14c11dfdb8f492a42c49': {'AddressOfEntryPoint': 246208,
                                                                      'DebugRVA': 1424024,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1441792,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'DUI70.dll': '?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z',
                                                                                      'DUser.dll': 'AddLayeredRef',
                                                                                      'GDI32.dll': 'GdiFlush',
                                                                                      'KERNEL32.dll': 'SetProcessDEPPolicy',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'PROPSYS.dll': 'PropVariantToString',
                                                                                      'RPCRT4.dll': 'RpcBindingFree',
                                                                                      'SHCORE.dll': 'GetDpiForMonitor',
                                                                                      'SHELL32.dll': 'ExtractIconExW',
                                                                                      'SHLWAPI.dll': 'AssocCreate',
                                                                                      'SLC.dll': 'SLUnregisterWindowsEvent',
                                                                                      'SspiCli.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'InflateRect',
                                                                                      'USERENV.dll': 'GetProfileType',
                                                                                      'UxTheme.dll': 'BufferedPaintClear',
                                                                                      'api-ms-win-core-atoms-l1-1-0.dll': 'GlobalGetAtomNameW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'PropVariantClear',
                                                                                      'api-ms-win-core-com-private-l1-1-0.dll': 'CoRegisterInitializeSpy',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetDateFormatW',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetLongPathNameW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalReAlloc',
                                                                                      'api-ms-win-core-interlocked-l1-2-0.dll': 'InterlockedPushEntrySList',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'GetQueuedCompletionStatus',
                                                                                      'api-ms-win-core-job-l2-1-0.dll': 'QueryInformationJobObject',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'RegisterWaitForSingleObject',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleFileNameW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetLocaleInfoW',
                                                                                      'api-ms-win-core-localization-obsolete-l1-2-0.dll': 'GetUserDefaultUILanguage',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualAlloc',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchCombine',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCurrentDirectoryW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'SetProcessShutdownParameters',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-psapi-l1-1-0.dll': 'QueryFullProcessImageNameW',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegSetValueExW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegDeleteKeyW',
                                                                                      'api-ms-win-core-registryuserspecific-l1-1-0.dll': 'SHRegGetUSValueW',
                                                                                      'api-ms-win-core-shlwapi-legacy-l1-1-0.dll': 'PathIsFileSpecW',
                                                                                      'api-ms-win-core-shlwapi-obsolete-l1-1-0.dll': 'StrRChrW',
                                                                                      'api-ms-win-core-sidebyside-l1-1-0.dll': 'CreateActCtxW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharUpperW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'EnterCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetLocalTime',
                                                                                      'api-ms-win-core-threadpool-l1-2-0.dll': 'WaitForThreadpoolTimerCallbacks',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'ChangeTimerQueueTimer',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'GetTimeZoneInformation',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'EncodePointer',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateError',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoGetActivationFactory',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsDeleteString',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'RegisterTraceGuidsW',
                                                                                      'api-ms-win-eventing-controller-l1-1-0.dll': 'EnableTraceEx2',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventWrite',
                                                                                      'api-ms-win-power-base-l1-1-0.dll': 'CallNtPowerInformation',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'IsValidSid',
                                                                                      'api-ms-win-security-lsalookup-l1-1-1.dll': 'GetDefaultIdentityProvider',
                                                                                      'api-ms-win-service-management-l2-1-0.dll': 'NotifyServiceStatusChangeW',
                                                                                      'd3d11.dll': 'D3D11CreateDevice',
                                                                                      'dcomp.dll': 'DCompositionCreateDevice',
                                                                                      'dwmapi.dll': 'DwmRegisterThumbnail',
                                                                                      'msvcrt.dll': 'floor',
                                                                                      'ntdll.dll': 'NtSetInformationProcess'},
                                                                      'ImportedFunctions': ['_set_errno',
                                                                                            'wcschr',
                                                                                            '_get_errno',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'memmove',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '__CxxFrameHandler3',
                                                                                            'malloc',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_snwprintf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_vsnwprintf',
                                                                                            'strchr',
                                                                                            'wcsrchr',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            'bsearch',
                                                                                            'ceil',
                                                                                            'realloc',
                                                                                            'memcpy_s',
                                                                                            'wcsncpy_s',
                                                                                            'wcsstr',
                                                                                            '_errno',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_CIcos',
                                                                                            'free',
                                                                                            '_CIsqrt',
                                                                                            '_CxxThrowException',
                                                                                            '_ftol2',
                                                                                            '_ftol2_sse',
                                                                                            'floor',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'SafeArrayGetDim',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'RoGetAgileReference',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoGetApartmentType',
                                                                                            'CoInitializeEx',
                                                                                            'CoEnableCallCancellation',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoCancelCall',
                                                                                            'CoDisableCallCancellation',
                                                                                            'CoCreateInstance',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoTaskMemFree',
                                                                                            'CoGetMalloc',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'PropVariantClear',
                                                                                            'RegOpenCurrentUser',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegGetValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'EventEnabled',
                                                                                            'EventSetInformation',
                                                                                            'EventWriteTransfer',
                                                                                            'EventWrite',
                                                                                            'CreateProcessW',
                                                                                            'OpenThread',
                                                                                            'GetCurrentThread',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcess',
                                                                                            'SetThreadPriorityBoost',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'FlushInstructionCache',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'TlsFree',
                                                                                            'GetProcessId',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetExitCodeProcess',
                                                                                            'OpenThreadToken',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateThread',
                                                                                            'ResumeThread',
                                                                                            'GetPriorityClass',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'OpenProcess',
                                                                                            'ExitProcess',
                                                                                            'TlsGetValue',
                                                                                            'QueueUserAPC',
                                                                                            'GetThreadPriority',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CreateMutexW',
                                                                                            'LeaveCriticalSection',
                                                                                            'AcquireSRWLockShared',
                                                                                            'OpenSemaphoreW',
                                                                                            'InitializeCriticalSection',
                                                                                            'InitOnceExecuteOnce',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CreateEventExW',
                                                                                            'Sleep',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'OpenMutexW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'ResetEvent',
                                                                                            'InitializeSRWLock',
                                                                                            'CreateEventW',
                                                                                            'SleepEx',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'ReleaseSemaphore',
                                                                                            'OpenEventW',
                                                                                            'EnterCriticalSection',
                                                                                            'CharNextW',
                                                                                            'CharPrevW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'CharLowerW',
                                                                                            'CharUpperW',
                                                                                            'HeapDestroy',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'CompareStringW',
                                                                                            'CompareStringOrdinal',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsCreateStringReference',
                                                                                            'WindowsCreateString',
                                                                                            'WindowsDeleteString',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadLibraryExA',
                                                                                            'LoadStringW',
                                                                                            'SizeofResource',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetThreadpoolTimer',
                                                                                            'CloseThreadpoolTimer',
                                                                                            'CallbackMayRunLong',
                                                                                            'FreeLibraryWhenCallbackReturns',
                                                                                            'SubmitThreadpoolWork',
                                                                                            'TrySubmitThreadpoolCallback',
                                                                                            'CreateThreadpoolWork',
                                                                                            'SetThreadpoolWait',
                                                                                            'CreateThreadpoolWait',
                                                                                            'CreateThreadpoolTimer',
                                                                                            'WaitForThreadpoolTimerCallbacks',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExW',
                                                                                            'GetProductInfo',
                                                                                            'GetTickCount64',
                                                                                            'GetOsSafeBootMode',
                                                                                            'GetLocalTime',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'TraceMessage',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'SearchPathW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetLengthSid',
                                                                                            'CheckTokenMembership',
                                                                                            'GetTokenInformation',
                                                                                            'CreateWellKnownSid',
                                                                                            'CopySid',
                                                                                            'IsValidSid',
                                                                                            'PowerDeterminePlatformRoleEx',
                                                                                            'GetPwrCapabilities',
                                                                                            'CallNtPowerInformation',
                                                                                            'GetProfileType',
                                                                                            'PathCchAppend',
                                                                                            'PathCchAddExtension',
                                                                                            'PathCchCombine',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetDynamicTimeZoneInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'CreateFileW',
                                                                                            'FindFirstFileExW',
                                                                                            'WriteFile',
                                                                                            'SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetTimeFormatEx',
                                                                                            'GetDateFormatEx',
                                                                                            'GetDateFormatW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'VirtualFree',
                                                                                            'MapViewOfFile',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'QueryPerformanceCounter',
                                                                                            'NtQueryInformationProcess',
                                                                                            'NtQueryWnfStateData',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlFlushHeaps',
                                                                                            'WinSqmEventEnabled',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'WinSqmAddToStream',
                                                                                            'NtSetSystemInformation',
                                                                                            'RtlUnsubscribeWnfNotificationWaitForCompletion',
                                                                                            'RtlSubscribeWnfStateChangeNotification',
                                                                                            'RtlQueryWnfStateData',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'NtSetInformationProcess',
                                                                                            'StrCmpCW',
                                                                                            'StrRStrIW',
                                                                                            'StrToIntW',
                                                                                            'StrChrW',
                                                                                            'StrStrIW',
                                                                                            'QISearch',
                                                                                            'StrCmpNICW',
                                                                                            'StrCmpW',
                                                                                            'StrChrIW',
                                                                                            'StrCmpICA',
                                                                                            'StrCmpNW',
                                                                                            'SHLoadIndirectString',
                                                                                            'StrCmpIW',
                                                                                            'StrCmpICW',
                                                                                            'StrCmpNIW',
                                                                                            'StrRChrW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GlobalLock',
                                                                                            'LocalReAlloc',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'AssignProcessToJobObject',
                                                                                            'SetInformationJobObject',
                                                                                            'CreateJobObjectW',
                                                                                            'QueryInformationJobObject',
                                                                                            'SHRegGetBoolUSValueW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'CoRevokeInitializeSpy',
                                                                                            'CoRegisterInitializeSpy',
                                                                                            'PathCommonPrefixW',
                                                                                            'PathFileExistsW',
                                                                                            'PathGetDriveNumberW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'SHExpandEnvironmentStringsW',
                                                                                            'PathStripPathW',
                                                                                            'PathGetArgsW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathParseIconLocationW',
                                                                                            'PathQuoteSpacesW',
                                                                                            'PathCombineW',
                                                                                            'PathAppendW',
                                                                                            'PathIsFileSpecW',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'UnregisterWaitEx',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'ChangeTimerQueueTimer',
                                                                                            'MulDiv',
                                                                                            'LoadLibraryW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileW',
                                                                                            'CreateSemaphoreW',
                                                                                            'RaiseFailFastException',
                                                                                            'PowerCreateRequest',
                                                                                            'PowerSetRequest',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'RegCreateKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetThreadExecutionState',
                                                                                            'SetTermsrvAppInstallMode',
                                                                                            'RegisterApplicationRestart',
                                                                                            'SetProcessDEPPolicy',
                                                                                            'SetMenuItemInfoW',
                                                                                            'SetMenuInfo',
                                                                                            'SetRectEmpty',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetWindowLongW',
                                                                                            'DrawTextExW',
                                                                                            'IsRectEmpty',
                                                                                            'SetWindowPlacement',
                                                                                            'CopyRect',
                                                                                            'SetRect',
                                                                                            'GetWindowBand',
                                                                                            'GetForegroundWindow',
                                                                                            'SetPropW',
                                                                                            'MonitorFromRect',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetWindowPos',
                                                                                            'EqualRect',
                                                                                            'PostQuitMessage',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'UnhookWinEvent',
                                                                                            'SetWinEventHook',
                                                                                            'EnableMouseInPointer',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'CloseDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetThreadDesktop',
                                                                                            'FindWindowW',
                                                                                            'SystemParametersInfoW',
                                                                                            'DestroyMenu',
                                                                                            'GetMenuDefaultItem',
                                                                                            'CreatePopupMenu',
                                                                                            'PeekMessageW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'CreateIconIndirect',
                                                                                            'FindWindowExW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'RemoveMenu',
                                                                                            'DrawIconEx',
                                                                                            'SetGestureConfig',
                                                                                            'GetCapture',
                                                                                            'GetMessageExtraInfo',
                                                                                            'CalculatePopupWindowPosition',
                                                                                            'AdjustWindowRect',
                                                                                            'DrawTextW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'CallWindowProcW',
                                                                                            'CheckDlgButton',
                                                                                            'IsWindowEnabled',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'LoadImageW',
                                                                                            'SetWindowLongW',
                                                                                            'RegisterClassExW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'CopyIcon',
                                                                                            'AdjustWindowRectEx',
                                                                                            'DrawFocusRect',
                                                                                            'GetSysColor',
                                                                                            'ValidateRect',
                                                                                            'NotifyWinEvent',
                                                                                            'SetWindowTextW',
                                                                                            'UnregisterPowerSettingNotification',
                                                                                            'RegisterPowerSettingNotification',
                                                                                            'GetAncestor',
                                                                                            'GetCurrentInputMessageSource',
                                                                                            'ScreenToClient',
                                                                                            'LockWorkStation',
                                                                                            'GetActiveWindow',
                                                                                            'TileWindows',
                                                                                            'CascadeWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'HungWindowFromGhostWindow',
                                                                                            'IsHungAppWindow',
                                                                                            'GetWindowRgn',
                                                                                            'WindowFromPoint',
                                                                                            'ModifyMenuW',
                                                                                            'CheckMenuItem',
                                                                                            'DeleteMenu',
                                                                                            'IsIconic',
                                                                                            'DestroyIcon',
                                                                                            'LoadIconW',
                                                                                            'GetKeyState',
                                                                                            'ExitWindowsEx',
                                                                                            'GetFocus',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'EndPaint',
                                                                                            'DrawEdge',
                                                                                            'FillRect',
                                                                                            'BeginPaint',
                                                                                            'TrackMouseEvent',
                                                                                            'GetDoubleClickTime',
                                                                                            'ClientToScreen',
                                                                                            'GetMessagePos',
                                                                                            'SetCursorPos',
                                                                                            'ChildWindowFromPoint',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetDesktopWindow',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EnumChildWindows',
                                                                                            'SendMessageW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowRect',
                                                                                            'PtInRect',
                                                                                            'GetWindow',
                                                                                            'PostThreadMessageW',
                                                                                            'MonitorFromWindow',
                                                                                            'RegisterHotKey',
                                                                                            'UnregisterHotKey',
                                                                                            'GetLastActivePopup',
                                                                                            'SwitchToThisWindow',
                                                                                            'SetFocus',
                                                                                            'RemovePropW',
                                                                                            'ReplyMessage',
                                                                                            'SetCoalescableTimer',
                                                                                            'GetMessageW',
                                                                                            'GetLastInputInfo',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowPlacement',
                                                                                            'KillTimer',
                                                                                            'GetWindowRgnBox',
                                                                                            'SetWindowRgn',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SendNotifyMessageW',
                                                                                            'OffsetRect',
                                                                                            'InvalidateRect',
                                                                                            'EndDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'GetCursorPos',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'UpdateLayeredWindow',
                                                                                            'CallNextHookEx',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'GetUpdateRect',
                                                                                            'GetLayeredWindowAttributes',
                                                                                            'UnionRect',
                                                                                            'GetCaretBlinkTime',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'CreateWindowInBand',
                                                                                            'GetMenuStringW',
                                                                                            'GetWindowInfo',
                                                                                            'InternalGetWindowText',
                                                                                            'SetScrollPos',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'IsZoomed',
                                                                                            'GetMenuState',
                                                                                            'IsTopLevelWindow',
                                                                                            'OpenInputDesktop',
                                                                                            'EndTask',
                                                                                            'SetThreadDesktop',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'GetShellWindow',
                                                                                            'GetIconInfo',
                                                                                            'GetClassWord',
                                                                                            'BringWindowToTop',
                                                                                            'ShowWindowAsync',
                                                                                            'WindowFromPhysicalPoint',
                                                                                            'GetPhysicalCursorPos',
                                                                                            'GetCursorInfo',
                                                                                            'RedrawWindow',
                                                                                            'InSendMessage',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'WaitMessage',
                                                                                            'AppendMenuW',
                                                                                            'FrameRect',
                                                                                            'UnregisterClassW',
                                                                                            'GetWindowDC',
                                                                                            'WindowFromDC',
                                                                                            'SendMessageCallbackW',
                                                                                            'InsertMenuW',
                                                                                            'SubtractRect',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'MoveWindow',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetGUIThreadInfo',
                                                                                            'GetPropW',
                                                                                            'SetActiveWindow',
                                                                                            'SetClassLongW',
                                                                                            'IsProcessDPIAware',
                                                                                            'GetSysColorBrush',
                                                                                            'IsChild',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongW',
                                                                                            'IsWindowUnicode',
                                                                                            'TrackPopupMenuEx',
                                                                                            'DefWindowProcA',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemCount',
                                                                                            'MapWindowPoints',
                                                                                            'GetClientRect',
                                                                                            'GetWindowTextW',
                                                                                            'GetSubMenu',
                                                                                            'LoadMenuW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'UpdateWindow',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsWindow',
                                                                                            'GetParent',
                                                                                            'EnumWindows',
                                                                                            'IsWindowVisible',
                                                                                            'IntersectRect',
                                                                                            'SetWindowCompositionAttribute',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'LoadAcceleratorsW',
                                                                                            'CreateWindowExW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'InflateRect',
                                                                                            'CreateRectRgn',
                                                                                            'SetRectRgn',
                                                                                            'OffsetRgn',
                                                                                            'CombineRgn',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetTextExtentPointW',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'DeleteDC',
                                                                                            'GetClipBox',
                                                                                            'SetTextColor',
                                                                                            'BitBlt',
                                                                                            'SetBkMode',
                                                                                            'CreateBitmap',
                                                                                            'PatBlt',
                                                                                            'SetTextAlign',
                                                                                            'GetTextMetricsW',
                                                                                            'ExtTextOutW',
                                                                                            'GetStockObject',
                                                                                            'GetObjectW',
                                                                                            'GetDIBits',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetBkColor',
                                                                                            'GetCurrentDpiInfo',
                                                                                            'GetCurrentObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetClipRgn',
                                                                                            'GetRgnBox',
                                                                                            'GetViewportOrgEx',
                                                                                            'SelectClipRgn',
                                                                                            'SetLayout',
                                                                                            'GetLayout',
                                                                                            'LPtoDP',
                                                                                            'SetViewportOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'CreateSolidBrush',
                                                                                            'GetBkColor',
                                                                                            'IntersectClipRect',
                                                                                            'StretchDIBits',
                                                                                            'GdiAlphaBlend',
                                                                                            'CreatePen',
                                                                                            'Polyline',
                                                                                            'GetRegionData',
                                                                                            'ExtCreateRegion',
                                                                                            'GetTextColor',
                                                                                            'Rectangle',
                                                                                            'ExcludeClipRect',
                                                                                            'GdiFlush',
                                                                                            'IsOS',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'SHUnicodeToAnsi',
                                                                                            'SHQueryValueExW',
                                                                                            'SHCreateMemStream',
                                                                                            'IStream_Size',
                                                                                            'SHAnsiToUnicode',
                                                                                            'SHEnumKeyExW',
                                                                                            'SHDeleteKeyW',
                                                                                            'IStream_Write',
                                                                                            'IStream_Read',
                                                                                            'IStream_Reset',
                                                                                            'SHOpenRegStream2W',
                                                                                            'SetCurrentProcessExplicitAppUserModelID',
                                                                                            'SHCreateThread',
                                                                                            'SHDeleteValueW',
                                                                                            'SHSetValueW',
                                                                                            'SHGetValueW',
                                                                                            'SHRegGetValueW',
                                                                                            'IUnknown_SetSite',
                                                                                            'SHSetThreadRef',
                                                                                            'SHCreateThreadRef',
                                                                                            'SetProcessReference',
                                                                                            'SHGetThreadRef',
                                                                                            'IUnknown_QueryService',
                                                                                            'IUnknown_Set',
                                                                                            'SHStrDupW',
                                                                                            'SHStrDupA',
                                                                                            'SHQueryInfoKeyW',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'GetDpiForMonitor',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathRemoveArgsW',
                                                                                            'ChrCmpIW',
                                                                                            'AssocQueryKeyW',
                                                                                            'AssocQueryStringW',
                                                                                            'AssocCreate',
                                                                                            'SHCreateShellItem',
                                                                                            'SHOpenWithDialog',
                                                                                            'SHCreateAssociationRegistration',
                                                                                            'SHGetPropertyStoreForWindow',
                                                                                            'SHAppBarMessage',
                                                                                            'SHGetStockIconInfo',
                                                                                            'Shell_GetCachedImageIndexW',
                                                                                            'SHGetLocalizedName',
                                                                                            'SHCreateDataObject',
                                                                                            'SHEvaluateSystemCommandTemplate',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'DragQueryFileW',
                                                                                            'SHCreateShellItemArrayFromShellItem',
                                                                                            'SHGetKnownFolderItem',
                                                                                            'SHChangeNotify',
                                                                                            'SHBindToFolderIDListParentEx',
                                                                                            'SHBindToFolderIDListParent',
                                                                                            'SHBindToParent',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHCreateItemWithParent',
                                                                                            'SHParseDisplayName',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBindToObject',
                                                                                            'ShellExecuteExW',
                                                                                            'SHCreateItemInKnownFolder',
                                                                                            'SHGetIDListFromObject',
                                                                                            'SHChangeNotifyRegisterThread',
                                                                                            'SHGetNameFromIDList',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'SHGetKnownFolderIDList',
                                                                                            'SHUpdateRecycleBinIcon',
                                                                                            'SHEnableServiceObject',
                                                                                            'ShellExecuteW',
                                                                                            'SHCreateItemFromIDList',
                                                                                            'SHAddToRecentDocs',
                                                                                            'Shell_NotifyIconW',
                                                                                            'Shell_NotifyIconGetRect',
                                                                                            'ExtractIconExW',
                                                                                            'GetThemeMetric',
                                                                                            'CloseThemeData',
                                                                                            'DrawThemeBackground',
                                                                                            'OpenThemeData',
                                                                                            'GetThemeRect',
                                                                                            'IsThemePartDefined',
                                                                                            'GetThemeAnimationProperty',
                                                                                            'GetThemeTextExtent',
                                                                                            'DrawThemeText',
                                                                                            'GetThemeBackgroundExtent',
                                                                                            'DrawThemeParentBackground',
                                                                                            'GetThemeBackgroundContentRect',
                                                                                            'GetThemePartSize',
                                                                                            'SetWindowTheme',
                                                                                            'BeginBufferedPaint',
                                                                                            'DrawThemeTextEx',
                                                                                            'EndBufferedPaint',
                                                                                            'GetThemeMargins',
                                                                                            'BufferedPaintInit',
                                                                                            'BufferedPaintUnInit',
                                                                                            'IsThemeActive',
                                                                                            'GetThemeFont',
                                                                                            'GetThemeColor',
                                                                                            'GetThemeAnimationTransform',
                                                                                            'GetThemeTimingFunction',
                                                                                            'IsCompositionActive',
                                                                                            'GetBufferedPaintBits',
                                                                                            'GetThemeBool',
                                                                                            'GetThemeBackgroundRegion',
                                                                                            'GetWindowTheme',
                                                                                            'GetCurrentThemeName',
                                                                                            'IsAppThemed',
                                                                                            'BufferedPaintClear',
                                                                                            'DwmQueryThumbnailSourceSize',
                                                                                            'DwmUnregisterThumbnail',
                                                                                            'DwmIsCompositionEnabled',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'DwmUpdateThumbnailProperties',
                                                                                            'DwmEnableBlurBehindWindow',
                                                                                            'DwmRegisterThumbnail',
                                                                                            'AddLayeredRef',
                                                                                            '?Destroy@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetBackgroundColor@Element@DirectUI@@QAEJK@Z',
                                                                                            '?SetVisible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?Destroy@Layout@DirectUI@@QAEXXZ',
                                                                                            '?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z',
                                                                                            'StrToID',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            '?Create@BorderLayout@DirectUI@@SGJPAPAVLayout@2@@Z',
                                                                                            'UnInitThread',
                                                                                            'InitThread',
                                                                                            'UnInitProcessPriv',
                                                                                            'InitProcessPriv',
                                                                                            'RegisterPVLBehaviorFactory',
                                                                                            'SkipDLLUnloadInitChecks',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z',
                                                                                            '?SetFocus@HWNDElement@DirectUI@@QAEX_N@Z',
                                                                                            '?SetWidth@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetHeight@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetOverrideScaleFactor@DUIXmlParser@DirectUI@@QAEXM@Z',
                                                                                            '?SetDynamicScaling@DUIXmlParser@DirectUI@@QAEXW4DynamicScaleParsing@2@@Z',
                                                                                            '?GetSheet@DUIXmlParser@DirectUI@@QAEJPBGPAPAVValue@2@@Z',
                                                                                            '?Add@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJPBGPAUHINSTANCE__@@1@Z',
                                                                                            '?SetXMLFromResourceWithTheme@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@00@Z',
                                                                                            '?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QAEXXZ',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z',
                                                                                            '?GetRootRelativeBounds@Element@DirectUI@@QAEJPAUtagRECT@@@Z',
                                                                                            '?GetRoot@Element@DirectUI@@QAEPAV12@XZ',
                                                                                            '?FireRightClickEvent@TouchButton@DirectUI@@UAEXIPAUtagPOINT@@@Z',
                                                                                            '?FireClickEvent@TouchButton@DirectUI@@UAEXIIW4ClickDevice@12@PAUtagPOINT@@@Z',
                                                                                            '?GetForegroundColorRef@TouchButton@DirectUI@@UAEJPAK@Z',
                                                                                            '?DefaultAction@TouchButton@DirectUI@@UAEJXZ',
                                                                                            '?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z',
                                                                                            '?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnUnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?OnHosted@TouchButton@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?GetContentSize@RichText@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Paint@RichText@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?OnEvent@TouchButton@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?OnDestroy@Element@DirectUI@@UAEXXZ',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnInput@TouchButton@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z',
                                                                                            '?GetClassInfoPtr@TouchButton@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?Initialize@TouchButton@DirectUI@@QAEJIPAVElement@2@PAK@Z',
                                                                                            '?Register@TouchButton@DirectUI@@SGJXZ',
                                                                                            '?OnPropertyChanged@TouchButton@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?DirectionProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?PressedProp@TouchButton@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?MouseWithinProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?GetPressed@TouchButton@DirectUI@@QAE_NXZ',
                                                                                            '?RemoveLocalValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@@Z',
                                                                                            '?BackgroundProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?SetFontColorRuns@RichText@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetContentString@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?StartDefer@Element@DirectUI@@QAEXPAK@Z',
                                                                                            '?SetOverhang@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetPadding@Element@DirectUI@@QAEJHHHH@Z',
                                                                                            'GetScaleFactor',
                                                                                            '?SetFont@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetDisableAccTextExtend@RichText@DirectUI@@QAEJ_N@Z',
                                                                                            '??1TouchButton@DirectUI@@UAE@XZ',
                                                                                            '??0TouchButton@DirectUI@@QAE@XZ',
                                                                                            '?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z',
                                                                                            '??0TouchHWNDElement@DirectUI@@QAE@XZ',
                                                                                            '??1TouchHWNDElement@DirectUI@@UAE@XZ',
                                                                                            '?Initialize@TouchHWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z',
                                                                                            '?SetAccessible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?EndDefer@Element@DirectUI@@QAEXK@Z',
                                                                                            '?WndProc@TouchHWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z',
                                                                                            '?UiaReturnRawElementProvider@Schema@DirectUI@@2P6GJPAUHWND__@@IJPAUIRawElementProviderSimple@@@ZA',
                                                                                            '?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ',
                                                                                            '?Init@Schema@DirectUI@@SGJXZ',
                                                                                            '?Register@TouchHWNDElement@DirectUI@@SGJXZ',
                                                                                            '?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ',
                                                                                            '??1CritSecLock@DirectUI@@QAE@XZ',
                                                                                            '?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z',
                                                                                            '?Register@ClassInfoBase@DirectUI@@QAEJXZ',
                                                                                            '?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z',
                                                                                            '?GetInvokeHelper@InvokeManager@DirectUI@@SGJPAPAVInvokeHelper@2@@Z',
                                                                                            '?GetClassInfoPtr@TouchHWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '??0ClassInfoBase@DirectUI@@QAE@XZ',
                                                                                            '??1ClassInfoBase@DirectUI@@UAE@XZ',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z',
                                                                                            '?Find@ElementProviderManager@DirectUI@@SGPAVElementProvider@2@PAVElement@2@@Z',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z',
                                                                                            '?Create@HWNDElementProvider@DirectUI@@SGJPAVHWNDElement@2@PAVInvokeHelper@2@PAPAV12@@Z',
                                                                                            '?Create@ElementProvider@DirectUI@@SGJPAVElement@2@PAVInvokeHelper@2@PAPAV12@@Z',
                                                                                            '?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                            '?IsContentProtected@Element@DirectUI@@UAE_NXZ',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@TouchHWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?Create@TouchHWNDElement@DirectUI@@SGJPAUHWND__@@_NIPAVElement@2@PAKPAPAV42@@Z',
                                                                                            '?RightClick@TouchButton@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?MultipleClick@TouchButton@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?Click@TouchButton@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?GetHeight@Element@DirectUI@@QAEHXZ',
                                                                                            '?GetWidth@Element@DirectUI@@QAEHXZ',
                                                                                            '?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ',
                                                                                            '?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ',
                                                                                            '?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?AddChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ',
                                                                                            '?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ',
                                                                                            '?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z',
                                                                                            '?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z',
                                                                                            '?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ',
                                                                                            '?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?Release@ClassInfoBase@DirectUI@@UAEHXZ',
                                                                                            '?AddRef@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?_OnUIStateChanged@TouchHWNDElement@DirectUI@@MAEXGG@Z',
                                                                                            '?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z',
                                                                                            '?CreateStyleParser@HWNDElement@DirectUI@@UAEJPAPAVDUIXmlParser@2@@Z',
                                                                                            '?IsMSAAEnabled@TouchHWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z',
                                                                                            '?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnInput@TouchHWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnKeyFocusMoved@TouchHWNDElement@DirectUI@@UAEXPAVElement@2@0@Z',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnDestroy@TouchHWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnEvent@TouchHWNDElement@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Add@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z',
                                                                                            '?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z',
                                                                                            '?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z',
                                                                                            '?SetKeyFocus@Element@DirectUI@@UAEXXZ',
                                                                                            '?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?MessageCallback@TouchHWNDElement@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?OnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?UpdateTooltip@TouchHWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?ActivateTooltip@TouchHWNDElement@DirectUI@@UAEXPAVElement@2@K@Z',
                                                                                            '?RemoveTooltip@TouchHWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?GetKeyFocused@Element@DirectUI@@UAE_NXZ',
                                                                                            '?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UAEJXZ',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ',
                                                                                            '?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z',
                                                                                            '?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z',
                                                                                            'RoGetActivationFactory',
                                                                                            'D3D11CreateDevice',
                                                                                            'DCompositionCreateDevice',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'IsValidLocaleName',
                                                                                            'GetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserNameExW',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'StartTraceW',
                                                                                            'StopTraceW',
                                                                                            'EnableTraceEx2',
                                                                                            'RoOriginateError',
                                                                                            'QueryServiceConfigW',
                                                                                            'NotifyServiceStatusChangeW',
                                                                                            'OutputDebugStringA',
                                                                                            'ActivateActCtx',
                                                                                            'DeactivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'PSPropertyBag_WriteDWORD',
                                                                                            'PropVariantToStringAlloc',
                                                                                            'PropVariantToUInt32',
                                                                                            'PSCreateMemoryPropertyStore',
                                                                                            'PropVariantToBoolean',
                                                                                            'InitVariantFromResource',
                                                                                            'PropVariantToString',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringFreeW',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'NdrClientCall2',
                                                                                            'RpcBindingFree',
                                                                                            'SLRegisterWindowsEvent',
                                                                                            'SLUnregisterWindowsEvent',
                                                                                            'ReleaseIdentityProviderEnumContext',
                                                                                            'GetIdentityProviderInfoByGUID',
                                                                                            'EnumerateIdentityProviders',
                                                                                            'GetDefaultIdentityProvider'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 71,
                                                                      'NumberOfImportFunctions': 978,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 840200,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 37888,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 73216,
                                                                                       '.rsrc\x00\x00\x00': 840704,
                                                                                       '.text\x00\x00\x00': 1420288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/5f692c3fb2827db7ac0d86b6f671b27b17176adfc0be14c11dfdb8f492a42c49'},
 '5f8335c007e0ffebaf799bc10de2593c0d9ddeba024acddb1da64f6e94e01fe3': {'AddressOfEntryPoint': 155390,
                                                                      'DebugRVA': 155180,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1648,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 147456},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5f8335c007e0ffebaf799bc10de2593c0d9ddeba024acddb1da64f6e94e01fe3'},
 '5f8a521c4f28b563aef665ef368684ff45604514084b89a92ae0f6bc10317d8c': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 153020,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'Qt5Core.dll': '_ZNK9QSettings5valueERK7QStringRK8QVariant',
                                                                                      'Qt5Network.dll': '_ZN12QLocalSocketD1Ev',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'avcodec-57.dll': 'avpicture_get_size',
                                                                                      'avdevice-57.dll': 'avdevice_register_all',
                                                                                      'avfilter-6.dll': 'avfilter_register_all',
                                                                                      'avformat-57.dll': 'avio_open',
                                                                                      'avutil-55.dll': 'av_strerror',
                                                                                      'libgcc_s_dw2-1.dll': '__umoddi3',
                                                                                      'libstdc++-6.dll': '__gxx_personality_v0',
                                                                                      'msvcrt.dll': 'wcslen',
                                                                                      'swresample-2.dll': 'swr_init',
                                                                                      'swscale-4.dll': 'sws_scale'},
                                                                      'ImportedFunctions': ['_Z22qInstallMessageHandlerPFv9QtMsgTypeRK18QMessageLogContextRK7QStringE',
                                                                                            '_ZN10QArrayData10deallocateEPS_jj',
                                                                                            '_ZN10QArrayData11shared_nullE',
                                                                                            '_ZN11QDataStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN11QDataStreamD1Ev',
                                                                                            '_ZN11QMetaObject10ConnectionD1Ev',
                                                                                            '_ZN11QMetaObject8activateEP7QObjectPKS_iPPv',
                                                                                            '_ZN11QTextStream5flushEv',
                                                                                            '_ZN11QTextStream7readAllEv',
                                                                                            '_ZN11QTextStreamC1EP9QIODevice',
                                                                                            '_ZN11QTextStreamD1Ev',
                                                                                            '_ZN11QTextStreamlsEPKv',
                                                                                            '_ZN11QTextStreamlsERK7QString',
                                                                                            '_ZN11QTextStreamlsEc',
                                                                                            '_ZN11QTextStreamlsEi',
                                                                                            '_ZN11QTextStreamlsEm',
                                                                                            '_ZN14QStandardPaths16writableLocationENS_16StandardLocationE',
                                                                                            '_ZN16QCoreApplication18applicationDirPathEv',
                                                                                            '_ZN16QCoreApplication4execEv',
                                                                                            '_ZN16QCoreApplicationC1ERiPPci',
                                                                                            '_ZN16QCoreApplicationD1Ev',
                                                                                            '_ZN4QDirC1ERK7QString',
                                                                                            '_ZN4QDirD1Ev',
                                                                                            '_ZN5QFile4copyERK7QStringS2_',
                                                                                            '_ZN5QFile6existsERK7QString',
                                                                                            '_ZN5QFile6removeERK7QString',
                                                                                            '_ZN5QFileC1ERK7QString',
                                                                                            '_ZN5QFileC1Ev',
                                                                                            '_ZN5QFileD1Ev',
                                                                                            '_ZN6QDebugD1Ev',
                                                                                            '_ZN7QObject10childEventEP11QChildEvent',
                                                                                            '_ZN7QObject10timerEventEP11QTimerEvent',
                                                                                            '_ZN7QObject11customEventEP6QEvent',
                                                                                            '_ZN7QObject11eventFilterEPS_P6QEvent',
                                                                                            '_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QObject11qt_metacastEPKc',
                                                                                            '_ZN7QObject13connectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QObject16disconnectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QObject16staticMetaObjectE',
                                                                                            '_ZN7QObject5eventEP6QEvent',
                                                                                            '_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE',
                                                                                            '_ZN7QObjectC2EPS_',
                                                                                            '_ZN7QObjectD2Ev',
                                                                                            '_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString15fromUtf8_helperEPKci',
                                                                                            '_ZN7QString16fromAscii_helperEPKci',
                                                                                            '_ZN7QString17fromLatin1_helperEPKci',
                                                                                            '_ZN7QString20fromLocal8Bit_helperEPKci',
                                                                                            '_ZN7QString6appendERKS_',
                                                                                            '_ZN7QString6numberEii',
                                                                                            '_ZN7QString7replaceE5QCharS0_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString7replaceERKS_S1_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString9fromUtf16EPKti',
                                                                                            '_ZN7QStringaSERKS_',
                                                                                            '_ZN7QThread11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QThread11qt_metacastEPKc',
                                                                                            '_ZN7QThread16staticMetaObjectE',
                                                                                            '_ZN7QThread5eventEP6QEvent',
                                                                                            '_ZN7QThread5startENS_8PriorityE',
                                                                                            '_ZN7QThreadC2EP7QObject',
                                                                                            '_ZN7QThreadD2Ev',
                                                                                            '_ZN8QVariantC1EPKc',
                                                                                            '_ZN8QVariantD1Ev',
                                                                                            '_ZN9QDateTime15currentDateTimeEv',
                                                                                            '_ZN9QDateTimeD1Ev',
                                                                                            '_ZN9QFileInfoC1ERK7QString',
                                                                                            '_ZN9QFileInfoD1Ev',
                                                                                            '_ZN9QIODevice5writeEPKcx',
                                                                                            '_ZN9QResource16registerResourceERK7QStringS2_',
                                                                                            '_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject',
                                                                                            '_ZNK11QObjectData17dynamicMetaObjectEv',
                                                                                            '_ZNK14QMessageLogger5debugEPKcz',
                                                                                            '_ZNK14QMessageLogger5debugEv',
                                                                                            '_ZNK4QDir5mkdirERK7QString',
                                                                                            '_ZNK4QDir6existsEv',
                                                                                            '_ZNK5QFile6existsEv',
                                                                                            '_ZNK7QObject6senderEv',
                                                                                            '_ZNK7QString11toLocal8BitEv',
                                                                                            '_ZNK7QString4leftEi',
                                                                                            '_ZNK7QString6toUtf8Ev',
                                                                                            '_ZNK7QString7compareERKS_N2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QThread9isRunningEv',
                                                                                            '_ZNK8QVariant8toStringEv',
                                                                                            '_ZNK9QDateTime8toStringERK7QString',
                                                                                            '_ZNK9QFileInfo6existsEv',
                                                                                            '_ZNK9QFileInfo8fileNameEv',
                                                                                            '_ZNK9QFileInfo8filePathEv',
                                                                                            '_ZNK9QSettings5valueERK7QStringRK8QVariant',
                                                                                            '_ZN12QLocalServer12removeServerERK7QString',
                                                                                            '_ZN12QLocalServer6listenERK7QString',
                                                                                            '_ZN12QLocalServerC1EP7QObject',
                                                                                            '_ZN12QLocalSocket15connectToServerERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN12QLocalSocket16waitForConnectedEi',
                                                                                            '_ZN12QLocalSocket19waitForBytesWrittenEi',
                                                                                            '_ZN12QLocalSocket20disconnectFromServerEv',
                                                                                            '_ZN12QLocalSocket5closeEv',
                                                                                            '_ZN12QLocalSocket5flushEv',
                                                                                            '_ZN12QLocalSocketC1EP7QObject',
                                                                                            '_ZN12QLocalSocketD1Ev',
                                                                                            '_Unwind_Resume',
                                                                                            '__deregister_frame_info',
                                                                                            '__register_frame_info',
                                                                                            '__udivdi3',
                                                                                            '__umoddi3',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__mb_cur_max',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_snprintf',
                                                                                            '_unlock',
                                                                                            '_vsnprintf',
                                                                                            'abort',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'sprintf',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'vfprintf',
                                                                                            'wcslen',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteExW',
                                                                                            '_ZNSs4_Rep10_M_destroyERKSaIcE',
                                                                                            '_ZNSs4_Rep10_M_disposeERKSaIcE',
                                                                                            '_ZNSsC1EPKcjRKSaIcE',
                                                                                            '_ZTVN10__cxxabiv117__class_type_infoE',
                                                                                            '_ZTVN10__cxxabiv120__si_class_type_infoE',
                                                                                            '_ZdaPv',
                                                                                            '_ZdlPv',
                                                                                            '_Znaj',
                                                                                            '_Znwj',
                                                                                            '__gxx_personality_v0',
                                                                                            'av_free_packet',
                                                                                            'av_init_packet',
                                                                                            'avcodec_decode_audio4',
                                                                                            'avcodec_decode_video2',
                                                                                            'avcodec_encode_audio2',
                                                                                            'avcodec_encode_video2',
                                                                                            'avcodec_find_decoder',
                                                                                            'avcodec_find_encoder',
                                                                                            'avcodec_open2',
                                                                                            'avpicture_fill',
                                                                                            'avpicture_get_size',
                                                                                            'avdevice_register_all',
                                                                                            'av_buffersink_get_frame',
                                                                                            'av_buffersrc_add_frame_flags',
                                                                                            'avfilter_get_by_name',
                                                                                            'avfilter_graph_alloc',
                                                                                            'avfilter_graph_alloc_filter',
                                                                                            'avfilter_graph_config',
                                                                                            'avfilter_graph_create_filter',
                                                                                            'avfilter_graph_parse2',
                                                                                            'avfilter_graph_parse_ptr',
                                                                                            'avfilter_init_dict',
                                                                                            'avfilter_init_str',
                                                                                            'avfilter_inout_alloc',
                                                                                            'avfilter_inout_free',
                                                                                            'avfilter_link',
                                                                                            'avfilter_register_all',
                                                                                            'av_find_best_stream',
                                                                                            'av_find_input_format',
                                                                                            'av_interleaved_write_frame',
                                                                                            'av_read_frame',
                                                                                            'av_register_all',
                                                                                            'av_write_trailer',
                                                                                            'avformat_alloc_context',
                                                                                            'avformat_alloc_output_context2',
                                                                                            'avformat_close_input',
                                                                                            'avformat_find_stream_info',
                                                                                            'avformat_network_init',
                                                                                            'avformat_new_stream',
                                                                                            'avformat_open_input',
                                                                                            'avformat_write_header',
                                                                                            'avio_close',
                                                                                            'avio_open',
                                                                                            'av_audio_fifo_alloc',
                                                                                            'av_audio_fifo_free',
                                                                                            'av_audio_fifo_read',
                                                                                            'av_audio_fifo_size',
                                                                                            'av_audio_fifo_space',
                                                                                            'av_audio_fifo_write',
                                                                                            'av_compare_ts',
                                                                                            'av_dict_free',
                                                                                            'av_dict_set',
                                                                                            'av_fifo_alloc',
                                                                                            'av_fifo_free',
                                                                                            'av_fifo_generic_read',
                                                                                            'av_fifo_generic_write',
                                                                                            'av_fifo_size',
                                                                                            'av_fifo_space',
                                                                                            'av_frame_alloc',
                                                                                            'av_frame_free',
                                                                                            'av_frame_get_buffer',
                                                                                            'av_frame_unref',
                                                                                            'av_freep',
                                                                                            'av_get_bytes_per_sample',
                                                                                            'av_get_channel_layout_nb_channels',
                                                                                            'av_get_channel_layout_string',
                                                                                            'av_get_default_channel_layout',
                                                                                            'av_get_sample_fmt_name',
                                                                                            'av_image_fill_arrays',
                                                                                            'av_int_list_length_for_size',
                                                                                            'av_log',
                                                                                            'av_opt_set',
                                                                                            'av_opt_set_bin',
                                                                                            'av_opt_set_int',
                                                                                            'av_opt_set_q',
                                                                                            'av_rescale_q_rnd',
                                                                                            'av_samples_alloc',
                                                                                            'av_strdup',
                                                                                            'av_strerror',
                                                                                            'swr_alloc_set_opts',
                                                                                            'swr_convert',
                                                                                            'swr_free',
                                                                                            'swr_init',
                                                                                            'sws_getContext',
                                                                                            'sws_scale'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 278,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.eh_fram': 11264,
                                                                                       '.idata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 103936,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/5f8a521c4f28b563aef665ef368684ff45604514084b89a92ae0f6bc10317d8c'},
 '5fca91c2baba32293ce18dd545047742193a6996f345081dded686bc87ddcd1d': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 472952,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 473088,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5fca91c2baba32293ce18dd545047742193a6996f345081dded686bc87ddcd1d'},
 '5fd6751b5ffc4ce39c152d4049765b069d1895b4f01aad2f318f856bfa33aa1a': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/5fd6751b5ffc4ce39c152d4049765b069d1895b4f01aad2f318f856bfa33aa1a'},
 '606923eb7a078bc6b038ac4d51c6647d50982203f9533886e5abd2763209d526': {'AddressOfEntryPoint': 140704,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 159744,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'SHLWAPI.dll': 'PathRemoveBackslashW',
                                                                                      'imagehlp.dll': 'CheckSumMappedFile',
                                                                                      'msvcrt.dll': '_wcsnicmp',
                                                                                      'ntdll.dll': 'RtlInitUnicodeString'},
                                                                      'ImportedFunctions': ['GetFileType',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetModuleFileNameW',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleMode',
                                                                                            'LoadLibraryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FreeLibrary',
                                                                                            'SetLastError',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVolumePathNameW',
                                                                                            'QueryDosDeviceW',
                                                                                            'LocalFree',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetCurrentThread',
                                                                                            'CreateFileW',
                                                                                            'GetFileSizeEx',
                                                                                            'CreateFileMappingW',
                                                                                            'CloseHandle',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'SearchPathW',
                                                                                            'GetVersionExW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CopyFileExW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetLastError',
                                                                                            'memmove',
                                                                                            'wcstoul',
                                                                                            'wcscat_s',
                                                                                            '_ultow_s',
                                                                                            'wcsncpy_s',
                                                                                            'wcsstr',
                                                                                            'memset',
                                                                                            '_wcslwr',
                                                                                            'wcschr',
                                                                                            'strncmp',
                                                                                            'wcsnlen',
                                                                                            'wcsncmp',
                                                                                            'bsearch',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_iob',
                                                                                            'fflush',
                                                                                            'fwprintf',
                                                                                            '_vsnwprintf',
                                                                                            'wcsrchr',
                                                                                            '_wcsupr',
                                                                                            '_snwscanf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'wcscpy_s',
                                                                                            '_wsetlocale',
                                                                                            '_wcsicmp',
                                                                                            'swprintf_s',
                                                                                            '_wcsnicmp',
                                                                                            'CheckSumMappedFile',
                                                                                            'PathRemoveBackslashW',
                                                                                            'NtEnumerateBootEntries',
                                                                                            'NtTranslateFilePath',
                                                                                            'NtQueryBootEntryOrder',
                                                                                            'NtResetEvent',
                                                                                            'NtQueryValueKey',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtOpenKey',
                                                                                            'ZwResetEvent',
                                                                                            'ZwDeviceIoControlFile',
                                                                                            'ZwOpenSymbolicLinkObject',
                                                                                            'ZwQuerySymbolicLinkObject',
                                                                                            'ZwCreateEvent',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtOpenThreadTokenEx',
                                                                                            'RtlImpersonateSelf',
                                                                                            'NtOpenProcessTokenEx',
                                                                                            'LdrGetDllHandle',
                                                                                            'LdrGetProcedureAddress',
                                                                                            'RtlInitAnsiString',
                                                                                            'ZwAllocateUuids',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'ZwOpenKey',
                                                                                            'ZwQueryKey',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlLengthSid',
                                                                                            'ZwEnumerateKey',
                                                                                            'ZwDeleteKey',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'ZwLoadKey',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'ZwSetSecurityObject',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'ZwQueryValueKey',
                                                                                            'ZwCreateFile',
                                                                                            'ZwSaveKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwDeleteValueKey',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlFreeSid',
                                                                                            'RtlCreateAcl',
                                                                                            'ZwCreateKey',
                                                                                            'ZwUnloadKey',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'ZwQueryAttributesFile',
                                                                                            'ZwOpenFile',
                                                                                            'ZwClose',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwReleaseMutant',
                                                                                            'ZwOpenMutant',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'RtlStringFromGUID',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'LdrFindResource_U',
                                                                                            'LdrAccessResource',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtOpenFile',
                                                                                            'RtlImageNtHeader',
                                                                                            'NtOpenProcess',
                                                                                            'NtCreateEvent',
                                                                                            'NtClose',
                                                                                            'NtSetInformationThread',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtQueryInformationProcess',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtQueryInformationThread',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlGUIDFromString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 193,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 145408},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/606923eb7a078bc6b038ac4d51c6647d50982203f9533886e5abd2763209d526'},
 '608c9793c4e7a8ccd7ac8899133de7ff7c6e78528fe1e4dc03e19999b435c101': {'AddressOfEntryPoint': 23406,
                                                                      'DebugRVA': 23176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 24840,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 16384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/608c9793c4e7a8ccd7ac8899133de7ff7c6e78528fe1e4dc03e19999b435c101'},
 '609daf97b0ba4534435c3af3563e4c78840ee4fbdc378c72023d6ffe2904f3e6': {'AddressOfEntryPoint': 13333,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'FindWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 29112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 29184,
                                                                                       '.text\x00\x00\x00': 26624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/609daf97b0ba4534435c3af3563e4c78840ee4fbdc378c72023d6ffe2904f3e6'},
 '60a709795b3eeb2b3f0f09999b4e024b647af88095b32ee095d08892c21709e7': {'AddressOfEntryPoint': 30101,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 57472,
                                                                      'ExportSize': 50,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'GetStdHandle',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'EndDialog'},
                                                                      'ImportedFunctions': ['ShellExecuteExA',
                                                                                            'DefWindowProcA',
                                                                                            'GetWindowWord',
                                                                                            'SetWindowWord',
                                                                                            'BeginPaint',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'SetRect',
                                                                                            'EndPaint',
                                                                                            'LoadCursorA',
                                                                                            'GetLastActivePopup',
                                                                                            'ShowWindow',
                                                                                            'PostMessageA',
                                                                                            'SendMessageA',
                                                                                            'EnableWindow',
                                                                                            'GetTopWindow',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowTextA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'RegisterClassA',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'LoadIconA',
                                                                                            'SetTimer',
                                                                                            'GetMessageA',
                                                                                            'KillTimer',
                                                                                            'PostQuitMessage',
                                                                                            'SendDlgItemMessageA',
                                                                                            'UpdateWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'InvalidateRect',
                                                                                            'CharUpperBuffA',
                                                                                            'OemToCharBuffA',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetParent',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'CharNextA',
                                                                                            'EndDialog',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetStdHandle',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'HeapSize',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualQuery',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'HeapFree',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalAlloc',
                                                                                            '_lopen',
                                                                                            'GetDriveTypeA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalHandle',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lread',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'LocalFree',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetVersion',
                                                                                            'GetModuleFileNameA',
                                                                                            'WriteFile',
                                                                                            'GetSystemTime',
                                                                                            'lstrlenA',
                                                                                            'CreateProcessA',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            '_lcreat',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'MoveFileExA',
                                                                                            'FindNextFileA',
                                                                                            'GetTickCount',
                                                                                            'OpenFile',
                                                                                            'FormatMessageA',
                                                                                            'GetLastError',
                                                                                            'WinExec',
                                                                                            '_lwrite',
                                                                                            'WaitForSingleObject',
                                                                                            'SetErrorMode',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlUnwind',
                                                                                            'GetStdHandle',
                                                                                            'SelectObject',
                                                                                            'GetBkColor',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'SetTextAlign',
                                                                                            'DeleteObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'ExtTextOutA',
                                                                                            'CreateDCA',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteDC'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 156,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 26560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 45056,
                                                                                       '_winzip_': 10489856},
                                                                      'StackReserveSize': 32000,
                                                                      'filename': './data/clean/60a709795b3eeb2b3f0f09999b4e024b647af88095b32ee095d08892c21709e7'},
 '60fd82f9261ab7faf0d168d623c0e16f8b587ea7ec5aa441c3a5944f439cbacb': {'AddressOfEntryPoint': 647086,
                                                                      'DebugRVA': 646828,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4848,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 638976},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/60fd82f9261ab7faf0d168d623c0e16f8b587ea7ec5aa441c3a5944f439cbacb'},
 '612e686f23f5fc2d6b44ed66afbbd60eac6d05d5decb37b8a996d817986c7435': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 49208,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 49664,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/612e686f23f5fc2d6b44ed66afbbd60eac6d05d5decb37b8a996d817986c7435'},
 '61685176312a9a959beb059325fbc5fb0a20accdd7441bee013d47bb9f3f10ab': {'AddressOfEntryPoint': 7678,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'msvcrt.dll': '_controlfp',
                                                                                      'ntdll.dll': 'NtClose'},
                                                                      'ImportedFunctions': ['GetSystemInfo',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'printf',
                                                                                            'exit',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenKey',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'NtClose'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/61685176312a9a959beb059325fbc5fb0a20accdd7441bee013d47bb9f3f10ab'},
 '61bd1930830885a8574769df384cef76d9ca00cb4c1c892d71d51156049d625f': {'AddressOfEntryPoint': 98996,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33056,
                                                                      'ExportRVA': 239120,
                                                                      'ExportSize': 24808,
                                                                      'IATRVA': 167936,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'TlsAlloc',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceInstanceIdW',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'OutputDebugStringW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleHandleW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetACP',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'ReadFile',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateProcessW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SetLastError',
                                                                                            'DeviceIoControl',
                                                                                            'GetVersionExW',
                                                                                            'LockResource',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'LCMapStringW',
                                                                                            'HeapReAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetFilePointerEx',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCPInfo',
                                                                                            'Sleep',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'CloseHandle',
                                                                                            'MultiByteToWideChar',
                                                                                            'RtlVirtualUnwind',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'DecodePointer',
                                                                                            'GetStringTypeW',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'ReadConsoleW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TerminateProcess',
                                                                                            'MoveFileExW',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetStartupInfoW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'RtlCaptureContext',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleExW',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'HeapFree',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCommandLineW',
                                                                                            'ExitProcess',
                                                                                            'TlsAlloc',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadCursorW',
                                                                                            'GetDesktopWindow',
                                                                                            'SetCursor',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'DestroyWindow',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'LoadStringW',
                                                                                            'wsprintfW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetKeySecurity',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'AddAccessAllowedAce',
                                                                                            'OpenProcessToken',
                                                                                            'RegSetValueExW',
                                                                                            'RegFlushKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'VarBstrCat',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 115464,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 100352,
                                                                                       '.rsrc\x00\x00\x00': 115712,
                                                                                       '.text\x00\x00\x00': 161792},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/61bd1930830885a8574769df384cef76d9ca00cb4c1c892d71d51156049d625f'},
 '61d45eb8a34584155d3ca770bc6a3401b5281f8682004fc656b5dca77f3a8466': {'AddressOfEntryPoint': 12879,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_AddMasked',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileAttributesA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GlobalFree',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'MulDiv',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'ScreenToClient',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetForegroundWindow',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassA',
                                                                                            'EndDialog',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'SendMessageTimeoutA',
                                                                                            'GetDC',
                                                                                            'LoadImageA',
                                                                                            'GetDlgItem',
                                                                                            'FindWindowExA',
                                                                                            'IsWindow',
                                                                                            'SetClipboardData',
                                                                                            'SetWindowLongA',
                                                                                            'EmptyClipboard',
                                                                                            'SetTimer',
                                                                                            'CreateDialogParamA',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteValueA',
                                                                                            'SetFileSecurityA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_AddMasked',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 295472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 295936,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/61d45eb8a34584155d3ca770bc6a3401b5281f8682004fc656b5dca77f3a8466'},
 '61d76327de227ae8f15afbb0f99c1df6152061855df7b35dbd6ff7329fc1ba4d': {'AddressOfEntryPoint': 24327,
                                                                      'DebugRVA': 4640,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGetUserKey',
                                                                                      'CRYPT32.dll': 'CertCloseStore',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'MSSIGN32.dll': 'PvkFreeCryptProv',
                                                                                      'OLEAUT32.dll': 'VarDateFromStr',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'wprintf',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['CryptReleaseContext',
                                                                                            'CryptGetProvParam',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptGenKey',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptSetKeyParam',
                                                                                            'CryptGetKeyParam',
                                                                                            'CryptGetUserKey',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetVersion',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateFileW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'CompareFileTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'DeleteFileW',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'FreeResource',
                                                                                            'SetLastError',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentThreadId',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'vwprintf',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            'strtok',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_wtol',
                                                                                            'wprintf',
                                                                                            'SignError',
                                                                                            'GetCryptProvFromCert',
                                                                                            'FreeCryptProvFromCert',
                                                                                            'PvkPrivateKeyAcquireContextFromMemory',
                                                                                            'PvkGetCryptProv',
                                                                                            'PvkPrivateKeySave',
                                                                                            'PvkFreeCryptProv',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertCompareIntegerBlob',
                                                                                            'CertFreeCRLContext',
                                                                                            'CryptSignAndEncodeCertificate',
                                                                                            'CertCreateCRLContext',
                                                                                            'CertGetPublicKeyLength',
                                                                                            'CryptHashCertificate',
                                                                                            'CryptHashPublicKeyInfo',
                                                                                            'CertStrToNameW',
                                                                                            'CryptQueryObject',
                                                                                            'CryptEncodeObject',
                                                                                            'CryptExportPublicKeyInfo',
                                                                                            'CertComparePublicKeyInfo',
                                                                                            'CryptDecodeObject',
                                                                                            'CertCreateCertificateContext',
                                                                                            'CertOpenStore',
                                                                                            'CertAddEncodedCertificateToStore',
                                                                                            'CertSetCertificateContextProperty',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertCloseStore',
                                                                                            'LoadStringA',
                                                                                            'LoadStringW',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateGuid',
                                                                                            'CoInitialize',
                                                                                            'VarDateFromStr',
                                                                                            'UuidToStringA',
                                                                                            'RpcStringFreeA',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 118,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 14768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 14848,
                                                                                       '.text\x00\x00\x00': 29184},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/61d76327de227ae8f15afbb0f99c1df6152061855df7b35dbd6ff7329fc1ba4d'},
 '61ee8b98c26da669b727c15223039a00fe28d40656c17b160404c82bc5778040': {'AddressOfEntryPoint': 383136,
                                                                      'DebugRVA': 477904,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 475136,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'KERNEL32.dll': 'SetFilePointer',
                                                                                      'MSVCR90.dll': 'isxdigit',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDriverInfoDetailW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'RegisterDeviceNotificationA',
                                                                                      'WS2_32.dll': 'htons',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['memset',
                                                                                            '_wcsicmp',
                                                                                            'sscanf',
                                                                                            'strchr',
                                                                                            'strrchr',
                                                                                            '_mbsncmp',
                                                                                            'strstr',
                                                                                            '_vsnwprintf',
                                                                                            'wcsncmp',
                                                                                            'qsort',
                                                                                            'calloc',
                                                                                            '_strnicmp',
                                                                                            '_wfullpath',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            'strerror',
                                                                                            'strtok_s',
                                                                                            '_strlwr',
                                                                                            'isspace',
                                                                                            'fclose',
                                                                                            '_fileno',
                                                                                            '_fstat64i32',
                                                                                            '_get_osfhandle',
                                                                                            'fputs',
                                                                                            '__iob_func',
                                                                                            'malloc',
                                                                                            'isprint',
                                                                                            '_strdup',
                                                                                            'strtoul',
                                                                                            'strtol',
                                                                                            '_strtoui64',
                                                                                            'strtod',
                                                                                            'fprintf',
                                                                                            'wcsrchr',
                                                                                            'strcspn',
                                                                                            'tolower',
                                                                                            'isdigit',
                                                                                            '_wopen',
                                                                                            '_wfopen',
                                                                                            '_wrename',
                                                                                            '_wunlink',
                                                                                            '_wgetenv',
                                                                                            '_getpid',
                                                                                            '_snprintf',
                                                                                            'wcsspn',
                                                                                            'towupper',
                                                                                            'wcschr',
                                                                                            'wcscspn',
                                                                                            'frexp',
                                                                                            'abort',
                                                                                            'wcrtomb',
                                                                                            'localeconv',
                                                                                            'memcmp',
                                                                                            'strncat',
                                                                                            '_strupr',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'sprintf',
                                                                                            'getenv',
                                                                                            'isalnum',
                                                                                            'scanf',
                                                                                            'fgets',
                                                                                            'fgetc',
                                                                                            'fflush',
                                                                                            '_ecvt_s',
                                                                                            '_fcvt_s',
                                                                                            'memmove',
                                                                                            '_stricmp',
                                                                                            'strncpy',
                                                                                            'strncmp',
                                                                                            'atoi',
                                                                                            'printf',
                                                                                            '_exit',
                                                                                            'memchr',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            'islower',
                                                                                            'feof',
                                                                                            'getc',
                                                                                            'fread',
                                                                                            'rewind',
                                                                                            '_lseek',
                                                                                            '_read',
                                                                                            '_write',
                                                                                            '_dup2',
                                                                                            '_close',
                                                                                            'isxdigit',
                                                                                            'CloseServiceHandle',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetServiceStatus',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateNamedPipeClient',
                                                                                            'CheckTokenMembership',
                                                                                            'RegisterServiceCtrlHandlerExA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'AccessCheck',
                                                                                            'DeleteService',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'RegOpenKeyExA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'RegisterEventSourceW',
                                                                                            'CreateServiceW',
                                                                                            'ReportEventW',
                                                                                            'CryptAcquireContextW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'GetUserNameW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'DeregisterEventSource',
                                                                                            'OpenThreadToken',
                                                                                            'ImpersonateSelf',
                                                                                            'GetFileSecurityW',
                                                                                            'MapGenericMask',
                                                                                            'FreeSid',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'RaiseException',
                                                                                            'IsBadReadPtr',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'InitializeCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'ExitThread',
                                                                                            'TerminateThread',
                                                                                            'GetHandleInformation',
                                                                                            'GetACP',
                                                                                            'VirtualQuery',
                                                                                            'OpenThread',
                                                                                            'GetExitCodeThread',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'CreateNamedPipeW',
                                                                                            'FormatMessageW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempPathW',
                                                                                            'OutputDebugStringA',
                                                                                            'LoadLibraryExW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'LoadLibraryA',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpiA',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFileAttributesA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetModuleHandleW',
                                                                                            'GetTickCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteFile',
                                                                                            'GetVolumeInformationW',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'GetOverlappedResult',
                                                                                            'GetLastError',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'CreateEventA',
                                                                                            'CreateFileW',
                                                                                            'ResetEvent',
                                                                                            'SetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrlenW',
                                                                                            'CancelIo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'ReadFile',
                                                                                            'OpenProcess',
                                                                                            'GetNamedPipeHandleStateA',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'DisconnectNamedPipe',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetFileAttributesExW',
                                                                                            'MoveFileExW',
                                                                                            'GetFileTime',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentThread',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoTaskMemFree',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'CM_Get_Parent',
                                                                                            'CM_Get_DevNode_Registry_PropertyA',
                                                                                            'CM_Get_Depth',
                                                                                            'CM_Get_Child',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiGetDeviceInterfaceDetailA',
                                                                                            'CM_Get_Device_ID_Size',
                                                                                            'CM_Get_Device_IDA',
                                                                                            'CM_Get_Sibling',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiOpenDeviceInfoA',
                                                                                            'CMP_WaitNoPendingInstallEvents',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'CM_Get_DevNode_Registry_PropertyW',
                                                                                            'CM_Locate_DevNodeA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SHGetFolderPathW',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'CharUpperA',
                                                                                            'MessageBoxW',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'WSAGetLastError',
                                                                                            'connect',
                                                                                            'getsockname',
                                                                                            'listen',
                                                                                            'ioctlsocket',
                                                                                            'bind',
                                                                                            'inet_addr',
                                                                                            'socket',
                                                                                            'select',
                                                                                            '__WSAFDIsSet',
                                                                                            'accept',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'getsockopt',
                                                                                            'closesocket',
                                                                                            'recvfrom',
                                                                                            'WSASetLastError',
                                                                                            'ntohs',
                                                                                            'htons'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 329,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2128,
                                                                      'SectionNames': {'.data\x00\x00\x00': 93184,
                                                                                       '.pdata\x00\x00': 28672,
                                                                                       '.rdata\x00\x00': 280576,
                                                                                       '.reloc\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 470016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/61ee8b98c26da669b727c15223039a00fe28d40656c17b160404c82bc5778040'},
 '61f1d5e6a4776116d918a13a547aa509588fa92907f864b243fffa286df12d2d': {'AddressOfEntryPoint': 188925,
                                                                      'DebugRVA': 423248,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 307200,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'LoadLibraryExA',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'GetUserNameW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'CloseEventLog',
                                                                                            'OpenEventLogW',
                                                                                            'ReportEventW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'DecryptFileW',
                                                                                            'CreateWellKnownSid',
                                                                                            'InitializeAcl',
                                                                                            'SetEntriesInAclW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetTokenInformation',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'QueryServiceConfigW',
                                                                                            'GetMessageW',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetCursorPos',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromProgID',
                                                                                            'GetCommandLineA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'CompareStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'TlsAlloc',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'CreateProcessW',
                                                                                            'GetVersionExW',
                                                                                            'VerSetConditionMask',
                                                                                            'FreeLibrary',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetDateFormatW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetStringTypeW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'DuplicateHandle',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'OpenProcess',
                                                                                            'GetProcessId',
                                                                                            'WaitForSingleObject',
                                                                                            'ConnectNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'CreateNamedPipeW',
                                                                                            'CreateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'ResetEvent',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CompareStringA',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetThreadExecutionState',
                                                                                            'CopyFileExW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateMutexW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetThreadLocale',
                                                                                            'IsValidCodePage',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'TlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'DecodePointer',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetFileSizeEx',
                                                                                            'CopyFileW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindFirstFileExW',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'LoadLibraryExA',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 240,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 394360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 126464,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 394752,
                                                                                       '.text\x00\x00\x00': 302080,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.wixburn': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/61f1d5e6a4776116d918a13a547aa509588fa92907f864b243fffa286df12d2d'},
 '622b317979b8bf31ba98cce75283a935e6406364d492ed519f2a10da50d611f2': {'AddressOfEntryPoint': 130992,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSVCRT.dll': 'free',
                                                                                      'OLEAUT32.dll': 'OleLoadPicture',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'DeleteDC',
                                                                                            'free',
                                                                                            'CoInitialize',
                                                                                            'OleLoadPicture',
                                                                                            'SHGetMalloc',
                                                                                            'GetDC'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 12,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 15352,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 15872,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 45568},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/622b317979b8bf31ba98cce75283a935e6406364d492ed519f2a10da50d611f2'},
 '6260bfed16d59503127825ebfef0b326a9fc26795e273e2baa41df3def68a6cf': {'AddressOfEntryPoint': 14819,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrcpynA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcpynA',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 36720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 36864,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6260bfed16d59503127825ebfef0b326a9fc26795e273e2baa41df3def68a6cf'},
 '627ca7b2e6bb945cc0ab173c14c90637d249712e34c6091b71273e4150782079': {'AddressOfEntryPoint': 13520,
                                                                      'DebugRVA': 11056,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'dbgeng.dll': 'DebugCreate',
                                                                                      'msvcrt.dll': 'memcmp'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            'vfprintf',
                                                                                            'fprintf',
                                                                                            'printf',
                                                                                            '__iob_func',
                                                                                            '_vsnprintf',
                                                                                            'memcmp',
                                                                                            'DebugCreate'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 35,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 11264},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/627ca7b2e6bb945cc0ab173c14c90637d249712e34c6091b71273e4150782079'},
 '62925cfa2f9b7ac0992a1dd4a9a00e84c2a2b244b38ef32925728e58dd4e4cad': {'AddressOfEntryPoint': 330130,
                                                                      'DebugRVA': 525584,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 421888,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterEventSourceW',
                                                                                      'CRYPT32.dll': 'CryptHashCertificate',
                                                                                      'IPHLPAPI.DLL': 'GetIfTable',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'NETAPI32.dll': 'NetWkstaUserGetInfo',
                                                                                      'OLEAUT32.dll': 'SafeArrayCreate',
                                                                                      'PSAPI.DLL': 'EnumProcesses',
                                                                                      'SHELL32.dll': 'SHGetDesktopFolder',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'SetTimer',
                                                                                      'USERENV.dll': 'UnloadUserProfile',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'WTSAPI32.dll': 'WTSQuerySessionInformationW',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['OutputDebugStringA',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateThread',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'EncodePointer',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'LocalFree',
                                                                                            'CreateDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'DuplicateHandle',
                                                                                            'ReleaseMutex',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FormatMessageW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcmpiW',
                                                                                            'VirtualQuery',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTempPathW',
                                                                                            'GetLocalTime',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'Sleep',
                                                                                            'lstrcmpW',
                                                                                            'lstrlenW',
                                                                                            'SetFilePointer',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'InitializeCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetStringTypeExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'CopyFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetFileTime',
                                                                                            'ReadFile',
                                                                                            'GetFileType',
                                                                                            'GetFileSize',
                                                                                            'CompareFileTime',
                                                                                            'DeviceIoControl',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'OpenProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateProcessW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetSystemPowerStatus',
                                                                                            'CreatePipe',
                                                                                            'SetHandleInformation',
                                                                                            'LocalAlloc',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'GetLongPathNameW',
                                                                                            'ReadProcessMemory',
                                                                                            'lstrcpynW',
                                                                                            'GetThreadLocale',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'QueryDosDeviceW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileExW',
                                                                                            'FindClose',
                                                                                            'LCMapStringW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetFileSizeEx',
                                                                                            'GetCurrentThread',
                                                                                            'GetACP',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleExW',
                                                                                            'ExitProcess',
                                                                                            'RtlUnwind',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeSListHead',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetStringTypeExA',
                                                                                            'lstrcmpA',
                                                                                            'GetComputerNameExW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'UnregisterWaitEx',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'FlushInstructionCache',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcessHeap',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'HeapDestroy',
                                                                                            'DecodePointer',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'HeapReAlloc',
                                                                                            'GetLastError',
                                                                                            'HeapSize',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapFree',
                                                                                            'CoGetCallContext',
                                                                                            'CoGetObject',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'ReadClassStm',
                                                                                            'CoRevertToSelf',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoRegisterPSClsid',
                                                                                            'CoSetProxyBlanket',
                                                                                            'OleSaveToStream',
                                                                                            'CoTaskMemRealloc',
                                                                                            'WriteClassStm',
                                                                                            'CoCreateGuid',
                                                                                            'CoCreateInstance',
                                                                                            'CoImpersonateClient',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayLock',
                                                                                            'SysReAllocStringLen',
                                                                                            'VarUI4FromStr',
                                                                                            'VariantChangeType',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysStringLen',
                                                                                            'VarBstrCmp',
                                                                                            'LoadTypeLib',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayCreate',
                                                                                            'CharUpperBuffW',
                                                                                            'LoadStringW',
                                                                                            'IsWindow',
                                                                                            'CharLowerBuffA',
                                                                                            'CharNextA',
                                                                                            'CharNextW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'DefWindowProcW',
                                                                                            'LoadCursorW',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'wvsprintfW',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxW',
                                                                                            'CharLowerBuffW',
                                                                                            'CharUpperW',
                                                                                            'CharLowerW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'PeekMessageW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindow',
                                                                                            'GetWindowLongW',
                                                                                            'MonitorFromWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'GetClientRect',
                                                                                            'MapWindowPoints',
                                                                                            'SetWindowLongW',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowPos',
                                                                                            'CloseClipboard',
                                                                                            'UnregisterClassW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetMonitorInfoW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'SystemFunction036',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'InitializeSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'InitializeAcl',
                                                                                            'GetAclInformation',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'MakeAbsoluteSD',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'GetAce',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'EqualSid',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenThreadToken',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateSelf',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'DuplicateTokenEx',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'RegOpenCurrentUser',
                                                                                            'IsTextUnicode',
                                                                                            'RegisterEventSourceW',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'NetWkstaGetInfo',
                                                                                            'NetGetJoinInformation',
                                                                                            'NetApiBufferFree',
                                                                                            'NetWkstaUserGetInfo',
                                                                                            'EnumProcessModules',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcesses',
                                                                                            'PathAppendW',
                                                                                            'StrRetToStrW',
                                                                                            'UrlIsW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathAddExtensionW',
                                                                                            'UrlCombineW',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathAddBackslashW',
                                                                                            'PathIsRelativeW',
                                                                                            'SHQueryValueExW',
                                                                                            'PathCreateFromUrlW',
                                                                                            'UrlEscapeW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathStripPathW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'ExpandEnvironmentStringsForUserW',
                                                                                            'UnloadUserProfile',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'WTSEnumerateSessionsW',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSQuerySessionInformationW',
                                                                                            'GetIfTable',
                                                                                            'CryptQueryObject',
                                                                                            'CryptUnprotectData',
                                                                                            'CryptProtectData',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertGetNameStringW',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CryptHashCertificate',
                                                                                            'WinVerifyTrust'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 356,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17920,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 116224,
                                                                                       '.reloc\x00\x00': 24576,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 417792},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/62925cfa2f9b7ac0992a1dd4a9a00e84c2a2b244b38ef32925728e58dd4e4cad'},
 '62de32ac894ffc605105abb2d61c941312d7f9f4babd88b2cdae25562def2a10': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 376548,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 376832,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/62de32ac894ffc605105abb2d61c941312d7f9f4babd88b2cdae25562def2a10'},
 '630f21ca0bcc941bece9f295435423f5a18ad2060490efa80cf6d18b4bd6c842': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 28160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 28160,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/630f21ca0bcc941bece9f295435423f5a18ad2060490efa80cf6d18b4bd6c842'},
 '631ae7074649a665d62ac6fc940d203eff715c88b4b57ee46865286607909231': {'AddressOfEntryPoint': 138198,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 188416,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'TlsAlloc',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'LoadIconW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'CloseHandle',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'SetFileTime',
                                                                                            'SetFileAttributesW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetTempFileNameW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'GetFileSize',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetEndOfFile',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStdHandle',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'LocalAlloc',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetVersion',
                                                                                            'GetCommandLineW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetLocaleInfoA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'LoadLibraryA',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetVersionExW',
                                                                                            'VirtualAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'VirtualFree',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'HeapSize',
                                                                                            'InterlockedDecrement',
                                                                                            'SetLastError',
                                                                                            'InterlockedIncrement',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'HeapReAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'HeapCreate',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'SetForegroundWindow',
                                                                                            'CharUpperW',
                                                                                            'DestroyWindow',
                                                                                            'RegisterWindowMessageW',
                                                                                            'AdjustWindowRect',
                                                                                            'LoadImageW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'PostMessageW',
                                                                                            'EndDialog',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'CreateDialogParamW',
                                                                                            'SystemParametersInfoW',
                                                                                            'PeekMessageW',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxW',
                                                                                            'SendMessageW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'GetWindowRect',
                                                                                            'LoadIconW',
                                                                                            'GetObjectW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 146,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 108324,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 36864,
                                                                                       '.rsrc\x00\x00\x00': 108544,
                                                                                       '.text\x00\x00\x00': 183296},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/631ae7074649a665d62ac6fc940d203eff715c88b4b57ee46865286607909231'},
 '6374e1c9d3647f9c04ae42fff152aa3f9986cf2e778b76a62db4e2b1d53f0bce': {'AddressOfEntryPoint': 49584,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'NETAPI32.dll': 'NetFileEnum',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'framedynos.dll': '??YCHString@@QAEABV0@PBG@Z',
                                                                                      'msvcrt.dll': 'fprintf',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['RegConnectRegistryW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetTokenInformation',
                                                                                            'LookupAccountSidW',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CompareStringW',
                                                                                            'GetComputerNameW',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'VirtualFree',
                                                                                            'GetLogicalDrives',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'OpenProcess',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'ReadFile',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'SetLastError',
                                                                                            'SetThreadUILanguage',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            '__p__commode',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'wcstok',
                                                                                            'fflush',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wgetcwd',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'wcstoul',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_vsnwprintf',
                                                                                            '_iob',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetGetLastErrorW',
                                                                                            'NetServerGetInfo',
                                                                                            'NetApiBufferFree',
                                                                                            'NetFileClose',
                                                                                            'NetFileEnum',
                                                                                            'GetUserNameExW',
                                                                                            'WSALookupServiceEnd',
                                                                                            'WSACleanup',
                                                                                            'WSAGetLastError',
                                                                                            'WSALookupServiceNextW',
                                                                                            'WSALookupServiceBeginW',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetAddrInfoW',
                                                                                            'GetNameInfoW',
                                                                                            'WSAStartup',
                                                                                            '?Right@CHString@@QBE?AV1@H@Z',
                                                                                            '??4CHString@@QAEABV0@ABV0@@Z',
                                                                                            '??1CHString@@QAE@XZ',
                                                                                            '??0CHString@@QAE@PBG@Z',
                                                                                            '??4CHString@@QAEABV0@PBG@Z',
                                                                                            '?Left@CHString@@QBE?AV1@H@Z',
                                                                                            '?Mid@CHString@@QBE?AV1@HH@Z',
                                                                                            '??0CHString@@QAE@XZ',
                                                                                            '?Mid@CHString@@QBE?AV1@H@Z',
                                                                                            '?Format@CHString@@QAAXPBGZZ',
                                                                                            '?Find@CHString@@QBEHPBG@Z',
                                                                                            '?GetData@CHString@@IBEPAUCHStringData@@XZ',
                                                                                            '??YCHString@@QAEABV0@PBG@Z',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlAllocateHeap',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'NtQuerySystemInformation',
                                                                                            'StrChrW',
                                                                                            'StrChrIW',
                                                                                            'StrStrW',
                                                                                            'StrStrIW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 148,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 49664},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6374e1c9d3647f9c04ae42fff152aa3f9986cf2e778b76a62db4e2b1d53f0bce'},
 '63be7455e335d9ae93f0b0c6c16355b85da0a25f83a85a84e81ced287bb4cff8': {'AddressOfEntryPoint': 32160,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'OutputDebugStringA',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['EventWrite',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'EventUnregister',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'EventRegister',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FindResourceExW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'CreateProcessW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalLock',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'WriteFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetPriorityClass',
                                                                                            'GlobalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'FormatMessageW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetExitCodeProcess',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CompareStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GlobalUnlock',
                                                                                            'RaiseException',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'GetFileType',
                                                                                            'LockResource',
                                                                                            'lstrcmpiW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'OutputDebugStringA',
                                                                                            '__set_app_type',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'realloc',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'memset',
                                                                                            'exit',
                                                                                            'memcpy_s',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'wcsstr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wtoi',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__C_specific_handler',
                                                                                            'memcpy',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateXmlReader',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'VarBstrCat',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'UnregisterClassA',
                                                                                            'CharNextW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 115,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 32256},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/63be7455e335d9ae93f0b0c6c16355b85da0a25f83a85a84e81ced287bb4cff8'},
 '63c07312adb6f8a8bde93361c30ac63dab4de1141af54630eef11e54b0bf983d': {'AddressOfEntryPoint': 1190112,
                                                                      'DebugRVA': 7168,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 1272944,
                                                                      'ExportSize': 9093,
                                                                      'IATRVA': 1302528,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'FindFirstVolumeMountPointW',
                                                                                      'OSUNINST.dll': 'IsUninstallImageValid',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetDriveTypeW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenThreadToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForSingleObject',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetSecurityDescriptorLength',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'StartServiceCtrlDispatcherW',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'OpenSCManagerW',
                                                                                      'api-ms-win-service-management-l2-1-0.dll': 'SetServiceObjectSecurity',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'RegisterServiceCtrlHandlerW',
                                                                                      'msvcrt.dll': '_exit',
                                                                                      'ntdll.dll': 'RtlAcquireResourceExclusive',
                                                                                      'vdsutil.dll': '?WaitForRundownProtectionRelease@@YAXPEAU_RUNDOWN_REF@@@Z'},
                                                                      'ImportedFunctions': ['CharNextW',
                                                                                            'PeekMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'DispatchMessageW',
                                                                                            'GetMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'wcscpy_s',
                                                                                            'swscanf_s',
                                                                                            '_ltow',
                                                                                            'towupper',
                                                                                            'wcsncmp',
                                                                                            '_wtol',
                                                                                            'memset',
                                                                                            'wcsstr',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_purecall',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_vsnwprintf',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '__wgetmainargs',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            'srand',
                                                                                            'time',
                                                                                            'rand',
                                                                                            '?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                            '_exit',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlConvertExclusiveToShared',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlConvertSharedToExclusive',
                                                                                            'RtlDeleteResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'FindVolumeClose',
                                                                                            'DeleteVolumeMountPointW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'FindFirstVolumeW',
                                                                                            'QueryDosDeviceW',
                                                                                            'DefineDosDeviceW',
                                                                                            'GetVolumePathNameW',
                                                                                            'WriteFile',
                                                                                            'SetFilePointerEx',
                                                                                            'FindNextVolumeW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'GetDriveTypeW',
                                                                                            'CloseHandle',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcessHeap',
                                                                                            'DeviceIoControl',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcessToken',
                                                                                            'SetThreadToken',
                                                                                            'OpenThreadToken',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'WaitForSingleObject',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FreeSid',
                                                                                            'AddAccessAllowedAce',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'IsValidSid',
                                                                                            'MakeAbsoluteSD',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'DuplicateTokenEx',
                                                                                            'GetLengthSid',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'ControlService',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'CloseServiceHandle',
                                                                                            'CreateServiceW',
                                                                                            'DeleteService',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'QueryServiceObjectSecurity',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'SetServiceObjectSecurity',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'CM_Get_Parent',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetCustomDevicePropertyW',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'CM_Query_And_Remove_SubTreeW',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'CM_Reenumerate_DevNode_Ex',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'IsUninstallImageValid',
                                                                                            '?Next@CRtlMapIter@@QEAAAEAV1@XZ',
                                                                                            '?Uninitialize@CVdsPnPNotificationBase@@QEAAXXZ',
                                                                                            '?Uninitialize@CVdsAsyncObjectBase@@SAXXZ',
                                                                                            '?InsertTailPointer@CRtlList@@QEAAHPEAX@Z',
                                                                                            '?Remove@CRtlList@@QEAAXAEAVCRtlListIter@@@Z',
                                                                                            '?IsWinPE@@YAHXZ',
                                                                                            '?AcquireRundownProtection@@YAEPEAU_RUNDOWN_REF@@@Z',
                                                                                            '?Initialize@CVdsAsyncObjectBase@@SAKXZ',
                                                                                            '?Initialize@CVdsPnPNotificationBase@@QEAAKXZ',
                                                                                            '?ReleaseRundownProtection@@YAXPEAU_RUNDOWN_REF@@@Z',
                                                                                            '?IsRunningOnAMD64@@YAHXZ',
                                                                                            '?IsClientSKU@@YAHXZ',
                                                                                            '?InsertHeadPointer@CRtlList@@QEAAHPEAX@Z',
                                                                                            '?GetInterfaceDetailData@@YAKPEAXPEAU_SP_DEVICE_INTERFACE_DATA@@PEAPEAU_SP_DEVICE_INTERFACE_DETAIL_DATA_W@@@Z',
                                                                                            '?InvalidateDiskCache@@YAJPEAG@Z',
                                                                                            '??0CVdsWmiVariantObjectArrayEnum@@QEAA@XZ',
                                                                                            '??1CVdsWmiVariantObjectArrayEnum@@QEAA@XZ',
                                                                                            '?VdsWmiConnectToNamespace@@YAJPEAGPEAPEAUIWbemLocator@@PEAPEAUIWbemServices@@@Z',
                                                                                            '?Attach@CVdsWmiVariantObjectArrayEnum@@QEAAJPEAUtagVARIANT@@@Z',
                                                                                            '?Next@CVdsWmiVariantObjectArrayEnum@@QEAAJPEAPEAUIWbemClassObject@@@Z',
                                                                                            '?VdsWmiGetByteFromInstance@@YAJPEAUIWbemClassObject@@PEAGPEAE@Z',
                                                                                            '?VdsWmiGetUlongFromInstance@@YAJPEAUIWbemClassObject@@PEAGPEAK@Z',
                                                                                            '?VdsWmiGetObjectFromInstance@@YAJPEAUIWbemClassObject@@PEAGPEAPEAU1@@Z',
                                                                                            '?VdsWmiCopyFromVariantByteArray@@YAJPEAUIWbemClassObject@@PEAGJPEAE@Z',
                                                                                            '?Detach@CVdsWmiVariantObjectArrayEnum@@QEAAJXZ',
                                                                                            '?Find@CRtlMap@@QEAAHAEAVCRtlEntry@@PEAV2@@Z',
                                                                                            '?VdsTrace@@YAXKPEADZZ',
                                                                                            '?Insert@CRtlMap@@QEAAHAEAVCRtlEntry@@0@Z',
                                                                                            '?FindPtr@CRtlMap@@QEAAHAEAVCRtlEntry@@PEAPEAV2@@Z',
                                                                                            '?Remove@CRtlMap@@QEAAHAEAVCRtlEntry@@@Z',
                                                                                            '?OpenDevice@@YAKPEAGKPEAPEAX@Z',
                                                                                            '?GetDeviceName@@YAKPEAXHKPEAG@Z',
                                                                                            '?GetDeviceAndMediaType@@YAKPEAGPEAXPEAK2@Z',
                                                                                            '?GetDiskLayout@@YAKPEAXPEAPEAU_DRIVE_LAYOUT_INFORMATION_EX@@@Z',
                                                                                            '?GetPartitionInformation@@YAKPEAXPEAU_PARTITION_INFORMATION_EX@@@Z',
                                                                                            '?RegisterHandle@CVdsPnPNotificationBase@@QEAAKPEAXPEAPEAX@Z',
                                                                                            '?Append@CPrvEnumObject@@QEAAJPEAUIUnknown@@@Z',
                                                                                            '?Reset@CPrvEnumObject@@UEAAJXZ',
                                                                                            '?IsLoggingEnabledW@@YAEXZ',
                                                                                            '?VdsTraceExW@@YAXKKPEAGZZ',
                                                                                            '?GuidToString@@YAJPEAU_GUID@@PEAGK@Z',
                                                                                            '?InsertUnique@CRtlMap@@QEAAHAEAVCRtlEntry@@0@Z',
                                                                                            '?IsNoAutoMount@@YAHXZ',
                                                                                            '?IsEfiFirmware@@YAHXZ',
                                                                                            '?Clear@CPrvEnumObject@@QEAAXXZ',
                                                                                            '?LockDismountVolume@@YAKPEAXHE@Z',
                                                                                            '?GetDeviceNumber@@YAKPEAXPEAU_STORAGE_DEVICE_NUMBER@@@Z',
                                                                                            '?IsDriveLetter@@YAHPEAG@Z',
                                                                                            '?Next@CPrvEnumObject@@UEAAJKPEAPEAUIUnknown@@PEAK@Z',
                                                                                            '?Skip@CPrvEnumObject@@UEAAJK@Z',
                                                                                            '?Clone@CPrvEnumObject@@UEAAJPEAPEAUIEnumVdsObject@@@Z',
                                                                                            '??0CVdsAsyncObjectBase@@QEAA@XZ',
                                                                                            '??1CVdsAsyncObjectBase@@QEAA@XZ',
                                                                                            '?SetCompletionStatus@CVdsAsyncObjectBase@@QEAAXJK@Z',
                                                                                            '?Signal@CVdsAsyncObjectBase@@QEAAXXZ',
                                                                                            '?VdsIscsiIpAddressToString@@YAJPEAU_VDS_IPADDRESS@@KPEAG@Z',
                                                                                            '?VdsWmiFindInstanceOfClass@@YAJPEAUIWbemServices@@PEAG1PEAPEAUIWbemClassObject@@@Z',
                                                                                            '?VdsWmiGetUlonglongFromInstance@@YAJPEAUIWbemClassObject@@PEAGPEA_K@Z',
                                                                                            '?QueryStatus@CVdsAsyncObjectBase@@UEAAJPEAJPEAK@Z',
                                                                                            '?VdsIscsiIpsecIdToIpAddress@@YAJEKPEAEPEAU_VDS_IPADDRESS@@@Z',
                                                                                            '?VdsIscsiCheckEqualIpAddress@@YAHU_VDS_IPADDRESS@@0@Z',
                                                                                            '?VdsIscsiIpAddressToIpsecId@@YAJPEAU_VDS_IPADDRESS@@PEAEPEAKPEAPEAE@Z',
                                                                                            '?WriteBootCode@@YAKPEAX@Z',
                                                                                            '?CoFreeStringArray@@YAXPEAPEAGJ@Z',
                                                                                            '?GetFMIFSFormatEx2Routine@@YAP6AXPEAGW4_FMIFS_MEDIA_TYPE@@0PEAUFMIFS_FORMATEX2_PARAM@@P6AEW4_FMIFS_PACKET_TYPE@@KPEAX@Z@ZXZ',
                                                                                            '?GetFMIFSEnableCompressionRoutine@@YAP6AEPEAGG@ZXZ',
                                                                                            '?RemoveTempVolumeName@@YAXPEAG0@Z',
                                                                                            '?MountVolume@@YAKPEAG@Z',
                                                                                            '?GetFileSystemRecognitionName@@YAJPEAXPEAPEAG@Z',
                                                                                            '?GetFMIFSGetDefaultFilesystemRoutine@@YAP6AEPEAUFMIFS_DEF_FS_PARAM@@PEAUFMIFS_DEF_FS_OUT@@PEAK@ZXZ',
                                                                                            '?AssignTempVolumeName@@YAJPEAGQEAG@Z',
                                                                                            '?GetVolumeName@@YAJPEAGK0@Z',
                                                                                            '?GetVolumeDiskExtentInfo@@YAKPEAXPEAPEAU_VOLUME_DISK_EXTENTS@@@Z',
                                                                                            '?GarbageCollectDriveLetters@@YAXXZ',
                                                                                            '?LockVolume@@YAKPEAXE@Z',
                                                                                            '?DeleteNetworkShare@@YAHPEAG@Z',
                                                                                            '?GetVolumeUniqueId@@YAKPEAU_VDS_VOLUME_PROP2@@@Z',
                                                                                            '?GetVolumeGuidPathnames@@YAJPEAGPEAKPEAPEAPEAG@Z',
                                                                                            '?DeleteBcdObjects@@YAJPEAU_VDS_PARTITION_IDENTITY@@@Z',
                                                                                            '?VdsIscsiCacheSessionDevices@@YAJPEAUIEnumWbemClassObject@@PEAPEAU_VDSISCSI_SESSION_DEVICES_CACHE@@@Z',
                                                                                            '?VdsWmiGetObjectInVariantObjectArray@@YAJPEAUIWbemClassObject@@PEAGJPEAPEAU1@@Z',
                                                                                            '?VdsIscsiGetIpAddressFromInstance@@YAJPEAUIWbemClassObject@@PEAGPEAU_VDS_IPADDRESS@@@Z',
                                                                                            '?VdsWmiCreateClassInstance@@YAJPEAUIWbemServices@@PEAGPEAPEAUIWbemClassObject@@@Z',
                                                                                            '?VdsWmiSetUlongInInstance@@YAJPEAUIWbemClassObject@@PEAGK@Z',
                                                                                            '?VdsWmiCreateVariantArray@@YAJGJPEAUtagVARIANT@@@Z',
                                                                                            '?VdsWmiSetUlonglongInInstance@@YAJPEAUIWbemClassObject@@PEAG_K@Z',
                                                                                            '?VdsWmiGetMethodArgumentObject@@YAJPEAUIWbemServices@@PEAG1PEAPEAUIWbemClassObject@@@Z',
                                                                                            '?VdsWmiSetObjectInInstance@@YAJPEAUIWbemClassObject@@PEAG0@Z',
                                                                                            '?VdsWmiCallMethod@@YAJPEAUIWbemServices@@PEAUIWbemClassObject@@PEAG1PEAPEAU2@@Z',
                                                                                            '?UnregisterHandle@CVdsPnPNotificationBase@@QEAAXPEAX@Z',
                                                                                            '?GetDeviceManufacturerInfo@@YAKPEAXPEAPEAG111@Z',
                                                                                            '?GetMediaGeometryEx@@YAKPEAXPEAU_VDS_DISK_PROP2@@@Z',
                                                                                            '?GetStorageAccessAlignmentProperty@@YAKPEAXPEAU_STORAGE_ACCESS_ALIGNMENT_DESCRIPTOR@@@Z',
                                                                                            '?IsDiskClustered@@YAKPEAXPEAE111@Z',
                                                                                            '?IsDiskReadOnly@@YAKPEAXPEAE@Z',
                                                                                            '?IsDiskCurrentStateReadOnly@@YAKPEAXPEAE@Z',
                                                                                            '?CreateDeviceInfoSet@@YAKPEAGPEAPEAXPEAU_SP_DEVINFO_DATA@@@Z',
                                                                                            '?GetDeviceId@@YAKPEAXPEAU_SP_DEVINFO_DATA@@PEAPEAG@Z',
                                                                                            '?GetDeviceRegistryProperty@@YAKPEAXPEAU_SP_DEVINFO_DATA@@KPEAPEAEK@Z',
                                                                                            '?VdsAllocateEmptyString@@YAPEAGXZ',
                                                                                            '?GetDeviceRegistryProperty@@YAKKKPEAPEAEK@Z',
                                                                                            '?GetDeviceLocationEx@@YAKPEAXKPEAU_VDS_DISK_PROP2@@@Z',
                                                                                            '?VdsDoesDiskHaveArcPath@@YAKKPEAE@Z',
                                                                                            '?GetBootFromDiskNumber@@YAJPEAK@Z',
                                                                                            '?GetDiskOfflineReason@@YAKPEAXPEAW4_VDS_DISK_OFFLINE_REASON@@@Z',
                                                                                            '?GetDiskRedundancyCount@@YAJPEAXPEAK@Z',
                                                                                            '?VdsAllocateString@@YAJPEAGPEAPEAG@Z',
                                                                                            '?GetDiskIdentifiers@@YAJPEBG0PEAPEAGPEAG@Z',
                                                                                            '?WaitImpl@CVdsAsyncObjectBase@@QEAAJPEAJ@Z',
                                                                                            '?Begin@CRtlMap@@QEAA?AVCRtlMapIter@@XZ',
                                                                                            '?VdsTraceW@@YAXKPEAGZZ',
                                                                                            '?GetEntryPointer@CRtlListIter@@QEAAPEAXXZ',
                                                                                            '?VdsInitializeCriticalSection@@YAKPEAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '?RemoveAll@CRtlMap@@QEAAXH@Z',
                                                                                            '??1CRtlMap@@UEAA@XZ',
                                                                                            '?InitializeRundownProtection@@YAXPEAU_RUNDOWN_REF@@@Z',
                                                                                            'VdsDisableCOMFatalExceptionHandling',
                                                                                            '??1CGlobalResource@@QEAA@XZ',
                                                                                            '?UnInitializeGlobalResouce@@YAJXZ',
                                                                                            '?Initialize@CGlobalResource@@QEAAJXZ',
                                                                                            '??0CGlobalResource@@QEAA@XZ',
                                                                                            '?RemoveEventSource@@YAKPEAG@Z',
                                                                                            '?VdsHeapAlloc@@YAPEAXPEAXK_K@Z',
                                                                                            '?AddEventSource@@YAKPEAGPEAUHINSTANCE__@@@Z',
                                                                                            '?InitializeSecurityDescriptor@@YAKKPEAXPEAPEAU_ACL@@PEAPEAX22@Z',
                                                                                            '?LogInfo@@YAXPEAGKKPEAXK0PEAD@Z',
                                                                                            '?LogError@@YAXPEAGKKPEAXKK0PEAD@Z',
                                                                                            '?VdsHeapFree@@YAHPEAXK0@Z',
                                                                                            '?AllocateAndGetVolumePathName@@YAJPEBGPEAPEAG@Z',
                                                                                            '?VdsTraceEx@@YAXKKPEADZZ',
                                                                                            '??0CRtlMap@@QEAA@KP6AXPEAVCRtlEntry@@@Z1@Z',
                                                                                            '??0CRtlList@@QEAA@P6AXPEAVCRtlEntry@@@Z@Z',
                                                                                            '??1CRtlList@@QEAA@XZ',
                                                                                            '?Begin@CRtlList@@QEAA?AVCRtlListIter@@XZ',
                                                                                            '?End@CRtlList@@QEAA?AVCRtlListIter@@XZ',
                                                                                            '?RemoveAll@CRtlList@@QEAAXXZ',
                                                                                            '?GetEntry@CRtlListIter@@QEAAPEAVCRtlEntry@@XZ',
                                                                                            '?Next@CRtlListIter@@QEAAAEAV1@XZ',
                                                                                            '?Prev@CRtlListIter@@QEAAAEAV1@XZ',
                                                                                            '??0CVdsCallTracer@@QEAA@KPEBD@Z',
                                                                                            '??1CVdsCallTracer@@QEAA@XZ',
                                                                                            '?WaitForRundownProtectionRelease@@YAXPEAU_RUNDOWN_REF@@@Z',
                                                                                            'CreateSemaphoreW',
                                                                                            'LoadLibraryW',
                                                                                            'RtlCompareMemory',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'VirtualFree',
                                                                                            'ReadFile',
                                                                                            'VirtualAlloc',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentThread',
                                                                                            'LoadLibraryExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetVolumeMountPointW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'FindVolumeMountPointClose',
                                                                                            'FindNextVolumeMountPointW',
                                                                                            'FindFirstVolumeMountPointW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 27,
                                                                      'NumberOfImportFunctions': 319,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 17920,
                                                                                       '.pdata\x00\x00': 9728,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 1277952},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/63c07312adb6f8a8bde93361c30ac63dab4de1141af54630eef11e54b0bf983d'},
 '63fa11cc14cafce8fa7e746e5807b7cacb4b0a515facc13d1bfe1a041558c28f': {'AddressOfEntryPoint': 14467,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 8456,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 28160},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/63fa11cc14cafce8fa7e746e5807b7cacb4b0a515facc13d1bfe1a041558c28f'},
 '63fb44d78c5245bea4feb6b8a0ee419840615e90a8781f8e6d5585dfe6ba86c0': {'AddressOfEntryPoint': 16558,
                                                                      'DebugRVA': 16164,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1416,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/63fb44d78c5245bea4feb6b8a0ee419840615e90a8781f8e6d5585dfe6ba86c0'},
 '6489eafcbfb236b0cc0855ef28fc9ba82c24230394832f96f1c8d7072632cc61': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 96788,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 97280,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6489eafcbfb236b0cc0855ef28fc9ba82c24230394832f96f1c8d7072632cc61'},
 '64a74486a32ad21db2ba1b66ac75c13144099a87caed5df1a6f0309be89efa0f': {'AddressOfEntryPoint': 61154,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'PSAPI.DLL': 'EnumProcesses',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'EndDialog',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetStockObject',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'GetMessageA',
                                                                                            'WaitForInputIdle',
                                                                                            'DispatchMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'CreateDialogParamA',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowLongA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'SetTimer',
                                                                                            'GetWindowLongA',
                                                                                            'InvalidateRect',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgItem',
                                                                                            'LoadIconA',
                                                                                            'SendMessageA',
                                                                                            'SetFocus',
                                                                                            'EndDialog',
                                                                                            'OleInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcessModules',
                                                                                            'EnumProcesses',
                                                                                            'InitCommonControlsEx',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteA',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'LCMapStringA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetFullPathNameA',
                                                                                            'RaiseException',
                                                                                            'GetTimeZoneInformation',
                                                                                            'RtlUnwind',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'Sleep',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'FindFirstFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'MoveFileExA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'CreateProcessA',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'ExitProcess',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'WriteFile',
                                                                                            'CreateFileA',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetExitCodeThread',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeA',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'HeapReAlloc',
                                                                                            'GetStartupInfoA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'GetProcessHeap'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 162,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1532504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 43520,
                                                                                       '.rsrc\x00\x00\x00': 1532928,
                                                                                       '.text\x00\x00\x00': 116224},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/64a74486a32ad21db2ba1b66ac75c13144099a87caed5df1a6f0309be89efa0f'},
 '64ca31ad8c808d9c51fc04287d6430c55793ed16ac1af7a4be799aabc0619287': {'AddressOfEntryPoint': 314797,
                                                                      'DebugRVA': 390512,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 389120,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'KERNEL32.dll': 'SetEndOfFile',
                                                                                      'MSVCR90.dll': 'isxdigit',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDriverInfoDetailW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'RegisterDeviceNotificationA',
                                                                                      'WS2_32.dll': 'htons',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['memset',
                                                                                            '_wcsicmp',
                                                                                            'sscanf',
                                                                                            'strchr',
                                                                                            'strrchr',
                                                                                            '_mbsncmp',
                                                                                            'strstr',
                                                                                            '_vsnwprintf',
                                                                                            'wcsncmp',
                                                                                            'qsort',
                                                                                            'calloc',
                                                                                            '_strnicmp',
                                                                                            '_wfullpath',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            'strerror',
                                                                                            'strtok_s',
                                                                                            '_strlwr',
                                                                                            'isspace',
                                                                                            'fclose',
                                                                                            '_fileno',
                                                                                            '_fstat64i32',
                                                                                            '_get_osfhandle',
                                                                                            'fputs',
                                                                                            '__iob_func',
                                                                                            'malloc',
                                                                                            'isprint',
                                                                                            '_strdup',
                                                                                            'strtoul',
                                                                                            'strtol',
                                                                                            '_strtoui64',
                                                                                            'strtod',
                                                                                            'fprintf',
                                                                                            'wcsrchr',
                                                                                            'strcspn',
                                                                                            'tolower',
                                                                                            'isdigit',
                                                                                            '_wopen',
                                                                                            '_wfopen',
                                                                                            '_wrename',
                                                                                            '_wunlink',
                                                                                            '_wgetenv',
                                                                                            '_getpid',
                                                                                            '_snprintf',
                                                                                            'wcsspn',
                                                                                            'towupper',
                                                                                            'wcschr',
                                                                                            'wcscspn',
                                                                                            'frexp',
                                                                                            'abort',
                                                                                            'wcrtomb',
                                                                                            'localeconv',
                                                                                            'strncat',
                                                                                            '_strupr',
                                                                                            'islower',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_except_handler4_common',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'sprintf',
                                                                                            'getenv',
                                                                                            'isalnum',
                                                                                            'scanf',
                                                                                            'fgets',
                                                                                            'fgetc',
                                                                                            'fflush',
                                                                                            '_ecvt_s',
                                                                                            'memmove',
                                                                                            '_stricmp',
                                                                                            'strncpy',
                                                                                            'strncmp',
                                                                                            'atoi',
                                                                                            'printf',
                                                                                            '_exit',
                                                                                            'memchr',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            '_fcvt_s',
                                                                                            'feof',
                                                                                            'getc',
                                                                                            'fread',
                                                                                            'rewind',
                                                                                            '_lseek',
                                                                                            '_read',
                                                                                            '_write',
                                                                                            '_dup2',
                                                                                            '_close',
                                                                                            'isxdigit',
                                                                                            'CloseServiceHandle',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetServiceStatus',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateNamedPipeClient',
                                                                                            'CheckTokenMembership',
                                                                                            'RegisterServiceCtrlHandlerExA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'AccessCheck',
                                                                                            'DeleteService',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'RegOpenKeyExA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'RegisterEventSourceW',
                                                                                            'CreateServiceW',
                                                                                            'ReportEventW',
                                                                                            'CryptAcquireContextW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'GetUserNameW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'DeregisterEventSource',
                                                                                            'OpenThreadToken',
                                                                                            'ImpersonateSelf',
                                                                                            'GetFileSecurityW',
                                                                                            'MapGenericMask',
                                                                                            'FreeSid',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'RaiseException',
                                                                                            'IsBadReadPtr',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'InitializeCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'ExitThread',
                                                                                            'TerminateThread',
                                                                                            'GetHandleInformation',
                                                                                            'GetACP',
                                                                                            'VirtualQuery',
                                                                                            'OpenThread',
                                                                                            'GetExitCodeThread',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'CreateNamedPipeW',
                                                                                            'FormatMessageW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempPathW',
                                                                                            'OutputDebugStringA',
                                                                                            'LoadLibraryExW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'LoadLibraryA',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpiA',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFileAttributesA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetModuleHandleW',
                                                                                            'GetTickCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteFile',
                                                                                            'GetVolumeInformationW',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetOverlappedResult',
                                                                                            'GetLastError',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'CreateEventA',
                                                                                            'CreateFileW',
                                                                                            'ResetEvent',
                                                                                            'SetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrlenW',
                                                                                            'CancelIo',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'ReadFile',
                                                                                            'OpenProcess',
                                                                                            'GetNamedPipeHandleStateA',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'DisconnectNamedPipe',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetCurrentProcessId',
                                                                                            'MoveFileExW',
                                                                                            'GetFileTime',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentThread',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFilePointer',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetEndOfFile',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoTaskMemFree',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'CM_Get_Parent',
                                                                                            'CM_Get_DevNode_Registry_PropertyA',
                                                                                            'CM_Get_Depth',
                                                                                            'CM_Get_Child',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiGetDeviceInterfaceDetailA',
                                                                                            'CM_Get_Device_IDA',
                                                                                            'CM_Get_Device_ID_Size',
                                                                                            'CM_Get_Sibling',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiOpenDeviceInfoA',
                                                                                            'CMP_WaitNoPendingInstallEvents',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'CM_Get_DevNode_Registry_PropertyW',
                                                                                            'CM_Locate_DevNodeA',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SHGetFolderPathW',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'CharUpperA',
                                                                                            'MessageBoxW',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'WSAGetLastError',
                                                                                            'connect',
                                                                                            'getsockname',
                                                                                            'listen',
                                                                                            'ioctlsocket',
                                                                                            'bind',
                                                                                            'inet_addr',
                                                                                            'socket',
                                                                                            'select',
                                                                                            '__WSAFDIsSet',
                                                                                            'accept',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'getsockopt',
                                                                                            'closesocket',
                                                                                            'recvfrom',
                                                                                            'WSASetLastError',
                                                                                            'ntohs',
                                                                                            'htons'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 330,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2124,
                                                                      'SectionNames': {'.data\x00\x00\x00': 60416,
                                                                                       '.rdata\x00\x00': 209920,
                                                                                       '.reloc\x00\x00': 48640,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 385024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/64ca31ad8c808d9c51fc04287d6430c55793ed16ac1af7a4be799aabc0619287'},
 '65194217ec194e315292c3640d4949bb8351126e78b0b753f040acc9a4ae59a8': {'AddressOfEntryPoint': 23480,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetProcAddress',
                                                                                      'msvcrt.dll': 'exit',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_CxxThrowException',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fread',
                                                                                            '__CxxFrameHandler',
                                                                                            '_snprintf',
                                                                                            '_filelength',
                                                                                            'fprintf',
                                                                                            'qsort',
                                                                                            'toupper',
                                                                                            'strncpy',
                                                                                            'fopen',
                                                                                            'isspace',
                                                                                            '_strnicmp',
                                                                                            'strncmp',
                                                                                            'strncat',
                                                                                            'fgets',
                                                                                            'fclose',
                                                                                            'isdigit',
                                                                                            'isupper',
                                                                                            'islower',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'tolower',
                                                                                            'atoi',
                                                                                            'printf',
                                                                                            'puts',
                                                                                            'exit',
                                                                                            'RaiseException',
                                                                                            'LocalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'InterlockedExchange',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'LoadLibraryA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'SetConsoleMode',
                                                                                            'GetCurrentProcess',
                                                                                            'GetPriorityClass',
                                                                                            'SetPriorityClass',
                                                                                            'Beep',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'CreateFileA',
                                                                                            'GetLastError',
                                                                                            'GetFileSize',
                                                                                            'CreateConsoleScreenBuffer',
                                                                                            'SetConsoleActiveScreenBuffer',
                                                                                            'WaitForSingleObject',
                                                                                            'ReadConsoleInputA',
                                                                                            'CloseHandle',
                                                                                            'FillConsoleOutputCharacterA',
                                                                                            'FillConsoleOutputAttribute',
                                                                                            'WriteConsoleOutputCharacterA',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'NtQuerySystemInformation'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 88,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1240,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/65194217ec194e315292c3640d4949bb8351126e78b0b753f040acc9a4ae59a8'},
 '651e0b5e530e8058d27b7784f89c7839476c5342b0ae3abf85981b6c2d0f4080': {'AddressOfEntryPoint': 337664,
                                                                      'DebugRVA': 5920,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 413696,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceEvent',
                                                                                      'ActionQueue.dll': 'GenerateActionQueue',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'HeapAlloc',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'SETUPAPI.dll': 'pSetupIsUserAdmin',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'UNATTEND.DLL': 'UnattendFindAnswerFileWithResults',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects',
                                                                                      'WDSCORE.dll': 'WdsTerminate',
                                                                                      'msvcrt.dll': '_vsnwprintf',
                                                                                      'ntdll.dll': 'NtSetInformationFile',
                                                                                      'ole32.dll': 'CoTaskMemFree',
                                                                                      'unbcl.dll': '??1ArgumentOutOfRangeException@UnBCL@@UEAA@XZ'},
                                                                      'ImportedFunctions': ['GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegDeleteValueW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegCloseKey',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'RegSetValueExW',
                                                                                            'CloseServiceHandle',
                                                                                            'EnumDependentServicesW',
                                                                                            'OpenServiceW',
                                                                                            'NotifyServiceStatusChangeW',
                                                                                            'QueryServiceStatus',
                                                                                            'ControlService',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegEnumValueW',
                                                                                            'RegFlushKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'ControlTraceW',
                                                                                            'EnableTrace',
                                                                                            'RegSetKeyValueW',
                                                                                            'StartTraceW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'TraceEvent',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'DeviceIoControl',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'CopyFileExW',
                                                                                            'LoadLibraryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SleepEx',
                                                                                            'CreateProcessW',
                                                                                            'SetErrorMode',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'SetLastError',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'CompareStringW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateThread',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'GetLocalTime',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'GetVersionExW',
                                                                                            'FormatMessageW',
                                                                                            'Sleep',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadExecutionState',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CharPrevW',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'DestroyWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'ShutdownBlockReasonCreate',
                                                                                            'TranslateMessage',
                                                                                            'EnableWindow',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'ShutdownBlockReasonDestroy',
                                                                                            'ShowWindow',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CreateDialogParamW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SendMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'wcsrchr',
                                                                                            '_vscwprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'towlower',
                                                                                            'memmove_s',
                                                                                            'calloc',
                                                                                            '?name@type_info@@QEBAPEBDXZ',
                                                                                            'wcstol',
                                                                                            '_purecall',
                                                                                            'wcscmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            '__RTDynamicCast',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_vsnprintf',
                                                                                            '_wcsicmp',
                                                                                            'exit',
                                                                                            '_vsnwprintf',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtSetInformationFile',
                                                                                            'ProcessActionQueue',
                                                                                            'GenerateActionQueue',
                                                                                            'UuidFromStringW',
                                                                                            'UnattendCtxReplaceMatchedNodesWithText',
                                                                                            'UnattendAddResults',
                                                                                            'UnattendCtxBeginModify',
                                                                                            'UnattendCtxSerializeSettingsStream',
                                                                                            'UnattendMarkPassUsedInCtx',
                                                                                            'UnattendCtxSerialize',
                                                                                            'UnattendFreeNode',
                                                                                            'UnattendCtxCleanup',
                                                                                            'UnattendCtxCommitModify',
                                                                                            'UnattendCtxOpenNode',
                                                                                            'UnattendCtxDeserializeWithResults',
                                                                                            'UnattendFreeResults',
                                                                                            'UnattendCtxCancelModify',
                                                                                            'UnattendFindAnswerFileWithResults',
                                                                                            '??3Object@UnBCL@@SAXPEAX@Z',
                                                                                            '??2Object@UnBCL@@SAPEAX_K@Z',
                                                                                            '?CompareTo@Object@UnBCL@@UEBAHPEBV12@@Z',
                                                                                            '?GetObjectID@Object@UnBCL@@UEBAIXZ',
                                                                                            '?ToString@Object@UnBCL@@UEBAPEAVString@2@XZ',
                                                                                            '?GetType@Object@UnBCL@@UEBAPEAVType@2@XZ',
                                                                                            '?GetHashCode@Object@UnBCL@@UEBAHXZ',
                                                                                            '?Clone@?$ArrayList@PEAVString@UnBCL@@@UnBCL@@UEBAPEAVObject@2@XZ',
                                                                                            '?Equals@?$ArrayList@PEAVString@UnBCL@@@UnBCL@@UEBAHPEBVObject@2@@Z',
                                                                                            '??0?$ArrayList@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ',
                                                                                            '?get_Length@String@UnBCL@@QEBAHXZ',
                                                                                            '?get_P@?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@2@XZ',
                                                                                            '??C?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@1@XZ',
                                                                                            '?get_CString@String@UnBCL@@QEBAPEBGXZ',
                                                                                            '?Format@String@UnBCL@@SAPEAV12@PEBGZZ',
                                                                                            '??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@PEAVString@1@@Z',
                                                                                            '??1?$SmartPtr@VString@UnBCL@@@UnBCL@@UEAA@XZ',
                                                                                            '??1?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ',
                                                                                            '?get_P@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@2@XZ',
                                                                                            '??0StringBuilder@UnBCL@@QEAA@XZ',
                                                                                            '??1StringBuilder@UnBCL@@UEAA@XZ',
                                                                                            '?ToString@StringBuilder@UnBCL@@UEBAPEAVString@2@XZ',
                                                                                            '?Append@StringBuilder@UnBCL@@QEAAPEAV12@PEBG@Z',
                                                                                            '??0?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@PEAVString@UnBCL@@@1@@Z',
                                                                                            '?get_Item@XmlNodeList@UnBCL@@QEAAPEAVXmlNode@2@H@Z',
                                                                                            '?get_Count@XmlNodeList@UnBCL@@QEAAHXZ',
                                                                                            '??0ArgumentOutOfRangeException@UnBCL@@QEAA@PEBG@Z',
                                                                                            '??0?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAA@HH@Z',
                                                                                            '?SelectSingleNode@XmlNode@UnBCL@@QEAAPEAV12@PEAVString@2@@Z',
                                                                                            '?SelectNodes@XmlNode@UnBCL@@QEAAPEAVXmlNodeList@2@PEAVString@2@@Z',
                                                                                            '?get_Value@XmlNode@UnBCL@@QEAAPEAVString@2@XZ',
                                                                                            '?get_Attributes@XmlNode@UnBCL@@QEAAPEAVXmlAttributeCollection@2@XZ',
                                                                                            '?Exists@Directory@UnBCL@@SAHPEBVString@2@@Z',
                                                                                            '?MemAllocFailed@Allocator@UnBCL@@SAHXZ',
                                                                                            '??C?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@1@XZ',
                                                                                            '??0ArgumentException@UnBCL@@QEAA@PEBG@Z',
                                                                                            '?SetMessage@Exception@UnBCL@@MEAAXPEAVString@2@@Z',
                                                                                            '?set_HResult@Exception@UnBCL@@MEAAXJ@Z',
                                                                                            '?get_HResult@Exception@UnBCL@@UEBAJXZ',
                                                                                            '?GetBaseException@Exception@UnBCL@@UEBAPEBV12@XZ',
                                                                                            '?AddStackTrace@Exception@UnBCL@@QEAAXPEBD@Z',
                                                                                            '?GetStackTrace@Exception@UnBCL@@QEBAPEAVString@2@XZ',
                                                                                            '?set_Source@Exception@UnBCL@@UEAAXPEBVString@2@@Z',
                                                                                            '?get_Source@Exception@UnBCL@@UEBAPEBVString@2@XZ',
                                                                                            '?get_Message@Exception@UnBCL@@UEBAPEBVString@2@XZ',
                                                                                            '?get_InnerException@Exception@UnBCL@@UEBAPEBV12@XZ',
                                                                                            '?ToString@Exception@UnBCL@@UEBAPEAVString@2@XZ',
                                                                                            '?CompareTo@String@UnBCL@@UEBAHPEBVObject@2@@Z',
                                                                                            '?Clone@String@UnBCL@@UEBAPEAVObject@2@XZ',
                                                                                            '?ToString@String@UnBCL@@UEBAPEAV12@XZ',
                                                                                            '?GetHashCode@String@UnBCL@@UEBAHXZ',
                                                                                            '?Equals@String@UnBCL@@UEBAHPEBVObject@2@@Z',
                                                                                            '??0String@UnBCL@@QEAA@PEBG@Z',
                                                                                            '?SetLiteralStorage@_@UnBCL@@YAXPEAPEBVString@2@PEBG@Z',
                                                                                            '??0ArgumentNullException@UnBCL@@QEAA@PEBG@Z',
                                                                                            '?Load@XmlDocument@UnBCL@@QEAAXPEAVString@2@@Z',
                                                                                            '??1XmlDocument@UnBCL@@UEAA@XZ',
                                                                                            '??0XmlDocument@UnBCL@@QEAA@XZ',
                                                                                            '?DecRef@Object@UnBCL@@QEAAHXZ',
                                                                                            '?AddRef@Object@UnBCL@@QEAAXXZ',
                                                                                            '?Clone@Object@UnBCL@@UEBAPEAV12@XZ',
                                                                                            '?Equals@Object@UnBCL@@UEBAHPEBV12@@Z',
                                                                                            '??1Object@UnBCL@@UEAA@XZ',
                                                                                            '??0Object@UnBCL@@QEAA@XZ',
                                                                                            '?get_Item@XmlAttributeCollection@UnBCL@@QEAAPEAVXmlAttribute@2@PEAVString@2@@Z',
                                                                                            '?Exists@File@UnBCL@@SAHPEBVString@2@@Z',
                                                                                            '??0NotSupportedException@UnBCL@@QEAA@PEBG@Z',
                                                                                            '??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@@Z',
                                                                                            '??0InvalidOperationException@UnBCL@@QEAA@PEBG@Z',
                                                                                            '??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@PEAVException@1@@Z',
                                                                                            '??1NotSupportedException@UnBCL@@UEAA@XZ',
                                                                                            '??1InvalidOperationException@UnBCL@@UEAA@XZ',
                                                                                            '?Append@StringBuilder@UnBCL@@QEAAPEAV12@PEBVString@2@@Z',
                                                                                            '??1ArgumentException@UnBCL@@UEAA@XZ',
                                                                                            '??1ArgumentNullException@UnBCL@@UEAA@XZ',
                                                                                            '??1MutableString@UnBCL@@UEAA@XZ',
                                                                                            '?MakeLower@MutableString@UnBCL@@QEAAXXZ',
                                                                                            '?Append@MutableString@UnBCL@@QEAAXPEBG@Z',
                                                                                            '??0MutableString@UnBCL@@QEAA@PEBG@Z',
                                                                                            '??0MutableString@UnBCL@@QEAA@XZ',
                                                                                            '?GetFiles@Directory@UnBCL@@SAPEAV?$Array@PEAVString@UnBCL@@@2@PEBVString@2@0H@Z',
                                                                                            '?Delete@Directory@UnBCL@@SAXPEBVString@2@H@Z',
                                                                                            '??D?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAAEAVString@1@XZ',
                                                                                            '??4?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0InvalidCastException@UnBCL@@QEAA@XZ',
                                                                                            '?SanitizeTypeName@SerializationStream@UnBCL@@SAPEAVString@2@AEBV32@@Z',
                                                                                            '?GetCallingModule@SerializationStream@UnBCL@@SAPEAUHINSTANCE__@@XZ',
                                                                                            '?CanRegister@SerializationStream@UnBCL@@SAHXZ',
                                                                                            '?UnregisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@@Z',
                                                                                            '?RegisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z',
                                                                                            '??5SerializationStream@UnBCL@@QEAAAEAV01@AEAH@Z',
                                                                                            '??5SerializationStream@UnBCL@@QEAAAEAV01@AEAK@Z',
                                                                                            '??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAVString@1@@Z',
                                                                                            '??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAUISerializable@1@@Z',
                                                                                            '??6SerializationStream@UnBCL@@QEAAAEAV01@H@Z',
                                                                                            '??6SerializationStream@UnBCL@@QEAAAEAV01@K@Z',
                                                                                            '??6SerializationStream@UnBCL@@QEAAAEAV01@PEBVString@1@@Z',
                                                                                            '??6SerializationStream@UnBCL@@QEAAAEAV01@PEBUISerializable@1@@Z',
                                                                                            '?ReadBytes@SerializationStream@UnBCL@@QEAAXPEAEH@Z',
                                                                                            '?WriteBytes@SerializationStream@UnBCL@@QEAAXPEBEH@Z',
                                                                                            '??1Exception@UnBCL@@UEAA@XZ',
                                                                                            '??0Exception@UnBCL@@QEAA@PEBG@Z',
                                                                                            '?EnqueueSbRegistration@SbRegistrationList@UnBCL@@SAXPEBDHPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z',
                                                                                            '?FromASCII@String@UnBCL@@SAPEAV12@PEBD@Z',
                                                                                            '?Concat@String@UnBCL@@SAPEAV12@PEBG0@Z',
                                                                                            '?Substring@String@UnBCL@@QEBAPEAV12@HH@Z',
                                                                                            '?LastIndexOf@String@UnBCL@@QEBAHG@Z',
                                                                                            '?EndsWith@String@UnBCL@@QEBAHPEBGH@Z',
                                                                                            '?StartsWith@String@UnBCL@@QEBAHPEBGH@Z',
                                                                                            '?CompareTo@String@UnBCL@@QEBAHPEBGH@Z',
                                                                                            '??0String@UnBCL@@QEAA@AEBV01@@Z',
                                                                                            '?get_Win32ErrorCode@Win32Exception@UnBCL@@QEBAKXZ',
                                                                                            '??C?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@1@XZ',
                                                                                            '??1?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ',
                                                                                            '??0?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$Array@PEAVString@UnBCL@@@1@@Z',
                                                                                            '??2Object@UnBCL@@SAPEAX_KI@Z',
                                                                                            '??0Object@UnBCL@@QEAA@AEBV01@@Z',
                                                                                            '?Delete@File@UnBCL@@SAXPEBVString@2@@Z',
                                                                                            '??1InvalidCastException@UnBCL@@UEAA@XZ',
                                                                                            '??0?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ',
                                                                                            '??0?$ICollection@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ',
                                                                                            '??0ISerializable@UnBCL@@QEAA@XZ',
                                                                                            '??1ISerializable@UnBCL@@UEAA@XZ',
                                                                                            '?get_ChildNodes@XmlNode@UnBCL@@QEAAPEAVXmlNodeList@2@XZ',
                                                                                            '?get_Name@XmlNode@UnBCL@@QEAAPEAVString@2@XZ',
                                                                                            '?Steal@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAPEAVString@2@XZ',
                                                                                            '?get_Count@XmlAttributeCollection@UnBCL@@QEAAHXZ',
                                                                                            '?Concat@String@UnBCL@@SAPEAV12@PEBG@Z',
                                                                                            '?Substring@String@UnBCL@@QEBAPEAV12@H@Z',
                                                                                            '?IndexOf@String@UnBCL@@QEBAHG@Z',
                                                                                            '??0String@UnBCL@@QEAA@PEBGHH@Z',
                                                                                            '??0MutableString@UnBCL@@QEAA@PEBGHH@Z',
                                                                                            '?Add@MultiSz@UnBCL@@QEAAXPEBG@Z',
                                                                                            '?get_Buffer@MultiSz@UnBCL@@QEBAPEBGXZ',
                                                                                            '??0MultiSz@UnBCL@@QEAA@XZ',
                                                                                            '?Assign@?$SmartPtr@VString@UnBCL@@@UnBCL@@AEAAXPEAVString@2@@Z',
                                                                                            '??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@XZ',
                                                                                            '?IndexOf@String@UnBCL@@QEBAHPEBGH@Z',
                                                                                            '?get_Chars@String@UnBCL@@QEBAAEBGH@Z',
                                                                                            '?CompareTo@String@UnBCL@@QEBAHPEBG@Z',
                                                                                            '?Clone@?$Array@E@UnBCL@@UEBAPEAVObject@2@XZ',
                                                                                            '?Equals@?$Array@E@UnBCL@@UEBAHPEBVObject@2@@Z',
                                                                                            '??0?$Array@E@UnBCL@@QEAA@PEBU?$ICollection@E@1@@Z',
                                                                                            '??_D?$Array@E@UnBCL@@QEAAXXZ',
                                                                                            '??0?$IList@E@UnBCL@@QEAA@XZ',
                                                                                            '??0?$ICollection@E@UnBCL@@QEAA@XZ',
                                                                                            '??1?$IList@E@UnBCL@@UEAA@XZ',
                                                                                            '??1?$ICollection@E@UnBCL@@UEAA@XZ',
                                                                                            '??_DMultiSz@UnBCL@@QEAAXXZ',
                                                                                            '?MakeTrim@MutableString@UnBCL@@QEAAXPEBG@Z',
                                                                                            '??_D?$ArrayList@PEAVString@UnBCL@@@UnBCL@@QEAAXXZ',
                                                                                            '??1String@UnBCL@@UEAA@XZ',
                                                                                            '??_D?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAAXXZ',
                                                                                            '??1ArgumentOutOfRangeException@UnBCL@@UEAA@XZ',
                                                                                            'SysFreeString',
                                                                                            'WdsInitialize',
                                                                                            'WdsSetupLogMessageW',
                                                                                            'ConstructPartialMsgVW',
                                                                                            'CurrentIP',
                                                                                            'WdsTerminate',
                                                                                            'StrStrIW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'pSetupDoesUserHavePrivilege',
                                                                                            'pSetupIsUserAdmin',
                                                                                            'InitCommonControlsEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 349,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 28392,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14336,
                                                                                       '.idata\x00\x00': 17920,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 375808},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/651e0b5e530e8058d27b7784f89c7839476c5342b0ae3abf85981b6c2d0f4080'},
 '65219ffa2bf89071b495af984ac20e2c37cffe3de2cb9c72ba40c1b8e2ced9dc': {'AddressOfEntryPoint': 14816,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'NETAPI32.dll': 'NetServerGetInfo',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['CharToOemW',
                                                                                            'LoadStringW',
                                                                                            'NetServerEnum',
                                                                                            'NetServerTransportEnum',
                                                                                            'NetApiBufferFree',
                                                                                            'NetServerGetInfo',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'CreateFileW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'HeapSetInformation',
                                                                                            'ReadConsoleInputW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'LocalAlloc',
                                                                                            'GetOEMCP',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'fwprintf',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            '_iob',
                                                                                            'wprintf',
                                                                                            'printf',
                                                                                            'memmove',
                                                                                            'wcstoul',
                                                                                            '_wcsnicmp',
                                                                                            'wcstol',
                                                                                            '_wcslwr',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'vfwprintf',
                                                                                            'wcschr',
                                                                                            'malloc',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            '_wcsupr',
                                                                                            '_wcsicmp',
                                                                                            'swprintf_s',
                                                                                            'free',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/65219ffa2bf89071b495af984ac20e2c37cffe3de2cb9c72ba40c1b8e2ced9dc'},
 '65488a3c53a3c1f5569beab9cd3fe1683040dc9595bf698a1962e02694f4ee8c': {'AddressOfEntryPoint': 80112,
                                                                      'DebugRVA': 4352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetConsoleCtrlHandler',
                                                                                      'SETUPAPI.dll': 'pGetDriverPackageHash',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'IsDebuggerPresent',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CompareFileTime',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'MapViewOfFile',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCreateKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringOrdinal',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ReleaseMutex',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetWindowsDirectoryW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'IsValidSid',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwGetTraceEnableLevel'},
                                                                      'ImportedFunctions': ['memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            'swscanf',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcsrchr',
                                                                                            'wcschr',
                                                                                            '_resetstkoflw',
                                                                                            'memmove',
                                                                                            '_vsnprintf',
                                                                                            'toupper',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'RtlFormatCurrentUserKeyPath',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'NtClose',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtOpenKey',
                                                                                            'NtCreateKey',
                                                                                            'NtQueryKey',
                                                                                            'NtQueryValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'RtlGetVersion',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtSetInformationFile',
                                                                                            'NtQuerySystemInformation',
                                                                                            'EtwEventWrite',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmStartSession',
                                                                                            'RtlUpcaseUnicodeString',
                                                                                            'DbgPrintEx',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'EtwEventRegister',
                                                                                            'NtQueryInformationProcess',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetFileAttributesExW',
                                                                                            'CompareFileTime',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'HeapSetInformation',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenProcess',
                                                                                            'ExitProcess',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'CompareStringOrdinal',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'Sleep',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'ReleaseMutex',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'pSetupDiEnumSelectedDrivers',
                                                                                            'SetupVerifyInfFileW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiGetClassInstallParamsW',
                                                                                            'SetupDiRestartDevices',
                                                                                            'SetupDiGetActualSectionToInstallW',
                                                                                            'SetupWriteTextLogError',
                                                                                            'SetupSetFileQueueFlags',
                                                                                            'SetupDiGetClassPropertyW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'pSetupStringFromGuid',
                                                                                            'SetupGetInfDriverStoreLocationW',
                                                                                            'pSetupDiGetStrongNameForDriverNode',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'pSetupSetGlobalFlags',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'pSetupDiCrimsonLogDeviceInstall',
                                                                                            'SetupDiGetSelectedDriverW',
                                                                                            'SetupDiReportPnPDeviceProblem',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupScanFileQueueW',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupCloseFileQueue',
                                                                                            'SetupDiSetDriverInstallParamsW',
                                                                                            'SetupDiGetDriverInstallParamsW',
                                                                                            'SetupUninstallNewlyCopiedInfs',
                                                                                            'pSetupGetGlobalFlags',
                                                                                            'SetupDiSetClassPropertyW',
                                                                                            'SetupPromptReboot',
                                                                                            'SetupOpenFileQueue',
                                                                                            'SetupGetFileQueueFlags',
                                                                                            'pSetupDoLastKnownGoodBackup',
                                                                                            'SetupCommitFileQueueW',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupInitDefaultQueueCallbackEx',
                                                                                            'SetupDiInstallClassW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupSetThreadLogToken',
                                                                                            'pSetupDiBuildInfoDataFromStrongName',
                                                                                            'SetupDiGetDevicePropertyW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupGetNonInteractiveMode',
                                                                                            'SetupGetThreadLogToken',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiReportDeviceInstallError',
                                                                                            'SetupFindFirstLineW',
                                                                                            'pSetupUninstallCatalog',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupDiGetActualModelsSectionW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiRemoveDevice',
                                                                                            'pSetupInstallCatalog',
                                                                                            'SetupDiSetDevicePropertyW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupWriteTextLog',
                                                                                            'pSetupSetDriverPackageRestorePoint',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'pSetupValidateDriverPackage',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupFindNextLine',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'pGetDriverPackageHash',
                                                                                            'RegEnumValueW',
                                                                                            'GetSystemInfo',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SleepEx',
                                                                                            'MoveFileExW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'lstrcmpW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'CreateHardLinkW',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileSize',
                                                                                            'GetLocalTime',
                                                                                            'WriteFile',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LocalAlloc',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCommandLineW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetThreadLocale',
                                                                                            'LCMapStringW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'CompareStringW',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'RaiseException',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'LocalFree',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'GetTokenInformation',
                                                                                            'DuplicateTokenEx',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'IsValidSid'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 229,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 8192,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 80896},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/65488a3c53a3c1f5569beab9cd3fe1683040dc9595bf698a1962e02694f4ee8c'},
 '664a99900a6acdeb453ecb8de9d405468da0705b95ab226df933870d66b5edb8': {'AddressOfEntryPoint': 4273296,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4377780,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'advapi32.dll': 'AccessCheck',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'gdi32.dll': 'AbortDoc',
                                                                                      'kernel32.dll': 'SetErrorMode',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ole32.dll': 'IsEqualGUID',
                                                                                      'oleaut32.dll': 'SysAllocString',
                                                                                      'shell32.dll': 'SHGetDesktopFolder',
                                                                                      'user32.dll': 'MonitorFromWindow',
                                                                                      'version.dll': 'GetFileVersionInfoW',
                                                                                      'wininet.dll': 'InternetQueryOptionW',
                                                                                      'winspool.drv': 'GetDefaultPrinterW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'lstrlenW',
                                                                                            'VirtualQuery',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersion',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'IsValidLocale',
                                                                                            'SetThreadLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetConsoleCP',
                                                                                            'GetACP',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'SwitchToThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'ReadFile',
                                                                                            'GetFileType',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'RaiseException',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'SetClassLongW',
                                                                                            'GetClassLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'CreateWindowExW',
                                                                                            'WindowFromPoint',
                                                                                            'WindowFromDC',
                                                                                            'WaitMessage',
                                                                                            'ValidateRect',
                                                                                            'UpdateWindow',
                                                                                            'UnregisterClassW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'TranslateMessage',
                                                                                            'TranslateMDISysAccel',
                                                                                            'TrackPopupMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'ShowWindow',
                                                                                            'ShowScrollBar',
                                                                                            'ShowOwnedPopups',
                                                                                            'ShowCaret',
                                                                                            'SetWindowRgn',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowPlacement',
                                                                                            'SetTimer',
                                                                                            'SetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'SetScrollInfo',
                                                                                            'SetRect',
                                                                                            'SetPropW',
                                                                                            'SetParent',
                                                                                            'SetMenuItemInfoW',
                                                                                            'SetMenu',
                                                                                            'SetKeyboardState',
                                                                                            'SetForegroundWindow',
                                                                                            'SetFocus',
                                                                                            'SetCursorPos',
                                                                                            'SetCursor',
                                                                                            'SetClipboardData',
                                                                                            'SetCaretPos',
                                                                                            'SetCapture',
                                                                                            'SetActiveWindow',
                                                                                            'SendMessageA',
                                                                                            'SendMessageW',
                                                                                            'ScrollWindowEx',
                                                                                            'ScrollWindow',
                                                                                            'ScreenToClient',
                                                                                            'RemovePropW',
                                                                                            'RemoveMenu',
                                                                                            'ReleaseDC',
                                                                                            'ReleaseCapture',
                                                                                            'RegisterWindowMessageW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'RegisterClassW',
                                                                                            'RedrawWindow',
                                                                                            'PtInRect',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageW',
                                                                                            'PeekMessageA',
                                                                                            'PeekMessageW',
                                                                                            'OpenClipboard',
                                                                                            'OffsetRect',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MoveWindow',
                                                                                            'MessageBoxIndirectW',
                                                                                            'MessageBoxW',
                                                                                            'MessageBeep',
                                                                                            'MapWindowPoints',
                                                                                            'MapVirtualKeyW',
                                                                                            'LoadStringW',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'KillTimer',
                                                                                            'IsZoomed',
                                                                                            'IsWindowVisible',
                                                                                            'IsWindowUnicode',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindow',
                                                                                            'IsRectEmpty',
                                                                                            'IsIconic',
                                                                                            'IsDialogMessageA',
                                                                                            'IsDialogMessageW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'IsChild',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'InvalidateRect',
                                                                                            'InsertMenuItemW',
                                                                                            'InsertMenuW',
                                                                                            'InflateRect',
                                                                                            'HideCaret',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowDC',
                                                                                            'GetTopWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSystemMenu',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'GetSubMenu',
                                                                                            'GetScrollRange',
                                                                                            'GetScrollPos',
                                                                                            'GetScrollInfo',
                                                                                            'GetScrollBarInfo',
                                                                                            'GetPropW',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetMenuStringW',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemRect',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenu',
                                                                                            'GetLastActivePopup',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetKeyState',
                                                                                            'GetKeyNameTextW',
                                                                                            'GetIconInfo',
                                                                                            'GetForegroundWindow',
                                                                                            'GetFocus',
                                                                                            'GetDoubleClickTime',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetDesktopWindow',
                                                                                            'GetDCEx',
                                                                                            'GetDC',
                                                                                            'GetCursorPos',
                                                                                            'GetCursor',
                                                                                            'GetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'GetClassNameW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'GetCaretPos',
                                                                                            'GetCapture',
                                                                                            'GetActiveWindow',
                                                                                            'FrameRect',
                                                                                            'FindWindowExW',
                                                                                            'FindWindowW',
                                                                                            'FillRect',
                                                                                            'ExitWindowsEx',
                                                                                            'EnumWindows',
                                                                                            'EnumThreadWindows',
                                                                                            'EnumClipboardFormats',
                                                                                            'EnumChildWindows',
                                                                                            'EndPaint',
                                                                                            'EndMenu',
                                                                                            'EnableWindow',
                                                                                            'EnableScrollBar',
                                                                                            'EnableMenuItem',
                                                                                            'EmptyClipboard',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'DrawMenuBar',
                                                                                            'DrawIconEx',
                                                                                            'DrawIcon',
                                                                                            'DrawFrameControl',
                                                                                            'DrawFocusRect',
                                                                                            'DrawEdge',
                                                                                            'DispatchMessageA',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'DestroyMenu',
                                                                                            'DestroyIcon',
                                                                                            'DestroyCursor',
                                                                                            'DestroyCaret',
                                                                                            'DeleteMenu',
                                                                                            'DefWindowProcW',
                                                                                            'DefMDIChildProcW',
                                                                                            'DefFrameProcW',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateMenu',
                                                                                            'CreateIconIndirect',
                                                                                            'CreateIcon',
                                                                                            'CreateCaret',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'CountClipboardFormats',
                                                                                            'CopyRect',
                                                                                            'CopyImage',
                                                                                            'CopyIcon',
                                                                                            'CloseClipboard',
                                                                                            'ClientToScreen',
                                                                                            'ChildWindowFromPoint',
                                                                                            'CheckMenuItem',
                                                                                            'CharUpperBuffW',
                                                                                            'CharUpperW',
                                                                                            'CharNextW',
                                                                                            'CharLowerBuffW',
                                                                                            'CharLowerW',
                                                                                            'CallWindowProcW',
                                                                                            'CallNextHookEx',
                                                                                            'BeginPaint',
                                                                                            'CharToOemBuffA',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'UnrealizeObject',
                                                                                            'StretchDIBits',
                                                                                            'StretchBlt',
                                                                                            'StartPage',
                                                                                            'StartDocW',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetWinMetaFileBits',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'SetTextColor',
                                                                                            'SetStretchBltMode',
                                                                                            'SetROP2',
                                                                                            'SetPixelV',
                                                                                            'SetPixel',
                                                                                            'SetMapMode',
                                                                                            'SetEnhMetaFileBits',
                                                                                            'SetDIBits',
                                                                                            'SetDIBColorTable',
                                                                                            'SetBrushOrgEx',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SetAbortProc',
                                                                                            'SelectPalette',
                                                                                            'SelectObject',
                                                                                            'SelectClipRgn',
                                                                                            'SaveDC',
                                                                                            'RoundRect',
                                                                                            'RestoreDC',
                                                                                            'ResizePalette',
                                                                                            'Rectangle',
                                                                                            'RectVisible',
                                                                                            'RealizePalette',
                                                                                            'Polyline',
                                                                                            'Polygon',
                                                                                            'PolyPolyline',
                                                                                            'PolyBezierTo',
                                                                                            'PolyBezier',
                                                                                            'PlayEnhMetaFile',
                                                                                            'Pie',
                                                                                            'PatBlt',
                                                                                            'MoveToEx',
                                                                                            'MaskBlt',
                                                                                            'LineTo',
                                                                                            'LPtoDP',
                                                                                            'IntersectClipRect',
                                                                                            'GetWindowOrgEx',
                                                                                            'GetWinMetaFileBits',
                                                                                            'GetViewportOrgEx',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPointW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'GetStockObject',
                                                                                            'GetRgnBox',
                                                                                            'GetPixel',
                                                                                            'GetPaletteEntries',
                                                                                            'GetObjectW',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'GetEnhMetaFilePaletteEntries',
                                                                                            'GetEnhMetaFileHeader',
                                                                                            'GetEnhMetaFileDescriptionW',
                                                                                            'GetEnhMetaFileBits',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDIBits',
                                                                                            'GetDIBColorTable',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetClipBox',
                                                                                            'GetBrushOrgEx',
                                                                                            'GetBitmapDimensionEx',
                                                                                            'GetBitmapBits',
                                                                                            'GdiFlush',
                                                                                            'FrameRgn',
                                                                                            'ExtTextOutW',
                                                                                            'ExtFloodFill',
                                                                                            'ExtCreatePen',
                                                                                            'ExcludeClipRect',
                                                                                            'EnumFontsW',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'EndPage',
                                                                                            'EndDoc',
                                                                                            'Ellipse',
                                                                                            'DeleteObject',
                                                                                            'DeleteEnhMetaFile',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePenIndirect',
                                                                                            'CreatePen',
                                                                                            'CreatePalette',
                                                                                            'CreateICW',
                                                                                            'CreateHalftonePalette',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateDIBSection',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateBitmap',
                                                                                            'CopyEnhMetaFileW',
                                                                                            'CombineRgn',
                                                                                            'Chord',
                                                                                            'BitBlt',
                                                                                            'ArcTo',
                                                                                            'Arc',
                                                                                            'AngleArc',
                                                                                            'AbortDoc',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'lstrcmpW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'WaitForMultipleObjects',
                                                                                            'VirtualQueryEx',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFreeEx',
                                                                                            'VirtualFree',
                                                                                            'VirtualAllocEx',
                                                                                            'VirtualAlloc',
                                                                                            'UnmapViewOfFile',
                                                                                            'TryEnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetThreadPriority',
                                                                                            'SetThreadLocale',
                                                                                            'SetLastError',
                                                                                            'SetFileTime',
                                                                                            'SetFilePointer',
                                                                                            'SetFileAttributesW',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'ResumeThread',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReleaseMutex',
                                                                                            'ReadProcessMemory',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'QueryDosDeviceW',
                                                                                            'IsDebuggerPresent',
                                                                                            'OpenProcess',
                                                                                            'MulDiv',
                                                                                            'MoveFileExW',
                                                                                            'MoveFileW',
                                                                                            'MapViewOfFile',
                                                                                            'LockResource',
                                                                                            'LocalFree',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'LocalAlloc',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'HeapAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTickCount',
                                                                                            'GetThreadPriority',
                                                                                            'GetThreadLocale',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemTimes',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeThread',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetCPInfoExW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'FreeResource',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'FindNextFileW',
                                                                                            'FindNextChangeNotification',
                                                                                            'FindFirstFileA',
                                                                                            'FindFirstFileW',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'FindCloseChangeNotification',
                                                                                            'FindClose',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'EnumSystemLocalesW',
                                                                                            'EnumResourceNamesW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'CreateMutexW',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateFileA',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CopyFileW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegSaveKeyW',
                                                                                            'RegRestoreKeyW',
                                                                                            'RegReplaceKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegFlushKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegCloseKey',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'FreeSid',
                                                                                            'DuplicateToken',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'AddAccessAllowedAce',
                                                                                            'AccessCheck',
                                                                                            'Sleep',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'CreateErrorInfo',
                                                                                            'GetErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'IsEqualGUID',
                                                                                            'InitializeFlatSB',
                                                                                            'FlatSB_SetScrollProp',
                                                                                            'FlatSB_SetScrollPos',
                                                                                            'FlatSB_SetScrollInfo',
                                                                                            'FlatSB_GetScrollPos',
                                                                                            'FlatSB_GetScrollInfo',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_GetImageInfo',
                                                                                            'ImageList_SetIconSize',
                                                                                            'ImageList_GetIconSize',
                                                                                            'ImageList_Write',
                                                                                            'ImageList_Read',
                                                                                            'ImageList_GetDragImage',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_Copy',
                                                                                            'ImageList_LoadImageW',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_DrawEx',
                                                                                            'ImageList_Replace',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_SetOverlayImage',
                                                                                            'ImageList_GetBkColor',
                                                                                            'ImageList_SetBkColor',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControls',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'MonitorFromRect',
                                                                                            'MonitorFromWindow',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ExtractIconW',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'DragAcceptFiles',
                                                                                            'InternetQueryOptionW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetDesktopFolder',
                                                                                            'GetOpenFileNameW',
                                                                                            'OpenPrinterW',
                                                                                            'EnumPrintersW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'GetDefaultPrinterW',
                                                                                            'MulDiv',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'SetErrorMode'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 652,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 6904320,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 67584,
                                                                                       '.didata\x00': 2560,
                                                                                       '.idata\x00\x00': 17920,
                                                                                       '.itext\x00\x00': 23552,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 322560,
                                                                                       '.rsrc\x00\x00\x00': 6904320,
                                                                                       '.text\x00\x00\x00': 4247552,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/664a99900a6acdeb453ecb8de9d405468da0705b95ab226df933870d66b5edb8'},
 '666a24082d02da9c08892e4c2bcbef11b8c086119476e16b6094060fef34e314': {'AddressOfEntryPoint': 11802,
                                                                      'DebugRVA': 4848,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CheckTokenMembership',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': '__p__commode'},
                                                                      'ImportedFunctions': ['TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetTempPathW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'wcscmp',
                                                                                            '_wcsicmp',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '__CxxFrameHandler',
                                                                                            '__p__commode',
                                                                                            'FreeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'RegCloseKey',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'LoadStringA',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 58,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 11776},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/666a24082d02da9c08892e4c2bcbef11b8c086119476e16b6094060fef34e314'},
 '66d594a5db3a75a3799fa62f4affa674a5a118e53a27796f1e88ea6cef5405a0': {'AddressOfEntryPoint': 5222,
                                                                      'DebugRVA': 68096,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RaiseException',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'CreateFileW',
                                                                                            'DecodePointer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'RaiseException',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 66,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 22528,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 43008},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/66d594a5db3a75a3799fa62f4affa674a5a118e53a27796f1e88ea6cef5405a0'},
 '66e9f4d03e67dbcbd9d3a13bfc45b2c11e712b677e990e8ea1b405b60a3a40b2': {'AddressOfEntryPoint': 14467,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 25800,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 26112,
                                                                                       '.text\x00\x00\x00': 28160},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/66e9f4d03e67dbcbd9d3a13bfc45b2c11e712b677e990e8ea1b405b60a3a40b2'},
 '6719c0eecd26a1f435351d8f8ebb77798126c348f8b3e1ad4f13d660240709e8': {'AddressOfEntryPoint': 295816,
                                                                      'DebugRVA': 6256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 546416,
                                                                      'ExportSize': 112,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'KERNEL32.dll': 'EncodePointer',
                                                                                      'MSVCR100.dll': '_wcslwr',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'instapi110.dll': 'GetCOMPath',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegOpenKeyW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetHandleInformation',
                                                                                            'ReadProcessMemory',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'GetFileAttributesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'DebugBreak',
                                                                                            'VirtualQuery',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateEventA',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetVersionExW',
                                                                                            'WaitForSingleObject',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Module32NextW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'LocalFree',
                                                                                            'CreateFileMappingA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetSystemInfo',
                                                                                            'ReadFile',
                                                                                            'GetUserDefaultLCID',
                                                                                            'OutputDebugStringW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateMutexW',
                                                                                            'GetSystemTime',
                                                                                            'SetFilePointer',
                                                                                            'ReleaseMutex',
                                                                                            'GetComputerNameW',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineW',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'SetErrorMode',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'AllocConsole',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'SetLastError',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'FormatMessageA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'EncodePointer',
                                                                                            '_wsystem',
                                                                                            '_wsplitpath_s',
                                                                                            'wprintf',
                                                                                            '_vsnwprintf',
                                                                                            'swscanf_s',
                                                                                            '_getch',
                                                                                            '_beginthreadex',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_purecall',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_strnicmp',
                                                                                            'wcsncpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '__iob_func',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_snwprintf_s',
                                                                                            '_clearfp',
                                                                                            '_errno',
                                                                                            '_wtoi64',
                                                                                            '_wtoi',
                                                                                            'wcstol',
                                                                                            'wcstod',
                                                                                            '_memicmp',
                                                                                            'memcmp',
                                                                                            '_wcsicmp_l',
                                                                                            '_waccess',
                                                                                            '_local_unwind',
                                                                                            'strcpy_s',
                                                                                            'strcat_s',
                                                                                            'sprintf_s',
                                                                                            '_swprintf_c',
                                                                                            'iswalpha',
                                                                                            'wcsrchr',
                                                                                            '_wcsnicmp',
                                                                                            'realloc',
                                                                                            '_vsnwprintf_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'memmove',
                                                                                            '_vsnwprintf_l',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            'memset',
                                                                                            '_wcsdup',
                                                                                            'wcsftime',
                                                                                            '_resetstkoflw',
                                                                                            '_localtime64',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_time64',
                                                                                            '_wcsicmp',
                                                                                            '_swscanf_s_l',
                                                                                            'fclose',
                                                                                            'wcsstr',
                                                                                            'wcsncmp',
                                                                                            'wcscpy_s',
                                                                                            'wcschr',
                                                                                            'wcscat_s',
                                                                                            'iswspace',
                                                                                            'iswxdigit',
                                                                                            '__C_specific_handler',
                                                                                            'memcpy',
                                                                                            '_wmakepath_s',
                                                                                            'wcsncat_s',
                                                                                            'printf',
                                                                                            'freopen',
                                                                                            '_wcslwr',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoGetMalloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'RegisterTypeLib',
                                                                                            'VariantChangeType',
                                                                                            'UnRegisterTypeLib',
                                                                                            'GetErrorInfo',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'SysStringByteLen',
                                                                                            'CharNextW',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringW',
                                                                                            'GetSQLVerSpecificRegString',
                                                                                            'GetCOMPath',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 226,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7196,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 18944,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 7680,
                                                                                       '.text\x00\x00\x00': 542720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6719c0eecd26a1f435351d8f8ebb77798126c348f8b3e1ad4f13d660240709e8'},
 '676af1833ca80f220ea653237521ed333ba8c358a2d46b9c6887472dea1afd89': {'AddressOfEntryPoint': 188842,
                                                                      'DebugRVA': 422864,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 307200,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'LoadLibraryExA',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'GetUserNameW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'DecryptFileW',
                                                                                            'CreateWellKnownSid',
                                                                                            'InitializeAcl',
                                                                                            'SetEntriesInAclW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetTokenInformation',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'SystemFunction036',
                                                                                            'QueryServiceConfigW',
                                                                                            'GetMessageW',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetCursorPos',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromProgID',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'CompareStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'TlsAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'CreateProcessW',
                                                                                            'GetVersionExW',
                                                                                            'VerSetConditionMask',
                                                                                            'FreeLibrary',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetDateFormatW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetStringTypeW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'DuplicateHandle',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'OpenProcess',
                                                                                            'GetProcessId',
                                                                                            'WaitForSingleObject',
                                                                                            'ConnectNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'CreateNamedPipeW',
                                                                                            'CreateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'ResetEvent',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CompareStringA',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetThreadExecutionState',
                                                                                            'CopyFileExW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateMutexW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetThreadLocale',
                                                                                            'IsValidCodePage',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'TlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'DecodePointer',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetFileSizeEx',
                                                                                            'CopyFileW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FindFirstFileExW',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'RtlUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadLibraryExA',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 237,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 171576,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 125952,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 172032,
                                                                                       '.text\x00\x00\x00': 302080,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.wixburn': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/676af1833ca80f220ea653237521ed333ba8c358a2d46b9c6887472dea1afd89'},
 '6784269501e37eeabeef9ef6bb0f0c690ac90e904e9b901c540cfaa7a4dbced7': {'AddressOfEntryPoint': 19920,
                                                                      'DebugRVA': 4576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'OLEAUT32.dll': 'LoadTypeLib',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameW',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'msvcrt.dll': '_except_handler4_common'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseThreadpoolTimer',
                                                                                            'WaitForThreadpoolTimerCallbacks',
                                                                                            'SetThreadpoolTimer',
                                                                                            'CreateThreadpoolTimer',
                                                                                            'GetCurrentThread',
                                                                                            'DuplicateHandle',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LoadLibraryExA',
                                                                                            'FreeLibrary',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'TranslateMessage',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'GetMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'DispatchMessageW',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_initterm',
                                                                                            'memset',
                                                                                            'wcscat_s',
                                                                                            'free',
                                                                                            'wcscpy_s',
                                                                                            'wcsncpy_s',
                                                                                            '_purecall',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_wcmdln',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'PathFindFileNameW',
                                                                                            'SysAllocString',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysFreeString',
                                                                                            'RegisterTypeLib',
                                                                                            'SysStringLen',
                                                                                            'LoadTypeLib'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6784269501e37eeabeef9ef6bb0f0c690ac90e904e9b901c540cfaa7a4dbced7'},
 '67f0e5f712ca3defd5657016258e959e199cd779892dd2ba499327d0112903e1': {'AddressOfEntryPoint': 83022,
                                                                      'DebugRVA': 82808,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1952,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/67f0e5f712ca3defd5657016258e959e199cd779892dd2ba499327d0112903e1'},
 '67fd29c6ea707b857317706ba8f517e5379cff20e48757098e8c338299d4ecbc': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 624820,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 6891409244160,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 134656,
                                                                                       '.reloc\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 470016,
                                                                                       '.xdata\x00\x00': 16384},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/67fd29c6ea707b857317706ba8f517e5379cff20e48757098e8c338299d4ecbc'},
 '680b43e253d5a0ee06bd47d05a16c98906084f7d876a4e5ca3db95c64bbabafd': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/680b43e253d5a0ee06bd47d05a16c98906084f7d876a4e5ca3db95c64bbabafd'},
 '681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064': {'AddressOfEntryPoint': 18251,
                                                                      'DebugRVA': 5360,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'CRYPT32.dll': 'CryptHashPublicKeyInfo',
                                                                                      'GDI32.dll': 'StretchBlt',
                                                                                      'KERNEL32.dll': 'FlushFileBuffers',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'HttpSendRequestW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminCalcHashFromFileHandle',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['CopyFileExW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateMutexW',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'ResetEvent',
                                                                                            'SetEndOfFile',
                                                                                            'DeleteFileW',
                                                                                            'GetThreadLocale',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetLocalTime',
                                                                                            'SetFilePointer',
                                                                                            'GetComputerNameW',
                                                                                            'CreateFileA',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleA',
                                                                                            'CopyFileW',
                                                                                            'MoveFileExW',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileSizeEx',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'RaiseException',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'FreeLibrary',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStringTypeA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CompareStringW',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'ReleaseMutex',
                                                                                            'GetVersionExW',
                                                                                            'GetProcessId',
                                                                                            'ReadFile',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'lstrlenW',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenProcess',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'lstrlenA',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetDateFormatW',
                                                                                            'GetSystemTime',
                                                                                            'LoadLibraryW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'SetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetThreadExecutionState',
                                                                                            'FlushFileBuffers',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'UuidCreate',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetConnectW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetErrorDlg',
                                                                                            'InternetReadFile',
                                                                                            'HttpSendRequestW',
                                                                                            'WinVerifyTrust',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CryptHashPublicKeyInfo',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'CloseServiceHandle',
                                                                                            'ChangeServiceConfigW',
                                                                                            'DecryptFileW',
                                                                                            'SetEntriesInAclW',
                                                                                            'InitializeAcl',
                                                                                            'CreateWellKnownSid',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'GetUserNameW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'QueryServiceConfigW',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'LoadBitmapW',
                                                                                            'IsWindow',
                                                                                            'PostMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'IsDialogMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'LoadCursorW',
                                                                                            'PostQuitMessage',
                                                                                            'GetCursorPos',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'PostThreadMessageW',
                                                                                            'MessageBoxW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 250,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12676,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 16896,
                                                                                       '.rsrc\x00\x00\x00': 12800,
                                                                                       '.text\x00\x00\x00': 320000,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.wixburn': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064'},
 '6823babb87c32906443cfcfea9a31662abd2b8aaab30542558c7f52d7ac507b8': {'AddressOfEntryPoint': 21550,
                                                                      'DebugRVA': 21356,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1112,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6823babb87c32906443cfcfea9a31662abd2b8aaab30542558c7f52d7ac507b8'},
 '68789d5775003c4ea52cc8588bbdaadacda4b58f67e03761ff17b07d44ba1415': {'AddressOfEntryPoint': 463782,
                                                                      'DebugRVA': 264576,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 552960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'ImageList_Create',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'GDI32.dll': 'CreateFontA',
                                                                                      'KERNEL32.dll': 'GetCommandLineW',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'StrStrIA',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'mscoree.dll': '_CorExeMain',
                                                                                      'msvcrt.dll': 'isxdigit',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['WideCharToMultiByte',
                                                                                            'FreeConsole',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GlobalFree',
                                                                                            'WriteConsoleA',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileType',
                                                                                            'GetModuleHandleA',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'OutputDebugStringA',
                                                                                            'GlobalReAlloc',
                                                                                            'DeviceIoControl',
                                                                                            'FormatMessageA',
                                                                                            'WriteFile',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'AllocConsole',
                                                                                            'CreateFileA',
                                                                                            'LocalAlloc',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetProcAddress',
                                                                                            'VirtualQuery',
                                                                                            'GetVersion',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFontA',
                                                                                            'RegisterDeviceNotificationA',
                                                                                            'SendMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'GetMenu',
                                                                                            'GetWindowTextA',
                                                                                            'TranslateAcceleratorA',
                                                                                            'GetDlgItem',
                                                                                            'MoveWindow',
                                                                                            'LoadAcceleratorsA',
                                                                                            'ShowWindow',
                                                                                            'DispatchMessageA',
                                                                                            'ReleaseCapture',
                                                                                            'GetSystemMetrics',
                                                                                            'DialogBoxParamA',
                                                                                            'SetWindowTextA',
                                                                                            'UpdateWindow',
                                                                                            'SetMenuItemInfoA',
                                                                                            'SetCursor',
                                                                                            'CharToOemBuffA',
                                                                                            'GetMessageA',
                                                                                            'GetWindowRect',
                                                                                            'CreateDialogParamA',
                                                                                            'PostQuitMessage',
                                                                                            'SetCapture',
                                                                                            'LoadStringA',
                                                                                            'LoadIconA',
                                                                                            'EndDialog',
                                                                                            'GetWindowTextLengthA',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'LoadCursorA',
                                                                                            'GetClientRect',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__badioinfo',
                                                                                            '__pioinfo',
                                                                                            'free',
                                                                                            'isleadbyte',
                                                                                            'localeconv',
                                                                                            'isdigit',
                                                                                            'isspace',
                                                                                            '_fileno',
                                                                                            '__mb_cur_max',
                                                                                            '_errno',
                                                                                            '_getch',
                                                                                            'freopen',
                                                                                            '__iob_func',
                                                                                            '_get_osfhandle',
                                                                                            '_vsnprintf',
                                                                                            'strchr',
                                                                                            '_stricmp',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_ftol2',
                                                                                            'calloc',
                                                                                            'mbtowc',
                                                                                            '_read',
                                                                                            'realloc',
                                                                                            'isxdigit',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'GetSaveFileNameA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetDeviceInterfaceDetailA',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetDeviceInstanceIdA',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'CommandLineToArgvW',
                                                                                            'StrStrIA',
                                                                                            'CorBindToRuntimeEx',
                                                                                            '_CorExeMain'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 127,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 23344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 79360,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 25088,
                                                                                       '.rsrc\x00\x00\x00': 23552,
                                                                                       '.text\x00\x00\x00': 460288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/68789d5775003c4ea52cc8588bbdaadacda4b58f67e03761ff17b07d44ba1415'},
 '68df1027df80e38d6f6c2c211f76854f05158f51e00f7937f72b113de0ce2477': {'AddressOfEntryPoint': 95188,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127784,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 131,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456200,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 89088,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/68df1027df80e38d6f6c2c211f76854f05158f51e00f7937f72b113de0ce2477'},
 '694ef1583b1ae4655f4729a61430ad2afbdbc7767e83f1a9b71556a02a75c8fc': {'AddressOfEntryPoint': 32128,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-datetime-l1-1-1.dll': 'GetTimeFormatW',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CreateFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapFree',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'FindResourceW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LockResource',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetLocaleInfoW',
                                                                                      'api-ms-win-core-localization-obsolete-l1-2-0.dll': 'GetSystemDefaultUILanguage',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'CreateFileMappingW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetStartupInfoW',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetVersionExW',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_XcptFilter',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'bsearch',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'getenv',
                                                                                            'strchr',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_wcsnicmp',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'iswdigit',
                                                                                            'iswxdigit',
                                                                                            '__p__commode',
                                                                                            'wcsncmp',
                                                                                            '?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                            'strcspn',
                                                                                            'fprintf',
                                                                                            'wcscspn',
                                                                                            'fflush',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            '_errno',
                                                                                            '_wgetenv',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            'memset',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleA',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'GetProcAddress',
                                                                                            'LoadStringW',
                                                                                            'LockResource',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLocalTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTime',
                                                                                            'GetVersionExW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'CompareFileTime',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'SearchPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetACP',
                                                                                            'GetLocaleInfoW',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CloseHandle',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'OutputDebugStringA',
                                                                                            'FindResourceW',
                                                                                            'LocalReAlloc',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultUILanguage'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 30720},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/694ef1583b1ae4655f4729a61430ad2afbdbc7767e83f1a9b71556a02a75c8fc'},
 '69828c857d4824b9f850b1e0597d2c134c91114b7a0774c41dffe33b0eb23721': {'AddressOfEntryPoint': 11212,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetFileAttributesA'},
                                                                      'ImportedFunctions': ['GenerateConsoleCtrlEvent',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetModuleFileNameA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlUnwindEx',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'GetFileAttributesA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 10752,
                                                                                       '.text\x00\x00\x00': 54784},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/69828c857d4824b9f850b1e0597d2c134c91114b7a0774c41dffe33b0eb23721'},
 '69d288099d73dcca9eebf672e9887d7b4a63d2c329bff1be1444772c7101ea38': {'AddressOfEntryPoint': 14566,
                                                                      'DebugRVA': 301888,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 266240,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'CreateFileW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'SetInformationJobObject',
                                                                                            'QueryInformationJobObject',
                                                                                            'SearchPathW',
                                                                                            'GetBinaryTypeW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetStdHandle',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CloseHandle',
                                                                                            'CreateJobObjectA',
                                                                                            'ExitProcess',
                                                                                            'CreateProcessW',
                                                                                            'IsWow64Process',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetEndOfFile',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'DuplicateHandle',
                                                                                            'TlsAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedFlushSList',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'RaiseException',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'GetFileType',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'ReadFile',
                                                                                            'ReadConsoleW',
                                                                                            'OutputDebugStringA',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateThread',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExA',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileA',
                                                                                            'FindNextFileW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcessHeap',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SHGetFolderPathW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 62704,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 42496,
                                                                                       '.reloc\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 62976,
                                                                                       '.text\x00\x00\x00': 261632},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/69d288099d73dcca9eebf672e9887d7b4a63d2c329bff1be1444772c7101ea38'},
 '69d92d825f60c14c635236642e5d954153b4004de30b680d95f062a0a7530f68': {'AddressOfEntryPoint': 13050,
                                                                      'DebugRVA': 4368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'FormatMessageW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'msvcrt.dll': '_except_handler3',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'wcscpy',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wcsicmp',
                                                                                            '__CxxFrameHandler',
                                                                                            '_CxxThrowException',
                                                                                            'printf',
                                                                                            'swscanf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_except_handler3',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenThreadToken',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'IsValidSid',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegOpenKeyExW',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 63,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/69d92d825f60c14c635236642e5d954153b4004de30b680d95f062a0a7530f68'},
 '6a01efbc2bf54e26a7ee8fd15702e5621d61257a5551ca8f597749fbbd14cad5': {'AddressOfEntryPoint': 188925,
                                                                      'DebugRVA': 423248,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 307200,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'LoadLibraryExA',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'GetUserNameW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'CloseEventLog',
                                                                                            'OpenEventLogW',
                                                                                            'ReportEventW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'DecryptFileW',
                                                                                            'CreateWellKnownSid',
                                                                                            'InitializeAcl',
                                                                                            'SetEntriesInAclW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetTokenInformation',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'QueryServiceConfigW',
                                                                                            'GetMessageW',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetCursorPos',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromProgID',
                                                                                            'GetCommandLineA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'CompareStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'TlsAlloc',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'CreateProcessW',
                                                                                            'GetVersionExW',
                                                                                            'VerSetConditionMask',
                                                                                            'FreeLibrary',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetDateFormatW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetStringTypeW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'DuplicateHandle',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'OpenProcess',
                                                                                            'GetProcessId',
                                                                                            'WaitForSingleObject',
                                                                                            'ConnectNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'CreateNamedPipeW',
                                                                                            'CreateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'ResetEvent',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CompareStringA',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetThreadExecutionState',
                                                                                            'CopyFileExW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateMutexW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetThreadLocale',
                                                                                            'IsValidCodePage',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'TlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'DecodePointer',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetFileSizeEx',
                                                                                            'CopyFileW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindFirstFileExW',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'LoadLibraryExA',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 240,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 53136,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 126464,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 53248,
                                                                                       '.text\x00\x00\x00': 302080,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.wixburn': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6a01efbc2bf54e26a7ee8fd15702e5621d61257a5551ca8f597749fbbd14cad5'},
 '6a1323d4761dc8dcb813598776434b1489110192e94dba3097fb841bed48de5c': {'AddressOfEntryPoint': 18224,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyW',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'WDSCORE.dll': 'WdsAbortBlackboardItemEnum',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleFileNameW',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFree',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__setusermatherr',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            '_vscwprintf',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_wgetenv',
                                                                                            '_CxxThrowException',
                                                                                            'exit',
                                                                                            'memset',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmSetDWORD64',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmSetString',
                                                                                            'RtlCaptureContext',
                                                                                            'WdsTerminate',
                                                                                            'WdsFreeData',
                                                                                            'WdsDestroyBlackboard',
                                                                                            'WdsEnumFirstBlackboardItem',
                                                                                            'WdsGetBlackboardValue',
                                                                                            'WdsInitialize',
                                                                                            'WdsCreateBlackboard',
                                                                                            'WdsEnumNextBlackboardItem',
                                                                                            'WdsAbortBlackboardItemEnum',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 91,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/6a1323d4761dc8dcb813598776434b1489110192e94dba3097fb841bed48de5c'},
 '6a5542dfc2c6cb16706a2cd1450471916bb8d7567b7969aa3ee7b316b1cd4a30': {'AddressOfEntryPoint': 4096,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 176128,
                                                                      'ExportSize': 107,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'WriteFile',
                                                                                      'USER32.DLL': 'wsprintfA'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileType',
                                                                                            'GetLastError',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetOEMCP',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'GetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'GetVersion',
                                                                                            'GetVersionExA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'LoadLibraryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'ReadFile',
                                                                                            'RtlUnwind',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetFilePointer',
                                                                                            'SetHandleCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'EnumThreadWindows',
                                                                                            'MessageBoxA',
                                                                                            'wsprintfA'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 512,
                                                                      'SectionNames': {'.data\x00\x00\x00': 27648,
                                                                                       '.edata\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 125440,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6a5542dfc2c6cb16706a2cd1450471916bb8d7567b7969aa3ee7b316b1cd4a30'},
 '6a6354a35efb4878c50c0fd08a487ceac7fff52e992d8e107f011a88204c9b9d': {'AddressOfEntryPoint': 43672,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 21492,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 21504,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 41472,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6a6354a35efb4878c50c0fd08a487ceac7fff52e992d8e107f011a88204c9b9d'},
 '6a6baf3ed2a130a50ead6d6523d10b5cd429d967fe0c36d4239f07b03d3317f5': {'AddressOfEntryPoint': 135280,
                                                                      'DebugRVA': 53248,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 159744,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'LocalAlloc',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'WS2_32.dll': 'accept',
                                                                                      'bcrypt.dll': 'BCryptHashData',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtSetTimerResolution'},
                                                                      'ImportedFunctions': ['BCryptCreateHash',
                                                                                            'BCryptFinishHash',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptDestroyHash',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptHashData',
                                                                                            'LoadLibraryExA',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateEventA',
                                                                                            'SetEvent',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'GetCurrentProcessId',
                                                                                            'MultiByteToWideChar',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'SetLastError',
                                                                                            'OpenProcess',
                                                                                            'CreateThread',
                                                                                            'DebugBreak',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetOverlappedResult',
                                                                                            'WaitNamedPipeW',
                                                                                            'WriteFile',
                                                                                            'PeekNamedPipe',
                                                                                            'ResetEvent',
                                                                                            'DeviceIoControl',
                                                                                            'CreateEventW',
                                                                                            'DuplicateHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'DeleteCriticalSection',
                                                                                            'OpenFileMappingW',
                                                                                            'OpenEventW',
                                                                                            'CreateFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LocalFree',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FindFirstFileW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FindClose',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'VirtualProtect',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'LoadLibraryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'OutputDebugStringW',
                                                                                            'FreeLibrary',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'FreeSid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CheckTokenMembership',
                                                                                            'AddAccessAllowedAce',
                                                                                            'AddAccessDeniedAce',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'ntohs',
                                                                                            'socket',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'htons',
                                                                                            'shutdown',
                                                                                            'WSACloseEvent',
                                                                                            'WSAResetEvent',
                                                                                            'WSARecv',
                                                                                            'WSAGetOverlappedResult',
                                                                                            'WSASend',
                                                                                            'ioctlsocket',
                                                                                            'WSACreateEvent',
                                                                                            'WSAAddressToStringW',
                                                                                            'WSASocketW',
                                                                                            'bind',
                                                                                            'getsockname',
                                                                                            'setsockopt',
                                                                                            'listen',
                                                                                            'WSAStartup',
                                                                                            'connect',
                                                                                            'select',
                                                                                            'GetAddrInfoW',
                                                                                            'FreeAddrInfoW',
                                                                                            'WSAIoctl',
                                                                                            'gethostbyname',
                                                                                            'WSACleanup',
                                                                                            'htonl',
                                                                                            'recvfrom',
                                                                                            'inet_ntoa',
                                                                                            'sendto',
                                                                                            'accept',
                                                                                            'RtlCompareMemory',
                                                                                            'NtSetTimerResolution',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxW',
                                                                                            '_vsnwprintf',
                                                                                            'malloc',
                                                                                            'realloc',
                                                                                            'free',
                                                                                            'iswspace',
                                                                                            'wcschr',
                                                                                            'getenv',
                                                                                            'wcstoul',
                                                                                            '_wcsicmp',
                                                                                            'swscanf',
                                                                                            '_wtol',
                                                                                            '_wcsupr',
                                                                                            'vswprintf_s',
                                                                                            '_wgetenv',
                                                                                            '_wcstoui64',
                                                                                            '_strtoui64',
                                                                                            'strstr',
                                                                                            '_callnewh',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memmove',
                                                                                            'exit',
                                                                                            '_purecall',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_memicmp',
                                                                                            'memset'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 141312,
                                                                                       'PAGER32C': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6a6baf3ed2a130a50ead6d6523d10b5cd429d967fe0c36d4239f07b03d3317f5'},
 '6a71351d88ec15e19e72e4a79dbb24992bc8aa8c18b0df454fdb12f47da63184': {'AddressOfEntryPoint': 17068,
                                                                      'DebugRVA': 25104,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LoadLibraryA',
                                                                                      'MSVCR100.dll': '_unlock',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'StringFromCLSID'},
                                                                      'ImportedFunctions': ['LoadStringW',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxW',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_except_handler4_common',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_CxxThrowException',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy',
                                                                                            '_vsnwprintf_s',
                                                                                            '_ftime64_s',
                                                                                            'wcsftime',
                                                                                            '_snwprintf_s',
                                                                                            '_localtime64',
                                                                                            '_wputenv',
                                                                                            'fwprintf_s',
                                                                                            '_wdupenv_s',
                                                                                            'free',
                                                                                            '_wfopen_s',
                                                                                            'wcsncpy_s',
                                                                                            'wcscat_s',
                                                                                            'memcpy_s',
                                                                                            '_wsplitpath_s',
                                                                                            'fclose',
                                                                                            'wcscpy_s',
                                                                                            '_wtoi',
                                                                                            '_wstat64i32',
                                                                                            'memset',
                                                                                            'swprintf_s',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_stat64i32',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'malloc',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_unlock',
                                                                                            'GetProcAddress',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'GetTempPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'lstrlenW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetCurrentProcess',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetVersionExW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'CloseHandle',
                                                                                            'InterlockedDecrement',
                                                                                            'FormatMessageW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LoadLibraryA',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 115,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 33016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 33280,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6a71351d88ec15e19e72e4a79dbb24992bc8aa8c18b0df454fdb12f47da63184'},
 '6adf2be6032b4f9e2b051e07a1c5b21dc837a46104faa468d6c87ea918a03bed': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 93788,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 790953984,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1356,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 73728,
                                                                                       '.xdata\x00\x00': 4608},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/6adf2be6032b4f9e2b051e07a1c5b21dc837a46104faa468d6c87ea918a03bed'},
 '6b10a3a3924275a1b7e6402f447f00bbf6bd771d0b75836a3a271cd56d5e9ed8': {'AddressOfEntryPoint': 22908,
                                                                      'DebugRVA': 119792,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 118784,
                                                                      'ImageBase': 6442450944,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSidLengthRequired',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'ole32.dll': 'CoRegisterClassObject'},
                                                                      'ImportedFunctions': ['GetSecurityDescriptorControl',
                                                                                            'MakeAbsoluteSD',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetLengthSid',
                                                                                            'IsValidSid',
                                                                                            'CopySid',
                                                                                            'AddAce',
                                                                                            'InitializeAcl',
                                                                                            'GetAclInformation',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'GetSidSubAuthority',
                                                                                            'InitializeSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetStartupInfoW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLocaleInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapSize',
                                                                                            'LeaveCriticalSection',
                                                                                            'FatalAppExitA',
                                                                                            'EnterCriticalSection',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetProcessHeap',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SysFreeString',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoRegisterClassObject'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1476,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 34304,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 111104},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6b10a3a3924275a1b7e6402f447f00bbf6bd771d0b75836a3a271cd56d5e9ed8'},
 '6b57c3c5c1965be12aae4024dacf3facb4657b93fd5e86a8f2d13648e27afdfa': {'AddressOfEntryPoint': 6336,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyExW',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'RegisterClassW',
                                                                                      'msvcrt.dll': '__set_app_type'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetStockObject',
                                                                                            'DefWindowProcW',
                                                                                            'CreateWindowExW',
                                                                                            'LoadCursorW',
                                                                                            'DestroyWindow',
                                                                                            'RegisterClassW',
                                                                                            '_wcmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'iswspace',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 47,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 53992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 54272,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6b57c3c5c1965be12aae4024dacf3facb4657b93fd5e86a8f2d13648e27afdfa'},
 '6b7b6132e6f37b4e3de4875e3e65b88a73d4961c611fff7be646e849e7f7abce': {'AddressOfEntryPoint': 4984,
                                                                      'DebugRVA': 8544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DecodePointer',
                                                                                      'MSVCR100.dll': '_amsg_exit',
                                                                                      'VBoxRT.dll': 'RTR3InitExeNoArguments'},
                                                                      'ImportedFunctions': ['_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_initterm_e',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            'RTMsgErrorExit',
                                                                                            'SUPR3Install',
                                                                                            'RTMsgInfo',
                                                                                            'RTR3InitExeNoArguments',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DecodePointer'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 33,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 2048},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6b7b6132e6f37b4e3de4875e3e65b88a73d4961c611fff7be646e849e7f7abce'},
 '6bd1f5ab9250206ab3836529299055e272ecaa35a72cbd0230cb20ff1cc30902': {'AddressOfEntryPoint': 36928,
                                                                      'DebugRVA': 248848,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 327680,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'PolyPatBlt',
                                                                                      'IMM32.dll': 'ImmGetProperty',
                                                                                      'OLEAUT32.dll': 'SysReAllocString',
                                                                                      'USER32.dll': 'GetKeyboardLayoutNameW',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'ReadFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'GlobalLock',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetCPInfo',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-privateprofile-l1-1-1.dll': 'GetPrivateProfileStringW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegGetValueW',
                                                                                      'api-ms-win-core-sidebyside-l1-1-0.dll': 'CreateActCtxW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'GetStringTypeW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenA',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemDirectoryW',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'Beep',
                                                                                      'msvcrt.dll': '_vsnwprintf',
                                                                                      'ntdll.dll': 'NtMapViewOfSection'},
                                                                      'ImportedFunctions': ['SetDIBitsToDevice',
                                                                                            'PatBlt',
                                                                                            'CreateRectRgn',
                                                                                            'CombineRgn',
                                                                                            'InvertRgn',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'SelectPalette',
                                                                                            'StretchDIBits',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBitmap',
                                                                                            'GetObjectW',
                                                                                            'BitBlt',
                                                                                            'GetDIBits',
                                                                                            'GetStockObject',
                                                                                            'GdiFlush',
                                                                                            'GetNearestColor',
                                                                                            'SetDCBrushColor',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'GetTextFaceW',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'GetCurrentObject',
                                                                                            'GetRegionData',
                                                                                            'GetRgnBox',
                                                                                            'PolyTextOutW',
                                                                                            'SetSystemPaletteUse',
                                                                                            'RealizePalette',
                                                                                            'CreateSolidBrush',
                                                                                            'GetCharWidth32W',
                                                                                            'CreateBitmap',
                                                                                            'TranslateCharsetInfo',
                                                                                            'SetBitmapBits',
                                                                                            'StretchBlt',
                                                                                            'GetBitmapBits',
                                                                                            'GetStringBitmapW',
                                                                                            'PolyPatBlt',
                                                                                            'GetDlgItemTextW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SendNotifyMessageW',
                                                                                            'EndDialog',
                                                                                            'DialogBoxParamW',
                                                                                            'GetWindowPlacement',
                                                                                            'SetWindowPlacement',
                                                                                            'SetWindowLongW',
                                                                                            'CopyIcon',
                                                                                            'DestroyIcon',
                                                                                            'GetKeyboardLayout',
                                                                                            'SystemParametersInfoW',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'GetKeyboardLayoutNameA',
                                                                                            'PtInRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetWindowsHookExW',
                                                                                            'GetMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetKeyboardState',
                                                                                            'ToUnicodeEx',
                                                                                            'SetMenuItemInfoW',
                                                                                            'LoadMenuW',
                                                                                            'AppendMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetCaretBlinkTime',
                                                                                            'MonitorFromRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'LoadCursorW',
                                                                                            'GetWindowRect',
                                                                                            'ClientToScreen',
                                                                                            'CreateWindowExW',
                                                                                            'GetDC',
                                                                                            'CheckRadioButton',
                                                                                            'GetSystemMenu',
                                                                                            'SetActiveWindow',
                                                                                            'ShowWindow',
                                                                                            'SetTimer',
                                                                                            'SetScrollInfo',
                                                                                            'ScrollDC',
                                                                                            'GetWindowLongW',
                                                                                            'KillTimer',
                                                                                            'ReleaseDC',
                                                                                            'DefWindowProcW',
                                                                                            'IsIconic',
                                                                                            'UnpackDDElParam',
                                                                                            'CreateIconFromResourceEx',
                                                                                            'SendMessageTimeoutW',
                                                                                            'ReuseDDElParam',
                                                                                            'BeginPaint',
                                                                                            'DrawIcon',
                                                                                            'EndPaint',
                                                                                            'WindowFromPoint',
                                                                                            'SetCursor',
                                                                                            'TrackPopupMenuEx',
                                                                                            'LoadIconW',
                                                                                            'LoadImageW',
                                                                                            'RegisterClassExW',
                                                                                            'SetProcessDPIAware',
                                                                                            'TranslateMessageEx',
                                                                                            'EnterReaderModeHelper',
                                                                                            'PrivateExtractIconExW',
                                                                                            'MapWindowPoints',
                                                                                            'GetClientRect',
                                                                                            'GetCursorPos',
                                                                                            'InvalidateRect',
                                                                                            'ConsoleControl',
                                                                                            'GetClipboardData',
                                                                                            'MapVirtualKeyW',
                                                                                            'VkKeyScanW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetSystemMetrics',
                                                                                            'SendMessageW',
                                                                                            'PostMessageW',
                                                                                            'LoadStringW',
                                                                                            'DestroyWindow',
                                                                                            'ScreenToClient',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'GetKeyState',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'NotifyWinEvent',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '__set_app_type',
                                                                                            'atoi',
                                                                                            '_itoa',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_exit',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_acmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memmove',
                                                                                            '__getmainargs',
                                                                                            'exit',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'wcscmp',
                                                                                            'wcschr',
                                                                                            '_local_unwind',
                                                                                            'wcsncmp',
                                                                                            'memcmp',
                                                                                            'wcstoul',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlIntegerToUnicodeString',
                                                                                            'RtlUnicodeToMultiByteSize',
                                                                                            'RtlInitializeCriticalSectionAndSpinCount',
                                                                                            'RtlConsoleMultiByteToUnicodeN',
                                                                                            'NtOpenKey',
                                                                                            'RtlOpenCurrentUser',
                                                                                            'NtEnumerateValueKey',
                                                                                            'NtQueryValueKey',
                                                                                            'RtlCreateTagHeap',
                                                                                            'RtlDosSearchPath_U',
                                                                                            'RtlExitUserProcess',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlInitCodePageTable',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            'RtlMultiByteToUnicodeN',
                                                                                            'RtlCustomCPToUnicodeN',
                                                                                            'RtlOemToUnicodeN',
                                                                                            'RtlUnicodeToOemN',
                                                                                            'RtlReAllocateHeap',
                                                                                            'RtlExitUserThread',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlGetCriticalSectionRecursionCount',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'NtSetEvent',
                                                                                            'NtClearEvent',
                                                                                            'NtCreateEvent',
                                                                                            'RtlInitializeSRWLock',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'NtQueryInformationProcess',
                                                                                            'NtOpenProcess',
                                                                                            'NtVdmControl',
                                                                                            'RtlReleaseSRWLockExclusive',
                                                                                            'RtlAcquireSRWLockExclusive',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlSizeHeap',
                                                                                            'NtReleaseMutant',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtCreateMutant',
                                                                                            'NtUnmapViewOfSection',
                                                                                            'NtCreateSection',
                                                                                            'DbgPrintEx',
                                                                                            'RtlFreeHeap',
                                                                                            'NtClose',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtDuplicateObject',
                                                                                            'NtMapViewOfSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcAddress',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetCurrentThread',
                                                                                            'CreateThread',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'RegGetValueW',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'Beep',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LocalReAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'CreateActCtxW',
                                                                                            'ImmGetGuideLineW',
                                                                                            'ImmReleaseContext',
                                                                                            'ImmGetConversionStatus',
                                                                                            'ImmGetOpenStatus',
                                                                                            'ImmGetContext',
                                                                                            'ImmGetCandidateListW',
                                                                                            'ImmNotifyIME',
                                                                                            'ImmGetCompositionStringW',
                                                                                            'ImmAssociateContextEx',
                                                                                            'ImmTranslateMessage',
                                                                                            'ImmAssociateContext',
                                                                                            'ImmGetProperty',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'SysReAllocString',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 27,
                                                                      'NumberOfImportFunctions': 303,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 34472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 12288,
                                                                                       '.pdata\x00\x00': 25088,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 34816,
                                                                                       '.text\x00\x00\x00': 256512,
                                                                                       'FE_TEXT\x00': 25088},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6bd1f5ab9250206ab3836529299055e272ecaa35a72cbd0230cb20ff1cc30902'},
 '6bd82e211b0a49978d65d4c93f1d54270e9db4332d24911457142ae2efd02733': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 89044,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 89088,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6bd82e211b0a49978d65d4c93f1d54270e9db4332d24911457142ae2efd02733'},
 '6c190a2205122c65c196283b32bdcc1549c465e730793cb1c6169857de781eae': {'AddressOfEntryPoint': 14816,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'IsTextUnicode',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlMultiByteToUnicodeN'},
                                                                      'ImportedFunctions': ['IsTextUnicode',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetCPInfo',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessHeap',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageA',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'VirtualAlloc',
                                                                                            'GetTempFileNameA',
                                                                                            'ResetEvent',
                                                                                            'GetFileType',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            '_iob',
                                                                                            'setlocale',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            '_ftol2_sse',
                                                                                            '_ftol2',
                                                                                            'strcpy_s',
                                                                                            'fprintf',
                                                                                            '_wcsicoll',
                                                                                            '_stricoll',
                                                                                            'atoi',
                                                                                            'strchr',
                                                                                            'qsort',
                                                                                            'wcscoll',
                                                                                            '_strnicmp',
                                                                                            'strcoll',
                                                                                            'memset',
                                                                                            'RtlUnicodeToOemN',
                                                                                            'RtlMultiByteToUnicodeN'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 13312},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6c190a2205122c65c196283b32bdcc1549c465e730793cb1c6169857de781eae'},
 '6c28a9c9f529ba37bbe76fbc50c799733ea719d9260eb80e5a9fb859b9295ae0': {'AddressOfEntryPoint': 95434,
                                                                      'DebugRVA': 4736,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'IsDebuggerPresent',
                                                                                      'MSVCR100.dll': 'memcpy',
                                                                                      'RPCRT4.dll': 'NdrServerCall2',
                                                                                      'mspdbcore.dll': '?SetErrorHandlerAPI@PDB@@SAHP6APAUIPDBError@@PAU1@@Z@Z'},
                                                                      'ImportedFunctions': ['GetTokenInformation',
                                                                                            'OpenThreadToken',
                                                                                            'EqualSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentThread',
                                                                                            'CreateEventW',
                                                                                            'CreateWaitableTimerW',
                                                                                            'SetPriorityClass',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForMultipleObjects',
                                                                                            'OpenEventW',
                                                                                            'SetEvent',
                                                                                            'CancelWaitableTimer',
                                                                                            'SetWaitableTimer',
                                                                                            'GetVersion',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateProcessW',
                                                                                            'UnmapViewOfFile',
                                                                                            'HeapSetInformation',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'VirtualQuery',
                                                                                            'GetModuleFileNameW',
                                                                                            'OpenProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'InterlockedCompareExchange',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InterlockedExchange',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            '_wcsdup',
                                                                                            '_snwprintf_s',
                                                                                            '_wcsicmp',
                                                                                            'wcstoul',
                                                                                            'iswspace',
                                                                                            'memmove',
                                                                                            'wcschr',
                                                                                            '_wfopen_s',
                                                                                            'fclose',
                                                                                            '_wdupenv_s',
                                                                                            '_wpgmptr',
                                                                                            'memcpy_s',
                                                                                            'swprintf_s',
                                                                                            'exit',
                                                                                            'malloc',
                                                                                            'strncpy_s',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            'memset',
                                                                                            'free',
                                                                                            '_time64',
                                                                                            '_wctime64',
                                                                                            'fflush',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcsncpy_s',
                                                                                            '__iob_func',
                                                                                            'memcpy',
                                                                                            '?FOpenW@MREngine@@SGHPAPAU1@PBGAAJPAGIHH@Z',
                                                                                            '?FOpen@MREngine@@SGHPAPAU1@PAUMreToPdb@@HH@Z',
                                                                                            '?FOpen@MREngine@@SGHPAPAU1@PAUPDB@@PAUNameMap@@HH@Z',
                                                                                            '?open@NameMap@@SAHPAUPDB@@HPAPAU1@@Z',
                                                                                            '?OpenEx2W@PDB@@SAHPBGPBDJPAJPAGIPAPAU1@@Z',
                                                                                            '?OpenNgenPdb@PDB@@SAHPBG0PAJPAGIPAPAU1@@Z',
                                                                                            '?OpenValidate4@PDB@@SAHPBGPBDPBU_GUID@@KKPAJPAGIPAPAU1@@Z',
                                                                                            '?CloseAllTimeoutPDB@PDB@@SAHXZ',
                                                                                            '?ShutDownTimeoutManager@PDB@@SAHXZ',
                                                                                            '?SetPDBCloseTimeout@PDB@@SAH_K@Z',
                                                                                            '?SetErrorHandlerAPI@PDB@@SAHP6APAUIPDBError@@PAU1@@Z@Z',
                                                                                            'NdrClientCall2',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcBindingInqAuthClientW',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcServerRegisterIf2',
                                                                                            'RpcServerListen',
                                                                                            'RpcMgmtStopServerListening',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcMgmtInqStats',
                                                                                            'RpcMgmtStatsVectorFree',
                                                                                            'NdrServerCall2'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 128,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1484,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 97792,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6c28a9c9f529ba37bbe76fbc50c799733ea719d9260eb80e5a9fb859b9295ae0'},
 '6c2a3cfc3831c1106139e326c09654521d2726419c0055b38a8eca4489d060a3': {'AddressOfEntryPoint': 13449,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'USER32.dll': 'PostQuitMessage',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'CopyFileW',
                                                                                            'GetShortPathNameW',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExW',
                                                                                            'lstrcatW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrcmpiW',
                                                                                            'MoveFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetFileTime',
                                                                                            'SearchPathW',
                                                                                            'CompareFileTime',
                                                                                            'lstrcmpW',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalAlloc',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'EnableMenuItem',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapW',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetDlgItem',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharPrevW',
                                                                                            'CharNextA',
                                                                                            'wsprintfA',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndDialog',
                                                                                            'RegisterClassW',
                                                                                            'SystemParametersInfoW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'CharNextW',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'GetDC',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'LoadImageW',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowExW',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'EndPaint',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'wsprintfW',
                                                                                            'PostQuitMessage',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHFileOperationW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 164,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 436936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 437248,
                                                                                       '.text\x00\x00\x00': 25600},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6c2a3cfc3831c1106139e326c09654521d2726419c0055b38a8eca4489d060a3'},
 '6c4434f19cfa5a2e2e8ea30a9e33606efcb87aceec2ce550c2ba3cf1858b3b5a': {'AddressOfEntryPoint': 63493,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetKernelObjectSecurity',
                                                                                      'KERNEL32.dll': 'CreateProcessA'},
                                                                      'ImportedFunctions': ['AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFullPathNameA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'GetVersion',
                                                                                            'GetFileType',
                                                                                            'GetFileTime',
                                                                                            'ReadFile',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'FindNextFileA',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'InterlockedExchange',
                                                                                            'CreateMutexA',
                                                                                            'lstrcpynA',
                                                                                            'GetDriveTypeA',
                                                                                            'lstrcmpiA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'lstrlenA',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'MoveFileA',
                                                                                            'SetStdHandle',
                                                                                            'HeapReAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SetFilePointer',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetStartupInfoA',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'WideCharToMultiByte',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCPInfo',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetEndOfFile',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'HeapSize',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'LoadLibraryA',
                                                                                            'RtlUnwind',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 24576,
                                                                                       '.text\x00\x00\x00': 102400},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6c4434f19cfa5a2e2e8ea30a9e33606efcb87aceec2ce550c2ba3cf1858b3b5a'},
 '6c58fb928c48b6116305cc9f2df5e7e0107dcce8ee0953300359df35071de80f': {'AddressOfEntryPoint': 2280336,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'ExitProcess',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'MessageBoxW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 7,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 40012,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 40448,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 1207808},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6c58fb928c48b6116305cc9f2df5e7e0107dcce8ee0953300359df35071de80f'},
 '6c786141c50e58ea75aac73c68493b7ad47f343dd4c2600ffe1b88cad842f6e3': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 122968,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 123392,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6c786141c50e58ea75aac73c68493b7ad47f343dd4c2600ffe1b88cad842f6e3'},
 '6c9fe40a885b8b11ab8d2ca5ed9b99eece6df030691baf114477c3776f70d715': {'AddressOfEntryPoint': 624987,
                                                                      'DebugRVA': 935728,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 933888,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'GetProcessTimes',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'ExitThread',
                                                                                            'lstrcpyA',
                                                                                            'GetCommandLineW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'lstrcmpW',
                                                                                            'lstrcmpiW',
                                                                                            'VerLanguageNameW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'CompareFileTime',
                                                                                            'FindFirstFileW',
                                                                                            'MoveFileW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemInfo',
                                                                                            'MulDiv',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersion',
                                                                                            'GetLocalTime',
                                                                                            'GetFileAttributesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileTime',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'VirtualQuery',
                                                                                            'IsBadReadPtr',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'GetDriveTypeW',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'InterlockedDecrement',
                                                                                            'CreateEventW',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'GetVersionExW',
                                                                                            'InterlockedIncrement',
                                                                                            'CopyFileW',
                                                                                            'CreateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'GetTickCount',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalAlloc',
                                                                                            'LockResource',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempPathW',
                                                                                            'SetErrorMode',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CreateFileA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'LCMapStringA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'FatalAppExitA',
                                                                                            'GetModuleHandleA',
                                                                                            'LCMapStringW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'HeapSize',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'lstrcpyW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'TerminateProcess',
                                                                                            'MoveFileExW',
                                                                                            'GetThreadContext',
                                                                                            'VirtualProtectEx',
                                                                                            'WriteProcessMemory',
                                                                                            'FlushInstructionCache',
                                                                                            'SetThreadContext',
                                                                                            'ResumeThread',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetShortPathNameW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'GetStartupInfoW',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'FreeResource',
                                                                                            'lstrcmpiA',
                                                                                            'GetPrivateProfileSectionNamesA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcatA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'lstrcpynA',
                                                                                            'lstrcmpA',
                                                                                            'SearchPathW',
                                                                                            'VirtualProtect',
                                                                                            'SystemTimeToFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FindResourceExW',
                                                                                            'OpenProcess',
                                                                                            'GetProcessTimes',
                                                                                            'DispatchMessageW',
                                                                                            'PostMessageW',
                                                                                            'KillTimer',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'DefWindowProcW',
                                                                                            'TranslateMessage',
                                                                                            'wvsprintfW',
                                                                                            'CharPrevW',
                                                                                            'LoadImageW',
                                                                                            'CreateDialogParamW',
                                                                                            'MoveWindow',
                                                                                            'GetParent',
                                                                                            'GetWindowTextW',
                                                                                            'SetCursor',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetWindow',
                                                                                            'SetFocus',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetDC',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSystemMetrics',
                                                                                            'SetRect',
                                                                                            'FindWindowW',
                                                                                            'IntersectRect',
                                                                                            'SubtractRect',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'CharNextW',
                                                                                            'EnableWindow',
                                                                                            'FindWindowExW',
                                                                                            'GetWindowRect',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageW',
                                                                                            'IsDialogMessageW',
                                                                                            'IsWindow',
                                                                                            'DestroyWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'MessageBoxW',
                                                                                            'WaitForInputIdle',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetClientRect',
                                                                                            'ClientToScreen',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperW',
                                                                                            'CallWindowProcW',
                                                                                            'MapWindowPoints',
                                                                                            'GetPropW',
                                                                                            'DrawFocusRect',
                                                                                            'InflateRect',
                                                                                            'DrawTextW',
                                                                                            'CopyRect',
                                                                                            'GetClassNameW',
                                                                                            'RemovePropW',
                                                                                            'SetPropW',
                                                                                            'EnumChildWindows',
                                                                                            'UpdateWindow',
                                                                                            'InvalidateRect',
                                                                                            'DrawIcon',
                                                                                            'MapDialogRect',
                                                                                            'wsprintfA',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowDC',
                                                                                            'ReleaseDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'EndDialog',
                                                                                            'SetWindowTextW',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'GetDesktopWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'GetMessageW',
                                                                                            'CreateHalftonePalette',
                                                                                            'UnrealizeObject',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'CreateFontW',
                                                                                            'SetBkMode',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateSolidBrush',
                                                                                            'GetDIBColorTable',
                                                                                            'CreateFontIndirectW',
                                                                                            'TranslateCharsetInfo',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'CreateDIBitmap',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'RestoreDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreatePalette',
                                                                                            'CreatePatternBrush',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateDCW',
                                                                                            'DeleteMetaFile',
                                                                                            'SetMetaFileBitsEx',
                                                                                            'SetStretchBltMode',
                                                                                            'SelectClipRgn',
                                                                                            'CreateRectRgn',
                                                                                            'SetPixel',
                                                                                            'PatBlt',
                                                                                            'PlayMetaFile',
                                                                                            'SetBkColor',
                                                                                            'StretchBlt',
                                                                                            'CreateBitmap',
                                                                                            'SetViewportExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetMapMode',
                                                                                            'SaveDC',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'GetObjectW',
                                                                                            'SetTextColor',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'RegEnumKeyW',
                                                                                            'RegCreateKeyW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateGuid',
                                                                                            'CreateItemMoniker',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'GetRunningObjectTable',
                                                                                            'CoTaskMemRealloc',
                                                                                            'StringFromGUID2',
                                                                                            'GetErrorInfo',
                                                                                            'VarUI4FromStr',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'LoadTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'VarBstrCmp',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VarBstrFromDate',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'VarBstrCat',
                                                                                            'SysStringLen',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'UuidCreate',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidFromStringW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 391,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 511504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10752,
                                                                                       '.rdata\x00\x00': 204288,
                                                                                       '.rsrc\x00\x00\x00': 512000,
                                                                                       '.text\x00\x00\x00': 929280},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6c9fe40a885b8b11ab8d2ca5ed9b99eece6df030691baf114477c3776f70d715'},
 '6caffa7c8e508569c7855512c7b36e00df52d13779572dc939e3f39a4948eca3': {'AddressOfEntryPoint': 522270,
                                                                      'DebugRVA': 522036,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 17432,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 17920,
                                                                                       '.text\x00\x00\x00': 514560},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6caffa7c8e508569c7855512c7b36e00df52d13779572dc939e3f39a4948eca3'},
 '6cb6f906ad21a8518954d73fe6d47bd0f82eb17f458a122858aaded0c07d5431': {'AddressOfEntryPoint': 23612,
                                                                      'DebugRVA': 143760,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'CloseClipboard'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOverridePredefKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileExA',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'FindResourceExW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleExW',
                                                                                            'VirtualQuery',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetLastError',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrcmpiW',
                                                                                            'FreeLibrary',
                                                                                            'FindClose',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringA',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FlushFileBuffers',
                                                                                            'IsDebuggerPresent',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'InitializeSListHead',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'GetCPInfo',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlPcToFileHeader',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameA',
                                                                                            'CharLowerBuffW',
                                                                                            'MessageBoxW',
                                                                                            'wsprintfW',
                                                                                            'OpenClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'PathStripPathW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathAppendW',
                                                                                            'CommandLineToArgvW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 67584,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 81920},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6cb6f906ad21a8518954d73fe6d47bd0f82eb17f458a122858aaded0c07d5431'},
 '6cd5026f2dfa3e3e450721704a42ccd556a9d59746d3008d96755899c62c0148': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 37896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 38400,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6cd5026f2dfa3e3e450721704a42ccd556a9d59746d3008d96755899c62c0148'},
 '6cec18d9302a4124cb1721feabb899c4022ec3a7d2afced7cf80367b72675e8b': {'AddressOfEntryPoint': 846213,
                                                                      'DebugRVA': 1296640,
                                                                      'DebugSize': 112,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1146880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'ReadConsoleW'},
                                                                      'ImportedFunctions': ['CreateFileW',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapDestroy',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RaiseException',
                                                                                            'SetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'lstrcpynW',
                                                                                            'MulDiv',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'DecodePointer',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'SetLastError',
                                                                                            'CreateEventW',
                                                                                            'GetExitCodeThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'lstrlenW',
                                                                                            'GetVersionExW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleFileNameW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetTempFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileTime',
                                                                                            'CopyFileW',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'InterlockedExchange',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemInfo',
                                                                                            'WaitForMultipleObjects',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'LoadLibraryExA',
                                                                                            'GetShortPathNameW',
                                                                                            'GetStringTypeW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FormatMessageW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentThread',
                                                                                            'GetFullPathNameW',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'SetEndOfFile',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'MoveFileW',
                                                                                            'ResetEvent',
                                                                                            'GlobalFree',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetLocalTime',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'TerminateThread',
                                                                                            'LocalAlloc',
                                                                                            'CompareFileTime',
                                                                                            'CopyFileExW',
                                                                                            'OpenEventW',
                                                                                            'PeekNamedPipe',
                                                                                            'EncodePointer',
                                                                                            'InitializeSListHead',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'FlushInstructionCache',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LCMapStringW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlUnwind',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetFileType',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'SetFilePointerEx',
                                                                                            'FindFirstFileExW',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'ReadConsoleW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 194596,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.gfids\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 345600,
                                                                                       '.reloc\x00\x00': 86016,
                                                                                       '.rsrc\x00\x00\x00': 195072,
                                                                                       '.text\x00\x00\x00': 1141760,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6cec18d9302a4124cb1721feabb899c4022ec3a7d2afced7cf80367b72675e8b'},
 '6d1dfe10bf4482151db3a8f34601dfdb527cc7ea107c0a74d8498dfa54e4e976': {'AddressOfEntryPoint': 13104,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtOpenFile'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetCommandLineW',
                                                                                            'FindVolumeClose',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetVersionExW',
                                                                                            'FindNextVolumeW',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileW',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetFileType',
                                                                                            'DeviceIoControl',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'FindFirstVolumeW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '__p__commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            'wcstok',
                                                                                            '_wcsupr',
                                                                                            '_iob',
                                                                                            '_vsnwprintf',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wtoi',
                                                                                            'vfwprintf',
                                                                                            '_wcsicmp',
                                                                                            'setlocale',
                                                                                            'memset',
                                                                                            'LoadStringW',
                                                                                            'NtClose',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtOpenFile'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 10752},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6d1dfe10bf4482151db3a8f34601dfdb527cc7ea107c0a74d8498dfa54e4e976'},
 '6d5dc17684c9fc9a2c777df3693727c4a3924792ae73306b7624c2e15fefd2a8': {'AddressOfEntryPoint': 67616,
                                                                      'DebugRVA': 28400,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExW',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects',
                                                                                      'msvcrt.dll': '__iob_func',
                                                                                      'ntdll.dll': 'NtSetSystemInformation'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegEnumKeyExW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExW',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'FreeConsole',
                                                                                            'TerminateProcess',
                                                                                            'SetLastError',
                                                                                            'CloseHandle',
                                                                                            'WriteProcessMemory',
                                                                                            'ResumeThread',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            'toupper',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'swscanf',
                                                                                            'wcsstr',
                                                                                            'wcsrchr',
                                                                                            'wprintf',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wtoi',
                                                                                            'fwprintf',
                                                                                            'towlower',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '__CxxFrameHandler',
                                                                                            'vwprintf',
                                                                                            '_wcslwr',
                                                                                            '_vsnwprintf',
                                                                                            'wcstoul',
                                                                                            'exit',
                                                                                            '_wcsicmp',
                                                                                            '_cexit',
                                                                                            '__iob_func',
                                                                                            'RtlUnwind',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtSetSystemInformation',
                                                                                            'GetFocus',
                                                                                            'GetParent',
                                                                                            'GetAncestor',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'CheckDlgButton',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxW',
                                                                                            'GetSystemMetrics',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PropertySheetW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 100,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 23536,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 23552,
                                                                                       '.text\x00\x00\x00': 67584},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6d5dc17684c9fc9a2c777df3693727c4a3924792ae73306b7624c2e15fefd2a8'},
 '6d641dca1d7ac08c364b7fd0771b9b707ab61dee4778974291dd8ec9461e4ba1': {'AddressOfEntryPoint': 25599,
                                                                      'DebugRVA': 8736,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'SystemTimeToFileTime',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtShutdownSystem'},
                                                                      'ImportedFunctions': ['__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_adjust_fdiv',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strrchr',
                                                                                            '_stricmp',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            '_XcptFilter',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_vsnprintf',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateThread',
                                                                                            'GetFileSize',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'CreateEventA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetSystemTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetProcessHeap',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetEvent',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileExA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'FindFirstFileA',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'SetParent',
                                                                                            'EndDialog',
                                                                                            'LoadStringA',
                                                                                            'ShowWindow',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtShutdownSystem',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3440,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 681472,
                                                                                       '.text\x00\x00\x00': 34304},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6d641dca1d7ac08c364b7fd0771b9b707ab61dee4778974291dd8ec9461e4ba1'},
 '6d8ffeea6102f69d1d174decaa8878908c662d9163f941aee4bd2fd2d5a12865': {'AddressOfEntryPoint': 2821536,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 2253280,
                                                                      'ExportSize': 4088,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'LineTo',
                                                                                      'IMM32.dll': 'ImmGetContext',
                                                                                      'KERNEL32.DLL': 'VirtualProtect',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'WININET.dll': 'InternetOpenA',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'connect',
                                                                                      'gdiplus.dll': 'GdipFree',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'LineTo',
                                                                                            'GdipFree',
                                                                                            'ImmGetContext',
                                                                                            'LoadLibraryA',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'CoCreateGuid',
                                                                                            'VariantInit',
                                                                                            'ShellExecuteW',
                                                                                            'PathFileExistsW',
                                                                                            'GetDC',
                                                                                            'InternetOpenA',
                                                                                            'timeGetTime',
                                                                                            'connect'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 16,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 103368,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 104448,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 1204736},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6d8ffeea6102f69d1d174decaa8878908c662d9163f941aee4bd2fd2d5a12865'},
 '6dc1433c83950ae8cf06fae2248d9762b18f3d5b16b89b51750f5d87c625abfb': {'AddressOfEntryPoint': 22704,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetModuleHandleA',
                                                                                      'SHLWAPI.dll': 'StrStrW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': 'fprintf',
                                                                                      'ntdll.dll': 'VerSetConditionMask'},
                                                                      'ImportedFunctions': ['WaitForSingleObject',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'GetTickCount',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'Beep',
                                                                                            'ReadFile',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'PeekConsoleInputW',
                                                                                            'GetFileType',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            '_amsg_exit',
                                                                                            'fflush',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'memset',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_vsnwprintf',
                                                                                            'wcstol',
                                                                                            '_errno',
                                                                                            '__iob_func',
                                                                                            'wcschr',
                                                                                            '_memicmp',
                                                                                            'wcstod',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            'fprintf',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'CharUpperBuffW',
                                                                                            'CharNextW',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'WSACleanup',
                                                                                            'StrChrIW',
                                                                                            'StrChrW',
                                                                                            'StrStrIW',
                                                                                            'StrStrW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 86,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6dc1433c83950ae8cf06fae2248d9762b18f3d5b16b89b51750f5d87c625abfb'},
 '6df6a742c23eefa480cb37bad3835c5005801c61168d32610504eeb72c7b7f30': {'AddressOfEntryPoint': 91076,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 83968,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6df6a742c23eefa480cb37bad3835c5005801c61168d32610504eeb72c7b7f30'},
 '6e8c6c77560972a400827ceec38dd4d24f5781debc8414c9e01c6b309c28366a': {'AddressOfEntryPoint': 15600,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlInitUnicodeString'},
                                                                      'ImportedFunctions': ['RegEnumValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'CharToOemW',
                                                                                            'LoadStringW',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'DefineDosDeviceW',
                                                                                            'QueryDosDeviceW',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'LocalAlloc',
                                                                                            'GetOEMCP',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FormatMessageW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'NtOpenFile',
                                                                                            'NtClose',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'free',
                                                                                            '_wcsnicmp',
                                                                                            'malloc',
                                                                                            'wcsrchr',
                                                                                            'iswalnum',
                                                                                            'setlocale',
                                                                                            '_wsetlocale',
                                                                                            'wcscpy_s',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            '_iob',
                                                                                            'wcscat_s',
                                                                                            'wprintf',
                                                                                            'printf',
                                                                                            '_wcsicmp',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_wcslwr',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'swprintf_s',
                                                                                            'wcschr',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 86,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6e8c6c77560972a400827ceec38dd4d24f5781debc8414c9e01c6b309c28366a'},
 '6e8cc572ed4ccbf7ddb375cb841d936eda2366508019e570778ec5dafa0ecbdf': {'AddressOfEntryPoint': 42881,
                                                                      'DebugRVA': 4576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSidSubAuthorityCount',
                                                                                      'KERNEL32.dll': 'lstrcpyW',
                                                                                      'MSVCP60.dll': '??1_Lockit@std@@QAE@XZ',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINSPOOL.DRV': 'EnumPrintersW',
                                                                                      'msvcrt.dll': '__winitenv'},
                                                                      'ImportedFunctions': ['SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentThreadId',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'lstrcmpW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentProcess',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'SetLastError',
                                                                                            'lstrlenW',
                                                                                            'lstrcatW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcpyW',
                                                                                            'wprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__CxxFrameHandler',
                                                                                            '__wgetmainargs',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcscmp',
                                                                                            'wcscpy',
                                                                                            'wcschr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_wcsupr',
                                                                                            '_CxxThrowException',
                                                                                            'fflush',
                                                                                            'fwprintf',
                                                                                            '_wfopen',
                                                                                            'fclose',
                                                                                            '_except_handler3',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '__winitenv',
                                                                                            '??0_Lockit@std@@QAE@XZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'IsValidSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'LookupAccountNameW',
                                                                                            'LookupAccountSidW',
                                                                                            'AddAce',
                                                                                            'GetAce',
                                                                                            'InitializeAcl',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'GetFileSecurityW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'wsprintfW',
                                                                                            'LoadStringW',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'EnumPrintersW',
                                                                                            'NetLocalGroupEnum',
                                                                                            'NetGroupEnum',
                                                                                            'NetLocalGroupGetMembers',
                                                                                            'NetShareEnum',
                                                                                            'NetShareGetInfo',
                                                                                            'NetServerGetInfo',
                                                                                            'NetGetDCName',
                                                                                            'NetApiBufferFree'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 110,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 9728,
                                                                                       '.text\x00\x00\x00': 49152},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6e8cc572ed4ccbf7ddb375cb841d936eda2366508019e570778ec5dafa0ecbdf'},
 '6ea38d7b6cd4c4adc626596af626e029654f0efae6c64b2a172cffd3091508e7': {'AddressOfEntryPoint': 43507,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionA',
                                                                                      'USER32.dll': 'EndDialog',
                                                                                      'libcurl.dll': 'curl_easy_setopt'},
                                                                      'ImportedFunctions': ['curl_easy_init',
                                                                                            'curl_easy_cleanup',
                                                                                            'curl_easy_perform',
                                                                                            'curl_easy_setopt',
                                                                                            'InitCommonControlsEx',
                                                                                            'PathFindFileNameA',
                                                                                            'PathFindExtensionA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'HeapReAlloc',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateFileW',
                                                                                            'GetCPInfo',
                                                                                            'LoadLibraryExW',
                                                                                            'WriteConsoleW',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'CompareStringW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleFileNameW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ReadFile',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCommandLineA',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlUnwind',
                                                                                            'SetFilePointerEx',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'SetEndOfFile',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'WideCharToMultiByte',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteFile',
                                                                                            'GetConsoleCP',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'AreFileApisANSI',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindWindowExA',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemInt',
                                                                                            'MessageBoxA',
                                                                                            'CreateWindowExA',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'SystemParametersInfoA',
                                                                                            'SetWindowTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'DialogBoxParamA',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'ShellExecuteA'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.rdata\x00\x00': 32768,
                                                                                       '.reloc\x00\x00': 7168,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 104960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6ea38d7b6cd4c4adc626596af626e029654f0efae6c64b2a172cffd3091508e7'},
 '6f621fdb475a137867f308e90b307b25c24643fa42a95ca9e66fb57dd951b13a': {'AddressOfEntryPoint': 5344,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53940,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualQuery',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'Qt5Core.dll': '_ZNK9QSettings8containsERK7QString',
                                                                                      'libgcc_s_dw2-1.dll': '__register_frame_info',
                                                                                      'libstdc++-6.dll': '__gxx_personality_v0',
                                                                                      'msvcrt.dll': 'vfprintf'},
                                                                      'ImportedFunctions': ['_ZN10QArrayData10deallocateEPS_jj',
                                                                                            '_ZN10QJsonValue27stringDataFromQStringHelperERK7QString',
                                                                                            '_ZN10QJsonValueC1ERK11QJsonObject',
                                                                                            '_ZN10QJsonValueC1ERK7QString',
                                                                                            '_ZN10QJsonValueD1Ev',
                                                                                            '_ZN11QJsonObject6insertERK7QStringRK10QJsonValue',
                                                                                            '_ZN11QJsonObjectC1Ev',
                                                                                            '_ZN11QJsonObjectD1Ev',
                                                                                            '_ZN11QTextStreamC1EP6_iobuf6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN11QTextStreamD1Ev',
                                                                                            '_ZN11QTextStreamlsERK7QString',
                                                                                            '_ZN13QJsonDocument9setObjectERK11QJsonObject',
                                                                                            '_ZN13QJsonDocumentC1Ev',
                                                                                            '_ZN13QJsonDocumentD1Ev',
                                                                                            '_ZN13QSharedMemory6attachENS_10AccessModeE',
                                                                                            '_ZN13QSharedMemory6createEiNS_10AccessModeE',
                                                                                            '_ZN13QSharedMemory6setKeyERK7QString',
                                                                                            '_ZN13QSharedMemoryC1EP7QObject',
                                                                                            '_ZN13QSharedMemoryD1Ev',
                                                                                            '_ZN14QStandardPaths16writableLocationENS_16StandardLocationE',
                                                                                            '_ZN16QCoreApplication9argumentsEv',
                                                                                            '_ZN16QCoreApplicationC1ERiPPci',
                                                                                            '_ZN16QCoreApplicationD1Ev',
                                                                                            '_ZN4QDir9setFilterE6QFlagsINS_6FilterEE',
                                                                                            '_ZN4QDirC1ERK7QString',
                                                                                            '_ZN4QDirD1Ev',
                                                                                            '_ZN5QFile4copyERK7QString',
                                                                                            '_ZN5QFile6existsERK7QString',
                                                                                            '_ZN5QFileC1ERK7QString',
                                                                                            '_ZN5QFileD1Ev',
                                                                                            '_ZN5QUuid10createUuidEv',
                                                                                            '_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString15fromUtf8_helperEPKci',
                                                                                            '_ZN7QString16fromAscii_helperEPKci',
                                                                                            '_ZN7QString6appendERKS_',
                                                                                            '_ZN7QString6numberEii',
                                                                                            '_ZN7QString7replaceE5QCharS0_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString9fromUtf16EPKti',
                                                                                            '_ZN7QStringaSERKS_',
                                                                                            '_ZN7QThread5sleepEm',
                                                                                            '_ZN7QThread6msleepEm',
                                                                                            '_ZN8QProcess13startDetachedERK7QString',
                                                                                            '_ZN8QProcess15waitForFinishedEi',
                                                                                            '_ZN8QProcess21readAllStandardOutputEv',
                                                                                            '_ZN8QProcess5startERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN8QProcess9terminateEv',
                                                                                            '_ZN8QProcessC1EP7QObject',
                                                                                            '_ZN8QProcessD1Ev',
                                                                                            '_ZN8QVariantC1EPKc',
                                                                                            '_ZN8QVariantD1Ev',
                                                                                            '_ZN9QFileInfoC1ERKS_',
                                                                                            '_ZN9QFileInfoD1Ev',
                                                                                            '_ZN9QListData6detachEi',
                                                                                            '_ZN9QListData7disposeEPNS_4DataE',
                                                                                            '_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject',
                                                                                            '_ZN9QtPrivate18QStringList_filterEPK11QStringListRK7QStringN2Qt15CaseSensitivityE',
                                                                                            '_ZNK13QJsonDocument6toJsonEv',
                                                                                            '_ZNK4QDir13entryInfoListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE',
                                                                                            '_ZNK4QDir6existsEv',
                                                                                            '_ZNK5QUuid8toStringEv',
                                                                                            '_ZNK7QString3midEii',
                                                                                            '_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString6toLongEPbi',
                                                                                            '_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString8endsWithERKS_N2Qt15CaseSensitivityE',
                                                                                            '_ZNK8QProcess5errorEv',
                                                                                            '_ZNK8QProcess8exitCodeEv',
                                                                                            '_ZNK8QVariant8toStringEv',
                                                                                            '_ZNK9QFileInfo8fileNameEv',
                                                                                            '_ZNK9QFileInfo8filePathEv',
                                                                                            '_ZNK9QSettings5valueERK7QStringRK8QVariant',
                                                                                            '_ZNK9QSettings8containsERK7QString',
                                                                                            '_Unwind_Resume',
                                                                                            '__deregister_frame_info',
                                                                                            '__register_frame_info',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'OpenProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'signal',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'vfprintf',
                                                                                            'EnumProcessModules',
                                                                                            'GetModuleFileNameExW',
                                                                                            '_ZdlPv',
                                                                                            '_Znwj',
                                                                                            '__gxx_personality_v0'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 132,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.eh_fram': 4096,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 31744,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/6f621fdb475a137867f308e90b307b25c24643fa42a95ca9e66fb57dd951b13a'},
 '6f63b0e2accc36f4f9bb2f3c14410b8e1e1d91e184713aa6e4289f1efaae9236': {'AddressOfEntryPoint': 156896,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 1024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'GDI32.dll': 'BitBlt',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'SetRect',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'OleInitialize'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'FreeSid',
                                                                                            'BitBlt',
                                                                                            'OleInitialize',
                                                                                            'SHGetMalloc',
                                                                                            'SetRect',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 9,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2492,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 3072,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 22528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/6f63b0e2accc36f4f9bb2f3c14410b8e1e1d91e184713aa6e4289f1efaae9236'},
 '6f8ce6d9ae9ceb7c28b05731b6603c595ad1b72fe775f0d75eedc7765a3ea29b': {'AddressOfEntryPoint': 4986,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/6f8ce6d9ae9ceb7c28b05731b6603c595ad1b72fe775f0d75eedc7765a3ea29b'},
 '6f9195d85b386099f9f63e3319f5e9e85e0f3a1f0d48cfc9a37e7eff65225933': {'AddressOfEntryPoint': 6304,
                                                                      'DebugRVA': 20460,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49216,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DeactivateActCtx',
                                                                                      'SHLWAPI.dll': 'SHSetThreadRef',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchAppend',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateError',
                                                                                      'imagehlp.dll': 'ImageDirectoryEntryToData',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtSetInformationProcess'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'EncodePointer',
                                                                                            'GetNativeSystemInfo',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetProcessDEPPolicy',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageW',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'Wow64EnableWow64FsRedirection',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'IsWow64Process',
                                                                                            'CreateEventW',
                                                                                            'DecodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'AcquireSRWLockShared',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'QueryActCtxW',
                                                                                            'SearchPathW',
                                                                                            'SetSearchPathMode',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateActCtxW',
                                                                                            'ActivateActCtx',
                                                                                            'GetFileAttributesW',
                                                                                            'CompareStringW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ReleaseActCtx',
                                                                                            'DeactivateActCtx',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowLongW',
                                                                                            'GetClassNameW',
                                                                                            'SetClassLongW',
                                                                                            'GetWindowLongW',
                                                                                            'RegisterClassW',
                                                                                            'GetClassLongW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'LoadStringW',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindow',
                                                                                            'CharNextW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'PostThreadMessageW',
                                                                                            'MessageBoxW',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_purecall',
                                                                                            '_vsnwprintf',
                                                                                            '_wtoi',
                                                                                            '_wcmdln',
                                                                                            'memset',
                                                                                            'ImageDirectoryEntryToData',
                                                                                            'PathCchAppend',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtSetInformationToken',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlImageNtHeader',
                                                                                            'NtSetInformationProcess',
                                                                                            'PathIsRelativeW',
                                                                                            'SHSetThreadRef',
                                                                                            'RoOriginateErrorW',
                                                                                            'RoOriginateError'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 113,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 26472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 26624,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6f9195d85b386099f9f63e3319f5e9e85e0f3a1f0d48cfc9a37e7eff65225933'},
 '6fb858c5e8dfdb969fad1ec848e576288cf9eda9b1158b14fc9988adfee14937': {'AddressOfEntryPoint': 4752,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 176600,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.DLL': 'SetTokenInformation',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'wcslen'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'SetTokenInformation',
                                                                                            'AddAtomA',
                                                                                            'AllocConsole',
                                                                                            'CloseHandle',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateSemaphoreA',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'FindAtomA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FormatMessageA',
                                                                                            'FreeLibrary',
                                                                                            'GetAtomNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExA',
                                                                                            'InitializeCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedIncrement',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReleaseSemaphore',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            '__getmainargs',
                                                                                            '__mb_cur_max',
                                                                                            '__p__environ',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_assert',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_fullpath',
                                                                                            '_iob',
                                                                                            '_onexit',
                                                                                            '_setmode',
                                                                                            '_snprintf',
                                                                                            'abort',
                                                                                            'atexit',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strlen',
                                                                                            'strncat',
                                                                                            'strncpy',
                                                                                            'strtoul',
                                                                                            'vfprintf',
                                                                                            'wcslen',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 89,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1940,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 74240,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 70656,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/6fb858c5e8dfdb969fad1ec848e576288cf9eda9b1158b14fc9988adfee14937'},
 '6fe1ff95b3c6ab578445bf126ec2bc7eb0b5244d2f27c6e443ac9a645fc23152': {'AddressOfEntryPoint': 17072,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINSTA.dll': 'WinStationSendMessageW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['CreateFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'ReadFile',
                                                                                            'LocalAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'GetTimeFormatW',
                                                                                            'SetThreadUILanguage',
                                                                                            'SetFilePointer',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'GetFileType',
                                                                                            'SetLastError',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            'realloc',
                                                                                            'wcscat_s',
                                                                                            '_iob',
                                                                                            '_fileno',
                                                                                            '_vsnwprintf',
                                                                                            '_snwprintf_s',
                                                                                            '_wcslwr',
                                                                                            'memcpy',
                                                                                            '_wcsdup',
                                                                                            'wcstoul',
                                                                                            'strstr',
                                                                                            '_isatty',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'feof',
                                                                                            'wcschr',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'vswprintf_s',
                                                                                            'fgets',
                                                                                            '_ultoa',
                                                                                            'wcscpy_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcstol',
                                                                                            'iswdigit',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'WinStationQueryInformationW',
                                                                                            'WinStationFreeMemory',
                                                                                            'WinStationOpenServerW',
                                                                                            'WinStationEnumerateW',
                                                                                            'WinStationSendMessageW',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 89,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 14848},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6fe1ff95b3c6ab578445bf126ec2bc7eb0b5244d2f27c6e443ac9a645fc23152'},
 '6fe97c56d75dbb59ceb78d88bee42e0667fa28126a2063b6098a24dc5fbe95e6': {'AddressOfEntryPoint': 338768,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 495616,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'SetThreadUILanguage',
                                                                                      'OLEAUT32.dll': 'VariantChangeType',
                                                                                      'SHLWAPI.dll': 'SHCreateStreamOnFileEx',
                                                                                      'USER32.dll': 'CharToOemW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'dbghelp.dll': 'SymFromAddr',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlDeleteCriticalSection',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'pdh.dll': 'PdhCloseLog',
                                                                                      'tdh.dll': 'TdhGetEventMapInformation',
                                                                                      'wevtapi.dll': 'EvtIntCreateLocalLogfile'},
                                                                      'ImportedFunctions': ['DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'LockResource',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'SizeofResource',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'FindResourceExW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindResourceW',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'LoadResource',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'GetFileSize',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'ReadFile',
                                                                                            'lstrlenW',
                                                                                            'GetProcAddress',
                                                                                            'CreateThread',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'LocalFree',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'SetLastError',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapReAlloc',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'FreeResource',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FreeLibrary',
                                                                                            'VirtualFree',
                                                                                            'TzSpecificLocalTimeToSystemTime',
                                                                                            'FormatMessageW',
                                                                                            'VirtualAlloc',
                                                                                            'DecodePointer',
                                                                                            'GetUserDefaultLocaleName',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'CreateFileMappingW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFileMUIPath',
                                                                                            'GetConsoleMode',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'SetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'strncpy_s',
                                                                                            '_splitpath_s',
                                                                                            'vfprintf',
                                                                                            'strrchr',
                                                                                            '_purecall',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'ceil',
                                                                                            'atol',
                                                                                            'strtok',
                                                                                            'fgets',
                                                                                            'isprint',
                                                                                            'rewind',
                                                                                            '_iob',
                                                                                            '_wcsnicmp',
                                                                                            'fopen',
                                                                                            'printf',
                                                                                            '_strcmpi',
                                                                                            'vsprintf_s',
                                                                                            'qsort',
                                                                                            '_atoi64',
                                                                                            '_strnicmp',
                                                                                            'wcsncmp',
                                                                                            '_vsnprintf',
                                                                                            'wcsstr',
                                                                                            'wcschr',
                                                                                            'wcstok_s',
                                                                                            'wcsrchr',
                                                                                            'fprintf',
                                                                                            'strstr',
                                                                                            'fputs',
                                                                                            'strncmp',
                                                                                            'sprintf_s',
                                                                                            'strchr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcslwr',
                                                                                            'fwprintf',
                                                                                            '_stricmp',
                                                                                            'fclose',
                                                                                            'bsearch',
                                                                                            '_ftol2',
                                                                                            '_ftol2_sse',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_errno',
                                                                                            'ferror',
                                                                                            'fgetws',
                                                                                            'wcstok',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            'iswspace',
                                                                                            'wcstombs_s',
                                                                                            'wcstoul',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_wfopen',
                                                                                            'strcpy_s',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            '_wcsicmp',
                                                                                            '_getmbcp',
                                                                                            'memset',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'LookupAccountSidW',
                                                                                            'OpenTraceW',
                                                                                            'CloseTrace',
                                                                                            'ProcessTrace',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RtlCompareString',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlRaiseException',
                                                                                            'RtlAnsiCharToUnicodeChar',
                                                                                            'RtlCompareMemory',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RtlDeleteCriticalSection',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'LoadStringW',
                                                                                            'CharToOemW',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VarBstrFromDate',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VarDateFromStr',
                                                                                            'VariantChangeType',
                                                                                            'TdhLoadManifest',
                                                                                            'TdhUnloadManifest',
                                                                                            'TdhGetProperty',
                                                                                            'TdhGetPropertyOffsetAndSize',
                                                                                            'TdhGetPropertySize',
                                                                                            'TdhGetAllEventsInformation',
                                                                                            'TdhGetEventInformation',
                                                                                            'TdhLoadManifestFromBinary',
                                                                                            'TdhQueryProviderFieldInformation',
                                                                                            'TdhEnumerateProviderFieldInformation',
                                                                                            'TdhFormatProperty',
                                                                                            'TdhGetEventMapInformation',
                                                                                            'WSAGetLastError',
                                                                                            'WSAAddressToStringW',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'SymInitialize',
                                                                                            'SymSearch',
                                                                                            'SymUnloadModule64',
                                                                                            'SymEnumTypesByName',
                                                                                            'MakeSureDirectoryPathExists',
                                                                                            'SymCleanup',
                                                                                            'SymGetOptions',
                                                                                            'SymRegisterCallback64',
                                                                                            'SymGetTypeInfo',
                                                                                            'SymLoadModuleEx',
                                                                                            'SymGetLineFromAddr64',
                                                                                            'SymSetOptions',
                                                                                            'SymFromAddr',
                                                                                            'EvtIntWriteXmlEventToLocalLogfile',
                                                                                            'EvtIntRenderResourceEventTemplate',
                                                                                            'EvtClose',
                                                                                            'EvtIntCreateLocalLogfile',
                                                                                            'CreateXmlReader',
                                                                                            'PdhCloseQuery',
                                                                                            'PdhBindInputDataSourceW',
                                                                                            'PdhCollectQueryData',
                                                                                            'PdhComputeCounterStatistics',
                                                                                            'PdhGetDataSourceTimeRangeH',
                                                                                            'PdhParseCounterPathW',
                                                                                            'PdhGetLogFileTypeW',
                                                                                            'PdhOpenQueryH',
                                                                                            'PdhGetRawCounterValue',
                                                                                            'PdhAddCounterW',
                                                                                            'PdhExpandWildCardPathHW',
                                                                                            'PdhSetQueryTimeRange',
                                                                                            'PdhTranslate009CounterW',
                                                                                            'PdhCloseLog'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 260,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 337408},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/6fe97c56d75dbb59ceb78d88bee42e0667fa28126a2063b6098a24dc5fbe95e6'},
 '703ed2ae1b858f6a68ccd732524da6144c7c0db4734b88cc11f86572a7bce297': {'AddressOfEntryPoint': 37760,
                                                                      'DebugRVA': 4352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleOutputCP',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'DeleteFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetComputerNameW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'SetThreadStackGuarantee',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryValueExW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlCompareMemory',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-audit-l1-1-1.dll': 'AuditEnumeratePerUserPolicy',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetLengthSid',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupPrivilegeValueW',
                                                                                      'api-ms-win-security-lsapolicy-l1-1-0.dll': 'LsaOpenPolicy',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'api-ms-win-security-sddlparsecond-l1-1-0.dll': 'LocalGetStringForCondition',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlFreeHeap'},
                                                                      'ImportedFunctions': ['ferror',
                                                                                            '_purecall',
                                                                                            'fgetws',
                                                                                            '_initterm',
                                                                                            '_wfopen',
                                                                                            'wscanf',
                                                                                            'feof',
                                                                                            '_controlfp',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'qsort',
                                                                                            '__setusermatherr',
                                                                                            'vfwprintf',
                                                                                            'fclose',
                                                                                            '_wtoi',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '__p__fmode',
                                                                                            '_callnewh',
                                                                                            '_vsnwprintf',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_cexit',
                                                                                            '_amsg_exit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'wprintf',
                                                                                            'memmove_s',
                                                                                            'wcschr',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf_s',
                                                                                            '_except_handler4_common',
                                                                                            '_wcsicmp',
                                                                                            '_wsetlocale',
                                                                                            '_lock',
                                                                                            '_iob',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'memset',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'FormatMessageW',
                                                                                            'HeapSetInformation',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'LookupAccountNameW',
                                                                                            'LookupAccountSidW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetAce',
                                                                                            'SetSecurityDescriptorSacl',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'DeleteAce',
                                                                                            'GetAclInformation',
                                                                                            'GetLengthSid',
                                                                                            'CloseHandle',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetStdHandle',
                                                                                            'RtlCompareMemory',
                                                                                            'Sleep',
                                                                                            'OutputDebugStringA',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetComputerNameW',
                                                                                            'AuditSetPerUserPolicy',
                                                                                            'AuditSetGlobalSaclW',
                                                                                            'AuditFree',
                                                                                            'AuditQuerySecurity',
                                                                                            'AuditEnumerateSubCategories',
                                                                                            'AuditQueryGlobalSaclW',
                                                                                            'AuditSetSecurity',
                                                                                            'AuditLookupCategoryNameW',
                                                                                            'AuditEnumerateCategories',
                                                                                            'AuditLookupSubCategoryNameW',
                                                                                            'AuditSetSystemPolicy',
                                                                                            'AuditQuerySystemPolicy',
                                                                                            'AuditQueryPerUserPolicy',
                                                                                            'AuditEnumeratePerUserPolicy',
                                                                                            'LsaLookupSids',
                                                                                            'LsaClose',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaOpenPolicy',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlImageNtHeader',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlGUIDFromString',
                                                                                            'RtlFreeHeap',
                                                                                            'LocalGetStringForCondition',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 27,
                                                                      'NumberOfImportFunctions': 132,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 38912},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/703ed2ae1b858f6a68ccd732524da6144c7c0db4734b88cc11f86572a7bce297'},
 '70737bfd33f154a76bc600824185e30cb37b7a94a58a2906fab70552a66172f5': {'AddressOfEntryPoint': 90206,
                                                                      'DebugRVA': 90012,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1864,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 82432},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/70737bfd33f154a76bc600824185e30cb37b7a94a58a2906fab70552a66172f5'},
 '70b3e9aba2f8da3e00788cace8a7efe7968f93f0225c705e41e58e98a9afb25f': {'AddressOfEntryPoint': 11000,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'LCMapStringW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'ntdll.dll': 'RtlUnwindEx'},
                                                                      'ImportedFunctions': ['LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsAlloc',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapCreate',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetHandleCount',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'OutputDebugStringA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtSetSystemInformation',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'CommandLineToArgvW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 29696},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/70b3e9aba2f8da3e00788cace8a7efe7968f93f0225c705e41e58e98a9afb25f'},
 '70bffc9c81bde425bbd3b2eaf54fb82764d15808f92e9338d2b954a5b912b43b': {'AddressOfEntryPoint': 18222,
                                                                      'DebugRVA': 17980,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4872,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 10240},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/70bffc9c81bde425bbd3b2eaf54fb82764d15808f92e9338d2b954a5b912b43b'},
 '70e1f8796b131428393ea0f99186d293048b6e0afea68015f91336618e64564a': {'AddressOfEntryPoint': 142608,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSVCRT.dll': 'exit',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'SetTimer'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'ExitProcess',
                                                                                            'exit',
                                                                                            'SysAllocString',
                                                                                            'ShellExecuteExA',
                                                                                            'SetTimer'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 8,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 32324,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 32768,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/70e1f8796b131428393ea0f99186d293048b6e0afea68015f91336618e64564a'},
 '70ff5a0b20fca4226451174c3c079bef1cf9f35bdd776e20e846c08519d5671e': {'AddressOfEntryPoint': 31908,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33248,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'DUI70.dll': '?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z',
                                                                                      'DUser.dll': 'AddLayeredRef',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SLC.dll': 'SLClose',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoInitialize',
                                                                                      'msvcrt.dll': '_commode',
                                                                                      'ntdll.dll': 'WinSqmSetDWORD',
                                                                                      'ole32.dll': 'CoTaskMemAlloc',
                                                                                      'sppcext.dll': 'SLActivateProduct'},
                                                                      'ImportedFunctions': ['EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventWrite',
                                                                                            'GetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetTickCount64',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueueUserWorkItem',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'OpenEventW',
                                                                                            'CreateMutexW',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'OpenProcess',
                                                                                            'UnregisterWaitEx',
                                                                                            'CloseHandle',
                                                                                            'VirtualQuery',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'LocalFree',
                                                                                            'CompareStringW',
                                                                                            'GetLastError',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcessHeap',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetSystemMetrics',
                                                                                            'CharUpperBuffW',
                                                                                            'CharUpperW',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'wcschr',
                                                                                            '__dllonexit',
                                                                                            'floorf',
                                                                                            'memcpy',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'wcscmp',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            'memmove',
                                                                                            'towlower',
                                                                                            '_purecall',
                                                                                            'memset',
                                                                                            '_commode',
                                                                                            'CommandLineToArgvW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'WinSqmSetDWORD',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoGetObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysFreeString',
                                                                                            'RoUninitialize',
                                                                                            'RoInitialize',
                                                                                            'SetGadgetFlags',
                                                                                            'AddLayeredRef',
                                                                                            'SLActivateProduct',
                                                                                            '?GetContentString@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z',
                                                                                            '?Release@Value@DirectUI@@QEAAXXZ',
                                                                                            '?GetRoot@Element@DirectUI@@QEAAPEAV12@XZ',
                                                                                            '?Paste@TouchEditBase@DirectUI@@SA?AVUID@@XZ',
                                                                                            '?ClearButtonClicked@TouchEdit2@DirectUI@@SA?AVUID@@XZ',
                                                                                            '?UserTextChanged@TouchEditBase@DirectUI@@SA?AVUID@@XZ',
                                                                                            '?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ',
                                                                                            '?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z',
                                                                                            '?CreateString@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z',
                                                                                            'DuiCreateObject',
                                                                                            '?SetInputScope@TouchEdit2@DirectUI@@QEAAJW4__MIDL___MIDL_itf_inputscope_0000_0000_0001@@@Z',
                                                                                            '?GetSelection@TouchEdit2@DirectUI@@QEAAJPEAJ0@Z',
                                                                                            '?SetEnabled@Element@DirectUI@@QEAAJ_N@Z',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z',
                                                                                            'GetScaleFactor',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QEAAJH@Z',
                                                                                            '?SetContentString@Element@DirectUI@@QEAAJPEBG@Z',
                                                                                            'StrToID',
                                                                                            '?SetCaretPosition@TouchEdit2@DirectUI@@QEAAJJ@Z',
                                                                                            '?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z',
                                                                                            'SLGetProductSkuInformation',
                                                                                            'SLGetWindowsInformation',
                                                                                            'SLConsumeWindowsRight',
                                                                                            'SLGetPKeyInformation',
                                                                                            'SLOpen',
                                                                                            'SLClose'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7488,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 7680,
                                                                                       '.text\x00\x00\x00': 31744},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/70ff5a0b20fca4226451174c3c079bef1cf9f35bdd776e20e846c08519d5671e'},
 '7129c97108c2c3cf135a9118e1db3a6d134cf340d874284ffc647c67dca9fffe': {'AddressOfEntryPoint': 18858,
                                                                      'DebugRVA': 53712,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'ReadFile',
                                                                                      'SHLWAPI.dll': 'PathQuoteSpacesW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetTempFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateDirectoryW',
                                                                                            'SizeofResource',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'lstrlenW',
                                                                                            'GetTempPathW',
                                                                                            'RaiseException',
                                                                                            'LockResource',
                                                                                            'RemoveDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'LocalFree',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileMappingW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'PathQuoteSpacesW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'wvsprintfW',
                                                                                            'CharLowerBuffW',
                                                                                            'MessageBoxW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 652472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 652800,
                                                                                       '.text\x00\x00\x00': 47616},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7129c97108c2c3cf135a9118e1db3a6d134cf340d874284ffc647c67dca9fffe'},
 '71434f2a46e7ebf73a1e06100bda24b52459a37d0dd39fa3ccfa63c54708fdac': {'AddressOfEntryPoint': 4504,
                                                                      'DebugRVA': 86688,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CreateFileA'},
                                                                      'ImportedFunctions': ['GetCommandLineA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapFree',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 81920},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/71434f2a46e7ebf73a1e06100bda24b52459a37d0dd39fa3ccfa63c54708fdac'},
 '7150b8e2025d685feb0bfc1e1a05ba481106c4259073ebf5fbe5b427084409a0': {'AddressOfEntryPoint': 44960,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathRemoveBackslashW',
                                                                                      'imagehlp.dll': 'CheckSumMappedFile',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtAdjustPrivilegesToken'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetTokenInformation',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'DeviceIoControl',
                                                                                            'CopyFileExW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetCurrentThread',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'SetLastError',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetVolumePathNameW',
                                                                                            'WriteFile',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FindFirstFileW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'LocalFree',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_wcsicmp',
                                                                                            '__setusermatherr',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            'memcpy',
                                                                                            '_snwscanf_s',
                                                                                            'wcsstr',
                                                                                            '_wcslwr',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf_s',
                                                                                            '_iob',
                                                                                            'fflush',
                                                                                            'fwprintf',
                                                                                            'swprintf_s',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf',
                                                                                            'wcsrchr',
                                                                                            'memset',
                                                                                            'CheckSumMappedFile',
                                                                                            'CommandLineToArgvW',
                                                                                            'PathRemoveBackslashW',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenKey',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'NtSetInformationFile',
                                                                                            'LdrFindResource_U',
                                                                                            'LdrAccessResource',
                                                                                            'NtOpenFile',
                                                                                            'RtlImageNtHeader',
                                                                                            'NtOpenProcess',
                                                                                            'NtCreateEvent',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtSetInformationThread',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtQueryInformationProcess',
                                                                                            'NtQueryInformationFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtQueryInformationThread',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtClose',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtResetEvent',
                                                                                            'NtQueryBootEntryOrder',
                                                                                            'NtTranslateFilePath',
                                                                                            'NtEnumerateBootEntries',
                                                                                            'NtOpenProcessTokenEx',
                                                                                            'RtlImpersonateSelf',
                                                                                            'NtOpenThreadTokenEx',
                                                                                            'NtAdjustPrivilegesToken'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 45568},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/7150b8e2025d685feb0bfc1e1a05ba481106c4259073ebf5fbe5b427084409a0'},
 '718e638164e20fc5464aa3dfb302de35728b1b61c7fc0dd1d5da47b1848bbc1a': {'AddressOfEntryPoint': 4646,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16552,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualFree',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['lstrlenA',
                                                                                            'ExitProcess',
                                                                                            'lstrcatA',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'FreeLibrary',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'WriteFile',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'lstrcmpA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTempPathA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetFileSize',
                                                                                            'GetLastError',
                                                                                            'CreateMutexA',
                                                                                            'GetModuleFileNameA',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 3,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 25,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 9972,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.gentee\x00': 80896,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/718e638164e20fc5464aa3dfb302de35728b1b61c7fc0dd1d5da47b1848bbc1a'},
 '7191ba350f924cd2c059f0244a2a933656d19a66e99e05d079d7e95bd2634b92': {'AddressOfEntryPoint': 112928,
                                                                      'DebugRVA': 5040,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 155648,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceMessage',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'bcrypt.dll': 'BCryptDestroyKey',
                                                                                      'msvcrt.dll': '??0exception@@QEAA@XZ',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['SystemFunction036',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'MakeAbsoluteSD',
                                                                                            'TraceMessage',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapSetInformation',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'RaiseFailFastException',
                                                                                            'LocalFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'FormatMessageW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'iswascii',
                                                                                            'iswpunct',
                                                                                            '__iob_func',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'fgetc',
                                                                                            'fgetpos',
                                                                                            'fsetpos',
                                                                                            '_fseeki64',
                                                                                            'fwrite',
                                                                                            'setvbuf',
                                                                                            'ungetc',
                                                                                            'fgetwc',
                                                                                            'fputwc',
                                                                                            'ungetwc',
                                                                                            'memcpy_s',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '__mb_cur_max',
                                                                                            'strerror',
                                                                                            '__uncaught_exception',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_callnewh',
                                                                                            '___mb_cur_max_func',
                                                                                            '_errno',
                                                                                            '__pctype_func',
                                                                                            '___lc_handle_func',
                                                                                            '___lc_codepage_func',
                                                                                            'iswspace',
                                                                                            'calloc',
                                                                                            '__crtLCMapStringW',
                                                                                            'isspace',
                                                                                            'tolower',
                                                                                            'strtod',
                                                                                            'abort',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1bad_cast@@UEAA@XZ',
                                                                                            '??0bad_cast@@QEAA@AEBV0@@Z',
                                                                                            '??0bad_cast@@QEAA@PEBD@Z',
                                                                                            'towupper',
                                                                                            'iswdigit',
                                                                                            'iswalpha',
                                                                                            '_vsnwprintf',
                                                                                            'ldexp',
                                                                                            '_wtoi',
                                                                                            '_getwch',
                                                                                            '_wcsicmp',
                                                                                            'setlocale',
                                                                                            '_purecall',
                                                                                            'memmove_s',
                                                                                            'strcspn',
                                                                                            'memchr',
                                                                                            'localeconv',
                                                                                            'sprintf_s',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'memmove',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_iob',
                                                                                            '_fileno',
                                                                                            '_setmode',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptEncrypt',
                                                                                            'BCryptGenerateSymmetricKey',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptSetProperty',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptDestroyKey',
                                                                                            'LoadStringW',
                                                                                            'CoInitializeEx',
                                                                                            'CoGetObject',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 137,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 135168},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/7191ba350f924cd2c059f0244a2a933656d19a66e99e05d079d7e95bd2634b92'},
 '71934e414a4a965a71da79ab082ec41e886534be735937c3461668c2744dbfab': {'AddressOfEntryPoint': 193920,
                                                                      'DebugRVA': 5584,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 249856,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventRegister',
                                                                                      'KERNEL32.dll': 'GetModuleHandleExW',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'api-ms-win-core-winrt-error-l1-1-0.dll': 'RoOriginateError',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoReportFailedDelegate',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoRegisterActivationFactories',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsCreateString',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlLookupFunctionEntry',
                                                                                      'ole32.dll': 'CoResumeClassObjects'},
                                                                      'ImportedFunctions': ['EventWrite',
                                                                                            'RegSetValueExW',
                                                                                            'RegSetKeyValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegCreateKeyExW',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenMutexW',
                                                                                            'GetTickCount64',
                                                                                            'AcquireSRWLockShared',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'ResetEvent',
                                                                                            'CreateEventExW',
                                                                                            'CloseHandle',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'InitializeSRWLock',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleExW',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_snwprintf_s',
                                                                                            '_purecall',
                                                                                            'memmove',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'wcscpy_s',
                                                                                            'memcpy_s',
                                                                                            'wcsncpy_s',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '_XcptFilter',
                                                                                            '__set_app_type',
                                                                                            'wcscmp',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'PropVariantClear',
                                                                                            'CoTaskMemFree',
                                                                                            'CoResumeClassObjects',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'RoOriginateError',
                                                                                            'RtlQueryWnfStateData',
                                                                                            'RtlSubscribeWnfStateChangeNotification',
                                                                                            'RtlUnsubscribeWnfStateChangeNotification',
                                                                                            'RtlPublishWnfStateData',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RoTransformError',
                                                                                            'IsErrorPropagationEnabled',
                                                                                            'RoGetMatchingRestrictedErrorInfo',
                                                                                            'RoOriginateErrorW',
                                                                                            'RoReportFailedDelegate',
                                                                                            'TranslateMessage',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'KillTimer',
                                                                                            'SetCoalescableTimer',
                                                                                            'GetAncestor',
                                                                                            'GetForegroundWindow',
                                                                                            'RealGetWindowClassW',
                                                                                            'DispatchMessageW',
                                                                                            'RoRevokeActivationFactories',
                                                                                            'RoRegisterActivationFactories',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsIsStringEmpty',
                                                                                            'WindowsStringHasEmbeddedNull',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsCreateString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 10240,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 227840},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/71934e414a4a965a71da79ab082ec41e886534be735937c3461668c2744dbfab'},
 '719e55fc497a8a052074cca8f99837f6e692011727a8bfac0c7947f7a3cd8100': {'AddressOfEntryPoint': 22512,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EnumDependentServicesW',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'USER32.dll': 'PostThreadMessageW',
                                                                                      'iisutil.dll': 'AllocateAndCreateWellKnownSid',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['SetSecurityDescriptorGroup',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetEntriesInAclW',
                                                                                            'RegOpenKeyExW',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegisterEventSourceW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenProcessToken',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'GetTokenInformation',
                                                                                            'RegQueryValueExW',
                                                                                            'DeregisterEventSource',
                                                                                            'LookupAccountSidW',
                                                                                            'ReportEventW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'QueryServiceConfigW',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatusEx',
                                                                                            'QueryServiceStatus',
                                                                                            'StartServiceW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'QueryServiceConfig2W',
                                                                                            'EnumDependentServicesW',
                                                                                            'ReadProcessMemory',
                                                                                            'lstrlenW',
                                                                                            'CompareStringOrdinal',
                                                                                            'OpenProcess',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCommandLineW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateEventW',
                                                                                            'lstrcmpiW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'DispatchMessageW',
                                                                                            'GetMessageW',
                                                                                            'CharNextW',
                                                                                            'PostThreadMessageW',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            'memset',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_wcsicmp',
                                                                                            'wcscpy_s',
                                                                                            'swprintf_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_strcmpi',
                                                                                            'iswctype',
                                                                                            '_wtol',
                                                                                            'sprintf_s',
                                                                                            '__set_app_type',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            '??0BUFFER@@QEAA@XZ',
                                                                                            '?Resize@BUFFER@@QEAA_NK@Z',
                                                                                            '??1BUFFER@@QEAA@XZ',
                                                                                            'PuDbgPrintError',
                                                                                            'SetExplicitAccessSettings',
                                                                                            'FreeWellKnownSid',
                                                                                            'AllocateAndCreateWellKnownSid'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 7168,
                                                                                       '.text\x00\x00\x00': 21504},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/719e55fc497a8a052074cca8f99837f6e692011727a8bfac0c7947f7a3cd8100'},
 '719fd51ae8a7f71c9dc4fba37f50d88084f9b55f169122ed412559343f9411ab': {'AddressOfEntryPoint': 346223,
                                                                      'DebugRVA': 488928,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 487424,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'GDI32.dll': 'ExtTextOutW',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'GetUserDefaultLCID',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WS2_32.dll': 'closesocket',
                                                                                      'gdiplus.dll': 'GdipSetStringFormatLineAlign',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            '_TrackMouseEvent',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileTime',
                                                                                            'GetFileSize',
                                                                                            'MulDiv',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVolumeInformationA',
                                                                                            'lstrlenA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'DeviceIoControl',
                                                                                            'SetPriorityClass',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetEndOfFile',
                                                                                            'TerminateThread',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFilePointerEx',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'CreateFileA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'ReadFile',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'VirtualAlloc',
                                                                                            'LCMapStringA',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'MoveFileW',
                                                                                            'RtlUnwind',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetModuleHandleA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'GetFileType',
                                                                                            'SetFilePointer',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'GetACP',
                                                                                            'FreeResource',
                                                                                            'ExitProcess',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'Sleep',
                                                                                            'lstrcatW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateSemaphoreW',
                                                                                            'SetErrorMode',
                                                                                            'TerminateProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrcmpW',
                                                                                            'GetLastError',
                                                                                            'GetVersionExW',
                                                                                            'WriteFile',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'VirtualQuery',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FindResourceExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'DeleteFileW',
                                                                                            'FreeLibrary',
                                                                                            'GetTempPathW',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'GetLocaleInfoW',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'CharNextW',
                                                                                            'wvsprintfW',
                                                                                            'SetCursor',
                                                                                            'InflateRect',
                                                                                            'OffsetRect',
                                                                                            'SetWindowRgn',
                                                                                            'IsZoomed',
                                                                                            'IntersectRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'CharPrevW',
                                                                                            'SetRect',
                                                                                            'CreateCaret',
                                                                                            'HideCaret',
                                                                                            'ShowCaret',
                                                                                            'SetCaretPos',
                                                                                            'ClientToScreen',
                                                                                            'GetSysColor',
                                                                                            'SetFocus',
                                                                                            'GetFocus',
                                                                                            'MapWindowPoints',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBoxW',
                                                                                            'IsIconic',
                                                                                            'InvalidateRgn',
                                                                                            'MoveWindow',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'ShowWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'wsprintfW',
                                                                                            'FindWindowW',
                                                                                            'SetForegroundWindow',
                                                                                            'SendMessageW',
                                                                                            'BringWindowToTop',
                                                                                            'ScreenToClient',
                                                                                            'SetActiveWindow',
                                                                                            'PostQuitMessage',
                                                                                            'CreatePopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'TrackPopupMenu',
                                                                                            'PtInRect',
                                                                                            'LoadIconW',
                                                                                            'FindWindowExW',
                                                                                            'GetCursorPos',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'SetWindowTextW',
                                                                                            'CreateWindowExW',
                                                                                            'GetKeyState',
                                                                                            'GetDC',
                                                                                            'GetClientRect',
                                                                                            'SetWindowLongW',
                                                                                            'IsRectEmpty',
                                                                                            'GetWindowLongW',
                                                                                            'InvalidateRect',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'IsWindow',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'PostMessageW',
                                                                                            'ReleaseDC',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadCursorW',
                                                                                            'GetMenu',
                                                                                            'AdjustWindowRectEx',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'CallWindowProcW',
                                                                                            'LoadImageW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'EnableWindow',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'GetUpdateRect',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SaveDC',
                                                                                            'BitBlt',
                                                                                            'RestoreDC',
                                                                                            'Rectangle',
                                                                                            'SetWindowOrgEx',
                                                                                            'DeleteDC',
                                                                                            'CreatePen',
                                                                                            'GetStockObject',
                                                                                            'GetObjectW',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'ExtSelectClipRgn',
                                                                                            'SetBkColor',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateCompatibleDC',
                                                                                            'MoveToEx',
                                                                                            'CreatePenIndirect',
                                                                                            'RoundRect',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'TextOutW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetCharABCWidthsW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetClipBox',
                                                                                            'CombineRgn',
                                                                                            'CreateRoundRectRgn',
                                                                                            'LineTo',
                                                                                            'SelectClipRgn',
                                                                                            'StretchBlt',
                                                                                            'CreateDIBSection',
                                                                                            'SetStretchBltMode',
                                                                                            'GetTextMetricsW',
                                                                                            'CreateFontIndirectW',
                                                                                            'ExtTextOutW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegDeleteValueW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'ShellExecuteW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'CoCreateGuid',
                                                                                            'OleLockRunning',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipDrawString',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipCreateLineBrushI',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'PathFileExistsW',
                                                                                            'gethostbyname',
                                                                                            'inet_addr',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'select',
                                                                                            'connect',
                                                                                            'htons',
                                                                                            'ioctlsocket',
                                                                                            'inet_ntoa',
                                                                                            'WSAGetLastError',
                                                                                            'socket',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'closesocket',
                                                                                            'GetAdaptersAddresses'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 324,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 543500,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11776,
                                                                                       '.rdata\x00\x00': 96256,
                                                                                       '.reloc\x00\x00': 33280,
                                                                                       '.rsrc\x00\x00\x00': 543744,
                                                                                       '.text\x00\x00\x00': 479744},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/719fd51ae8a7f71c9dc4fba37f50d88084f9b55f169122ed412559343f9411ab'},
 '71c660fd9bdc1b0677cc14930b5450b2489727526918551c39510025be2ca183': {'AddressOfEntryPoint': 26048,
                                                                      'DebugRVA': 4496,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'PeekMessageW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlLookupFunctionEntry',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'AcquireSRWLockShared',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'DecodePointer',
                                                                                      'msvcrt.dll': '__CxxFrameHandler3',
                                                                                      'ntdll.dll': 'NtGetMUIRegistryInfo',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['MsgWaitForMultipleObjects',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_purecall',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            'memmove',
                                                                                            '__C_specific_handler',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_CxxThrowException',
                                                                                            '__wgetmainargs',
                                                                                            'free',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'abort',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'InitializeSRWLock',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'AcquireSRWLockShared',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'NtGetMUIRegistryInfo',
                                                                                            'CoInitialize',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/71c660fd9bdc1b0677cc14930b5450b2489727526918551c39510025be2ca183'},
 '71dc30513eb3dcb8c84aa1dbf8d2a985477ae7a3d12921edd2b7b1db8eae11fb': {'AddressOfEntryPoint': 11328,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'RASAPI32.dll': 'RasGetConnectStatusW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmSetDWORD'},
                                                                      'ImportedFunctions': ['GetCommandLineW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'WriteFile',
                                                                                            'GlobalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'CreateFileW',
                                                                                            'CompareStringW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GlobalFree',
                                                                                            'LocalAlloc',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'CreateEventW',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'getchar',
                                                                                            'exit',
                                                                                            '_wcsupr',
                                                                                            '_itow',
                                                                                            'wcsstr',
                                                                                            '__iob_func',
                                                                                            'fputwc',
                                                                                            '_getwch',
                                                                                            'wcschr',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'RasEnumConnectionsW',
                                                                                            'RasGetEapUserIdentityW',
                                                                                            'RasDialW',
                                                                                            'RasGetEntryPropertiesW',
                                                                                            'RasCompleteDialMachineCleanup',
                                                                                            'RasGetErrorStringW',
                                                                                            'RasFreeEapUserIdentityW',
                                                                                            'RasHandleTriggerConnDisconnect',
                                                                                            'RasHangUpW',
                                                                                            'RasGetConnectStatusW',
                                                                                            'LoadStringW',
                                                                                            'CommandLineToArgvW',
                                                                                            'WinSqmSetDWORD'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/71dc30513eb3dcb8c84aa1dbf8d2a985477ae7a3d12921edd2b7b1db8eae11fb'},
 '721d2b78e576151975dd3e4a2612e983f3bdc7233b04940466f4cabf73da12d8': {'AddressOfEntryPoint': 14592,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetErrorMode',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-eventlog-legacy-l1-1-0.dll': 'ReportEventW',
                                                                                      'ifsutil.dll': '?GetSnapshotErrorMessage@SNAPSHOT@@SGEJPAVWSTRING@@@Z',
                                                                                      'msvcrt.dll': '_except_handler4_common',
                                                                                      'ntdll.dll': 'RtlUnhandledExceptionFilter',
                                                                                      'ulib.dll': '?DisableBreakHandling@KEYBOARD@@SGEXZ'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'HeapSetInformation',
                                                                                            '?DisplayMsg@MESSAGE@@QAAEKPBDZZ',
                                                                                            '?DisplayMsg@MESSAGE@@QAAEKW4MESSAGE_TYPE@@KPBDZZ',
                                                                                            '?Display@MESSAGE@@QAAEPBDZZ',
                                                                                            '?FreeLibraryHandle@SYSTEM@@SGXPAX@Z',
                                                                                            '?QueryNextLibraryEntryPoint@SYSTEM@@SGP6GHXZPAXPBVWSTRING@@@Z',
                                                                                            '?QueryLibraryEntryPoint@SYSTEM@@SGP6GHXZPBVWSTRING@@0PAPAX@Z',
                                                                                            '?QueryDriveType@SYSTEM@@SG?AW4DRIVE_TYPE@@PBVWSTRING@@@Z',
                                                                                            '?QueryCurrentDosDriveName@SYSTEM@@SGEPAVWSTRING@@@Z',
                                                                                            '?EnableBreakHandling@KEYBOARD@@SGEXZ',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?Resize@HMEM@@QAEEKK@Z',
                                                                                            '?Initialize@HMEM@@QAEEXZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0HMEM@@QAE@XZ',
                                                                                            '??1FSTRING@@UAE@XZ',
                                                                                            '?IsLoggingEnabled@MESSAGE@@QAEEXZ',
                                                                                            '?DisplayMsg@MESSAGE@@QAEEK@Z',
                                                                                            '?Initialize@FSTRING@@QAEPAVWSTRING@@PAGK@Z',
                                                                                            '??8WSTRING@@QBEEABV0@@Z',
                                                                                            '?Log@MESSAGE@@QAAEPBDZZ',
                                                                                            '?Stricmp@WSTRING@@QBEJPBV1@@Z',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '??0CHKDSK_MESSAGE@@QAE@XZ',
                                                                                            '??1CHKDSK_MESSAGE@@UAE@XZ',
                                                                                            '?Initialize@CHKDSK_MESSAGE@@QAEEPAVSTREAM@@00@Z',
                                                                                            '?Set@CHKDSK_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '??0FSTRING@@QAE@XZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '?QueryPackedLog@MESSAGE@@QAEEPAVHMEM@@PAK@Z',
                                                                                            '?MakeFileToken@MESSAGE@@SG_KPBD@Z',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?Strupr@WSTRING@@QAEPAV1@XZ',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '??0LONG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@LONG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '?Initialize@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '?IsDrive@PATH@@QBEEXZ',
                                                                                            '?AppendString@PATH@@QAEEPBVWSTRING@@@Z',
                                                                                            '?IsGuidVolName@PATH@@QAEEXZ',
                                                                                            '?AnalyzePath@PATH@@QAE?AW4PATH_ANALYZE_CODE@@PAVWSTRING@@PAV1@0@Z',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?SqmExportOnError@SQMEXPORT@@SGXKKEE_KU_GUID@@@Z',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ',
                                                                                            '??1HMEM@@UAE@XZ',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?DisableBreakHandling@KEYBOARD@@SGEXZ',
                                                                                            '?QuerySnapshotDiffAreaVolume@SNAPSHOT@@QAEEPAVWSTRING@@@Z',
                                                                                            '?GetSnapshotNtDeviceName@SNAPSHOT@@QAEPAGXZ',
                                                                                            '?QueryID@DP_DRIVE@@QAEEPAU_GUID@@PBVWSTRING@@@Z',
                                                                                            '?Initialize@DP_DRIVE@@QAEEPBVWSTRING@@PAVMESSAGE@@EEG@Z',
                                                                                            '??1DP_DRIVE@@UAE@XZ',
                                                                                            '?GetVolumeSnapshot@SNAPSHOT@@SGJPAVWSTRING@@PAPAV1@@Z',
                                                                                            '?IsVolumeDirty@IFS_SYSTEM@@SGEPAVWSTRING@@PAE1PAJ@Z',
                                                                                            '?QueryVolumeSize@IFS_SYSTEM@@SGEPBVWSTRING@@PA_K@Z',
                                                                                            '?DosDriveNameToNtDriveName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@@Z',
                                                                                            '?QueryFileSystemName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@PAJ1@Z',
                                                                                            '?ReleaseVolumeSnapshot@SNAPSHOT@@SGEPAV1@@Z',
                                                                                            '?IsFatalError@SNAPSHOT@@SGEJ@Z',
                                                                                            '??0DP_DRIVE@@QAE@XZ',
                                                                                            '?GetSnapshotErrorMessage@SNAPSHOT@@SGEJPAVWSTRING@@@Z',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'DeregisterEventSource',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 108,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 11776},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/721d2b78e576151975dd3e4a2612e983f3bdc7233b04940466f4cabf73da12d8'},
 '7222f172bf73d481d71e083addac6c0c651278c03d2e2eac20806cc7488825e6': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 582836,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 792461312,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 36864,
                                                                                       '.reloc\x00\x00': 15360,
                                                                                       '.text\x00\x00\x00': 530432,
                                                                                       '.xdata\x00\x00': 11264},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/7222f172bf73d481d71e083addac6c0c651278c03d2e2eac20806cc7488825e6'},
 '72253b7a0d3b27437ba87f0b24deb5d653bd2f9310c18c19d4bc5b2bb66182bf': {'AddressOfEntryPoint': 132420,
                                                                      'DebugRVA': 308592,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 229376,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetTokenInformation',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'NETAPI32.dll': 'NetWkstaGetInfo',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'USERENV.dll': 'UnloadUserProfile',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'RtlUnwindEx',
                                                                                            'SetLastError',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetACP',
                                                                                            'GetCurrentThread',
                                                                                            'LCMapStringW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetFileType',
                                                                                            'OutputDebugStringA',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetCurrentThreadId',
                                                                                            'LocalFree',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'DuplicateHandle',
                                                                                            'ReleaseMutex',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrcmpiW',
                                                                                            'VirtualQuery',
                                                                                            'GetTempPathW',
                                                                                            'GetLocalTime',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'Sleep',
                                                                                            'lstrcmpW',
                                                                                            'lstrlenW',
                                                                                            'SetFilePointer',
                                                                                            'CreateMutexW',
                                                                                            'GetCurrentProcessId',
                                                                                            'InitializeCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'GetFileAttributesExW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'MoveFileExW',
                                                                                            'GetFileTime',
                                                                                            'ReadFile',
                                                                                            'DeviceIoControl',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'OpenProcess',
                                                                                            'CreateProcessW',
                                                                                            'ReadProcessMemory',
                                                                                            'lstrcpynW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'WaitForDebugEvent',
                                                                                            'GetProcessId',
                                                                                            'DebugActiveProcessStop',
                                                                                            'ContinueDebugEvent',
                                                                                            'GetSystemInfo',
                                                                                            'GetThreadContext',
                                                                                            'DebugActiveProcess',
                                                                                            'VirtualQueryEx',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'EnterCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcessHeap',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'HeapDestroy',
                                                                                            'DecodePointer',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'HeapReAlloc',
                                                                                            'GetLastError',
                                                                                            'HeapSize',
                                                                                            'IsDebuggerPresent',
                                                                                            'CreateEventW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetComputerNameExW',
                                                                                            'GetOverlappedResult',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'DisconnectNamedPipe',
                                                                                            'UnregisterWait',
                                                                                            'GetProcessTimes',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'EncodePointer',
                                                                                            'RtlPcToFileHeader',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FindResourceExW',
                                                                                            'HeapFree',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'GetProcessWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'CloseClipboard',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'GetMessageW',
                                                                                            'PeekMessageW',
                                                                                            'EnumWindows',
                                                                                            'IsWindowVisible',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'CreateWindowStationW',
                                                                                            'SetProcessWindowStation',
                                                                                            'CreateDesktopW',
                                                                                            'GetThreadDesktop',
                                                                                            'SetThreadDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'CharLowerW',
                                                                                            'wvsprintfW',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'InitializeSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'InitializeAcl',
                                                                                            'GetAclInformation',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'MakeAbsoluteSD',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'GetAce',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'EqualSid',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenThreadToken',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'SetSecurityDescriptorSacl',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'SetTokenInformation',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'SHGetFolderPathW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetWkstaGetInfo',
                                                                                            'UuidCreate',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathStripPathW',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathIsRelativeW',
                                                                                            'SHQueryValueExW',
                                                                                            'PathAppendW',
                                                                                            'UnloadUserProfile',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 238,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 97792,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 223744},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/72253b7a0d3b27437ba87f0b24deb5d653bd2f9310c18c19d4bc5b2bb66182bf'},
 '7230212a8242f90a518b5282717cce125c06599d52274547657491c848334867': {'AddressOfEntryPoint': 130769,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 196608,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetEndOfFile',
                                                                                      'SHLWAPI.dll': 'SHCreateStreamOnFileA',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal'},
                                                                      'ImportedFunctions': ['CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetHGlobalFromStream',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'SHCreateStreamOnFileA',
                                                                                            'VirtualFree',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GlobalUnlock',
                                                                                            'WriteFile',
                                                                                            'GlobalSize',
                                                                                            'SetConsoleMode',
                                                                                            'GlobalLock',
                                                                                            'GetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadPriority',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'CreateSemaphoreA',
                                                                                            'SetEvent',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleCP',
                                                                                            'RtlUnwind',
                                                                                            'SetStdHandle',
                                                                                            'HeapCreate',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetFilePointer',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapSize',
                                                                                            'SetEndOfFile'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 91,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.rdata\x00\x00': 26112,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 190976},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7230212a8242f90a518b5282717cce125c06599d52274547657491c848334867'},
 '729d140140c3af5b46031f1a7652b159b08721afa80776f17afe73633800afc1': {'AddressOfEntryPoint': 9712,
                                                                      'DebugRVA': 53632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LCMapStringW',
                                                                                      'SHLWAPI.dll': 'StrStrIW'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetInformationJobObject',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GenerateConsoleCtrlEvent',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryInformationJobObject',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateJobObjectA',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'RtlUnwind',
                                                                                            'HeapCreate',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'WriteFile',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryW',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'SetStdHandle',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'LCMapStringW',
                                                                                            'StrStrIW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 20644,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 20992,
                                                                                       '.text\x00\x00\x00': 47616},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/729d140140c3af5b46031f1a7652b159b08721afa80776f17afe73633800afc1'},
 '72fc897a1dfdd4586b362b11f51680495f34a85efea16bf6e56bf97f3fb51dca': {'AddressOfEntryPoint': 239452,
                                                                      'DebugRVA': 259088,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 258048,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCP100.dll': '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                      'MSVCR100.dll': '_crt_debugger_hook',
                                                                                      'OLEAUT32.dll': 'SafeArrayUnlock',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'libcef.dll': 'cef_shutdown',
                                                                                      'ole32.dll': 'CoRegisterClassObject'},
                                                                      'ImportedFunctions': ['cef_browser_view_create',
                                                                                            'cef_string_utf16_set',
                                                                                            'cef_string_utf8_to_utf16',
                                                                                            'cef_string_utf8_clear',
                                                                                            'cef_string_utf16_to_utf8',
                                                                                            'cef_string_utf16_cmp',
                                                                                            'cef_string_userfree_utf16_free',
                                                                                            'cef_string_multimap_size',
                                                                                            'cef_string_multimap_key',
                                                                                            'cef_string_multimap_value',
                                                                                            'cef_string_map_size',
                                                                                            'cef_string_map_key',
                                                                                            'cef_string_map_value',
                                                                                            'cef_string_list_size',
                                                                                            'cef_string_list_value',
                                                                                            'cef_string_multimap_append',
                                                                                            'cef_string_map_append',
                                                                                            'cef_string_list_append',
                                                                                            'cef_post_data_create',
                                                                                            'cef_post_data_element_create',
                                                                                            'cef_request_create',
                                                                                            'cef_string_multimap_alloc',
                                                                                            'cef_string_multimap_free',
                                                                                            'cef_dictionary_value_create',
                                                                                            'cef_value_create',
                                                                                            'cef_log',
                                                                                            'cef_command_line_get_global',
                                                                                            'cef_string_map_alloc',
                                                                                            'cef_string_map_free',
                                                                                            'cef_browser_view_get_for_browser',
                                                                                            'cef_string_utf16_clear',
                                                                                            'cef_window_create_top_level',
                                                                                            'cef_create_context_shared',
                                                                                            'cef_request_context_get_global_context',
                                                                                            'cef_browser_host_create_browser',
                                                                                            'cef_cookie_manager_get_global_manager',
                                                                                            'cef_string_list_alloc',
                                                                                            'cef_string_list_free',
                                                                                            'cef_post_task',
                                                                                            'cef_initialize',
                                                                                            'cef_api_hash',
                                                                                            'cef_execute_process',
                                                                                            'cef_currently_on',
                                                                                            'cef_enable_highdpi_support',
                                                                                            'cef_quit_message_loop',
                                                                                            'cef_run_message_loop',
                                                                                            'cef_shutdown',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'SetLastError',
                                                                                            'RaiseException',
                                                                                            'GetModuleFileNameA',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'lstrlenA',
                                                                                            'ExitProcess',
                                                                                            'GetTickCount',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'EncodePointer',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetErrorMode',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCommandLineA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'DecodePointer',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LoadResource',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'PostThreadMessageA',
                                                                                            'GetMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'CharNextW',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'SetWindowTextA',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoRegisterClassObject',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetVartype',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayLock',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCopy',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SafeArrayUnlock',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ',
                                                                                            '??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z',
                                                                                            '??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z',
                                                                                            '??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memset',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            '_purecall',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            'wprintf',
                                                                                            'wcsncpy_s',
                                                                                            '_mbsnbcmp',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            '_endthread',
                                                                                            'sprintf',
                                                                                            '_beginthread',
                                                                                            'strnlen',
                                                                                            '_mbsstr',
                                                                                            '_mbscmp',
                                                                                            '_controlfp_s',
                                                                                            '_vscprintf',
                                                                                            'vsprintf_s',
                                                                                            '_resetstkoflw',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'strncmp',
                                                                                            'strchr',
                                                                                            '_wtoi',
                                                                                            '_invoke_watson',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_ismbblead',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 224,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 8372,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 69120,
                                                                                       '.reloc\x00\x00': 37888,
                                                                                       '.rsrc\x00\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 252416},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/72fc897a1dfdd4586b362b11f51680495f34a85efea16bf6e56bf97f3fb51dca'},
 '7313c269bd76053bd3613d04f7fcfb2b1a6a0537806bfe908d6d89eb8d570941': {'AddressOfEntryPoint': 222064,
                                                                      'DebugRVA': 4768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 331776,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'CRYPT32.dll': 'CertVerifyCertificateChainPolicy',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'POWRPROF.dll': 'PowerDeterminePlatformRole',
                                                                                      'RPCRT4.dll': 'UuidCreateSequential',
                                                                                      'ReAgent.dll': 'WinReIsWimBootEnabled',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyW',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'WINHTTP.dll': 'WinHttpCrackUrl',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchAppend',
                                                                                      'ktmw32.dll': 'CommitTransaction',
                                                                                      'msvcrt.dll': 'strcmp',
                                                                                      'ntdll.dll': 'NtPowerInformation',
                                                                                      'ole32.dll': 'StringFromGUID2',
                                                                                      'sppcext.dll': 'SLGetGenuineInformationEx',
                                                                                      'tdh.dll': 'TdhFormatProperty',
                                                                                      'wer.dll': 'WerpIsDisabled',
                                                                                      'wevtapi.dll': 'EvtNext'},
                                                                      'ImportedFunctions': ['ProcessTrace',
                                                                                            'EnableTraceEx',
                                                                                            'TraceMessage',
                                                                                            'UpdateTraceW',
                                                                                            'ControlTraceW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'CloseTrace',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'StopTraceW',
                                                                                            'StartTraceW',
                                                                                            'RegDeleteValueW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegEnumValueW',
                                                                                            'IsValidSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegEnumKeyExW',
                                                                                            'QueryTraceW',
                                                                                            'OpenTraceW',
                                                                                            'RegCloseKey',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'CryptGetHashParam',
                                                                                            'RegisterEventSourceW',
                                                                                            'CryptAcquireContextW',
                                                                                            'RegCreateKeyExW',
                                                                                            'CryptReleaseContext',
                                                                                            'DeregisterEventSource',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegCreateKeyTransactedW',
                                                                                            'CryptCreateHash',
                                                                                            'ReportEventW',
                                                                                            'GetLengthSid',
                                                                                            'CryptDestroyHash',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegSetValueExW',
                                                                                            'CryptHashData',
                                                                                            'CopySid',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CryptGenRandom',
                                                                                            'SetFileSecurityW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'GetFileSecurityW',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegGetValueW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'GetSystemInfo',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetProductInfo',
                                                                                            'DeviceIoControl',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetProcAddress',
                                                                                            'GetThreadPriority',
                                                                                            'GlobalFree',
                                                                                            'GetPhysicallyInstalledSystemMemory',
                                                                                            'GetLogicalProcessorInformationEx',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetUserGeoID',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetNativeSystemInfo',
                                                                                            'ReleaseMutex',
                                                                                            'CopyFileW',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetFilePointer',
                                                                                            'LocalAlloc',
                                                                                            'SetLastError',
                                                                                            'LockResource',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'VirtualFree',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FreeResource',
                                                                                            'GetFileSize',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetVersionExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStartupInfoW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'GetTempPathW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateDirectoryW',
                                                                                            'IsWow64Process',
                                                                                            'DuplicateHandle',
                                                                                            'OpenFileMappingW',
                                                                                            'CreateThread',
                                                                                            'GetModuleHandleExW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'LoadLibraryExW',
                                                                                            'GetFileAttributesW',
                                                                                            'OpenMutexW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineW',
                                                                                            'CreateMutexW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateProcessW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'MoveFileExW',
                                                                                            'CompareFileTime',
                                                                                            'WaitForSingleObject',
                                                                                            'GetActiveProcessorCount',
                                                                                            'SetFileAttributesW',
                                                                                            'GetSystemTime',
                                                                                            'LocalFree',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'GetFileAttributesExW',
                                                                                            'FindNextFileW',
                                                                                            'HeapSetInformation',
                                                                                            'GetLocalTime',
                                                                                            'FindClose',
                                                                                            'GetLastError',
                                                                                            'SetThreadPriority',
                                                                                            'CreateFileW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetSystemPowerStatus',
                                                                                            'Sleep',
                                                                                            'WriteFile',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThread',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadStringW',
                                                                                            'DispatchMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '_vsnwprintf',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_vscwprintf',
                                                                                            '_wcsnicmp',
                                                                                            '_purecall',
                                                                                            'wcscat_s',
                                                                                            '_wfopen',
                                                                                            'fclose',
                                                                                            '_lock',
                                                                                            'fwprintf',
                                                                                            'fseek',
                                                                                            'fread',
                                                                                            'srand',
                                                                                            'time',
                                                                                            'rand',
                                                                                            'wcsncmp',
                                                                                            'wcsnlen',
                                                                                            '_strtoui64',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memset',
                                                                                            'ceilf',
                                                                                            'memcpy',
                                                                                            '_vsnprintf',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            'wcsstr',
                                                                                            'wcsrchr',
                                                                                            'malloc',
                                                                                            'towupper',
                                                                                            'wcschr',
                                                                                            'swscanf_s',
                                                                                            '_wtoi',
                                                                                            '_CxxThrowException',
                                                                                            '_onexit',
                                                                                            'fwrite',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wtoi64',
                                                                                            'swprintf_s',
                                                                                            'free',
                                                                                            '_callnewh',
                                                                                            '_wcsicmp',
                                                                                            '__C_specific_handler',
                                                                                            'strcmp',
                                                                                            'PathAppendW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFileExistsW',
                                                                                            'PathCombineW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'StrToIntExW',
                                                                                            'SHStrDupW',
                                                                                            'SHDeleteKeyW',
                                                                                            'NtQuerySystemTime',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'WinSqmSetIfMaxDWORD',
                                                                                            'RtlCheckPortableOperatingSystem',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlGetVersion',
                                                                                            'NtPowerInformation',
                                                                                            'TdhGetEventInformation',
                                                                                            'TdhGetProperty',
                                                                                            'TdhGetPropertySize',
                                                                                            'TdhGetEventMapInformation',
                                                                                            'TdhFormatProperty',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateGuid',
                                                                                            'PropVariantClear',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetFolderPathAndSubDirW',
                                                                                            'CommandLineToArgvW',
                                                                                            'WerpIsDisabled',
                                                                                            'EvtCreateRenderContext',
                                                                                            'EvtRender',
                                                                                            'EvtQuery',
                                                                                            'EvtClose',
                                                                                            'EvtNext',
                                                                                            'PowerDeterminePlatformRoleEx',
                                                                                            'PowerDeterminePlatformRole',
                                                                                            'CreateXmlWriter',
                                                                                            'CreateXmlReader',
                                                                                            'SLGetGenuineInformationEx',
                                                                                            'CreateTransaction',
                                                                                            'CommitTransaction',
                                                                                            'WinReIsWimBootEnabled',
                                                                                            'PathCchAppend',
                                                                                            'WinHttpTimeFromSystemTime',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpSetCredentials',
                                                                                            'WinHttpSetOption',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpGetIEProxyConfigForCurrentUser',
                                                                                            'WinHttpGetDefaultProxyConfiguration',
                                                                                            'WinHttpQueryOption',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'WinHttpGetProxyForUrl',
                                                                                            'WinHttpSetStatusCallback',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpWriteData',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpCrackUrl',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidToStringW',
                                                                                            'UuidCreateSequential',
                                                                                            'CertGetCertificateChain',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CertVerifyCertificateChainPolicy'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 306,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 46752,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 12288,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 47104,
                                                                                       '.text\x00\x00\x00': 314368},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/7313c269bd76053bd3613d04f7fcfb2b1a6a0537806bfe908d6d89eb8d570941'},
 '736bffd8c2ee02cd432004bbc539ca48bd664f17887b85b4dca51d0a9ea3251f': {'AddressOfEntryPoint': 38096,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'MSWSOCK.dll': 's_perror',
                                                                                      'SspiCli.dll': 'GetUserNameExW',
                                                                                      'WS2_32.dll': 'recv',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleMode',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetTempFileNameW',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'GetOverlappedResult',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCurrentDirectoryW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ResetEvent',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_isatty',
                                                                                            '_fileno',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_setmode',
                                                                                            'fclose',
                                                                                            'wcscpy_s',
                                                                                            'towupper',
                                                                                            '__set_app_type',
                                                                                            '_unlink',
                                                                                            '_chdrive',
                                                                                            'longjmp',
                                                                                            'clearerr',
                                                                                            'wcscat_s',
                                                                                            '_iob',
                                                                                            '__wgetmainargs',
                                                                                            '_wunlink',
                                                                                            '_wchdir',
                                                                                            'memmove_s',
                                                                                            'calloc',
                                                                                            '_cexit',
                                                                                            '_fstat',
                                                                                            '_wfsopen',
                                                                                            '_read',
                                                                                            'wcschr',
                                                                                            'clock',
                                                                                            '_wtempnam',
                                                                                            '_wtmpnam',
                                                                                            '_errno',
                                                                                            '__p__fmode',
                                                                                            '_vsnwprintf',
                                                                                            '_wgetcwd',
                                                                                            '_wfopen',
                                                                                            'fflush',
                                                                                            '__setusermatherr',
                                                                                            'iswlower',
                                                                                            '_initterm',
                                                                                            '_wgetenv',
                                                                                            'free',
                                                                                            '_amsg_exit',
                                                                                            '_wtoi',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'towlower',
                                                                                            'memcpy_s',
                                                                                            '_write',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'iswdigit',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'feof',
                                                                                            '_wcsicmp',
                                                                                            '_vscwprintf',
                                                                                            'fwprintf',
                                                                                            'fgetpos',
                                                                                            'vswprintf_s',
                                                                                            'fread',
                                                                                            '_get_osfhandle',
                                                                                            'malloc',
                                                                                            '_setjmp3',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'GetUserNameExW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapSetInformation',
                                                                                            'htons',
                                                                                            'GetHostNameW',
                                                                                            'FreeAddrInfoW',
                                                                                            'getservbyname',
                                                                                            'GetAddrInfoW',
                                                                                            'socket',
                                                                                            'bind',
                                                                                            'shutdown',
                                                                                            'getsockname',
                                                                                            'WSARecv',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'htonl',
                                                                                            'WSAStartup',
                                                                                            'setsockopt',
                                                                                            'closesocket',
                                                                                            'GetNameInfoW',
                                                                                            'send',
                                                                                            'listen',
                                                                                            'WSASetLastError',
                                                                                            'accept',
                                                                                            'connect',
                                                                                            'select',
                                                                                            '__WSAFDIsSet',
                                                                                            'recv',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetFileSizeEx',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'FindNextFileW',
                                                                                            'ReadFile',
                                                                                            'GetFileType',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetTempFileNameW',
                                                                                            'TransmitFile',
                                                                                            's_perror',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'WaitForSingleObject',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'LeaveCriticalSection',
                                                                                            'ResetEvent',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleMode',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CloseHandle',
                                                                                            'MoveFileExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetOverlappedResult',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 143,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1984,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 35840},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/736bffd8c2ee02cd432004bbc539ca48bd664f17887b85b4dca51d0a9ea3251f'},
 '73bb2538c8a42b16397858d449d8558d666918a17e272aa74934b2014482a9d0': {'AddressOfEntryPoint': 72436,
                                                                      'DebugRVA': 5184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR100.dll': 'wprintf',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'SqlResourceLoader.dll': 'FreeResourceLibrary',
                                                                                      'USER32.dll': 'LoadStringA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetVersion',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'GetFileType',
                                                                                            'FindClose',
                                                                                            'CloseHandle',
                                                                                            'GetLocalTime',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetTempPathA',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTimeFormatA',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatA',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'wcstoul',
                                                                                            '_wtol',
                                                                                            '_difftime64',
                                                                                            '_localtime64',
                                                                                            '_mktime64',
                                                                                            '_time64',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'fopen',
                                                                                            'remove',
                                                                                            'fputws',
                                                                                            '_putws',
                                                                                            'fwprintf',
                                                                                            '_wcsrev',
                                                                                            'swprintf_s',
                                                                                            '_vsnwprintf',
                                                                                            '_wfopen',
                                                                                            '_wremove',
                                                                                            '_wsetlocale',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '__crt_debugger_hook',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'iswdigit',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'strcat_s',
                                                                                            'wcscat_s',
                                                                                            'wcschr',
                                                                                            'wcscmp',
                                                                                            'wcscpy_s',
                                                                                            'wcslen',
                                                                                            'wcsncat_s',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsicmp',
                                                                                            'wprintf',
                                                                                            'LoadStringW',
                                                                                            'LoadStringA',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'SysFreeString',
                                                                                            'GetErrorInfo',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'LoadResourceLibrary',
                                                                                            'FreeResourceLibrary'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 117,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1748,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 80896},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/73bb2538c8a42b16397858d449d8558d666918a17e272aa74934b2014482a9d0'},
 '73e255675371774c25ad4717d5564e137ef70b087ec1f4767ab11ebb275328ab': {'AddressOfEntryPoint': 9792,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'REGAPI.dll': 'RegFreeUtilityCommandList',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegQueryUtilityCommandList',
                                                                                            'RegFreeUtilityCommandList',
                                                                                            'LoadStringW',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'HeapSetInformation',
                                                                                            'SearchPathW',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            '_ultoa',
                                                                                            '_iob',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'memmove',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'free',
                                                                                            'fwprintf',
                                                                                            'vfwprintf',
                                                                                            'wcschr',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            '_wcsnicmp',
                                                                                            'swprintf_s',
                                                                                            '__setusermatherr',
                                                                                            'vswprintf_s',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/73e255675371774c25ad4717d5564e137ef70b087ec1f4767ab11ebb275328ab'},
 '74f4956142e6867378635c2e2e52a6a312c21ffd20253b95e6183c76872787e8': {'AddressOfEntryPoint': 12624,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'OSUNINST.dll': 'RemoveUninstallImage',
                                                                                      'SCECLI.dll': 'SceConfigureConvertedFileSecurity',
                                                                                      'ifsutil.dll': '?IsArcSystemPartition@IFS_SYSTEM@@SGEPBVWSTRING@@PAE@Z',
                                                                                      'msvcrt.dll': '_except_handler4_common',
                                                                                      'ntdll.dll': 'RtlFreeHeap',
                                                                                      'ulib.dll': '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z'},
                                                                      'ImportedFunctions': ['?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z',
                                                                                            '?QuerySystemDirectory@SYSTEM@@SGPAVPATH@@XZ',
                                                                                            '??8WSTRING@@QBEEABV0@@Z',
                                                                                            '?Initialize@CLASS_DESCRIPTOR@@QAEEXZ',
                                                                                            '?Stricmp@WSTRING@@QBEJPBV1@@Z',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?QueryCurrentDosDriveName@SYSTEM@@SGEPAVWSTRING@@@Z',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?Initialize@PROGRAM@@QAEEKKK@Z',
                                                                                            '??1PROGRAM@@UAE@XZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z',
                                                                                            '?Fatal@PROGRAM@@UBAXKKPADZZ',
                                                                                            '?Fatal@PROGRAM@@UBEXXZ',
                                                                                            '?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?QueryDriveType@SYSTEM@@SG?AW4DRIVE_TYPE@@PBVWSTRING@@@Z',
                                                                                            '?QueryWindowsErrorMessage@SYSTEM@@SGEKPAVWSTRING@@@Z',
                                                                                            '?QueryVolumeLabel@SYSTEM@@SGPAVWSTRING@@PAVPATH@@PAU_VOL_SERIAL_NUMBER@@@Z',
                                                                                            '?QueryLibraryEntryPoint@SYSTEM@@SGP6GHXZPBVWSTRING@@0PAPAX@Z',
                                                                                            '?FreeLibraryHandle@SYSTEM@@SGXPAX@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?Usage@PROGRAM@@UBEXXZ',
                                                                                            '?ValidateVersion@PROGRAM@@UBEXKK@Z',
                                                                                            '??0PROGRAM@@IAE@XZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '?Initialize@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '?AppendBase@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '?IsGuidVolName@PATH@@QAEEXZ',
                                                                                            '?AnalyzePath@PATH@@QAE?AW4PATH_ANALYZE_CODE@@PAVWSTRING@@PAV1@0@Z',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '??0CLASS_DESCRIPTOR@@QAE@XZ',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?Strupr@WSTRING@@QAEPAV1@XZ',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?DeleteEntry@AUTOREG@@SGEPBVWSTRING@@0@Z',
                                                                                            '?AddEntry@AUTOREG@@SGEPBVWSTRING@@@Z',
                                                                                            '?GenerateLabelNotification@SUPERAREA@@SGJPBVWSTRING@@PAV2@PAU_FILE_FS_SIZE_INFORMATION@@PAU_FILE_FS_VOLUME_INFORMATION@@@Z',
                                                                                            '?DosDriveNameToNtDriveName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@@Z',
                                                                                            '?QueryFileSystemName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@PAJ1@Z',
                                                                                            '?IsArcSystemPartition@IFS_SYSTEM@@SGEPBVWSTRING@@PAE@Z',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlFreeHeap',
                                                                                            'SceConfigureConvertedFileSecurity',
                                                                                            'IsUninstallImageValid',
                                                                                            'RemoveUninstallImage',
                                                                                            'GetModuleHandleA',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'CompareStringW',
                                                                                            'SetErrorMode',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 9728},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/74f4956142e6867378635c2e2e52a6a312c21ffd20253b95e6183c76872787e8'},
 '75155568d64e958d8003f9fbb36839fc9a53bfab3b51a8a1106a78e5be98b2e9': {'AddressOfEntryPoint': 14876,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'SetErrorMode',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'SendMessageTimeoutW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'CopyFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersion',
                                                                                            'SetFileTime',
                                                                                            'lstrcpynA',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'LoadLibraryA',
                                                                                            'GetVersionExW',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetErrorMode',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'GetAsyncKeyState',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wvsprintfW',
                                                                                            'wsprintfA',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'CheckDlgButton',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'GetClassInfoW',
                                                                                            'CharNextW',
                                                                                            'FindWindowExW',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 168,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 31336,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 31744,
                                                                                       '.text\x00\x00\x00': 29696},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/75155568d64e958d8003f9fbb36839fc9a53bfab3b51a8a1106a78e5be98b2e9'},
 '751941b4e09898c31791efeb5f90fc7367c89831d4a98637ed505e40763e287b': {'AddressOfEntryPoint': 27871,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'COMCTL32.dll': 'CreatePropertySheetPageA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'SetThreadPriority',
                                                                                      'MSVCRT.dll': 'strtol',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'PropertySheetA',
                                                                                            'CreatePropertySheetPageA',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'DeleteFileA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'ResumeThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetFileSize',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'GetFileAttributesA',
                                                                                            'GetStartupInfoA',
                                                                                            'SetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'CreateDirectoryA',
                                                                                            'lstrlenA',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileA',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'CreateFileMappingA',
                                                                                            'SetThreadPriority',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetParent',
                                                                                            'wsprintfA',
                                                                                            'SetDlgItemTextA',
                                                                                            'PostMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'SendMessageA',
                                                                                            'GetFocus',
                                                                                            'MessageBoxA',
                                                                                            'SelectObject',
                                                                                            'TextOutA',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'CreateFontA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '__p___argc',
                                                                                            '__p___argv',
                                                                                            'strncmp',
                                                                                            'fgets',
                                                                                            'realloc',
                                                                                            'qsort',
                                                                                            '__mb_cur_max',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_open',
                                                                                            '_controlfp',
                                                                                            '_strcmpi',
                                                                                            '_strdup',
                                                                                            '_tempnam',
                                                                                            '_close',
                                                                                            '_read',
                                                                                            '_strnicmp',
                                                                                            '_isctype',
                                                                                            '_pctype',
                                                                                            'strchr',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'strncat',
                                                                                            'strcat',
                                                                                            'strlen',
                                                                                            'strcpy',
                                                                                            'strcmp',
                                                                                            'strrchr',
                                                                                            'fprintf',
                                                                                            '_vsnprintf',
                                                                                            'malloc',
                                                                                            '_snprintf',
                                                                                            'strncpy',
                                                                                            'free',
                                                                                            'sscanf',
                                                                                            '_putenv',
                                                                                            'remove',
                                                                                            'fread',
                                                                                            'ftell',
                                                                                            'fseek',
                                                                                            'fopen',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'freopen',
                                                                                            '_iob',
                                                                                            'fwrite',
                                                                                            'strftime',
                                                                                            'localtime',
                                                                                            'time',
                                                                                            'sprintf',
                                                                                            '_fstat',
                                                                                            'strtol'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 146,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 16384,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/751941b4e09898c31791efeb5f90fc7367c89831d4a98637ed505e40763e287b'},
 '7571bbd1fb453730a71be694bbcea071bda1c18d6c98d465d4c25ae103a26bbc': {'AddressOfEntryPoint': 4984,
                                                                      'DebugRVA': 8544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DecodePointer',
                                                                                      'MSVCR100.dll': '_amsg_exit',
                                                                                      'VBoxRT.dll': 'RTR3InitExeNoArguments'},
                                                                      'ImportedFunctions': ['_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_initterm_e',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            'RTMsgErrorExit',
                                                                                            'SUPR3Uninstall',
                                                                                            'RTMsgInfo',
                                                                                            'RTR3InitExeNoArguments',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DecodePointer'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 33,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 2048},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7571bbd1fb453730a71be694bbcea071bda1c18d6c98d465d4c25ae103a26bbc'},
 '75a5ab180c92f08dabdb275186208aed61a046e58383b91a3b99ef6fc7fbd098': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 164348,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 164352,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/75a5ab180c92f08dabdb275186208aed61a046e58383b91a3b99ef6fc7fbd098'},
 '75b7edf2f114f6fbf776c538687b1930111748a73d9331d456ebfefad069c7df': {'AddressOfEntryPoint': 5488,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'msvcrt.dll': '?terminate@@YAXXZ'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'IsWindow',
                                                                                            '_initterm',
                                                                                            '_cexit',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__setusermatherr',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wtoi64',
                                                                                            '__p__fmode',
                                                                                            '?terminate@@YAXXZ'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 31,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 85064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 85504,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/75b7edf2f114f6fbf776c538687b1930111748a73d9331d456ebfefad069c7df'},
 '75f12ea2f30d9c0d872dade345f30f562e6d93847b6a509ba53beec6d0b2c346': {'AddressOfEntryPoint': 9703,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetFileAttributesA'},
                                                                      'ImportedFunctions': ['GenerateConsoleCtrlEvent',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetModuleFileNameA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlUnwind',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'GetFileAttributesA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 79,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 51712},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/75f12ea2f30d9c0d872dade345f30f562e6d93847b6a509ba53beec6d0b2c346'},
 '764aa12fef0790c180116a890670e0d773c1559232a19406db765a4f5e397adc': {'AddressOfEntryPoint': 4988,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/764aa12fef0790c180116a890670e0d773c1559232a19406db765a4f5e397adc'},
 '771151fdeb8e30545f4bbfe1b73eee0e1187db905a535e9cc12d2c57aa0acc8d': {'AddressOfEntryPoint': 5792,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49216,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-com-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-core-com-private-l1-1-0.dll': 'CoRegisterSurrogateEx',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': '__p__commode',
                                                                                      'ntdll.dll': 'NtSetInformationProcess'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '_XcptFilter',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_wcsicmp',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'NtSetInformationProcess',
                                                                                            'CoRegisterSurrogateEx',
                                                                                            'IIDFromString',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapSetInformation',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 34,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/771151fdeb8e30545f4bbfe1b73eee0e1187db905a535e9cc12d2c57aa0acc8d'},
 '77378c8d09e7841cfcc31d42ecc2ac828898e2958240d2d0966d82c9229f641f': {'AddressOfEntryPoint': 29424,
                                                                      'DebugRVA': 4704,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49600,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'SHCORE.dll': 'SHStrDupA',
                                                                                      'SHELL32.dll': 'SHAssocEnumHandlers',
                                                                                      'SHLWAPI.dll': 'PathIsURLW',
                                                                                      'USER32.dll': 'DestroyMenu',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoGetActivationFactory',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsDeleteString',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ntdll.dll': 'WinSqmAddToStreamEx'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'CompareStringOrdinal',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'RaiseException',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetCurrentThreadId',
                                                                                            'DuplicateHandle',
                                                                                            'LocalAlloc',
                                                                                            'CloseHandle',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'SetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'TryEnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalFree',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'LoadCursorW',
                                                                                            'CreateWindowInBand',
                                                                                            'SetForegroundWindow',
                                                                                            'SetCursor',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'GetMenuDefaultItem',
                                                                                            'CreatePopupMenu',
                                                                                            'SetTimer',
                                                                                            'PostQuitMessage',
                                                                                            'KillTimer',
                                                                                            'DestroyMenu',
                                                                                            '_amsg_exit',
                                                                                            '_vsnwprintf',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_purecall',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memset',
                                                                                            '__wgetmainargs',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__set_app_type',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsCreateString',
                                                                                            'WindowsCreateStringReference',
                                                                                            'WindowsDeleteString',
                                                                                            'SHAssocEnumHandlers',
                                                                                            'SHSetThreadRef',
                                                                                            'SHCreateThreadRef',
                                                                                            'UrlGetPartW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathIsURLW',
                                                                                            'IUnknown_GetSite',
                                                                                            'SetProcessReference',
                                                                                            'SHCreateThread',
                                                                                            'SHStrDupA',
                                                                                            'RoActivateInstance',
                                                                                            'RoGetActivationFactory'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 88,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 45240,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 29184},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/77378c8d09e7841cfcc31d42ecc2ac828898e2958240d2d0966d82c9229f641f'},
 '773975b945cf3362c47caa5a4346b173a89410f1710b5ee90f2003e9d4ebdbc4': {'AddressOfEntryPoint': 39716,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 275720,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 275968,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/773975b945cf3362c47caa5a4346b173a89410f1710b5ee90f2003e9d4ebdbc4'},
 '775455b1c787d54bc1300fd3fd2233bbb3d243b673d25b53b75e1691e4cb06e4': {'AddressOfEntryPoint': 213728,
                                                                      'DebugRVA': 5648,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 241664,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'CRYPT32.dll': 'CertVerifyCertificateChainPolicy',
                                                                                      'GDI32.dll': 'CreateRectRgn',
                                                                                      'KERNEL32.dll': 'CompareStringOrdinal',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'PROPSYS.dll': 'PropVariantChangeType',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'SHELL32.dll': 'SHGetPropertyStoreForWindow',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'WINTRUST.dll': 'CryptCATCatalogInfoFromContext',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'dwmapi.dll': 'DwmSetWindowAttribute',
                                                                                      'gdiplus.dll': 'GdipCreateBitmapFromFile',
                                                                                      'msvcrt.dll': '__setusermatherr',
                                                                                      'ntdll.dll': 'RtlGetNativeSystemInformation',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'EventWrite',
                                                                                            'RegGetValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'RaiseException',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTickCount',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseSemaphore',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'ResetEvent',
                                                                                            'CreateThreadpoolTimer',
                                                                                            'SetThreadpoolTimer',
                                                                                            'CloseThreadpoolTimer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileExW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateSemaphoreW',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FindFirstFileW',
                                                                                            'SetFilePointer',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileMUIPath',
                                                                                            'CompareFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'LCMapStringW',
                                                                                            'LCIDToLocaleName',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetUserGeoID',
                                                                                            'SystemTimeToFileTime',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'LoadLibraryExA',
                                                                                            'DecodePointer',
                                                                                            'VirtualAlloc',
                                                                                            'FlushInstructionCache',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'CreateFileW',
                                                                                            'CompareStringOrdinal',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'DeleteDC',
                                                                                            'SetLayout',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBSection',
                                                                                            'CreateRectRgn',
                                                                                            'LoadImageW',
                                                                                            'SendMessageW',
                                                                                            'ModifyMenuW',
                                                                                            'InsertMenuW',
                                                                                            'UnregisterClassA',
                                                                                            'GetMenuState',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadStringW',
                                                                                            'DispatchMessageA',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'RegisterClassExW',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'CallWindowProcW',
                                                                                            'IsIconic',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowRgn',
                                                                                            'ShowWindow',
                                                                                            'CheckMenuItem',
                                                                                            'PostMessageW',
                                                                                            'DeleteMenu',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'EnumWindows',
                                                                                            'PeekMessageW',
                                                                                            'GetSystemMenu',
                                                                                            'GetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DestroyIcon',
                                                                                            'CreateIconIndirect',
                                                                                            'DrawIconEx',
                                                                                            'GetIconInfo',
                                                                                            'GetMessageA',
                                                                                            'IsWindowUnicode',
                                                                                            'CharNextW',
                                                                                            'wcscat_s',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_vsnwprintf',
                                                                                            'wcsncpy_s',
                                                                                            'malloc',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memcpy_s',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memmove_s',
                                                                                            '_purecall',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'free',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            'wcscpy_s',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'qsort',
                                                                                            'bsearch',
                                                                                            'wcstoul',
                                                                                            'swscanf_s',
                                                                                            'iswspace',
                                                                                            'swprintf_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__setusermatherr',
                                                                                            'PropVariantCopy',
                                                                                            'CoFreeUnusedLibrariesEx',
                                                                                            'CoDisconnectObject',
                                                                                            'PropVariantClear',
                                                                                            'CoUnmarshalInterface',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'StringFromGUID2',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemFree',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'UrlEscapeW',
                                                                                            'SHStrDupW',
                                                                                            'PathParseIconLocationW',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'PathFileExistsW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathAppendW',
                                                                                            'PropVariantToGUID',
                                                                                            'PSGetPropertyDescriptionListFromString',
                                                                                            'PSGetPropertyDescriptionByName',
                                                                                            'PropVariantCompareEx',
                                                                                            'PSCreateMemoryPropertyStore',
                                                                                            'PSGetPropertyKeyFromName',
                                                                                            'StgDeserializePropVariant',
                                                                                            'PropVariantToStringAlloc',
                                                                                            'PropVariantChangeType',
                                                                                            'Shell_NotifyIconW',
                                                                                            'SHCreateShellItemArrayFromIDLists',
                                                                                            'SHQueryUserNotificationState',
                                                                                            'ShellExecuteExW',
                                                                                            'SHParseDisplayName',
                                                                                            'SHGetPropertyStoreForWindow',
                                                                                            'DwmSetIconicThumbnail',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipFree',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'RtlGetNativeSystemInformation',
                                                                                            'CreateXmlReader',
                                                                                            'UuidFromStringW',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'WinVerifyTrustEx',
                                                                                            'CryptCATAdminReleaseContext',
                                                                                            'CryptCATAdminReleaseCatalogContext',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'CryptCATAdminAcquireContext',
                                                                                            'CryptCATAdminEnumCatalogFromHash',
                                                                                            'CryptCATCatalogInfoFromContext'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 277,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 40992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.idata\x00\x00': 10752,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 41472,
                                                                                       '.text\x00\x00\x00': 218624},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/775455b1c787d54bc1300fd3fd2233bbb3d243b673d25b53b75e1691e4cb06e4'},
 '778c6c3c4c46fbbb9e9f31d07426370566beb21a44e74ab8127c814e5b960a76': {'AddressOfEntryPoint': 181340,
                                                                      'DebugRVA': 207216,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 274320,
                                                                      'ExportSize': 77,
                                                                      'IATRVA': 204800,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'IPHLPAPI.DLL': 'IcmpCreateFile',
                                                                                      'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'MSVCP100.dll': '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                      'MSVCR100.dll': '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'USER32.dll': 'PostThreadMessageW',
                                                                                      'VBoxRT.dll': 'RTCritSectInitEx',
                                                                                      'WS2_32.dll': 'send',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_cexit',
                                                                                            '_commode',
                                                                                            '_ismbblead',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_recalloc',
                                                                                            'memmove_s',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_vsnprintf',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'strchr',
                                                                                            '_strdup',
                                                                                            '_open',
                                                                                            '_read',
                                                                                            '_close',
                                                                                            'strstr',
                                                                                            'memchr',
                                                                                            '_errno',
                                                                                            'strtol',
                                                                                            '_fstat64i32',
                                                                                            'calloc',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'free',
                                                                                            'memcmp',
                                                                                            'strncpy',
                                                                                            'strncmp',
                                                                                            '_environ',
                                                                                            '__argv',
                                                                                            '__argc',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'perror',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            'memset',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_CxxThrowException',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?_Xout_of_range@std@@YAXPEBD@Z',
                                                                                            '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                            'StringFromIID',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayCreate',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RTRandU32',
                                                                                            'RTStrToUInt32',
                                                                                            'RTStrICmp',
                                                                                            'RTAssertShouldPanic',
                                                                                            'RTAssertMsg2Weak',
                                                                                            'RTAssertMsg1Weak',
                                                                                            'RTSemEventSignal',
                                                                                            'RTSemEventCreate',
                                                                                            'RTSemEventDestroy',
                                                                                            'RTSemEventWait',
                                                                                            'RTTimeMilliTS',
                                                                                            'RTSemMutexDestroy',
                                                                                            'RTSemEventMultiDestroy',
                                                                                            'RTSemEventMultiCreate',
                                                                                            'RTSemMutexCreate',
                                                                                            'RTSemEventMultiReset',
                                                                                            'RTSemEventMultiSignal',
                                                                                            'RTSemEventMultiWait',
                                                                                            'RTSemMutexRelease',
                                                                                            'RTSemMutexRequest',
                                                                                            'RTThreadCreateF',
                                                                                            'RTBldCfgVersion',
                                                                                            'RTPrintf',
                                                                                            'RTGetOptPrintError',
                                                                                            'SUPR3Term',
                                                                                            'RTCritSectDelete',
                                                                                            'RTCritSectInit',
                                                                                            'SUPR3Init',
                                                                                            'RTPathExecDir',
                                                                                            'SUPR3LoadVMM',
                                                                                            'RTMemAllocTag',
                                                                                            'RTThreadCreate',
                                                                                            'RTProcShortName',
                                                                                            'g_pStdErr',
                                                                                            'RTStrmPrintf',
                                                                                            'SUPR3CallVMMR0Ex',
                                                                                            'RTCritSectLeave',
                                                                                            'RTCritSectEnter',
                                                                                            'RTNetStrToIPv4Addr',
                                                                                            'RTStrUtf8ToCurrentCPTag',
                                                                                            '??0RTCString@@QEAA@XZ',
                                                                                            '?cleanup@RTCString@@IEAAXXZ',
                                                                                            'RTR3InitExe',
                                                                                            'RTMsgInitFailure',
                                                                                            'RTMsgErrorExit',
                                                                                            'RTStrFree',
                                                                                            'RTMemAllocZTag',
                                                                                            'RTStrDupTag',
                                                                                            'RTLogRelDefaultInstance',
                                                                                            'RTNetIPv4UDPChecksum',
                                                                                            'RTMemReallocTag',
                                                                                            '?c_str@RTCString@@QEBAPEBDXZ',
                                                                                            'RTMemFree',
                                                                                            'RTGetOptInit',
                                                                                            'RTGetOpt',
                                                                                            'RTStrCopy',
                                                                                            'RTStrPrintf',
                                                                                            'RTCritSectRwLeaveExcl',
                                                                                            'RTCritSectRwEnterExcl',
                                                                                            'RTCritSectRwIsWriteOwner',
                                                                                            'RTCritSectRwDelete',
                                                                                            'RTCritSectRwInitEx',
                                                                                            'RTThreadNativeSelf',
                                                                                            'RTErrConvertFromWin32',
                                                                                            'RTThreadSelf',
                                                                                            'RTUuidClear',
                                                                                            'RTStrAPrintfVTag',
                                                                                            'RTLogCreateEx',
                                                                                            'RTLogSetGroupLimit',
                                                                                            'RTLogFlush',
                                                                                            'RTLogRelSetDefaultInstance',
                                                                                            'RTTimeNow',
                                                                                            'RTTimeSpecToString',
                                                                                            'RTLogSetBuffering',
                                                                                            'RTBldCfgTargetDotArch',
                                                                                            'RTSystemQueryOSInfo',
                                                                                            'RTSystemQueryDmiString',
                                                                                            'RTSystemQueryTotalRam',
                                                                                            'RTSystemQueryAvailableRam',
                                                                                            'RTProcGetExecutablePath',
                                                                                            'RTProcSelf',
                                                                                            'RTEnvGetEx',
                                                                                            'RTPathAbs',
                                                                                            'RTDirExists',
                                                                                            'RTDirCreateFullPath',
                                                                                            'RTPathStartsWithRoot',
                                                                                            'RTPathUserHome',
                                                                                            'RTPathAppend',
                                                                                            '??0RTCString@@QEAA@AEBV0@@Z',
                                                                                            'RTNetIPv4HdrChecksum',
                                                                                            'RTNetIPv4PseudoChecksum',
                                                                                            'RTNetIPv6PseudoChecksumEx',
                                                                                            'RTNetTCPChecksum',
                                                                                            'RTNetIPv4FinalizeChecksum',
                                                                                            'RTNetUDPChecksum',
                                                                                            '??_7RTCString@@6B@',
                                                                                            '?printfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z',
                                                                                            '??1RTCString@@UEAA@XZ',
                                                                                            'RTUtf16Len',
                                                                                            'RTCritSectRwEnterShared',
                                                                                            'RTCritSectRwLeaveShared',
                                                                                            'RTNetIPv4IsHdrValid',
                                                                                            'RTNetIPv4IsUDPValid',
                                                                                            'RTNetIPv4IsUDPSizeValid',
                                                                                            'RTStrNICmp',
                                                                                            'RTStrToUInt16',
                                                                                            'RTLogLoggerEx',
                                                                                            'RTBldCfgRevision',
                                                                                            'RTStrAllocTag',
                                                                                            'RTUtf16ToUtf8ExTag',
                                                                                            'RTPathStripExt',
                                                                                            'RTPathFilename',
                                                                                            'RTCritSectRwGetWriteRecursion',
                                                                                            'RTStrStr',
                                                                                            'RTStrToUtf16ExTag',
                                                                                            'RTStrNLen',
                                                                                            'RTStrCalcUtf16LenEx',
                                                                                            '?jolt@RTCString@@QEAAXXZ',
                                                                                            'RTPathStripTrailingSlash',
                                                                                            'RTPathStripFilename',
                                                                                            'RTCritSectInitEx',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RaiseException',
                                                                                            'GetTickCount',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThread',
                                                                                            'CloseHandle',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'lstrlenW',
                                                                                            'GetStartupInfoW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'socket',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            'WSASocketW',
                                                                                            'getsockname',
                                                                                            'WSACreateEvent',
                                                                                            'WSAEventSelect',
                                                                                            'WSAWaitForMultipleEvents',
                                                                                            'WSAEnumNetworkEvents',
                                                                                            'WSAResetEvent',
                                                                                            'recvfrom',
                                                                                            'accept',
                                                                                            'sendto',
                                                                                            'getaddrinfo',
                                                                                            'freeaddrinfo',
                                                                                            'getpeername',
                                                                                            'WSASend',
                                                                                            'WSASetLastError',
                                                                                            'getsockopt',
                                                                                            'shutdown',
                                                                                            'WSARecv',
                                                                                            'WSASendTo',
                                                                                            'setsockopt',
                                                                                            'listen',
                                                                                            'bind',
                                                                                            'connect',
                                                                                            'ioctlsocket',
                                                                                            'WSAGetLastError',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'IcmpSendEcho2',
                                                                                            'Icmp6ParseReplies',
                                                                                            'Icmp6CreateFile',
                                                                                            'IcmpParseReplies',
                                                                                            'Icmp6SendEcho2',
                                                                                            'IcmpCreateFile',
                                                                                            'GetMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'PostThreadMessageW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 279,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 16384,
                                                                                       '.rdata\x00\x00': 69632,
                                                                                       '.reloc\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 197632},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/778c6c3c4c46fbbb9e9f31d07426370566beb21a44e74ab8127c814e5b960a76'},
 '778cd1ebfdc9fa6457497741da5431e4de16f2fad490ed88ade6e3bec16096b1': {'AddressOfEntryPoint': 13904,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'IPHLPAPI.DLL': 'NhGetInterfaceNameFromDeviceGuid',
                                                                                      'KERNEL32.dll': 'GetFileType',
                                                                                      'MSWSOCK.dll': 'GetSocketErrorMessageW',
                                                                                      'USER32.dll': 'OemToCharBuffW',
                                                                                      'WSOCK32.dll': 'ntohl',
                                                                                      'msvcrt.dll': 'wcschr',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'LocalAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleMode',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetFileType',
                                                                                            'fflush',
                                                                                            'fgetpos',
                                                                                            'fwprintf',
                                                                                            'vswprintf_s',
                                                                                            'memset',
                                                                                            '_wcsicmp',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            '_setmode',
                                                                                            '_vscwprintf',
                                                                                            '_write',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            'iswprint',
                                                                                            '_iob',
                                                                                            '_vsnwprintf',
                                                                                            '_wtoi',
                                                                                            'memmove',
                                                                                            'wcschr',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUpcaseUnicodeStringToOemString',
                                                                                            'NtClose',
                                                                                            'NtCreateFile',
                                                                                            'RtlGUIDFromString',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'NtWaitForSingleObject',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlIpv4AddressToStringW',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'RtlVirtualUnwind',
                                                                                            'OemToCharBuffW',
                                                                                            'ntohl',
                                                                                            'GetSocketErrorMessageW',
                                                                                            'NhGetInterfaceNameFromDeviceGuid'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/778cd1ebfdc9fa6457497741da5431e4de16f2fad490ed88ade6e3bec16096b1'},
 '77a8143e7b27936be5c9e85c941708ac8b767ebb4934315345929cd8303f5a5e': {'AddressOfEntryPoint': 68334,
                                                                      'DebugRVA': 67932,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1616,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 60416},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/77a8143e7b27936be5c9e85c941708ac8b767ebb4934315345929cd8303f5a5e'},
 '77f08faacf8433dd9912e49c80d0e0668a0f451036a5a9ab4abf15220c17f2e5': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/77f08faacf8433dd9912e49c80d0e0668a0f451036a5a9ab4abf15220c17f2e5'},
 '77f61bb677dc591f01382e88307ce1bdb62c41d9929cb3c6ba3ec6c93fafc2ce': {'AddressOfEntryPoint': 10288,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CredIsProtectedW',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'RPCRT4.dll': 'RpcBindingVectorFree',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'CredUnprotectW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CheckTokenMembership',
                                                                                            'RegCloseKey',
                                                                                            'CredIsProtectedW',
                                                                                            'FreeLibrary',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'CreateEventW',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'GetCurrentProcess',
                                                                                            '_commode',
                                                                                            'memcpy',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'NdrServerCall2',
                                                                                            'NdrServerCallAll',
                                                                                            'RpcEpUnregister',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'UuidFromStringW',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcServerListen',
                                                                                            'RpcBindingInqAuthClientW',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlVirtualUnwind'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1864,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 10240},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/77f61bb677dc591f01382e88307ce1bdb62c41d9929cb3c6ba3ec6c93fafc2ce'},
 '78126182dbb1d76efcaf14c6b15fc10e0e99af566ec17093f65723ab45038bd1': {'AddressOfEntryPoint': 35143,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'RtlUnwind',
                                                                                      'LZ32.dll': 'LZClose',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'TranslateMessage'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'FormatMessageA',
                                                                                            'DeleteFileA',
                                                                                            'MulDiv',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'WaitForSingleObject',
                                                                                            'CompareStringA',
                                                                                            'Sleep',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindNextFileA',
                                                                                            'WritePrivateProfileSectionA',
                                                                                            'GetStartupInfoA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFileAttributesA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'SizeofResource',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpiA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'lstrcpynA',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'FindFirstFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'lstrcatA',
                                                                                            'lstrlenA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'LoadLibraryA',
                                                                                            'MoveFileExA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetShortPathNameA',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'IsBadCodePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetEnvironmentStrings',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'TerminateProcess',
                                                                                            'GetStringTypeW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetStringTypeA',
                                                                                            'IsBadWritePtr',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'VirtualAlloc',
                                                                                            'GetVersion',
                                                                                            'GetCommandLineA',
                                                                                            'HeapDestroy',
                                                                                            'RtlUnwind',
                                                                                            'GetParent',
                                                                                            'GetDlgItem',
                                                                                            'SetFocus',
                                                                                            'SendDlgItemMessageA',
                                                                                            'EnableWindow',
                                                                                            'CheckRadioButton',
                                                                                            'GetWindowLongA',
                                                                                            'LoadStringA',
                                                                                            'LoadImageA',
                                                                                            'MessageBoxA',
                                                                                            'CharNextA',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetDlgItemTextA',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetWindow',
                                                                                            'PostMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'wsprintfA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowTextA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DrawTextA',
                                                                                            'MoveWindow',
                                                                                            'GetClientRect',
                                                                                            'ScreenToClient',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetParent',
                                                                                            'MapDialogRect',
                                                                                            'IsWindow',
                                                                                            'GetWindowRect',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'InvalidateRect',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'UpdateWindow',
                                                                                            'IsDialogMessageA',
                                                                                            'SetWindowLongA',
                                                                                            'GetActiveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'LoadIconA',
                                                                                            'PeekMessageA',
                                                                                            'SendMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'CreateFontIndirectA',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'CreatePalette',
                                                                                            'GetObjectA',
                                                                                            'GetStockObject',
                                                                                            'CreateDIBitmap',
                                                                                            'GetTextExtentPointA',
                                                                                            'SelectObject',
                                                                                            'EnumFontFamiliesExA',
                                                                                            'DeleteDC',
                                                                                            'BitBlt',
                                                                                            'TextOutA',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetMalloc',
                                                                                            'LZOpenFileA',
                                                                                            'LZCopy',
                                                                                            'LZClose'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 183,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 182952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 184320,
                                                                                       '.text\x00\x00\x00': 73728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/78126182dbb1d76efcaf14c6b15fc10e0e99af566ec17093f65723ab45038bd1'},
 '784be3d82f86dbbab1ecfed093abd0ca78da8c3f35420f3d08babdcc3caad083': {'AddressOfEntryPoint': 15040,
                                                                      'DebugRVA': 99008,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 98952,
                                                                      'ExportSize': 56,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'CreateThread',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'CharNextA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'msvcrt.dll': '_endthread',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['RegSetValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegQueryValueA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'ReportEventW',
                                                                                            'LookupAccountNameW',
                                                                                            'DeregisterEventSource',
                                                                                            'GetUserNameW',
                                                                                            'RegisterEventSourceW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'IsTextUnicode',
                                                                                            'RegSetValueExW',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'GetVersionExW',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'SearchPathW',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'CreateFileMappingA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileSize',
                                                                                            'LoadLibraryExA',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'GetACP',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'FindFirstFileW',
                                                                                            'GetModuleFileNameA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetStartupInfoA',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateFileW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'FormatMessageA',
                                                                                            'FormatMessageW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetVersionExA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetTempFileNameA',
                                                                                            'CloseHandle',
                                                                                            'GetTempPathA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'GetMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'GetActiveWindow',
                                                                                            'MessageBoxW',
                                                                                            'PostThreadMessageA',
                                                                                            'LoadStringA',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageA',
                                                                                            'EnumThreadWindows',
                                                                                            'RegisterClassA',
                                                                                            'IsWindowVisible',
                                                                                            'PostMessageA',
                                                                                            'GetClassInfoA',
                                                                                            'DefWindowProcA',
                                                                                            'CreateWindowExA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'TranslateMessage',
                                                                                            'SendMessageA',
                                                                                            'GetParent',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'KillTimer',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'GetClassNameA',
                                                                                            'LoadStringW',
                                                                                            'CharNextA',
                                                                                            'strcpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcsrchr',
                                                                                            '_itow',
                                                                                            'wcscat_s',
                                                                                            '_swab',
                                                                                            'memmove',
                                                                                            'swprintf_s',
                                                                                            '_beginthread',
                                                                                            'sprintf_s',
                                                                                            '_vsnprintf',
                                                                                            'wcscpy_s',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '_ftol2',
                                                                                            'bsearch',
                                                                                            'wcsncmp',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            '_except_handler4_common',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_endthread',
                                                                                            'SafeArrayGetElement',
                                                                                            'CreateErrorInfo',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'LoadTypeLib',
                                                                                            'VariantChangeType',
                                                                                            'SetErrorInfo',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreate',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayPutElement',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLibEx',
                                                                                            'SysAllocString',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysFreeString',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'CoGetClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoGetMalloc',
                                                                                            'StringFromCLSID',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CLSIDFromString',
                                                                                            'MkParseDisplayName',
                                                                                            'CoInitializeSecurity',
                                                                                            'CreateFileMoniker',
                                                                                            'CreateBindCtx',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CLSIDFromProgID',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 198,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 39224,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 39424,
                                                                                       '.text\x00\x00\x00': 95232},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/784be3d82f86dbbab1ecfed093abd0ca78da8c3f35420f3d08babdcc3caad083'},
 '7870240a230355ae6446183ee800e219c475d97f96569f0ae35c4b6d1fc905e0': {'AddressOfEntryPoint': 101040,
                                                                      'DebugRVA': 8096,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 536576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 21315,
                                                                      'ImportedDLL': {'CRYPT32.dll': 'CryptProtectData',
                                                                                      'CRYPTSP.dll': 'CryptDestroyHash',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoTaskMemFree',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CreateFileA',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'RaiseFailFastException',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCreateKeyExA',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ReleaseMutex',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemDirectoryW',
                                                                                      'api-ms-win-core-toolhelp-l1-1-0.dll': 'Module32NextW',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'TraceMessage',
                                                                                      'api-ms-win-eventing-obsolete-l1-1-0.dll': 'RegisterTraceGuidsA',
                                                                                      'api-ms-win-shell-shellfolders-l1-1-0.dll': 'SHGetKnownFolderPath',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['?what@exception@@UBEPBDXZ',
                                                                                            '_CxxThrowException',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '_stricmp',
                                                                                            'memcpy',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'memmove',
                                                                                            'wcscpy_s',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_snwprintf_s',
                                                                                            'memset',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'RaiseException',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'RaiseFailFastException',
                                                                                            'GetTraceEnableLevel',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'TraceMessage',
                                                                                            'HeapSetInformation',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemFree',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptProtectData',
                                                                                            'CreateFileW',
                                                                                            'GetVolumeInformationW',
                                                                                            'DeleteFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetDriveTypeW',
                                                                                            'CreateFileA',
                                                                                            'DeviceIoControl',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'RegisterTraceGuidsA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'Module32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Module32NextW',
                                                                                            'CryptGenKey',
                                                                                            'CryptExportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptContextAddRef',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGetDefaultProviderW',
                                                                                            'CryptGenRandom',
                                                                                            'CryptDeriveKey',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptDestroyHash',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WinVerifyTrust'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 25,
                                                                      'NumberOfImportFunctions': 113,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2232,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 8704,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 525312},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7870240a230355ae6446183ee800e219c475d97f96569f0ae35c4b6d1fc905e0'},
 '787c9b36ddb06f270f1dc08f8071661cbeb104c19a4204459615022a6a1cbbb8': {'AddressOfEntryPoint': 91912,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 131072,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'Framework.dll': '?log@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDHPEBVCCafException@2@@Z',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCP90.dll': '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                      'MSVCR90.dll': '_decode_pointer',
                                                                                      'ProviderFx.dll': '?createDataClassInstance@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassInstanceDoc@Caf@@V?$TCafObject@VCDataClassInstanceDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$deque@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCDataClassSubInstanceDoc@Caf@@V?$TCafObject@VCDataClassSubInstanceDo',
                                                                                      'glib-2.0.dll': 'g_atomic_int_dec_and_test'},
                                                                      'ImportedFunctions': ['g_atomic_int_inc',
                                                                                            'g_atomic_int_dec_and_test',
                                                                                            '??0CMinPackageElemDoc@Caf@@QEAA@XZ',
                                                                                            '??1CCafException@Caf@@UEAA@XZ',
                                                                                            '?throwAddRefedSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '??1CLogger@Caf@@UEAA@XZ',
                                                                                            '?logMessage@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDH1@Z',
                                                                                            '??0CLogger@Caf@@QEAA@PEBD@Z',
                                                                                            '?populateVA@CCafException@Caf@@QEAAXJAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PEBDZZ',
                                                                                            '??0InvalidArgumentException@Caf@@QEAA@XZ',
                                                                                            '?getPackageOSType@CUninstallProviderJobDoc@Caf@@QEBA?AW4PACKAGE_OS_TYPE@2@XZ',
                                                                                            '?getUninstallProviderJob@CCafMessagePayloadParser@Caf@@SA?AV?$TCafSmartPtr@VCUninstallProviderJobDoc@Caf@@V?$TCafObject@VCUninstallProviderJobDoc@Caf@@@@@@AEBV?$TCafSmartPtr@V?$TDynamicArray@EUSDynamicArrayMallocAllocator@Caf@@@Caf@@V?$TCafObject@V?$TDynamicArray@EUSDynamicArrayMallocAllocator@Caf@@@Caf@@@@@@@Z',
                                                                                            '?getPackageOSType@CInstallProviderJobDoc@Caf@@QEBA?AW4PACKAGE_OS_TYPE@2@XZ',
                                                                                            '?getInstallProviderJob@CCafMessagePayloadParser@Caf@@SA?AV?$TCafSmartPtr@VCInstallProviderJobDoc@Caf@@V?$TCafObject@VCInstallProviderJobDoc@Caf@@@@@@AEBV?$TCafSmartPtr@V?$TDynamicArray@EUSDynamicArrayMallocAllocator@Caf@@@Caf@@V?$TCafObject@V?$TDynamicArray@EUSDynamicArrayMallocAllocator@Caf@@@Caf@@@@@@@Z',
                                                                                            '?createBufferFromStr@CCafMessagePayload@Caf@@SA?AV?$TCafSmartPtr@V?$TDynamicArray@EUSDynamicArrayMallocAllocator@Caf@@@Caf@@V?$TCafObject@V?$TDynamicArray@EUSDynamicArrayMallocAllocator@Caf@@@Caf@@@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?notEmptyStr@CValidate@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD11@Z',
                                                                                            '?findRequiredInstanceParameterAsString@ParameterUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@AEBV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@@Z',
                                                                                            '?getOutputDir@CProviderInvokeOperationDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getParameterCollection@COperationDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@XZ',
                                                                                            '?getName@COperationDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getOperation@CProviderInvokeOperationDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCOperationDoc@Caf@@V?$TCafObject@VCOperationDoc@Caf@@@@@@XZ',
                                                                                            '?notNullPtr@CValidate@Caf@@SAXPEBXPEBD11@Z',
                                                                                            '?AddRef@CCafException@Caf@@UEAAXXZ',
                                                                                            '?Release@CCafException@Caf@@UEAAXXZ',
                                                                                            '?QueryInterface@CCafException@Caf@@UEAAXAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?throwSelf@InvalidArgumentException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@InvalidArgumentException@Caf@@UEAAXXZ',
                                                                                            '?getMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getFullMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '??1InvalidArgumentException@Caf@@UEAA@XZ',
                                                                                            '?getProviderVersion@CInstallProviderSpecDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getProviderName@CInstallProviderSpecDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getProviderNamespace@CInstallProviderSpecDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?UuidToStringW@BasePlatform@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBU_GUID@@@Z',
                                                                                            '?getClientId@CInstallProviderSpecDoc@Caf@@QEBA?AU_GUID@@XZ',
                                                                                            '?getPackageVersion@CMinPackageElemDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getPackageName@CMinPackageElemDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getPackageNamespace@CMinPackageElemDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getPackageCollection@CInstallProviderSpecDoc@Caf@@QEBA?AV?$deque@V?$TCafSmartPtr@VCMinPackageElemDoc@Caf@@V?$TCafObject@VCMinPackageElemDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMinPackageElemDoc@Caf@@V?$TCafObject@VCMinPackageElemDoc@Caf@@@@@@@std@@@std@@XZ',
                                                                                            '?split@CStringUtils@Caf@@SA?AV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@D@Z',
                                                                                            '?chmod@FileSystemUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z',
                                                                                            '?saveTextFile@FileSystemUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4FILE_MODE_TYPE@12@V34@@Z',
                                                                                            '?parseRequiredFilePath@UriUtils@Caf@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?getUri@CAttachmentDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getAttachment@CAttachmentCollectionDoc@Caf@@QEBA?AV?$deque@V?$TCafSmartPtr@VCAttachmentDoc@Caf@@V?$TCafObject@VCAttachmentDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCAttachmentDoc@Caf@@V?$TCafObject@VCAttachmentDoc@Caf@@@@@@@std@@@std@@XZ',
                                                                                            '?loadTextFile@FileSystemUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?buildPath@FileSystemUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@0@Z',
                                                                                            '?_sConfigInputDir@Caf@@3PEBDEB',
                                                                                            '?runSyncToFiles@ProcessUtils@Caf@@SAXAEBV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@1W4Priority@12@V54@@Z',
                                                                                            '?INHERIT_PARENT_DIRECTORY@ProcessUtils@Caf@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B',
                                                                                            '?_sStderrFilename@Caf@@3PEBDEB',
                                                                                            '?_sStdoutFilename@Caf@@3PEBDEB',
                                                                                            '??0FileNotFoundException@Caf@@QEAA@XZ',
                                                                                            '?doesFileExist@FileSystemUtils@Caf@@SA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?throwSelf@FileNotFoundException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@FileNotFoundException@Caf@@UEAAXXZ',
                                                                                            '??1FileNotFoundException@Caf@@UEAA@XZ',
                                                                                            '??1CAttachmentDoc@Caf@@UEAA@XZ',
                                                                                            '??0CAttachmentDoc@Caf@@QEAA@XZ',
                                                                                            '??1CAttachmentCollectionDoc@Caf@@UEAA@XZ',
                                                                                            '??0CAttachmentCollectionDoc@Caf@@QEAA@XZ',
                                                                                            '??1CInstallPackageSpecDoc@Caf@@UEAA@XZ',
                                                                                            '??0CInstallPackageSpecDoc@Caf@@QEAA@XZ',
                                                                                            '?logVA@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDH1ZZ',
                                                                                            '?getPackageNamespace@CInstallPackageSpecDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getPackageName@CInstallPackageSpecDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getPackageVersion@CInstallPackageSpecDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?recursiveRemoveDirectory@FileSystemUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?saveInstallPackageSpecToFile@XmlRoots@Caf@@YAXV?$TCafSmartPtr@VCInstallPackageSpecDoc@Caf@@V?$TCafObject@VCInstallPackageSpecDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?initialize@CAttachmentCollectionDoc@Caf@@QEAAXV?$deque@V?$TCafSmartPtr@VCAttachmentDoc@Caf@@V?$TCafObject@VCAttachmentDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCAttachmentDoc@Caf@@V?$TCafObject@VCAttachmentDoc@Caf@@@@@@@std@@@std@@V?$deque@V?$TCafSmartPtr@VCInlineAttachmentDoc@Caf@@V?$TCafObject@VCInlineAttachmentDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCInlineAttachmentDoc@Caf@@V?$TCafObject@VCInlineAttachmentDoc@Caf@@@@@@@std@@@4@@Z',
                                                                                            '?findRequiredAttachment@AttachmentUtils@Caf@@SA?AV?$TCafSmartPtr@VCAttachmentDoc@Caf@@V?$TCafObject@VCAttachmentDoc@Caf@@@@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$TCafSmartPtr@VCAttachmentCollectionDoc@Caf@@V?$TCafObject@VCAttachmentCollectionDoc@Caf@@@@@@@Z',
                                                                                            '?getName@CAttachmentNameCollectionDoc@Caf@@QEBA?AV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ',
                                                                                            '?createDirectory@FileSystemUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z',
                                                                                            '?doesDirectoryExist@FileSystemUtils@Caf@@SA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?getArguments@CInstallPackageSpecDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getSupportingAttachmentNameCollection@CInstallPackageSpecDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCAttachmentNameCollectionDoc@Caf@@V?$TCafObject@VCAttachmentNameCollectionDoc@Caf@@@@@@XZ',
                                                                                            '?getPackageAttachmentName@CInstallPackageSpecDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getStartupAttachmentName@CInstallPackageSpecDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getAttachmentCollection@CInstallPackageSpecDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCAttachmentCollectionDoc@Caf@@V?$TCafObject@VCAttachmentCollectionDoc@Caf@@@@@@XZ',
                                                                                            '?parseInstallPackageSpecFromFile@XmlRoots@Caf@@YA?AV?$TCafSmartPtr@VCInstallPackageSpecDoc@Caf@@V?$TCafObject@VCInstallPackageSpecDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?findOptionalFiles@FileSystemUtils@Caf@@SA?AV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@0@Z',
                                                                                            '?getIndex@CFullPackageElemDoc@Caf@@QEBAHXZ',
                                                                                            '?notEmptyStl@CValidate@Caf@@SAX_KPEBD11@Z',
                                                                                            '?getIndex@CMinPackageElemDoc@Caf@@QEBAHXZ',
                                                                                            '?initialize@CAttachmentDoc@Caf@@QEAAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00_NW4CMS_POLICY@2@@Z',
                                                                                            '?getCmsPolicy@CAttachmentDoc@Caf@@QEBA?AW4CMS_POLICY@2@XZ',
                                                                                            '?getName@CAttachmentDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getType@CAttachmentDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?copyFile@FileSystemUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?getDirname@FileSystemUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?getBasename@FileSystemUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?parseUriString@UriUtils@Caf@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAUSUriRecord@12@@Z',
                                                                                            '?initialize@CInstallPackageSpecDoc@Caf@@QEAAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0000V?$TCafSmartPtr@VCAttachmentNameCollectionDoc@Caf@@V?$TCafObject@VCAttachmentNameCollectionDoc@Caf@@@@@@V?$TCafSmartPtr@VCAttachmentCollectionDoc@Caf@@V?$TCafObject@VCAttachmentCollectionDoc@Caf@@@@@@0@Z',
                                                                                            '?getUninstallPackage@CFullPackageElemDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCPackageDefnDoc@Caf@@V?$TCafObject@VCPackageDefnDoc@Caf@@@@@@XZ',
                                                                                            '?getPackageNamespace@CFullPackageElemDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getPackageName@CFullPackageElemDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getPackageVersion@CFullPackageElemDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getStartupAttachmentName@CPackageDefnDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getPackageAttachmentName@CPackageDefnDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getSupportingAttachmentNameCollection@CPackageDefnDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCAttachmentNameCollectionDoc@Caf@@V?$TCafObject@VCAttachmentNameCollectionDoc@Caf@@@@@@XZ',
                                                                                            '?getArguments@CPackageDefnDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getInstallPackage@CFullPackageElemDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCPackageDefnDoc@Caf@@V?$TCafObject@VCPackageDefnDoc@Caf@@@@@@XZ',
                                                                                            '?normalizePathForPlatform@FileSystemUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?expandEnv@CStringUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?getRequiredString@AppConfigUtils@Caf@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?getRequiredString@AppConfigUtils@Caf@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@0@Z',
                                                                                            '?_sProviderHostArea@Caf@@3PEBDEB',
                                                                                            '?_sConfigInstallDir@Caf@@3PEBDEB',
                                                                                            '?_sConfigSchemaCacheDir@Caf@@3PEBDEB',
                                                                                            '??1CMinPackageElemDoc@Caf@@UEAA@XZ',
                                                                                            '?throwSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '??1CInstallProviderSpecDoc@Caf@@UEAA@XZ',
                                                                                            '??0CInstallProviderSpecDoc@Caf@@QEAA@XZ',
                                                                                            '?getProviderNamespace@CUninstallProviderJobDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getProviderName@CUninstallProviderJobDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getProviderVersion@CUninstallProviderJobDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?saveInstallProviderSpecToFile@XmlRoots@Caf@@YAXV?$TCafSmartPtr@VCInstallProviderSpecDoc@Caf@@V?$TCafObject@VCInstallProviderSpecDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?_sConfigInvokersDir@Caf@@3PEBDEB',
                                                                                            '?removeFile@FileSystemUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?_sConfigProviderRegDir@Caf@@3PEBDEB',
                                                                                            '?initialize@CInstallProviderSpecDoc@Caf@@QEAAXU_GUID@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11V?$deque@V?$TCafSmartPtr@VCMinPackageElemDoc@Caf@@V?$TCafObject@VCMinPackageElemDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMinPackageElemDoc@Caf@@V?$TCafObject@VCMinPackageElemDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '?getClientId@CInstallProviderJobDoc@Caf@@QEBA?AU_GUID@@XZ',
                                                                                            '?getProviderNamespace@CInstallProviderJobDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getProviderName@CInstallProviderJobDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getProviderVersion@CInstallProviderJobDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?initialize@CMinPackageElemDoc@Caf@@QEAAXHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '?getPackageCollection@CInstallProviderJobDoc@Caf@@QEBA?AV?$deque@V?$TCafSmartPtr@VCFullPackageElemDoc@Caf@@V?$TCafObject@VCFullPackageElemDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCFullPackageElemDoc@Caf@@V?$TCafObject@VCFullPackageElemDoc@Caf@@@@@@@std@@@std@@XZ',
                                                                                            '?parseInstallProviderSpecFromFile@XmlRoots@Caf@@YA?AV?$TCafSmartPtr@VCInstallProviderSpecDoc@Caf@@V?$TCafObject@VCInstallProviderSpecDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?populate@CCafException@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@J00@Z',
                                                                                            '??0CCafException@Caf@@QEAA@XZ',
                                                                                            '?log@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDHPEBVCCafException@2@@Z',
                                                                                            '?processProviderCommandline@CProviderDriver@Caf@@SAHAEAUIInvokedProvider@2@HQEAPEAD@Z',
                                                                                            '?createClassProperty@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCClassPropertyDoc@Caf@@V?$TCafObject@VCClassPropertyDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PROPERTY_TYPE@2@_N22@Z',
                                                                                            '?createClassIdentifier@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCClassIdentifierDoc@Caf@@V?$TCafObject@VCClassIdentifierDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '?createClassInstanceProperty@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCClassInstancePropertyDoc@Caf@@V?$TCafObject@VCClassInstancePropertyDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$TCafSmartPtr@VCClassIdentifierDoc@Caf@@V?$TCafObject@VCClassIdentifierDoc@Caf@@@@@@_N22@Z',
                                                                                            '?createDataClass@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$deque@V?$TCafSmartPtr@VCClassPropertyDoc@Caf@@V?$TCafObject@VCClassPropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCClassPropertyDoc@Caf@@V?$TCafObject@VCClassPropertyDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCClassInstancePropertyDoc@Caf@@V?$TCafObject@VCClassInstancePropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPt',
                                                                                            '?createInstanceParameter@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCInstanceParameterDoc@Caf@@V?$TCafObject@VCInstanceParameterDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@000_N1@Z',
                                                                                            '?createMethod@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$deque@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCInstanceParameterDoc@Caf@@V?$TCafObject@VCInstanceParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCInstanc',
                                                                                            '?createCollectMethod@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCCollectMethodDoc@Caf@@V?$TCafObject@VCCollectMethodDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$deque@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCInstanceParameterDoc@Caf@@V?$TCafObject@VCInstanceParameterDoc@Caf@@@@@@V?$allocator@V?$T',
                                                                                            '?createActionClass@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$TCafSmartPtr@VCCollectMethodDoc@Caf@@V?$TCafObject@VCCollectMethodDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '?createSchema@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCSchemaDoc@Caf@@V?$TCafObject@VCSchemaDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@@std@@@std@@V?$deque@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '?createDataClassProperty@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?createDataClassSubInstance@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassSubInstanceDoc@Caf@@V?$TCafObject@VCDataClassSubInstanceDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$deque@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '?createDataClassInstance@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassInstanceDoc@Caf@@V?$TCafObject@VCDataClassInstanceDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$deque@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCDataClassSubInstanceDoc@Caf@@V?$TCafObject@VCDataClassSubInstanceDo',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z',
                                                                                            '??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAHPEBD@Z',
                                                                                            '??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@PEBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBDAEBV10@@Z',
                                                                                            '??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAHAEBV12@@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@0@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '_exit',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_lock',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_decode_pointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 210,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 17408,
                                                                                       '.rdata\x00\x00': 74752,
                                                                                       '.text\x00\x00\x00': 126464},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/787c9b36ddb06f270f1dc08f8071661cbeb104c19a4204459615022a6a1cbbb8'},
 '789aa7005b0ffcc042d8bd2ca12fbbf3dfd10b843096c78815593ce64be81768': {'AddressOfEntryPoint': 177628,
                                                                      'DebugRVA': 4288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 217088,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetKeyValueW',
                                                                                      'KERNEL32.dll': 'LoadResource',
                                                                                      'NETAPI32.dll': 'NetShareEnum',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'bcrypt.dll': 'BCryptCloseAlgorithmProvider',
                                                                                      'mi.dll': 'MI_Application_InitializeV1',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'WinSqmCommonDatapointSetStreamEx',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'pdh.dll': 'PdhRemoveCounter',
                                                                                      'wevtapi.dll': 'EvtRender'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetServiceDisplayNameW',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatusEx',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'RegSetKeyValueW',
                                                                                            'FindResourceExW',
                                                                                            'LoadLibraryW',
                                                                                            'CompareStringOrdinal',
                                                                                            'HeapFree',
                                                                                            'CreateThread',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'CompareStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'GetComputerNameW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetComputerNameExW',
                                                                                            'FindResourceW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'EnterCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'WaitForMultipleObjects',
                                                                                            'RaiseException',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetTickCount64',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'LoadResource',
                                                                                            'swprintf_s',
                                                                                            'wcsspn',
                                                                                            'wcscspn',
                                                                                            'wcschr',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler3',
                                                                                            'srand',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_time64',
                                                                                            'isdigit',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            'strncmp',
                                                                                            '_vsnwprintf',
                                                                                            '_CxxThrowException',
                                                                                            '_resetstkoflw',
                                                                                            '_purecall',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'calloc',
                                                                                            'wcsstr',
                                                                                            'memmove_s',
                                                                                            'wcscpy_s',
                                                                                            'iswdigit',
                                                                                            'wcstol',
                                                                                            '_wcslwr_s',
                                                                                            'wcsncmp',
                                                                                            '_wcsnicmp',
                                                                                            'towupper',
                                                                                            'memcpy_s',
                                                                                            '_errno',
                                                                                            'wcsftime',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_localtime64_s',
                                                                                            'rand',
                                                                                            'wcscmp',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'NtSetInformationProcess',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmSetString',
                                                                                            'WinSqmSetDWORD64',
                                                                                            'WinSqmSetIfMaxDWORD',
                                                                                            'WinSqmSetIfMinDWORD',
                                                                                            'WinSqmAddToAverageDWORD',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmCommonDatapointSetDWORD',
                                                                                            'WinSqmCommonDatapointSetString',
                                                                                            'WinSqmCommonDatapointSetDWORD64',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'WinSqmCommonDatapointSetStreamEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayGetElement',
                                                                                            'VariantCopy',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayCreateVector',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VarBstrCmp',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'UnregisterClassA',
                                                                                            'GetSystemMetrics',
                                                                                            'EvtNext',
                                                                                            'EvtCreateRenderContext',
                                                                                            'EvtSeek',
                                                                                            'EvtClose',
                                                                                            'EvtQuery',
                                                                                            'EvtRender',
                                                                                            'PdhLookupPerfNameByIndexW',
                                                                                            'PdhCloseQuery',
                                                                                            'PdhEnumObjectItemsW',
                                                                                            'PdhOpenQueryW',
                                                                                            'PdhAddEnglishCounterW',
                                                                                            'PdhCollectQueryData',
                                                                                            'PdhGetFormattedCounterValue',
                                                                                            'PdhRemoveCounter',
                                                                                            'NetApiBufferFree',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'DsRoleFreeMemory',
                                                                                            'NetShareEnum',
                                                                                            'BCryptHashData',
                                                                                            'BCryptCreateHash',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptFinishHash',
                                                                                            'BCryptDestroyHash',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'MI_Application_InitializeV1'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 192,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 17776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 17920,
                                                                                       '.text\x00\x00\x00': 200192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/789aa7005b0ffcc042d8bd2ca12fbbf3dfd10b843096c78815593ce64be81768'},
 '78e1e6dd5b4cc1312bcc4c24675378ab1166971064adc65de6b57815f3fe3a06': {'AddressOfEntryPoint': 5872,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': '?terminate@@YAXXZ'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '?terminate@@YAXXZ'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 35,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/78e1e6dd5b4cc1312bcc4c24675378ab1166971064adc65de6b57815f3fe3a06'},
 '792488a8f240b110d849cba2aa8b74e2a158604475c5a23942838815628c935d': {'AddressOfEntryPoint': 50048,
                                                                      'DebugRVA': 4352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'Bcp47Langs.dll': 'GetUserLanguagesForUser',
                                                                                      'KERNEL32.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsDeleteString',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError'},
                                                                      'ImportedFunctions': ['EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventWrite',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegGetValueW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'LookupAccountNameW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegEnumValueW',
                                                                                            'RegSetValueExW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegLoadKeyW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'PrivilegeCheck',
                                                                                            'OpenProcessToken',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetFileSizeEx',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'ReadFile',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'InitializeCriticalSection',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeLibrary',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'LocalAlloc',
                                                                                            'LocaleNameToLCID',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemPreferredUILanguages',
                                                                                            'LocalFree',
                                                                                            'EnumUILanguagesW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetLastError',
                                                                                            'GetVersionExW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetProcAddress',
                                                                                            'towlower',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            '_CxxThrowException',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_wcsdup',
                                                                                            '_wgetenv_s',
                                                                                            'free',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'memmove',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '_wcsnicmp',
                                                                                            'memset',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'NtIsUILanguageComitted',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'Bcp47GetMuiForm',
                                                                                            'GetUserLanguagesForUser',
                                                                                            'WindowsStringHasEmbeddedNull',
                                                                                            'WindowsCreateStringReference',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsDeleteString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 144,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 54272},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/792488a8f240b110d849cba2aa8b74e2a158604475c5a23942838815628c935d'},
 '79d032d3c2e8081e670652c948ebb47be6dd6e0a78003ad9b3686c1607298c9c': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 448680,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 449024,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/79d032d3c2e8081e670652c948ebb47be6dd6e0a78003ad9b3686c1607298c9c'},
 '7a26e6a8b69f50c68697b101842a799bccaf1f3ae8d3322c96ab6aaef34c464d': {'AddressOfEntryPoint': 24176,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LsaNtStatusToWinError',
                                                                                      'KERNEL32.dll': 'GetStdHandle',
                                                                                      'Secur32.dll': 'LsaEnumerateLogonSessions',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'logoncli.dll': 'DsGetDcNameW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netutils.dll': 'NetApiBufferFree',
                                                                                      'ntdll.dll': 'NtSetInformationThread'},
                                                                      'ImportedFunctions': ['BuildTrusteeWithSidW',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidLengthRequired',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'DuplicateTokenEx',
                                                                                            'EqualSid',
                                                                                            'CreateWellKnownSid',
                                                                                            'LsaNtStatusToWinError',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'OpenProcess',
                                                                                            'LocalAlloc',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'K32EnumProcesses',
                                                                                            'FormatMessageW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'SetThreadUILanguage',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_wsetlocale',
                                                                                            '_controlfp',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcstoul',
                                                                                            'wcstol',
                                                                                            '_iob',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '_vsnwprintf',
                                                                                            '__setusermatherr',
                                                                                            'fwprintf',
                                                                                            'sprintf_s',
                                                                                            '_snwprintf_s',
                                                                                            'exit',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wcsicmp',
                                                                                            'memset',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlIpv6StringToAddressExW',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtDuplicateToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtClose',
                                                                                            'RtlInitString',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'NtSetInformationThread',
                                                                                            'LsaEnumerateLogonSessions',
                                                                                            'DsGetDcNameW',
                                                                                            'NetApiBufferFree',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1328,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 22528},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7a26e6a8b69f50c68697b101842a799bccaf1f3ae8d3322c96ab6aaef34c464d'},
 '7a7b342f322194eccd459ab2e7d5b83af8d1dee75b78114fc06891b6d66169fa': {'AddressOfEntryPoint': 97512,
                                                                      'DebugRVA': 242304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 192512,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SystemFunction036',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameA',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'RaiseException',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'CreateMenu'},
                                                                      'ImportedFunctions': ['CopySid',
                                                                                            'EqualSid',
                                                                                            'GetLengthSid',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SystemFunction036',
                                                                                            'GetSaveFileNameA',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetStockObject',
                                                                                            'Shell_NotifyIconA',
                                                                                            'ShellExecuteA',
                                                                                            'IsDialogMessageA',
                                                                                            'DestroyIcon',
                                                                                            'LoadIconA',
                                                                                            'LoadCursorA',
                                                                                            'GetDesktopWindow',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'GetCursorPos',
                                                                                            'MessageBeep',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowRect',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'SetMenuDefaultItem',
                                                                                            'GetMenuDefaultItem',
                                                                                            'GetMenuItemInfoA',
                                                                                            'InsertMenuItemA',
                                                                                            'TrackPopupMenu',
                                                                                            'RemoveMenu',
                                                                                            'AppendMenuA',
                                                                                            'GetMenuItemCount',
                                                                                            'DestroyMenu',
                                                                                            'CreatePopupMenu',
                                                                                            'FindWindowA',
                                                                                            'EnableWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'DialogBoxParamA',
                                                                                            'CreateDialogParamA',
                                                                                            'SetWindowPos',
                                                                                            'MoveWindow',
                                                                                            'ShowWindow',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'CreateWindowExA',
                                                                                            'RegisterClassA',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcA',
                                                                                            'PostMessageA',
                                                                                            'SendMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'WinHelpA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CreateMenu',
                                                                                            'SetEndOfFile',
                                                                                            'HeapSize',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetProcessHeap',
                                                                                            'SetStdHandle',
                                                                                            'DecodePointer',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileExA',
                                                                                            'FindClose',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleCP',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'ReadFile',
                                                                                            'LCMapStringW',
                                                                                            'IsValidCodePage',
                                                                                            'HeapReAlloc',
                                                                                            'CreateThread',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'OutputDebugStringW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetACP',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'FormatMessageA',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'LocalFree',
                                                                                            'OpenFileMappingA',
                                                                                            'GetCurrentThreadId',
                                                                                            'LocalAlloc',
                                                                                            'CreateFileMappingA',
                                                                                            'GetCurrentProcess',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryExW',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 146,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 8440,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 55808,
                                                                                       '.reloc\x00\x00': 8704,
                                                                                       '.rsrc\x00\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 185856},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7a7b342f322194eccd459ab2e7d5b83af8d1dee75b78114fc06891b6d66169fa'},
 '7aa3bf54c579a289f13366c477ffca1642d4da1028d7f64a54fa91d54f1c6322': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 96892,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 97280,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7aa3bf54c579a289f13366c477ffca1642d4da1028d7f64a54fa91d54f1c6322'},
 '7ab88be8fe2b05703f1a6a81cc8059920567dd156b83d46b66d47ae2ffd2d71d': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 133384,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 133632,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7ab88be8fe2b05703f1a6a81cc8059920567dd156b83d46b66d47ae2ffd2d71d'},
 '7ac0fecd5b8615fdb384eb34f34e60ee04c88dc71fe58a4926ee72ca364394be': {'AddressOfEntryPoint': 4816,
                                                                      'DebugRVA': 12880,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR90.dll': 'fflush',
                                                                                      'glib-2.0.dll': 'g_path_get_basename',
                                                                                      'vmtools.dll': 'DynBuf_Append'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__initenv',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_amsg_exit',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'free',
                                                                                            'calloc',
                                                                                            'printf',
                                                                                            'fflush',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'g_free',
                                                                                            'g_printerr',
                                                                                            'g_option_context_get_help',
                                                                                            'g_strcmp0',
                                                                                            'g_io_channel_read_to_end',
                                                                                            'g_io_channel_win32_new_fd',
                                                                                            'g_file_get_contents_utf8',
                                                                                            'g_strdup',
                                                                                            'g_set_error',
                                                                                            'g_option_error_quark',
                                                                                            'g_option_context_free',
                                                                                            'g_error_free',
                                                                                            'g_option_context_parse',
                                                                                            'g_option_group_set_parse_hooks',
                                                                                            'g_option_context_add_group',
                                                                                            'g_option_context_set_summary',
                                                                                            'g_strdup_printf',
                                                                                            'g_option_context_set_main_group',
                                                                                            'g_option_group_add_entries',
                                                                                            'g_option_group_new',
                                                                                            'g_option_context_new',
                                                                                            'g_set_prgname',
                                                                                            'g_path_get_basename',
                                                                                            'RpcChannel_SendOneRaw',
                                                                                            'DynBuf_Destroy',
                                                                                            'DynBuf_Init',
                                                                                            'VMTools_ConfigLogToStdio',
                                                                                            'DynBuf_Append'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 63,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7ac0fecd5b8615fdb384eb34f34e60ee04c88dc71fe58a4926ee72ca364394be'},
 '7b2cf6e56fe262686ce9afdabb260854ee92b257ad95d577e9ada6a4eccfb9f1': {'AddressOfEntryPoint': 49792,
                                                                      'DebugRVA': 4288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'SearchPathW',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetFolderPathEx',
                                                                                      'SHLWAPI.dll': 'SHCreateStreamOnFileEx',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'DefWindowProcW',
                                                                                      'credui.dll': 'CredUIPromptForCredentialsW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtQueryInformationToken',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'LoadLibraryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'Sleep',
                                                                                            'CopyFileW',
                                                                                            'FormatMessageW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'IsWow64Process',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapSetInformation',
                                                                                            'OutputDebugStringA',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'GetThreadUILanguage',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapFree',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapAlloc',
                                                                                            'CreateProcessW',
                                                                                            'FreeLibrary',
                                                                                            'GetStdHandle',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVersionExW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'WriteFile',
                                                                                            'GetCommandLineW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'CreateFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDC',
                                                                                            'TranslateMessage',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetMenu',
                                                                                            'EnumWindows',
                                                                                            'LoadIconW',
                                                                                            'GetWindowPlacement',
                                                                                            'CheckMenuRadioItem',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetClassNameW',
                                                                                            'ReleaseDC',
                                                                                            'SetFocus',
                                                                                            'GetClientRect',
                                                                                            'GetMessageW',
                                                                                            'WaitForInputIdle',
                                                                                            'DialogBoxParamW',
                                                                                            'GetFocus',
                                                                                            'CheckMenuItem',
                                                                                            'DeleteMenu',
                                                                                            'PostMessageW',
                                                                                            'IsIconic',
                                                                                            'PostQuitMessage',
                                                                                            'CharToOemW',
                                                                                            'MonitorFromPoint',
                                                                                            'GetWindowRect',
                                                                                            'TranslateAcceleratorW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetDlgItem',
                                                                                            'DispatchMessageW',
                                                                                            'RegisterClassExW',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'GetSysColor',
                                                                                            'SetWindowPos',
                                                                                            'LoadStringW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'CreateWindowExW',
                                                                                            'SendMessageW',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetMonitorInfoW',
                                                                                            'DefWindowProcW',
                                                                                            'wcsncmp',
                                                                                            'bsearch',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'wcstok',
                                                                                            '_wcsicmp',
                                                                                            'wcsrchr',
                                                                                            'wcschr',
                                                                                            '_wsplitpath_s',
                                                                                            '_wmakepath_s',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            'wcsstr',
                                                                                            '_wcsnicmp',
                                                                                            'towlower',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'OleInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'NtOpenThreadToken',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'NtQueryInformationToken',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'SHGetIDListFromObject',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHBindToParent',
                                                                                            'SHCreateDataObject',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathEx',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VarDateFromStr',
                                                                                            'VariantChangeType',
                                                                                            'SysFreeString',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantInit',
                                                                                            'CredUIPromptForCredentialsW',
                                                                                            'GetUserNameExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 168,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 102320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 102400,
                                                                                       '.text\x00\x00\x00': 48128},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7b2cf6e56fe262686ce9afdabb260854ee92b257ad95d577e9ada6a4eccfb9f1'},
 '7b437ba3de1c9be08e668038fa7d1e09426532826e7e46e96ff7370a3584dfb6': {'AddressOfEntryPoint': 50648,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharNextA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'Sleep',
                                                                                            'SetLastError',
                                                                                            'SetErrorMode',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetCPInfo',
                                                                                            'FormatMessageA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'CharNextA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 9216,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 9216,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 48640,
                                                                                       'DATA\x00\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7b437ba3de1c9be08e668038fa7d1e09426532826e7e46e96ff7370a3584dfb6'},
 '7b7f8973702f72655ece594ec9179a2228c62912a1f37d1c77d243476088271d': {'AddressOfEntryPoint': 81088,
                                                                      'DebugRVA': 411108,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 499712,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'RpcServerRegisterIfEx',
                                                                                      'api-ms-win-base-bootconfig-l1-1-0.dll': 'NotifyBootConfigStatus',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-appcompat-l1-1-1.dll': 'BaseInitAppcompatCacheSupport',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetTimeFormatW',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'DebugBreak',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CompareFileTime',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalSize',
                                                                                      'api-ms-win-core-job-l2-1-0.dll': 'AssignProcessToJobObject',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetComputerNameW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualUnlock',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'SetThreadToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-psapi-l1-1-0.dll': 'QueryFullProcessImageNameW',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-shutdown-l1-1-1.dll': 'InitiateShutdownW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'AcquireSRWLockExclusive',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-threadpool-l1-2-0.dll': 'CloseThreadpoolWork',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'UnregisterWaitEx',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'SystemTimeToTzSpecificLocalTime',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'GetFileVersionInfoExW',
                                                                                      'api-ms-win-core-wow64-l1-1-0.dll': 'IsWow64Process',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'TraceMessage',
                                                                                      'api-ms-win-eventing-controller-l1-1-0.dll': 'EnableTraceEx2',
                                                                                      'api-ms-win-eventlog-legacy-l1-1-0.dll': 'GetEventLogInformation',
                                                                                      'api-ms-win-power-base-l1-1-0.dll': 'PowerDeterminePlatformRoleEx',
                                                                                      'api-ms-win-power-setting-l1-1-0.dll': 'PowerSettingUnregisterNotification',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'EqualSid',
                                                                                      'api-ms-win-security-credentials-l1-1-0.dll': 'CredFree',
                                                                                      'api-ms-win-security-credentials-l2-1-0.dll': 'CredReadByTokenHandle',
                                                                                      'api-ms-win-security-lsalookup-l1-1-1.dll': 'LsaLookupFreeMemory',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupAccountSidW',
                                                                                      'api-ms-win-security-lsapolicy-l1-1-0.dll': 'LsaClose',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'StartServiceW',
                                                                                      'api-ms-win-service-management-l2-1-0.dll': 'QueryServiceConfigW',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'QueryServiceStatus',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'NtAcceptConnectPort'},
                                                                      'ImportedFunctions': ['memcpy',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '__C_specific_handler',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            'memcmp',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_wtoi',
                                                                                            '_ultow',
                                                                                            'iswspace',
                                                                                            'wcstok',
                                                                                            '_wcsnicmp',
                                                                                            'wcsrchr',
                                                                                            '_tolower',
                                                                                            'isupper',
                                                                                            '__isascii',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'memcpy_s',
                                                                                            '_purecall',
                                                                                            '_wcsicmp',
                                                                                            '_onexit',
                                                                                            'wcschr',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__getmainargs',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '__set_app_type',
                                                                                            '_vsnwprintf',
                                                                                            'wcsstr',
                                                                                            'wcscpy_s',
                                                                                            '_initterm',
                                                                                            'wcscmp',
                                                                                            'NtReplyPort',
                                                                                            'NtCreateEvent',
                                                                                            'RtlConnectToSm',
                                                                                            'RtlSendMsgToSm',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlDeleteResource',
                                                                                            'NtGetCachedSigningLevel',
                                                                                            'WinSqmSetString',
                                                                                            'NtReplyWaitReceivePort',
                                                                                            'NtCreatePort',
                                                                                            'NtCompleteConnectPort',
                                                                                            'TpReleaseTimer',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'NtDuplicateToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlAddAce',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'TpWaitForTimer',
                                                                                            'RtlQueryResourcePolicy',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlEqualSid',
                                                                                            'NtFilterToken',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlDuplicateUnicodeString',
                                                                                            'NtInitiatePowerAction',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'TpAllocTimer',
                                                                                            'TpSetTimer',
                                                                                            'RtlTimeToSecondsSince1980',
                                                                                            'NtOpenFile',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'RtlFreeSid',
                                                                                            'NtSetSecurityObject',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlAddMandatoryAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlOpenCurrentUser',
                                                                                            'RtlCopySid',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlGetAce',
                                                                                            'TpAllocWait',
                                                                                            'TpPostWork',
                                                                                            'TpAllocWork',
                                                                                            'TpReleaseWork',
                                                                                            'TpWaitForWork',
                                                                                            'TpReleaseWait',
                                                                                            'TpWaitForWait',
                                                                                            'TpSetWait',
                                                                                            'RtlDeregisterWait',
                                                                                            'RtlRegisterWait',
                                                                                            'TpSimpleTryPost',
                                                                                            'RtlLengthSid',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'WinSqmAddToStream',
                                                                                            'RtlInitString',
                                                                                            'NtAllocateLocallyUniqueId',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlCreateEnvironment',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlQueryEnvironmentVariable_U',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'EtwEventActivityIdControl',
                                                                                            'EtwEventWriteStartScenario',
                                                                                            'EtwEventWriteEndScenario',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlUnlockBootStatusData',
                                                                                            'RtlGetSetBootStatusData',
                                                                                            'RtlLockBootStatusData',
                                                                                            'RtlRemovePrivileges',
                                                                                            'RtlDestroyEnvironment',
                                                                                            'EtwEventUnregister',
                                                                                            'RtlDeleteCriticalSection',
                                                                                            'WinSqmSetDWORD',
                                                                                            'RtlpVerifyAndCommitUILanguageSettings',
                                                                                            'EtwEventRegister',
                                                                                            'NtSetInformationProcess',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtSystemDebugControl',
                                                                                            'NtPowerInformation',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmStartSession',
                                                                                            'RtlCopyLuid',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'NtSetEvent',
                                                                                            'NtOpenEvent',
                                                                                            'NtUnmapViewOfSection',
                                                                                            'DbgPrintEx',
                                                                                            'DbgPrompt',
                                                                                            'NtRequestPort',
                                                                                            'NtConnectPort',
                                                                                            'NtRequestWaitReplyPort',
                                                                                            'RtlGetNtProductType',
                                                                                            'NtClose',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtShutdownSystem',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwEventWrite',
                                                                                            'EtwTraceMessage',
                                                                                            'NtAcceptConnectPort',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateThread',
                                                                                            'CreateThread',
                                                                                            'ExitProcess',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'CreateProcessW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'OpenThreadToken',
                                                                                            'ResumeThread',
                                                                                            'GetProcessId',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcessTimes',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenProcessToken',
                                                                                            'CreateRemoteThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetThreadToken',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'LoadStringW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'GetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'SetErrorMode',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'InitiateShutdownW',
                                                                                            'RegOpenCurrentUser',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegFlushKey',
                                                                                            'RegGetValueA',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetLengthSid',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'GetTokenInformation',
                                                                                            'IsValidSid',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateLocallyUniqueId',
                                                                                            'DuplicateToken',
                                                                                            'RevertToSelf',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateWellKnownSid',
                                                                                            'SetTokenInformation',
                                                                                            'EqualSid',
                                                                                            'WaitForSingleObject',
                                                                                            'TryEnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateMutexW',
                                                                                            'OpenEventW',
                                                                                            'AcquireSRWLockShared',
                                                                                            'InitializeSRWLock',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'SleepEx',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'ControlTraceW',
                                                                                            'StartTraceW',
                                                                                            'EnableTraceEx2',
                                                                                            'MoveFileExW',
                                                                                            'GetVersionExW',
                                                                                            'GetTickCount64',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'PowerSettingRegisterNotification',
                                                                                            'PowerSettingUnregisterNotification',
                                                                                            'CreateThreadpool',
                                                                                            'CreateThreadpoolCleanupGroup',
                                                                                            'CloseThreadpool',
                                                                                            'CloseThreadpoolCleanupGroupMembers',
                                                                                            'CloseThreadpoolCleanupGroup',
                                                                                            'SetThreadpoolThreadMaximum',
                                                                                            'SetThreadpoolThreadMinimum',
                                                                                            'SubmitThreadpoolWork',
                                                                                            'CreateThreadpoolWork',
                                                                                            'TrySubmitThreadpoolCallback',
                                                                                            'CloseThreadpoolWork',
                                                                                            'RpcServerTestCancel',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'NdrServerCallAll',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'Ndr64AsyncServerCallAll',
                                                                                            'Ndr64AsyncClientCall',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'RpcAsyncCancelCall',
                                                                                            'RpcMgmtIsServerListening',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'UuidFromStringW',
                                                                                            'NdrClientCall3',
                                                                                            'RpcBindingUnbind',
                                                                                            'RpcBindingBind',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingCreateW',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcAsyncAbortCall',
                                                                                            'RpcImpersonateClient',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'NdrServerCall2',
                                                                                            'RpcRaiseException',
                                                                                            'NdrAsyncServerCall',
                                                                                            'RpcServerSubscribeForNotification',
                                                                                            'RpcEpUnregister',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcEpRegisterW',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'RpcServerListen',
                                                                                            'RpcServerUnsubscribeForNotification',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetShortPathNameW',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'CompareFileTime',
                                                                                            'VirtualLock',
                                                                                            'VirtualAlloc',
                                                                                            'GetProcessWorkingSetSizeEx',
                                                                                            'SetProcessWorkingSetSizeEx',
                                                                                            'VirtualFree',
                                                                                            'VirtualUnlock',
                                                                                            'SearchPathW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'PowerDeterminePlatformRoleEx',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LsaLookupManageSidNameMapping',
                                                                                            'LookupAccountSidLocalW',
                                                                                            'LsaLookupFreeMemory',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'QueueUserWorkItem',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'UnregisterWait',
                                                                                            'GetComputerNameW',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'GetEventLogInformation',
                                                                                            'LocalReAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LocalSize',
                                                                                            'lstrlenW',
                                                                                            'BaseInitAppcompatCacheSupport',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaStorePrivateData',
                                                                                            'LsaClose',
                                                                                            'TerminateJobObject',
                                                                                            'SetInformationJobObject',
                                                                                            'QueryInformationJobObject',
                                                                                            'CreateJobObjectW',
                                                                                            'AssignProcessToJobObject',
                                                                                            'IsDebuggerPresent',
                                                                                            'DebugBreak',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'StartServiceW',
                                                                                            'NotifyServiceStatusChangeW',
                                                                                            'QueryServiceConfigW',
                                                                                            'QueryServiceStatus',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'TraceMessage',
                                                                                            'CredUnmarshalCredentialW',
                                                                                            'CredFree',
                                                                                            'LookupAccountNameW',
                                                                                            'LookupAccountSidW',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'NotifyBootConfigStatus',
                                                                                            'CredReadByTokenHandle',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'IsWow64Process'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 49,
                                                                      'NumberOfImportFunctions': 397,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 71896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 18944,
                                                                                       '.didat\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 18432,
                                                                                       '.pdata\x00\x00': 20992,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 72192,
                                                                                       '.text\x00\x00\x00': 434688},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/7b7f8973702f72655ece594ec9179a2228c62912a1f37d1c77d243476088271d'},
 '7bab1cd05573cf9e4f90db32b250ab62d629c448c0c0accb8e3d45a60ce1ee4d': {'AddressOfEntryPoint': 12594,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'CopyFileA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrcmpiA',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'lstrcmpA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'CopyFileA',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'EndDialog',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'TrackPopupMenu',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 18472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 18944,
                                                                                       '.text\x00\x00\x00': 23040},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7bab1cd05573cf9e4f90db32b250ab62d629c448c0c0accb8e3d45a60ce1ee4d'},
 '7bcc93b58d0a53e6a59773174ac86a2322eebdb3253b98726da1cc7c0d5f6ec9': {'AddressOfEntryPoint': 22898,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'ReadFile',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenProcessToken',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5224,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2476032,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7bcc93b58d0a53e6a59773174ac86a2322eebdb3253b98726da1cc7c0d5f6ec9'},
 '7bf892391e71783145ab9a81ed35d029a66e2284b3fb97bf8198aa2ce56833dc': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 1007616,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 805306368,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 72704,
                                                                                       '.reloc\x00\x00': 25088,
                                                                                       '.text\x00\x00\x00': 909824,
                                                                                       '.xdata\x00\x00': 18432},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/7bf892391e71783145ab9a81ed35d029a66e2284b3fb97bf8198aa2ce56833dc'},
 '7c534922487d60f5e24b7c313ad85d5dae659f526764bf756ab56c048b8a8076': {'AddressOfEntryPoint': 191865,
                                                                      'DebugRVA': 293456,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 771751936,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'CreateFontIndirectA',
                                                                                      'KERNEL32.dll': 'GetStringTypeA',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['lstrlenW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetFullPathNameA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'CopyFileA',
                                                                                            'MoveFileA',
                                                                                            'Sleep',
                                                                                            'Process32Next',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'CreateThread',
                                                                                            'ReadFile',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersionExA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'CompareStringA',
                                                                                            'GetCurrentProcess',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'GetDiskFreeSpaceExA',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetLastError',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'LockResource',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlUnwind',
                                                                                            'GetFileAttributesA',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'HeapAlloc',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'InterlockedExchange',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateFontIndirectA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2538412,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 2538496,
                                                                                       '.text\x00\x00\x00': 289792},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7c534922487d60f5e24b7c313ad85d5dae659f526764bf756ab56c048b8a8076'},
 '7c92a0c9ee97cd8157e7d0e4808673b385c8169d09b350f138e5e8953b16465e': {'AddressOfEntryPoint': 26670,
                                                                      'DebugRVA': 26456,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1560,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7c92a0c9ee97cd8157e7d0e4808673b385c8169d09b350f138e5e8953b16465e'},
 '7ca1e150017ac7d1408c155ec01eab78eb8019789e26bf78b129ab4b39a4faed': {'AddressOfEntryPoint': 136272,
                                                                      'DebugRVA': 4336,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 249856,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableW',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'ntdll.dll': 'RtlReAllocateHeap'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'PrivilegeCheck',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegFlushKey',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'EnumUILanguagesW',
                                                                                            'GetProcAddress',
                                                                                            'FindClose',
                                                                                            'GetSystemPreferredUILanguages',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetLastError',
                                                                                            'GetSystemTime',
                                                                                            'GetFileTime',
                                                                                            'FreeResource',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'MoveFileExW',
                                                                                            'GetFileAttributesW',
                                                                                            'FlushViewOfFile',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'LCIDToLocaleName',
                                                                                            'FindFirstFileW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetVersionExA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapCreate',
                                                                                            'HeapFree',
                                                                                            'VirtualFree',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'OutputDebugStringA',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringW',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExA',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'CreateFileW',
                                                                                            'GetLocaleInfoA',
                                                                                            'IsValidLocale',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeA',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'ReadFile',
                                                                                            'ReadConsoleW',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'HeapSize',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'CreateFileMappingW',
                                                                                            'OpenFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'DeviceIoControl',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'LocalFree',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'RtlUnwind',
                                                                                            'EtwEventWrite',
                                                                                            'RtlGetSystemPreferredUILanguages',
                                                                                            'EtwEventUnregister',
                                                                                            'RtlExpandEnvironmentStrings',
                                                                                            'RtlAllocateHeap',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventEnabled',
                                                                                            'RtlFreeHeap',
                                                                                            'NtMapViewOfSection',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtUnmapViewOfSection',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'RtlReAllocateHeap',
                                                                                            'NetGetJoinInformation',
                                                                                            'NetApiBufferFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 212480,
                                                                                       'PAGELK\x00\x00': 5632},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7ca1e150017ac7d1408c155ec01eab78eb8019789e26bf78b129ab4b39a4faed'},
 '7cff03f890334150ce3f369c395781e0809911623543150b418357724d2cc459': {'AddressOfEntryPoint': 82432,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenEncryptedFileRawW',
                                                                                      'KERNEL32.dll': 'PrivCopyFileExW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlGetDaclSecurityDescriptor'},
                                                                      'ImportedFunctions': ['GetUserNameW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'ReadEncryptedFileRaw',
                                                                                            'DecryptFileW',
                                                                                            'EncryptFileW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'CloseEncryptedFileRaw',
                                                                                            'WriteEncryptedFileRaw',
                                                                                            'OpenEncryptedFileRawW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetDateFormatW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetLocalTime',
                                                                                            'GetVersion',
                                                                                            'GetSystemTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CloseThreadpoolWork',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'TlsGetValue',
                                                                                            'SetErrorMode',
                                                                                            'CreateThreadpoolWork',
                                                                                            'SetWaitableTimer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FindCloseChangeNotification',
                                                                                            'SetEvent',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'SleepEx',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'SetFileTime',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'OpenProcess',
                                                                                            'CreateThreadpool',
                                                                                            'Sleep',
                                                                                            'SetThreadpoolThreadMaximum',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileAttributesW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetLastError',
                                                                                            'CreateThreadpoolCleanupGroup',
                                                                                            'CloseThreadpoolCleanupGroupMembers',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeSRWLock',
                                                                                            'OpenThread',
                                                                                            'CreateEventW',
                                                                                            'FindNextChangeNotification',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SubmitThreadpoolWork',
                                                                                            'CreateWaitableTimerW',
                                                                                            'HeapSetInformation',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsAlloc',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileW',
                                                                                            'CompareFileTime',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'lstrcmpW',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeviceIoControl',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetFileAttributesW',
                                                                                            'GetVolumeInformationW',
                                                                                            'CopyFileExW',
                                                                                            'WaitForSingleObject',
                                                                                            'CompareStringOrdinal',
                                                                                            'BackupRead',
                                                                                            'BackupWrite',
                                                                                            'DeleteFileW',
                                                                                            'ExitThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetExitCodeThread',
                                                                                            'ResumeThread',
                                                                                            'CreateThread',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'ExitProcess',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapValidate',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'PrivCopyFileExW',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'clock',
                                                                                            'time',
                                                                                            'ctime',
                                                                                            '_lock',
                                                                                            'fwprintf_s',
                                                                                            '__dllonexit',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'swprintf_s',
                                                                                            'fclose',
                                                                                            '_setmode',
                                                                                            'fputws',
                                                                                            '_fileno',
                                                                                            '_vsnwprintf',
                                                                                            'printf',
                                                                                            'fgetws',
                                                                                            'wprintf',
                                                                                            '_wfopen',
                                                                                            '__iob_func',
                                                                                            'fwprintf',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_wsetlocale',
                                                                                            '_unlock',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            'fflush',
                                                                                            'memcpy',
                                                                                            '_ftol2_sse',
                                                                                            '_ftol2',
                                                                                            '__CxxFrameHandler3',
                                                                                            'fprintf',
                                                                                            '_get_osfhandle',
                                                                                            '_errno',
                                                                                            'memset',
                                                                                            'LoadStringW',
                                                                                            'WSACleanup',
                                                                                            'RtlCompareMemory',
                                                                                            'NtSetSecurityObject',
                                                                                            'NtOpenFile',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlGetControlSecurityDescriptor',
                                                                                            'NtQueryDirectoryFile',
                                                                                            'RtlDosPathNameToRelativeNtPathName_U',
                                                                                            'NtQueryInformationFile',
                                                                                            'RtlGetSaclSecurityDescriptor',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlFreeHeap',
                                                                                            'NtQuerySecurityObject',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'RtlGetDaclSecurityDescriptor'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 187,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1888,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 89088},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7cff03f890334150ce3f369c395781e0809911623543150b418357724d2cc459'},
 '7d0ba1a011ec2c2c392a86d1c5ebaf20f5615142ed3de4ed5cd603f60e520345': {'AddressOfEntryPoint': 32752,
                                                                      'DebugRVA': 4512,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetModuleFileNameW',
                                                                                      'OLEAUT32.dll': 'SafeArrayUnaccessData',
                                                                                      'USER32.dll': 'KillTimer',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'ReadFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'LCMapStringW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlVirtualUnwind',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForSingleObject',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'EqualSid',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'SetServiceStatus',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'OpenSCManagerW',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'RegisterServiceCtrlHandlerW',
                                                                                      'esscli.dll': '?IsUserAdministrator@@YAJPEAX@Z',
                                                                                      'msvcrt.dll': 'exit',
                                                                                      'ntdll.dll': 'EtwGetTraceLoggerHandle',
                                                                                      'ole32.dll': 'MkParseDisplayName',
                                                                                      'wbemcomn.dll': '?Initialize@CUnk@@UEAAHXZ'},
                                                                      'ImportedFunctions': ['SetTimer',
                                                                                            'PostQuitMessage',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'KillTimer',
                                                                                            '__C_specific_handler',
                                                                                            'memcpy',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_commode',
                                                                                            '_exit',
                                                                                            '_purecall',
                                                                                            '_acmdln',
                                                                                            '_lock',
                                                                                            'memset',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_vsnwprintf',
                                                                                            '_fmode',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_cexit',
                                                                                            '_CxxThrowException',
                                                                                            '_initterm',
                                                                                            'printf',
                                                                                            'wcsstr',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            'SafeArrayGetUBound',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayAccessData',
                                                                                            'SetErrorInfo',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoGetClassObject',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'FormatMessageW',
                                                                                            'LCMapStringW',
                                                                                            'CloseHandle',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateThread',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'CompareFileTime',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'SetWaitableTimer',
                                                                                            'CancelWaitableTimer',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'CreateBindCtx',
                                                                                            'MkParseDisplayName',
                                                                                            '?IsUserAdministrator@@YAJPEAX@Z',
                                                                                            'CreateWaitableTimerW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LocalFree',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DebugBreak',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineW',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            '??1CFlexArray@@QEAA@XZ',
                                                                                            '??ACFlexArray@@QEAAAEAPEAXH@Z',
                                                                                            '?Empty@CFlexArray@@QEAAXXZ',
                                                                                            '??1CInCritSec@@QEAA@XZ',
                                                                                            '??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '?Leave@CCritSec@@QEAAXXZ',
                                                                                            '?Enter@CCritSec@@QEAAXXZ',
                                                                                            '??1CCritSec@@QEAA@XZ',
                                                                                            '??0CCritSec@@QEAA@XZ',
                                                                                            '?InternalRelease@CUnkInternal@@QEAAKXZ',
                                                                                            '?InternalQueryInterface@CUnkInternal@@QEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '??YWString@@QEAAAEAV0@PEBG@Z',
                                                                                            '??4WString@@QEAAAEAV0@PEBG@Z',
                                                                                            '??1WString@@QEAA@XZ',
                                                                                            '??4WString@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z',
                                                                                            '??0CFlexArray@@QEAA@HH@Z',
                                                                                            '?OnInitialize@CUnk@@UEAAHXZ',
                                                                                            '??0CUnkInternal@@QEAA@PEAVCLifeControl@@@Z',
                                                                                            '?QueryInterface@CUnkInternal@@UEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?AddRef@CUnkInternal@@UEAAKXZ',
                                                                                            '?Release@CUnkInternal@@UEAAKXZ',
                                                                                            '?Release@CUnk@@UEAAKXZ',
                                                                                            '?AddRef@CUnk@@UEAAKXZ',
                                                                                            '?QueryInterface@CUnk@@UEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '??1CUnk@@UEAA@XZ',
                                                                                            '?BindPtr@WString@@QEAAXPEAG@Z',
                                                                                            '?GetMemLogObject@@YAPEAVCMemoryLog@@XZ',
                                                                                            '?Write@CMemoryLog@@QEAAXJ@Z',
                                                                                            '??0CUnk@@QEAA@PEAVCLifeControl@@PEAUIUnknown@@@Z',
                                                                                            '??_7CUnkInternal@@6B@',
                                                                                            '?Compress@CFlexArray@@QEAAXXZ',
                                                                                            '?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z',
                                                                                            '?InsertAt@CFlexArray@@QEAAHHPEAX@Z',
                                                                                            '??0WString@@QEAA@XZ',
                                                                                            '??0WString@@QEAA@PEAGH@Z',
                                                                                            '?Initialize@CUnk@@UEAAHXZ',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'OpenServiceW',
                                                                                            'DeleteService',
                                                                                            'CreateServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'ApiSetQueryApiSetPresence'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 25,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 35328},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/7d0ba1a011ec2c2c392a86d1c5ebaf20f5615142ed3de4ed5cd603f60e520345'},
 '7db14d1adf6f8962044c53bff54d52555d5028c0c84d6bb8c59157dd95f75869': {'AddressOfEntryPoint': 14819,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrcpynA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcpynA',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 30608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 30720,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7db14d1adf6f8962044c53bff54d52555d5028c0c84d6bb8c59157dd95f75869'},
 '7dba65ac20ab2379060042b3d025b53a0cafa8f27903db28ffe9d94beec42f99': {'AddressOfEntryPoint': 1755122,
                                                                      'DebugRVA': 2037792,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2659908,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGetUserKey',
                                                                                      'CRYPT32.dll': 'CertOpenStore',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetProcAddress',
                                                                                      'MSVCR100.dll': 'strncmp',
                                                                                      'USER32.dll': 'GetUserObjectInformationW',
                                                                                      'WS2_32.dll': 'send'},
                                                                      'ImportedFunctions': ['MapViewOfFileEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CreateProcessA',
                                                                                            'TerminateProcess',
                                                                                            'ResetEvent',
                                                                                            'OpenEventA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateThread',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'WaitForSingleObject',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FreeConsole',
                                                                                            'ReleaseMutex',
                                                                                            'OpenMutexA',
                                                                                            'CreateMutexA',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileAttributesExW',
                                                                                            'CreateFileW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetFileTime',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'FormatMessageA',
                                                                                            'Sleep',
                                                                                            'SwitchToThread',
                                                                                            'InterlockedCompareExchange',
                                                                                            'CreateFileA',
                                                                                            'DecodePointer',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedExchange',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GlobalMemoryStatus',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetFileType',
                                                                                            'GetVersion',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'GetFileInformationByHandle',
                                                                                            'CreateDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'SetStdHandle',
                                                                                            'GetStdHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'GetLastError',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetProcAddress',
                                                                                            'CharToOemBuffA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxA',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetUserObjectInformationW',
                                                                                            'CryptGetProvParam',
                                                                                            'CryptCreateHash',
                                                                                            'DeregisterEventSource',
                                                                                            'ReportEventA',
                                                                                            'RegisterEventSourceA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptSignHashA',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptExportKey',
                                                                                            'CryptEnumProvidersA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptDecrypt',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGetUserKey',
                                                                                            'WSAIoctl',
                                                                                            'WSASend',
                                                                                            'WSAGetOverlappedResult',
                                                                                            'WSARecv',
                                                                                            'ioctlsocket',
                                                                                            'accept',
                                                                                            'connect',
                                                                                            'gethostname',
                                                                                            'WSASocketW',
                                                                                            'setsockopt',
                                                                                            'WSAStartup',
                                                                                            'closesocket',
                                                                                            '__WSAFDIsSet',
                                                                                            'select',
                                                                                            'recv',
                                                                                            'shutdown',
                                                                                            'WSASetLastError',
                                                                                            'listen',
                                                                                            'getsockname',
                                                                                            'WSAGetLastError',
                                                                                            'getsockopt',
                                                                                            'getaddrinfo',
                                                                                            'freeaddrinfo',
                                                                                            'ntohs',
                                                                                            'htons',
                                                                                            'ntohl',
                                                                                            'htonl',
                                                                                            'bind',
                                                                                            'send',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetObjectA',
                                                                                            'GetDIBits',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertOpenStore',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            'malloc',
                                                                                            'tolower',
                                                                                            '_mktime64',
                                                                                            'exit',
                                                                                            'memmove',
                                                                                            'strpbrk',
                                                                                            'rand',
                                                                                            'strchr',
                                                                                            '_wcsicmp',
                                                                                            '_gmtime64',
                                                                                            '_localtime64',
                                                                                            'srand',
                                                                                            'setlocale',
                                                                                            'qsort',
                                                                                            'strstr',
                                                                                            'strftime',
                                                                                            'strtod',
                                                                                            'isdigit',
                                                                                            '_time64',
                                                                                            '_errno',
                                                                                            'abort',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'strncpy',
                                                                                            'realloc',
                                                                                            'strerror',
                                                                                            'isspace',
                                                                                            'isupper',
                                                                                            '_strnicmp',
                                                                                            'memchr',
                                                                                            'sscanf',
                                                                                            '_wfopen',
                                                                                            'fopen',
                                                                                            'fclose',
                                                                                            'ferror',
                                                                                            'fread',
                                                                                            'fwrite',
                                                                                            'fflush',
                                                                                            '_setmode',
                                                                                            '_fileno',
                                                                                            'ftell',
                                                                                            'feof',
                                                                                            'fseek',
                                                                                            'fgets',
                                                                                            'isalnum',
                                                                                            'wcsstr',
                                                                                            '_vsnprintf',
                                                                                            '_exit',
                                                                                            'raise',
                                                                                            'strcmp',
                                                                                            'strrchr',
                                                                                            'printf',
                                                                                            '_stricmp',
                                                                                            'strtoul',
                                                                                            'isxdigit',
                                                                                            'strtol',
                                                                                            '_stat64i32',
                                                                                            'atoi',
                                                                                            'sprintf',
                                                                                            '_getpid',
                                                                                            'toupper',
                                                                                            'fputs',
                                                                                            'signal',
                                                                                            '_getch',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler4_common',
                                                                                            '_crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_environ',
                                                                                            'memset',
                                                                                            'getenv',
                                                                                            'strncmp'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 239,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2460,
                                                                      'SectionNames': {'.data\x00\x00\x00': 108544,
                                                                                       '.idata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 456192,
                                                                                       '.reloc\x00\x00': 87552,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 2031104},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7dba65ac20ab2379060042b3d025b53a0cafa8f27903db28ffe9d94beec42f99'},
 '7df67e2e0ad0d26b378eedae9d517b420c7d17715a95a0b1daf29b12c239fed5': {'AddressOfEntryPoint': 30160,
                                                                      'DebugRVA': 4544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoRevokeClassObject',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'DebugBreak',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleFileNameW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'LCMapStringW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlVirtualUnwind',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'EqualSid',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'SetServiceStatus',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'CreateServiceW',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'RegisterServiceCtrlHandlerW',
                                                                                      'msvcrt.dll': '_vsnwprintf',
                                                                                      'ntdll.dll': 'EtwUnregisterTraceGuids',
                                                                                      'wbemcomn.dll': '??0CUnkInternal@@QEAA@PEAVCLifeControl@@@Z'},
                                                                      'ImportedFunctions': ['_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_purecall',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            'exit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '_lock',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_CxxThrowException',
                                                                                            '_onexit',
                                                                                            'printf',
                                                                                            'wcsstr',
                                                                                            '_vsnwprintf',
                                                                                            'StringFromGUID2',
                                                                                            'CoRevertToSelf',
                                                                                            'CoImpersonateClient',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'IsValidSid',
                                                                                            'GetLengthSid',
                                                                                            'EqualSid',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            '??0CCritSec@@QEAA@XZ',
                                                                                            '??1CCritSec@@QEAA@XZ',
                                                                                            '??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '??1CInCritSec@@QEAA@XZ',
                                                                                            '??4CNtSid@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '??0CNtSid@@QEAA@AEBV0@@Z',
                                                                                            '?GetDWORDStr@Registry@@QEAAHPEBGPEAK@Z',
                                                                                            '??1Registry@@QEAA@XZ',
                                                                                            '??0Registry@@QEAA@PEBGK@Z',
                                                                                            '??0CNtSid@@QEAA@PEAX@Z',
                                                                                            '??8CNtSid@@QEAAHAEAV0@@Z',
                                                                                            '??1CNtSid@@QEAA@XZ',
                                                                                            '??0CNtSid@@QEAA@W4SidType@0@@Z',
                                                                                            '?ErrorTrace@@YAHDPEBDZZ',
                                                                                            '?_ThrowMemoryException_@@YAXXZ',
                                                                                            '?OnInitialize@CUnk@@UEAAHXZ',
                                                                                            '??1CUnkInternal@@UEAA@XZ',
                                                                                            '?QueryInterface@CUnkInternal@@UEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?AddRef@CUnkInternal@@UEAAKXZ',
                                                                                            '?Release@CUnkInternal@@UEAAKXZ',
                                                                                            '?Write@CMemoryLog@@QEAAXJ@Z',
                                                                                            '?GetMemLogObject@@YAPEAVCMemoryLog@@XZ',
                                                                                            '?InternalRelease@CUnkInternal@@QEAAKXZ',
                                                                                            '?InternalQueryInterface@CUnkInternal@@QEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?GetTextSid@CNtSid@@QEAAHPEAGPEAK@Z',
                                                                                            '?Initialize@CUnk@@UEAAHXZ',
                                                                                            '?AddRef@CUnk@@UEAAKXZ',
                                                                                            '?Release@CUnk@@UEAAKXZ',
                                                                                            '?QueryInterface@CUnk@@UEAAJAEBU_GUID@@PEAPEAX@Z',
                                                                                            '??1CUnk@@UEAA@XZ',
                                                                                            '??0CUnk@@QEAA@PEAVCLifeControl@@PEAUIUnknown@@@Z',
                                                                                            '??_7CUnkInternal@@6B@',
                                                                                            '??0CUnkInternal@@QEAA@PEAVCLifeControl@@@Z',
                                                                                            'DebugBreak',
                                                                                            'LCMapStringW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'OpenServiceW',
                                                                                            'DeleteService',
                                                                                            'OpenSCManagerW',
                                                                                            'CreateServiceW',
                                                                                            'GetCommandLineW',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 36352},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7df67e2e0ad0d26b378eedae9d517b420c7d17715a95a0b1daf29b12c239fed5'},
 '7e0b07d75a60b3b3eb3f671b038fcf7f4c66dbe773c87a4772eb34bb5a203664': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 7224,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 7680,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7e0b07d75a60b3b3eb3f671b038fcf7f4c66dbe773c87a4772eb34bb5a203664'},
 '7e1dc886af729071fc931c631815ec6ce25bee7e58e775055d60f728f9b62aed': {'AddressOfEntryPoint': 146624,
                                                                      'DebugRVA': 638784,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 663552,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExW',
                                                                                      'COMCTL32.dll': 'ImageList_GetImageCount',
                                                                                      'COMDLG32.dll': 'GetFileTitleW',
                                                                                      'GDI32.dll': 'CreateHalftonePalette',
                                                                                      'KERNEL32.dll': 'GetSystemTime',
                                                                                      'OLEAUT32.dll': 'VarR8FromDec',
                                                                                      'PROPSYS.dll': 'PropVariantToUInt32',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHAddToRecentDocs',
                                                                                      'SHLWAPI.dll': 'PathStripPathW',
                                                                                      'USER32.dll': 'EnableWindow',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoGetInterfaceAndReleaseStream'},
                                                                      'ImportedFunctions': ['EncryptFileW',
                                                                                            'DecryptFileW',
                                                                                            'EventWrite',
                                                                                            'DuplicateEncryptionInfoFile',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'RegEnumValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetExitCodeThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalReAlloc',
                                                                                            'CopyFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetTempPathW',
                                                                                            'DeleteFileW',
                                                                                            'GetACP',
                                                                                            'GetModuleHandleA',
                                                                                            'GetTickCount',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcAddress',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetThreadLocale',
                                                                                            'lstrcmpiW',
                                                                                            'SetEndOfFile',
                                                                                            'FindFirstFileW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalAddAtomW',
                                                                                            'SetErrorMode',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileSize',
                                                                                            'lstrlenW',
                                                                                            'GetLocaleInfoW',
                                                                                            'MulDiv',
                                                                                            'DeviceIoControl',
                                                                                            'SetFileTime',
                                                                                            'CreateFileW',
                                                                                            'GetFileSizeEx',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageW',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetModuleHandleW',
                                                                                            'FindFirstStreamW',
                                                                                            'FindNextStreamW',
                                                                                            'GetLastError',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'lstrcmpW',
                                                                                            'RegisterApplicationRecoveryCallback',
                                                                                            'ApplicationRecoveryInProgress',
                                                                                            'ApplicationRecoveryFinished',
                                                                                            'CreateThread',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetTempFileNameW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileTime',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExA',
                                                                                            'GetSystemInfo',
                                                                                            'RaiseException',
                                                                                            'VirtualQuery',
                                                                                            'GetModuleHandleExW',
                                                                                            'SetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemTime',
                                                                                            'CreatePen',
                                                                                            'GetTextFaceW',
                                                                                            'GdiGradientFill',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreateFontW',
                                                                                            'Polyline',
                                                                                            'SetROP2',
                                                                                            'CreatePolygonRgn',
                                                                                            'GetTextMetricsW',
                                                                                            'TranslateCharsetInfo',
                                                                                            'StretchDIBits',
                                                                                            'CreateDCW',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetStretchBltMode',
                                                                                            'GetBrushOrgEx',
                                                                                            'GetRgnBox',
                                                                                            'CombineRgn',
                                                                                            'CreateRectRgn',
                                                                                            'ExtSelectClipRgn',
                                                                                            'ExtFloodFill',
                                                                                            'GetPixel',
                                                                                            'UnrealizeObject',
                                                                                            'SetBrushOrgEx',
                                                                                            'StretchBlt',
                                                                                            'Polygon',
                                                                                            'OffsetRgn',
                                                                                            'SetPixel',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'SetDIBitsToDevice',
                                                                                            'GetNearestColor',
                                                                                            'CreateDIBitmap',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'SelectObject',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'CreateBitmap',
                                                                                            'SetDIBits',
                                                                                            'GetPaletteEntries',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'ResizePalette',
                                                                                            'SetPaletteEntries',
                                                                                            'CreatePatternBrush',
                                                                                            'CreateSolidBrush',
                                                                                            'PatBlt',
                                                                                            'FillRgn',
                                                                                            'GetStockObject',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetDIBColorTable',
                                                                                            'SetDIBColorTable',
                                                                                            'GetCurrentObject',
                                                                                            'GetObjectW',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GdiAlphaBlend',
                                                                                            'Rectangle',
                                                                                            'CreatePalette',
                                                                                            'SaveDC',
                                                                                            'SetMapMode',
                                                                                            'LPtoDP',
                                                                                            'RestoreDC',
                                                                                            'SetViewportExtEx',
                                                                                            'PlayMetaFile',
                                                                                            'CreateDIBSection',
                                                                                            'CreateHalftonePalette',
                                                                                            'SetCapture',
                                                                                            'ClientToScreen',
                                                                                            'TrackMouseEvent',
                                                                                            'GetSystemMenu',
                                                                                            'RemoveMenu',
                                                                                            'PostMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'DestroyMenu',
                                                                                            'MonitorFromRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetClassInfoW',
                                                                                            'LoadIconW',
                                                                                            'IsWindowVisible',
                                                                                            'CheckMenuItem',
                                                                                            'SetGestureConfig',
                                                                                            'PostQuitMessage',
                                                                                            'LoadImageW',
                                                                                            'RegisterTouchWindow',
                                                                                            'UnregisterTouchWindow',
                                                                                            'GetMenu',
                                                                                            'IsMenu',
                                                                                            'SetWindowLongW',
                                                                                            'LoadBitmapW',
                                                                                            'GetCapture',
                                                                                            'GetUpdateRect',
                                                                                            'ValidateRect',
                                                                                            'RedrawWindow',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'GetCaretPos',
                                                                                            'ReleaseCapture',
                                                                                            'LoadStringW',
                                                                                            'EnableScrollBar',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageW',
                                                                                            'DestroyIcon',
                                                                                            'GetSysColor',
                                                                                            'PtInRect',
                                                                                            'WindowFromPoint',
                                                                                            'IntersectRect',
                                                                                            'UnionRect',
                                                                                            'GetCursorPos',
                                                                                            'FillRect',
                                                                                            'OffsetRect',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SetWindowTextW',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetKeyboardLayout',
                                                                                            'CloseTouchInputHandle',
                                                                                            'ShowCursor',
                                                                                            'GetTouchInputInfo',
                                                                                            'SetActiveWindow',
                                                                                            'GetFocus',
                                                                                            'BringWindowToTop',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetParent',
                                                                                            'InflateRect',
                                                                                            'CopyRect',
                                                                                            'GetClientRect',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'InvalidateRect',
                                                                                            'IsWindow',
                                                                                            'UpdateWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SetPropW',
                                                                                            'EqualRect',
                                                                                            'IsRectEmpty',
                                                                                            'KillTimer',
                                                                                            'MessageBoxW',
                                                                                            'DestroyCursor',
                                                                                            'MessageBeep',
                                                                                            'GetDlgItem',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemInt',
                                                                                            'SetTimer',
                                                                                            'GetKeyState',
                                                                                            'SetClassLongW',
                                                                                            'SetRectEmpty',
                                                                                            'SetRect',
                                                                                            'GetWindowDC',
                                                                                            'GetDlgItemInt',
                                                                                            'EnableWindow',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            'memcpy_s',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'memmove_s',
                                                                                            'swprintf_s',
                                                                                            'wcscpy_s',
                                                                                            'wcstoul',
                                                                                            'strchr',
                                                                                            '_CIatan2',
                                                                                            '_CIcos',
                                                                                            '_CIsin',
                                                                                            '_CIsqrt',
                                                                                            '_CItan',
                                                                                            '__RTDynamicCast',
                                                                                            '_ftol2',
                                                                                            '_ftol2_sse',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            '_wsplitpath_s',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '__uncaught_exception',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'isdigit',
                                                                                            'isalnum',
                                                                                            'abort',
                                                                                            'tolower',
                                                                                            'isspace',
                                                                                            '__crtLCMapStringW',
                                                                                            '__mb_cur_max',
                                                                                            '__pctype_func',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            '_errno',
                                                                                            '___mb_cur_max_func',
                                                                                            'setlocale',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            '_beginthreadex',
                                                                                            'strcspn',
                                                                                            'memchr',
                                                                                            'localeconv',
                                                                                            '_strtoui64',
                                                                                            '_strtoi64',
                                                                                            'sprintf_s',
                                                                                            '??1bad_cast@@UAE@XZ',
                                                                                            '??0bad_cast@@QAE@ABV0@@Z',
                                                                                            '_wsetlocale',
                                                                                            '_wcsdup',
                                                                                            'free',
                                                                                            '__wargv',
                                                                                            '__argc',
                                                                                            '_wcsicmp',
                                                                                            'rand',
                                                                                            '_wtoi',
                                                                                            'memset',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetFileTitleW',
                                                                                            'PropVariantCopy',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'RoGetAgileReference',
                                                                                            'PropVariantClear',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'WriteFmtUserTypeStg',
                                                                                            'WriteClassStg',
                                                                                            'OleGetClipboard',
                                                                                            'ReleaseStgMedium',
                                                                                            'FreePropVariantArray',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'SafeArrayPutElement',
                                                                                            'SysAllocString',
                                                                                            'VarDecFromI4',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'VarDecFromR8',
                                                                                            'VarR8FromDec',
                                                                                            'DragFinish',
                                                                                            'DragQueryFileW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHChangeNotify',
                                                                                            'SHParseDisplayName',
                                                                                            'SHCreateShellItem',
                                                                                            'SHBindToParent',
                                                                                            'SHGetFolderPathEx',
                                                                                            'ShellAboutW',
                                                                                            'SHAddToRecentDocs',
                                                                                            'WinSqmSetIfMaxDWORD',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmAddToStream',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_GetImageCount',
                                                                                            'SHStrDupW',
                                                                                            'PathStripPathW',
                                                                                            'PropVariantToUInt32WithDefault',
                                                                                            'PropVariantToString',
                                                                                            'PropVariantToUInt32',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 411,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5743728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 20992,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 15872,
                                                                                       '.reloc\x00\x00': 48128,
                                                                                       '.rsrc\x00\x00\x00': 5744128,
                                                                                       '.text\x00\x00\x00': 634880},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7e1dc886af729071fc931c631815ec6ce25bee7e58e775055d60f728f9b62aed'},
 '7e899679a35964a89ae06121bb7e4c42e174ce72543ef29051a959bd51f2cc47': {'AddressOfEntryPoint': 16688,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMDLG32.dll': 'PrintDlgW',
                                                                                      'GDI32.dll': 'GetTextMetricsW',
                                                                                      'KERNEL32.dll': 'GetACP',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'CreateWindowExW',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'CloseHandle',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'MulDiv',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetACP',
                                                                                            'ExtTextOutW',
                                                                                            'GetLayout',
                                                                                            'EndDoc',
                                                                                            'EndPage',
                                                                                            'StartPage',
                                                                                            'StartDocW',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'CreateCompatibleDC',
                                                                                            'TranslateCharsetInfo',
                                                                                            'CreateFontIndirectW',
                                                                                            'SelectObject',
                                                                                            'GetTextCharsetInfo',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'AddFontResourceExW',
                                                                                            'RemoveFontResourceExW',
                                                                                            'GetDeviceCaps',
                                                                                            'AddFontResourceW',
                                                                                            'GetFontResourceInfoW',
                                                                                            'GetFontData',
                                                                                            'RemoveFontResourceW',
                                                                                            'SetTextAlign',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextMetricsW',
                                                                                            'SetScrollInfo',
                                                                                            'PostMessageW',
                                                                                            'ScrollWindowEx',
                                                                                            'InvalidateRect',
                                                                                            'SetCursor',
                                                                                            'MessageBeep',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxW',
                                                                                            'BeginPaint',
                                                                                            'DefWindowProcW',
                                                                                            'SetRect',
                                                                                            'SetWindowTextW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetSystemMetrics',
                                                                                            'DrawTextW',
                                                                                            'LoadStringW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'GetSysColorBrush',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowPos',
                                                                                            'SendMessageW',
                                                                                            'EndPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EnableWindow',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetFocus',
                                                                                            'GetFocus',
                                                                                            'GetDlgItem',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CreateWindowExW',
                                                                                            '__setusermatherr',
                                                                                            '_ftol2_sse',
                                                                                            '_vsnwprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            'memset',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'PrintDlgW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRenameExtensionW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathAppendW',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 128,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 82280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 82432,
                                                                                       '.text\x00\x00\x00': 15360},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7e899679a35964a89ae06121bb7e4c42e174ce72543ef29051a959bd51f2cc47'},
 '7eadc73f8aa77148ca289d5ce5c2632f3a157d313079583454c0421bb97d5646': {'AddressOfEntryPoint': 10384,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49216,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlImageNtHeader',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'lstrcmpW',
                                                                                            'lstrlenW',
                                                                                            'Wow64EnableWow64FsRedirection',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'IsWow64Process',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LoadStringW',
                                                                                            'CharNextW',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__set_app_type',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__argc',
                                                                                            'wcscpy_s',
                                                                                            'strcat_s',
                                                                                            '__wargv',
                                                                                            '_wsplitpath_s',
                                                                                            'wcsncpy_s',
                                                                                            'swprintf_s',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'wcscat_s',
                                                                                            'memset',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'EtwEventWriteNoRegistration',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlImageNtHeader'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7eadc73f8aa77148ca289d5ce5c2632f3a157d313079583454c0421bb97d5646'},
 '7ebe99935e4494ed47a0257e1faad9f8604d5b002276a4d9723de6a9ad8fe76e': {'AddressOfEntryPoint': 25883,
                                                                      'DebugRVA': 4512,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 9,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetLocaleInfoA',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'GetFileAttributesW',
                                                                                            'CopyFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'Sleep',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'CloseHandle',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'MultiByteToWideChar',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysReAllocString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1516,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 68608},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7ebe99935e4494ed47a0257e1faad9f8604d5b002276a4d9723de6a9ad8fe76e'},
 '7ec667cb7581c2269c0c8c39ca24806c1ef22845aff97ff2848365545dfd4d9d': {'AddressOfEntryPoint': 5840,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetConsoleMode',
                                                                                      'MSVCIRT.dll': '?cerr@@3Vostream_withassign@@A',
                                                                                      'MSVCRT.dll': 'sprintf'},
                                                                      'ImportedFunctions': ['?cout@@3Vostream_withassign@@A',
                                                                                            '??6ostream@@QAEAAV0@PBD@Z',
                                                                                            '?flush@@YAAAVostream@@AAV1@@Z',
                                                                                            '?cerr@@3Vostream_withassign@@A',
                                                                                            '_controlfp',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__p___initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_splitpath',
                                                                                            'strchr',
                                                                                            'printf',
                                                                                            'sprintf',
                                                                                            'GetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'CreateMutexA',
                                                                                            'CreateNamedPipeA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'ResumeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetExitCodeProcess',
                                                                                            'WriteFile',
                                                                                            'ConnectNamedPipe',
                                                                                            'ReadFile',
                                                                                            'TerminateThread',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'SetConsoleMode'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 38,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7ec667cb7581c2269c0c8c39ca24806c1ef22845aff97ff2848365545dfd4d9d'},
 '7f5a7cbfe72eb23e6570999aeaa198772dd71ff2c29f16ba527a091a2a1a91dd': {'AddressOfEntryPoint': 14819,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrcpynA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'FindWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcpynA',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'wvsprintfW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'FindWindowExW',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 171,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 44208,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 44544,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7f5a7cbfe72eb23e6570999aeaa198772dd71ff2c29f16ba527a091a2a1a91dd'},
 '7fbfab17fe55578159f482a3c9741f02ef5c15c939f4bf1c7b164faa0ab6dda3': {'AddressOfEntryPoint': 25328,
                                                                      'DebugRVA': 93744,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'COMCTL32.dll': 'CreateStatusWindowW',
                                                                                      'COMDLG32.dll': 'PrintDlgExW',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHAddToRecentDocs',
                                                                                      'SHLWAPI.dll': 'PathIsFileSpecW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'DuplicateEncryptionInfoFile',
                                                                                            'IsTextUnicode',
                                                                                            'RegSetValueExW',
                                                                                            'LocalReAlloc',
                                                                                            'UnmapViewOfFile',
                                                                                            'FindNLSString',
                                                                                            'GlobalAlloc',
                                                                                            'GetLocalTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'MultiByteToWideChar',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetEndOfFile',
                                                                                            'DeleteFileW',
                                                                                            'GetACP',
                                                                                            'GetFileAttributesW',
                                                                                            'WriteFile',
                                                                                            'SetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStartupInfoW',
                                                                                            'GetLastError',
                                                                                            'LocalSize',
                                                                                            'GetFullPathNameW',
                                                                                            'FoldStringW',
                                                                                            'LocalUnlock',
                                                                                            'LocalLock',
                                                                                            'FormatMessageW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'lstrcmpW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcAddress',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineW',
                                                                                            'lstrlenW',
                                                                                            'MulDiv',
                                                                                            'GetLocaleInfoW',
                                                                                            'GlobalFree',
                                                                                            'LocalAlloc',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateFileW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcmpiW',
                                                                                            'LocalFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateDCW',
                                                                                            'StartPage',
                                                                                            'StartDocW',
                                                                                            'SetAbortProc',
                                                                                            'DeleteDC',
                                                                                            'EndDoc',
                                                                                            'AbortDoc',
                                                                                            'EndPage',
                                                                                            'GetTextMetricsW',
                                                                                            'SetBkMode',
                                                                                            'LPtoDP',
                                                                                            'SetWindowExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'SetMapMode',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'TextOutW',
                                                                                            'EnumFontsW',
                                                                                            'GetTextFaceW',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDeviceCaps',
                                                                                            'WinHelpW',
                                                                                            'GetCursorPos',
                                                                                            'ScreenToClient',
                                                                                            'ChildWindowFromPoint',
                                                                                            'GetParent',
                                                                                            'GetWindowPlacement',
                                                                                            'CharUpperW',
                                                                                            'GetSystemMenu',
                                                                                            'LoadAcceleratorsW',
                                                                                            'SetWindowLongW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadCursorW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowPlacement',
                                                                                            'LoadImageW',
                                                                                            'RegisterClassExW',
                                                                                            'SetScrollPos',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'GetWindowTextW',
                                                                                            'EnableWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'DrawTextExW',
                                                                                            'GetDlgCtrlID',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'CloseClipboard',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'GetMenuState',
                                                                                            'SetWindowTextW',
                                                                                            'UnhookWinEvent',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'GetMessageW',
                                                                                            'SetWinEventHook',
                                                                                            'CharNextW',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetForegroundWindow',
                                                                                            'MessageBeep',
                                                                                            'DestroyWindow',
                                                                                            'PostQuitMessage',
                                                                                            'IsIconic',
                                                                                            'DefWindowProcW',
                                                                                            'SetActiveWindow',
                                                                                            'SetCursor',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'ShowWindow',
                                                                                            'GetClientRect',
                                                                                            'CheckMenuItem',
                                                                                            'MessageBoxW',
                                                                                            'GetFocus',
                                                                                            'LoadIconW',
                                                                                            'DialogBoxParamW',
                                                                                            'SetFocus',
                                                                                            'GetSubMenu',
                                                                                            'EnableMenuItem',
                                                                                            'GetMenu',
                                                                                            'PostMessageW',
                                                                                            'MoveWindow',
                                                                                            'SendMessageW',
                                                                                            'LoadStringW',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            'strchr',
                                                                                            'memcpy',
                                                                                            'iswctype',
                                                                                            '_wtol',
                                                                                            '_except_handler4_common',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            'memset',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'ReplaceTextW',
                                                                                            'FindTextW',
                                                                                            'PageSetupDlgW',
                                                                                            'ChooseFontW',
                                                                                            'GetFileTitleW',
                                                                                            'PrintDlgExW',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'ShellAboutW',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'DragAcceptFiles',
                                                                                            'SHAddToRecentDocs',
                                                                                            'GetPrinterDriverW',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterW',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'SHStrDupW',
                                                                                            'PathIsFileSpecW',
                                                                                            'CreateStatusWindowW',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'WinSqmAddToStream'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 213,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 105200,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 105472,
                                                                                       '.text\x00\x00\x00': 90112},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/7fbfab17fe55578159f482a3c9741f02ef5c15c939f4bf1c7b164faa0ab6dda3'},
 '7fc950d0546aaee6c96ce7f12e8e57546be1c53fa851eca511eb5b206be3457a': {'AddressOfEntryPoint': 14808,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 27168,
                                                                      'ExportSize': 50,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': '_lcreat',
                                                                                      'SHELL32.dll': 'FindExecutableA',
                                                                                      'USER32.dll': 'SetWindowPos'},
                                                                      'ImportedFunctions': ['ShellExecuteA',
                                                                                            'FindExecutableA',
                                                                                            'CharNextA',
                                                                                            'DefWindowProcA',
                                                                                            'GetWindowWord',
                                                                                            'SetWindowWord',
                                                                                            'BeginPaint',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'SetRect',
                                                                                            'EndPaint',
                                                                                            'RegisterClassA',
                                                                                            'OemToCharBuffA',
                                                                                            'LoadCursorA',
                                                                                            'GetLastActivePopup',
                                                                                            'ShowWindow',
                                                                                            'PostMessageA',
                                                                                            'EnableWindow',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'GetWindowRect',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'SendMessageA',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetParent',
                                                                                            'SetDlgItemTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'CreateDirectoryA',
                                                                                            '_lclose',
                                                                                            '_lopen',
                                                                                            'GlobalUnlock',
                                                                                            'RtlUnwind',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'GetACP',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetErrorMode',
                                                                                            'GetVersion',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'lstrcmpiA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GlobalHandle',
                                                                                            'lstrcpyA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'WinExec',
                                                                                            '_llseek',
                                                                                            'GetDriveTypeA',
                                                                                            '_lread',
                                                                                            '_lwrite',
                                                                                            'GetVolumeInformationA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            '_lcreat',
                                                                                            'GetBkColor',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'SetTextAlign',
                                                                                            'DeleteObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'ExtTextOutA',
                                                                                            'CreateDCA',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'RegQueryValueA'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1288,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 18944,
                                                                                       '_winzip_': 570687488},
                                                                      'StackReserveSize': 32000,
                                                                      'filename': './data/clean/7fc950d0546aaee6c96ce7f12e8e57546be1c53fa851eca511eb5b206be3457a'},
 '7fcbbcaf1aa85dce8d75fb38dc4848ae12e8dd913cebbc37bcd3d0123f0a3cab': {'AddressOfEntryPoint': 384512,
                                                                      'DebugRVA': 6032,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1433600,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'AUTHZ.dll': 'AuthzUnregisterSecurityEventSource',
                                                                                      'CLUSAPI.dll': 'ClusterSharedVolumeSetSnapshotState',
                                                                                      'KERNEL32.dll': 'lstrcmpiW',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'RESUTILS.dll': 'ResUtilEnumResourcesEx',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'VSSAPI.DLL': '?CreateVssSnapshotSetDescription@@YAJU_GUID@@JPEAPEAVIVssSnapshotSetDescription@@@Z',
                                                                                      'VirtDisk.dll': 'GetStorageDependencyInformation',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoRegisterClassObject',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetErrorMode',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'FindClose',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualQuery',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'CreateThread',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumValueW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharNextW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemDirectoryW',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'GetTimeZoneInformation',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'EncodePointer',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetLengthSid',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'RegisterServiceCtrlHandlerExW',
                                                                                      'api-ms-win-service-private-l1-1-1.dll': 'I_ScUnregisterDeviceNotification',
                                                                                      'bcd.dll': 'BcdGetElementData',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'EtwGetTraceLoggerHandle'},
                                                                      'ImportedFunctions': ['_exit',
                                                                                            'free',
                                                                                            'exit',
                                                                                            '_vscwprintf',
                                                                                            '_cexit',
                                                                                            '_vsnprintf',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__setusermatherr',
                                                                                            'iswdigit',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'wcsrchr',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            'iswspace',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            'wcsstr',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            'qsort',
                                                                                            'wcstok',
                                                                                            '_errno',
                                                                                            '_beginthreadex',
                                                                                            'wcsncmp',
                                                                                            'memmove',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            'wcscat_s',
                                                                                            'malloc',
                                                                                            'realloc',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            'memcmp',
                                                                                            '_onexit',
                                                                                            'memset',
                                                                                            'wcstoul',
                                                                                            'memcpy',
                                                                                            'towupper',
                                                                                            'wcscmp',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'EtwTraceMessage',
                                                                                            'NtThawRegistry',
                                                                                            'NtFreezeRegistry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtClose',
                                                                                            'NtCreateSymbolicLinkObject',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtThawTransactions',
                                                                                            'NtFreezeTransactions',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'LoadRegTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantChangeType',
                                                                                            'GetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CreateWaitableTimerExW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'SetWaitableTimer',
                                                                                            'CancelWaitableTimer',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'ResetEvent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'RaiseException',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'OpenThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ResumeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'SetThreadPriority',
                                                                                            'CreateThread',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromString',
                                                                                            'CoRevokeClassObject',
                                                                                            'StringFromCLSID',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateGuid',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoInitializeEx',
                                                                                            'CoRevertToSelf',
                                                                                            'CoDisconnectContext',
                                                                                            'CoImpersonateClient',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoGetObjectContext',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoRegisterClassObject',
                                                                                            'CompareStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'CloseHandle',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetVersionExW',
                                                                                            'GetTickCount64',
                                                                                            'GetTickCount',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'LoadStringW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryExW',
                                                                                            'CharPrevW',
                                                                                            'CharNextW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'GetVolumeInformationW',
                                                                                            'DefineDosDeviceW',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'ReadFile',
                                                                                            'DeleteFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'WriteFile',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'GetDriveTypeW',
                                                                                            'QueryDosDeviceW',
                                                                                            'GetVolumePathNameW',
                                                                                            'FindFirstVolumeW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindNextVolumeW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteVolumeMountPointW',
                                                                                            'FindVolumeClose',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'GetOverlappedResult',
                                                                                            'DeviceIoControl',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'DuplicateToken',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'PrivilegeCheck',
                                                                                            'GetTokenInformation',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'CreateWellKnownSid',
                                                                                            'EqualSid',
                                                                                            'CopySid',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'AddAccessDeniedAceEx',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'IsValidSid',
                                                                                            'AccessCheck',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'EqualDomainSid',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'MoveFileExW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'I_ScRegisterDeviceNotification',
                                                                                            'I_ScUnregisterDeviceNotification',
                                                                                            'GetComputerNameW',
                                                                                            'SetVolumeMountPointW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'lstrcpynW',
                                                                                            'lstrcmpiW',
                                                                                            'VssFreeSnapshotPropertiesInternal',
                                                                                            'CreateWriterEx',
                                                                                            'CreateWriter',
                                                                                            '?LoadVssSnapshotSetDescription@@YAJPEBGPEAPEAVIVssSnapshotSetDescription@@U_GUID@@@Z',
                                                                                            '?CreateVssSnapshotSetDescription@@YAJU_GUID@@JPEAPEAVIVssSnapshotSetDescription@@@Z',
                                                                                            'GetClusterResourceState',
                                                                                            'ClusterResourceControl',
                                                                                            'CloseClusterResource',
                                                                                            'CloseCluster',
                                                                                            'OpenCluster',
                                                                                            'GetNodeClusterState',
                                                                                            'OpenClusterResource',
                                                                                            'ClusterSharedVolumeSetSnapshotState',
                                                                                            'ResUtilGetResourceName',
                                                                                            'ResUtilEnumResourcesEx',
                                                                                            'AuthzRegisterSecurityEventSource',
                                                                                            'AuthzReportSecurityEventFromParams',
                                                                                            'AuthzUnregisterSecurityEventSource',
                                                                                            'FormatMessageW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetStorageDependencyInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'BcdForciblyUnloadStore',
                                                                                            'BcdOpenObject',
                                                                                            'BcdOpenSystemStore',
                                                                                            'BcdCloseObject',
                                                                                            'BcdCloseStore',
                                                                                            'BcdGetElementData',
                                                                                            'EncodePointer'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 36,
                                                                      'NumberOfImportFunctions': 277,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 20288,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 12288,
                                                                                       '.pdata\x00\x00': 29696,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 20480,
                                                                                       '.text\x00\x00\x00': 1388032},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/7fcbbcaf1aa85dce8d75fb38dc4848ae12e8dd913cebbc37bcd3d0123f0a3cab'},
 '7fdd465674a32752637f55aacb76da16f9a57dcd98e5774daec6d47b185c4201': {'AddressOfEntryPoint': 6640,
                                                                      'DebugRVA': 185728,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'FindNextFileW',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SETUPAPI.dll': 'SetupDefaultQueueCallbackW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'WS2_32.dll': 'inet_ntoa',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesW',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['UpdateDriverForPlugAndPlayDevicesW',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapFree',
                                                                                            'FatalAppExitA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FindClose',
                                                                                            'RtlPcToFileHeader',
                                                                                            'FindFirstFileW',
                                                                                            'lstrlenA',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'Sleep',
                                                                                            'FindNextFileW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegCloseKey',
                                                                                            'StartServiceW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiCreateDeviceInfoW',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'SetupInitDefaultQueueCallback',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupUninstallOEMInfW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupDiDeleteDeviceInfo',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetClassDevsExW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'inet_addr',
                                                                                            'htonl',
                                                                                            'inet_ntoa',
                                                                                            'CLSIDFromString',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'SafeArrayPutElement',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'GetErrorInfo',
                                                                                            'VariantChangeType',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysStringByteLen',
                                                                                            'GetAdaptersAddresses'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 54272,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 177152},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/7fdd465674a32752637f55aacb76da16f9a57dcd98e5774daec6d47b185c4201'},
 '807b8a5a61c7d30149d65f0862eef51fc86e322b96a956ba04ae30fec266632e': {'AddressOfEntryPoint': 52738,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'GDI32.dll': 'GetObjectA',
                                                                                      'KERNEL32.dll': 'IsBadReadPtr',
                                                                                      'LZ32.dll': 'LZClose',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ScreenToClient',
                                                                                      'VERSION.dll': 'VerInstallFileA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerInstallFileA',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'GetModuleHandleA',
                                                                                            'SetErrorMode',
                                                                                            'CreateDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'CreateEventA',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'FreeLibrary',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'GetTempPathA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateThread',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'lstrlenW',
                                                                                            'SetEvent',
                                                                                            'LockResource',
                                                                                            'GetDriveTypeA',
                                                                                            'OpenEventA',
                                                                                            'CreateProcessA',
                                                                                            'CopyFileA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'HeapCreate',
                                                                                            'GetFileSize',
                                                                                            'lstrcpynA',
                                                                                            'lstrcatA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'HeapDestroy',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'MoveFileA',
                                                                                            'FindResourceExA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'SizeofResource',
                                                                                            'GetVersion',
                                                                                            'GetStartupInfoA',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'DebugBreak',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'SearchPathA',
                                                                                            'ResetEvent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'RtlUnwind',
                                                                                            'lstrcpyA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetVersionExA',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetFilePointer',
                                                                                            'IsBadReadPtr',
                                                                                            'MoveWindow',
                                                                                            'KillTimer',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowTextA',
                                                                                            'SetTimer',
                                                                                            'SetWindowRgn',
                                                                                            'GetDesktopWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'SetActiveWindow',
                                                                                            'LoadStringA',
                                                                                            'SetWindowTextA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'LoadIconA',
                                                                                            'GetWindowRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'SetWindowPos',
                                                                                            'wsprintfA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'CharLowerBuffA',
                                                                                            'MessageBoxA',
                                                                                            'EndDialog',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'PostThreadMessageA',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'SetForegroundWindow',
                                                                                            'GetMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'ShowWindow',
                                                                                            'ScreenToClient',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'LPtoDP',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetObjectA',
                                                                                            'RegCreateKeyExA',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenThreadToken',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'OpenProcessToken',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'CoCreateGuid',
                                                                                            'CoCreateInstance',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromGUID2',
                                                                                            'GetRunningObjectTable',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoInitialize',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoUninitialize',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysFreeString',
                                                                                            'VariantCopy',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'LZOpenFileA',
                                                                                            'LZCopy',
                                                                                            'LZClose'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 187,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 31928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 32256,
                                                                                       '.text\x00\x00\x00': 68096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/807b8a5a61c7d30149d65f0862eef51fc86e322b96a956ba04ae30fec266632e'},
 '808e9283937233d74f64b071e174b4a9f4e016b96e43d739265c55fcfcbf322d': {'AddressOfEntryPoint': 411646,
                                                                      'DebugRVA': 411416,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 792002560,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 5376,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 403968},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/808e9283937233d74f64b071e174b4a9f4e016b96e43d739265c55fcfcbf322d'},
 '80993fe0cf9058bd3149d9bed8f9d69c5ec72d453e54c758612a386c081a3777': {'AddressOfEntryPoint': 49870,
                                                                      'DebugRVA': 49468,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1600,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 41984},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/80993fe0cf9058bd3149d9bed8f9d69c5ec72d453e54c758612a386c081a3777'},
 '80a1f407cbbd2b1f1e8aeb8f9ffd519ba2de03ae8bede840069740303ecc7571': {'AddressOfEntryPoint': 541422,
                                                                      'DebugRVA': 636464,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 634880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'CRYPT32.dll': 'CertNameToStrW',
                                                                                      'DNSAPI.dll': 'DnsQuery_W',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'IPHLPAPI.DLL': 'IcmpCreateFile',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CharNextA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetCrackUrlW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'gdiplus.dll': 'GdipFillRectangleI',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal',
                                                                                      'urlmon.dll': 'IsValidURL'},
                                                                      'ImportedFunctions': ['CertNameToStrW',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WinVerifyTrust',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'InternetGetCookieW',
                                                                                            'InternetOpenA',
                                                                                            'InternetConnectA',
                                                                                            'InternetWriteFile',
                                                                                            'InternetSetOptionA',
                                                                                            'HttpOpenRequestA',
                                                                                            'HttpAddRequestHeadersA',
                                                                                            'InternetOpenUrlW',
                                                                                            'HttpEndRequestA',
                                                                                            'HttpSendRequestExW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetReadFile',
                                                                                            'InternetSetStatusCallbackW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetConnectW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetGetConnectedState',
                                                                                            'HttpEndRequestW',
                                                                                            'HttpQueryInfoW',
                                                                                            'HttpSendRequestExA',
                                                                                            'InternetCrackUrlW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathAddBackslashW',
                                                                                            'StrTrimA',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFileExistsW',
                                                                                            'InitCommonControlsEx',
                                                                                            '_TrackMouseEvent',
                                                                                            'timeGetTime',
                                                                                            'AlphaBlend',
                                                                                            'DnsFree',
                                                                                            'DnsQuery_W',
                                                                                            'FindMimeFromData',
                                                                                            'IsValidURL',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'inet_addr',
                                                                                            'IcmpSendEcho2',
                                                                                            'GetAdaptersInfo',
                                                                                            'IcmpCreateFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FindResourceW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetVersionExW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WriteProcessMemory',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'K32EnumProcessModules',
                                                                                            'K32GetModuleBaseNameW',
                                                                                            'K32GetModuleInformation',
                                                                                            'DeleteFileA',
                                                                                            'FindClose',
                                                                                            'GetModuleFileNameA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExA',
                                                                                            'FindResourceExW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetGeoInfoW',
                                                                                            'GetUserGeoID',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetTempPathW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetLocalTime',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'LocalAlloc',
                                                                                            'RaiseException',
                                                                                            'ReleaseMutex',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTickCount',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenW',
                                                                                            'CreateMutexA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'FindResourceA',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetComputerNameW',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'IsDBCSLeadByte',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'TerminateThread',
                                                                                            'CreateEventA',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileA',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'InterlockedCompareExchange',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'LockFileEx',
                                                                                            'UnlockFileEx',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'FormatMessageA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'LoadLibraryA',
                                                                                            'GetTempPathA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'AreFileApisANSI',
                                                                                            'ExitThread',
                                                                                            'HeapFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'RtlUnwind',
                                                                                            'GetCommandLineW',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'CreateDirectoryW',
                                                                                            'HeapReAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'GetProcessHeap',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetConsoleCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStringTypeW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetCurrentProcessId',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'SetWindowRgn',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowW',
                                                                                            'SendMessageW',
                                                                                            'PostMessageW',
                                                                                            'DestroyWindow',
                                                                                            'ShowWindow',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'EnableWindow',
                                                                                            'GetDC',
                                                                                            'UpdateWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetGuiResources',
                                                                                            'GetWindowRect',
                                                                                            'MonitorFromPoint',
                                                                                            'PeekMessageW',
                                                                                            'MessageBoxW',
                                                                                            'SetWindowTextW',
                                                                                            'DrawTextW',
                                                                                            'LoadIconW',
                                                                                            'wsprintfA',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'LoadCursorW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'DispatchMessageW',
                                                                                            'wsprintfW',
                                                                                            'CharNextA',
                                                                                            'SetBkColor',
                                                                                            'CreateRectRgn',
                                                                                            'DeleteDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'CombineRgn',
                                                                                            'GetPixel',
                                                                                            'CreateDCW',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'BitBlt',
                                                                                            'CreateSolidBrush',
                                                                                            'RegEnumKeyA',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetEntriesInAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegSetValueExW',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'LookupAccountNameW',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'IsValidSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'CoCreateInstance',
                                                                                            'OleSetContainedObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipFillRectangleI',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'GetUserNameExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 344,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 330253,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 143360,
                                                                                       '.reloc\x00\x00': 33792,
                                                                                       '.rsrc\x00\x00\x00': 330752,
                                                                                       '.text\x00\x00\x00': 630784},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/80a1f407cbbd2b1f1e8aeb8f9ffd519ba2de03ae8bede840069740303ecc7571'},
 '81049ddd6c2111f279070e9e88cb7781743c3f738cdabe9619acf45198b4420a': {'AddressOfEntryPoint': 202007,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 290816,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'CreatePropertySheetPageW',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'IsValidLocale',
                                                                                      'OLEAUT32.dll': 'OleLoadPicture',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'CallWindowProcW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['EnterCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'LoadLibraryW',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateEventW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CreateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetDriveTypeW',
                                                                                            'GetVersionExW',
                                                                                            'SetFileAttributesW',
                                                                                            'CopyFileW',
                                                                                            'GetExitCodeThread',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushInstructionCache',
                                                                                            'SetLastError',
                                                                                            'lstrcmpiW',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GetCurrentProcessId',
                                                                                            'RaiseException',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetFileAttributesW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleA',
                                                                                            'RtlUnwind',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetProcAddress',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryA',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindClose',
                                                                                            'CreateDirectoryW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemTime',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'GetVersion',
                                                                                            'GlobalMemoryStatus',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'FlushFileBuffers',
                                                                                            'lstrcpynW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'MulDiv',
                                                                                            'TerminateThread',
                                                                                            'MoveFileW',
                                                                                            'Sleep',
                                                                                            'ResetEvent',
                                                                                            'CreateFileA',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'FormatMessageW',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'DuplicateHandle',
                                                                                            'GetStdHandle',
                                                                                            'CreateProcessA',
                                                                                            'DeleteFileA',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SearchPathW',
                                                                                            'OpenProcess',
                                                                                            'TerminateProcess',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'lstrcmpW',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'InterlockedCompareExchange',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'ExitProcess',
                                                                                            'HeapCreate',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'SetWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'GetClientRect',
                                                                                            'GetParent',
                                                                                            'GetWindowRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindow',
                                                                                            'EndDialog',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageW',
                                                                                            'LoadImageW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetForegroundWindow',
                                                                                            'LoadStringW',
                                                                                            'SetForegroundWindow',
                                                                                            'EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'IsWindowVisible',
                                                                                            'GetDC',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'EnableWindow',
                                                                                            'ScreenToClient',
                                                                                            'PostQuitMessage',
                                                                                            'IsWindow',
                                                                                            'ShowWindow',
                                                                                            'GetPropW',
                                                                                            'RedrawWindow',
                                                                                            'InvalidateRect',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SetFocus',
                                                                                            'GetSystemMenu',
                                                                                            'EnableMenuItem',
                                                                                            'DestroyMenu',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ModifyMenuW',
                                                                                            'FindWindowW',
                                                                                            'MessageBeep',
                                                                                            'ExitWindowsEx',
                                                                                            'GetScrollRange',
                                                                                            'GetScrollPos',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetPropW',
                                                                                            'RemovePropW',
                                                                                            'TrackPopupMenu',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'LoadIconW',
                                                                                            'ReleaseDC',
                                                                                            'GetDesktopWindow',
                                                                                            'OpenClipboard',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'UnregisterClassA',
                                                                                            'PostMessageW',
                                                                                            'GetWindowTextW',
                                                                                            'DialogBoxParamW',
                                                                                            'MessageBoxW',
                                                                                            'GetActiveWindow',
                                                                                            'SetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'CharNextW',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgItem',
                                                                                            'CallWindowProcW',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'SetBkMode',
                                                                                            'GetStockObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'CreateFontIndirectW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CoInitialize',
                                                                                            'VarUI4FromStr',
                                                                                            'OleLoadPicture',
                                                                                            'PathFileExistsW',
                                                                                            'PropertySheetW',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 265,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 55412,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 60928,
                                                                                       '.reloc\x00\x00': 18944,
                                                                                       '.rsrc\x00\x00\x00': 55808,
                                                                                       '.text\x00\x00\x00': 283136},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/81049ddd6c2111f279070e9e88cb7781743c3f738cdabe9619acf45198b4420a'},
 '813a1d0c8e4369cfc2befc31ec72f4a514514e8046808978dc5f02287d48a31e': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 376548,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 376832,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/813a1d0c8e4369cfc2befc31ec72f4a514514e8046808978dc5f02287d48a31e'},
 '814cc5d5bda54437af2be28bd4dc6fbf15e2779994295ed6433eee9e3c27af70': {'AddressOfEntryPoint': 129440,
                                                                      'DebugRVA': 4544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 159744,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'AEPIC.dll': 'PicFreeFileInfo',
                                                                                      'ESENT.dll': 'JetSetIndexRange',
                                                                                      'KERNEL32.dll': 'DeleteCriticalSection',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchAddBackslash',
                                                                                      'msvcrt.dll': 'memcmp',
                                                                                      'ntdll.dll': 'RtlRandomEx',
                                                                                      'ole32.dll': 'OleRun',
                                                                                      'sfc.dll': 'SfcIsFileProtected'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'ProcessTrace',
                                                                                            'ControlTraceW',
                                                                                            'CloseTrace',
                                                                                            'OpenTraceW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'GetFileSizeEx',
                                                                                            'CreateFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTickCount',
                                                                                            'K32EnumProcesses',
                                                                                            'CloseHandle',
                                                                                            'CompareFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'IsWow64Process',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemDirectoryW',
                                                                                            'MoveFileExW',
                                                                                            'GetSystemTime',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlCompareMemory',
                                                                                            'GetLastError',
                                                                                            'DeleteFileW',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'OutputDebugStringA',
                                                                                            'GetSystemInfo',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'SystemTimeToFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'memcpy_s',
                                                                                            '_vsnprintf',
                                                                                            'swscanf_s',
                                                                                            'strnlen',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'fclose',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'fseek',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'memmove_s',
                                                                                            'fputwc',
                                                                                            'ungetwc',
                                                                                            'ungetc',
                                                                                            'fgetpos',
                                                                                            'fflush',
                                                                                            'fgetc',
                                                                                            'fsetpos',
                                                                                            '___mb_cur_max_func',
                                                                                            'setvbuf',
                                                                                            'fgetwc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '_errno',
                                                                                            '___lc_handle_func',
                                                                                            '___lc_codepage_func',
                                                                                            'setlocale',
                                                                                            '__crtLCMapStringW',
                                                                                            '__pctype_func',
                                                                                            '__mb_cur_max',
                                                                                            '__crtGetStringTypeW',
                                                                                            'abort',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'wprintf',
                                                                                            '_wcslwr_s',
                                                                                            'wcsnlen',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            'fwrite',
                                                                                            'memcmp',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EtwEventWriteNoRegistration',
                                                                                            'NtApphelpCacheControl',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'NtSetValueKey',
                                                                                            'NtQueryValueKey',
                                                                                            'RtlComputeCrc32',
                                                                                            'NtOpenKey',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlGUIDFromString',
                                                                                            'NtClose',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'WinSqmGetInstrumentationProperty',
                                                                                            'NtSetSystemInformation',
                                                                                            'RtlReAllocateHeap',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'RtlRandomEx',
                                                                                            'PathCchCombineEx',
                                                                                            'PathCchAppend',
                                                                                            'PathCchAddBackslash',
                                                                                            'PicRetrieveFileInfo',
                                                                                            'PicFreeFileInfo',
                                                                                            'SfcIsFileProtected',
                                                                                            'JetRetrieveColumns',
                                                                                            'JetAddColumnW',
                                                                                            'JetCloseDatabase',
                                                                                            'JetSetSystemParameterW',
                                                                                            'JetInit',
                                                                                            'JetOpenDatabaseW',
                                                                                            'JetSetColumns',
                                                                                            'JetDeleteTableW',
                                                                                            'JetAttachDatabaseW',
                                                                                            'JetSeek',
                                                                                            'JetGetIndexInfoW',
                                                                                            'JetDetachDatabaseW',
                                                                                            'JetCreateDatabaseW',
                                                                                            'JetPrepareUpdate',
                                                                                            'JetOpenTableW',
                                                                                            'JetCreateIndex2W',
                                                                                            'JetGetTableColumnInfoW',
                                                                                            'JetCreateTableW',
                                                                                            'JetMove',
                                                                                            'JetEndSession',
                                                                                            'JetSetCurrentIndexW',
                                                                                            'JetTerm',
                                                                                            'JetBeginSessionW',
                                                                                            'JetMakeKey',
                                                                                            'JetCloseTable',
                                                                                            'JetCreateInstance2W',
                                                                                            'JetUpdate',
                                                                                            'JetSetIndexRange',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleRun',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 201,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 141312},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/814cc5d5bda54437af2be28bd4dc6fbf15e2779994295ed6433eee9e3c27af70'},
 '816ee193ee33b93523a46f73c8910484b41178147a19ef35c1e41dbbc38a592a': {'AddressOfEntryPoint': 12991,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpynA',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 444720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 444928,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/816ee193ee33b93523a46f73c8910484b41178147a19ef35c1e41dbbc38a592a'},
 '81759e8574567ad8e367b036942c12a2d0366c4ce45dce3ed10cc8db9bfab188': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 98388,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 98816,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/81759e8574567ad8e367b036942c12a2d0366c4ce45dce3ed10cc8db9bfab188'},
 '8184eef321c9a9a26848c73419242c664a366cf7f3119416b5528759852ee354': {'AddressOfEntryPoint': 17472,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'UxTheme.dll': 'EnableThemeDialogTexture',
                                                                                      'msvcrt.dll': 'wcscmp'},
                                                                      'ImportedFunctions': ['RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateMutexW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStockObject',
                                                                                            'SetTextColor',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'DestroyWindow',
                                                                                            'PostQuitMessage',
                                                                                            'FindWindowW',
                                                                                            'SwitchToThisWindow',
                                                                                            'SetProcessDPIAware',
                                                                                            'CreateDialogParamW',
                                                                                            'SetWindowTextW',
                                                                                            'LoadIconW',
                                                                                            'SendMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'ShowWindow',
                                                                                            'GetMessageW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'GetClientRect',
                                                                                            'LoadStringW',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_exit',
                                                                                            '_commode',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '__setusermatherr',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_cexit',
                                                                                            '_unlock',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'wcstok_s',
                                                                                            'memmove',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_fmode',
                                                                                            'malloc',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'wcscmp',
                                                                                            'InitCommonControlsEx',
                                                                                            'EnableThemeDialogTexture'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 46216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 46592,
                                                                                       '.text\x00\x00\x00': 17408},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/8184eef321c9a9a26848c73419242c664a366cf7f3119416b5528759852ee354'},
 '81956c77df1e2006ad328d98be39f837ccd044c172739237e330e850c86ca4f2': {'AddressOfEntryPoint': 273392,
                                                                      'DebugRVA': 4560,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 294912,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptEnumProvidersA',
                                                                                      'CRYPT32.dll': 'CryptMsgControl',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'LocalFileTimeToFileTime',
                                                                                      'Normaliz.dll': 'IdnToUnicode',
                                                                                      'OLEAUT32.dll': 'SetErrorInfo',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SETUPAPI.dll': 'SetupFindNextLine',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WININET.dll': 'InternetCreateUrlW',
                                                                                      'certcli.dll': 'CAFindCertTypeByName',
                                                                                      'msvcrt.dll': '?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                      'ncrypt.dll': 'NCryptSetProperty',
                                                                                      'ntdll.dll': 'RtlTimeToSecondsSince1970',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenKey',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateToken',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'GetTokenInformation',
                                                                                            'EqualSid',
                                                                                            'CreateWellKnownSid',
                                                                                            'LookupAccountSidW',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'RevertToSelf',
                                                                                            'RegQueryValueExW',
                                                                                            'CryptGetProvParam',
                                                                                            'CryptSetProvParam',
                                                                                            'CryptEnumProvidersA',
                                                                                            'GetProfileStringA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'WideCharToMultiByte',
                                                                                            'SearchPathW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'FindResourceExW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'LoadLibraryExA',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetACP',
                                                                                            'MultiByteToWideChar',
                                                                                            'LocalReAlloc',
                                                                                            'GetLocalTime',
                                                                                            'OpenProcess',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'HeapSetInformation',
                                                                                            'OutputDebugStringA',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'EncodePointer',
                                                                                            'CompareStringW',
                                                                                            'FreeLibrary',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateFileW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentThread',
                                                                                            'GetVersionExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FoldStringW',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetComputerNameExW',
                                                                                            'DeleteFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'CompareFileTime',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'InitializeCriticalSection',
                                                                                            'LocalFree',
                                                                                            'DecodePointer',
                                                                                            'LocalAlloc',
                                                                                            'RaiseException',
                                                                                            'lstrcmpW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'strncmp',
                                                                                            'atoi',
                                                                                            'isdigit',
                                                                                            '_wcsicmp',
                                                                                            '__iob_func',
                                                                                            'vfwprintf',
                                                                                            'memmove',
                                                                                            'fgets',
                                                                                            'fgetws',
                                                                                            'fseek',
                                                                                            'fclose',
                                                                                            'feof',
                                                                                            'fflush',
                                                                                            '_wfopen',
                                                                                            'strchr',
                                                                                            '_wgetenv',
                                                                                            '_wtoi',
                                                                                            'iswxdigit',
                                                                                            'iswspace',
                                                                                            '_wsetlocale',
                                                                                            'iswalpha',
                                                                                            'gmtime',
                                                                                            'fgetc',
                                                                                            'wcsncmp',
                                                                                            'qsort',
                                                                                            '_setmode',
                                                                                            '_fileno',
                                                                                            'memset',
                                                                                            'strspn',
                                                                                            'strcpy_s',
                                                                                            'strcat_s',
                                                                                            'strpbrk',
                                                                                            'sscanf',
                                                                                            'strcspn',
                                                                                            'fprintf',
                                                                                            '_errno',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            'iswupper',
                                                                                            'towlower',
                                                                                            'iswlower',
                                                                                            'towupper',
                                                                                            '_stricmp',
                                                                                            'wcscpy_s',
                                                                                            'bsearch',
                                                                                            '_itoa_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_swab',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'fopen',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'iswdigit',
                                                                                            'getenv',
                                                                                            'wcscspn',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            'wcsstr',
                                                                                            'wcsrchr',
                                                                                            '?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                            'CAGetCertTypeProperty',
                                                                                            'CAFreeCertTypeProperty',
                                                                                            'CACloseCertType',
                                                                                            'CAFindCertTypeByName',
                                                                                            'GetStockObject',
                                                                                            'NCryptIsKeyHandle',
                                                                                            'NCryptFreeObject',
                                                                                            'NCryptEnumStorageProviders',
                                                                                            'NCryptFreeBuffer',
                                                                                            'NCryptGetProperty',
                                                                                            'NCryptSetProperty',
                                                                                            'IdnToUnicode',
                                                                                            'NtQuerySystemTime',
                                                                                            'RtlTimeToSecondsSince1970',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetLineCountW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupGetIntField',
                                                                                            'SetupFindNextLine',
                                                                                            'CryptMsgOpenToEncode',
                                                                                            'CryptSignCertificate',
                                                                                            'CryptExportPublicKeyInfo',
                                                                                            'CryptDecodeObjectEx',
                                                                                            'CryptEncodeObjectEx',
                                                                                            'CertNameToStrW',
                                                                                            'CertStrToNameW',
                                                                                            'CryptEnumOIDInfo',
                                                                                            'CryptSignMessage',
                                                                                            'CertAddCertificateLinkToStore',
                                                                                            'CertGetIntendedKeyUsage',
                                                                                            'CertGetEnhancedKeyUsage',
                                                                                            'CryptHashCertificate',
                                                                                            'CertSetStoreProperty',
                                                                                            'CertGetNameStringW',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CryptHashPublicKeyInfo',
                                                                                            'CryptMsgGetAndVerifySigner',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CryptSignAndEncodeCertificate',
                                                                                            'CryptMsgGetParam',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertGetCertificateChain',
                                                                                            'CryptMsgUpdate',
                                                                                            'CertVerifySubjectCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertFindAttribute',
                                                                                            'CertFindExtension',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CryptFindCertificateKeyProvInfo',
                                                                                            'CertEnumCRLsInStore',
                                                                                            'CertOpenStore',
                                                                                            'CertFreeCRLContext',
                                                                                            'CryptDecodeObject',
                                                                                            'CryptMsgClose',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CryptFindOIDInfo',
                                                                                            'CertCreateCertificateContext',
                                                                                            'CryptMsgControl',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromString',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SafeArrayGetElement',
                                                                                            'VariantCopyInd',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'UuidCreate',
                                                                                            'GetComputerObjectNameW',
                                                                                            'GetUserNameExW',
                                                                                            'LoadCursorW',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'LoadIconW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'SetCursor',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'CharLowerW',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxW',
                                                                                            'DispatchMessageW',
                                                                                            'PostMessageW',
                                                                                            'LoadStringW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetCanonicalizeUrlW',
                                                                                            'InternetCreateUrlW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 311,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 9216,
                                                                                       '.reloc\x00\x00': 16896,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 278016},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/81956c77df1e2006ad328d98be39f837ccd044c172739237e330e850c86ca4f2'},
 '81ee15c4666d73420333bace26971f9df60178f2694951b2e56c36df572551c7': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'colorui.dll': 'LaunchColorCpl',
                                                                                      'msvcrt.dll': '_XcptFilter'},
                                                                      'ImportedFunctions': ['HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '_controlfp',
                                                                                            '_wcmdln',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'LaunchColorCpl'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 29,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 79432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 79872,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/81ee15c4666d73420333bace26971f9df60178f2694951b2e56c36df572551c7'},
 '820ae49d5ca9b263a6b1c54cc0bc69654cded6591c37924e8cb116b2a5566179': {'AddressOfEntryPoint': 15888,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'apphelp.dll': 'SdbReadDWORDTag',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtDeleteKey'},
                                                                      'ImportedFunctions': ['RegDeleteKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'FindFirstFileW',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'GetConsoleMode',
                                                                                            'CopyFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'WriteConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'FindClose',
                                                                                            'LocalAlloc',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'LocalFree',
                                                                                            'SetFileAttributesW',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'memcpy',
                                                                                            '__p__commode',
                                                                                            'towupper',
                                                                                            '_wfullpath',
                                                                                            '_iob',
                                                                                            'fgetwc',
                                                                                            '_vsnwprintf',
                                                                                            'wcsrchr',
                                                                                            'tolower',
                                                                                            '_wcsicmp',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'SdbIsStandardDatabase',
                                                                                            'SdbUnregisterDatabase',
                                                                                            'SdbReadBinaryTag',
                                                                                            'SdbOpenDatabase',
                                                                                            'SdbGetBinaryTagData',
                                                                                            'SdbFindFirstTag',
                                                                                            'SdbFindNextTag',
                                                                                            'SdbRegisterDatabaseEx',
                                                                                            'SdbGetStringTagPtr',
                                                                                            'SdbCloseDatabase',
                                                                                            'SdbReadDWORDTag',
                                                                                            'LoadStringW',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlStringFromGUID',
                                                                                            'NtDeleteKey'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/820ae49d5ca9b263a6b1c54cc0bc69654cded6591c37924e8cb116b2a5566179'},
 '820d76e187238324e8bef86349ebc9df2268209cf2b89139cba9553f99ce6ca4': {'AddressOfEntryPoint': 386472,
                                                                      'DebugRVA': 529968,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 528384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetCommandLineW',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathCanonicalizeW',
                                                                                      'USER32.dll': 'SetCursor',
                                                                                      'WININET.dll': 'InternetCrackUrlA',
                                                                                      'gdiplus.dll': 'GdipCreatePath',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['FlushInstructionCache',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CopyFileW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'MoveFileW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThread',
                                                                                            'GlobalAlloc',
                                                                                            'InterlockedExchange',
                                                                                            'WideCharToMultiByte',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSizeEx',
                                                                                            'WriteFile',
                                                                                            'CompareStringA',
                                                                                            'CreateFileA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'LCMapStringA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'RtlUnwind',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'LCMapStringW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'ExitProcess',
                                                                                            'HeapCreate',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'LoadLibraryA',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'MulDiv',
                                                                                            'SetErrorMode',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'LeaveCriticalSection',
                                                                                            'lstrcmpiW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindClose',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetFullPathNameW',
                                                                                            'lstrcpyW',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GlobalFree',
                                                                                            'lstrcpynW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GetCommandLineW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetFocus',
                                                                                            'GetDlgItem',
                                                                                            'IsWindowEnabled',
                                                                                            'GetKeyState',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'TrackPopupMenuEx',
                                                                                            'TrackMouseEvent',
                                                                                            'UpdateWindow',
                                                                                            'UnionRect',
                                                                                            'SetWindowRgn',
                                                                                            'SetTimer',
                                                                                            'RegisterClassW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetWindowPlacement',
                                                                                            'ClientToScreen',
                                                                                            'InflateRect',
                                                                                            'InvalidateRect',
                                                                                            'PtInRect',
                                                                                            'SetRect',
                                                                                            'GetWindowDC',
                                                                                            'SetScrollInfo',
                                                                                            'SetScrollRange',
                                                                                            'ScreenToClient',
                                                                                            'SetScrollPos',
                                                                                            'EnableWindow',
                                                                                            'IsWindowVisible',
                                                                                            'SubtractRect',
                                                                                            'AdjustWindowRectEx',
                                                                                            'FindWindowW',
                                                                                            'SendMessageW',
                                                                                            'IsCharAlphaW',
                                                                                            'MonitorFromRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetPropW',
                                                                                            'CopyRect',
                                                                                            'MonitorFromPoint',
                                                                                            'OffsetRect',
                                                                                            'GetWindowRect',
                                                                                            'EqualRect',
                                                                                            'MoveWindow',
                                                                                            'PeekMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'CharNextW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'LoadIconW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'GetClientRect',
                                                                                            'GetParent',
                                                                                            'MonitorFromWindow',
                                                                                            'GetWindow',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'KillTimer',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassExW',
                                                                                            'UnregisterClassA',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'CreateWindowExW',
                                                                                            'PostMessageW',
                                                                                            'ShowWindow',
                                                                                            'SendMessageTimeoutW',
                                                                                            'CreatePopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'GetCursorPos',
                                                                                            'SetFocus',
                                                                                            'RegisterWindowMessageW',
                                                                                            'IntersectRect',
                                                                                            'IsRectEmpty',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSysColor',
                                                                                            'DrawTextW',
                                                                                            'SetRectEmpty',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DestroyWindow',
                                                                                            'SetCursor',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'CreateRectRgn',
                                                                                            'ExtCreateRegion',
                                                                                            'ExtTextOutW',
                                                                                            'OffsetRgn',
                                                                                            'CreateSolidBrush',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkColor',
                                                                                            'ExcludeClipRect',
                                                                                            'GetTextMetricsW',
                                                                                            'SetBkMode',
                                                                                            'GetStockObject',
                                                                                            'SetWindowOrgEx',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'CombineRgn',
                                                                                            'GetObjectW',
                                                                                            'DeleteObject',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'FreeSid',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHAppBarMessage',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'VarUI4FromStr',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathCanonicalizeW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetConnectA',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpSendRequestW',
                                                                                            'HttpOpenRequestA',
                                                                                            'InternetQueryOptionW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'InternetReadFile',
                                                                                            'InternetCrackUrlA',
                                                                                            'GdipSetClipRegion',
                                                                                            'GdipMeasureCharacterRanges',
                                                                                            'GdipDrawString',
                                                                                            'GdipSetPixelOffsetMode',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipSetCompositingQuality',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipAddPathRectangleI',
                                                                                            'GdipDeletePath',
                                                                                            'GdipStringFormatGetGenericTypographic',
                                                                                            'GdipCreateRegion',
                                                                                            'GdipSetStringFormatTrimming',
                                                                                            'GdipSetStringFormatHotkeyPrefix',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipSetStringFormatFlags',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipCloneStringFormat',
                                                                                            'GdipSetSolidFillColor',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdipCreateRegionPath',
                                                                                            'GdipDeleteRegion',
                                                                                            'GdipGetRegionBounds',
                                                                                            'GdipCreateFontFamilyFromName',
                                                                                            'GdipGetGenericFontFamilySansSerif',
                                                                                            'GdipGetGenericFontFamilySerif',
                                                                                            'GdipDeleteFontFamily',
                                                                                            'GdipGetEmHeight',
                                                                                            'GdipGetLineSpacing',
                                                                                            'GdipCreateFont',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipGetFontSize',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipSetStringFormatMeasurableCharacterRanges',
                                                                                            'GdipCreatePath'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 335,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 50976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13824,
                                                                                       '.rdata\x00\x00': 131072,
                                                                                       '.rsrc\x00\x00\x00': 51200,
                                                                                       '.text\x00\x00\x00': 521216,
                                                                                       've_share': 2048},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/820d76e187238324e8bef86349ebc9df2268209cf2b89139cba9553f99ce6ca4'},
 '82b64025001fe21a9555ddd79302739163cda42a69c7d3783f9174aa4c6fb666': {'AddressOfEntryPoint': 26398,
                                                                      'DebugRVA': 26192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1528,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/82b64025001fe21a9555ddd79302739163cda42a69c7d3783f9174aa4c6fb666'},
 '8305bc3353655b4e0e1ae300064e0f865be0be10084c902d1f8958a6fe335910': {'AddressOfEntryPoint': 29392,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'FormatMessageW',
                                                                                      'RPCRT4.dll': 'I_RpcExceptionFilter',
                                                                                      'USER32.dll': 'SetWindowPos',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': '_wtol',
                                                                                      'rtutils.dll': 'TraceDeregisterExA'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'RegSetValueExW',
                                                                                            'GlobalAddAtomW',
                                                                                            'CreateActCtxW',
                                                                                            'ReleaseActCtx',
                                                                                            'ReadFile',
                                                                                            'ActivateActCtx',
                                                                                            'DeactivateActCtx',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'OpenProcess',
                                                                                            'ReadProcessMemory',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrlenA',
                                                                                            'LoadLibraryExW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFree',
                                                                                            'GlobalAlloc',
                                                                                            'CreateFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'GlobalFree',
                                                                                            'GlobalReAlloc',
                                                                                            'CompareStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'FormatMessageW',
                                                                                            '__argc',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__argv',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'TraceRegisterExA',
                                                                                            'TracePrintfExA',
                                                                                            'TraceDeregisterExA',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlFreeHeap',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlAllocateHeap',
                                                                                            '_vsnwprintf',
                                                                                            '_wtol',
                                                                                            'GetWindowRect',
                                                                                            'LoadStringW',
                                                                                            'CharPrevW',
                                                                                            'CharNextW',
                                                                                            'MessageBoxW',
                                                                                            'GetParent',
                                                                                            'GetPropW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'I_RpcExceptionFilter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 91,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 35328},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8305bc3353655b4e0e1ae300064e0f865be0be10084c902d1f8958a6fe335910'},
 '833b63ccb605ff6ac0af019a2ef4b63a1daef50ea0fa1287db33bc356d0882d2': {'AddressOfEntryPoint': 32440,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 76224,
                                                                      'ExportSize': 50,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'SetLastError',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'GetParent'},
                                                                      'ImportedFunctions': ['SHGetPathFromIDListA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteExA',
                                                                                            'SHGetMalloc',
                                                                                            'BeginPaint',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'SetRect',
                                                                                            'EndPaint',
                                                                                            'LoadCursorA',
                                                                                            'GetLastActivePopup',
                                                                                            'ShowWindow',
                                                                                            'PostMessageA',
                                                                                            'SendMessageA',
                                                                                            'EnableWindow',
                                                                                            'GetTopWindow',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowTextA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'SetDlgItemTextA',
                                                                                            'CharUpperBuffA',
                                                                                            'LoadIconA',
                                                                                            'SetWindowWord',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'LoadStringA',
                                                                                            'MessageBoxA',
                                                                                            'SetTimer',
                                                                                            'GetMessageA',
                                                                                            'KillTimer',
                                                                                            'PostQuitMessage',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'SetCursor',
                                                                                            'CharNextA',
                                                                                            'GetWindowWord',
                                                                                            'DefWindowProcA',
                                                                                            'RegisterClassA',
                                                                                            'GetParent',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'Sleep',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetStdHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'VirtualAlloc',
                                                                                            'GetDriveTypeA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'CloseHandle',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            '_lclose',
                                                                                            'OpenFile',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalHandle',
                                                                                            '_llseek',
                                                                                            '_lread',
                                                                                            '_lopen',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetVersion',
                                                                                            'GetModuleFileNameA',
                                                                                            'WriteFile',
                                                                                            'GetSystemTime',
                                                                                            'CreateProcessA',
                                                                                            'lstrlenA',
                                                                                            'LocalFree',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            '_lcreat',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetTickCount',
                                                                                            'FormatMessageA',
                                                                                            'GetLastError',
                                                                                            'WinExec',
                                                                                            '_lwrite',
                                                                                            'WaitForSingleObject',
                                                                                            'SetErrorMode',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapSize',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'LocalAlloc',
                                                                                            'FindNextFileA',
                                                                                            'RtlUnwind',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetProcAddress',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'SetTextColor',
                                                                                            'SetTextAlign',
                                                                                            'GetBkColor',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'ExtTextOutA',
                                                                                            'CreateDCA',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'SetBkColor'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 176,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 38764,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.rsrc\x00\x00\x00': 40960,
                                                                                       '.text\x00\x00\x00': 61440,
                                                                                       '_winzip_': 119394304},
                                                                      'StackReserveSize': 32000,
                                                                      'filename': './data/clean/833b63ccb605ff6ac0af019a2ef4b63a1daef50ea0fa1287db33bc356d0882d2'},
 '833db9236ca1471180d12d1edf5655fcf8959ba839ca8df07141bb8af52d2a5c': {'AddressOfEntryPoint': 169104,
                                                                      'DebugRVA': 4272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 176128,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['StartTraceW',
                                                                                            'EnableTrace',
                                                                                            'ControlTraceW',
                                                                                            'CloseTrace',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'DeviceIoControl',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesExW',
                                                                                            'CreateFileW',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileExW',
                                                                                            'GetSystemTime',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'CompareFileTime',
                                                                                            'FindFirstFileW',
                                                                                            'OutputDebugStringA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetFullPathNameW',
                                                                                            'GetLastError',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCurrentProcessId',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleExW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'SetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'MessageBoxW',
                                                                                            'malloc',
                                                                                            'memmove',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            '_vsnprintf',
                                                                                            'wcstoul',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            'free',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcsstr',
                                                                                            'memcpy',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '_errno',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            'memcmp',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 16384,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 167936},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/833db9236ca1471180d12d1edf5655fcf8959ba839ca8df07141bb8af52d2a5c'},
 '8364b6aeb14e710cec1a334a20342c6d3dc53541731621e28ecf4750551358c1': {'AddressOfEntryPoint': 311520,
                                                                      'DebugRVA': 770252,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 798720,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Draw',
                                                                                      'COMDLG32.dll': 'CommDlgExtendedError',
                                                                                      'GDI32.dll': 'EnumFontFamiliesExW',
                                                                                      'KERNEL32.dll': 'CreateDirectoryW',
                                                                                      'OLEAUT32.dll': 'SafeArrayCreateVector',
                                                                                      'PROPSYS.dll': 'PropVariantToUInt32',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'DragQueryFileW',
                                                                                      'SHLWAPI.dll': 'SHCreateStreamOnFileEx',
                                                                                      'USER32.dll': 'SetFocus',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'XmlLite.dll': 'CreateXmlWriter',
                                                                                      'msvcrt.dll': 'swprintf_s',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'PropVariantCopy',
                                                                                      'urlmon.dll': 'CreateUri'},
                                                                      'ImportedFunctions': ['EventWrite',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'DuplicateEncryptionInfoFile',
                                                                                            'RegQueryValueExW',
                                                                                            'RegGetValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFileSize',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateFileW',
                                                                                            'WideCharToMultiByte',
                                                                                            'AddAtomW',
                                                                                            'GlobalAddAtomW',
                                                                                            'lstrcmpA',
                                                                                            'DeleteAtom',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetVersion',
                                                                                            'ResumeThread',
                                                                                            'SetThreadPriority',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GlobalSize',
                                                                                            'FindResourceW',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetNumberFormatEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLocaleInfoEx',
                                                                                            'EnumDateFormatsExW',
                                                                                            'EnumTimeFormatsW',
                                                                                            'LoadLibraryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetTimeFormatW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'DeleteFileW',
                                                                                            'MulDiv',
                                                                                            'lstrlenW',
                                                                                            'FreeLibrary',
                                                                                            'MoveFileW',
                                                                                            'GetLastError',
                                                                                            'CompareStringOrdinal',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLongPathNameW',
                                                                                            'GetStartupInfoW',
                                                                                            'OutputDebugStringA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RegisterApplicationRecoveryCallback',
                                                                                            'ApplicationRecoveryInProgress',
                                                                                            'ApplicationRecoveryFinished',
                                                                                            'CreateThread',
                                                                                            'RegisterApplicationRestart',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetSystemTime',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetDateFormatW',
                                                                                            'GetLocalTime',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExA',
                                                                                            'GetSystemInfo',
                                                                                            'RaiseException',
                                                                                            'VirtualQuery',
                                                                                            'GetModuleHandleExW',
                                                                                            'SetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CopyFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateDirectoryW',
                                                                                            'GetViewportOrgEx',
                                                                                            'CreateFontW',
                                                                                            'GetTextFaceW',
                                                                                            'Rectangle',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'GetMetaFileBitsEx',
                                                                                            'DeleteMetaFile',
                                                                                            'CreateMetaFileA',
                                                                                            'CloseMetaFile',
                                                                                            'DeleteDC',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateRectRgn',
                                                                                            'CombineRgn',
                                                                                            'GetObjectW',
                                                                                            'GetTextMetricsW',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateCompatibleDC',
                                                                                            'BitBlt',
                                                                                            'Polyline',
                                                                                            'ExtTextOutW',
                                                                                            'GdiGradientFill',
                                                                                            'SelectObject',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'Escape',
                                                                                            'DeleteObject',
                                                                                            'CreatePen',
                                                                                            'CreateICW',
                                                                                            'ScaleWindowExtEx',
                                                                                            'DPtoLP',
                                                                                            'TextOutW',
                                                                                            'SetMetaFileBitsEx',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateDCW',
                                                                                            'DeleteEnhMetaFile',
                                                                                            'GetDeviceCaps',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'PostMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetClassInfoW',
                                                                                            'IsWindowVisible',
                                                                                            'GetDlgItem',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetFocus',
                                                                                            'GetKeyboardLayout',
                                                                                            'TrackMouseEvent',
                                                                                            'LoadImageW',
                                                                                            'DestroyMenu',
                                                                                            'ShowScrollBar',
                                                                                            'CallNextHookEx',
                                                                                            'IsWindow',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowLongW',
                                                                                            'GetKeyState',
                                                                                            'GetWindowLongW',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetParent',
                                                                                            'DrawTextW',
                                                                                            'GrayStringW',
                                                                                            'PtInRect',
                                                                                            'ScreenToClient',
                                                                                            'GetSysColor',
                                                                                            'SetRectEmpty',
                                                                                            'CopyRect',
                                                                                            'IntersectRect',
                                                                                            'IsRectEmpty',
                                                                                            'GetWindow',
                                                                                            'LoadIconW',
                                                                                            'MonitorFromRect',
                                                                                            'GetGestureInfo',
                                                                                            'CloseGestureInfoHandle',
                                                                                            'SetGestureConfig',
                                                                                            'CharToOemBuffA',
                                                                                            'OemToCharBuffA',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetPropW',
                                                                                            'DrawEdge',
                                                                                            'FillRect',
                                                                                            'LoadBitmapW',
                                                                                            'LoadCursorW',
                                                                                            'OffsetRect',
                                                                                            'SetRect',
                                                                                            'ClientToScreen',
                                                                                            'ShowCaret',
                                                                                            'HideCaret',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'InvalidateRect',
                                                                                            'SetActiveWindow',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'EnableWindow',
                                                                                            'ReleaseCapture',
                                                                                            'SystemParametersInfoW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'IsIconic',
                                                                                            'SetForegroundWindow',
                                                                                            'FindWindowW',
                                                                                            'EnumWindows',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'CountClipboardFormats',
                                                                                            'SetCapture',
                                                                                            'TabbedTextOutW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageW',
                                                                                            'SetCursor',
                                                                                            'GetCursorPos',
                                                                                            'DestroyCursor',
                                                                                            'GetCapture',
                                                                                            'GetClassNameW',
                                                                                            'LoadStringW',
                                                                                            'DialogBoxParamW',
                                                                                            'EndDialog',
                                                                                            'IsMenu',
                                                                                            'DefWindowProcW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'DeleteMenu',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuItemID',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuStringW',
                                                                                            'SetWindowRgn',
                                                                                            'GetMenuItemCount',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateMenu',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'SetFocus',
                                                                                            '_callnewh',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcstok_s',
                                                                                            'wcstod',
                                                                                            'wcstoul',
                                                                                            '_wtoi',
                                                                                            '_wtol',
                                                                                            '_errno',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '__RTDynamicCast',
                                                                                            '_ftol2_sse',
                                                                                            'abort',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__mb_cur_max',
                                                                                            '__pctype_func',
                                                                                            '__crtLCMapStringW',
                                                                                            'setlocale',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            '___mb_cur_max_func',
                                                                                            'strchr',
                                                                                            'wcscpy_s',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'wcstol',
                                                                                            '_wcsicmp',
                                                                                            'free',
                                                                                            '_wcsdup',
                                                                                            '_ftol2',
                                                                                            'memmove',
                                                                                            'memcmp',
                                                                                            'iswspace',
                                                                                            '_itow',
                                                                                            '_itow_s',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            'memset',
                                                                                            'swprintf_s',
                                                                                            'GetFileTitleW',
                                                                                            'CommDlgExtendedError',
                                                                                            'SHCreateItemInKnownFolder',
                                                                                            'DragFinish',
                                                                                            'ShellExecuteW',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'SHAddToRecentDocs',
                                                                                            'ShellAboutW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'DragQueryFileW',
                                                                                            'ReleaseStgMedium',
                                                                                            'IIDFromString',
                                                                                            'StgOpenStorage',
                                                                                            'OleRegGetUserType',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoRegisterActivationFilter',
                                                                                            'CoInitialize',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'OleLoad',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'WriteClassStg',
                                                                                            'OleSave',
                                                                                            'OleDuplicateData',
                                                                                            'CoGetMalloc',
                                                                                            'PropVariantClear',
                                                                                            'StgOpenStorageEx',
                                                                                            'StringFromCLSID',
                                                                                            'CLSIDFromString',
                                                                                            'ReadClassStg',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'PropVariantCopy',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'PathFindExtensionW',
                                                                                            'SHStrDupW',
                                                                                            'StrCmpNIW',
                                                                                            'PathAddBackslashW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathIsFileSpecW',
                                                                                            'StrCmpIW',
                                                                                            'PathFileExistsW',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmEndSession',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_Draw',
                                                                                            'SafeArrayPutElement',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VarDecFromI4',
                                                                                            'VariantInit',
                                                                                            'VarDecFromR8',
                                                                                            'VarR8FromDec',
                                                                                            'VariantClear',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'PropVariantToUInt32WithDefault',
                                                                                            'PropVariantToString',
                                                                                            'PropVariantToUInt32',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'timeGetTime',
                                                                                            'CreateUri',
                                                                                            'CreateXmlWriter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 389,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3467848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 22528,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 16384,
                                                                                       '.reloc\x00\x00': 52736,
                                                                                       '.rsrc\x00\x00\x00': 3468288,
                                                                                       '.text\x00\x00\x00': 766464},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8364b6aeb14e710cec1a334a20342c6d3dc53541731621e28ecf4750551358c1'},
 '8364d6a49771d5ca039ca5ff913fcc83de83691fb137c99e55c0468c2094acdc': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 58376,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 58880,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8364d6a49771d5ca039ca5ff913fcc83de83691fb137c99e55c0468c2094acdc'},
 '837928ff2fd17c398ddfc0caf6d93a5996e3f97d666ecba689767d09ab73b750': {'AddressOfEntryPoint': 86346,
                                                                      'DebugRVA': 85952,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 48,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 69312,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 69632,
                                                                                       '.text\x00\x00\x00': 78336},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/837928ff2fd17c398ddfc0caf6d93a5996e3f97d666ecba689767d09ab73b750'},
 '83d9aadd19743604f193df6c1f50a8f4024667a7c6a24d14d96c42e6fff91d8d': {'AddressOfEntryPoint': 146480,
                                                                      'DebugRVA': 4352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 167936,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyExW',
                                                                                      'GDI32.dll': 'CreateCompatibleBitmap',
                                                                                      'KERNEL32.dll': 'LockResource',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'UNATTEND.DLL': 'UnattendCtxGetEnumValueByNode',
                                                                                      'USER32.dll': 'SetFocus',
                                                                                      'WDSCORE.dll': 'WdsFreeData',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegFlushKey',
                                                                                            'TraceEvent',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'EnumServicesStatusExW',
                                                                                            'ControlTraceW',
                                                                                            'RegSetKeyValueW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersionExW',
                                                                                            'GetProcAddress',
                                                                                            'CreateProcessW',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'PowerCreateRequest',
                                                                                            'PowerSetRequest',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LocalFree',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetLocalTime',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'FreeLibrary',
                                                                                            'HeapAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryExW',
                                                                                            'SetEvent',
                                                                                            'OpenEventW',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'OpenThread',
                                                                                            'CompareStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleExW',
                                                                                            'FindClose',
                                                                                            'LocalAlloc',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'CopyFileExW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetFileAttributesW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CreateMutexW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetExitCodeThread',
                                                                                            'ReleaseMutex',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'MulDiv',
                                                                                            'LockResource',
                                                                                            'GetSystemMetrics',
                                                                                            'SetRect',
                                                                                            'GetSysColor',
                                                                                            'LoadImageW',
                                                                                            'PostQuitMessage',
                                                                                            'SetCursor',
                                                                                            'DestroyWindow',
                                                                                            'EndPaint',
                                                                                            'LoadBitmapW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'LoadStringW',
                                                                                            'RegisterHotKey',
                                                                                            'GetMessageW',
                                                                                            'UnregisterHotKey',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'GetPropW',
                                                                                            'UpdateWindow',
                                                                                            'SendMessageW',
                                                                                            'IsWindowVisible',
                                                                                            'CreateWindowExW',
                                                                                            'FindWindowExW',
                                                                                            'SetThreadDesktop',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'InvalidateRect',
                                                                                            'RegisterClassExW',
                                                                                            'TranslateMessage',
                                                                                            'GetDC',
                                                                                            'SetPropW',
                                                                                            'BeginPaint',
                                                                                            'SetFocus',
                                                                                            'wcsstr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_vscwprintf',
                                                                                            'wcscpy_s',
                                                                                            'swprintf_s',
                                                                                            'wcstoul',
                                                                                            'wcscat_s',
                                                                                            '_ultow_s',
                                                                                            '_wcslwr',
                                                                                            '_snwscanf_s',
                                                                                            'strncmp',
                                                                                            'memmove',
                                                                                            '_wcsupr',
                                                                                            '_wgetenv',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            'wcsrchr',
                                                                                            '_wcsnicmp',
                                                                                            'time',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_lock',
                                                                                            'wcsnlen',
                                                                                            '_CxxThrowException',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'RtlInitAnsiString',
                                                                                            'LdrGetProcedureAddress',
                                                                                            'RtlValidSid',
                                                                                            'NtOpenKey',
                                                                                            'NtQueryValueKey',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtWaitForSingleObject',
                                                                                            'ZwOpenMutant',
                                                                                            'ZwReleaseMutant',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwClose',
                                                                                            'ZwOpenFile',
                                                                                            'RtlStringFromGUID',
                                                                                            'ZwQuerySystemInformation',
                                                                                            'RtlGUIDFromString',
                                                                                            'ZwQueryAttributesFile',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'ZwUnloadKey',
                                                                                            'ZwCreateKey',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'ZwSetSecurityObject',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'ZwLoadKey',
                                                                                            'ZwDeleteKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'ZwQueryKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'LdrGetDllHandle',
                                                                                            'NtOpenProcessTokenEx',
                                                                                            'NtSetInformationThread',
                                                                                            'RtlImpersonateSelf',
                                                                                            'NtOpenThreadTokenEx',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'ZwCreateEvent',
                                                                                            'ZwQuerySymbolicLinkObject',
                                                                                            'ZwOpenSymbolicLinkObject',
                                                                                            'ZwDeviceIoControlFile',
                                                                                            'ZwResetEvent',
                                                                                            'ZwAllocateUuids',
                                                                                            'NtCreateEvent',
                                                                                            'NtResetEvent',
                                                                                            'NtQueryBootEntryOrder',
                                                                                            'NtTranslateFilePath',
                                                                                            'NtEnumerateBootEntries',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlFreeSid',
                                                                                            'RtlLengthSid',
                                                                                            'NtQueryKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtCreateKey',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtOpenFile',
                                                                                            'NtQueryObject',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'NtClose',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UuidFromStringW',
                                                                                            'UnattendCtxDeserializeWithResults',
                                                                                            'UnattendCtxReplaceMatchedNodesWithText',
                                                                                            'UnattendCtxCommitModify',
                                                                                            'UnattendCtxCancelModify',
                                                                                            'UnattendMarkPassUsedInCtx',
                                                                                            'UnattendCtxSerialize',
                                                                                            'UnattendCtxDeserialize',
                                                                                            'UnattendCtxCleanup',
                                                                                            'UnattendFreeNode',
                                                                                            'UnattendAddResults',
                                                                                            'UnattendCtxGetFlagByNode',
                                                                                            'UnattendFreeResults',
                                                                                            'UnattendFindFileFromCmdLine',
                                                                                            'UnattendFindAnswerFileWithResults',
                                                                                            'UnattendCtxBeginModify',
                                                                                            'UnattendCtxOpenNode',
                                                                                            'UnattendCtxGetEnumValueByNode',
                                                                                            'SetStretchBltMode',
                                                                                            'SetTextCharacterExtra',
                                                                                            'CreateSolidBrush',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'SetBkMode',
                                                                                            'RemoveFontMemResourceEx',
                                                                                            'SetBkColor',
                                                                                            'SetBrushOrgEx',
                                                                                            'StretchBlt',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteDC',
                                                                                            'SetTextColor',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'BitBlt',
                                                                                            'TextOutW',
                                                                                            'SetMapMode',
                                                                                            'CreateDIBitmap',
                                                                                            'SetWorldTransform',
                                                                                            'AddFontMemResourceEx',
                                                                                            'GetTextMetricsW',
                                                                                            'SetGraphicsMode',
                                                                                            'GdiAlphaBlend',
                                                                                            'GetStockObject',
                                                                                            'SetTextAlign',
                                                                                            'GetTextAlign',
                                                                                            'ExtTextOutW',
                                                                                            'SetLayout',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'WdsGetBlackboardValue',
                                                                                            'WdsInitialize',
                                                                                            'WdsCreateBlackboard',
                                                                                            'WdsDestroyBlackboard',
                                                                                            'WdsTerminate',
                                                                                            'WdsFreeData'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 307,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 11264,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 153088},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/83d9aadd19743604f193df6c1f50a8f4024667a7c6a24d14d96c42e6fff91d8d'},
 '840c34866229e45d2e404e24ed3cc2a98260157653986ed24fab869d2c15da98': {'AddressOfEntryPoint': 4519,
                                                                      'DebugRVA': 414720,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 413696,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetEntriesInAclW',
                                                                                      'IPHLPAPI.DLL': 'GetIpAddrTable',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SETUPAPI.dll': 'SetupGetInfFileListA',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'EnumChildWindows',
                                                                                      'WS2_32.dll': 'inet_ntoa',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesW',
                                                                                      'ole32.dll': 'CoQueryProxyBlanket'},
                                                                      'ImportedFunctions': ['GetTimeZoneInformation',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'RaiseException',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapSize',
                                                                                            'RtlUnwind',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapAlloc',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapFree',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'InterlockedDecrement',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'InterlockedIncrement',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'CreateFileA',
                                                                                            'InterlockedCompareExchange',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryExW',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'MoveFileExW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'DeviceIoControl',
                                                                                            'FormatMessageW',
                                                                                            'CreateDirectoryW',
                                                                                            'CopyFileW',
                                                                                            'GetProcessHeap',
                                                                                            'WSAStartup',
                                                                                            'htonl',
                                                                                            'ntohl',
                                                                                            'inet_addr',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'recvfrom',
                                                                                            'select',
                                                                                            'sendto',
                                                                                            'socket',
                                                                                            'inet_ntoa',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'LookupAccountSidW',
                                                                                            'CreateServiceW',
                                                                                            'DeleteService',
                                                                                            'QueryServiceConfigW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'QueryServiceLockStatusW',
                                                                                            'EnumDependentServicesW',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'StartServiceA',
                                                                                            'QueryServiceStatus',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'LookupPrivilegeNameA',
                                                                                            'LookupPrivilegeDisplayNameA',
                                                                                            'GetSecurityInfo',
                                                                                            'GetAclInformation',
                                                                                            'InitializeAcl',
                                                                                            'AddAce',
                                                                                            'SetSecurityInfo',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetInheritanceSourceW',
                                                                                            'GetAce',
                                                                                            'FreeInheritedFromArray',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegRestoreKeyW',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegSaveKeyW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegCreateKeyExW',
                                                                                            'FreeSid',
                                                                                            'IsValidAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiClassGuidsFromNameW',
                                                                                            'SetupDiGetClassDescriptionW',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'CMP_WaitNoPendingInstallEvents',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiDeleteDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiCreateDeviceInfoA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupGetLineTextA',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupDiBuildClassInfoList',
                                                                                            'SetupGetInfFileListA',
                                                                                            'GetIpAddrTable',
                                                                                            'IsWindow',
                                                                                            'SendMessageA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'CreateWindowExW',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnumChildWindows',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'SafeArrayGetUBound',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayPutElement',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'UpdateDriverForPlugAndPlayDevicesW',
                                                                                            'SHGetFolderPathW',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 227,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 48128,
                                                                                       '.rdata\x00\x00': 251392,
                                                                                       '.reloc\x00\x00': 32256,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 407040},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/840c34866229e45d2e404e24ed3cc2a98260157653986ed24fab869d2c15da98'},
 '841b14bbd4482c0f38c407b62bd27cace388eab46b1d639f028f1d193608fe35': {'AddressOfEntryPoint': 110164,
                                                                      'DebugRVA': 145568,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 143360,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'RaiseException',
                                                                                      'MSVCP100.dll': '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ',
                                                                                      'MSVCR100.dll': 'malloc',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'USER32.dll': 'PeekMessageW',
                                                                                      'VBoxRT.dll': 'RTCritSectInitEx',
                                                                                      'ole32.dll': 'StringFromIID'},
                                                                      'ImportedFunctions': ['_XcptFilter',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            'memmove_s',
                                                                                            '__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__set_app_type',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_purecall',
                                                                                            'free',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            'wcsstr',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'isspace',
                                                                                            'signal',
                                                                                            'memcmp',
                                                                                            '_recalloc',
                                                                                            'wcsncpy_s',
                                                                                            'memcpy_s',
                                                                                            'malloc',
                                                                                            '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                            '?_Xout_of_range@std@@YAXPEBD@Z',
                                                                                            '?_Orphan_all@_Container_base0@std@@QEAAXXZ',
                                                                                            '?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ',
                                                                                            '??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z',
                                                                                            '?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ',
                                                                                            '?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ',
                                                                                            '?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ',
                                                                                            '?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ',
                                                                                            'CharNextW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'StringFromIID',
                                                                                            'SysAllocStringLen',
                                                                                            'SafeArrayCreateEx',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SafeArrayRedim',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayCreate',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SetErrorInfo',
                                                                                            'GetErrorInfo',
                                                                                            '??0RTCString@@QEAA@PEBD@Z',
                                                                                            'RTR3InitExe',
                                                                                            'RTMsgInitFailure',
                                                                                            'RTGetOptInit',
                                                                                            'RTGetOpt',
                                                                                            'RTGetOptPrintError',
                                                                                            'RTBldCfgRevisionStr',
                                                                                            'RTBldCfgVersion',
                                                                                            'RTMsgErrorExit',
                                                                                            'RTCritSectDelete',
                                                                                            'RTCritSectInit',
                                                                                            'RTMsgError',
                                                                                            '??0RTCString@@QEAA@XZ',
                                                                                            '?append@RTCString@@QEAAAEAV1@PEBD@Z',
                                                                                            '?append@RTCString@@QEAAAEAV1@AEBV1@@Z',
                                                                                            '?c_str@RTCString@@QEBAPEBDXZ',
                                                                                            '??_7RTCString@@6B@',
                                                                                            '?cleanup@RTCString@@IEAAXXZ',
                                                                                            'RTPrintf',
                                                                                            'RTCritSectEnter',
                                                                                            'RTCritSectLeave',
                                                                                            '??4RTCString@@QEAAAEAV0@AEBV0@@Z',
                                                                                            'RTUuidClear',
                                                                                            '??0RTCString@@QEAA@AEBV0@@Z',
                                                                                            'g_pStdErr',
                                                                                            'RTStrmPrintf',
                                                                                            'RTStrAPrintfVTag',
                                                                                            'RTLogRelDefaultInstance',
                                                                                            'RTLogLoggerEx',
                                                                                            'RTStrFree',
                                                                                            'ASMAtomicXchgU8',
                                                                                            '??MRTCString@@QEBA_NAEBV0@@Z',
                                                                                            'RTUtf16Cmp',
                                                                                            'RTUtf16LocaleICmp',
                                                                                            'RTCritSectRwIsWriteOwner',
                                                                                            'RTCritSectRwEnterExcl',
                                                                                            'RTCritSectRwLeaveExcl',
                                                                                            'RTCritSectRwEnterShared',
                                                                                            'RTCritSectRwLeaveShared',
                                                                                            'RTStrToUInt32',
                                                                                            'RTMemFree',
                                                                                            'RTMemAllocTag',
                                                                                            'RTStrICmp',
                                                                                            'RTTimeProgramMilliTS',
                                                                                            'RTSystemQueryAvailableRam',
                                                                                            'RTCritSectRwDelete',
                                                                                            'RTCritSectRwInitEx',
                                                                                            'RTThreadNativeSelf',
                                                                                            'RTCritSectRwGetWriteRecursion',
                                                                                            '?compare@RTCString@@QEBAHAEBV1@W4CaseSensitivity@1@@Z',
                                                                                            '??1RTCString@@UEAA@XZ',
                                                                                            'RTStrToUtf16ExTag',
                                                                                            'RTStrNLen',
                                                                                            'RTStrCalcUtf16LenEx',
                                                                                            '?jolt@RTCString@@QEAAXXZ',
                                                                                            'RTPathStripTrailingSlash',
                                                                                            'RTPathStripFilename',
                                                                                            'RTPathFilename',
                                                                                            'RTPathStripExt',
                                                                                            'RTUtf16Len',
                                                                                            'RTUtf16ToUtf8ExTag',
                                                                                            'RTStrAllocTag',
                                                                                            'RTErrConvertFromWin32',
                                                                                            'RTUuidIsNull',
                                                                                            'RTUuidFromUtf16',
                                                                                            '?printfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z',
                                                                                            'RTMemReallocTag',
                                                                                            '??H@YA?BVRTCString@@AEBV0@PEBD@Z',
                                                                                            'RTThreadSelf',
                                                                                            'RTPathAppend',
                                                                                            'RTPathUserHome',
                                                                                            'RTStrCopy',
                                                                                            'RTPathStartsWithRoot',
                                                                                            'RTDirCreateFullPath',
                                                                                            'RTDirExists',
                                                                                            'RTPathAbs',
                                                                                            'RTEnvGetEx',
                                                                                            'RTProcSelf',
                                                                                            'RTProcGetExecutablePath',
                                                                                            'RTSystemQueryTotalRam',
                                                                                            'RTSystemQueryDmiString',
                                                                                            'RTSystemQueryOSInfo',
                                                                                            'RTBldCfgRevision',
                                                                                            'RTBldCfgTargetDotArch',
                                                                                            'RTLogSetBuffering',
                                                                                            'RTTimeSpecToString',
                                                                                            'RTTimeNow',
                                                                                            'RTLogRelSetDefaultInstance',
                                                                                            'RTLogFlush',
                                                                                            'RTLogSetGroupLimit',
                                                                                            'RTLogCreateEx',
                                                                                            'RTCritSectInitEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'lstrcmpiW',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThread',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'lstrlenW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 245,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 11776,
                                                                                       '.rdata\x00\x00': 79360,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 139264},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/841b14bbd4482c0f38c407b62bd27cace388eab46b1d639f028f1d193608fe35'},
 '84732ec6907a12d36853c2466a254b86e7cbd06c3348b7b0bf5d8f8cfebe83a3': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 638384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'Qt5Core.dll': '_ZrsR11QDataStreamR7QString',
                                                                                      'Qt5Gui.dll': '_ZThn8_NK7QWindow6formatEv',
                                                                                      'Qt5Network.dll': '_ZN12QLocalSocketD1Ev',
                                                                                      'Qt5Qml.dll': '_ZN11QQmlPrivate30qdeclarativeelement_destructorEP7QObject',
                                                                                      'Qt5Quick.dll': '_ZNK12QQuickWindow14accessibleRootEv',
                                                                                      'Qt5Widgets.dll': '_ZThn8_NK7QWidget7devTypeEv',
                                                                                      'Qt5Xml.dll': '_ZNK8QDomNode9toElementEv',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'VBoxApi.dll': 'VB_AddSharedFolder',
                                                                                      'libgcc_s_dw2-1.dll': '__register_frame_info',
                                                                                      'libstdc++-6.dll': '__gxx_personality_v0',
                                                                                      'msvcr100.dll': 'vfprintf',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['VB_InitEx',
                                                                                            'VB_GetMachineState',
                                                                                            'VB_StopMachine',
                                                                                            'VB_RemoveMachine',
                                                                                            'VB_ImportMachine',
                                                                                            'VB_CloneVM',
                                                                                            'VB_SetExtraDataFromKey',
                                                                                            'VB_SetGuestPropertyFromKey',
                                                                                            'VB_SetGuestProperty',
                                                                                            'VB_SetCpuNum',
                                                                                            'VB_SetBaseMemory',
                                                                                            'VB_StartMachine',
                                                                                            'VB_RemoveHardDisk',
                                                                                            'VB_GetTaskResult',
                                                                                            'VB_CheckVT',
                                                                                            'VB_ExportHD',
                                                                                            'VB_ExportHDEx',
                                                                                            'VB_ImportHD',
                                                                                            'VB_UpdateVMCfg',
                                                                                            'VB_RegsiterBaseVM',
                                                                                            'VB_ImportMachineEx',
                                                                                            'VB_GetALLVMsCount',
                                                                                            'VB_CreateVMInfoArray',
                                                                                            'VB_ListALLVMs',
                                                                                            'VB_DestroyVMInfoArray',
                                                                                            'VB_GetRunningVMsCount',
                                                                                            'VB_ListRunningVMs',
                                                                                            'VB_AddSharedFolder',
                                                                                            '_Z21qRegisterResourceDataiPKhS0_S0_',
                                                                                            '_Z22qInstallMessageHandlerPFv9QtMsgTypeRK18QMessageLogContextRK7QStringE',
                                                                                            '_Z23qUnregisterResourceDataiPKhS0_S0_',
                                                                                            '_Z4endlR11QTextStream',
                                                                                            '_Z9qBadAllocv',
                                                                                            '_ZN10QArrayData10deallocateEPS_jj',
                                                                                            '_ZN10QArrayData11shared_nullE',
                                                                                            '_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE',
                                                                                            '_ZN10QByteArray6appendEPKc',
                                                                                            '_ZN10QByteArray6appendEc',
                                                                                            '_ZN10QByteArrayC1EPKci',
                                                                                            '_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE',
                                                                                            '_ZN10QEventLoopC1EP7QObject',
                                                                                            '_ZN10QEventLoopD1Ev',
                                                                                            '_ZN10QJsonValueD1Ev',
                                                                                            '_ZN10QTextCodec12codecForNameERK10QByteArray',
                                                                                            '_ZN11QDataStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN11QDataStreamC1EP9QIODevice',
                                                                                            '_ZN11QDataStreamD1Ev',
                                                                                            '_ZN11QDataStreamlsEi',
                                                                                            '_ZN11QDataStreamrsERi',
                                                                                            '_ZN11QFileDevice5closeEv',
                                                                                            '_ZN11QJsonObject6detachEj',
                                                                                            '_ZN11QJsonObjectD1Ev',
                                                                                            '_ZN11QMetaObject10ConnectionD1Ev',
                                                                                            '_ZN11QMetaObject14normalizedTypeEPKc',
                                                                                            '_ZN11QMetaObject18connectSlotsByNameEP7QObject',
                                                                                            '_ZN11QMetaObject8activateEP7QObjectPKS_iPPv',
                                                                                            '_ZN11QTextStream8setCodecEP10QTextCodec',
                                                                                            '_ZN11QTextStreamC1EP9QIODevice',
                                                                                            '_ZN11QTextStreamD1Ev',
                                                                                            '_ZN11QTextStreamlsEPKc',
                                                                                            '_ZN11QTextStreamlsERK10QByteArray',
                                                                                            '_ZN11QTextStreamlsERK7QString',
                                                                                            '_ZN11QTextStreamlsEc',
                                                                                            '_ZN11QTextStreamlsEf',
                                                                                            '_ZN11QTextStreamlsEi',
                                                                                            '_ZN11QTranslator4loadERK7QStringS2_S2_S2_',
                                                                                            '_ZN11QTranslatorC1EP7QObject',
                                                                                            '_ZN11QTranslatorD1Ev',
                                                                                            '_ZN12QMapDataBase10createDataEv',
                                                                                            '_ZN12QMapDataBase10createNodeEiiP12QMapNodeBaseb',
                                                                                            '_ZN12QMapDataBase11shared_nullE',
                                                                                            '_ZN12QMapDataBase18recalcMostLeftNodeEv',
                                                                                            '_ZN12QMapDataBase20freeNodeAndRebalanceEP12QMapNodeBase',
                                                                                            '_ZN12QMapDataBase8freeDataEPS_',
                                                                                            '_ZN12QMapDataBase8freeTreeEP12QMapNodeBasei',
                                                                                            '_ZN13QJsonDocument11fromVariantERK8QVariant',
                                                                                            '_ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError',
                                                                                            '_ZN13QJsonDocumentD1Ev',
                                                                                            '_ZN13QSharedMemory4dataEv',
                                                                                            '_ZN13QSharedMemory4lockEv',
                                                                                            '_ZN13QSharedMemory6attachENS_10AccessModeE',
                                                                                            '_ZN13QSharedMemory6createEiNS_10AccessModeE',
                                                                                            '_ZN13QSharedMemory6detachEv',
                                                                                            '_ZN13QSharedMemory6setKeyERK7QString',
                                                                                            '_ZN13QSharedMemory6unlockEv',
                                                                                            '_ZN13QSharedMemoryC1EP7QObject',
                                                                                            '_ZN13QSharedMemoryC1ERK7QStringP7QObject',
                                                                                            '_ZN13QSharedMemoryD1Ev',
                                                                                            '_ZN14QStandardPaths16writableLocationENS_16StandardLocationE',
                                                                                            '_ZN16QCoreApplication17installTranslatorEP11QTranslator',
                                                                                            '_ZN16QCoreApplication18applicationDirPathEv',
                                                                                            '_ZN16QCoreApplication9translateEPKcS1_S1_i',
                                                                                            '_ZN16QXmlStreamReader8readNextEv',
                                                                                            '_ZN16QXmlStreamReaderC1EP9QIODevice',
                                                                                            '_ZN16QXmlStreamReaderD1Ev',
                                                                                            '_ZN19QXmlStreamAttributeD1Ev',
                                                                                            '_ZN4QDir17removeRecursivelyEv',
                                                                                            '_ZN4QDir6drivesEv',
                                                                                            '_ZN4QDirC1ERK7QString',
                                                                                            '_ZN4QDirD1Ev',
                                                                                            '_ZN4QUrlC1ERK7QStringNS_11ParsingModeE',
                                                                                            '_ZN4QUrlD1Ev',
                                                                                            '_ZN5QFile4copyERK7QStringS2_',
                                                                                            '_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN5QFile6existsERK7QString',
                                                                                            '_ZN5QFile6removeERK7QString',
                                                                                            '_ZN5QFile6removeEv',
                                                                                            '_ZN5QFile6renameERK7QStringS2_',
                                                                                            '_ZN5QFileC1ERK7QString',
                                                                                            '_ZN5QFileD1Ev',
                                                                                            '_ZN6QDebugD1Ev',
                                                                                            '_ZN6QMutex4lockEv',
                                                                                            '_ZN6QMutex6unlockEv',
                                                                                            '_ZN6QMutexC1ENS_13RecursionModeE',
                                                                                            '_ZN6QMutexD1Ev',
                                                                                            '_ZN6QTimer4stopEv',
                                                                                            '_ZN7QBuffer4openE6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN7QBuffer7setDataERK10QByteArray',
                                                                                            '_ZN7QBufferC1EP7QObject',
                                                                                            '_ZN7QBufferD1Ev',
                                                                                            '_ZN7QLocale6systemEv',
                                                                                            '_ZN7QLocaleD1Ev',
                                                                                            '_ZN7QObject10childEventEP11QChildEvent',
                                                                                            '_ZN7QObject10timerEventEP11QTimerEvent',
                                                                                            '_ZN7QObject11customEventEP6QEvent',
                                                                                            '_ZN7QObject11deleteLaterEv',
                                                                                            '_ZN7QObject11eventFilterEPS_P6QEvent',
                                                                                            '_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QObject11qt_metacastEPKc',
                                                                                            '_ZN7QObject12moveToThreadEP7QThread',
                                                                                            '_ZN7QObject13connectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QObject13setObjectNameERK7QString',
                                                                                            '_ZN7QObject16disconnectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QObject16staticMetaObjectE',
                                                                                            '_ZN7QObject18installEventFilterEPS_',
                                                                                            '_ZN7QObject5eventEP6QEvent',
                                                                                            '_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE',
                                                                                            '_ZN7QObjectC2EPS_',
                                                                                            '_ZN7QObjectD2Ev',
                                                                                            '_ZN7QString10setUnicodeEPK5QChari',
                                                                                            '_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString15fromUtf8_helperEPKci',
                                                                                            '_ZN7QString16fromAscii_helperEPKci',
                                                                                            '_ZN7QString17fromLatin1_helperEPKci',
                                                                                            '_ZN7QString6appendERKS_',
                                                                                            '_ZN7QString6numberEdci',
                                                                                            '_ZN7QString6numberEii',
                                                                                            '_ZN7QString7replaceE5QCharS0_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString7replaceERKS_S1_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString9fromUtf16EPKti',
                                                                                            '_ZN7QStringaSERKS_',
                                                                                            '_ZN7QThread11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QThread11qt_metacastEPKc',
                                                                                            '_ZN7QThread16staticMetaObjectE',
                                                                                            '_ZN7QThread4execEv',
                                                                                            '_ZN7QThread4exitEi',
                                                                                            '_ZN7QThread5eventEP6QEvent',
                                                                                            '_ZN7QThread5sleepEm',
                                                                                            '_ZN7QThread5startENS_8PriorityE',
                                                                                            '_ZN7QThread6msleepEm',
                                                                                            '_ZN7QThreadC2EP7QObject',
                                                                                            '_ZN7QThreadD2Ev',
                                                                                            '_ZN8QProcess13startDetachedERK7QString',
                                                                                            '_ZN8QProcess15waitForFinishedEi',
                                                                                            '_ZN8QProcess21readAllStandardOutputEv',
                                                                                            '_ZN8QProcess5startERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN8QProcessC1EP7QObject',
                                                                                            '_ZN8QProcessD1Ev',
                                                                                            '_ZN8QSysInfo14windowsVersionEv',
                                                                                            '_ZN8QVariantC1EPKc',
                                                                                            '_ZN8QVariantC1ERK4QMapI7QStringS_E',
                                                                                            '_ZN8QVariantC1ERK5QSize',
                                                                                            '_ZN8QVariantC1ERK7QString',
                                                                                            '_ZN8QVariantC1ERKS_',
                                                                                            '_ZN8QVariantC1Eb',
                                                                                            '_ZN8QVariantC1Ei',
                                                                                            '_ZN8QVariantD1Ev',
                                                                                            '_ZN8QVariantaSERKS_',
                                                                                            '_ZN9QDateTime15currentDateTimeEv',
                                                                                            '_ZN9QDateTimeD1Ev',
                                                                                            '_ZN9QFileInfoC1ERKS_',
                                                                                            '_ZN9QFileInfoD1Ev',
                                                                                            '_ZN9QIODevice5writeEPKcx',
                                                                                            '_ZN9QIODevice7readAllEv',
                                                                                            '_ZN9QListData11detach_growEPii',
                                                                                            '_ZN9QListData11shared_nullE',
                                                                                            '_ZN9QListData6appendEv',
                                                                                            '_ZN9QListData6detachEi',
                                                                                            '_ZN9QListData6removeEi',
                                                                                            '_ZN9QListData7disposeEPNS_4DataE',
                                                                                            '_ZN9QMetaType22registerNormalizedTypeERK10QByteArrayPFvPvEPFS3_PKvES5_PFS3_S3_S7_Ei6QFlagsINS_8TypeFlagEEPK11QMetaObject',
                                                                                            '_ZN9QMetaType25registerNormalizedTypedefERK10QByteArrayi',
                                                                                            '_ZN9QMimeData7setDataERK7QStringRK10QByteArray',
                                                                                            '_ZN9QMimeDataC1Ev',
                                                                                            '_ZN9QResource16registerResourceERK7QStringS2_',
                                                                                            '_ZN9QSettings6removeERK7QString',
                                                                                            '_ZN9QSettings8setValueERK7QStringRK8QVariant',
                                                                                            '_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject',
                                                                                            '_ZN9QtPrivate20QStringList_containsEPK11QStringListRK7QStringN2Qt15CaseSensitivityE',
                                                                                            '_ZNK10QJsonValue8toStringERK7QString',
                                                                                            '_ZNK10QStringRef8toStringEv',
                                                                                            '_ZNK11QJsonObject4sizeEv',
                                                                                            '_ZNK11QJsonObject5keyAtEi',
                                                                                            '_ZNK11QMetaObject2trEPKcS1_i',
                                                                                            '_ZNK11QMetaObject9classNameEv',
                                                                                            '_ZNK11QObjectData17dynamicMetaObjectEv',
                                                                                            '_ZNK12QMapNodeBase8nextNodeEv',
                                                                                            '_ZNK13QJsonDocument6objectEv',
                                                                                            '_ZNK13QJsonDocument6toJsonEv',
                                                                                            '_ZNK13QJsonValueRef7toValueEv',
                                                                                            '_ZNK13QSharedMemory4sizeEv',
                                                                                            '_ZNK13QSharedMemory9constDataEv',
                                                                                            '_ZNK14QMessageLogger5debugEv',
                                                                                            '_ZNK16QXmlStreamReader10attributesEv',
                                                                                            '_ZNK16QXmlStreamReader4nameEv',
                                                                                            '_ZNK16QXmlStreamReader5atEndEv',
                                                                                            '_ZNK16QXmlStreamReader9tokenTypeEv',
                                                                                            '_ZNK20QXmlStreamAttributes5valueERK7QString',
                                                                                            '_ZNK4QDir6existsERK7QString',
                                                                                            '_ZNK4QDir6existsEv',
                                                                                            '_ZNK4QDir6mkpathERK7QString',
                                                                                            '_ZNK5QFile6existsEv',
                                                                                            '_ZNK7QBuffer4dataEv',
                                                                                            '_ZNK7QBuffer4sizeEv',
                                                                                            '_ZNK7QLocale4nameEv',
                                                                                            '_ZNK7QLocale8languageEv',
                                                                                            '_ZNK7QObject10objectNameEv',
                                                                                            '_ZNK7QObject6senderEv',
                                                                                            '_ZNK7QString10startsWithERKS_N2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString11lastIndexOfERKS_iN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString3argERKS_i5QChar',
                                                                                            '_ZNK7QString3argExii5QChar',
                                                                                            '_ZNK7QString4leftEi',
                                                                                            '_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString5toIntEPbi',
                                                                                            '_ZNK7QString6toLongEPbi',
                                                                                            '_ZNK7QString6toUtf8Ev',
                                                                                            '_ZNK7QString7compareERKS_N2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString7trimmedEv',
                                                                                            '_ZNK7QString8toLatin1Ev',
                                                                                            '_ZNK7QThread9isRunningEv',
                                                                                            '_ZNK8QProcess5errorEv',
                                                                                            '_ZNK8QProcess8exitCodeEv',
                                                                                            '_ZNK8QVariant3cmpERKS_',
                                                                                            '_ZNK8QVariant5toIntEPb',
                                                                                            '_ZNK8QVariant6toBoolEv',
                                                                                            '_ZNK8QVariant8toStringEv',
                                                                                            '_ZNK9QDateTime8toStringEN2Qt10DateFormatE',
                                                                                            '_ZNK9QDateTime8toStringERK7QString',
                                                                                            '_ZNK9QFileInfo12absolutePathEv',
                                                                                            '_ZNK9QIODevice11errorStringEv',
                                                                                            '_ZNK9QMimeData4dataERK7QString',
                                                                                            '_ZNK9QSettings5valueERK7QStringRK8QVariant',
                                                                                            '_ZeqRK7QStringS1_',
                                                                                            '_Zls6QDebugRK8QVariant',
                                                                                            '_ZlsR11QDataStreamRK7QString',
                                                                                            '_ZltRK7QStringS1_',
                                                                                            '_ZrsR11QDataStreamR7QString',
                                                                                            '_ZN10QDropEvent13setDropActionEN2Qt10DropActionE',
                                                                                            '_ZN15QGuiApplication13primaryScreenEv',
                                                                                            '_ZN15QGuiApplication21restoreOverrideCursorEv',
                                                                                            '_ZN16QDesktopServices7openUrlERK4QUrl',
                                                                                            '_ZN5QDrag10setHotSpotERK6QPoint',
                                                                                            '_ZN5QDrag11setMimeDataEP9QMimeData',
                                                                                            '_ZN5QDrag4execE6QFlagsIN2Qt10DropActionEES2_',
                                                                                            '_ZN5QDrag9setPixmapERK7QPixmap',
                                                                                            '_ZN5QDragC1EP7QObject',
                                                                                            '_ZN5QIconC1ERK7QString',
                                                                                            '_ZN5QIconC1Ev',
                                                                                            '_ZN5QIconD1Ev',
                                                                                            '_ZN6QBrushC1ERK7QPixmap',
                                                                                            '_ZN6QBrushD1Ev',
                                                                                            '_ZN6QColor6setRgbEiiii',
                                                                                            '_ZN6QMovie5startEv',
                                                                                            '_ZN6QMovieC1ERK7QStringRK10QByteArrayP7QObject',
                                                                                            '_ZN7QBitmapD1Ev',
                                                                                            '_ZN7QCursor3posEv',
                                                                                            '_ZN7QCursor8setShapeEN2Qt11CursorShapeE',
                                                                                            '_ZN7QCursorC1EN2Qt11CursorShapeE',
                                                                                            '_ZN7QCursorC1Ev',
                                                                                            '_ZN7QCursorD1Ev',
                                                                                            '_ZN7QPixmap4loadERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE',
                                                                                            '_ZN7QPixmap7setMaskERK7QBitmap',
                                                                                            '_ZN7QPixmapC1ERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE',
                                                                                            '_ZN7QPixmapC1Ev',
                                                                                            '_ZN7QPixmapD1Ev',
                                                                                            '_ZN7QWindow10touchEventEP11QTouchEvent',
                                                                                            '_ZN7QWindow11nativeEventERK10QByteArrayPvPl',
                                                                                            '_ZN7QWindow11tabletEventEP12QTabletEvent',
                                                                                            '_ZN7QWindow9moveEventEP10QMoveEvent',
                                                                                            '_ZN7QWindow9setCursorERK7QCursor',
                                                                                            '_ZN8QPainter10drawPixmapERK6QRectFRK7QPixmapS2_',
                                                                                            '_ZN8QPainterC1EP12QPaintDevice',
                                                                                            '_ZN8QPainterD1Ev',
                                                                                            '_ZN8QPalette8setBrushENS_10ColorGroupENS_9ColorRoleERK6QBrush',
                                                                                            '_ZN8QPaletteC1Ev',
                                                                                            '_ZN8QPaletteD1Ev',
                                                                                            '_ZNK7QPixmap19createMaskFromColorERK6QColorN2Qt8MaskModeE',
                                                                                            '_ZNK7QPixmap4maskEv',
                                                                                            '_ZNK7QPixmap4sizeEv',
                                                                                            '_ZNK7QPixmap5widthEv',
                                                                                            '_ZNK7QPixmap6heightEv',
                                                                                            '_ZNK7QScreen18logicalDotsPerInchEv',
                                                                                            '_ZNK7QScreen19logicalDotsPerInchXEv',
                                                                                            '_ZNK7QScreen19logicalDotsPerInchYEv',
                                                                                            '_ZNK7QScreen4sizeEv',
                                                                                            '_ZNK7QWindow11mapToGlobalERK6QPoint',
                                                                                            '_ZNK7QWindow11surfaceTypeEv',
                                                                                            '_ZNK7QWindow13surfaceHandleEv',
                                                                                            '_ZNK7QWindow6formatEv',
                                                                                            '_ZNK7QWindow6screenEv',
                                                                                            '_ZNK7QWindow8geometryEv',
                                                                                            '_ZThn8_NK7QWindow11surfaceTypeEv',
                                                                                            '_ZThn8_NK7QWindow13surfaceHandleEv',
                                                                                            '_ZThn8_NK7QWindow6formatEv',
                                                                                            '_ZN12QLocalServer6listenERK7QString',
                                                                                            '_ZN12QLocalServerC1EP7QObject',
                                                                                            '_ZN12QLocalSocket15connectToServerERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN12QLocalSocket16waitForConnectedEi',
                                                                                            '_ZN12QLocalSocket19waitForBytesWrittenEi',
                                                                                            '_ZN12QLocalSocket20disconnectFromServerEv',
                                                                                            '_ZN12QLocalSocketC1EP7QObject',
                                                                                            '_ZN12QLocalSocketD1Ev',
                                                                                            '_ZN10QQmlEngine13addImportPathERK7QString',
                                                                                            '_ZN11QQmlContext18setContextPropertyERK7QStringP7QObject',
                                                                                            '_ZN11QQmlPrivate11qmlregisterENS_16RegistrationTypeEPv',
                                                                                            '_ZN11QQmlPrivate30qdeclarativeelement_destructorEP7QObject',
                                                                                            '_ZN10QQuickView10timerEventEP11QTimerEvent',
                                                                                            '_ZN10QQuickView11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN10QQuickView11qt_metacastEPKc',
                                                                                            '_ZN10QQuickView11resizeEventEP12QResizeEvent',
                                                                                            '_ZN10QQuickView13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN10QQuickView13setResizeModeENS_10ResizeModeE',
                                                                                            '_ZN10QQuickView14mouseMoveEventEP11QMouseEvent',
                                                                                            '_ZN10QQuickView15keyReleaseEventEP9QKeyEvent',
                                                                                            '_ZN10QQuickView15mousePressEventEP11QMouseEvent',
                                                                                            '_ZN10QQuickView16staticMetaObjectE',
                                                                                            '_ZN10QQuickView17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN10QQuickView9setSourceERK4QUrl',
                                                                                            '_ZN10QQuickViewC2EP7QWindow',
                                                                                            '_ZN10QQuickViewD2Ev',
                                                                                            '_ZN12QQuickWindow10wheelEventEP11QWheelEvent',
                                                                                            '_ZN12QQuickWindow11exposeEventEP12QExposeEvent',
                                                                                            '_ZN12QQuickWindow12focusInEventEP11QFocusEvent',
                                                                                            '_ZN12QQuickWindow13focusOutEventEP11QFocusEvent',
                                                                                            '_ZN12QQuickWindow21mouseDoubleClickEventEP11QMouseEvent',
                                                                                            '_ZN12QQuickWindow5eventEP6QEvent',
                                                                                            '_ZN12QQuickWindow9hideEventEP10QHideEvent',
                                                                                            '_ZN12QQuickWindow9showEventEP10QShowEvent',
                                                                                            '_ZNK10QQuickView11rootContextEv',
                                                                                            '_ZNK10QQuickView6engineEv',
                                                                                            '_ZNK12QQuickWindow11focusObjectEv',
                                                                                            '_ZNK12QQuickWindow14accessibleRootEv',
                                                                                            '_ZN10QBoxLayout10addSpacingEi',
                                                                                            '_ZN10QBoxLayout10addStretchEi',
                                                                                            '_ZN10QBoxLayout10setSpacingEi',
                                                                                            '_ZN10QBoxLayout10setStretchEii',
                                                                                            '_ZN10QBoxLayout12insertWidgetEiP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN10QBoxLayout9addLayoutEP7QLayouti',
                                                                                            '_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN11QFileDialog15getOpenFileNameEP7QWidgetRK7QStringS4_S4_PS2_6QFlagsINS_6OptionEE',
                                                                                            '_ZN11QFileDialog15getSaveFileNameEP7QWidgetRK7QStringS4_S4_PS2_6QFlagsINS_6OptionEE',
                                                                                            '_ZN11QHBoxLayoutC1EP7QWidget',
                                                                                            '_ZN11QHBoxLayoutC1Ev',
                                                                                            '_ZN11QLayoutItem12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN11QLayoutItemD2Ev',
                                                                                            '_ZN11QListWidget10insertItemEiP15QListWidgetItem',
                                                                                            '_ZN11QListWidget11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN11QListWidget11qt_metacastEPKc',
                                                                                            '_ZN11QListWidget12dropMimeDataEiPK9QMimeDataN2Qt10DropActionE',
                                                                                            '_ZN11QListWidget12scrollToItemEPK15QListWidgetItemN17QAbstractItemView10ScrollHintE',
                                                                                            '_ZN11QListWidget13setItemWidgetEP15QListWidgetItemP7QWidget',
                                                                                            '_ZN11QListWidget16staticMetaObjectE',
                                                                                            '_ZN11QListWidget5eventEP6QEvent',
                                                                                            '_ZN11QListWidget8setModelEP18QAbstractItemModel',
                                                                                            '_ZN11QListWidget8takeItemEi',
                                                                                            '_ZN11QListWidgetC2EP7QWidget',
                                                                                            '_ZN11QListWidgetD2Ev',
                                                                                            '_ZN11QPushButton7setMenuEP5QMenu',
                                                                                            '_ZN11QPushButtonC1EP7QWidget',
                                                                                            '_ZN11QSizePolicy14setControlTypeENS_11ControlTypeE',
                                                                                            '_ZN11QSpacerItem10changeSizeEiiN11QSizePolicy6PolicyES1_',
                                                                                            '_ZN11QToolButtonC1EP7QWidget',
                                                                                            '_ZN11QVBoxLayoutC1EP7QWidget',
                                                                                            '_ZN11QVBoxLayoutC1Ev',
                                                                                            '_ZN12QApplication11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN12QApplication11qt_metacastEPKc',
                                                                                            '_ZN12QApplication13compressEventEP6QEventP7QObjectP14QPostEventList',
                                                                                            '_ZN12QApplication16staticMetaObjectE',
                                                                                            '_ZN12QApplication4execEv',
                                                                                            '_ZN12QApplication5eventEP6QEvent',
                                                                                            '_ZN12QApplication6notifyEP7QObjectP6QEvent',
                                                                                            '_ZN12QApplication7desktopEv',
                                                                                            '_ZN12QApplicationC2ERiPPci',
                                                                                            '_ZN12QApplicationD2Ev',
                                                                                            '_ZN12QProgressBar14setTextVisibleEb',
                                                                                            '_ZN12QProgressBar8setRangeEii',
                                                                                            '_ZN12QProgressBar8setValueEi',
                                                                                            '_ZN12QProgressBarC1EP7QWidget',
                                                                                            '_ZN14QStackedWidget9addWidgetEP7QWidget',
                                                                                            '_ZN14QStackedWidgetC1EP7QWidget',
                                                                                            '_ZN15QAbstractButton10setCheckedEb',
                                                                                            '_ZN15QAbstractButton7setDownEb',
                                                                                            '_ZN15QAbstractButton7setIconERK5QIcon',
                                                                                            '_ZN15QAbstractButton7setTextERK7QString',
                                                                                            '_ZN15QListWidgetItemC1EP11QListWidgeti',
                                                                                            '_ZN17QAbstractItemView10commitDataEP7QWidget',
                                                                                            '_ZN17QAbstractItemView11closeEditorEP7QWidgetN21QAbstractItemDelegate11EndEditHintE',
                                                                                            '_ZN17QAbstractItemView12focusInEventEP11QFocusEvent',
                                                                                            '_ZN17QAbstractItemView13focusOutEventEP11QFocusEvent',
                                                                                            '_ZN17QAbstractItemView13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN17QAbstractItemView13setAutoScrollEb',
                                                                                            '_ZN17QAbstractItemView13viewportEventEP6QEvent',
                                                                                            '_ZN17QAbstractItemView14dragEnterEventEP15QDragEnterEvent',
                                                                                            '_ZN17QAbstractItemView14keyboardSearchERK7QString',
                                                                                            '_ZN17QAbstractItemView15editorDestroyedEP7QObject',
                                                                                            '_ZN17QAbstractItemView16inputMethodEventEP17QInputMethodEvent',
                                                                                            '_ZN17QAbstractItemView16setSelectionModeENS_13SelectionModeE',
                                                                                            '_ZN17QAbstractItemView16updateEditorDataEv',
                                                                                            '_ZN17QAbstractItemView17setSelectionModelEP19QItemSelectionModel',
                                                                                            '_ZN17QAbstractItemView18focusNextPrevChildEb',
                                                                                            '_ZN17QAbstractItemView21mouseDoubleClickEventEP11QMouseEvent',
                                                                                            '_ZN17QAbstractItemView22updateEditorGeometriesEv',
                                                                                            '_ZN17QAbstractItemView23setAlternatingRowColorsEb',
                                                                                            '_ZN17QAbstractItemView23verticalScrollbarActionEi',
                                                                                            '_ZN17QAbstractItemView25horizontalScrollbarActionEi',
                                                                                            '_ZN17QAbstractItemView29verticalScrollbarValueChangedEi',
                                                                                            '_ZN17QAbstractItemView31horizontalScrollbarValueChangedEi',
                                                                                            '_ZN17QAbstractItemView4editERK11QModelIndexNS_11EditTriggerEP6QEvent',
                                                                                            '_ZN17QAbstractItemView9selectAllEv',
                                                                                            '_ZN19QAbstractScrollArea10wheelEventEP11QWheelEvent',
                                                                                            '_ZN19QAbstractScrollArea11eventFilterEP7QObjectP6QEvent',
                                                                                            '_ZN19QAbstractScrollArea13setupViewportEP7QWidget',
                                                                                            '_ZN19QAbstractScrollArea16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN19QAbstractScrollArea28setHorizontalScrollBarPolicyEN2Qt15ScrollBarPolicyE',
                                                                                            '_ZN5QMenuC1EP7QWidget',
                                                                                            '_ZN6QFrame11changeEventEP6QEvent',
                                                                                            '_ZN6QFrame13setFrameShapeENS_5ShapeE',
                                                                                            '_ZN6QFrame14setFrameShadowENS_6ShadowE',
                                                                                            '_ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN6QLabel11setWordWrapEb',
                                                                                            '_ZN6QLabel12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN6QLabel7setTextERK7QString',
                                                                                            '_ZN6QLabel8setMovieEP6QMovie',
                                                                                            '_ZN6QLabel9setPixmapERK7QPixmap',
                                                                                            '_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QAction7setTextERK7QString',
                                                                                            '_ZN7QActionC1ERK7QStringP7QObject',
                                                                                            '_ZN7QDialog10closeEventEP11QCloseEvent',
                                                                                            '_ZN7QDialog10setVisibleEb',
                                                                                            '_ZN7QDialog11eventFilterEP7QObjectP6QEvent',
                                                                                            '_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QDialog11qt_metacastEPKc',
                                                                                            '_ZN7QDialog11resizeEventEP12QResizeEvent',
                                                                                            '_ZN7QDialog13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN7QDialog16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN7QDialog16staticMetaObjectE',
                                                                                            '_ZN7QDialog4doneEi',
                                                                                            '_ZN7QDialog4execEv',
                                                                                            '_ZN7QDialog4openEv',
                                                                                            '_ZN7QDialog6acceptEv',
                                                                                            '_ZN7QDialog6rejectEv',
                                                                                            '_ZN7QDialog9showEventEP10QShowEvent',
                                                                                            '_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QDialogD2Ev',
                                                                                            '_ZN7QLayout12setAlignmentEP7QWidget6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN7QLayout18setContentsMarginsEiiii',
                                                                                            '_ZN7QWidget10closeEventEP11QCloseEvent',
                                                                                            '_ZN7QWidget10enterEventEP6QEvent',
                                                                                            '_ZN7QWidget10leaveEventEP6QEvent',
                                                                                            '_ZN7QWidget10paintEventEP11QPaintEvent',
                                                                                            '_ZN7QWidget10setPaletteERK8QPalette',
                                                                                            '_ZN7QWidget10setToolTipERK7QString',
                                                                                            '_ZN7QWidget10setVisibleEb',
                                                                                            '_ZN7QWidget10showNormalEv',
                                                                                            '_ZN7QWidget10wheelEventEP11QWheelEvent',
                                                                                            '_ZN7QWidget11actionEventEP12QActionEvent',
                                                                                            '_ZN7QWidget11changeEventEP6QEvent',
                                                                                            '_ZN7QWidget11nativeEventERK10QByteArrayPvPl',
                                                                                            '_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QWidget11qt_metacastEPKc',
                                                                                            '_ZN7QWidget11resizeEventEP12QResizeEvent',
                                                                                            '_ZN7QWidget11setBaseSizeEii',
                                                                                            '_ZN7QWidget11setGeometryERK5QRect',
                                                                                            '_ZN7QWidget11tabletEventEP12QTabletEvent',
                                                                                            '_ZN7QWidget12focusInEventEP11QFocusEvent',
                                                                                            '_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb',
                                                                                            '_ZN7QWidget12setFixedSizeERK5QSize',
                                                                                            '_ZN7QWidget12setFixedSizeEii',
                                                                                            '_ZN7QWidget13dragMoveEventEP14QDragMoveEvent',
                                                                                            '_ZN7QWidget13focusOutEventEP11QFocusEvent',
                                                                                            '_ZN7QWidget13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN7QWidget13setFixedWidthEi',
                                                                                            '_ZN7QWidget13setSizePolicyE11QSizePolicy',
                                                                                            '_ZN7QWidget13setStyleSheetERK7QString',
                                                                                            '_ZN7QWidget13setWindowIconERK5QIcon',
                                                                                            '_ZN7QWidget13showMinimizedEv',
                                                                                            '_ZN7QWidget14dragEnterEventEP15QDragEnterEvent',
                                                                                            '_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent',
                                                                                            '_ZN7QWidget14mouseMoveEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget14setAcceptDropsEb',
                                                                                            '_ZN7QWidget14setFixedHeightEi',
                                                                                            '_ZN7QWidget14setFocusPolicyEN2Qt11FocusPolicyE',
                                                                                            '_ZN7QWidget14setMaximumSizeEii',
                                                                                            '_ZN7QWidget14setMinimumSizeEii',
                                                                                            '_ZN7QWidget14setWindowFlagsE6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidget14setWindowStateE6QFlagsIN2Qt11WindowStateEE',
                                                                                            '_ZN7QWidget14setWindowTitleERK7QString',
                                                                                            '_ZN7QWidget15keyReleaseEventEP9QKeyEvent',
                                                                                            '_ZN7QWidget15mousePressEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN7QWidget16inputMethodEventEP17QInputMethodEvent',
                                                                                            '_ZN7QWidget16setSizeIncrementEii',
                                                                                            '_ZN7QWidget16setWindowOpacityEd',
                                                                                            '_ZN7QWidget16staticMetaObjectE',
                                                                                            '_ZN7QWidget17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget18focusNextPrevChildEb',
                                                                                            '_ZN7QWidget18setLayoutDirectionEN2Qt15LayoutDirectionE',
                                                                                            '_ZN7QWidget20setContextMenuPolicyEN2Qt17ContextMenuPolicyE',
                                                                                            '_ZN7QWidget21createWindowContainerEP7QWindowPS_6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget21setAutoFillBackgroundEb',
                                                                                            '_ZN7QWidget4grabERK5QRect',
                                                                                            '_ZN7QWidget4hideEv',
                                                                                            '_ZN7QWidget4moveERK6QPoint',
                                                                                            '_ZN7QWidget4showEv',
                                                                                            '_ZN7QWidget5closeEv',
                                                                                            '_ZN7QWidget5eventEP6QEvent',
                                                                                            '_ZN7QWidget6resizeERK5QSize',
                                                                                            '_ZN7QWidget7setMaskERK7QBitmap',
                                                                                            '_ZN7QWidget8setFocusEN2Qt11FocusReasonE',
                                                                                            '_ZN7QWidget9addActionEP7QAction',
                                                                                            '_ZN7QWidget9dropEventEP10QDropEvent',
                                                                                            '_ZN7QWidget9hideEventEP10QHideEvent',
                                                                                            '_ZN7QWidget9moveEventEP10QMoveEvent',
                                                                                            '_ZN7QWidget9setCursorERK7QCursor',
                                                                                            '_ZN7QWidget9setLayoutEP7QLayout',
                                                                                            '_ZN7QWidget9setParentEPS_',
                                                                                            '_ZN7QWidget9showEventEP10QShowEvent',
                                                                                            '_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidgetD2Ev',
                                                                                            '_ZN8QToolTip8showTextERK6QPointRK7QStringP7QWidgetRK5QRecti',
                                                                                            '_ZN9QCheckBoxC1EP7QWidget',
                                                                                            '_ZN9QComboBox10insertItemEiRK5QIconRK7QStringRK8QVariant',
                                                                                            '_ZN9QComboBox11setEditableEb',
                                                                                            '_ZN9QComboBox15setCurrentIndexEi',
                                                                                            '_ZN9QComboBox5clearEv',
                                                                                            '_ZN9QComboBox7setViewEP17QAbstractItemView',
                                                                                            '_ZN9QComboBoxC1EP7QWidget',
                                                                                            '_ZN9QLineEdit12setMaxLengthEi',
                                                                                            '_ZN9QLineEdit7setTextERK7QString',
                                                                                            '_ZN9QLineEditC1EP7QWidget',
                                                                                            '_ZN9QListView10moveCursorEN17QAbstractItemView12CursorActionE6QFlagsIN2Qt16KeyboardModifierEE',
                                                                                            '_ZN9QListView10paintEventEP11QPaintEvent',
                                                                                            '_ZN9QListView10timerEventEP11QTimerEvent',
                                                                                            '_ZN9QListView11dataChangedERK11QModelIndexS2_RK7QVectorIiE',
                                                                                            '_ZN9QListView11resizeEventEP12QResizeEvent',
                                                                                            '_ZN9QListView12rowsInsertedERK11QModelIndexii',
                                                                                            '_ZN9QListView12setRootIndexERK11QModelIndex',
                                                                                            '_ZN9QListView12setSelectionERK5QRect6QFlagsIN19QItemSelectionModel13SelectionFlagEE',
                                                                                            '_ZN9QListView13doItemsLayoutEv',
                                                                                            '_ZN9QListView13dragMoveEventEP14QDragMoveEvent',
                                                                                            '_ZN9QListView13setResizeModeENS_10ResizeModeE',
                                                                                            '_ZN9QListView14currentChangedERK11QModelIndexS2_',
                                                                                            '_ZN9QListView14mouseMoveEventEP11QMouseEvent',
                                                                                            '_ZN9QListView16scrollContentsByEii',
                                                                                            '_ZN9QListView16selectionChangedERK14QItemSelectionS2_',
                                                                                            '_ZN9QListView16updateGeometriesEv',
                                                                                            '_ZN9QListView17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN9QListView20rowsAboutToBeRemovedERK11QModelIndexii',
                                                                                            '_ZN9QListView5resetEv',
                                                                                            '_ZN9QListView8scrollToERK11QModelIndexN17QAbstractItemView10ScrollHintE',
                                                                                            '_ZN9QListView9startDragE6QFlagsIN2Qt10DropActionEE',
                                                                                            '_ZN9QListViewC1EP7QWidget',
                                                                                            '_ZNK11QListWidget10itemWidgetEP15QListWidgetItem',
                                                                                            '_ZNK11QListWidget20supportedDropActionsEv',
                                                                                            '_ZNK11QListWidget4itemEi',
                                                                                            '_ZNK11QListWidget5countEv',
                                                                                            '_ZNK11QListWidget8mimeDataE5QListIP15QListWidgetItemE',
                                                                                            '_ZNK11QListWidget9mimeTypesEv',
                                                                                            '_ZNK14QDesktopWidget14screenGeometryEi',
                                                                                            '_ZNK15QAbstractButton4textEv',
                                                                                            '_ZNK15QAbstractButton9isCheckedEv',
                                                                                            '_ZNK17QAbstractItemView14sizeHintForRowEi',
                                                                                            '_ZNK17QAbstractItemView16inputMethodQueryEN2Qt16InputMethodQueryE',
                                                                                            '_ZNK17QAbstractItemView16selectionCommandERK11QModelIndexPK6QEvent',
                                                                                            '_ZNK17QAbstractItemView17sizeHintForColumnEi',
                                                                                            '_ZNK19QAbstractScrollArea15minimumSizeHintEv',
                                                                                            '_ZNK19QAbstractScrollArea8sizeHintEv',
                                                                                            '_ZNK6QLabel4textEv',
                                                                                            '_ZNK7QDialog15minimumSizeHintEv',
                                                                                            '_ZNK7QDialog8sizeHintEv',
                                                                                            '_ZNK7QWidget10redirectedEP6QPoint',
                                                                                            '_ZNK7QWidget10sizePolicyEv',
                                                                                            '_ZNK7QWidget11initPainterEP8QPainter',
                                                                                            '_ZNK7QWidget11isMinimizedEv',
                                                                                            '_ZNK7QWidget11mapToGlobalERK6QPoint',
                                                                                            '_ZNK7QWidget11paintEngineEv',
                                                                                            '_ZNK7QWidget11windowStateEv',
                                                                                            '_ZNK7QWidget13mapFromGlobalERK6QPoint',
                                                                                            '_ZNK7QWidget13sharedPainterEv',
                                                                                            '_ZNK7QWidget14heightForWidthEi',
                                                                                            '_ZNK7QWidget15minimumSizeHintEv',
                                                                                            '_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE',
                                                                                            '_ZNK7QWidget17hasHeightForWidthEv',
                                                                                            '_ZNK7QWidget1xEv',
                                                                                            '_ZNK7QWidget1yEv',
                                                                                            '_ZNK7QWidget3posEv',
                                                                                            '_ZNK7QWidget5winIdEv',
                                                                                            '_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE',
                                                                                            '_ZNK7QWidget7devTypeEv',
                                                                                            '_ZNK7QWidget8sizeHintEv',
                                                                                            '_ZNK9QComboBox11currentTextEv',
                                                                                            '_ZNK9QComboBox12currentIndexEv',
                                                                                            '_ZNK9QComboBox5countEv',
                                                                                            '_ZNK9QLineEdit11displayTextEv',
                                                                                            '_ZNK9QLineEdit4textEv',
                                                                                            '_ZNK9QListView10visualRectERK11QModelIndex',
                                                                                            '_ZNK9QListView11viewOptionsEv',
                                                                                            '_ZNK9QListView13isIndexHiddenERK11QModelIndex',
                                                                                            '_ZNK9QListView14verticalOffsetEv',
                                                                                            '_ZNK9QListView15selectedIndexesEv',
                                                                                            '_ZNK9QListView16horizontalOffsetEv',
                                                                                            '_ZNK9QListView16viewportSizeHintEv',
                                                                                            '_ZNK9QListView24visualRegionForSelectionERK14QItemSelection',
                                                                                            '_ZNK9QListView7indexAtERK6QPoint',
                                                                                            '_ZTV11QSpacerItem',
                                                                                            '_ZThn8_NK7QWidget10redirectedEP6QPoint',
                                                                                            '_ZThn8_NK7QWidget11initPainterEP8QPainter',
                                                                                            '_ZThn8_NK7QWidget11paintEngineEv',
                                                                                            '_ZThn8_NK7QWidget13sharedPainterEv',
                                                                                            '_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE',
                                                                                            '_ZThn8_NK7QWidget7devTypeEv',
                                                                                            '_ZN11QDomElement12setAttributeERK7QStringS2_',
                                                                                            '_ZN11QDomElementC1Ev',
                                                                                            '_ZN11QDomElementaSERKS_',
                                                                                            '_ZN12QDomDocument10setContentEP9QIODeviceP7QStringPiS4_',
                                                                                            '_ZN12QDomDocument13createElementERK7QString',
                                                                                            '_ZN12QDomDocument27createProcessingInstructionERK7QStringS2_',
                                                                                            '_ZN12QDomDocumentC1Ev',
                                                                                            '_ZN12QDomDocumentD1Ev',
                                                                                            '_ZN12QDomNodeListD1Ev',
                                                                                            '_ZN25QDomProcessingInstructionC1Ev',
                                                                                            '_ZN25QDomProcessingInstructionaSERKS_',
                                                                                            '_ZN8QDomNode11appendChildERKS_',
                                                                                            '_ZN8QDomNode11removeChildERKS_',
                                                                                            '_ZN8QDomNode12insertBeforeERKS_S1_',
                                                                                            '_ZN8QDomNodeC1Ev',
                                                                                            '_ZN8QDomNodeD1Ev',
                                                                                            '_ZN8QDomNodeD2Ev',
                                                                                            '_ZN8QDomNodeaSERKS_',
                                                                                            '_ZNK11QDomElement7tagNameEv',
                                                                                            '_ZNK11QDomElement9attributeERK7QStringS2_',
                                                                                            '_ZNK12QDomDocument15documentElementEv',
                                                                                            '_ZNK12QDomDocument17elementsByTagNameERK7QString',
                                                                                            '_ZNK12QDomNodeList4itemEi',
                                                                                            '_ZNK12QDomNodeList6lengthEv',
                                                                                            '_ZNK8QDomNode10firstChildEv',
                                                                                            '_ZNK8QDomNode11nextSiblingEv',
                                                                                            '_ZNK8QDomNode4saveER11QTextStreamiNS_14EncodingPolicyE',
                                                                                            '_ZNK8QDomNode6isNullEv',
                                                                                            '_ZNK8QDomNode9cloneNodeEb',
                                                                                            '_ZNK8QDomNode9isElementEv',
                                                                                            '_ZNK8QDomNode9toElementEv',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            '_Unwind_Resume',
                                                                                            '__deregister_frame_info',
                                                                                            '__register_frame_info',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'OpenProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_set_invalid_parameter_handler',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'signal',
                                                                                            'strcmp',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'vfprintf',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'EnumProcessModules',
                                                                                            'GetModuleFileNameExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'AttachThreadInput',
                                                                                            'GetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SetFocus',
                                                                                            'SetForegroundWindow',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE12_M_leak_hardEv',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE12_S_constructEjwRKS1_',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE4_Rep10_M_destroyERKS1_',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE4_Rep10_M_disposeERKS1_',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE6assignERKS2_',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE6resizeEjw',
                                                                                            '_ZTVN10__cxxabiv117__class_type_infoE',
                                                                                            '_ZTVN10__cxxabiv120__si_class_type_infoE',
                                                                                            '_ZTVN10__cxxabiv121__vmi_class_type_infoE',
                                                                                            '_ZdaPv',
                                                                                            '_ZdlPv',
                                                                                            '_Znaj',
                                                                                            '_Znwj',
                                                                                            '__cxa_begin_catch',
                                                                                            '__cxa_end_catch',
                                                                                            '__cxa_guard_abort',
                                                                                            '__cxa_guard_acquire',
                                                                                            '__cxa_guard_release',
                                                                                            '__cxa_pure_virtual',
                                                                                            '__cxa_rethrow',
                                                                                            '__dynamic_cast',
                                                                                            '__gxx_personality_v0'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 764,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 411100,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 1024,
                                                                                       '.eh_fram': 39936,
                                                                                       '.idata\x00\x00': 37888,
                                                                                       '.rdata\x00\x00': 76288,
                                                                                       '.rsrc\x00\x00\x00': 411136,
                                                                                       '.text\x00\x00\x00': 501248,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/84732ec6907a12d36853c2466a254b86e7cbd06c3348b7b0bf5d8f8cfebe83a3'},
 '84b7b28db52ae454caba76b134895eb3244295cb3a45ec40acb9b5d653c96553': {'AddressOfEntryPoint': 18112,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'NETAPI32.dll': 'DsGetDcNameWithAccountW',
                                                                                      'NTDSAPI.dll': 'DsWriteAccountSpnW',
                                                                                      'SHLWAPI.dll': 'StrChrW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlInitUnicodeString'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            'memcpy',
                                                                                            '_wsetlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            'calloc',
                                                                                            '_wcsicmp',
                                                                                            'wcscpy_s',
                                                                                            'towupper',
                                                                                            'wcsncat_s',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            '_snwprintf_s',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            'wcschr',
                                                                                            'fwprintf',
                                                                                            'memset',
                                                                                            'NetApiBufferFree',
                                                                                            'DsGetDcNameWithAccountW',
                                                                                            'DsCrackNamesW',
                                                                                            'DsFreeNameResultW',
                                                                                            'DsUnBindW',
                                                                                            'DsBindW',
                                                                                            'DsWriteAccountSpnW',
                                                                                            'LoadStringW',
                                                                                            'StrCmpW',
                                                                                            'StrChrW',
                                                                                            'RtlInitUnicodeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 15872},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/84b7b28db52ae454caba76b134895eb3244295cb3a45ec40acb9b5d653c96553'},
 '84d3e95575939b88cfe57242b07b52662aaeea833ba2b67218ca498a0fe93ec0': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 128708,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 129024,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/84d3e95575939b88cfe57242b07b52662aaeea833ba2b67218ca498a0fe93ec0'},
 '84fe7824717bb55d7f32c7487e37012a1bc6cd4c8c0202be4bfb07e770f8dc51': {'AddressOfEntryPoint': 58120,
                                                                      'DebugRVA': 161248,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 159744,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'COMCTL32.dll': 'PropertySheetA',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableW',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'SetDlgItemTextA',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'FreeLibrary',
                                                                                            'SetStdHandle',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEndOfFile',
                                                                                            'CompareStringA',
                                                                                            'GetFileSize',
                                                                                            'GetLocaleInfoW',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'DeleteFileA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileA',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateDirectoryA',
                                                                                            'SetLastError',
                                                                                            'GetConsoleCP',
                                                                                            'SetHandleCount',
                                                                                            'FatalAppExitA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcessHeap',
                                                                                            'RtlUnwindEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileType',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'HeapReAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'TlsAlloc',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'WriteFile',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'wsprintfA',
                                                                                            'GetFocus',
                                                                                            'ShowWindow',
                                                                                            'SetCursor',
                                                                                            'GetDlgItem',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetParent',
                                                                                            'PostMessageA',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'MessageBoxA',
                                                                                            'UpdateWindow',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'CreateFontA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'TextOutA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateSolidBrush',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'ShellExecuteA',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 166,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 50688,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 154112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/84fe7824717bb55d7f32c7487e37012a1bc6cd4c8c0202be4bfb07e770f8dc51'},
 '851e5526ef294d3902d16ab9dc3de677501ddbbc5c1990b6a4c4483cc0a23ab8': {'AddressOfEntryPoint': 78334,
                                                                      'DebugRVA': 78132,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1592,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 73728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/851e5526ef294d3902d16ab9dc3de677501ddbbc5c1990b6a4c4483cc0a23ab8'},
 '852bffe953e3c9a19e9da3fd6fb97ac6365393afe090db9d044d54e315a9fe47': {'AddressOfEntryPoint': 6592,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'IsRectEmpty',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'ProcessIdToSessionId',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenMutexW',
                                                                                            'TerminateProcess',
                                                                                            'GetThreadDesktop',
                                                                                            'GetWindowRect',
                                                                                            'CreateDesktopW',
                                                                                            'CopyRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetSystemMetrics',
                                                                                            'CloseDesktop',
                                                                                            'MessageBoxW',
                                                                                            'EqualRect',
                                                                                            'SetThreadDesktop',
                                                                                            'SwitchDesktop',
                                                                                            'LoadStringW',
                                                                                            'GetWindowBand',
                                                                                            'MonitorFromWindow',
                                                                                            'IntersectRect',
                                                                                            'SetRect',
                                                                                            'GetForegroundWindow',
                                                                                            'IsRectEmpty',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcsstr',
                                                                                            '_except_handler4_common',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 62,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 88824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 89088,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/852bffe953e3c9a19e9da3fd6fb97ac6365393afe090db9d044d54e315a9fe47'},
 '854d97ef52be2ded031ecf2857f8361530b5a9136e1ff5b5090f9e723ad6e28f': {'AddressOfEntryPoint': 19184,
                                                                      'DebugRVA': 13312,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'msvcrt.dll': 'calloc',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['GetVersionExA',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'DeleteFileA',
                                                                                            'CloseHandle',
                                                                                            'VirtualAlloc',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'WriteFile',
                                                                                            'VirtualFree',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'CreateFileA',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'strtoul',
                                                                                            'memcmp',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            'memcpy',
                                                                                            'printf',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_vsnwprintf',
                                                                                            'iswprint',
                                                                                            'iswspace',
                                                                                            'getenv',
                                                                                            'calloc',
                                                                                            'NtSystemDebugControl',
                                                                                            'NtQuerySystemInformation',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 53,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2960,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/854d97ef52be2ded031ecf2857f8361530b5a9136e1ff5b5090f9e723ad6e28f'},
 '85723f259c824129052ad6190e5094f66f47b175a580e17b6095c7bffc8d90eb': {'AddressOfEntryPoint': 85248,
                                                                      'DebugRVA': 4288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AddUsersToEncryptedFileEx',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'COMDLG32.dll': 'CommDlgExtendedError',
                                                                                      'CRYPT32.dll': 'CertGetNameStringW',
                                                                                      'CRYPTUI.dll': 'CryptUIDlgViewCertificateW',
                                                                                      'EFSADU.dll': 'EfsUIUtilCheckScardStatus',
                                                                                      'EFSUTIL.dll': 'EfsUtilCheckCurrentKeyCapabilities',
                                                                                      'KERNEL32.dll': 'GetProcAddress',
                                                                                      'MPR.dll': 'WNetGetProviderNameW',
                                                                                      'NETAPI32.dll': 'DsRoleFreeMemory',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'UuidToStringW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'ScreenToClient',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlFreeHeap',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'CryptSetProvParam',
                                                                                            'SetUserFileEncryptionKeyEx',
                                                                                            'AddUsersToEncryptedFileEx',
                                                                                            'CreateThread',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetErrorMode',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'LocalReAlloc',
                                                                                            'CreateFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'TerminateProcess',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryW',
                                                                                            'CreateMutexW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetTickCount',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetParent',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'MessageBoxExW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetFocus',
                                                                                            'IsWindow',
                                                                                            'SetFocus',
                                                                                            'GetDlgItemTextW',
                                                                                            'InvalidateRect',
                                                                                            'GetMessagePos',
                                                                                            'LoadStringW',
                                                                                            'LoadIconW',
                                                                                            'PostMessageW',
                                                                                            'SendMessageW',
                                                                                            'MessageBoxW',
                                                                                            'DestroyIcon',
                                                                                            'ShowWindow',
                                                                                            'ScreenToClient',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            'strchr',
                                                                                            'memcmp',
                                                                                            '_initterm',
                                                                                            'memset',
                                                                                            'NtQueryInformationFile',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlRandomEx',
                                                                                            'RtlFreeHeap',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'DsRoleFreeMemory',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'UuidToStringW',
                                                                                            'CertSetCertificateContextProperty',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CertOpenStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertGetNameStringW',
                                                                                            'CryptUIDlgSelectCertificateW',
                                                                                            'CryptUIWizExport',
                                                                                            'CryptUIDlgViewCertificateW',
                                                                                            'PropertySheetW',
                                                                                            'GetSaveFileNameW',
                                                                                            'CommDlgExtendedError',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFolderPathW',
                                                                                            'EfsUIUtilEnrollEfsCertificateEx',
                                                                                            'EfsUIUtilCreateSelfSignedCertificate',
                                                                                            'EfsUIUtilPromptForPinDialog',
                                                                                            'EfsUIUtilCheckScardStatus',
                                                                                            'EfsUtilGetCertContextFromCertHash',
                                                                                            'EfsUtilGetCurrentKey',
                                                                                            'EfsUtilApplyGroupPolicy',
                                                                                            'EfsUtilGetSmartcardProviderName',
                                                                                            'EfsUtilGetCurrentUserInformation',
                                                                                            'EfsUtilCheckCurrentKeyCapabilities',
                                                                                            'WNetGetResourceInformationW',
                                                                                            'WNetGetProviderNameW',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 144,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 25128,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 25600,
                                                                                       '.text\x00\x00\x00': 83456},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/85723f259c824129052ad6190e5094f66f47b175a580e17b6095c7bffc8d90eb'},
 '8580b8c95af3f470ff19627e1d96ecc6f2b614026744f74b2338c2d1e19bc49d': {'AddressOfEntryPoint': 25024,
                                                                      'DebugRVA': 1306624,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 1428528,
                                                                      'ExportSize': 52,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 0,
                                                                      'ResSize': 20768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17920,
                                                                                       '.pdata\x00\x00': 37888,
                                                                                       '.rdata\x00\x00': 126464,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 20992,
                                                                                       '.text\x00\x00\x00': 1271808,
                                                                                       'PAGE\x00\x00\x00\x00': 6144,
                                                                                       'PAGER32C': 15872,
                                                                                       'PAGER32R': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8580b8c95af3f470ff19627e1d96ecc6f2b614026744f74b2338c2d1e19bc49d'},
 '85a43c95bc60213353be0960cc2947b8f458b6470c683fe18f35e0469c47d2d1': {'AddressOfEntryPoint': 178592,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 196608,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetUserDefaultUILanguage',
                                                                                      'msvcrt.dll': 'memmove',
                                                                                      'ntdll.dll': 'ZwQuerySystemInformation'},
                                                                      'ImportedFunctions': ['CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetLastError',
                                                                                            'QueryDosDeviceW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetVersionExW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'RtlCompareMemory',
                                                                                            'GetLastError',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'bsearch',
                                                                                            'wcsncmp',
                                                                                            '_snwscanf_s',
                                                                                            '_wcslwr',
                                                                                            '_wcsupr',
                                                                                            'wcsnlen',
                                                                                            'strncmp',
                                                                                            'wcsstr',
                                                                                            'wcsrchr',
                                                                                            'wcsncpy_s',
                                                                                            'wcscat_s',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_wsetlocale',
                                                                                            'towupper',
                                                                                            'iswspace',
                                                                                            '_vsnwprintf',
                                                                                            'swprintf_s',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            '_ultow_s',
                                                                                            '_ui64tow_s',
                                                                                            '_wcstoui64',
                                                                                            'wcstoul',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'memmove',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtClose',
                                                                                            'NtOpenFile',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlGUIDFromString',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'ZwOpenMutant',
                                                                                            'ZwReleaseMutant',
                                                                                            'ZwWaitForSingleObject',
                                                                                            'ZwClose',
                                                                                            'ZwOpenFile',
                                                                                            'RtlAllocateHeap',
                                                                                            'ZwQueryAttributesFile',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'ZwUnloadKey',
                                                                                            'ZwCreateKey',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlFreeSid',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'ZwDeleteValueKey',
                                                                                            'ZwSetValueKey',
                                                                                            'ZwSaveKey',
                                                                                            'ZwCreateFile',
                                                                                            'ZwQueryValueKey',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'ZwSetSecurityObject',
                                                                                            'RtlAddAccessAllowedAceEx',
                                                                                            'ZwLoadKey',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'ZwDeleteKey',
                                                                                            'ZwEnumerateKey',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'ZwQueryKey',
                                                                                            'ZwOpenKey',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlInitAnsiString',
                                                                                            'LdrGetProcedureAddress',
                                                                                            'LdrGetDllHandle',
                                                                                            'ZwQueryVolumeInformationFile',
                                                                                            'ZwDeleteFile',
                                                                                            'ZwQueryInformationFile',
                                                                                            'NtOpenProcessTokenEx',
                                                                                            'NtSetInformationThread',
                                                                                            'RtlImpersonateSelf',
                                                                                            'NtOpenThreadTokenEx',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'ZwCreateEvent',
                                                                                            'ZwQuerySymbolicLinkObject',
                                                                                            'ZwOpenSymbolicLinkObject',
                                                                                            'ZwDeviceIoControlFile',
                                                                                            'ZwResetEvent',
                                                                                            'NtQuerySystemInformation',
                                                                                            'ZwAllocateUuids',
                                                                                            'NtOpenKey',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtCreateEvent',
                                                                                            'NtQueryValueKey',
                                                                                            'NtSetValueKey',
                                                                                            'NtResetEvent',
                                                                                            'NtQueryBootEntryOrder',
                                                                                            'NtTranslateFilePath',
                                                                                            'NtCreateKey',
                                                                                            'NtEnumerateBootEntries',
                                                                                            'NtSetSecurityObject',
                                                                                            'NtDeleteKey',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'ZwQuerySystemInformation'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 164,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 150608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 151040,
                                                                                       '.text\x00\x00\x00': 183808},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/85a43c95bc60213353be0960cc2947b8f458b6470c683fe18f35e0469c47d2d1'},
 '85a7e92111f9fbb1f1898828462b08505c08f388001072cb786a63d6340a2071': {'AddressOfEntryPoint': 855163,
                                                                      'DebugRVA': 1293408,
                                                                      'DebugSize': 112,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1146880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'ReadConsoleW'},
                                                                      'ImportedFunctions': ['CreateFileW',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapDestroy',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'lstrcpynW',
                                                                                            'MulDiv',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadLibraryExW',
                                                                                            'DecodePointer',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'SetLastError',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetExitCodeThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'lstrlenW',
                                                                                            'GetVersionExW',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryW',
                                                                                            'GetDriveTypeW',
                                                                                            'CompareStringW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleFileNameW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'GlobalFree',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetTempFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileTime',
                                                                                            'CopyFileW',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'InterlockedExchange',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemInfo',
                                                                                            'WaitForMultipleObjects',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'LoadLibraryExA',
                                                                                            'GetShortPathNameW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CreateThread',
                                                                                            'FormatMessageW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentThread',
                                                                                            'GetFullPathNameW',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'SetEndOfFile',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLocalTime',
                                                                                            'TerminateThread',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'MoveFileW',
                                                                                            'ResetEvent',
                                                                                            'LocalAlloc',
                                                                                            'CompareFileTime',
                                                                                            'CopyFileExW',
                                                                                            'OpenEventW',
                                                                                            'PeekNamedPipe',
                                                                                            'EncodePointer',
                                                                                            'InitializeSListHead',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'FlushInstructionCache',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCPInfo',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LCMapStringW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlUnwind',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetFileType',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'SetFilePointerEx',
                                                                                            'FindFirstFileExW',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'ReadConsoleW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 163,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 88224,
                                                                      'SectionNames': {'.data\x00\x00\x00': 21504,
                                                                                       '.gfids\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 335872,
                                                                                       '.reloc\x00\x00': 84480,
                                                                                       '.rsrc\x00\x00\x00': 88576,
                                                                                       '.text\x00\x00\x00': 1142784,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/85a7e92111f9fbb1f1898828462b08505c08f388001072cb786a63d6340a2071'},
 '85cf29dfdda3166b0c3d8adadecf00833fc6aa251b0f2c628bff2e698f87d8ec': {'AddressOfEntryPoint': 168096,
                                                                      'DebugRVA': 5296,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 241664,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegFlushKey',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetEnvironmentStringsW',
                                                                                      'RPCRT4.dll': 'RpcMgmtWaitServerListen',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathCombineW',
                                                                                      'USER32.dll': 'EnumDisplayDevicesW',
                                                                                      'WINSTA.dll': 'WinStationGetConnectionProperty',
                                                                                      'WTSAPI32.dll': 'WTSQuerySessionInformationW',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventWrite',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'RegGetValueW',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetSidSubAuthority',
                                                                                            'OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'EventActivityIdControl',
                                                                                            'GetSidLengthRequired',
                                                                                            'InitializeSid',
                                                                                            'RegFlushKey',
                                                                                            'HeapSetInformation',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpW',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapCreate',
                                                                                            'HeapFree',
                                                                                            'VirtualFree',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetHandleCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStrings',
                                                                                            'CloseHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'OutputDebugStringA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExA',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'WriteConsoleW',
                                                                                            'HeapSize',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEvent',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LocalFree',
                                                                                            'RaiseException',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'ReleaseSemaphore',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'ResetEvent',
                                                                                            'OpenThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'CreateThread',
                                                                                            'SwitchToThread',
                                                                                            'GetProcessId',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'GetLastError',
                                                                                            'CreateMutexW',
                                                                                            'CompareStringW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'RtlUnwind',
                                                                                            'EtwEventActivityIdControl',
                                                                                            'NtQueryInformationProcess',
                                                                                            'WTSLogoffSession',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSDisconnectSession',
                                                                                            'WTSQuerySessionInformationW',
                                                                                            'WinStationFreePropertyValue',
                                                                                            'WinStationGetConnectionProperty',
                                                                                            'GetSystemMetrics',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PostThreadMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'GetIconInfo',
                                                                                            'DestroyWindow',
                                                                                            'SetTimer',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'LoadCursorW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'SendNotifyMessageW',
                                                                                            'UnionRect',
                                                                                            'IsWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SetPropW',
                                                                                            'FindWindowW',
                                                                                            'CopyIcon',
                                                                                            'DestroyIcon',
                                                                                            'PostMessageW',
                                                                                            'CopyImage',
                                                                                            'DefWindowProcW',
                                                                                            'KillTimer',
                                                                                            'PeekMessageW',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'AssocQueryKeyW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathUnquoteSpacesW',
                                                                                            'PathCombineW',
                                                                                            'SHCreateAssociationRegistration',
                                                                                            'ShellExecuteExW',
                                                                                            'CoTaskMemFree',
                                                                                            'RpcServerListen',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcServerInqBindingHandle',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcStringFreeW',
                                                                                            'NdrServerCall2',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcMgmtWaitServerListen',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetObjectW',
                                                                                            'CreateDCW',
                                                                                            'ExtEscape',
                                                                                            'DeleteObject'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 195,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5232,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 12288,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 220672},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/85cf29dfdda3166b0c3d8adadecf00833fc6aa251b0f2c628bff2e698f87d8ec'},
 '85daccce2a734a33d54849a046e8b1f1709c9fdd6e43c828c09e1f2d48eda22b': {'AddressOfEntryPoint': 206128,
                                                                      'DebugRVA': 5728,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'CreateCompatibleDC',
                                                                                      'KERNEL32.dll': 'ResetEvent',
                                                                                      'RPCRT4.dll': 'RpcBindingFree',
                                                                                      'SHELL32.dll': 'SHGetPropertyStoreForWindow',
                                                                                      'SHLWAPI.dll': 'PathUnquoteSpacesW',
                                                                                      'USER32.dll': 'GetWindowThreadProcessId',
                                                                                      'WINSTA.dll': 'WinStationVerify',
                                                                                      'WTSAPI32.dll': 'WTSQuerySessionInformationW',
                                                                                      'dwmapi.dll': 'DwmGetWindowAttribute',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventWrite',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'EventActivityIdControl',
                                                                                            'RegFlushKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCloseKey',
                                                                                            'ReadProcessMemory',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetSystemInfo',
                                                                                            'HeapAlloc',
                                                                                            'HeapCreate',
                                                                                            'GetCommandLineW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'ProcessIdToSessionId',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetVersionExW',
                                                                                            'GetOverlappedResult',
                                                                                            'CancelIo',
                                                                                            'ReadFileEx',
                                                                                            'QueueUserAPC',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'lstrcmpW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GetExitCodeProcess',
                                                                                            'OpenProcess',
                                                                                            'GetProcessId',
                                                                                            'OpenEventW',
                                                                                            'lstrcmpiW',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'OpenThread',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateMutexW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapFree',
                                                                                            'VirtualFree',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetHandleCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'OutputDebugStringA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExA',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'WriteConsoleW',
                                                                                            'HeapSize',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileA',
                                                                                            'FlushFileBuffers',
                                                                                            'CompareStringW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'LoadLibraryW',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'RaiseException',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleExW',
                                                                                            'InitializeCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'ResetEvent',
                                                                                            'RtlUnwind',
                                                                                            'EtwEventActivityIdControl',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlCopyLuid',
                                                                                            'NtClose',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenProcessToken',
                                                                                            'RtlMultiByteToUnicodeN',
                                                                                            'RtlPublishWnfStateData',
                                                                                            'NtQueryInformationProcess',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetPropertyStoreForWindow',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'WTSVirtualChannelClose',
                                                                                            'WTSLogoffSession',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSVirtualChannelQuery',
                                                                                            'WTSVirtualChannelOpen',
                                                                                            'WTSQuerySessionInformationW',
                                                                                            'WinStationVirtualOpenEx',
                                                                                            'WinStationQueryInformationW',
                                                                                            'WinStationFreePropertyValue',
                                                                                            'WinStationGetConnectionProperty',
                                                                                            'WinStationVerify',
                                                                                            'DispatchMessageW',
                                                                                            'SetForegroundWindow',
                                                                                            'SendInput',
                                                                                            'MapVirtualKeyW',
                                                                                            'UnregisterHotKey',
                                                                                            'RegisterHotKey',
                                                                                            'GetAsyncKeyState',
                                                                                            'LoadCursorW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'LoadStringW',
                                                                                            'LockWorkStation',
                                                                                            'SystemParametersInfoW',
                                                                                            'SwapMouseButton',
                                                                                            'SetWinEventHook',
                                                                                            'UnhookWinEvent',
                                                                                            'OpenInputDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'CloseDesktop',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'OpenDesktopW',
                                                                                            'SetThreadDesktop',
                                                                                            'GetAncestor',
                                                                                            'GetDesktopWindow',
                                                                                            'IsWindow',
                                                                                            'GetClassNameW',
                                                                                            'GetClientRect',
                                                                                            'GetWindow',
                                                                                            'EnumWindows',
                                                                                            'MessageBoxW',
                                                                                            'RedrawWindow',
                                                                                            'SendMessageTimeoutW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendNotifyMessageW',
                                                                                            'GetWindowRect',
                                                                                            'GetPropW',
                                                                                            'GetCursorPos',
                                                                                            'GetSystemMetrics',
                                                                                            'MoveWindow',
                                                                                            'GetClassLongW',
                                                                                            'GetGUIThreadInfo',
                                                                                            'EnumThreadWindows',
                                                                                            'GetForegroundWindow',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'CopyRect',
                                                                                            'GetWindowRgnBox',
                                                                                            'GetWindowRgn',
                                                                                            'GetWindowInfo',
                                                                                            'IntersectRect',
                                                                                            'EqualRect',
                                                                                            'OffsetRect',
                                                                                            'GetWindowPlacement',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'CopyImage',
                                                                                            'GetIconInfo',
                                                                                            'DestroyIcon',
                                                                                            'PostThreadMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageW',
                                                                                            'IsWindowVisible',
                                                                                            'PostMessageW',
                                                                                            'SetTaskmanWindow',
                                                                                            'GetTaskmanWindow',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetClassInfoExW',
                                                                                            'UnregisterClassW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetObjectW',
                                                                                            'CreateRectRgn',
                                                                                            'GetRegionData',
                                                                                            'DeleteObject',
                                                                                            'ExtEscape',
                                                                                            'CreateDCW',
                                                                                            'DeleteDC',
                                                                                            'GetDIBits',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'NdrClientCall2',
                                                                                            'RpcBindingFree',
                                                                                            'DwmGetWindowAttribute',
                                                                                            'PathUnquoteSpacesW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 251,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 6264,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.idata\x00\x00': 7680,
                                                                                       '.reloc\x00\x00': 18432,
                                                                                       '.rsrc\x00\x00\x00': 6656,
                                                                                       '.text\x00\x00\x00': 261632},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/85daccce2a734a33d54849a046e8b1f1709c9fdd6e43c828c09e1f2d48eda22b'},
 '867ee572e312a13e3badfea33326ff01d0439d2aa18323543ba4a94a4829bdfe': {'AddressOfEntryPoint': 15694,
                                                                      'DebugRVA': 15304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1584,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/867ee572e312a13e3badfea33326ff01d0439d2aa18323543ba4a94a4829bdfe'},
 '86c4b70a40b7251b74172aed2e53dade117a1dcb838497c5bcbe8532da193a11': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 243612,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'Qt5Core.dll': '_ZltRK7QStringS1_',
                                                                                      'Qt5Gui.dll': '_ZNK7QScreen4sizeEv',
                                                                                      'Qt5Network.dll': '_ZNK20QNetworkAddressEntry9broadcastEv',
                                                                                      'Qt5Widgets.dll': '_ZThn8_NK7QWidget7devTypeEv',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'libgcc_s_dw2-1.dll': '__register_frame_info',
                                                                                      'libstdc++-6.dll': '__gxx_personality_v0',
                                                                                      'msvcrt.dll': 'wcslen'},
                                                                      'ImportedFunctions': ['_Z22qInstallMessageHandlerPFv9QtMsgTypeRK18QMessageLogContextRK7QStringE',
                                                                                            '_Z4endlR11QTextStream',
                                                                                            '_ZN10QArrayData10deallocateEPS_jj',
                                                                                            '_ZN10QArrayData11shared_nullE',
                                                                                            '_ZN10QByteArray10fromBase64ERKS_',
                                                                                            '_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE',
                                                                                            '_ZN10QByteArray6appendERKS_',
                                                                                            '_ZN10QByteArrayC1EPKci',
                                                                                            '_ZN10QByteArrayaSERKS_',
                                                                                            '_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE',
                                                                                            '_ZN10QEventLoopC1EP7QObject',
                                                                                            '_ZN10QEventLoopD1Ev',
                                                                                            '_ZN10QJsonValueD1Ev',
                                                                                            '_ZN11QFileDevice5closeEv',
                                                                                            '_ZN11QJsonObject4takeERK7QString',
                                                                                            '_ZN11QJsonObjectD1Ev',
                                                                                            '_ZN11QMetaObject10ConnectionD1Ev',
                                                                                            '_ZN11QMetaObject18connectSlotsByNameEP7QObject',
                                                                                            '_ZN11QMetaObject8activateEP7QObjectPKS_iPPv',
                                                                                            '_ZN11QTextStreamC1EP9QIODevice',
                                                                                            '_ZN11QTextStreamD1Ev',
                                                                                            '_ZN11QTextStreamlsERK10QByteArray',
                                                                                            '_ZN11QTextStreamlsERK7QString',
                                                                                            '_ZN11QTextStreamlsEc',
                                                                                            '_ZN11QTextStreamlsEf',
                                                                                            '_ZN11QTextStreamlsEi',
                                                                                            '_ZN11QTextStreamlsEm',
                                                                                            '_ZN11QTranslator4loadERK7QStringS2_S2_S2_',
                                                                                            '_ZN11QTranslatorC1EP7QObject',
                                                                                            '_ZN12QMapDataBase10createDataEv',
                                                                                            '_ZN12QMapDataBase10createNodeEiiP12QMapNodeBaseb',
                                                                                            '_ZN12QMapDataBase11shared_nullE',
                                                                                            '_ZN12QMapDataBase18recalcMostLeftNodeEv',
                                                                                            '_ZN12QMapDataBase20freeNodeAndRebalanceEP12QMapNodeBase',
                                                                                            '_ZN12QMapDataBase8freeDataEPS_',
                                                                                            '_ZN12QMapDataBase8freeTreeEP12QMapNodeBasei',
                                                                                            '_ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError',
                                                                                            '_ZN13QJsonDocumentD1Ev',
                                                                                            '_ZN13QSharedMemory6attachENS_10AccessModeE',
                                                                                            '_ZN13QSharedMemory6createEiNS_10AccessModeE',
                                                                                            '_ZN13QSharedMemory6detachEv',
                                                                                            '_ZN13QSharedMemoryC1ERK7QStringP7QObject',
                                                                                            '_ZN14QStandardPaths16writableLocationENS_16StandardLocationE',
                                                                                            '_ZN16QCoreApplication17installTranslatorEP11QTranslator',
                                                                                            '_ZN16QCoreApplication18applicationDirPathEv',
                                                                                            '_ZN16QCoreApplication4quitEv',
                                                                                            '_ZN16QCoreApplication9translateEPKcS1_S1_i',
                                                                                            '_ZN16QXmlStreamReader8readNextEv',
                                                                                            '_ZN16QXmlStreamReaderC1EP9QIODevice',
                                                                                            '_ZN16QXmlStreamReaderD1Ev',
                                                                                            '_ZN18QCryptographicHash7addDataERK10QByteArray',
                                                                                            '_ZN18QCryptographicHashC1ENS_9AlgorithmE',
                                                                                            '_ZN18QCryptographicHashD1Ev',
                                                                                            '_ZN19QXmlStreamAttributeD1Ev',
                                                                                            '_ZN4QDir11currentPathEv',
                                                                                            '_ZN4QDir17removeRecursivelyEv',
                                                                                            '_ZN4QDir9setFilterE6QFlagsINS_6FilterEE',
                                                                                            '_ZN4QDirC1ERK7QString',
                                                                                            '_ZN4QDirD1Ev',
                                                                                            '_ZN4QUrlC1ERK7QStringNS_11ParsingModeE',
                                                                                            '_ZN4QUrlD1Ev',
                                                                                            '_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN5QFile6removeEv',
                                                                                            '_ZN5QFileC1ERK7QString',
                                                                                            '_ZN5QFileD1Ev',
                                                                                            '_ZN6QDebugD1Ev',
                                                                                            '_ZN6QTimer10singleShotEiPK7QObjectPKc',
                                                                                            '_ZN7QLocale6systemEv',
                                                                                            '_ZN7QLocaleD1Ev',
                                                                                            '_ZN7QObject10childEventEP11QChildEvent',
                                                                                            '_ZN7QObject10timerEventEP11QTimerEvent',
                                                                                            '_ZN7QObject11customEventEP6QEvent',
                                                                                            '_ZN7QObject11deleteLaterEv',
                                                                                            '_ZN7QObject11eventFilterEPS_P6QEvent',
                                                                                            '_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QObject11qt_metacastEPKc',
                                                                                            '_ZN7QObject13connectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QObject13setObjectNameERK7QString',
                                                                                            '_ZN7QObject16disconnectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QObject16staticMetaObjectE',
                                                                                            '_ZN7QObject5eventEP6QEvent',
                                                                                            '_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE',
                                                                                            '_ZN7QObjectC2EPS_',
                                                                                            '_ZN7QObjectD2Ev',
                                                                                            '_ZN7QString10setUnicodeEPK5QChari',
                                                                                            '_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString15fromUtf8_helperEPKci',
                                                                                            '_ZN7QString16fromAscii_helperEPKci',
                                                                                            '_ZN7QString17fromLatin1_helperEPKci',
                                                                                            '_ZN7QString20fromLocal8Bit_helperEPKci',
                                                                                            '_ZN7QString6appendERKS_',
                                                                                            '_ZN7QString6numberEdci',
                                                                                            '_ZN7QString6numberEii',
                                                                                            '_ZN7QString6numberEli',
                                                                                            '_ZN7QString6numberExi',
                                                                                            '_ZN7QString6removeEii',
                                                                                            '_ZN7QString7replaceE5QCharS0_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString7replaceERKS_S1_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString9fromUtf16EPKti',
                                                                                            '_ZN7QStringaSERKS_',
                                                                                            '_ZN7QThread11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QThread11qt_metacastEPKc',
                                                                                            '_ZN7QThread16staticMetaObjectE',
                                                                                            '_ZN7QThread5eventEP6QEvent',
                                                                                            '_ZN7QThread5sleepEm',
                                                                                            '_ZN7QThread5startENS_8PriorityE',
                                                                                            '_ZN7QThread6usleepEm',
                                                                                            '_ZN7QThreadC2EP7QObject',
                                                                                            '_ZN7QThreadD2Ev',
                                                                                            '_ZN8QProcess13startDetachedERK7QStringRK11QStringList',
                                                                                            '_ZN8QProcess15waitForFinishedEi',
                                                                                            '_ZN8QProcess17systemEnvironmentEv',
                                                                                            '_ZN8QProcess21readAllStandardOutputEv',
                                                                                            '_ZN8QProcess5startERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN8QProcessC1EP7QObject',
                                                                                            '_ZN8QProcessD1Ev',
                                                                                            '_ZN8QSysInfo14windowsVersionEv',
                                                                                            '_ZN8QVariantC1EPKc',
                                                                                            '_ZN8QVariantC1ERK7QString',
                                                                                            '_ZN8QVariantC1ERKS_',
                                                                                            '_ZN8QVariantC1Ei',
                                                                                            '_ZN8QVariantD1Ev',
                                                                                            '_ZN8QVariantaSERKS_',
                                                                                            '_ZN9QDateTime15currentDateTimeEv',
                                                                                            '_ZN9QDateTime22currentMSecsSinceEpochEv',
                                                                                            '_ZN9QDateTimeC1Ev',
                                                                                            '_ZN9QDateTimeD1Ev',
                                                                                            '_ZN9QFileInfoC1ERK7QString',
                                                                                            '_ZN9QFileInfoC1ERKS_',
                                                                                            '_ZN9QFileInfoD1Ev',
                                                                                            '_ZN9QIODevice7readAllEv',
                                                                                            '_ZN9QListData11detach_growEPii',
                                                                                            '_ZN9QListData11shared_nullE',
                                                                                            '_ZN9QListData6appendERKS_',
                                                                                            '_ZN9QListData6appendEv',
                                                                                            '_ZN9QListData6detachEi',
                                                                                            '_ZN9QListData7disposeEPNS_4DataE',
                                                                                            '_ZN9QResource16registerResourceERK7QStringS2_',
                                                                                            '_ZN9QSettings10beginGroupERK7QString',
                                                                                            '_ZN9QSettings8endGroupEv',
                                                                                            '_ZN9QSettings8setValueERK7QStringRK8QVariant',
                                                                                            '_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject',
                                                                                            '_ZNK10QByteArray5toHexEv',
                                                                                            '_ZNK10QJsonValue4typeEv',
                                                                                            '_ZNK10QJsonValue8toStringERK7QString',
                                                                                            '_ZNK10QStringRef8toStringEv',
                                                                                            '_ZNK11QJsonObject8containsERK7QString',
                                                                                            '_ZNK11QMetaObject2trEPKcS1_i',
                                                                                            '_ZNK11QObjectData17dynamicMetaObjectEv',
                                                                                            '_ZNK12QMapNodeBase8nextNodeEv',
                                                                                            '_ZNK13QJsonDocument6objectEv',
                                                                                            '_ZNK13QJsonDocument8isObjectEv',
                                                                                            '_ZNK13QSharedMemory10isAttachedEv',
                                                                                            '_ZNK14QMessageLogger5debugEv',
                                                                                            '_ZNK14QMessageLogger7warningEv',
                                                                                            '_ZNK14QMessageLogger8criticalEv',
                                                                                            '_ZNK16QXmlStreamReader10attributesEv',
                                                                                            '_ZNK16QXmlStreamReader4nameEv',
                                                                                            '_ZNK16QXmlStreamReader5atEndEv',
                                                                                            '_ZNK16QXmlStreamReader9tokenTypeEv',
                                                                                            '_ZNK18QCryptographicHash6resultEv',
                                                                                            '_ZNK20QXmlStreamAttributes5valueERK7QString',
                                                                                            '_ZNK4QDir13entryInfoListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE',
                                                                                            '_ZNK4QDir6existsEv',
                                                                                            '_ZNK5QFile6existsEv',
                                                                                            '_ZNK7QLocale4nameEv',
                                                                                            '_ZNK7QLocale8languageEv',
                                                                                            '_ZNK7QObject10objectNameEv',
                                                                                            '_ZNK7QString3argERKS_i5QChar',
                                                                                            '_ZNK7QString4leftEi',
                                                                                            '_ZNK7QString5utf16Ev',
                                                                                            '_ZNK7QString6toUtf8Ev',
                                                                                            '_ZNK7QString7compareERKS_N2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE',
                                                                                            '_ZNK8QProcess5errorEv',
                                                                                            '_ZNK8QProcess8exitCodeEv',
                                                                                            '_ZNK8QVariant5toIntEPb',
                                                                                            '_ZNK8QVariant8toStringEv',
                                                                                            '_ZNK9QDateTime17toMSecsSinceEpochEv',
                                                                                            '_ZNK9QDateTime8toStringERK7QString',
                                                                                            '_ZNK9QFileInfo13canonicalPathEv',
                                                                                            '_ZNK9QFileInfo16absoluteFilePathEv',
                                                                                            '_ZNK9QFileInfo5isDirEv',
                                                                                            '_ZNK9QFileInfo6existsEv',
                                                                                            '_ZNK9QFileInfo6isFileEv',
                                                                                            '_ZNK9QFileInfo7createdEv',
                                                                                            '_ZNK9QFileInfo8baseNameEv',
                                                                                            '_ZNK9QFileInfo8fileNameEv',
                                                                                            '_ZNK9QFileInfo8filePathEv',
                                                                                            '_ZNK9QFileInfo9isSymLinkEv',
                                                                                            '_ZNK9QIODevice11errorStringEv',
                                                                                            '_ZNK9QSettings5valueERK7QStringRK8QVariant',
                                                                                            '_ZNK9QSettings9childKeysEv',
                                                                                            '_ZeqRK7QStringS1_',
                                                                                            '_Zls6QDebugRK4QDir',
                                                                                            '_ZltRK7QStringS1_',
                                                                                            '_ZN15QGuiApplication13primaryScreenEv',
                                                                                            '_ZN16QDesktopServices7openUrlERK4QUrl',
                                                                                            '_ZN5QFont8setStyleENS_5StyleE',
                                                                                            '_ZN5QFont9setFamilyERK7QString',
                                                                                            '_ZN5QFont9setWeightEi',
                                                                                            '_ZN5QFontC1Ev',
                                                                                            '_ZN5QFontD1Ev',
                                                                                            '_ZN7QCursorC1EN2Qt11CursorShapeE',
                                                                                            '_ZN7QCursorD1Ev',
                                                                                            '_ZN7QPixmapC1ERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE',
                                                                                            '_ZN7QPixmapD1Ev',
                                                                                            '_ZNK7QPixmap4sizeEv',
                                                                                            '_ZNK7QScreen4sizeEv',
                                                                                            '_ZN12QHostAddressD1Ev',
                                                                                            '_ZN15QNetworkRequest9setHeaderENS_12KnownHeadersERK8QVariant',
                                                                                            '_ZN15QNetworkRequestC1ERK4QUrl',
                                                                                            '_ZN15QNetworkRequestD1Ev',
                                                                                            '_ZN17QNetworkInterface13allInterfacesEv',
                                                                                            '_ZN17QNetworkInterfaceC1ERKS_',
                                                                                            '_ZN17QNetworkInterfaceD1Ev',
                                                                                            '_ZN20QNetworkAddressEntryC1ERKS_',
                                                                                            '_ZN20QNetworkAddressEntryD1Ev',
                                                                                            '_ZN21QNetworkAccessManager3getERK15QNetworkRequest',
                                                                                            '_ZN21QNetworkAccessManager4postERK15QNetworkRequestRK10QByteArray',
                                                                                            '_ZN21QNetworkAccessManagerC1EP7QObject',
                                                                                            '_ZNK12QHostAddress6isNullEv',
                                                                                            '_ZNK12QHostAddress8protocolEv',
                                                                                            '_ZNK13QNetworkReply5errorEv',
                                                                                            '_ZNK17QNetworkInterface14addressEntriesEv',
                                                                                            '_ZNK17QNetworkInterface15hardwareAddressEv',
                                                                                            '_ZNK20QNetworkAddressEntry2ipEv',
                                                                                            '_ZNK20QNetworkAddressEntry7netmaskEv',
                                                                                            '_ZNK20QNetworkAddressEntry9broadcastEv',
                                                                                            '_ZN10QBoxLayout10addSpacingEi',
                                                                                            '_ZN10QBoxLayout9addLayoutEP7QLayouti',
                                                                                            '_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN11QHBoxLayoutC1Ev',
                                                                                            '_ZN11QPushButtonC1EP7QWidget',
                                                                                            '_ZN11QToolButtonC1EP7QWidget',
                                                                                            '_ZN11QVBoxLayoutC1Ev',
                                                                                            '_ZN12QApplication4execEv',
                                                                                            '_ZN12QApplicationC1ERiPPci',
                                                                                            '_ZN12QApplicationD1Ev',
                                                                                            '_ZN12QProgressBar14setTextVisibleEb',
                                                                                            '_ZN12QProgressBar8setValueEi',
                                                                                            '_ZN12QProgressBarC1EP7QWidget',
                                                                                            '_ZN15QAbstractButton10setCheckedEb',
                                                                                            '_ZN15QAbstractButton11setIconSizeERK5QSize',
                                                                                            '_ZN15QAbstractButton12setCheckableEb',
                                                                                            '_ZN15QAbstractButton7setTextERK7QString',
                                                                                            '_ZN6QLabel11setWordWrapEb',
                                                                                            '_ZN6QLabel12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN6QLabel7setTextERK7QString',
                                                                                            '_ZN6QLabel9setPixmapERK7QPixmap',
                                                                                            '_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidget10closeEventEP11QCloseEvent',
                                                                                            '_ZN7QWidget10enterEventEP6QEvent',
                                                                                            '_ZN7QWidget10leaveEventEP6QEvent',
                                                                                            '_ZN7QWidget10paintEventEP11QPaintEvent',
                                                                                            '_ZN7QWidget10setEnabledEb',
                                                                                            '_ZN7QWidget10setVisibleEb',
                                                                                            '_ZN7QWidget10wheelEventEP11QWheelEvent',
                                                                                            '_ZN7QWidget11actionEventEP12QActionEvent',
                                                                                            '_ZN7QWidget11changeEventEP6QEvent',
                                                                                            '_ZN7QWidget11nativeEventERK10QByteArrayPvPl',
                                                                                            '_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QWidget11qt_metacastEPKc',
                                                                                            '_ZN7QWidget11resizeEventEP12QResizeEvent',
                                                                                            '_ZN7QWidget11setGeometryERK5QRect',
                                                                                            '_ZN7QWidget11tabletEventEP12QTabletEvent',
                                                                                            '_ZN7QWidget12focusInEventEP11QFocusEvent',
                                                                                            '_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb',
                                                                                            '_ZN7QWidget12setFixedSizeERK5QSize',
                                                                                            '_ZN7QWidget12setFixedSizeEii',
                                                                                            '_ZN7QWidget13dragMoveEventEP14QDragMoveEvent',
                                                                                            '_ZN7QWidget13focusOutEventEP11QFocusEvent',
                                                                                            '_ZN7QWidget13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN7QWidget13setStyleSheetERK7QString',
                                                                                            '_ZN7QWidget13showMinimizedEv',
                                                                                            '_ZN7QWidget14dragEnterEventEP15QDragEnterEvent',
                                                                                            '_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent',
                                                                                            '_ZN7QWidget14mouseMoveEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget14setWindowFlagsE6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidget14setWindowTitleERK7QString',
                                                                                            '_ZN7QWidget15keyReleaseEventEP9QKeyEvent',
                                                                                            '_ZN7QWidget15mousePressEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN7QWidget16inputMethodEventEP17QInputMethodEvent',
                                                                                            '_ZN7QWidget16staticMetaObjectE',
                                                                                            '_ZN7QWidget17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget18focusNextPrevChildEb',
                                                                                            '_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget4hideEv',
                                                                                            '_ZN7QWidget4moveERK6QPoint',
                                                                                            '_ZN7QWidget4showEv',
                                                                                            '_ZN7QWidget5closeEv',
                                                                                            '_ZN7QWidget5eventEP6QEvent',
                                                                                            '_ZN7QWidget6resizeERK5QSize',
                                                                                            '_ZN7QWidget7setFontERK5QFont',
                                                                                            '_ZN7QWidget9dropEventEP10QDropEvent',
                                                                                            '_ZN7QWidget9hideEventEP10QHideEvent',
                                                                                            '_ZN7QWidget9moveEventEP10QMoveEvent',
                                                                                            '_ZN7QWidget9setCursorERK7QCursor',
                                                                                            '_ZN7QWidget9setLayoutEP7QLayout',
                                                                                            '_ZN7QWidget9showEventEP10QShowEvent',
                                                                                            '_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidgetD2Ev',
                                                                                            '_ZN9QCheckBoxC1EP7QWidget',
                                                                                            '_ZNK15QAbstractButton9isCheckedEv',
                                                                                            '_ZNK7QWidget10redirectedEP6QPoint',
                                                                                            '_ZNK7QWidget11initPainterEP8QPainter',
                                                                                            '_ZNK7QWidget11paintEngineEv',
                                                                                            '_ZNK7QWidget13frameGeometryEv',
                                                                                            '_ZNK7QWidget13sharedPainterEv',
                                                                                            '_ZNK7QWidget14heightForWidthEi',
                                                                                            '_ZNK7QWidget15minimumSizeHintEv',
                                                                                            '_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE',
                                                                                            '_ZNK7QWidget17hasHeightForWidthEv',
                                                                                            '_ZNK7QWidget1xEv',
                                                                                            '_ZNK7QWidget1yEv',
                                                                                            '_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE',
                                                                                            '_ZNK7QWidget7devTypeEv',
                                                                                            '_ZNK7QWidget8sizeHintEv',
                                                                                            '_ZThn8_NK7QWidget10redirectedEP6QPoint',
                                                                                            '_ZThn8_NK7QWidget11initPainterEP8QPainter',
                                                                                            '_ZThn8_NK7QWidget11paintEngineEv',
                                                                                            '_ZThn8_NK7QWidget13sharedPainterEv',
                                                                                            '_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE',
                                                                                            '_ZThn8_NK7QWidget7devTypeEv',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            '_Unwind_Resume',
                                                                                            '__deregister_frame_info',
                                                                                            '__register_frame_info',
                                                                                            'CloseHandle',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'OpenProcess',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'signal',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'strstr',
                                                                                            'time',
                                                                                            'vfprintf',
                                                                                            'wcscat',
                                                                                            'wcscmp',
                                                                                            'wcscpy',
                                                                                            'wcslen',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            '_ZTVN10__cxxabiv117__class_type_infoE',
                                                                                            '_ZTVN10__cxxabiv120__si_class_type_infoE',
                                                                                            '_ZTVN10__cxxabiv121__vmi_class_type_infoE',
                                                                                            '_ZdaPv',
                                                                                            '_ZdlPv',
                                                                                            '_Znaj',
                                                                                            '_Znwj',
                                                                                            '__cxa_begin_catch',
                                                                                            '__cxa_end_catch',
                                                                                            '__cxa_guard_abort',
                                                                                            '__cxa_guard_acquire',
                                                                                            '__cxa_guard_release',
                                                                                            '__cxa_rethrow',
                                                                                            '__gxx_personality_v0'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 422,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 155104,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.eh_fram': 12800,
                                                                                       '.idata\x00\x00': 19456,
                                                                                       '.rdata\x00\x00': 18432,
                                                                                       '.rsrc\x00\x00\x00': 155136,
                                                                                       '.text\x00\x00\x00': 188928,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/86c4b70a40b7251b74172aed2e53dade117a1dcb838497c5bcbe8532da193a11'},
 '86c8b86a80e911bb63d7a78b828bf45a02afb5c9ab271906720feeec7c24fe7d': {'AddressOfEntryPoint': 18478,
                                                                      'DebugRVA': 18248,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/86c8b86a80e911bb63d7a78b828bf45a02afb5c9ab271906720feeec7c24fe7d'},
 '86d8631c075400af09ecbfc531d64b187696d6aa277ad6d58e718e17ddcd4616': {'AddressOfEntryPoint': 15248,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSid',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'GDI32.dll': 'BitBlt',
                                                                                      'KERNEL32.dll': 'DelayLoadFailureHook',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'MsCtfMonitor.DLL': 'UninitLocalMsCtfMonitor',
                                                                                      'SspiCli.dll': 'LsaFreeReturnBuffer',
                                                                                      'USER32.dll': 'SetThreadDesktop',
                                                                                      'USERENV.dll': 'UnloadUserProfile',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSTA.dll': 'WinStationQueryInformationW',
                                                                                      'WMsgAPI.dll': 'WmsgSendMessage',
                                                                                      'WTSAPI32.dll': 'WTSFreeMemory',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetStartupInfoW',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-url-l1-1-0.dll': 'PathIsURLW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlSubAuthoritySid'},
                                                                      'ImportedFunctions': ['GetTokenInformation',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'RegGetValueW',
                                                                                            'RevertToSelf',
                                                                                            'EventSetInformation',
                                                                                            'MakeAbsoluteSD',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'EventRegister',
                                                                                            'GetSidSubAuthority',
                                                                                            'EventWriteTransfer',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidLengthRequired',
                                                                                            'InitializeSid',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetCurrentThreadId',
                                                                                            'ReleaseMutex',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'SetPriorityClass',
                                                                                            'CreateEventW',
                                                                                            'LocalFree',
                                                                                            'CreateFileW',
                                                                                            'GlobalFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateFileMappingW',
                                                                                            'Sleep',
                                                                                            'LoadLibraryW',
                                                                                            'GetTickCount',
                                                                                            'SetEvent',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetDriveTypeW',
                                                                                            'SetProcessPreferredUILanguages',
                                                                                            'CreateThread',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'QueueUserWorkItem',
                                                                                            'CloseHandle',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'LocalAlloc',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'ResumeThread',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetLayout',
                                                                                            'PatBlt',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBSection',
                                                                                            'SetDCBrushColor',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetStockObject',
                                                                                            'BitBlt',
                                                                                            'PostMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'FillRect',
                                                                                            'GetThreadDesktop',
                                                                                            'GetWindowDC',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'EndPaint',
                                                                                            'SendMessageW',
                                                                                            'ReleaseDC',
                                                                                            'LoadStringW',
                                                                                            'GetWindowBand',
                                                                                            'LoadCursorW',
                                                                                            'OpenInputDesktop',
                                                                                            'OpenDesktopW',
                                                                                            'DestroyIcon',
                                                                                            'CloseDesktop',
                                                                                            'BeginPaint',
                                                                                            'SetPropW',
                                                                                            'GetDC',
                                                                                            'GetSystemMetrics',
                                                                                            'TranslateMessage',
                                                                                            'GetForegroundWindow',
                                                                                            'SetDisplayAutoRotationPreferences',
                                                                                            'FlashWindowEx',
                                                                                            'GetWindowLongW',
                                                                                            'DestroyWindow',
                                                                                            'GetAncestor',
                                                                                            'LoadIconW',
                                                                                            'DispatchMessageW',
                                                                                            'GetShellWindow',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'DefWindowProcW',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetPropW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'MonitorFromWindow',
                                                                                            'SetWindowLongW',
                                                                                            'GetDesktopWindow',
                                                                                            'ShowWindow',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetThreadDesktop',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'swscanf_s',
                                                                                            '__C_specific_handler',
                                                                                            'wcsrchr',
                                                                                            '_acmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            '__getmainargs',
                                                                                            '_vsnwprintf',
                                                                                            '_errno',
                                                                                            '_wtoi',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'NtDuplicateObject',
                                                                                            'NtOpenProcess',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtReadVirtualMemory',
                                                                                            'EtwEventRegister',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'NtWriteVirtualMemory',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'RtlFreeHeap',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwSendNotification',
                                                                                            'EtwEventWrite',
                                                                                            'NtAllocateLocallyUniqueId',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtDuplicateToken',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlInitString',
                                                                                            'RtlEqualSid',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'LsaLogonUser',
                                                                                            'LsaDeregisterLogonProcess',
                                                                                            'LsaRegisterLogonProcess',
                                                                                            'LsaLookupAuthenticationPackage',
                                                                                            'GetUserNameExW',
                                                                                            'LsaCallAuthenticationPackage',
                                                                                            'SeciAllocateAndSetIPAddress',
                                                                                            'SeciAllocateAndSetCallFlags',
                                                                                            'SeciFreeCallContext',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoInitializeEx',
                                                                                            'CertFreeCertificateContext',
                                                                                            'LoadUserProfileW',
                                                                                            'UnloadUserProfile',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'PathIsURLW',
                                                                                            'AlphaBlend',
                                                                                            'WmsgSendMessage',
                                                                                            'WTSQuerySessionInformationW',
                                                                                            'WTSFreeMemory',
                                                                                            'PlaySoundW',
                                                                                            'WinStationQueryInformationW',
                                                                                            'InitLocalMsCtfMonitor',
                                                                                            'UninitLocalMsCtfMonitor'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 200,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 50680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 8704,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 50688,
                                                                                       '.text\x00\x00\x00': 45568,
                                                                                       'consent\x00': 512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/86d8631c075400af09ecbfc531d64b187696d6aa277ad6d58e718e17ddcd4616'},
 '871c76c41d39a54afb41f0f0ebecfae4384d718810468bdf2a4ff4ed06347f74': {'AddressOfEntryPoint': 2098964,
                                                                      'DebugRVA': 2472224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2465792,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'IPHLPAPI.DLL': 'GetIpForwardTable',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'MSVCP100.dll': '?_Xout_of_range@std@@YAXPEBD@Z',
                                                                                      'MSVCR100.dll': '_vswprintf',
                                                                                      'OLEAUT32.dll': 'RegisterTypeLib',
                                                                                      'POWRPROF.dll': 'CallNtPowerInformation',
                                                                                      'PSAPI.DLL': 'GetProcessMemoryInfo',
                                                                                      'SETUPAPI.dll': 'SetupCopyOEMInfW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'UnregisterClassW',
                                                                                      'VBoxDDU.dll': 'VDDestroy',
                                                                                      'VBoxRT.dll': 'SUPR3QueryVTCaps',
                                                                                      'WS2_32.dll': 'htonl',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesW',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['GetProcessMemoryInfo',
                                                                                            'CallNtPowerInformation',
                                                                                            '_wcsicmp',
                                                                                            '_wsplitpath',
                                                                                            'sprintf',
                                                                                            '_gmtime64',
                                                                                            'abort',
                                                                                            'fwrite',
                                                                                            'fflush',
                                                                                            'wcsrchr',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            '_open',
                                                                                            'strerror',
                                                                                            '_errno',
                                                                                            '_lseeki64',
                                                                                            '_write',
                                                                                            '_close',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            '_vsnprintf',
                                                                                            'longjmp',
                                                                                            'memmove_s',
                                                                                            '__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__clean_type_info_names_internal',
                                                                                            '?_name_internal_method@type_info@@QEBAPEBDPEAU__type_info_node@@@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'strncpy',
                                                                                            '_wcsnicmp',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__C_specific_handler',
                                                                                            '_recalloc',
                                                                                            'wcscat_s',
                                                                                            'wcsncpy_s',
                                                                                            'wcscpy_s',
                                                                                            'memcpy_s',
                                                                                            'malloc',
                                                                                            'wcsstr',
                                                                                            'strcspn',
                                                                                            'strrchr',
                                                                                            'strncmp',
                                                                                            'strpbrk',
                                                                                            '__RTtypeid',
                                                                                            '_purecall',
                                                                                            'strchr',
                                                                                            'memcmp',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'free',
                                                                                            'memset',
                                                                                            'memmove',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_setjmp',
                                                                                            'memcpy',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_vswprintf',
                                                                                            '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                            '??1_Container_base12@std@@QEAA@XZ',
                                                                                            '?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z',
                                                                                            '?_Xout_of_range@std@@YAXPEBD@Z',
                                                                                            'UpdateDriverForPlugAndPlayDevicesW',
                                                                                            'USBLibGetDevices',
                                                                                            'USBLibInterruptWaitChange',
                                                                                            'USBLibWaitChange',
                                                                                            'USBLibRunFilters',
                                                                                            'USBLibRemoveFilter',
                                                                                            'USBLibAddFilter',
                                                                                            'USBLibInit',
                                                                                            'USBLibTerm',
                                                                                            'USBFilterMatchDevice',
                                                                                            'USBFilterHasAnySubstatialCriteria',
                                                                                            'USBFilterClone',
                                                                                            'USBFilterSetFilterType',
                                                                                            'USBFilterGetFilterType',
                                                                                            'USBFilterGetMatchingMethod',
                                                                                            'USBFilterIsMethodNumeric',
                                                                                            'USBFilterGetNum',
                                                                                            'USBFilterIsMethodString',
                                                                                            'USBFilterGetString',
                                                                                            'USBFilterSetIgnore',
                                                                                            'USBFilterIsNumericField',
                                                                                            'USBFilterSetNumExpression',
                                                                                            'USBFilterSetStringPattern',
                                                                                            'VDShutdown',
                                                                                            'USBFilterInit',
                                                                                            'USBFilterSetNumExact',
                                                                                            'USBFilterSetStringExact',
                                                                                            'USBFilterMatch',
                                                                                            'VDBackendInfo',
                                                                                            'VDCopyEx',
                                                                                            'VDMerge',
                                                                                            'VDCreateBase',
                                                                                            'VDGetFormat',
                                                                                            'VDSetUuid',
                                                                                            'VDSetParentUuid',
                                                                                            'VDGetUuid',
                                                                                            'VDGetParentUuid',
                                                                                            'VDResize',
                                                                                            'VDCompact',
                                                                                            'VDCopy',
                                                                                            'VDCreateDiff',
                                                                                            'VDGetFileSize',
                                                                                            'VDGetSize',
                                                                                            'VDGetImageFlags',
                                                                                            'VDCreate',
                                                                                            'VDOpen',
                                                                                            'VDClose',
                                                                                            'VDIfCreateVfsStream',
                                                                                            'VDDestroy',
                                                                                            'RTSha256ToString',
                                                                                            'RTStrAllocExTag',
                                                                                            'RTSha256',
                                                                                            'RTManifestVerifyDigestType',
                                                                                            'RTFileExists',
                                                                                            'RTManifestVerifyFilesBuf',
                                                                                            'RTFileRename',
                                                                                            'RTPathHasExt',
                                                                                            'RTUuidFromStr',
                                                                                            'RTStrNICmp',
                                                                                            '?length@RTCString@@QEBA_KXZ',
                                                                                            '?append@RTCString@@QEAAAEAV1@D@Z',
                                                                                            'RTS3GetKey',
                                                                                            '??8RTCString@@QEBA_NAEBV0@@Z',
                                                                                            '??8RTCString@@QEBA_NPEBD@Z',
                                                                                            'RTStrToUInt32',
                                                                                            '??9RTCString@@QEBA_NAEBV0@@Z',
                                                                                            'RTStrToUInt64',
                                                                                            'RTTarSeekNextFile',
                                                                                            'ASMAtomicXchgU8',
                                                                                            'RTFileMove',
                                                                                            'RTFileSetSize',
                                                                                            'RTFileWriteAt',
                                                                                            'RTFileReadAt',
                                                                                            'RTFileFlush',
                                                                                            'RTTarFileOpen',
                                                                                            'RTTarFileOpenCurrentFile',
                                                                                            'RTTarFileClose',
                                                                                            'RTTarFileGetSize',
                                                                                            'RTTarFileSetSize',
                                                                                            'RTTarFileWriteAt',
                                                                                            'RTTarFileReadAt',
                                                                                            'RTCircBufReleaseReadBlock',
                                                                                            'RTCircBufAcquireReadBlock',
                                                                                            'RTCircBufUsed',
                                                                                            'RTCircBufReleaseWriteBlock',
                                                                                            'RTSha1Update',
                                                                                            'RTSha256Update',
                                                                                            'RTCircBufAcquireWriteBlock',
                                                                                            'RTCircBufFree',
                                                                                            'RTCircBufDestroy',
                                                                                            'RTThreadWait',
                                                                                            'RTSha1Init',
                                                                                            'RTSha256Init',
                                                                                            'RTCircBufCreate',
                                                                                            'RTSha1ToString',
                                                                                            'RTSha1Final',
                                                                                            'RTSha256Final',
                                                                                            'RTCircBufSize',
                                                                                            'RTCircBufIsWriting',
                                                                                            'RTVfsUtilPumpIoStreams',
                                                                                            'RTVfsIoStrmOpenNormal',
                                                                                            'RTUtf16Len',
                                                                                            'RTProcTerminate',
                                                                                            'RTProcCreate',
                                                                                            'RTProcGetExecutablePath',
                                                                                            'RTCidrStrToIPv4',
                                                                                            'RTNetStrToIPv4Addr',
                                                                                            'RTMpGetPresentCount',
                                                                                            'RTMpGetOnlineCount',
                                                                                            'RTMpGetPresentCoreCount',
                                                                                            'RTMpGetOnlineCoreCount',
                                                                                            'RTMpGetMaxFrequency',
                                                                                            'ASMCpuId_Idx_ECX',
                                                                                            'RTMpIsCpuPresent',
                                                                                            'RTMpIsCpuOnline',
                                                                                            'RTSystemQueryTotalRam',
                                                                                            'RTSystemQueryAvailableRam',
                                                                                            'RTTimeNow',
                                                                                            'RTFileOpen',
                                                                                            'SUPR3InitEx',
                                                                                            'RTMpGetDescription',
                                                                                            'RTSystemQueryOSInfo',
                                                                                            '??H@YA?BVRTCString@@AEBV0@PEBD@Z',
                                                                                            'SUPR3QueryVTxSupported',
                                                                                            'ASMBitFirstClear',
                                                                                            'RTPathHasPath',
                                                                                            'RTPathStartsWith',
                                                                                            'RTTimeExplode',
                                                                                            'RTPathAbs',
                                                                                            'RTEnvGetEx',
                                                                                            '?setNull@RTCString@@QEAAXXZ',
                                                                                            'RTDirExists',
                                                                                            '?s_pszPrevSuff@XmlFileWriter@xml@@2QEBDEB',
                                                                                            '?s_pszTmpSuff@XmlFileWriter@xml@@2QEBDEB',
                                                                                            'RTDirCreateFullPath',
                                                                                            'RTPathRename',
                                                                                            'RTPathChangeToDosSlashes',
                                                                                            'RTEnvDestroy',
                                                                                            'RTEnvPutEx',
                                                                                            'RTEnvUnsetEx',
                                                                                            'RTEnvSetEx',
                                                                                            'RTEnvClone',
                                                                                            'RTStrSimplePatternMultiMatch',
                                                                                            'RTBase64Decode',
                                                                                            'RTBase64DecodedSize',
                                                                                            'RTBase64Encode',
                                                                                            '?reserve@RTCString@@QEAAX_K@Z',
                                                                                            'RTBase64EncodedLength',
                                                                                            'RTFileQuerySize',
                                                                                            'RTFileCopyEx',
                                                                                            '?isEmpty@RTCString@@QEBA_NXZ',
                                                                                            'RTStrToUInt64Ex',
                                                                                            'RTStrToInt64Ex',
                                                                                            'RTTcpClientCloseEx',
                                                                                            'RTTcpClientConnect',
                                                                                            'RTTcpSelectOne',
                                                                                            'RTTcpRead',
                                                                                            'RTTcpWrite',
                                                                                            'RTTcpSgWrite',
                                                                                            'RTTcpFlush',
                                                                                            'RTTcpSetSendCoalescing',
                                                                                            'RTTcpGetLocalAddress',
                                                                                            'RTTcpGetPeerAddress',
                                                                                            'RTFsQuerySizes',
                                                                                            'RTFsQuerySerial',
                                                                                            'RTPathUserHome',
                                                                                            'RTLogGroupSettings',
                                                                                            'RTPathExecDir',
                                                                                            'RTPathStripTrailingSlash',
                                                                                            'RTS3DeleteKey',
                                                                                            'RTS3KeysDestroy',
                                                                                            'RTS3GetBucketKeys',
                                                                                            'RTS3BucketsDestroy',
                                                                                            'RTS3GetBuckets',
                                                                                            'RTStrPurgeComplementSet',
                                                                                            'RTRandBytes',
                                                                                            'RTThreadUserSignal',
                                                                                            'RTStrIsValidEncoding',
                                                                                            'RTErrConvertFromWin32',
                                                                                            'RTStrStr',
                                                                                            'ASMNopPause',
                                                                                            'RTThreadUserWait',
                                                                                            'SUPR3HardenedLdrLoadAppPriv',
                                                                                            '??1NodesLoop@xml@@QEAA@XZ',
                                                                                            '?copyValue@Node@xml@@QEBA_NAEA_K@Z',
                                                                                            '?copyValue@Node@xml@@QEBA_NAEAH@Z',
                                                                                            '?copyValue@Node@xml@@QEBA_NAEAI@Z',
                                                                                            '?forAllNodes@NodesLoop@xml@@QEBAPEBVElementNode@2@XZ',
                                                                                            '??0NodesLoop@xml@@QEAA@AEBVElementNode@1@PEBD@Z',
                                                                                            '?copyValue@Node@xml@@QEBA_NAEA_J@Z',
                                                                                            '??1LogicError@xml@@UEAA@XZ',
                                                                                            '?setWhat@RTCError@@QEAAXPEBD@Z',
                                                                                            '??0LogicError@xml@@QEAA@PEBD@Z',
                                                                                            '??0LogicError@xml@@QEAA@AEBV01@@Z',
                                                                                            '??0RTCError@@QEAA@AEBV0@@Z',
                                                                                            '?getLineNumber@Node@xml@@QEBAHXZ',
                                                                                            '?findChildElementFromId@ElementNode@xml@@QEBAPEBV12@PEBD@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEA_J0@Z',
                                                                                            '?toInt@RTCString@@QEBAHAEAI@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEA_K0@Z',
                                                                                            '?findAttribute@ElementNode@xml@@QEBAPEBVAttributeNode@2@PEBD0@Z',
                                                                                            '?getChildElements@ElementNode@xml@@QEBAHAEAV?$list@PEBVElementNode@xml@@V?$allocator@PEBVElementNode@xml@@@std@@@std@@PEBD@Z',
                                                                                            '?getNamespaceURI@Node@xml@@QEBAPEBDXZ',
                                                                                            '?nameEqualsNS@Node@xml@@QEBA_NPEBD0@Z',
                                                                                            'RTTimeImplode',
                                                                                            'RTTimeNormalize',
                                                                                            'RTStrToUInt32Ex',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEA_N0@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAH0@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBD_N@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBDI@Z',
                                                                                            'RTTarCurrentFile',
                                                                                            '?setAttributePath@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBDAEBVRTCString@@@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBDH@Z',
                                                                                            '??1XmlFileWriter@xml@@QEAA@XZ',
                                                                                            '?write@XmlFileWriter@xml@@QEAAXPEBD_N@Z',
                                                                                            '??0XmlFileWriter@xml@@QEAA@AEAVDocument@1@@Z',
                                                                                            '?setAttributeHex@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBDI@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBD_J@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBD_K@Z',
                                                                                            '??9RTCString@@QEBA_NPEBD@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDAEA_N0@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDAEAVRTCString@@0@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDAEAI0@Z',
                                                                                            '?findChildElement@ElementNode@xml@@QEBAPEBV12@PEBD@Z',
                                                                                            '?nameEquals@Node@xml@@QEBA_NPEBD@Z',
                                                                                            'RTStrStripL',
                                                                                            'RTThreadSleep',
                                                                                            'RTTimeNanoTS',
                                                                                            'RTTimerLRStop',
                                                                                            'RTTimerLRStart',
                                                                                            'RTTimerLRDestroy',
                                                                                            'RTTimerLRCreate',
                                                                                            'RTMpGetCurFrequency',
                                                                                            'RTMpCpuIdFromSetIndex',
                                                                                            'RTMpGetOnlineSet',
                                                                                            'RTSemEventWaitNoResume',
                                                                                            'RTUtf16Free',
                                                                                            'RTStrToUtf16Tag',
                                                                                            'RTBldCfgRevisionStr',
                                                                                            'RTMsgErrorExit',
                                                                                            'RTGetOptPrintError',
                                                                                            'RTGetOpt',
                                                                                            'RTGetOptInit',
                                                                                            'RTR3InitExe',
                                                                                            'RTErrConvertFromNtStatus',
                                                                                            'RTMpGetCount',
                                                                                            'RTLdrGetSystemSymbol',
                                                                                            'RTUuidCompareStr',
                                                                                            'RTMemPageAllocZTag',
                                                                                            'RTCrc32Start',
                                                                                            'RTMemPageFree',
                                                                                            'RTFileTell',
                                                                                            'RTFileQueryFsSizes',
                                                                                            'RTCrc32Process',
                                                                                            'RTCrc32Finish',
                                                                                            'RTCrc32',
                                                                                            'RTZipDecompDestroy',
                                                                                            'RTZipDecompress',
                                                                                            'RTZipDecompCreate',
                                                                                            'RTZipBlockDecompress',
                                                                                            'RTEnvExist',
                                                                                            'RTFileQueryInfo',
                                                                                            'RTVfsFileRelease',
                                                                                            'RTFileReadAllEx',
                                                                                            'RTFileReadAllFree',
                                                                                            'RTBldCfgVersion',
                                                                                            'RTBldCfgRevision',
                                                                                            'RTStrCmp',
                                                                                            'RTManifestEntryExists',
                                                                                            'RTVfsFsStrmNext',
                                                                                            'RTVfsObjRelease',
                                                                                            'RTVfsFsStrmRelease',
                                                                                            'RTVfsObjToIoStream',
                                                                                            'RTVfsIoStrmQueryInfo',
                                                                                            'RTMemAllocZTag',
                                                                                            'RTVfsIoStrmRead',
                                                                                            'RTVfsIoStrmRelease',
                                                                                            'RTPathQueryInfoEx',
                                                                                            '?printf@RTCString@@QEAAAEAV1@PEBDZZ',
                                                                                            'SUPR3HardenedVerifyDir',
                                                                                            'RTStrICmp',
                                                                                            'SUPR3HardenedVerifyPlugIn',
                                                                                            'SUPR3HardenedLdrLoadPlugIn',
                                                                                            'RTLdrGetSymbol',
                                                                                            'RTPathAppPrivateArch',
                                                                                            'RTPipeCreate',
                                                                                            'RTProcCreateEx',
                                                                                            'RTPipeClose',
                                                                                            'RTPipeReadBlocking',
                                                                                            'RTProcWait',
                                                                                            'RTStrStripR',
                                                                                            'RTStrCopy',
                                                                                            'RTBldCfgTargetDotArch',
                                                                                            'RTPathJoin',
                                                                                            'RTPathAppend',
                                                                                            'RTLdrGetSuff',
                                                                                            'RTStrCat',
                                                                                            'RTPathQueryInfo',
                                                                                            'RTBldCfgTargetArch',
                                                                                            'RTBldCfgCompiler',
                                                                                            'RTLdrClose',
                                                                                            'RTUuidFromUtf16',
                                                                                            'RTLogRelDefaultInstance',
                                                                                            'RTLogLoggerEx',
                                                                                            'RTTlsAlloc',
                                                                                            'RTTlsGet',
                                                                                            'RTTlsSet',
                                                                                            'RTThreadSelf',
                                                                                            'RTPathExists',
                                                                                            'RTPathReal',
                                                                                            'RTPathAbsEx',
                                                                                            'RTPathCompare',
                                                                                            '??4RTCString@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '??0RTCString@@QEAA@AEBV0@@Z',
                                                                                            '??0RTCString@@QEAA@PEBDPEAD@Z',
                                                                                            '?cleanup@RTCString@@IEAAXXZ',
                                                                                            'RTSemEventMultiDestroy',
                                                                                            'RTUuidToUtf16',
                                                                                            'RTSemEventMultiSignal',
                                                                                            'RTSemEventMultiWait',
                                                                                            'RTSemEventMultiCreate',
                                                                                            'RTSemEventMultiReset',
                                                                                            'RTUuidCreate',
                                                                                            'RTUuidClear',
                                                                                            'RTUuidIsNull',
                                                                                            '??_7RTCString@@6B@',
                                                                                            'RTStrFree',
                                                                                            'RTSha512',
                                                                                            'RTSha512ToString',
                                                                                            'RTAssertMsg1Weak',
                                                                                            'RTUuidCompare',
                                                                                            'RTUtf16Cmp',
                                                                                            'RTUtf16LocaleICmp',
                                                                                            'RTTarOpen',
                                                                                            'RTTarClose',
                                                                                            '??0XmlMemWriter@xml@@QEAA@XZ',
                                                                                            '?write@XmlMemWriter@xml@@QEAAXAEBVDocument@2@PEAPEAXPEA_K@Z',
                                                                                            '??1XmlMemWriter@xml@@QEAA@XZ',
                                                                                            'RTFileGetSize',
                                                                                            'RTFileRead',
                                                                                            'RTManifestWriteFilesBuf',
                                                                                            '?createRootElement@Document@xml@@QEAAPEAVElementNode@2@PEBD0@Z',
                                                                                            '?equals@RTCString@@QEBA_NAEBV1@@Z',
                                                                                            '?createChild@ElementNode@xml@@QEAAPEAV12@PEBD@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBD0@Z',
                                                                                            '?addContent@ElementNode@xml@@QEAAPEAVContentNode@2@PEBD@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBDAEBVRTCString@@@Z',
                                                                                            '?addContent@ElementNode@xml@@QEAAPEAVContentNode@2@AEBVRTCString@@@Z',
                                                                                            'RTStrToInt32',
                                                                                            'RTAssertMsg2Weak',
                                                                                            'RTAssertShouldPanic',
                                                                                            '??4RTCString@@QEAAAEAV0@PEBD@Z',
                                                                                            '??0RTCString@@QEAA@PEBD@Z',
                                                                                            '?startsWith@RTCString@@QEBA_NAEBV1@W4CaseSensitivity@1@@Z',
                                                                                            'RTSha512FromString',
                                                                                            'RTStrPrintf',
                                                                                            'RTCritSectDelete',
                                                                                            'RTCritSectInit',
                                                                                            'RTCritSectEnter',
                                                                                            'RTTimeMilliTS',
                                                                                            'RTCritSectLeave',
                                                                                            'RTSemEventCreate',
                                                                                            'RTSemEventWait',
                                                                                            'RTSemEventSignal',
                                                                                            'RTSemEventDestroy',
                                                                                            '?printfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z',
                                                                                            '??1RTCString@@UEAA@XZ',
                                                                                            '?c_str@RTCString@@QEBAPEBDXZ',
                                                                                            '?toInt@RTCString@@QEBAHAEA_K@Z',
                                                                                            'RTStrToInt32Ex',
                                                                                            'RTPathTemp',
                                                                                            'RTPathJoinA',
                                                                                            'RTDirCreateTemp',
                                                                                            'RTS3Create',
                                                                                            'RTS3SetProgressCallback',
                                                                                            'RTS3PutKey',
                                                                                            'RTS3Destroy',
                                                                                            'RTFileDelete',
                                                                                            'RTDirRemove',
                                                                                            '?compare@RTCString@@QEBAHPEBDW4CaseSensitivity@1@@Z',
                                                                                            '?endsWith@RTCString@@QEBA_NAEBV1@W4CaseSensitivity@1@@Z',
                                                                                            '?equals@RTCString@@QEBA_NPEBD@Z',
                                                                                            'RTUuidToStr',
                                                                                            '?compare@RTCString@@QEBAHAEBV1@W4CaseSensitivity@1@@Z',
                                                                                            'RTPathStripFilename',
                                                                                            'RTPathStripExt',
                                                                                            'RTPathExt',
                                                                                            'RTStrDupTag',
                                                                                            '?contains@RTCString@@QEBA_NAEBV1@W4CaseSensitivity@1@@Z',
                                                                                            '??MRTCString@@QEBA_NAEBV0@@Z',
                                                                                            'RTStrAPrintfVTag',
                                                                                            'RTManifestEntryAddIoStream',
                                                                                            'RTManifestRetain',
                                                                                            'RTVfsFileRetain',
                                                                                            'RTVfsFileQueryInfo',
                                                                                            'RTMemTmpAllocTag',
                                                                                            'RTVfsFileRead',
                                                                                            '??0XmlMemParser@xml@@QEAA@XZ',
                                                                                            '?read@XmlMemParser@xml@@QEAAXPEBX_KAEBVRTCString@@AEAVDocument@2@@Z',
                                                                                            '??1XmlMemParser@xml@@QEAA@XZ',
                                                                                            'RTMemTmpFree',
                                                                                            '??0Document@xml@@QEAA@XZ',
                                                                                            'RTLogCreateEx',
                                                                                            'RTLogSetGroupLimit',
                                                                                            'RTLogFlush',
                                                                                            'RTLogRelSetDefaultInstance',
                                                                                            'RTTimeSpecToString',
                                                                                            'RTLogSetBuffering',
                                                                                            'RTSystemQueryDmiString',
                                                                                            'RTProcSelf',
                                                                                            'RTStrAllocTag',
                                                                                            'RTUtf16ToUtf8ExTag',
                                                                                            '?jolt@RTCString@@QEAAXXZ',
                                                                                            'RTStrCalcUtf16LenEx',
                                                                                            'RTStrNLen',
                                                                                            'RTStrToUtf16ExTag',
                                                                                            'RTCritSectInitEx',
                                                                                            'RTCritSectRwGetWriteRecursion',
                                                                                            'RTCritSectRwLeaveShared',
                                                                                            'RTCritSectRwEnterShared',
                                                                                            'RTCritSectRwLeaveExcl',
                                                                                            'RTCritSectRwEnterExcl',
                                                                                            'RTMemAllocTag',
                                                                                            'RTMemFree',
                                                                                            'RTMemReallocTag',
                                                                                            '??0XmlFileParser@xml@@QEAA@XZ',
                                                                                            '?read@XmlFileParser@xml@@QEAAXAEBVRTCString@@AEAVDocument@2@@Z',
                                                                                            '??1XmlFileParser@xml@@QEAA@XZ',
                                                                                            '??1Document@xml@@QEAA@XZ',
                                                                                            '?what@RTCError@@UEBAPEBDXZ',
                                                                                            '??_7RTCError@@6B@',
                                                                                            '??1XmlError@xml@@UEAA@XZ',
                                                                                            '?getRootElement@Document@xml@@QEAAPEAVElementNode@2@XZ',
                                                                                            '?getName@Node@xml@@QEBAPEBDXZ',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAVRTCString@@0@Z',
                                                                                            '?findChildElementNS@ElementNode@xml@@QEBAPEBV12@PEBD0@Z',
                                                                                            '?getValue@Node@xml@@QEBAPEBDXZ',
                                                                                            '?append@RTCString@@QEAAAEAV1@PEBD@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAI0@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAPEBD0@Z',
                                                                                            '?append@RTCString@@QEAAAEAV1@AEBV1@@Z',
                                                                                            'RTFileSeek',
                                                                                            'RTVfsIoStrmFromRTFile',
                                                                                            'RTManifestEntryAddPassthruIoStream',
                                                                                            'RTZipGzipDecompressIoStream',
                                                                                            'RTZipTarFsStreamFromIoStream',
                                                                                            'RTPathStartsWithRoot',
                                                                                            'RTVfsObjQueryInfo',
                                                                                            'RTVfsMemorizeIoStreamAsFile',
                                                                                            'RTVfsIoStrmValidateUtf8Encoding',
                                                                                            'RTVfsObjFromFile',
                                                                                            'RTManifestEntryQueryAttr',
                                                                                            'RTSha256FromString',
                                                                                            'RTVfsFileSeek',
                                                                                            'RTManifestCreate',
                                                                                            'RTVfsFileToIoStream',
                                                                                            'RTManifestReadStandard',
                                                                                            'RTManifestEqualsEx',
                                                                                            'RTStrPrintfV',
                                                                                            '??0RTCString@@QEAA@PEBD_K@Z',
                                                                                            'RTPathAppPrivateArchTop',
                                                                                            'RTPathAppPrivateNoArch',
                                                                                            '??0RTCString@@QEAA@XZ',
                                                                                            'RTThreadCreate',
                                                                                            'RTDirOpen',
                                                                                            'RTPathFilename',
                                                                                            'RTDirReadEx',
                                                                                            'RTDirClose',
                                                                                            '?find@RTCString@@QEBA_KPEBD_K@Z',
                                                                                            '?npos@RTCString@@2_KB',
                                                                                            '?substr@RTCString@@QEBA?AV1@_K0@Z',
                                                                                            'RTFileClose',
                                                                                            '?toUpper@RTCString@@QEAAAEAV1@XZ',
                                                                                            'RTManifestRelease',
                                                                                            'RTThreadNativeSelf',
                                                                                            'RTCritSectRwInitEx',
                                                                                            'RTCritSectRwDelete',
                                                                                            'RTCritSectRwIsWriteOwner',
                                                                                            'SUPR3QueryVTCaps',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalFree',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThread',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetVersionExW',
                                                                                            'GetProcessTimes',
                                                                                            'ResetEvent',
                                                                                            'GetSystemPowerStatus',
                                                                                            'CreateFileW',
                                                                                            'CreateNamedPipeW',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'LoadLibraryExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'CreateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetDriveTypeW',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ConnectNamedPipe',
                                                                                            'lstrlenW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowPos',
                                                                                            'TranslateMessage',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'PostMessageW',
                                                                                            'MessageBoxW',
                                                                                            'GetMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'CharUpperW',
                                                                                            'CharNextW',
                                                                                            'PostThreadMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'CloseServiceHandle',
                                                                                            'StartServiceW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteExW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupUninstallOEMInfW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'SetupDiCreateDeviceInfoW',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupInitDefaultQueueCallback',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupDiDeleteDeviceInfo',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetClassDevsExW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'inet_ntoa',
                                                                                            'inet_addr',
                                                                                            'htonl',
                                                                                            'CoTaskMemFree',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'StringFromGUID2',
                                                                                            'CoResumeClassObjects',
                                                                                            'CLSIDFromString',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromIID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SysStringLen',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SafeArrayGetIID',
                                                                                            'GetErrorInfo',
                                                                                            'VariantClear',
                                                                                            'SetErrorInfo',
                                                                                            'SafeArrayCreateEx',
                                                                                            'UnRegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'DispGetIDsOfNames',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'VariantInit',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayCreateVector',
                                                                                            'VariantChangeType',
                                                                                            'CreateErrorInfo',
                                                                                            'SysAllocStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'GetAdaptersAddresses',
                                                                                            'GetIpForwardTable'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 753,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 220424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 72192,
                                                                                       '.pdata\x00\x00': 164864,
                                                                                       '.rdata\x00\x00': 971776,
                                                                                       '.reloc\x00\x00': 27648,
                                                                                       '.rsrc\x00\x00\x00': 220672,
                                                                                       '.text\x00\x00\x00': 2460160},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/871c76c41d39a54afb41f0f0ebecfae4384d718810468bdf2a4ff4ed06347f74'},
 '872bd73e1ad161ad7588afe46f7e5ea25442a34a5502be40d7c39b8d903dc360': {'AddressOfEntryPoint': 338592,
                                                                      'DebugRVA': 5200,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 503808,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'NdrServerCall2',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileSizeEx',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'CopyFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'GetOverlappedResult',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'SetThreadIdealProcessor',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleFileNameW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'CreateFileMappingW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCurrentDirectoryW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharUpperW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForMultipleObjectsEx',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemInfo',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetSecurityDescriptorDacl',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupPrivilegeValueW',
                                                                                      'msvcrt.dll': '_onexit',
                                                                                      'ntdll.dll': 'RtlInitializeCriticalSection'},
                                                                      'ImportedFunctions': ['_cexit',
                                                                                            '__setusermatherr',
                                                                                            '__set_app_type',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'exit',
                                                                                            '_fmode',
                                                                                            '_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            'qsort',
                                                                                            '_wtoi',
                                                                                            'wcsnlen',
                                                                                            '_snwprintf_s',
                                                                                            'swscanf_s',
                                                                                            '_commode',
                                                                                            'wcsncmp',
                                                                                            'wcsrchr',
                                                                                            'towupper',
                                                                                            '_wcmdln',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            'memmove',
                                                                                            '_vscwprintf',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            'iswspace',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            '_onexit',
                                                                                            'RtlReAllocateHeap',
                                                                                            'RtlDeleteCriticalSection',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'RtlRaiseStatus',
                                                                                            'NtYieldExecution',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'RtlGetVersion',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtSetInformationFile',
                                                                                            'NtCreateFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'NtClose',
                                                                                            'RtlImpersonateSelf',
                                                                                            'NtQuerySecurityObject',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'NtSetSecurityObject',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlDeleteResource',
                                                                                            'RtlCompressBuffer',
                                                                                            'RtlGetCompressionWorkSpaceSize',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'RpcServerRegisterIf',
                                                                                            'RpcServerListen',
                                                                                            'RpcMgmtWaitServerListen',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'RpcMgmtStopServerListening',
                                                                                            'NdrServerCallAll',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'UuidFromStringW',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'NdrServerCall2',
                                                                                            'HeapSetInformation',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEvent',
                                                                                            'CreateMutexW',
                                                                                            'EnterCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'CreateSemaphoreExW',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'GetHandleInformation',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsSetValue',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadToken',
                                                                                            'TlsGetValue',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'RevertToSelf',
                                                                                            'GetTokenInformation',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetAclInformation',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'GetLengthSid',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegFlushKey',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetDriveTypeW',
                                                                                            'UnlockFileEx',
                                                                                            'LockFileEx',
                                                                                            'SetFilePointerEx',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetVolumeInformationW',
                                                                                            'ReadFile',
                                                                                            'RemoveDirectoryW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFullPathNameW',
                                                                                            'SetFilePointer',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'WriteFile',
                                                                                            'DeleteFileW',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSizeEx',
                                                                                            'CopyFileExW',
                                                                                            'DeviceIoControl',
                                                                                            'GetOverlappedResult',
                                                                                            'FormatMessageW',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetThreadIdealProcessor',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'DelayLoadFailureHook',
                                                                                            'CharUpperW',
                                                                                            'LookupPrivilegeValueW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 213,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 15120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 9728,
                                                                                       '.pdata\x00\x00': 12800,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 15360,
                                                                                       '.text\x00\x00\x00': 474624},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/872bd73e1ad161ad7588afe46f7e5ea25442a34a5502be40d7c39b8d903dc360'},
 '8746ee1a84a083a90e37899d71d50d5c7c015e69688a466aa80447f011780c0d': {'AddressOfEntryPoint': 27458,
                                                                      'DebugRVA': 4784,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'WaitForSingleObject',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '_vsnprintf'},
                                                                      'ImportedFunctions': ['FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrlenA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetShortPathNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FormatMessageA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExA',
                                                                                            'GetVersionExA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetProcAddress',
                                                                                            'CreateProcessA',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'TerminateThread',
                                                                                            'GetDriveTypeA',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'InterlockedExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetStartupInfoA',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'WaitForSingleObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowPos',
                                                                                            'SendMessageA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DispatchMessageA',
                                                                                            'CallWindowProcA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'CharPrevA',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'LoadStringA',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_ismbblead',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '__getmainargs',
                                                                                            '_errno',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_vsnprintf',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 100215292,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 100215296,
                                                                                       '.text\x00\x00\x00': 44544},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8746ee1a84a083a90e37899d71d50d5c7c015e69688a466aa80447f011780c0d'},
 '8758403fc0c36faeb4aef38720963810ff1cd4f399e7a208fe968ddab5d8049d': {'AddressOfEntryPoint': 220096,
                                                                      'DebugRVA': 4992,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 262144,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetLengthSid',
                                                                                      'CRYPT32.dll': 'CertOpenStore',
                                                                                      'KERNEL32.dll': 'GetSystemTime',
                                                                                      'OLEAUT32.dll': 'LoadTypeLib',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathQuoteSpacesW',
                                                                                      'USER32.dll': 'GetWindowThreadProcessId',
                                                                                      'WININET.dll': 'InternetGetCookieW',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoGetCallContext'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'TraceMessage',
                                                                                            'RegQueryValueExW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'EventActivityIdControl',
                                                                                            'RegGetValueW',
                                                                                            'RegEnumValueW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'CopySid',
                                                                                            'IsTextUnicode',
                                                                                            'GetLengthSid',
                                                                                            'LeaveCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'RaiseException',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleHandleExA',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CompareStringW',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'CompareStringOrdinal',
                                                                                            'GetFileSizeEx',
                                                                                            'CreateDirectoryW',
                                                                                            'GetACP',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetModuleFileNameW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'GetProcessId',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'OpenProcess',
                                                                                            'GetPackageFamilyName',
                                                                                            'GetFileSize',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'LocalFree',
                                                                                            'DuplicateHandle',
                                                                                            'LocalAlloc',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'WriteFile',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'WideCharToMultiByte',
                                                                                            'ReadFile',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'CheckTokenCapability',
                                                                                            'GetTempPathW',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemTime',
                                                                                            'CharLowerW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'GetWindowBand',
                                                                                            'GetPropW',
                                                                                            'EnumChildWindows',
                                                                                            'CharNextW',
                                                                                            'GetForegroundWindow',
                                                                                            'PostMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharLowerBuffW',
                                                                                            'GetClassNameW',
                                                                                            'IsWindow',
                                                                                            'UnregisterClassA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_wcsicmp',
                                                                                            '_wcslwr',
                                                                                            'towlower',
                                                                                            'wcstol',
                                                                                            'wcstok_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            'toupper',
                                                                                            'wcsstr',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            '_amsg_exit',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_purecall',
                                                                                            '_vsnwprintf',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'memmove',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            'memcpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcsncpy_s',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'wcscmp',
                                                                                            'CoRevertToSelf',
                                                                                            'CoImpersonateClient',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoUninitialize',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoInitializeEx',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoGetCallContext',
                                                                                            'SafeArrayDestroy',
                                                                                            'VarBstrCmp',
                                                                                            'SysFreeString',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocString',
                                                                                            'VarBstrCat',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayLock',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'ShellExecuteExW',
                                                                                            'StrChrW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathQuoteSpacesW',
                                                                                            'InternetGetCookieW',
                                                                                            'RtlEqualSid',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlFreeHeap',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'CertCloseStore',
                                                                                            'CryptVerifyDetachedMessageSignature',
                                                                                            'CryptSignMessage',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertDuplicateCertificateChain',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CryptMsgUpdate',
                                                                                            'CryptMsgClose',
                                                                                            'CryptBinaryToStringW',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CryptDecodeObject',
                                                                                            'CertFindExtension',
                                                                                            'CertGetCertificateChain',
                                                                                            'CryptProtectData',
                                                                                            'CertOpenStore'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 232,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 9072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 8704,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 9216,
                                                                                       '.text\x00\x00\x00': 240128},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/8758403fc0c36faeb4aef38720963810ff1cd4f399e7a208fe968ddab5d8049d'},
 '87f4ec955efc8b0bddd2181b72c898ee5cb1371229dd1167958aa98e605735f4': {'AddressOfEntryPoint': 849328,
                                                                      'DebugRVA': 1145216,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 1211664,
                                                                      'ExportSize': 108,
                                                                      'IATRVA': 1007616,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CopySid',
                                                                                      'KERNEL32.dll': 'LoadLibraryW',
                                                                                      'PSAPI.DLL': 'QueryWorkingSetEx',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathMatchSpecW',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINHTTP.dll': 'WinHttpOpenRequest',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'chrome_elf.dll': 'GetInstallDetailsPayload'},
                                                                      'ImportedFunctions': ['SignalInitializeCrashReporting',
                                                                                            'SignalChromeElf',
                                                                                            'GetInstallDetailsPayload',
                                                                                            'ImpersonateNamedPipeClient',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityInfo',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'SystemFunction036',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'RegDisablePredefinedCache',
                                                                                            'RevertToSelf',
                                                                                            'GetLengthSid',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'SetSecurityInfo',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'SetTokenInformation',
                                                                                            'GetAce',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'SetThreadToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'DuplicateToken',
                                                                                            'CreateRestrictedToken',
                                                                                            'EqualSid',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CopySid',
                                                                                            'InitOnceExecuteOnce',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateEventW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcessId',
                                                                                            'WaitForSingleObject',
                                                                                            'DuplicateHandle',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryExW',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'GetVersionExW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'LocalFree',
                                                                                            'SetThreadPriority',
                                                                                            'QueryThreadCycleTime',
                                                                                            'Sleep',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetCurrentThread',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetThreadPriority',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'GetLocalTime',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'FormatMessageA',
                                                                                            'GetTickCount',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'ReadFile',
                                                                                            'GetFileSizeEx',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetFilePointerEx',
                                                                                            'FlushFileBuffers',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'GetUserDefaultLangID',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'CreateDirectoryW',
                                                                                            'QueryDosDeviceW',
                                                                                            'GetLongPathNameW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetFileAttributesW',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetFileAttributesW',
                                                                                            'ReplaceFileW',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'MoveFileW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'RaiseException',
                                                                                            'CreateThread',
                                                                                            'GetThreadId',
                                                                                            'IsDebuggerPresent',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'TlsGetValue',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetModuleHandleExW',
                                                                                            'FlushViewOfFile',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'HeapSetInformation',
                                                                                            'VirtualQuery',
                                                                                            'GetProcessTimes',
                                                                                            'WakeAllConditionVariable',
                                                                                            'WakeConditionVariable',
                                                                                            'SleepConditionVariableSRW',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQueryEx',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'SetInformationJobObject',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DecodePointer',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetComputerNameExW',
                                                                                            'FreeLibrary',
                                                                                            'UnlockFileEx',
                                                                                            'LockFileEx',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'TerminateJobObject',
                                                                                            'GetProcessHeaps',
                                                                                            'SetHandleInformation',
                                                                                            'GetProcessHandleCount',
                                                                                            'SignalObjectAndWait',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetFileType',
                                                                                            'WriteProcessMemory',
                                                                                            'AssignProcessToJobObject',
                                                                                            'VirtualProtectEx',
                                                                                            'ReadProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'VirtualFreeEx',
                                                                                            'CreateRemoteThread',
                                                                                            'CreateJobObjectW',
                                                                                            'CreateNamedPipeW',
                                                                                            'CreateMutexW',
                                                                                            'lstrlenW',
                                                                                            'DebugBreak',
                                                                                            'SearchPathW',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExA',
                                                                                            'GetThreadContext',
                                                                                            'SuspendThread',
                                                                                            'Wow64GetThreadContext',
                                                                                            'SleepEx',
                                                                                            'CreateSemaphoreW',
                                                                                            'ReleaseSemaphore',
                                                                                            'WaitNamedPipeW',
                                                                                            'TransactNamedPipe',
                                                                                            'GetVersion',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'IsWow64Process',
                                                                                            'ConnectNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetFileInformationByHandleEx',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'ResumeThread',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'EnumSystemLocalesW',
                                                                                            'IsValidLocale',
                                                                                            'ReadConsoleW',
                                                                                            'GetACP',
                                                                                            'GetStdHandle',
                                                                                            'ExitProcess',
                                                                                            'SetStdHandle',
                                                                                            'GetFullPathNameW',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'PeekNamedPipe',
                                                                                            'GetDriveTypeW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCPInfo',
                                                                                            'GetLocaleInfoW',
                                                                                            'LCMapStringW',
                                                                                            'CompareStringW',
                                                                                            'EncodePointer',
                                                                                            'GetStringTypeW',
                                                                                            'InitializeSListHead',
                                                                                            'GetStartupInfoW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'GetPerformanceInfo',
                                                                                            'QueryWorkingSetEx',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'ShellExecuteExW',
                                                                                            'PathMatchSpecW',
                                                                                            'RegisterClassW',
                                                                                            'GetThreadDesktop',
                                                                                            'CreateDesktopW',
                                                                                            'GetMessageW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'CreateWindowStationW',
                                                                                            'CloseWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'wsprintfW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'SendMessageTimeoutW',
                                                                                            'IsWindow',
                                                                                            'DefWindowProcW',
                                                                                            'FindWindowExW',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterClassW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'PostMessageW',
                                                                                            'SetProcessWindowStation',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'timeGetTime',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'WinHttpCrackUrl',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpWriteData',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpAddRequestHeaders',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpOpenRequest'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 292,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 264848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 51712,
                                                                                       '.rdata\x00\x00': 212992,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 265216,
                                                                                       '.text\x00\x00\x00': 1000960,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'CPADinfo': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/87f4ec955efc8b0bddd2181b72c898ee5cb1371229dd1167958aa98e605735f4'},
 '8835a72592f8a7da8ffc8d058410d0175cb1905b018906f22b922dc1180c4027': {'AddressOfEntryPoint': 36784,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'SspiCli.dll': 'GetUserNameExW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleMode',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'ReadFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapValidate',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-localization-obsolete-l1-2-0.dll': 'CompareStringA',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryValueExW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegConnectRegistryW',
                                                                                      'api-ms-win-core-shlwapi-obsolete-l1-1-0.dll': 'StrStrW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharUpperW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'VerQueryValueW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVerifyVersionInfo'},
                                                                      'ImportedFunctions': ['_get_osfhandle',
                                                                                            '_fileno',
                                                                                            'wcstoul',
                                                                                            'wcstod',
                                                                                            '__p__commode',
                                                                                            '_errno',
                                                                                            'memmove',
                                                                                            '_wtoi',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memchr',
                                                                                            '__iob_func',
                                                                                            'wcschr',
                                                                                            'fclose',
                                                                                            '_wfopen',
                                                                                            'wcstok',
                                                                                            'wcstol',
                                                                                            'fgetws',
                                                                                            'wcsstr',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            'exit',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'fseek',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '_memicmp',
                                                                                            '__wgetmainargs',
                                                                                            'memcpy',
                                                                                            '_iob',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnset',
                                                                                            'iswctype',
                                                                                            'memset',
                                                                                            'RegConnectRegistryW',
                                                                                            'StrChrIW',
                                                                                            'StrStrIW',
                                                                                            'StrChrW',
                                                                                            'StrTrimW',
                                                                                            'StrStrW',
                                                                                            'CreateFileW',
                                                                                            'GetFileType',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'FormatMessageW',
                                                                                            'GetThreadLocale',
                                                                                            'SetThreadUILanguage',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapValidate',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'LoadStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetComputerNameExW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetNameInfoW',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetAddrInfoW',
                                                                                            'WSAGetLastError',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'GetUserNameExW',
                                                                                            'LocalFree',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'CompareStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'ReadConsoleW',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW',
                                                                                            'CharUpperW',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 110,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 35328},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8835a72592f8a7da8ffc8d058410d0175cb1905b018906f22b922dc1180c4027'},
 '885e44f9b213784be3c4a5e0a9523218d539ce8e332d936cfc3e36575c6349a0': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 116908,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 117248,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/885e44f9b213784be3c4a5e0a9523218d539ce8e332d936cfc3e36575c6349a0'},
 '886241bdfd1af4566ad4d8753a16c30b157962aa9ba21d57a3a09e12fb445203': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 234456,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 234496,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/886241bdfd1af4566ad4d8753a16c30b157962aa9ba21d57a3a09e12fb445203'},
 '88e1b76bdf799478a72fa27db0bfe7bc5d02cc7e53675967399300448f0e266f': {'AddressOfEntryPoint': 22674,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'CreateFileA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenProcessToken',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2480,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 6979584,
                                                                                       '.text\x00\x00\x00': 30720},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/88e1b76bdf799478a72fa27db0bfe7bc5d02cc7e53675967399300448f0e266f'},
 '8944449331593e5bbd01c9503b5c75b7fa8336bb7a8163ff4200f046de0f2f48': {'AddressOfEntryPoint': 5344,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 320,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 222184,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetTokenInformation',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'wcslen'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'SetTokenInformation',
                                                                                            'AllocConsole',
                                                                                            'CloseHandle',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateSemaphoreA',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FormatMessageA',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExA',
                                                                                            'InitializeCriticalSection',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ReleaseSemaphore',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            '_write',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__iob_func',
                                                                                            '__lconv_init',
                                                                                            '__mb_cur_max',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_fmode',
                                                                                            '_fullpath',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_snprintf',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'fputc',
                                                                                            'fputs',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'realloc',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'sprintf',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncat',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'strtoul',
                                                                                            'wcslen',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1940,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 26624,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 74240,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 101376,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/8944449331593e5bbd01c9503b5c75b7fa8336bb7a8163ff4200f046de0f2f48'},
 '89566d72f4e1ddd5ff449372e7068e40d35e0afe613647990a3fb5cccc700107': {'AddressOfEntryPoint': 11472,
                                                                      'DebugRVA': 4336,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49600,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'SHLWAPI.dll': 'SHSetThreadRef',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateInstance',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateErrorW',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoRevokeActivationFactories',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsStringHasEmbeddedNull',
                                                                                      'msvcrt.dll': '_except_handler4_common'},
                                                                      'ImportedFunctions': ['EncodePointer',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'DecodePointer',
                                                                                            'AcquireSRWLockShared',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            '__set_app_type',
                                                                                            '_wcmdln',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__wgetmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_purecall',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'RoRegisterActivationFactories',
                                                                                            'RoRevokeActivationFactories',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsIsStringEmpty',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsCreateString',
                                                                                            'WindowsStringHasEmbeddedNull',
                                                                                            'RoOriginateError',
                                                                                            'RoOriginateErrorW',
                                                                                            'SHSetThreadRef'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 63,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2256,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 9728},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/89566d72f4e1ddd5ff449372e7068e40d35e0afe613647990a3fb5cccc700107'},
 '898aef79d3dc23b1127c39b1a95943361a9afbee298b856124c5170aaaf5e18c': {'AddressOfEntryPoint': 88288,
                                                                      'DebugRVA': 4768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 131072,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceMessage',
                                                                                      'KERNEL32.dll': 'GetCommandLineW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SETUPAPI.dll': 'SetupDiSetDevicePropertyW',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'WinSCard.dll': 'SCardDisconnect',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchRemoveFileSpec',
                                                                                      'bcrypt.dll': 'BCryptGenerateSymmetricKey',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateWellKnownSid',
                                                                                            'TraceMessage',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'RaiseFailFastException',
                                                                                            'RaiseException',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetTickCount64',
                                                                                            'LocalFree',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'GetSystemMetrics',
                                                                                            'TranslateMessage',
                                                                                            'UnregisterClassA',
                                                                                            'DispatchMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'CharUpperW',
                                                                                            'GetMessageW',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memmove',
                                                                                            'wcscat_s',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            '_purecall',
                                                                                            'wcscpy_s',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_wcmdln',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '_vsnwprintf',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            'malloc',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            'memcpy',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'StringFromGUID2',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoRevertToSelf',
                                                                                            'CoImpersonateClient',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoCreateGuid',
                                                                                            'CoCreateInstance',
                                                                                            'LoadTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysFreeString',
                                                                                            'RegisterTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptDestroyKey',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptEncrypt',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptGenerateSymmetricKey',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidToStringW',
                                                                                            'UuidCreate',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupGetInfDriverStoreLocationW',
                                                                                            'SetupDiGetDevicePropertyW',
                                                                                            'SetupDiSetDevicePropertyW',
                                                                                            'SCardConnectW',
                                                                                            'SCardGetStatusChangeW',
                                                                                            'SCardListCardsW',
                                                                                            'SCardGetCardTypeProviderNameW',
                                                                                            'SCardBeginTransaction',
                                                                                            'SCardReconnect',
                                                                                            'SCardEndTransaction',
                                                                                            'SCardReleaseStartedEvent',
                                                                                            'SCardReleaseContext',
                                                                                            'SCardEstablishContext',
                                                                                            'SCardListReadersW',
                                                                                            'SCardFreeMemory',
                                                                                            'SCardAccessStartedEvent',
                                                                                            'SCardListReadersWithDeviceInstanceIdW',
                                                                                            'SCardDisconnect',
                                                                                            'PathCchAppend',
                                                                                            'PathCchRemoveFileSpec'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 146,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 107008},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/898aef79d3dc23b1127c39b1a95943361a9afbee298b856124c5170aaaf5e18c'},
 '89928b2405dcbcf9a3b2a2350eac872e4188c474527cd4ef61704ab2f17c2b27': {'AddressOfEntryPoint': 91214,
                                                                      'DebugRVA': 90984,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2104,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 86016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/89928b2405dcbcf9a3b2a2350eac872e4188c474527cd4ef61704ab2f17c2b27'},
 '89946db73c08e6854ff5ce549409d358d4c14a6abda5fc7097f2d0a4184a7ee2': {'AddressOfEntryPoint': 3596304,
                                                                      'DebugRVA': 4352,
                                                                      'DebugSize': 56,
                                                                      'Dll': 352,
                                                                      'ExportRVA': 6955008,
                                                                      'ExportSize': 79455,
                                                                      'IATRVA': 3473408,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'BOOTVID.dll': 'VidSolidColorFill',
                                                                                      'CI.dll': 'CiInitialize',
                                                                                      'HAL.dll': 'HalReportResourceUsage',
                                                                                      'PSHED.dll': 'PshedInitialize',
                                                                                      'ext-ms-win-fs-clfs-l1-1-0.dll': 'ClfsCreateMarshallingArea',
                                                                                      'ext-ms-win-ntos-kcminitcfg-l1-1-0.dll': 'CmCompleteInitMachineConfig',
                                                                                      'ext-ms-win-ntos-ksecurity-l1-1-1.dll': 'QueryUpdateFileEaAllowedExt',
                                                                                      'ext-ms-win-ntos-ksigningpolicy-l1-1-0.dll': 'SeQuerySigningPolicyExt',
                                                                                      'ext-ms-win-ntos-ksr-l1-1-0.dll': 'KsrInitSystem',
                                                                                      'ext-ms-win-ntos-pico-l1-1-0.dll': 'PicoSystemCallDispatch',
                                                                                      'ext-ms-win-ntos-tm-l1-1-0.dll': 'TmRollbackComplete',
                                                                                      'ext-ms-win-ntos-werkernel-l1-1-0.dll': 'WerLiveKernelSubmitReport',
                                                                                      'kdcom.dll': 'KdRestore',
                                                                                      'msrpc.sys': 'NdrMesTypeDecode3'},
                                                                      'ImportedFunctions': ['WerLiveKernelCloseHandle',
                                                                                            'WerLiveKernelOpenDumpFile',
                                                                                            'WerLiveKernelCancelReport',
                                                                                            'WerLiveKernelInitSystem',
                                                                                            'WerLiveKernelCreateReport',
                                                                                            'WerLiveKernelSubmitReport',
                                                                                            'NtSetInformationTransaction',
                                                                                            'NtSetInformationResourceManager',
                                                                                            'NtSetInformationEnlistment',
                                                                                            'NtRollbackTransaction',
                                                                                            'NtRollbackEnlistment',
                                                                                            'NtRollbackComplete',
                                                                                            'NtRecoverTransactionManager',
                                                                                            'NtThawTransactions',
                                                                                            'NtRecoverEnlistment',
                                                                                            'NtReadOnlyEnlistment',
                                                                                            'NtQueryInformationTransactionManager',
                                                                                            'NtQueryInformationTransaction',
                                                                                            'NtQueryInformationResourceManager',
                                                                                            'NtQueryInformationEnlistment',
                                                                                            'NtPropagationFailed',
                                                                                            'NtPropagationComplete',
                                                                                            'NtPrepareEnlistment',
                                                                                            'NtPrepareComplete',
                                                                                            'NtPrePrepareEnlistment',
                                                                                            'NtPrePrepareComplete',
                                                                                            'NtOpenTransactionManager',
                                                                                            'NtOpenTransaction',
                                                                                            'NtOpenResourceManager',
                                                                                            'NtOpenEnlistment',
                                                                                            'NtGetNotificationResourceManager',
                                                                                            'NtFreezeTransactions',
                                                                                            'NtEnumerateTransactionObject',
                                                                                            'NtCreateTransactionManager',
                                                                                            'NtCreateTransaction',
                                                                                            'NtCreateResourceManager',
                                                                                            'NtCreateEnlistment',
                                                                                            'NtCommitTransaction',
                                                                                            'NtCommitEnlistment',
                                                                                            'NtCommitComplete',
                                                                                            'TmInitSystemPhase2',
                                                                                            'TmCancelPropagationRequest',
                                                                                            'TmCommitComplete',
                                                                                            'TmCommitEnlistment',
                                                                                            'TmCommitTransaction',
                                                                                            'TmInitSystem',
                                                                                            'TmCreateEnlistment',
                                                                                            'TmCurrentTransaction',
                                                                                            'TmDereferenceEnlistmentKey',
                                                                                            'TmEnableCallbacks',
                                                                                            'TmEndPropagationRequest',
                                                                                            'TmFreezeTransactions',
                                                                                            'TmGetTransactionId',
                                                                                            'TmInitializeTransactionManager',
                                                                                            'TmIsKTMCommitCoordinator',
                                                                                            'TmIsTransactionActive',
                                                                                            'TmPrePrepareComplete',
                                                                                            'TmPrePrepareEnlistment',
                                                                                            'TmPrepareComplete',
                                                                                            'TmPrepareEnlistment',
                                                                                            'TmPropagationComplete',
                                                                                            'TmPropagationFailed',
                                                                                            'TmReadOnlyEnlistment',
                                                                                            'TmRecoverEnlistment',
                                                                                            'TmRecoverResourceManager',
                                                                                            'TmRecoverTransactionManager',
                                                                                            'TmReferenceEnlistmentKey',
                                                                                            'TmRenameTransactionManager',
                                                                                            'TmRequestOutcomeEnlistment',
                                                                                            'TmShutdownSystem',
                                                                                            'NtSinglePhaseReject',
                                                                                            'NtSetInformationTransactionManager',
                                                                                            'NtRollforwardTransactionManager',
                                                                                            'NtRenameTransactionManager',
                                                                                            'NtRegisterProtocolAddressInformation',
                                                                                            'TmThawTransactions',
                                                                                            'TmSinglePhaseReject',
                                                                                            'TmSetCurrentTransaction',
                                                                                            'TmRollbackTransaction',
                                                                                            'TmRollbackEnlistment',
                                                                                            'NtRecoverResourceManager',
                                                                                            'TmRollbackComplete',
                                                                                            'PshedEnableErrorSource',
                                                                                            'PshedSetErrorSourceInfo',
                                                                                            'PshedDisableErrorSource',
                                                                                            'PshedGetInjectionCapabilities',
                                                                                            'PshedInjectError',
                                                                                            'PshedFinalizeErrorRecord',
                                                                                            'PshedBugCheckSystem',
                                                                                            'PshedAttemptErrorRecovery',
                                                                                            'PshedWriteErrorRecord',
                                                                                            'PshedArePluginsPresent',
                                                                                            'PshedFreeMemory',
                                                                                            'PshedClearErrorRecord',
                                                                                            'PshedIsSystemWheaEnabled',
                                                                                            'PshedGetAllErrorSources',
                                                                                            'PshedGetBootErrorPacket',
                                                                                            'PshedAllocateMemory',
                                                                                            'PshedReadErrorRecord',
                                                                                            'PshedInitialize',
                                                                                            'HalGetVectorInput',
                                                                                            'HalSetEnvironmentVariable',
                                                                                            'HalGetEnvironmentVariable',
                                                                                            'HalInitializeOnResume',
                                                                                            'HalAllocateCrashDumpRegisters',
                                                                                            'HalGetMemoryCachingRequirements',
                                                                                            'HalProcessorIdle',
                                                                                            'HalGetInterruptTargetInformation',
                                                                                            'KeFlushWriteBuffer',
                                                                                            'HalAcpiGetTableEx',
                                                                                            'HalRequestIpi',
                                                                                            'HalHandleMcheck',
                                                                                            'HalHandleNMI',
                                                                                            'HalRequestSoftwareInterrupt',
                                                                                            'HalSendNMI',
                                                                                            'HalInitializeProcessor',
                                                                                            'HalStopProfileInterrupt',
                                                                                            'HalStartProfileInterrupt',
                                                                                            'HalEnableInterrupt',
                                                                                            'HalSendSoftwareInterrupt',
                                                                                            'HalDisableInterrupt',
                                                                                            'HalCalibratePerformanceCounter',
                                                                                            'HalIsHyperThreadingEnabled',
                                                                                            'HalStartDynamicProcessor',
                                                                                            'HalRegisterDynamicProcessor',
                                                                                            'HalStartNextProcessor',
                                                                                            'HalRequestClockInterrupt',
                                                                                            'HalSetBusDataByOffset',
                                                                                            'HalGetBusDataByOffset',
                                                                                            'HalReturnToFirmware',
                                                                                            'HalGetProcessorIdByNtNumber',
                                                                                            'HalTranslateBusAddress',
                                                                                            'HalGetMessageRoutingInfo',
                                                                                            'HalQueryEnvironmentVariableInfoEx',
                                                                                            'HalEnumerateEnvironmentVariablesEx',
                                                                                            'HalSetEnvironmentVariableEx',
                                                                                            'HalGetEnvironmentVariableEx',
                                                                                            'KeStallExecutionProcessor',
                                                                                            'HalPerformEndOfInterrupt',
                                                                                            'HalQueryMaximumProcessorCount',
                                                                                            'HalEnumerateProcessors',
                                                                                            'KdHvComPortInUse',
                                                                                            'HalRegisterErrataCallbacks',
                                                                                            'KeQueryPerformanceCounter',
                                                                                            'HalRequestDeferredRecoveryServiceInterrupt',
                                                                                            'HalSetRealTimeClock',
                                                                                            'HalAllProcessorsStarted',
                                                                                            'HalInitSystem',
                                                                                            'HalQueryRealTimeClock',
                                                                                            'HalInitializeBios',
                                                                                            'HalReportResourceUsage',
                                                                                            'VidDisplayString',
                                                                                            'VidScreenToBufferBlt',
                                                                                            'VidBufferToScreenBlt',
                                                                                            'VidInitialize',
                                                                                            'VidSetTextColor',
                                                                                            'VidSetScrollRegion',
                                                                                            'VidBitBlt',
                                                                                            'VidCleanUp',
                                                                                            'VidResetDisplay',
                                                                                            'VidBitBltEx',
                                                                                            'VidSolidColorFill',
                                                                                            'KdSetHiberRange',
                                                                                            'KdD3Transition',
                                                                                            'KdD0Transition',
                                                                                            'KdReceivePacket',
                                                                                            'KdSendPacket',
                                                                                            'KdDebuggerInitialize1',
                                                                                            'KdDebuggerInitialize0',
                                                                                            'KdSave',
                                                                                            'KdRestore',
                                                                                            'CmSetInitMachineConfig',
                                                                                            'CmCompleteInitMachineConfig',
                                                                                            'KsrInitPageDatabase',
                                                                                            'KsrCleanupPageDatabase',
                                                                                            'KsrInitSystem',
                                                                                            'AppContainerPrivilegesEnabledExt',
                                                                                            'QueryUpdateFileEaAllowedExt',
                                                                                            'SeQuerySigningPolicyExt',
                                                                                            'ClfsLsnEqual',
                                                                                            'ClfsReadLogRecord',
                                                                                            'ClfsReadNextLogRecord',
                                                                                            'ClfsTerminateReadLog',
                                                                                            'ClfsWriteRestartArea',
                                                                                            'ClfsDeleteLogByPointer',
                                                                                            'ClfsDeleteMarshallingArea',
                                                                                            'ClfsReserveAndAppendLog',
                                                                                            'ClfsLsnInvalid',
                                                                                            'ClfsFlushToLsn',
                                                                                            'ClfsLsnContainer',
                                                                                            'ClfsLsnLess',
                                                                                            'ClfsReadRestartArea',
                                                                                            'ClfsGetLogFileInformation',
                                                                                            'ClfsMgmtDeregisterManagedClient',
                                                                                            'ClfsCloseLogFileObject',
                                                                                            'ClfsMgmtInstallPolicy',
                                                                                            'ClfsMgmtRegisterManagedClient',
                                                                                            'ClfsCreateLogFile',
                                                                                            'ClfsLsnDifference',
                                                                                            'ClfsRemoveLogContainer',
                                                                                            'ClfsAddLogContainer',
                                                                                            'ClfsCreateMarshallingArea',
                                                                                            'PicoProcessExit',
                                                                                            'PicoDispatchException',
                                                                                            'PicoThreadExit',
                                                                                            'PicoInit',
                                                                                            'PicoSystemCallDispatch',
                                                                                            'CiInitialize',
                                                                                            'MesIncrementalHandleReset',
                                                                                            'NdrMesTypeEncode3',
                                                                                            'MesEncodeIncrementalHandleCreate',
                                                                                            'MesHandleFree',
                                                                                            'RpcExceptionFilter',
                                                                                            'MesDecodeBufferHandleCreate',
                                                                                            'NdrMesTypeDecode3'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 215,
                                                                      'NumberOfSections': 21,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 204608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 49152,
                                                                                       '.edata\x00\x00': 79872,
                                                                                       '.idata\x00\x00': 9728,
                                                                                       '.pdata\x00\x00': 257536,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 204800,
                                                                                       '.text\x00\x00\x00': 2729984,
                                                                                       'ALMOSTRO': 74752,
                                                                                       'CACHEALI': 29184,
                                                                                       'INIT\x00\x00\x00\x00': 494592,
                                                                                       'INITKDBG': 41984,
                                                                                       'PAGE\x00\x00\x00\x00': 3009024,
                                                                                       'PAGEBGFX': 25600,
                                                                                       'PAGEDATA': 59904,
                                                                                       'PAGEHDLS': 9216,
                                                                                       'PAGEKD\x00\x00': 17920,
                                                                                       'PAGELK\x00\x00': 100352,
                                                                                       'PAGEVRFB': 0,
                                                                                       'PAGEVRFD': 47104,
                                                                                       'PAGEVRFY': 163840,
                                                                                       'POOLCODE': 10752},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/89946db73c08e6854ff5ce549409d358d4c14a6abda5fc7097f2d0a4184a7ee2'},
 '89f2fb1ba521b0b3a060dd558cb3740405946b106b8495f2b3ff3d3e1af93537': {'AddressOfEntryPoint': 125465,
                                                                      'DebugRVA': 279684,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 270328,
                                                                      'ExportSize': 98,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 805306368,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'CRYPT32.dll': 'CryptUnprotectData',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'FlushInstructionCache',
                                                                                      'MSVCR100.dll': 'memset',
                                                                                      'OLEAUT32.dll': 'SafeArrayGetUBound',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'StrToInt64ExW',
                                                                                      'USER32.dll': 'GetMessageTime',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'gdiplus.dll': 'GdipSetStringFormatAlign',
                                                                                      'ole32.dll': 'CoInitializeSecurity'},
                                                                      'ImportedFunctions': ['CryptDestroyHash',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'IsValidSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'CryptVerifySignatureW',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptImportKey',
                                                                                            'CryptAcquireContextW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetACP',
                                                                                            'FlushFileBuffers',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'SwitchToThread',
                                                                                            'MoveFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'LocalAlloc',
                                                                                            'GetFileSize',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'IsValidCodePage',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLogicalDrives',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetFileAttributesExW',
                                                                                            'CopyFileW',
                                                                                            'GetExitCodeProcess',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'SetLastError',
                                                                                            'SuspendThread',
                                                                                            'SetThreadContext',
                                                                                            'GetThreadContext',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'FindAtomW',
                                                                                            'DeleteAtom',
                                                                                            'AddAtomW',
                                                                                            'CreateEventA',
                                                                                            'CreateMutexA',
                                                                                            'LoadLibraryA',
                                                                                            'CreateProcessA',
                                                                                            'ReleaseMutex',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCurrentThread',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'UnmapViewOfFile',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'QueueUserAPC',
                                                                                            'OpenThread',
                                                                                            'OutputDebugStringW',
                                                                                            'GetExitCodeThread',
                                                                                            'VirtualQueryEx',
                                                                                            'OpenProcess',
                                                                                            'DeleteFileW',
                                                                                            'CreateThread',
                                                                                            'ResumeThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetSystemInfo',
                                                                                            'DuplicateHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'GetVersionExW',
                                                                                            'CompareFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'CreateProcessW',
                                                                                            'GetCommandLineW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStdHandle',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ReadFile',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStartupInfoW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'GetVersion',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'InterlockedExchange',
                                                                                            'FindResourceExW',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'RaiseException',
                                                                                            'FindResourceW',
                                                                                            'FlushInstructionCache',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'wcsrchr',
                                                                                            'ceil',
                                                                                            '_swab',
                                                                                            '_itow_s',
                                                                                            'malloc',
                                                                                            '_callnewh',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'wcsnlen',
                                                                                            'wmemcpy_s',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            '_vscwprintf',
                                                                                            'vswprintf_s',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            'wcscpy_s',
                                                                                            'fopen_s',
                                                                                            'fprintf',
                                                                                            'fclose',
                                                                                            '_wcsicmp',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'fputws',
                                                                                            'ferror',
                                                                                            '_wfsopen',
                                                                                            'wcsncmp',
                                                                                            '_ui64tow_s',
                                                                                            'wcsncpy',
                                                                                            'tolower',
                                                                                            'iswspace',
                                                                                            '_wcsupr_s',
                                                                                            'wcscspn',
                                                                                            'wcsspn',
                                                                                            'memcpy',
                                                                                            'swprintf_s',
                                                                                            'sprintf_s',
                                                                                            'strncpy_s',
                                                                                            '_vsnprintf',
                                                                                            '_vswprintf_c_l',
                                                                                            'strrchr',
                                                                                            'strcpy_s',
                                                                                            'isprint',
                                                                                            '_purecall',
                                                                                            'wcscat_s',
                                                                                            '_set_purecall_handler',
                                                                                            'calloc',
                                                                                            '_ultow_s',
                                                                                            '_strlwr_s',
                                                                                            '_wmakepath_s',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_ismbblead',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '??0exception@std@@QAE@ABQBDH@Z',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '_wcsnicmp',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            'fgetws',
                                                                                            '_wfopen_s',
                                                                                            'wcsstr',
                                                                                            '_wcslwr_s',
                                                                                            '_wtoi',
                                                                                            'wcspbrk',
                                                                                            '_wfullpath',
                                                                                            '_resetstkoflw',
                                                                                            '_wsplitpath_s',
                                                                                            'memmove',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf',
                                                                                            '_recalloc',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_wtol',
                                                                                            '_crt_debugger_hook',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            'memset',
                                                                                            'LoadStringW',
                                                                                            'UnregisterClassW',
                                                                                            'CharNextW',
                                                                                            'MessageBoxW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'SystemParametersInfoA',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageW',
                                                                                            'GetWindowTextW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'MessageBoxExW',
                                                                                            'LoadIconW',
                                                                                            'LoadImageW',
                                                                                            'DestroyWindow',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'ShowWindow',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'DefWindowProcW',
                                                                                            'UpdateLayeredWindow',
                                                                                            'GetMessageTime',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoDisconnectObject',
                                                                                            'CoMarshalInterface',
                                                                                            'CoReleaseMarshalData',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'IIDFromString',
                                                                                            'CLSIDFromString',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateGuid',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SetErrorInfo',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreate',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayGetLBound',
                                                                                            'VarBstrCat',
                                                                                            'GetErrorInfo',
                                                                                            'GetActiveObject',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayGetUBound',
                                                                                            'AssocQueryStringW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'PathRemoveBackslashW',
                                                                                            'PathIsFileSpecW',
                                                                                            'PathStripPathW',
                                                                                            'PathMatchSpecW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathRenameExtensionW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFileExistsW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathAppendW',
                                                                                            'PathCombineW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'StrToIntW',
                                                                                            'PathAddBackslashW',
                                                                                            'StrToIntExW',
                                                                                            'StrToInt64ExW',
                                                                                            'GdipGetImageEncoders',
                                                                                            'GdipGetImageEncodersSize',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipSaveImageToStream',
                                                                                            'GdipGetFontHeight',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipCreateFont',
                                                                                            'GdipDeleteFontFamily',
                                                                                            'GdipCreateFontFamilyFromName',
                                                                                            'GdipDrawString',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipStringFormatGetGenericDefault',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCreateBitmapFromResource',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdiplusStartup',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipGetDC',
                                                                                            'GdipReleaseDC',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'CryptUnprotectData',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 400,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 243000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 23552,
                                                                                       '.reloc\x00\x00': 21504,
                                                                                       '.rsrc\x00\x00\x00': 243200,
                                                                                       '.text\x00\x00\x00': 275968},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/89f2fb1ba521b0b3a060dd558cb3740405946b106b8495f2b3ff3d3e1af93537'},
 '89fd614790612ad4945ff46aa8eb83e8bd4a8945482fc23efe68073f62322ff3': {'AddressOfEntryPoint': 7504,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'EFSADU.dll': 'EfsUIUtilKeyBackup',
                                                                                      'EFSUTIL.dll': 'EfsUtilGetCurrentKey',
                                                                                      'KERNEL32.dll': 'CreateMutexW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'msvcrt.dll': '_wcsicmp',
                                                                                      'ntdll.dll': 'RtlFreeHeap'},
                                                                      'ImportedFunctions': ['GetTokenInformation',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'OpenProcessToken',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateMutexW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'CryptBinaryToStringW',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CommandLineToArgvW',
                                                                                            'EfsUIUtilPromptForPin',
                                                                                            'EfsUIUtilEnrollEfsCertificate',
                                                                                            'EfsUIUtilShowBalloonAndWait',
                                                                                            'EfsUIUtilSelectCard',
                                                                                            'EfsUIUtilInstallDra',
                                                                                            'EfsUIUtilEncryptMyDocuments',
                                                                                            'EfsUIUtilKeyBackup',
                                                                                            'EfsUtilGetCurrentKey',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlImageNtHeader',
                                                                                            'RtlFreeHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 54,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/89fd614790612ad4945ff46aa8eb83e8bd4a8945482fc23efe68073f62322ff3'},
 '8a06368f69e862d2fb99dbb27b0fe0bbd01b9e0f9f18779a2fa19ffd80bc17c1': {'AddressOfEntryPoint': 8623,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 18192,
                                                                      'ExportSize': 105,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 4,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LookupPrivilegeValueA',
                                                                                      'GDI32.dll': 'CreatePalette',
                                                                                      'KERNEL32.dll': 'GlobalLock',
                                                                                      'USER32.dll': 'LoadCursorA'},
                                                                      'ImportedFunctions': ['lstrcpyA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'GetTempFileNameA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'FormatMessageA',
                                                                                            'lstrcatA',
                                                                                            'GetLastError',
                                                                                            '_lwrite',
                                                                                            '_llseek',
                                                                                            'GlobalUnlock',
                                                                                            '_lopen',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            '_lclose',
                                                                                            '_lcreat',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'OpenFile',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentProcess',
                                                                                            'WinExec',
                                                                                            'ExitProcess',
                                                                                            '_lread',
                                                                                            'LocalFree',
                                                                                            'GetTempPathA',
                                                                                            'GlobalLock',
                                                                                            'GetDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'InvalidateRect',
                                                                                            'PostQuitMessage',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'GetClientRect',
                                                                                            'CreateWindowExA',
                                                                                            'DrawTextA',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'SetTimer',
                                                                                            'LoadIconA',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'ExitWindowsEx',
                                                                                            'RegisterClassA',
                                                                                            'LoadCursorA',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'PatBlt',
                                                                                            'CreateSolidBrush',
                                                                                            'TextOutA',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'StretchDIBits',
                                                                                            'CreateFontA',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'CreatePalette',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1600,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8a06368f69e862d2fb99dbb27b0fe0bbd01b9e0f9f18779a2fa19ffd80bc17c1'},
 '8a335c28fe1ef96dd71485877f2e86155d24b5614ace05468f4b07e2acd56331': {'AddressOfEntryPoint': 35088,
                                                                      'DebugRVA': 4464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'QueueUserWorkItem',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoGetObjectContext',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'DebugBreak',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFullPathNameW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LockResource',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenProcessToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-psapi-l1-1-0.dll': 'QueryFullProcessImageNameW',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExA',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'EnterCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'VerQueryValueW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['ExpandEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoGetObjectContext',
                                                                                            '_CxxThrowException',
                                                                                            'wcschr',
                                                                                            'free',
                                                                                            '__CxxFrameHandler3',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_local_unwind',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            'memcpy',
                                                                                            '_onexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            'fwprintf',
                                                                                            'fflush',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fclose',
                                                                                            'wcsrchr',
                                                                                            '_wstrtime',
                                                                                            '_waccess',
                                                                                            '_wstrdate',
                                                                                            '_purecall',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_wfopen',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlReportException',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'CreateEventA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'WaitForSingleObject',
                                                                                            'LeaveCriticalSection',
                                                                                            'ResetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentThread',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetThreadContext',
                                                                                            'GetCurrentProcessId',
                                                                                            'TlsGetValue',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'OpenProcessToken',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadStringW',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadResource',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'LockResource',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetLocalTime',
                                                                                            'GetSystemWindowsDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FindFirstFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'FindClose',
                                                                                            'GetFullPathNameW',
                                                                                            'OutputDebugStringW',
                                                                                            'IsDebuggerPresent',
                                                                                            'DebugBreak',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageW',
                                                                                            'VerQueryValueW',
                                                                                            'GetTokenInformation',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'UnregisterWaitEx',
                                                                                            'QueueUserWorkItem',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 124,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 96376,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 96768,
                                                                                       '.text\x00\x00\x00': 36864},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/8a335c28fe1ef96dd71485877f2e86155d24b5614ace05468f4b07e2acd56331'},
 '8a9d6525cf296a7561e7b45ae10ab658c75b954f15346570b701891829d3cd34': {'AddressOfEntryPoint': 45274,
                                                                      'DebugRVA': 123632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathUnquoteSpacesW',
                                                                                      'USER32.dll': 'GetDC'},
                                                                      'ImportedFunctions': ['GetFileAttributesW',
                                                                                            'GetTempPathW',
                                                                                            'OpenProcess',
                                                                                            'SetDllDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetProcessHeap',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'HeapSize',
                                                                                            'GetFullPathNameW',
                                                                                            'SetStdHandle',
                                                                                            'RtlUnwind',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetStringTypeW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetLongPathNameW',
                                                                                            'Sleep',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTempFileNameW',
                                                                                            'MoveFileExW',
                                                                                            'CopyFileW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'TerminateProcess',
                                                                                            'CompareStringW',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'LocalAlloc',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryA',
                                                                                            'RaiseException',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileType',
                                                                                            'SetFileAttributesW',
                                                                                            'FindFirstFileExW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'DeleteFileW',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'MoveFileW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'ReadFile',
                                                                                            'ExitProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'wsprintfW',
                                                                                            'DialogBoxParamW',
                                                                                            'EndDialog',
                                                                                            'SetWindowTextW',
                                                                                            'LoadIconW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'DrawTextW',
                                                                                            'GetClientRect',
                                                                                            'GetParent',
                                                                                            'ScreenToClient',
                                                                                            'ReleaseDC',
                                                                                            'SetTimer',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowRect',
                                                                                            'CopyRect',
                                                                                            'OffsetRect',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'GetDC',
                                                                                            'SelectObject',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptVerifySignatureA',
                                                                                            'QueryServiceConfigW',
                                                                                            'StartServiceW',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatusEx',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTokenInformation',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'InitCommonControlsEx',
                                                                                            'ShellExecuteExW',
                                                                                            'PathStripToRootW',
                                                                                            'PathAppendW',
                                                                                            'PathCommonPrefixW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathUnquoteSpacesW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 164,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 98528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 29184,
                                                                                       '.reloc\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 98816,
                                                                                       '.text\x00\x00\x00': 117760},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8a9d6525cf296a7561e7b45ae10ab658c75b954f15346570b701891829d3cd34'},
 '8b1e84ec34d16036b66114838ef98352443f27d2f355d982c903f7afe572166a': {'AddressOfEntryPoint': 14800,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FLTLIB.DLL': 'FilterVolumeFindFirst',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadPreferredUILanguages',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AdjustTokenPrivileges',
                                                                                      'msvcrt.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['wcsncmp',
                                                                                            '__p__fmode',
                                                                                            'qsort',
                                                                                            '_vsnwprintf',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'malloc',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcsicmp',
                                                                                            '_controlfp',
                                                                                            'exit',
                                                                                            '__p__commode',
                                                                                            'free',
                                                                                            '_XcptFilter',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            'FilterFindNext',
                                                                                            'FilterAttachAtAltitude',
                                                                                            'FilterVolumeFindNext',
                                                                                            'FilterInstanceFindClose',
                                                                                            'FilterInstanceFindFirst',
                                                                                            'FilterInstanceFindNext',
                                                                                            'FilterFindFirst',
                                                                                            'FilterVolumeInstanceFindFirst',
                                                                                            'FilterAttach',
                                                                                            'FilterUnload',
                                                                                            'FilterVolumeFindClose',
                                                                                            'FilterGetDosName',
                                                                                            'FilterVolumeInstanceFindClose',
                                                                                            'FilterVolumeInstanceFindNext',
                                                                                            'FilterFindClose',
                                                                                            'FilterDetach',
                                                                                            'FilterLoad',
                                                                                            'FilterVolumeFindFirst',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 13312},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8b1e84ec34d16036b66114838ef98352443f27d2f355d982c903f7afe572166a'},
 '8b640c97a1ba0925000c37721b972d8f3d6f7e4516ce36ec5213527296724531': {'AddressOfEntryPoint': 29838,
                                                                      'DebugRVA': 29628,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 22016},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8b640c97a1ba0925000c37721b972d8f3d6f7e4516ce36ec5213527296724531'},
 '8b9ffaea64684357e00c93edc0603a5cddaab02f2c87c4a3d971bc0a1ebaf867': {'AddressOfEntryPoint': 1098900,
                                                                      'DebugRVA': 1265088,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1261568,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_GetIconSize',
                                                                                      'COMDLG32.dll': 'GetFileTitleW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'IMM32.dll': 'ImmGetContext',
                                                                                      'KERNEL32.dll': 'SetLastError',
                                                                                      'MSIMG32.dll': 'TransparentBlt',
                                                                                      'OLEACC.dll': 'CreateStdAccessibleObject',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'WININET.dll': 'HttpOpenRequestW',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'gdiplus.dll': 'GdipGetImagePalette',
                                                                                      'ole32.dll': 'CoInitialize',
                                                                                      'oledlg.dll': 'OleUIBusyW',
                                                                                      'urlmon.dll': 'URLDownloadToFileW'},
                                                                      'ImportedFunctions': ['InternetConnectW',
                                                                                            'HttpSendRequestW',
                                                                                            'InternetReadFile',
                                                                                            'InternetWriteFile',
                                                                                            'InternetSetFilePointer',
                                                                                            'InternetSetStatusCallbackW',
                                                                                            'InternetOpenW',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'InternetCloseHandle',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'DeleteUrlCacheEntryW',
                                                                                            'HttpOpenRequestW',
                                                                                            'GetStringTypeW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'LCMapStringW',
                                                                                            'IsValidCodePage',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InterlockedExchange',
                                                                                            'lstrlenW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetCPInfo',
                                                                                            'GetLastError',
                                                                                            'lstrcpyW',
                                                                                            'WinExec',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExW',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetOEMCP',
                                                                                            'InterlockedDecrement',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemInfo',
                                                                                            'GetExitCodeProcess',
                                                                                            'Sleep',
                                                                                            'CopyFileW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFullPathNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStdHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'HeapQueryInformation',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'HeapReAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'HeapFree',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ReleaseMutex',
                                                                                            'GetACP',
                                                                                            'HeapAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'MulDiv',
                                                                                            'LocalFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineW',
                                                                                            'FindResourceExW',
                                                                                            'VirtualProtect',
                                                                                            'SearchPathW',
                                                                                            'GetProfileIntW',
                                                                                            'GetNumberFormatW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempFileNameW',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFlags',
                                                                                            'lstrlenA',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'TlsFree',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileAttributesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'GetFileSize',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'lstrcmpiW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetThreadLocale',
                                                                                            'InterlockedIncrement',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'lstrcmpA',
                                                                                            'GetCurrentThread',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'CompareStringA',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeResource',
                                                                                            'GlobalSize',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'CompareStringW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryW',
                                                                                            'lstrcmpW',
                                                                                            'CreateEventW',
                                                                                            'SuspendThread',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThreadId',
                                                                                            'ResumeThread',
                                                                                            'SetThreadPriority',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'FreeLibrary',
                                                                                            'ActivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'DeactivateActCtx',
                                                                                            'SetLastError',
                                                                                            'CopyIcon',
                                                                                            'FrameRect',
                                                                                            'EmptyClipboard',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'OpenClipboard',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'InsertMenuItemW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetIconInfo',
                                                                                            'HideCaret',
                                                                                            'InvertRect',
                                                                                            'LockWindowUpdate',
                                                                                            'BringWindowToTop',
                                                                                            'SetCursorPos',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyboardLayout',
                                                                                            'MapVirtualKeyW',
                                                                                            'ToUnicodeEx',
                                                                                            'DrawFocusRect',
                                                                                            'DrawFrameControl',
                                                                                            'DrawEdge',
                                                                                            'DrawIconEx',
                                                                                            'SetClassLongW',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'SetParent',
                                                                                            'DestroyIcon',
                                                                                            'GetMenuDefaultItem',
                                                                                            'SetMenuDefaultItem',
                                                                                            'CreatePopupMenu',
                                                                                            'IsMenu',
                                                                                            'MonitorFromPoint',
                                                                                            'UpdateLayeredWindow',
                                                                                            'EnableScrollBar',
                                                                                            'UnionRect',
                                                                                            'IsZoomed',
                                                                                            'GetAsyncKeyState',
                                                                                            'NotifyWinEvent',
                                                                                            'SetWindowRgn',
                                                                                            'GetSystemMenu',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'InvalidateRgn',
                                                                                            'SetRect',
                                                                                            'IsRectEmpty',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'DeleteMenu',
                                                                                            'WaitMessage',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'EnumDisplayMonitors',
                                                                                            'SetRectEmpty',
                                                                                            'CopyImage',
                                                                                            'DestroyMenu',
                                                                                            'GetMenuItemInfoW',
                                                                                            'IntersectRect',
                                                                                            'RealChildWindowFromPoint',
                                                                                            'UnregisterClassW',
                                                                                            'GetSysColorBrush',
                                                                                            'CharUpperW',
                                                                                            'DrawStateW',
                                                                                            'OffsetRect',
                                                                                            'ShowOwnedPopups',
                                                                                            'GetDesktopWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'PostQuitMessage',
                                                                                            'WindowFromPoint',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'ModifyMenuW',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'IsDialogMessageW',
                                                                                            'CheckDlgButton',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpW',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'GetClassLongW',
                                                                                            'GetClassNameW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetFocus',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'GetTopWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MapWindowPoints',
                                                                                            'ScrollWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'SetMenu',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'GetScrollPos',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowScrollBar',
                                                                                            'RedrawWindow',
                                                                                            'UpdateWindow',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EqualRect',
                                                                                            'DeferWindowPos',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowPlacement',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'GetMenu',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowPos',
                                                                                            'CopyRect',
                                                                                            'GetWindow',
                                                                                            'LoadMenuW',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageW',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'PostThreadMessageW',
                                                                                            'DefFrameProcW',
                                                                                            'DefMDIChildProcW',
                                                                                            'DrawMenuBar',
                                                                                            'TranslateMDISysAccel',
                                                                                            'GetWindowRgn',
                                                                                            'DestroyCursor',
                                                                                            'SubtractRect',
                                                                                            'MapVirtualKeyExW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongW',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'GetKeyNameTextW',
                                                                                            'IsCharLowerW',
                                                                                            'GetDoubleClickTime',
                                                                                            'GetUpdateRect',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'SetWindowTextW',
                                                                                            'CreateMenu',
                                                                                            'DrawTextW',
                                                                                            'TabbedTextOutW',
                                                                                            'FillRect',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMenuState',
                                                                                            'GetMenuStringW',
                                                                                            'AppendMenuW',
                                                                                            'GetMenuItemID',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'RemoveMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'DrawIcon',
                                                                                            'GetSystemMetrics',
                                                                                            'IsIconic',
                                                                                            'LoadBitmapW',
                                                                                            'LoadIconW',
                                                                                            'MessageBoxW',
                                                                                            'MessageBeep',
                                                                                            'InflateRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetParent',
                                                                                            'GetWindowRect',
                                                                                            'GetSysColor',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'PtInRect',
                                                                                            'GetClientRect',
                                                                                            'SendMessageW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'LoadImageW',
                                                                                            'TrackMouseEvent',
                                                                                            'InvalidateRect',
                                                                                            'EnableWindow',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'CharNextW',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'SetTextAlign',
                                                                                            'GetLayout',
                                                                                            'SetLayout',
                                                                                            'SelectClipRgn',
                                                                                            'CreateRectRgn',
                                                                                            'GetViewportExtEx',
                                                                                            'GetWindowExtEx',
                                                                                            'BitBlt',
                                                                                            'GetPixel',
                                                                                            'PtVisible',
                                                                                            'RectVisible',
                                                                                            'TextOutW',
                                                                                            'ExtTextOutW',
                                                                                            'Escape',
                                                                                            'SetViewportOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ExtSelectClipRgn',
                                                                                            'CreatePatternBrush',
                                                                                            'CreateBitmap',
                                                                                            'SelectPalette',
                                                                                            'GetObjectType',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateHatchBrush',
                                                                                            'GetBkColor',
                                                                                            'GetTextColor',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'SetRectRgn',
                                                                                            'IntersectClipRect',
                                                                                            'GetMapMode',
                                                                                            'PatBlt',
                                                                                            'DPtoLP',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetTextMetricsW',
                                                                                            'EnumFontFamiliesW',
                                                                                            'GetTextCharsetInfo',
                                                                                            'GetRgnBox',
                                                                                            'CreateRoundRectRgn',
                                                                                            'CreatePolygonRgn',
                                                                                            'CreateEllipticRgn',
                                                                                            'Polyline',
                                                                                            'Ellipse',
                                                                                            'Polygon',
                                                                                            'CreatePalette',
                                                                                            'GetPaletteEntries',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'RealizePalette',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'OffsetRgn',
                                                                                            'SetPixel',
                                                                                            'Rectangle',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'ExtFloodFill',
                                                                                            'SetPaletteEntries',
                                                                                            'LPtoDP',
                                                                                            'GetWindowOrgEx',
                                                                                            'GetViewportOrgEx',
                                                                                            'PtInRegion',
                                                                                            'FillRgn',
                                                                                            'FrameRgn',
                                                                                            'GetBoundsRect',
                                                                                            'GetTextFaceW',
                                                                                            'SetPixelV',
                                                                                            'GetClipBox',
                                                                                            'ExcludeClipRect',
                                                                                            'SetMapMode',
                                                                                            'SetTextColor',
                                                                                            'SetROP2',
                                                                                            'SetPolyFillMode',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'CreateDCW',
                                                                                            'CopyMetaFileW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetStockObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDIBColorTable',
                                                                                            'StretchBlt',
                                                                                            'CreateDIBSection',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'SetDIBColorTable',
                                                                                            'SelectObject',
                                                                                            'CombineRgn',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'AlphaBlend',
                                                                                            'TransparentBlt',
                                                                                            'GetFileTitleW',
                                                                                            'DocumentPropertiesW',
                                                                                            'OpenPrinterW',
                                                                                            'ClosePrinter',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHAppBarMessage',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_GetIconSize',
                                                                                            'PathFindFileNameW',
                                                                                            'PathStripToRootW',
                                                                                            'PathIsUNCW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'IsAccelerator',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'ReleaseStgMedium',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleDuplicateData',
                                                                                            'CoCreateGuid',
                                                                                            'CLSIDFromProgID',
                                                                                            'CLSIDFromString',
                                                                                            'CoGetClassObject',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'OleFlushClipboard',
                                                                                            'DoDragDrop',
                                                                                            'OleCreateMenuDescriptor',
                                                                                            'OleDestroyMenuDescriptor',
                                                                                            'OleTranslateAccelerator',
                                                                                            'RevokeDragDrop',
                                                                                            'CoLockObjectExternal',
                                                                                            'RegisterDragDrop',
                                                                                            'OleGetClipboard',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleLockRunning',
                                                                                            'CoInitialize',
                                                                                            'VariantClear',
                                                                                            'VarBstrFromDate',
                                                                                            'SysStringLen',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroy',
                                                                                            'VariantCopy',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'OleUIBusyW',
                                                                                            'URLDownloadToFileW',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdiplusStartup',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawImageI',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipCloneImage',
                                                                                            'GdipAlloc',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipFree',
                                                                                            'GdipGetImagePalette',
                                                                                            'LresultFromObject',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'ImmGetOpenStatus',
                                                                                            'ImmReleaseContext',
                                                                                            'ImmGetContext',
                                                                                            'PlaySoundW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 608,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2837920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 26112,
                                                                                       '.rdata\x00\x00': 308224,
                                                                                       '.reloc\x00\x00': 181760,
                                                                                       '.rsrc\x00\x00\x00': 2838016,
                                                                                       '.text\x00\x00\x00': 1254912},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8b9ffaea64684357e00c93edc0603a5cddaab02f2c87c4a3d971bc0a1ebaf867'},
 '8bbd850fd8a2b41d090fbf8e005f9a5a76c774aca643318a8a34254f99f79ed8': {'AddressOfEntryPoint': 15040,
                                                                      'DebugRVA': 57824,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'GetLocaleInfoA',
                                                                                      'SHELL32.dll': 'DoEnvironmentSubstW',
                                                                                      'USER32.dll': 'GetDlgItemTextW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersion',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'OpenProcess',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'GetCPInfo',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'DialogBoxParamW',
                                                                                            'FindWindowW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'EndDialog',
                                                                                            'MessageBoxW',
                                                                                            'GetDlgItemTextW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'DoEnvironmentSubstW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 7088268,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 13312,
                                                                                       '.reloc\x00\x00': 23552,
                                                                                       '.rsrc\x00\x00\x00': 7088640,
                                                                                       '.text\x00\x00\x00': 50176},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8bbd850fd8a2b41d090fbf8e005f9a5a76c774aca643318a8a34254f99f79ed8'},
 '8bc53c486cba7fca5ffe4dd43976cbaac6bfb24acc95d23da5ad5bc0e0689a3e': {'AddressOfEntryPoint': 78862,
                                                                      'DebugRVA': 78632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 11456,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 12288,
                                                                                       '.text\x00\x00\x00': 73728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8bc53c486cba7fca5ffe4dd43976cbaac6bfb24acc95d23da5ad5bc0e0689a3e'},
 '8bc59a8a3d5a8631f2256d4b421165b1c4f517ac3b66a22251ca2f6956977a28': {'AddressOfEntryPoint': 17126,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'MSVCRT.dll': 'wcscpy',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'USER32.dll': 'CreateDialogParamA'},
                                                                      'ImportedFunctions': ['_controlfp',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '_wsplitpath',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            'free',
                                                                                            'calloc',
                                                                                            'memcpy',
                                                                                            '_except_handler3',
                                                                                            'memchr',
                                                                                            'memcmp',
                                                                                            '_itoa',
                                                                                            'strlen',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'wcsstr',
                                                                                            'strstr',
                                                                                            'wcschr',
                                                                                            'wcslen',
                                                                                            'wcscat',
                                                                                            'memset',
                                                                                            'wcsncpy',
                                                                                            '__CxxFrameHandler',
                                                                                            'wcscpy',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileTime',
                                                                                            'SetFileTime',
                                                                                            'MapViewOfFile',
                                                                                            'ExitThread',
                                                                                            'UnmapViewOfFile',
                                                                                            'FormatMessageA',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'lstrlenA',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeThread',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateProcessW',
                                                                                            'CloseHandle',
                                                                                            'CreateMutexA',
                                                                                            'ExitProcess',
                                                                                            'GetTempPathW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'FindWindowA',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'MessageBoxA',
                                                                                            'SetWindowTextA',
                                                                                            'SendMessageA',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'wsprintfW',
                                                                                            'PostQuitMessage',
                                                                                            'CreateDialogParamA',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 5720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 15360},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8bc59a8a3d5a8631f2256d4b421165b1c4f517ac3b66a22251ca2f6956977a28'},
 '8be4dba9147438b23de791a2846721adbf0d78d1224a56d67a71471e5b2a5f70': {'AddressOfEntryPoint': 10737,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetACP',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects'},
                                                                      'ImportedFunctions': ['lstrlenA',
                                                                                            '_lclose',
                                                                                            'GetModuleFileNameA',
                                                                                            '_lread',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            '_lwrite',
                                                                                            '_lcreat',
                                                                                            'CreateDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'GetTempPathA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'MoveFileExA',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'CompareStringA',
                                                                                            'DeleteFileA',
                                                                                            'Sleep',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapCreate',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'wsprintfA',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'MessageBoxA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'ShellExecuteExA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 179780,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 180224,
                                                                                       '.text\x00\x00\x00': 22528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8be4dba9147438b23de791a2846721adbf0d78d1224a56d67a71471e5b2a5f70'},
 '8bf9e95427e6ef301e6c1c39097f97f1b50ee4c7d4bcb36781b4174c68f7a444': {'AddressOfEntryPoint': 54365,
                                                                      'DebugRVA': 4112,
                                                                      'DebugSize': 28,
                                                                      'Dll': 320,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 503808,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntdll.dll': 'RtlUnwind'},
                                                                      'ImportedFunctions': ['_stricmp',
                                                                                            '_wcsicmp',
                                                                                            'atoi',
                                                                                            'NtDelayExecution',
                                                                                            'RtlSetHeapInformation',
                                                                                            '_wcsupr',
                                                                                            'LdrSetMUICacheType',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            '_aullshr',
                                                                                            'isspace',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlNormalizeProcessParams',
                                                                                            'NtOpenFile',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtFsControlFile',
                                                                                            'NtClose',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'wcstoul',
                                                                                            '_wcstoui64',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtCreateFile',
                                                                                            'NtReadFile',
                                                                                            'RtlRaiseStatus',
                                                                                            'NtWriteFile',
                                                                                            'memmove',
                                                                                            'RtlQueryRegistryValuesEx',
                                                                                            'NtSetThreadExecutionState',
                                                                                            'RtlRandomEx',
                                                                                            'NtQueryPerformanceCounter',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            'RtlMultiByteToUnicodeN',
                                                                                            'RtlOemToUnicodeN',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            'RtlUnicodeToOemN',
                                                                                            '_wcslwr',
                                                                                            'wcschr',
                                                                                            'NtDisplayString',
                                                                                            'NtSerializeBoot',
                                                                                            'swprintf_s',
                                                                                            'NtCreateEvent',
                                                                                            'NtWaitForMultipleObjects',
                                                                                            'NtCancelIoFile',
                                                                                            'isprint',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtShutdownSystem',
                                                                                            'NtQuerySystemTime',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'RtlGetVersion',
                                                                                            'RtlTimeToTimeFields',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'RtlSizeHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'wcsncmp',
                                                                                            'RtlFindMessage',
                                                                                            'RtlInitAnsiStringEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlFormatMessage',
                                                                                            'qsort',
                                                                                            'NtOpenKey',
                                                                                            'NtQueryValueKey',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'NtSetVolumeInformationFile',
                                                                                            'RtlComputeCrc32',
                                                                                            'DbgPrint',
                                                                                            'RtlCrc64',
                                                                                            'RtlUpcaseUnicodeString',
                                                                                            'RtlSystemTimeToLocalTime',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCopySid',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlQueryInformationAcl',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlNewSecurityObject',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlInitializeGenericTable',
                                                                                            'RtlInsertElementGenericTable',
                                                                                            'RtlInitializeBitMap',
                                                                                            'RtlSetBits',
                                                                                            'RtlLookupElementGenericTable',
                                                                                            'RtlClearBits',
                                                                                            'RtlFindSetBits',
                                                                                            'RtlDeleteElementGenericTable',
                                                                                            'RtlEnumerateGenericTableWithoutSplaying',
                                                                                            'RtlNumberOfSetBits',
                                                                                            'DbgPrintEx',
                                                                                            'NtFlushBuffersFile',
                                                                                            '_alldiv',
                                                                                            '_allmul',
                                                                                            '_allrem',
                                                                                            '_allshl',
                                                                                            '_aulldiv',
                                                                                            '_aulldvrm',
                                                                                            '_chkstk',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'RtlUnwind'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 121,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 271792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 271872,
                                                                                       '.text\x00\x00\x00': 480768},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8bf9e95427e6ef301e6c1c39097f97f1b50ee4c7d4bcb36781b4174c68f7a444'},
 '8c3d759de022634e1f622c3f01d9f7df98d91a67e82684560278200b5efdc283': {'AddressOfEntryPoint': 21142,
                                                                      'DebugRVA': 20748,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 48,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2520,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 13312},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8c3d759de022634e1f622c3f01d9f7df98d91a67e82684560278200b5efdc283'},
 '8c5614a4d7b5b5464f81894c4caf267281d2cb106cc46dcf5675e7e16395180b': {'AddressOfEntryPoint': 95224,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetTimeZoneInformation',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['MessageBoxA',
                                                                                            'ExitWindowsEx',
                                                                                            'EnumWindows',
                                                                                            'IsIconic',
                                                                                            'ShowWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowVisible',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'MessageBoxW',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringA',
                                                                                            'SetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapReAlloc',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetLocaleInfoA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleA',
                                                                                            'GetMailslotInfo',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLongPathNameW',
                                                                                            'ExitProcess',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'FindFirstFileA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'AreFileApisANSI',
                                                                                            'FindFirstFileW',
                                                                                            'GetShortPathNameA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetShortPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetLongPathNameA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetTempPathA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFullPathNameA',
                                                                                            'LoadLibraryW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetConsoleOutputCP',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SearchPathA',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetProcessHeap',
                                                                                            'CreateThread',
                                                                                            'CreateMailslotA',
                                                                                            'GetCommandLineW',
                                                                                            'CreateSemaphoreA',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'GetTickCount',
                                                                                            'AllocConsole',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateProcessW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlUnwindEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'DebugBreak',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSize',
                                                                                            'GetModuleHandleW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetHandleCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetTimeZoneInformation'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 146,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 158720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.pdata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 45056,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 158720,
                                                                                       '.text\x00\x00\x00': 180224},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8c5614a4d7b5b5464f81894c4caf267281d2cb106cc46dcf5675e7e16395180b'},
 '8c57e9d0f7446a998a2ea4f100ed7cad6a9fa7f8f9da0578cde9d14be3860147': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 177936,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 178176,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8c57e9d0f7446a998a2ea4f100ed7cad6a9fa7f8f9da0578cde9d14be3860147'},
 '8c7ad7303b8e4addafc174b46ee951fc063db116deb7abfb6aeebf733b84d87c': {'AddressOfEntryPoint': 26192,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseEventLog',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'NETAPI32.dll': 'NetServerGetInfo',
                                                                                      'SHLWAPI.dll': 'StrChrIW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'VerSetConditionMask'},
                                                                      'ImportedFunctions': ['RegisterEventSourceW',
                                                                                            'OpenProcessToken',
                                                                                            'OpenEventLogW',
                                                                                            'GetTokenInformation',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegOpenKeyExW',
                                                                                            'ReportEventW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'CloseEventLog',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'SetLastError',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'ReadFile',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapSize',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'Sleep',
                                                                                            'wcstok',
                                                                                            'fflush',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_iob',
                                                                                            '_memicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'memset',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetGetLastErrorW',
                                                                                            'GetUserNameExW',
                                                                                            'WSACleanup',
                                                                                            'GetAddrInfoW',
                                                                                            'GetNameInfoW',
                                                                                            'FreeAddrInfoW',
                                                                                            'WSAGetLastError',
                                                                                            'WSAStartup',
                                                                                            'NetApiBufferFree',
                                                                                            'NetServerGetInfo',
                                                                                            'StrStrW',
                                                                                            'StrStrIW',
                                                                                            'StrChrW',
                                                                                            'StrChrIW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2152,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8c7ad7303b8e4addafc174b46ee951fc063db116deb7abfb6aeebf733b84d87c'},
 '8c891eafeda8ea789e095bf95b8cd29be283c68f64b14041448de52ea1db28dd': {'AddressOfEntryPoint': 167656,
                                                                      'DebugRVA': 4976,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 9,
                                                                      'ImportedDLL': {'GDI32.dll': 'GetTextExtentPoint32A',
                                                                                      'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'LoadIconA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CreateFileW',
                                                                                            'OpenProcess',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetFilePointer',
                                                                                            'HeapSetInformation',
                                                                                            'CreateEventA',
                                                                                            'SetEvent',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'GetVersionExA',
                                                                                            'CompareStringA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteFileA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTempPathA',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'CreateDirectoryA',
                                                                                            'CopyFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemInfo',
                                                                                            'GetCurrentProcess',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'ReadFile',
                                                                                            'Sleep',
                                                                                            'GetDiskFreeSpaceExA',
                                                                                            'IsValidCodePage',
                                                                                            'EndUpdateResourceA',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateThread',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'MulDiv',
                                                                                            'lstrlenW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'CloseHandle',
                                                                                            'GetTickCount',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'GetProcessHeap',
                                                                                            'UpdateResourceA',
                                                                                            'BeginUpdateResourceA',
                                                                                            'LoadLibraryA',
                                                                                            'lstrlenA',
                                                                                            'UpdateResourceW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'CopyFileW',
                                                                                            'BeginUpdateResourceW',
                                                                                            'GetVersion',
                                                                                            'CreateFileA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'SetEndOfFile',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSize',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapAlloc',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'WriteFile',
                                                                                            'LocalAlloc',
                                                                                            'InterlockedExchange',
                                                                                            'RaiseException',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlUnwind',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStockObject',
                                                                                            'GetObjectA',
                                                                                            'EnumFontFamiliesExA',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'GetTextMetricsA',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteA',
                                                                                            'ShellExecuteExA',
                                                                                            'ShowScrollBar',
                                                                                            'GetClientRect',
                                                                                            'SetClassLongA',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'SetWindowTextA',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'CreateDialogParamA',
                                                                                            'SetForegroundWindow',
                                                                                            'EnableWindow',
                                                                                            'GetFocus',
                                                                                            'SetFocus',
                                                                                            'ScreenToClient',
                                                                                            'MoveWindow',
                                                                                            'LoadImageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SendMessageA',
                                                                                            'GetDlgItem',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetWindowRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'ExitWindowsEx',
                                                                                            'CharNextA',
                                                                                            'MessageBoxA',
                                                                                            'DrawTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDC',
                                                                                            'GetDialogBaseUnits',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxW',
                                                                                            'LoadIconA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 195,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 359484,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 17408,
                                                                                       '.rsrc\x00\x00\x00': 359936,
                                                                                       '.text\x00\x00\x00': 297984},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8c891eafeda8ea789e095bf95b8cd29be283c68f64b14041448de52ea1db28dd'},
 '8d130351f58bdfdf551a72359b2b746cbf371db96cbb88ade692c8112b55d561': {'AddressOfEntryPoint': 13386,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'MoveFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareFileTime',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'lstrcpyW',
                                                                                            'MoveFileExW',
                                                                                            'lstrcatW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetShortPathNameW',
                                                                                            'SearchPathW',
                                                                                            'lstrcmpiW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrcmpW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableMenuItem',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapW',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'wsprintfW',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharPrevW',
                                                                                            'CharNextA',
                                                                                            'wsprintfA',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EndDialog',
                                                                                            'RegisterClassW',
                                                                                            'SystemParametersInfoW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'CharNextW',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'LoadImageW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowExW',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetForegroundWindow',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 41888,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 41984,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8d130351f58bdfdf551a72359b2b746cbf371db96cbb88ade692c8112b55d561'},
 '8d2a341ef36633aae533204ced7a088731e67e5dc2ac325836a5c31dd3cd0e33': {'AddressOfEntryPoint': 268848,
                                                                      'DebugRVA': 1129212,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49216,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1167360,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'DUser.dll': 'SetGadgetStyle',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'CreateProcessW',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'UxTheme.dll': 'IsAppThemed',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExA',
                                                                                      'mmcbase.DLL': '?LKResult2HRESULT@BookKeeping@@SGJJ@Z',
                                                                                      'msvcrt.dll': '_vsnwprintf',
                                                                                      'ntdll.dll': 'EtwGetTraceLoggerHandle',
                                                                                      'ole32.dll': 'GetHGlobalFromStream'},
                                                                      'ImportedFunctions': ['GetTextExtentPoint32W',
                                                                                            'SelectObject',
                                                                                            'GetStockObject',
                                                                                            'PtInRegion',
                                                                                            'CreatePolygonRgn',
                                                                                            'FillRgn',
                                                                                            'GetTextMetricsW',
                                                                                            'GetLayout',
                                                                                            'SetLayout',
                                                                                            'BitBlt',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'PatBlt',
                                                                                            'PtVisible',
                                                                                            'RectVisible',
                                                                                            'TextOutW',
                                                                                            'ExtTextOutW',
                                                                                            'Escape',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'GrayStringW',
                                                                                            'TabbedTextOutW',
                                                                                            'IsMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SetWindowTextW',
                                                                                            'GetClassNameW',
                                                                                            'wsprintfW',
                                                                                            'GetClassInfoExW',
                                                                                            'CreateWindowExW',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'InvalidateRgn',
                                                                                            'CallWindowProcW',
                                                                                            'RegisterClassExW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetDoubleClickTime',
                                                                                            'GetIconInfo',
                                                                                            'PrivateExtractIconsW',
                                                                                            'CopyIcon',
                                                                                            'MessageBoxW',
                                                                                            'OffsetRect',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'CopyRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetRect',
                                                                                            'RedrawWindow',
                                                                                            'FindWindowExW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindow',
                                                                                            'EnableWindow',
                                                                                            'SetRectEmpty',
                                                                                            'GetSystemMetrics',
                                                                                            'RegisterWindowMessageW',
                                                                                            'GetMenuItemID',
                                                                                            'FillRect',
                                                                                            'GetSysColorBrush',
                                                                                            'GetClassInfoW',
                                                                                            'PtInRect',
                                                                                            'GetClientRect',
                                                                                            'ShowWindow',
                                                                                            'InvalidateRect',
                                                                                            'IsRectEmpty',
                                                                                            'InflateRect',
                                                                                            'SetCapture',
                                                                                            'GetKeyState',
                                                                                            'GetCursorPos',
                                                                                            'ScreenToClient',
                                                                                            'MapWindowPoints',
                                                                                            'IsIconic',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'GetFocus',
                                                                                            'SetFocus',
                                                                                            'DeleteMenu',
                                                                                            'GetMenuState',
                                                                                            'InsertMenuW',
                                                                                            'ModifyMenuW',
                                                                                            'GetDlgCtrlID',
                                                                                            'ClientToScreen',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'EnumChildWindows',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'SendMessageW',
                                                                                            'PeekMessageW',
                                                                                            'IsWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'CreatePopupMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuStringW',
                                                                                            'AppendMenuW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'DestroyMenu',
                                                                                            'GetSysColor',
                                                                                            'DrawEdge',
                                                                                            'LoadImageW',
                                                                                            'SetWindowLongW',
                                                                                            'IsChild',
                                                                                            'DrawTextW',
                                                                                            'SetParent',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowPlacement',
                                                                                            'EnableMenuItem',
                                                                                            'BringWindowToTop',
                                                                                            'GetSystemMenu',
                                                                                            'IsZoomed',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'NotifyWinEvent',
                                                                                            'GetForegroundWindow',
                                                                                            'SetMenuDefaultItem',
                                                                                            'CharLowerW',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'TrackPopupMenuEx',
                                                                                            'IsWindowEnabled',
                                                                                            'DrawFocusRect',
                                                                                            'DefWindowProcW',
                                                                                            'SetWindowPos',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'SetClipboardViewer',
                                                                                            'GetWindowTextW',
                                                                                            'EnumThreadWindows',
                                                                                            'SetActiveWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'ChangeClipboardChain',
                                                                                            'GetMenu',
                                                                                            'SetMenu',
                                                                                            'DrawFrameControl',
                                                                                            'DestroyIcon',
                                                                                            'GetSubMenu',
                                                                                            'CharUpperW',
                                                                                            'DrawIconEx',
                                                                                            'CopyImage',
                                                                                            'GetMessageTime',
                                                                                            'UnionRect',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'LoadAcceleratorsW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessagePos',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetWindowLongW',
                                                                                            'LoadMenuW',
                                                                                            'MessageBeep',
                                                                                            'LoadIconW',
                                                                                            'UpdateWindow',
                                                                                            'IsWindowVisible',
                                                                                            'PostMessageW',
                                                                                            'LoadStringW',
                                                                                            'GetParent',
                                                                                            'CharNextW',
                                                                                            'DestroyWindow',
                                                                                            'memset',
                                                                                            '_ltow',
                                                                                            'wcsncmp',
                                                                                            '_ultow',
                                                                                            'wcstoul',
                                                                                            'iswspace',
                                                                                            'wcsrchr',
                                                                                            '__RTDynamicCast',
                                                                                            '_ftol2_sse',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            'wcschr',
                                                                                            '_wtoi',
                                                                                            'wcsstr',
                                                                                            '_mbslen',
                                                                                            '_mbsnbcnt',
                                                                                            'wcstol',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'realloc',
                                                                                            'wcscpy_s',
                                                                                            '__argc',
                                                                                            '__wargv',
                                                                                            'swscanf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_purecall',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'memcpy_s',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            '?AddSnapin@BookKeeping@@SGJPBGAAH@Z',
                                                                                            '?InterfaceMethodActivationContextException@BookKeeping@@SGXHPBG0KPAU_EXCEPTION_POINTERS@@@Z',
                                                                                            '?AddSnapinInterface@BookKeeping@@SG_NPAUIUnknown@@PBGAAH@Z',
                                                                                            '?ReleaseSnapinInterface@BookKeeping@@SGJPAUIUnknown@@H@Z',
                                                                                            '??0SC@mmcerror@@QAE@ABV01@@Z',
                                                                                            '?InvalidInterface@BookKeeping@@SGXHPBG0@Z',
                                                                                            '?InterfaceMethodException@BookKeeping@@SGXHPBG0KPAU_EXCEPTION_POINTERS@@@Z',
                                                                                            '?MMCNullInterface@BookKeeping@@SGXHPBG0@Z',
                                                                                            '??4SC@mmcerror@@QAEAAV01@ABV01@@Z',
                                                                                            '?SetFunctionName@SC@mmcerror@@QAEXPBG@Z',
                                                                                            '?GetHWnd@SC@mmcerror@@SGPAUHWND__@@XZ',
                                                                                            '??BSC@mmcerror@@QBE_NXZ',
                                                                                            '?TraceError@@YGXPBGABVSC@mmcerror@@@Z',
                                                                                            '??1SC@mmcerror@@QAE@XZ',
                                                                                            '??0SC@mmcerror@@QAE@J@Z',
                                                                                            '?GetSnapinName@BookKeeping@@SGPBGH@Z',
                                                                                            '?SetHWnd@SC@mmcerror@@SGXPAUHWND__@@@Z',
                                                                                            '?TraceSnapinError@@YGXPBGABVSC@mmcerror@@@Z',
                                                                                            '?ScEmitOrPostpone@CEventBuffer@@QAE?AVSC@mmcerror@@PAUIDispatch@@JPAVCComVariant@ATL@@H@Z',
                                                                                            '?MMC_PickIconDlg@@YGHPAUHWND__@@PAGIPAH@Z',
                                                                                            'InsideModalLoop',
                                                                                            '?FindAllSnapinUIThreads@BookKeeping@@SGJPAPAKPAK@Z',
                                                                                            '??9SC@mmcerror@@QBE_NJ@Z',
                                                                                            '?AddItem@BookKeeping@@SGJAAVItemHandle@@@Z',
                                                                                            '?LoadStandardOverlays@@YGJPAU_IMAGELIST@@HPAH1@Z',
                                                                                            '?RemoveItem@BookKeeping@@SGJPAX@Z',
                                                                                            '?GetStringModule@@YGPAUHINSTANCE__@@XZ',
                                                                                            '??7SC@mmcerror@@QBEHXZ',
                                                                                            '?FromMMC@SC@mmcerror@@QAEAAV12@J@Z',
                                                                                            '?Clear@SC@mmcerror@@QAEXXZ',
                                                                                            '?FindItem@BookKeeping@@SGPAVItemHandle@@PAX@Z',
                                                                                            '??0?$CEventLock@UAppEvents@@@@QAE@XZ',
                                                                                            '??1?$CEventLock@UAppEvents@@@@QAE@XZ',
                                                                                            '?Throw@SC@mmcerror@@QAEXJ@Z',
                                                                                            '?Throw@SC@mmcerror@@QAEXXZ',
                                                                                            '?FromWin32@SC@mmcerror@@QAEAAV12@J@Z',
                                                                                            '?MMCErrorBox@@YGHPBGI@Z',
                                                                                            '?FatalError@SC@mmcerror@@QBEXXZ',
                                                                                            '?IsError@SC@mmcerror@@QBE_NXZ',
                                                                                            '?GetErrorMessage@SC@mmcerror@@QBEXIPAG@Z',
                                                                                            '?GetHelpID@SC@mmcerror@@QAEKXZ',
                                                                                            '?Release@CMMCStrongReferences@@SGKXZ',
                                                                                            '?AddRef@CMMCStrongReferences@@SGKXZ',
                                                                                            '??8SC@mmcerror@@QBE_NABV01@@Z',
                                                                                            '?MMCErrorBox@@YGHPBGVSC@mmcerror@@I@Z',
                                                                                            '?FromLastError@SC@mmcerror@@QAEAAV12@XZ',
                                                                                            '?LastRefReleased@CMMCStrongReferences@@SG_NXZ',
                                                                                            '?GetHelpFile@SC@mmcerror@@SGPBGXZ',
                                                                                            '?ScSetConsoleEventDispatcher@CConsoleEventDispatcherProvider@@SG?AVSC@mmcerror@@PAVCConsoleEventDispatcher@@@Z',
                                                                                            '?SetMainThreadID@SC@mmcerror@@SGXK@Z',
                                                                                            '??4SC@mmcerror@@QAEAAV01@J@Z',
                                                                                            '??8SC@mmcerror@@QBE_NJ@Z',
                                                                                            '?MMCErrorBox@@YGHVSC@mmcerror@@I@Z',
                                                                                            '?ScFromMMC@@YG?AVSC@mmcerror@@J@Z',
                                                                                            '?GetComObjectEventSource@@YGAAV?$CEventSource@VCComObjectObserver@@VCVoid@@V2@V2@V2@@@XZ',
                                                                                            '?TraceAndClear@SC@mmcerror@@QAEXXZ',
                                                                                            '?MMCErrorBox@@YGHII@Z',
                                                                                            '?GetEventBuffer@@YGAAVCEventBuffer@@XZ',
                                                                                            '?MMCUpdateRegistry@@YGJHPBVCObjectRegParams@@PBVCControlRegParams@@@Z',
                                                                                            '?ToHr@SC@mmcerror@@QBEJXZ',
                                                                                            '?LKResult2HRESULT@BookKeeping@@SGJJ@Z',
                                                                                            'CoGetMalloc',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'OleLockRunning',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoGetClassObject',
                                                                                            'DoDragDrop',
                                                                                            'RevokeDragDrop',
                                                                                            'CoCreateGuid',
                                                                                            'OleRun',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleUninitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleInitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoDisconnectObject',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'StringFromGUID2',
                                                                                            'RegisterDragDrop',
                                                                                            'GetHGlobalFromStream',
                                                                                            'PathFindFileNameW',
                                                                                            'IsThemeActive',
                                                                                            'OpenThemeData',
                                                                                            'DrawThemeBackground',
                                                                                            'CloseThemeData',
                                                                                            'SetWindowTheme',
                                                                                            'IsAppThemed',
                                                                                            'GetGadgetRect',
                                                                                            'SetGadgetStyle',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'FindNextFileW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineW',
                                                                                            'OutputDebugStringW',
                                                                                            'CompareStringW',
                                                                                            'lstrcmpW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetLastError',
                                                                                            'GetLongPathNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FreeLibrary',
                                                                                            'GlobalReAlloc',
                                                                                            'ReadFile',
                                                                                            'CreateDirectoryW',
                                                                                            'FormatMessageW',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'LocalFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'LoadLibraryExA',
                                                                                            'DecodePointer',
                                                                                            'FlushInstructionCache',
                                                                                            'DelayLoadFailureHook',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualFree',
                                                                                            'GetCurrentProcess',
                                                                                            'EncodePointer',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetFileSize',
                                                                                            'FindClose',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'FindFirstFileW',
                                                                                            'lstrcmpiW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'RaiseException',
                                                                                            'GlobalUnlock',
                                                                                            'GetTickCount',
                                                                                            'GlobalFree',
                                                                                            'Sleep',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'OutputDebugStringA',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'DeleteAtom',
                                                                                            'AddAtomW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetFileMUIPath',
                                                                                            'GetFileTime',
                                                                                            'CreateFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'DeleteFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'lstrcpyW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'HeapDestroy',
                                                                                            'lstrlenW',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemInfo',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 424,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 280016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 33280,
                                                                                       '.didat\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 104960,
                                                                                       '.rsrc\x00\x00\x00': 280064,
                                                                                       '.text\x00\x00\x00': 1125376},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8d2a341ef36633aae533204ced7a088731e67e5dc2ac325836a5c31dd3cd0e33'},
 '8d546c1bf686fd06d9fe126e4391bd81c8c9f91db71abdcb1a2ee0318e780c44': {'AddressOfEntryPoint': 23957,
                                                                      'DebugRVA': 70208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'SetLastError',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'IsWindowVisible',
                                                                                      'USERENV.dll': 'LoadUserProfileW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoA',
                                                                                            'LoadResource',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'OutputDebugStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'OpenProcess',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetLocalTime',
                                                                                            'Process32FirstW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'LockResource',
                                                                                            'Process32NextW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalMemoryStatus',
                                                                                            'VirtualQuery',
                                                                                            'SetErrorMode',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThread',
                                                                                            'IsBadReadPtr',
                                                                                            'Module32First',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleFileNameA',
                                                                                            'IsDebuggerPresent',
                                                                                            'Module32Next',
                                                                                            'DeleteFileW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateMutexW',
                                                                                            'SetDllDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'SetEndOfFile',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetConsoleMode',
                                                                                            'TlsAlloc',
                                                                                            'IsValidCodePage',
                                                                                            'GetConsoleCP',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'RtlUnwind',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'SetLastError',
                                                                                            'EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'IsWindowVisible',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'LookupAccountSidW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetTokenInformation',
                                                                                            'RegOverridePredefKey',
                                                                                            'GetUserNameW',
                                                                                            'OpenProcessToken',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathAppendW',
                                                                                            'UnloadUserProfile',
                                                                                            'LoadUserProfileW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 116,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5380,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 22528,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 65536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8d546c1bf686fd06d9fe126e4391bd81c8c9f91db71abdcb1a2ee0318e780c44'},
 '8dd0e96db1eccb739a55bf60e0b4055da712b81b3030c2e7ab93a5bf803d1c3b': {'AddressOfEntryPoint': 28368,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'cmutil.dll': 'CmBuildFullPathFromRelativeW',
                                                                                      'msvcrt.dll': '_vsnprintf'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'CreateEventW',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'lstrcmpiW',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenEventW',
                                                                                            'GetCurrentProcessId',
                                                                                            'lstrlenA',
                                                                                            'Sleep',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'GetLastError',
                                                                                            'lstrlenW',
                                                                                            'OpenFileMappingW',
                                                                                            'lstrcmpW',
                                                                                            'WaitForSingleObject',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlUnwind',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetExitCodeProcess',
                                                                                            'LoadLibraryW',
                                                                                            'OpenProcess',
                                                                                            'GetProcessHeap',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'DeleteObject',
                                                                                            'PostQuitMessage',
                                                                                            'SetDlgItemTextW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'GetDlgItem',
                                                                                            'RegisterWindowMessageW',
                                                                                            'EnableWindow',
                                                                                            'SendMessageW',
                                                                                            'IsWindowVisible',
                                                                                            'PostThreadMessageW',
                                                                                            'IsWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'PeekMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetMessageW',
                                                                                            'GetWindowRect',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetProcessWindowStation',
                                                                                            'PostMessageW',
                                                                                            'GetThreadDesktop',
                                                                                            'DispatchMessageW',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            '_vsnprintf',
                                                                                            '?GetPrimaryRegPath@CIniW@@QBEPBGXZ',
                                                                                            'CmAtolW',
                                                                                            'CmIsDigitW',
                                                                                            'ReleaseBold',
                                                                                            'MakeBold',
                                                                                            'CmLoadStringW',
                                                                                            'CmFmtMsgW',
                                                                                            'CmStrCpyAllocW',
                                                                                            'IsLogonAsSystem',
                                                                                            '??0CIniW@@QAE@PAUHINSTANCE__@@PBG111@Z',
                                                                                            '??1CIniW@@QAE@XZ',
                                                                                            '?Clear@CIniW@@QAEXXZ',
                                                                                            '?SetHInst@CIniW@@QAEXPAUHINSTANCE__@@@Z',
                                                                                            '?SetFile@CIniW@@QAEXPBG@Z',
                                                                                            '?SetPrimaryFile@CIniW@@QAEXPBG@Z',
                                                                                            '?SetPrimaryRegPath@CIniW@@QAEXPBG@Z',
                                                                                            '?GetFile@CIniW@@QBEPBGXZ',
                                                                                            '?GPPS@CIniW@@QBEPAGPBG00@Z',
                                                                                            '?GPPI@CIniW@@QBEKPBG0K@Z',
                                                                                            '?GPPB@CIniW@@QBEHPBG0H@Z',
                                                                                            '??0CmLogFile@@QAE@XZ',
                                                                                            '??1CmLogFile@@QAE@XZ',
                                                                                            '?Init@CmLogFile@@QAEJPAUHINSTANCE__@@HPBG@Z',
                                                                                            '?SetParams@CmLogFile@@QAEJHKPBG@Z',
                                                                                            '?Start@CmLogFile@@QAEJH@Z',
                                                                                            '?Stop@CmLogFile@@QAEJXZ',
                                                                                            '?DeInit@CmLogFile@@QAEJXZ',
                                                                                            '?Log@CmLogFile@@QAAXW4_CMLOG_ITEM@@ZZ',
                                                                                            'CmLoadIconW',
                                                                                            'CmLoadSmallIconW',
                                                                                            'CmMalloc',
                                                                                            'CmFree',
                                                                                            'CmBuildFullPathFromRelativeW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 28160},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8dd0e96db1eccb739a55bf60e0b4055da712b81b3030c2e7ab93a5bf803d1c3b'},
 '8dfeb7075dee18139481ff059c98f3ca247173be412f276549831c82096c15ef': {'AddressOfEntryPoint': 23456,
                                                                      'DebugRVA': 11376,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'api-ms-win-appmodel-runtime-l1-1-0.dll': 'GetPackageFullName',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-com-l1-1-0.dll': 'CoTaskMemFree',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapFree',
                                                                                      'api-ms-win-core-libraryloader-l1-1-1.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-0.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processthreads-l1-1-1.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryInfoKeyW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-0.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsCreateStringReference',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AddAccessAllowedAceEx',
                                                                                      'api-ms-win-security-lsalookup-l2-1-0.dll': 'LookupPrivilegeValueW',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_cexit',
                                                                                            '__p__fmode',
                                                                                            'exit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '__set_app_type',
                                                                                            'malloc',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '__wgetmainargs',
                                                                                            '_vsnwprintf',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'memmove',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcsicmp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '_XcptFilter',
                                                                                            'iswdigit',
                                                                                            'iswspace',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'wprintf',
                                                                                            '_wtoi',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_exit',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'CLSIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcessToken',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'GetTokenInformation',
                                                                                            'RevertToSelf',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetLengthSid',
                                                                                            'GetAclInformation',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeAcl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'GetAce',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'RegCloseKey',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetPackageFullName',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'FormatMessageW',
                                                                                            'LookupAccountSidW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'WindowsCreateStringReference'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 94,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8dfeb7075dee18139481ff059c98f3ca247173be412f276549831c82096c15ef'},
 '8e0e651a59fdf07f2161d2578baa97ba6de8b624f4ab9a17d3c633f4a060b522': {'AddressOfEntryPoint': 22416,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'USER32.dll': 'DispatchMessageA',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'SetFileAttributesA',
                                                                                            'CloseHandle',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetVersion',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileAttributesExA',
                                                                                            'CreateFileA',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetModuleHandleW',
                                                                                            'GetTickCount',
                                                                                            'CharNextExA',
                                                                                            'EnableMenuItem',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'CreateDialogParamA',
                                                                                            'GetSystemMenu',
                                                                                            'DestroyWindow',
                                                                                            'DispatchMessageA',
                                                                                            '_unlink',
                                                                                            '_write',
                                                                                            '_stat',
                                                                                            '_close',
                                                                                            'atoi',
                                                                                            'isdigit',
                                                                                            'strspn',
                                                                                            'strpbrk',
                                                                                            '_stricmp',
                                                                                            '_filelength',
                                                                                            'strncmp',
                                                                                            'strchr',
                                                                                            '_chmod',
                                                                                            'tolower',
                                                                                            'fgets',
                                                                                            '_chsize',
                                                                                            '_iob',
                                                                                            '_lseek',
                                                                                            'getenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'toupper',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_getdrive',
                                                                                            '_open',
                                                                                            '_tempnam',
                                                                                            '_strdup',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_vsnprintf',
                                                                                            'isalpha',
                                                                                            '_mkdir',
                                                                                            '_read',
                                                                                            'printf',
                                                                                            '_errno',
                                                                                            '_amsg_exit',
                                                                                            '__doserrno',
                                                                                            '_eof',
                                                                                            'memcpy',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 88,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 20992},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8e0e651a59fdf07f2161d2578baa97ba6de8b624f4ab9a17d3c633f4a060b522'},
 '8e3c5e339ccdff4a0eaaec9a39bf82f9ac6db93d4fd3c2e8df01cf49d8604cbe': {'AddressOfEntryPoint': 43672,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 81064,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 81408,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 41472,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8e3c5e339ccdff4a0eaaec9a39bf82f9ac6db93d4fd3c2e8df01cf49d8604cbe'},
 '8e416aced9319c33c48654100f999279e69f6a81623d4ba92bf950f4dabb5901': {'AddressOfEntryPoint': 31168,
                                                                      'DebugRVA': 4448,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceMessage',
                                                                                      'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'PROPSYS.dll': 'PropVariantToUInt32',
                                                                                      'SHLWAPI.dll': 'SHStrDupW',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'msvcrt.dll': '_exit',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegDeleteValueW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'RegSetValueExW',
                                                                                            'TraceMessage',
                                                                                            'GetCommandLineW',
                                                                                            'FindResourceExW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExW',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'lstrcmpiW',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'FormatMessageW',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnregisterClassA',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'CharNextW',
                                                                                            'wcsncpy_s',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'memcpy_s',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '_purecall',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_except_handler4_common',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            '_exit',
                                                                                            'PropVariantClear',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'RegisterTypeLib',
                                                                                            'SysAllocString',
                                                                                            'VarUI4FromStr',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SHStrDupW',
                                                                                            'PropVariantToGUID',
                                                                                            'PropVariantToUInt32'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3248,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 30208},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8e416aced9319c33c48654100f999279e69f6a81623d4ba92bf950f4dabb5901'},
 '8e5a9e595f24d07206791817972fe475a0d66f3abb9cfddc8fb50203ad449dae': {'AddressOfEntryPoint': 156832,
                                                                      'DebugRVA': 5536,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 288016,
                                                                      'ExportSize': 90,
                                                                      'IATRVA': 307200,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'DEVOBJ.dll': 'DevObjOpenDevRegKey',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'WUDFPlatform.dll': 'WudfWaitForDebugger',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-crt-l1-1-0.dll': 'wcsncmp',
                                                                                      'api-ms-win-core-crt-l2-1-0.dll': '_onexit',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-namedpipe-l1-2-0.dll': 'WaitNamedPipeW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TlsSetValue',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegSetValueExW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'LeaveCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetOsSafeBootMode',
                                                                                      'api-ms-win-core-threadpool-l1-2-0.dll': 'CloseThreadpoolCleanupGroup',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'TraceMessage',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventActivityIdControl',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'RevertToSelf',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertStringSidToSidW',
                                                                                      'ntdll.dll': 'RtlSetIoCompletionCallback'},
                                                                      'ImportedFunctions': ['_vsnprintf_s',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            '__C_specific_handler',
                                                                                            'wcscpy_s',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_vsnwprintf_s',
                                                                                            'wcsncmp',
                                                                                            '__wgetmainargs',
                                                                                            '_purecall',
                                                                                            'exit',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__dllonexit3',
                                                                                            '_onexit',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'DbgPrintEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlSetIoCompletionCallback',
                                                                                            'CloseHandle',
                                                                                            'RaiseException',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'TraceMessage',
                                                                                            'TlsGetValue',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsFree',
                                                                                            'GetCurrentProcessId',
                                                                                            'TlsAlloc',
                                                                                            'CreateThread',
                                                                                            'TlsSetValue',
                                                                                            'GetTickCount',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetOsSafeBootMode',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'EventActivityIdControl',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'UuidFromStringW',
                                                                                            'CoUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'CoInitializeEx',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteFile',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'TransactNamedPipe',
                                                                                            'WaitNamedPipeW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetOverlappedResult',
                                                                                            'DeviceIoControl',
                                                                                            'LoadLibraryExA',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'CloseThreadpoolWait',
                                                                                            'WaitForThreadpoolWaitCallbacks',
                                                                                            'SetThreadpoolWait',
                                                                                            'CreateThreadpoolWait',
                                                                                            'CreateThreadpool',
                                                                                            'CloseThreadpool',
                                                                                            'SetThreadpoolThreadMaximum',
                                                                                            'SetThreadpoolThreadMinimum',
                                                                                            'CloseThreadpoolCleanupGroupMembers',
                                                                                            'CreateThreadpoolCleanupGroup',
                                                                                            'CloseThreadpoolCleanupGroup',
                                                                                            'RevertToSelf',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DevObjGetDeviceInstanceId',
                                                                                            'DevObjCreateDeviceInfoList',
                                                                                            'DevObjGetClassDevs',
                                                                                            'DevObjEnumDeviceInfo',
                                                                                            'DevObjGetDeviceRegistryProperty',
                                                                                            'DevObjDestroyDeviceInfoList',
                                                                                            'DevObjOpenDevRegKey',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WudfIsUserDebuggerPresent',
                                                                                            'WudfIsKernelDebuggerPresent',
                                                                                            'WudfDebugBreakPoint',
                                                                                            'ShutdownPlatformLibrary',
                                                                                            'WdfGetLpcInterface',
                                                                                            'InitializePlatformLibrary',
                                                                                            'GetAndInitializePlatformObject',
                                                                                            'WudfWaitForDebugger'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 27,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2752,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 284160},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/8e5a9e595f24d07206791817972fe475a0d66f3abb9cfddc8fb50203ad449dae'},
 '8e9dd45d81352c2fe6f6b6ab124ae81d2b6485dba434bd59cfe8ce44f7628b24': {'AddressOfEntryPoint': 158510,
                                                                      'DebugRVA': 158284,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1952,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 150528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8e9dd45d81352c2fe6f6b6ab124ae81d2b6485dba434bd59cfe8ce44f7628b24'},
 '8ebc2c50697810d4df9579604b9dd79e3250d5259d6af1f6fa4c6108f6f8e856': {'AddressOfEntryPoint': 4761,
                                                                      'DebugRVA': 12576,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 486539264,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'VCRUNTIME140.dll': '__std_type_info_destroy_list',
                                                                                      'api-ms-win-crt-heap-l1-1-0.dll': '_set_new_mode',
                                                                                      'api-ms-win-crt-locale-l1-1-0.dll': '_configthreadlocale',
                                                                                      'api-ms-win-crt-math-l1-1-0.dll': '__setusermatherr',
                                                                                      'api-ms-win-crt-runtime-l1-1-0.dll': '_get_wide_winmain_command_line',
                                                                                      'api-ms-win-crt-stdio-l1-1-0.dll': '_set_fmode',
                                                                                      'python35.dll': 'Py_Main'},
                                                                      'ImportedFunctions': ['Py_Main',
                                                                                            'memset',
                                                                                            '_except_handler4_common',
                                                                                            '__std_type_info_destroy_list',
                                                                                            '_configure_wide_argv',
                                                                                            '_seh_filter_dll',
                                                                                            '_configure_narrow_argv',
                                                                                            '_initialize_narrow_environment',
                                                                                            '_cexit',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_crt_atexit',
                                                                                            '_crt_at_quick_exit',
                                                                                            '_controlfp_s',
                                                                                            'terminate',
                                                                                            '_register_onexit_function',
                                                                                            '_register_thread_local_exe_atexit_callback',
                                                                                            '_initialize_onexit_table',
                                                                                            '_initialize_wide_environment',
                                                                                            '_set_app_type',
                                                                                            '_seh_filter_exe',
                                                                                            '__p___argc',
                                                                                            '__p___wargv',
                                                                                            'exit',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_execute_onexit_table',
                                                                                            '_get_wide_winmain_command_line',
                                                                                            '__setusermatherr',
                                                                                            '__p__commode',
                                                                                            '_set_fmode',
                                                                                            '_configthreadlocale',
                                                                                            '_set_new_mode',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 46,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 22392,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 22528,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 2000000,
                                                                      'filename': './data/clean/8ebc2c50697810d4df9579604b9dd79e3250d5259d6af1f6fa4c6108f6f8e856'},
 '8ef8155a748a3b8d8d8e470b268a685104fa9634974827c5da6d4df8acb8d355': {'AddressOfEntryPoint': 41102,
                                                                      'DebugRVA': 40892,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1496,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 33280},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8ef8155a748a3b8d8d8e470b268a685104fa9634974827c5da6d4df8acb8d355'},
 '8f379b7d937f83ea30a954c81c142a67802f6431574728d2bafbf06889d7994d': {'AddressOfEntryPoint': 100116,
                                                                      'DebugRVA': 107952,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 148592,
                                                                      'ExportSize': 309,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'MSVCR100.dll': '??3@YAXPEAX@Z',
                                                                                      'OPENGL32.dll': 'glGetString',
                                                                                      'QtCore4.dll': '?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z',
                                                                                      'QtGui4.dll': '?actionEvent@QWidget@@MEAAXPEAVQActionEvent@@@Z',
                                                                                      'QtOpenGL4.dll': '?resizeOverlayGL@QGLWidget@@MEAAXHH@Z',
                                                                                      'VBoxOGLhostcrutil.dll': 'crDLLClose',
                                                                                      'VBoxRT.dll': 'RTPathExecDir'},
                                                                      'ImportedFunctions': ['crStrlen',
                                                                                            'crStrSplit',
                                                                                            'crStrchr',
                                                                                            'crStrncmp',
                                                                                            'crFreeStrings',
                                                                                            'crWarning',
                                                                                            'crAlloc',
                                                                                            'crMemset',
                                                                                            'crDLLOpen',
                                                                                            'crFree',
                                                                                            'crDLLGetNoError',
                                                                                            'crError',
                                                                                            'crStrcmp',
                                                                                            'crDebug',
                                                                                            'crDLLClose',
                                                                                            'RTSystemQueryOSInfo',
                                                                                            'RTLogRelLogger',
                                                                                            'RTBldCfgRevision',
                                                                                            'RTTimeSpecToString',
                                                                                            'RTTimeNow',
                                                                                            'RTLogCreateEx',
                                                                                            'RTProcGetExecutablePath',
                                                                                            'RTProcSelf',
                                                                                            'RTLogRelSetDefaultInstance',
                                                                                            'RTLogRelDefaultInstance',
                                                                                            'RTLogLoggerEx',
                                                                                            'RTTimeMilliTS',
                                                                                            'RTPrintf',
                                                                                            'RTBldCfgVersionMajor',
                                                                                            'RTBldCfgVersionMinor',
                                                                                            'RTBldCfgVersionBuild',
                                                                                            'RTEnvGet',
                                                                                            'RTGetOpt',
                                                                                            'RTGetOptInit',
                                                                                            'RTR3InitExe',
                                                                                            'RTProcTerminate',
                                                                                            'RTThreadSleep',
                                                                                            'RTProcWait',
                                                                                            'RTProcCreate',
                                                                                            'RTPathAppend',
                                                                                            'RTPathExecDir',
                                                                                            '_initterm_e',
                                                                                            '_onexit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_configthreadlocale',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '_snprintf',
                                                                                            '__CxxFrameHandler3',
                                                                                            'strstr',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '?fromAscii_helper@QString@@CAPEAUData@1@PEBDH@Z',
                                                                                            '?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z',
                                                                                            '?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z',
                                                                                            '?free@QString@@CAXPEAUData@1@@Z',
                                                                                            '?customEvent@QObject@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?connectNotify@QObject@@MEAAXPEBD@Z',
                                                                                            '?disconnectNotify@QObject@@MEAAXPEBD@Z',
                                                                                            '??1QString@@QEAA@XZ',
                                                                                            '?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z',
                                                                                            '?dragMoveEvent@QWidget@@MEAAXPEAVQDragMoveEvent@@@Z',
                                                                                            '?dragLeaveEvent@QWidget@@MEAAXPEAVQDragLeaveEvent@@@Z',
                                                                                            '?dropEvent@QWidget@@MEAAXPEAVQDropEvent@@@Z',
                                                                                            '?showEvent@QWidget@@MEAAXPEAVQShowEvent@@@Z',
                                                                                            '?hideEvent@QWidget@@MEAAXPEAVQHideEvent@@@Z',
                                                                                            '?winEvent@QWidget@@MEAA_NPEAUtagMSG@@PEAJ@Z',
                                                                                            '?changeEvent@QWidget@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?inputMethodEvent@QWidget@@MEAAXPEAVQInputMethodEvent@@@Z',
                                                                                            '?inputMethodQuery@QWidget@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z',
                                                                                            '?focusNextPrevChild@QWidget@@MEAA_N_N@Z',
                                                                                            '?styleChange@QWidget@@MEAAXAEAVQStyle@@@Z',
                                                                                            '?enabledChange@QWidget@@MEAAX_N@Z',
                                                                                            '?paletteChange@QWidget@@MEAAXAEBVQPalette@@@Z',
                                                                                            '?fontChange@QWidget@@MEAAXAEBVQFont@@@Z',
                                                                                            '?windowActivationChange@QWidget@@MEAAX_N@Z',
                                                                                            '?languageChange@QWidget@@MEAAXXZ',
                                                                                            '?devType@QWidget@@UEBAHXZ',
                                                                                            '?getDC@QWidget@@UEBAPEAUHDC__@@XZ',
                                                                                            '?releaseDC@QWidget@@UEBAXPEAUHDC__@@@Z',
                                                                                            '?metric@QWidget@@MEBAHW4PaintDeviceMetric@QPaintDevice@@@Z',
                                                                                            '?dragEnterEvent@QWidget@@MEAAXPEAVQDragEnterEvent@@@Z',
                                                                                            '??1QApplication@@UEAA@XZ',
                                                                                            '??0QApplication@@QEAA@AEAHPEAPEADH@Z',
                                                                                            '?setVisible@QWidget@@UEAAX_N@Z',
                                                                                            '?sizeHint@QWidget@@UEBA?AVQSize@@XZ',
                                                                                            '?minimumSizeHint@QWidget@@UEBA?AVQSize@@XZ',
                                                                                            '?heightForWidth@QWidget@@UEBAHH@Z',
                                                                                            '?mousePressEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseReleaseEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseDoubleClickEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?mouseMoveEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z',
                                                                                            '?wheelEvent@QWidget@@MEAAXPEAVQWheelEvent@@@Z',
                                                                                            '?keyPressEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z',
                                                                                            '?keyReleaseEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z',
                                                                                            '?focusInEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z',
                                                                                            '?focusOutEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z',
                                                                                            '?enterEvent@QWidget@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?leaveEvent@QWidget@@MEAAXPEAVQEvent@@@Z',
                                                                                            '?moveEvent@QWidget@@MEAAXPEAVQMoveEvent@@@Z',
                                                                                            '?closeEvent@QWidget@@MEAAXPEAVQCloseEvent@@@Z',
                                                                                            '?contextMenuEvent@QWidget@@MEAAXPEAVQContextMenuEvent@@@Z',
                                                                                            '?tabletEvent@QWidget@@MEAAXPEAVQTabletEvent@@@Z',
                                                                                            '?actionEvent@QWidget@@MEAAXPEAVQActionEvent@@@Z',
                                                                                            '?updateGL@QGLWidget@@UEAAXXZ',
                                                                                            '?initializeOverlayGL@QGLWidget@@MEAAXXZ',
                                                                                            '?paintGL@QGLWidget@@MEAAXXZ',
                                                                                            '?resizeGL@QGLWidget@@MEAAXHH@Z',
                                                                                            '?initializeGL@QGLWidget@@MEAAXXZ',
                                                                                            '?updateOverlayGL@QGLWidget@@UEAAXXZ',
                                                                                            '?resizeEvent@QGLWidget@@MEAAXPEAVQResizeEvent@@@Z',
                                                                                            '?paintEvent@QGLWidget@@MEAAXPEAVQPaintEvent@@@Z',
                                                                                            '?event@QGLWidget@@MEAA_NPEAVQEvent@@@Z',
                                                                                            '?qt_metacall@QGLWidget@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z',
                                                                                            '?qt_metacast@QGLWidget@@UEAAPEAXPEBD@Z',
                                                                                            '?metaObject@QGLWidget@@UEBAPEBUQMetaObject@@XZ',
                                                                                            '??0QGLWidget@@QEAA@PEAVQWidget@@PEBV0@V?$QFlags@W4WindowType@Qt@@@@@Z',
                                                                                            '?hasOpenGL@QGLFormat@@SA_NXZ',
                                                                                            '?makeCurrent@QGLWidget@@QEAAXXZ',
                                                                                            '?context@QGLWidget@@QEBAPEBVQGLContext@@XZ',
                                                                                            '??1QGLWidget@@UEAA@XZ',
                                                                                            '?paintEngine@QGLWidget@@UEBAPEAVQPaintEngine@@XZ',
                                                                                            '?glDraw@QGLWidget@@MEAAXXZ',
                                                                                            '?glInit@QGLWidget@@MEAAXXZ',
                                                                                            '?paintOverlayGL@QGLWidget@@MEAAXXZ',
                                                                                            '?getProcAddress@QGLContext@@QEBAPEAXAEBVQString@@@Z',
                                                                                            '?resizeOverlayGL@QGLWidget@@MEAAXHH@Z',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'EncodePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'Sleep',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'glGetIntegerv',
                                                                                            'glGetString'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 166,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 42496,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 100864},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8f379b7d937f83ea30a954c81c142a67802f6431574728d2bafbf06889d7994d'},
 '8f58ca629f6425bac49d767e3d68f8e8c4461a784ca3d660b6fe2c8bc11c8d60': {'AddressOfEntryPoint': 9488,
                                                                      'DebugRVA': 41156,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49216,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetStartupInfoA',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'SetThreadToken',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'GetTokenInformation',
                                                                                            'RegEnumKeyW',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'GetAce',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'MakeAbsoluteSD',
                                                                                            'InitializeAcl',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetServiceStatus',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'AddAccessAllowedAce',
                                                                                            'RevertToSelf',
                                                                                            'FreeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'GetLengthSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'OutputDebugStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentThread',
                                                                                            'WriteFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'OpenProcess',
                                                                                            'GlobalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'Sleep',
                                                                                            'SetProcessMitigationPolicy',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'CompareStringW',
                                                                                            'GetACP',
                                                                                            'lstrcmpW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'GlobalFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetFileType',
                                                                                            'CreateEventW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'OpenEventW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'GetVersion',
                                                                                            'CreateThread',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryExA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'PeekMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            'RtlUnwind',
                                                                                            'NtQueryInformationProcess',
                                                                                            'StgOpenStorage',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 125,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/8f58ca629f6425bac49d767e3d68f8e8c4461a784ca3d660b6fe2c8bc11c8d60'},
 '8f8278e04855f1cae5b376b62b881382beb18a505ce6f66c1305150f2d3bbc5a': {'AddressOfEntryPoint': 28910,
                                                                      'DebugRVA': 28704,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1280,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1536,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8f8278e04855f1cae5b376b62b881382beb18a505ce6f66c1305150f2d3bbc5a'},
 '8ff8b37469fdec28cca26ed924698d7d57d4d5881bc4e12f4084f0fa197267ef': {'AddressOfEntryPoint': 96244,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127792,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456320,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 89600,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/8ff8b37469fdec28cca26ed924698d7d57d4d5881bc4e12f4084f0fa197267ef'},
 '9015edeb220c2ead7317b34466bef90c413b383fffb5f124585cb89aa29dce69': {'AddressOfEntryPoint': 83088,
                                                                      'DebugRVA': 5120,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitiateShutdownW',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEAUT32.dll': 'VariantChangeType',
                                                                                      'SHELL32.dll': 'SHEvaluateSystemCommandTemplate',
                                                                                      'USER32.dll': 'IsIconic',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'bcd.dll': 'BcdDeleteObjectReferences',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'WinSqmIncrementDWORD',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'OpenSCManagerW',
                                                                                            'EnumServicesStatusW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ChangeServiceConfigW',
                                                                                            'QueryServiceConfigW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateShutdownW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetSystemInfo',
                                                                                            'GetPhysicallyInstalledSystemMemory',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'RtlCompareMemory',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'DeleteFileW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'HeapSetInformation',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'LockResource',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCommandLineW',
                                                                                            'CompareStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateSemaphoreW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcmpiW',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'SizeofResource',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetDateFormatW',
                                                                                            'QueryDosDeviceW',
                                                                                            'LocalAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'LoadLibraryExA',
                                                                                            'DecodePointer',
                                                                                            'VirtualAlloc',
                                                                                            'FlushInstructionCache',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextMetricsW',
                                                                                            'SelectObject',
                                                                                            'EndDialog',
                                                                                            'SetFocus',
                                                                                            'SetWindowTextW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'GetActiveWindow',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetFocus',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemInt',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'IsWindowEnabled',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetSystemMetrics',
                                                                                            'GetClientRect',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetKeyState',
                                                                                            'CallWindowProcW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'LoadIconW',
                                                                                            'CharNextW',
                                                                                            'FindWindowW',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            '_wcsicmp',
                                                                                            'malloc',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'free',
                                                                                            '_purecall',
                                                                                            '_wcsicoll',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '_exit',
                                                                                            '_onexit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_XcptFilter',
                                                                                            'iswdigit',
                                                                                            'wcsrchr',
                                                                                            '_wtoi',
                                                                                            'memmove',
                                                                                            'calloc',
                                                                                            '_vsnwprintf',
                                                                                            '_wtol',
                                                                                            '_itow_s',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memcpy_s',
                                                                                            'wcscmp',
                                                                                            'ShellExecuteW',
                                                                                            'SHEvaluateSystemCommandTemplate',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'BcdGetElementData',
                                                                                            'BcdImportStoreWithFlags',
                                                                                            'BcdCloseStore',
                                                                                            'BcdDeleteElement',
                                                                                            'BcdCloseObject',
                                                                                            'BcdSetElementData',
                                                                                            'BcdQueryObject',
                                                                                            'BcdDeleteObject',
                                                                                            'BcdExportStore',
                                                                                            'BcdOpenSystemStore',
                                                                                            'BcdCreateObject',
                                                                                            'BcdOpenStoreFromFile',
                                                                                            'BcdEnumerateObjects',
                                                                                            'BcdOpenObject',
                                                                                            'BcdDeleteObjectReferences'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 201,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 75640,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 10752,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 75776,
                                                                                       '.text\x00\x00\x00': 93184},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/9015edeb220c2ead7317b34466bef90c413b383fffb5f124585cb89aa29dce69'},
 '907a94070b7d5ca94794fb85ca1c1a96b024f9a3f5004d3f8c7d919c2cc768b9': {'AddressOfEntryPoint': 704560,
                                                                      'DebugRVA': 6976,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 843776,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventRegister',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'ToUnicode',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'api-ms-win-core-winrt-error-l1-1-0.dll': 'RoOriginateError',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoTransformError',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoRegisterActivationFactories',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsCreateString',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlSubscribeWnfStateChangeNotification',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'wer.dll': 'WerReportSubmit'},
                                                                      'ImportedFunctions': ['EventWrite',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'IsValidSid',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'EventUnregister',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegCloseKey',
                                                                                            'RegSetKeyValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'EventRegister',
                                                                                            'LocalFree',
                                                                                            'GetStringTypeW',
                                                                                            'WideCharToMultiByte',
                                                                                            'OpenMutexW',
                                                                                            'CopyFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'CloseThreadpoolWork',
                                                                                            'CloseThreadpool',
                                                                                            'WaitForThreadpoolWorkCallbacks',
                                                                                            'SubmitThreadpoolWork',
                                                                                            'CreateThreadpoolWork',
                                                                                            'SetThreadpoolThreadMaximum',
                                                                                            'SetThreadpoolThreadMinimum',
                                                                                            'CreateThreadpool',
                                                                                            'SetEvent',
                                                                                            'DeleteFileW',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemTime',
                                                                                            'LCMapStringW',
                                                                                            'AcquireSRWLockShared',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'ResetEvent',
                                                                                            'CreateEventExW',
                                                                                            'RaiseException',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'OpenEventW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'InitializeSRWLock',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetUserObjectInformationW',
                                                                                            'SendInput',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetKeyState',
                                                                                            'UnhookWinEvent',
                                                                                            'GetThreadDesktop',
                                                                                            'KillTimer',
                                                                                            'CharUpperBuffW',
                                                                                            'keybd_event',
                                                                                            'SetWinEventHook',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SetCoalescableTimer',
                                                                                            'RealGetWindowClassW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetAncestor',
                                                                                            'ToUnicode',
                                                                                            '_snwprintf_s',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_callnewh',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcstok_s',
                                                                                            '_wtoi',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'towupper',
                                                                                            'iswspace',
                                                                                            'wcsnlen',
                                                                                            '??0bad_cast@@QEAA@AEBV0@@Z',
                                                                                            '??1bad_cast@@UEAA@XZ',
                                                                                            '??0bad_cast@@QEAA@PEBD@Z',
                                                                                            'free',
                                                                                            'islower',
                                                                                            'toupper',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            'strchr',
                                                                                            'realloc',
                                                                                            'memcpy_s',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'sprintf_s',
                                                                                            'localeconv',
                                                                                            'memchr',
                                                                                            'strcspn',
                                                                                            'memmove_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'vswprintf_s',
                                                                                            'wcschr',
                                                                                            'wcsncpy_s',
                                                                                            'wcsncat_s',
                                                                                            'strerror',
                                                                                            'memcpy',
                                                                                            '__uncaught_exception',
                                                                                            'setlocale',
                                                                                            '___mb_cur_max_func',
                                                                                            '_errno',
                                                                                            '___lc_handle_func',
                                                                                            '___lc_codepage_func',
                                                                                            '__pctype_func',
                                                                                            'calloc',
                                                                                            '__crtLCMapStringW',
                                                                                            '___lc_collate_cp_func',
                                                                                            '__crtCompareStringW',
                                                                                            'memcmp',
                                                                                            'abort',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '_purecall',
                                                                                            'memmove',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'logf',
                                                                                            'wcscpy_s',
                                                                                            'wcstoul',
                                                                                            '_CxxThrowException',
                                                                                            'memset',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'PropVariantClear',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CLSIDFromString',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'SysStringByteLen',
                                                                                            'RoOriginateError',
                                                                                            'WinSqmSetDWORD',
                                                                                            'RtlPublishWnfStateData',
                                                                                            'RtlCaptureContext',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'RtlUnsubscribeWnfStateChangeNotification',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlQueryWnfStateData',
                                                                                            'RtlSubscribeWnfStateChangeNotification',
                                                                                            'RoOriginateErrorW',
                                                                                            'RoReportFailedDelegate',
                                                                                            'RoGetMatchingRestrictedErrorInfo',
                                                                                            'IsErrorPropagationEnabled',
                                                                                            'RoTransformError',
                                                                                            'RoRevokeActivationFactories',
                                                                                            'RoRegisterActivationFactories',
                                                                                            'WindowsStringHasEmbeddedNull',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsIsStringEmpty',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsCreateString',
                                                                                            'WerReportAddFile',
                                                                                            'WerReportSetParameter',
                                                                                            'WerReportCreate',
                                                                                            'WerReportCloseHandle',
                                                                                            'WerReportSubmit',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'SHGetFolderPathW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 227,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 8704,
                                                                                       '.pdata\x00\x00': 20992,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 805376},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/907a94070b7d5ca94794fb85ca1c1a96b024f9a3f5004d3f8c7d919c2cc768b9'},
 '909414ae2b17407eabbd26e89862f230757b2d84e0eb91fe42d05b80764d4181': {'AddressOfEntryPoint': 977129,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1257472,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'COMDLG32.dll': 'PrintDlgW',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'ExpandEnvironmentStringsW',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'PathGetDriveNumberW',
                                                                                      'USER32.dll': 'CreateMenu',
                                                                                      'dbghelp.dll': 'ImageNtHeader',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['ImageList_DragMove',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetIconSize',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Destroy',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_GetImageInfo',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_Create',
                                                                                            'PathStripPathW',
                                                                                            'PathAddExtensionW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathAppendW',
                                                                                            'PathMatchSpecW',
                                                                                            'PathIsRelativeW',
                                                                                            'PathCompactPathExW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFileExistsW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathGetDriveNumberW',
                                                                                            'SHGetMalloc',
                                                                                            'Shell_NotifyIconW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'DragFinish',
                                                                                            'DragQueryPoint',
                                                                                            'DragQueryFileW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'ImageNtHeader',
                                                                                            'GetFullPathNameW',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileExW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'InterlockedIncrement',
                                                                                            'QueueUserAPC',
                                                                                            'ReleaseSemaphore',
                                                                                            'SleepEx',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateSemaphoreW',
                                                                                            'CancelIo',
                                                                                            'InterlockedDecrement',
                                                                                            'CreateFileW',
                                                                                            'ReadDirectoryChangesW',
                                                                                            'MulDiv',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'CopyFileW',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'LoadLibraryW',
                                                                                            'GlobalSize',
                                                                                            'ReleaseMutex',
                                                                                            'Sleep',
                                                                                            'CreateMutexW',
                                                                                            'lstrcpynW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetLocalTime',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetACP',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'SetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'GetTempPathW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetStartupInfoW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleHandleExW',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ReadFile',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetDriveTypeW',
                                                                                            'FindFirstFileExW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlUnwind',
                                                                                            'EncodePointer',
                                                                                            'OpenEventW',
                                                                                            'lstrcmpiW',
                                                                                            'WaitForSingleObject',
                                                                                            'ResetEvent',
                                                                                            'GetLongPathNameW',
                                                                                            'CreateEventW',
                                                                                            'lstrcpyW',
                                                                                            'CloseHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'GetLastError',
                                                                                            'CreateThread',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'DecodePointer',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'lstrlenW',
                                                                                            'lstrcatW',
                                                                                            'lstrcmpW',
                                                                                            'FindClose',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetFileType',
                                                                                            'PeekNamedPipe',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteFile',
                                                                                            'GetConsoleCP',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetModuleFileNameA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetStdHandle',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'OutputDebugStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemID',
                                                                                            'ModifyMenuW',
                                                                                            'IsIconic',
                                                                                            'IsZoomed',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMenuStringW',
                                                                                            'DrawMenuBar',
                                                                                            'GetMenuItemCount',
                                                                                            'DeleteMenu',
                                                                                            'SetForegroundWindow',
                                                                                            'CheckMenuRadioItem',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'RealChildWindowFromPoint',
                                                                                            'SetMenu',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadMenuW',
                                                                                            'GetClassNameW',
                                                                                            'DrawIcon',
                                                                                            'CharUpperW',
                                                                                            'CharLowerW',
                                                                                            'IsCharAlphaW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharLowerW',
                                                                                            'GetClassNameA',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'FindWindowW',
                                                                                            'ReleaseCapture',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'SystemParametersInfoW',
                                                                                            'TrackMouseEvent',
                                                                                            'GetCapture',
                                                                                            'DragDetect',
                                                                                            'SetRectEmpty',
                                                                                            'AppendMenuW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'ShowCursor',
                                                                                            'CreateCursor',
                                                                                            'DestroyCursor',
                                                                                            'ScrollWindow',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'SetScrollInfo',
                                                                                            'InsertMenuItemW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'LoadStringW',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetDlgCtrlID',
                                                                                            'IsChild',
                                                                                            'CallNextHookEx',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetParent',
                                                                                            'GetCursorPos',
                                                                                            'SetWindowTextW',
                                                                                            'RedrawWindow',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetMenuState',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'GetDlgItemTextW',
                                                                                            'IsWindow',
                                                                                            'GetDlgItemInt',
                                                                                            'FrameRect',
                                                                                            'FillRect',
                                                                                            'DrawFocusRect',
                                                                                            'RemoveMenu',
                                                                                            'SetWindowLongW',
                                                                                            'InflateRect',
                                                                                            'GetSysColor',
                                                                                            'ClientToScreen',
                                                                                            'SetWindowPos',
                                                                                            'CallWindowProcW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'GetClipboardData',
                                                                                            'ChangeClipboardChain',
                                                                                            'SetClipboardViewer',
                                                                                            'CloseClipboard',
                                                                                            'OpenClipboard',
                                                                                            'LoadCursorW',
                                                                                            'GetParent',
                                                                                            'GetWindowLongW',
                                                                                            'SetCaretPos',
                                                                                            'ShowCaret',
                                                                                            'HideCaret',
                                                                                            'DestroyCaret',
                                                                                            'CreateCaret',
                                                                                            'SetCursor',
                                                                                            'MessageBeep',
                                                                                            'ShowScrollBar',
                                                                                            'GetScrollRange',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollPos',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'GetMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'ToAscii',
                                                                                            'GetKeyboardState',
                                                                                            'GetFocus',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowPlacement',
                                                                                            'DestroyWindow',
                                                                                            'DestroyIcon',
                                                                                            'LoadIconW',
                                                                                            'GetDesktopWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'PostMessageW',
                                                                                            'DrawFrameControl',
                                                                                            'DrawEdge',
                                                                                            'LoadBitmapW',
                                                                                            'ScreenToClient',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'InsertMenuW',
                                                                                            'DestroyMenu',
                                                                                            'CreatePopupMenu',
                                                                                            'IsWindowVisible',
                                                                                            'ShowWindow',
                                                                                            'UnregisterClassW',
                                                                                            'wsprintfW',
                                                                                            'SetFocus',
                                                                                            'MoveWindow',
                                                                                            'DrawIconEx',
                                                                                            'LoadImageW',
                                                                                            'EnableWindow',
                                                                                            'GetKeyState',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'PtInRect',
                                                                                            'WindowFromPoint',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDCEx',
                                                                                            'mouse_event',
                                                                                            'SetDlgItemInt',
                                                                                            'GetSysColorBrush',
                                                                                            'MapWindowPoints',
                                                                                            'AdjustWindowRectEx',
                                                                                            'EndDialog',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'DialogBoxParamW',
                                                                                            'FlashWindowEx',
                                                                                            'RegisterClassExW',
                                                                                            'PostQuitMessage',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowTextW',
                                                                                            'SetCapture',
                                                                                            'CreateDialogParamW',
                                                                                            'GetActiveWindow',
                                                                                            'CreateMenu',
                                                                                            'GetPixel',
                                                                                            'BitBlt',
                                                                                            'RestoreDC',
                                                                                            'CreateHatchBrush',
                                                                                            'GetObjectW',
                                                                                            'SetWindowOrgEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'CreateBitmap',
                                                                                            'CreatePatternBrush',
                                                                                            'PatBlt',
                                                                                            'SetBrushOrgEx',
                                                                                            'DeleteDC',
                                                                                            'GetDeviceCaps',
                                                                                            'SetTextAlign',
                                                                                            'StartDocW',
                                                                                            'EndDoc',
                                                                                            'StartPage',
                                                                                            'EndPage',
                                                                                            'ExtTextOutW',
                                                                                            'DPtoLP',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetTextExtentPointW',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'MoveToEx',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'LineTo',
                                                                                            'SetBkColor',
                                                                                            'GetTextMetricsW',
                                                                                            'SetTextColor',
                                                                                            'SetROP2',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'Rectangle',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetStockObject',
                                                                                            'GetROP2',
                                                                                            'CreateSolidBrush',
                                                                                            'CreatePen',
                                                                                            'CreateFontW',
                                                                                            'SaveDC',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'ChooseColorW',
                                                                                            'PrintDlgW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'IsTextUnicode',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 416,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 556304,
                                                                      'SectionNames': {'.data\x00\x00\x00': 26112,
                                                                                       '.rdata\x00\x00': 355840,
                                                                                       '.reloc\x00\x00': 68096,
                                                                                       '.rsrc\x00\x00\x00': 556544,
                                                                                       '.text\x00\x00\x00': 1253376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/909414ae2b17407eabbd26e89862f230757b2d84e0eb91fe42d05b80764d4181'},
 '909c523f0657650471caa7baa2751525604375d8b82688aad47472fdce1abe3b': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 250988,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetTokenInformation',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'SHELL32.dll': 'SHGetFolderPathA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'wcslen'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'SetTokenInformation',
                                                                                            'AllocConsole',
                                                                                            'CloseHandle',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateSemaphoreA',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FormatMessageA',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'InitializeCriticalSection',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ReleaseSemaphore',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetDllDirectoryA',
                                                                                            'SetErrorMode',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            '_itoa',
                                                                                            '_write',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__iob_func',
                                                                                            '__lconv_init',
                                                                                            '__mb_cur_max',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_fmode',
                                                                                            '_fullpath',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_snprintf',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'ferror',
                                                                                            'fgets',
                                                                                            'fopen',
                                                                                            'fputc',
                                                                                            'fputs',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'memchr',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'realloc',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'sprintf',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncat',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'strrchr',
                                                                                            'strstr',
                                                                                            'strtoul',
                                                                                            'wcslen',
                                                                                            'SHGetFolderPathA',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 118,
                                                                      'NumberOfSections': 18,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 21516,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 27136,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 76800,
                                                                                       '.rsrc\x00\x00\x00': 22016,
                                                                                       '.text\x00\x00\x00': 130048,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '/102\x00\x00\x00\x00': 7680,
                                                                                       '/113\x00\x00\x00\x00': 304128,
                                                                                       '/124\x00\x00\x00\x00': 60928,
                                                                                       '/19\x00\x00\x00\x00\x00': 19456,
                                                                                       '/35\x00\x00\x00\x00\x00': 15872,
                                                                                       '/4\x00\x00\x00\x00\x00\x00': 8704,
                                                                                       '/51\x00\x00\x00\x00\x00': 454144,
                                                                                       '/63\x00\x00\x00\x00\x00': 35328,
                                                                                       '/77\x00\x00\x00\x00\x00': 60416,
                                                                                       '/89\x00\x00\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/909c523f0657650471caa7baa2751525604375d8b82688aad47472fdce1abe3b'},
 '90b13f3aa9d4bfe5859218aef13c0da5816ba6a877ea7545e1d4c72b0271b433': {'AddressOfEntryPoint': 160529,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 274432,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['IIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'SHGetFolderPathA',
                                                                                            'SHGetFolderPathW',
                                                                                            'DispatchMessageW',
                                                                                            'DispatchMessageA',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'IsWindowUnicode',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetMessageA',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryExW',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenMutexA',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'CreateFileA',
                                                                                            'GetTickCount',
                                                                                            'GetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileA',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'GetLocalTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'PeekNamedPipe',
                                                                                            'SetHandleInformation',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'TerminateProcess',
                                                                                            'ReadFile',
                                                                                            'CreatePipe',
                                                                                            'FileTimeToSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleExA',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleExW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'InterlockedDecrement',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedExchange',
                                                                                            'GetStringTypeW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetLastError',
                                                                                            'SetDllDirectoryA',
                                                                                            'HeapSize',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'WriteConsoleW',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetLocaleInfoW',
                                                                                            'FindFirstFileExW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetDriveTypeW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoW',
                                                                                            'SetHandleCount',
                                                                                            'SetStdHandle',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetStdHandle',
                                                                                            'ExitProcess',
                                                                                            'SetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'HeapCreate',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LCMapStringW',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetCPInfo',
                                                                                            'HeapFree',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapReAlloc',
                                                                                            'RegQueryValueExA',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'GetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 31984,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 82432,
                                                                                       '.reloc\x00\x00': 25088,
                                                                                       '.rsrc\x00\x00\x00': 32256,
                                                                                       '.text\x00\x00\x00': 270336},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/90b13f3aa9d4bfe5859218aef13c0da5816ba6a877ea7545e1d4c72b0271b433'},
 '90c0d77a160c70512cf2247f8b623bfaef562b0ddb367cba55436a01749128c7': {'AddressOfEntryPoint': 20608,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'GetModuleHandleA',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'DefWindowProcW',
                                                                                      'msvcrt.dll': '__CxxFrameHandler3',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegDeleteValueW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'RegSetValueExW',
                                                                                            'FindResourceExW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'InitializeCriticalSection',
                                                                                            'WideCharToMultiByte',
                                                                                            'SizeofResource',
                                                                                            'FormatMessageW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'lstrcmpiW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalFree',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcessId',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'ReleaseActCtx',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterClassA',
                                                                                            'DestroyWindow',
                                                                                            'CharNextW',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'memset',
                                                                                            'memcpy_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            '_cexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            'CommandLineToArgvW',
                                                                                            'CoTaskMemFree',
                                                                                            'CoFreeLibrary',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'VarUI4FromStr'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 100,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 28312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 20992},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/90c0d77a160c70512cf2247f8b623bfaef562b0ddb367cba55436a01749128c7'},
 '9137b804681b06e87dfd6f548f9cecfda0da5aa17cbe0e673032ec465168c9f1': {'AddressOfEntryPoint': 288864,
                                                                      'DebugRVA': 5680,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 344064,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LocalFree',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'RPCRT4.dll': 'RpcAsyncCancelCall',
                                                                                      'UBPM.dll': 'UbpmApiBufferFree',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoImpersonateClient',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CompareFileTime',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapReAlloc',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetComputerNameW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleExW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'SearchPathW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenThreadToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegGetValueW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegOpenKeyTransactedW',
                                                                                      'api-ms-win-core-shlwapi-legacy-l1-1-0.dll': 'PathIsPrefixW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ReleaseSRWLockExclusive',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'UnregisterWaitEx',
                                                                                      'api-ms-win-core-threadpool-private-l1-1-0.dll': 'RegisterWaitForSingleObjectEx',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'SystemTimeToFileTime',
                                                                                      'api-ms-win-core-wow64-l1-1-0.dll': 'IsWow64Process',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AddAce',
                                                                                      'api-ms-win-security-credentials-l1-1-0.dll': 'CredDeleteW',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupPrivilegeValueW',
                                                                                      'api-ms-win-security-lsapolicy-l1-1-0.dll': 'LsaFreeMemory',
                                                                                      'bcrypt.dll': 'BCryptCreateHash',
                                                                                      'ktmw32.dll': 'CommitTransaction',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwGetTraceEnableFlags'},
                                                                      'ImportedFunctions': ['_wcsicmp',
                                                                                            '_controlfp',
                                                                                            '_wtol',
                                                                                            '_vsnwprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_except_handler4_common',
                                                                                            'iswdigit',
                                                                                            'memcmp',
                                                                                            '__dllonexit',
                                                                                            'rand_s',
                                                                                            '_unlock',
                                                                                            '_onexit',
                                                                                            'memcpy',
                                                                                            'fflush',
                                                                                            'fclose',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'fopen_s',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_purecall',
                                                                                            'wcsncmp',
                                                                                            'wcschr',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'wcscat_s',
                                                                                            '_ltow_s',
                                                                                            'fputws',
                                                                                            '_wtoi',
                                                                                            'memmove_s',
                                                                                            'rand',
                                                                                            'srand',
                                                                                            'wcsrchr',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '_wsplitpath_s',
                                                                                            '_wcsnicmp',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'calloc',
                                                                                            '_lock',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'memcpy_s',
                                                                                            'memset',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'NtSetInformationProcess',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventActivityIdControl',
                                                                                            'EtwEventEnabled',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'HeapSize',
                                                                                            'HeapDestroy',
                                                                                            'HeapFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcessHeap',
                                                                                            'HeapCreate',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'SysAllocStringLen',
                                                                                            'SysReAllocString',
                                                                                            'SysAllocString',
                                                                                            'SysStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'SetWaitableTimer',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateWaitableTimerExW',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'EnterCriticalSection',
                                                                                            'CancelWaitableTimer',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CoEnableCallCancellation',
                                                                                            'CoCancelCall',
                                                                                            'CoDisableCallCancellation',
                                                                                            'CoInitializeEx',
                                                                                            'IIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoMarshalInterface',
                                                                                            'CoCreateGuid',
                                                                                            'CoRevertToSelf',
                                                                                            'CoDisconnectObject',
                                                                                            'CoImpersonateClient',
                                                                                            'GetThreadPriority',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'ResumeThread',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcessToken',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'OpenThreadToken',
                                                                                            'FreeLibrary',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegGetValueW',
                                                                                            'InitializeAcl',
                                                                                            'CheckTokenMembership',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'CreateWellKnownSid',
                                                                                            'GetLengthSid',
                                                                                            'EqualSid',
                                                                                            'CopySid',
                                                                                            'MakeAbsoluteSD',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetTokenInformation',
                                                                                            'IsWellKnownSid',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidLengthRequired',
                                                                                            'InitializeSid',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'IsValidSid',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'GetAclInformation',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'AddAce',
                                                                                            'WideCharToMultiByte',
                                                                                            'DebugBreak',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileSizeEx',
                                                                                            'ReadFile',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'SetFileInformationByHandle',
                                                                                            'GetFinalPathNameByHandleW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetDynamicTimeZoneInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'TzSpecificLocalTimeToSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SearchPathW',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcStringFreeW',
                                                                                            'NdrAsyncClientCall',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcAsyncCancelCall',
                                                                                            'LookupAccountNameW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CredMarshalCredentialW',
                                                                                            'CredFree',
                                                                                            'CredDeleteW',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptHashData',
                                                                                            'BCryptFinishHash',
                                                                                            'BCryptDestroyHash',
                                                                                            'BCryptCreateHash',
                                                                                            'CreateFileTransactedW',
                                                                                            'GetComputerNameW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsPrefixW',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegDeleteKeyTransactedW',
                                                                                            'RegOpenKeyTransactedW',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaClose',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'LsaFreeMemory',
                                                                                            'RegisterWaitForSingleObjectEx',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'UbpmTriggerConsumerQueryStatus',
                                                                                            'UbpmTriggerConsumerControl',
                                                                                            'UbpmTriggerConsumerControlNotifications',
                                                                                            'UbpmTriggerConsumerUnregister',
                                                                                            'UbpmTriggerConsumerRegister',
                                                                                            'UbpmCloseTriggerConsumer',
                                                                                            'UbpmTriggerConsumerSetStatePublishingSecurity',
                                                                                            'UbpmTriggerConsumerConfigure',
                                                                                            'UbpmOpenTriggerConsumer',
                                                                                            'UbpmApiBufferFree',
                                                                                            'IsWow64Process',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'CreateTransaction',
                                                                                            'CommitTransaction'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 34,
                                                                      'NumberOfImportFunctions': 260,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 9216,
                                                                                       '.reloc\x00\x00': 16384,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 328192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9137b804681b06e87dfd6f548f9cecfda0da5aa17cbe0e673032ec465168c9f1'},
 '916981fa577f28db734f0f0ced5c50a1371b0654adde0f6f286b4a19c2924ab4': {'AddressOfEntryPoint': 9120,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'ifsutil.dll': '?DosDriveNameToNtDriveName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@@Z',
                                                                                      'msvcrt.dll': '_initterm',
                                                                                      'ntdll.dll': 'NtOpenFile',
                                                                                      'ulib.dll': '?Initialize@WSTRING@@QAEEPBV1@KK@Z'},
                                                                      'ImportedFunctions': ['HeapSetInformation',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '_except_handler4_common',
                                                                                            '__p__commode',
                                                                                            '_controlfp',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_XcptFilter',
                                                                                            '_initterm',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z',
                                                                                            '?DeleteChAt@WSTRING@@QAEXKK@Z',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '?IsGuidVolName@PATH@@QAEEXZ',
                                                                                            '?IsYesResponse@STREAM_MESSAGE@@UAEEE@Z',
                                                                                            '?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z',
                                                                                            '?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z',
                                                                                            '??1STREAM_MESSAGE@@UAE@XZ',
                                                                                            '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?Initialize@REST_OF_LINE_ARGUMENT@@QAEEXZ',
                                                                                            '??0REST_OF_LINE_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?Display@MESSAGE@@QAAEPBDZZ',
                                                                                            '?QueryCurrentDosDriveName@SYSTEM@@SGEPAVWSTRING@@@Z',
                                                                                            '?Strchr@WSTRING@@QBEKGK@Z',
                                                                                            '?Stricmp@WSTRING@@QBEJPBV1@@Z',
                                                                                            '?Initialize@WSTRING@@QAEEXZ',
                                                                                            '?AnalyzePath@PATH@@QAE?AW4PATH_ANALYZE_CODE@@PAVWSTRING@@PAV1@0@Z',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '??0STREAM_MESSAGE@@QAE@XZ',
                                                                                            '?Initialize@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '?Get_Standard_Error_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?DosDriveNameToNtDriveName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@@Z',
                                                                                            'NtClose',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'NtSetVolumeInformationFile',
                                                                                            'RtlFreeHeap',
                                                                                            'NtOpenFile'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 79,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/916981fa577f28db734f0f0ced5c50a1371b0654adde0f6f286b4a19c2924ab4'},
 '916f9843e05f135eed67d3374c0e0ed1fa8b8374e89748a451584ba08d8dfc7a': {'AddressOfEntryPoint': 17536,
                                                                      'DebugRVA': 4336,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49600,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetLengthSid',
                                                                                      'KERNEL32.dll': 'SetEvent',
                                                                                      'OLEAUT32.dll': 'SafeArrayAccessData',
                                                                                      'SHLWAPI.dll': 'SHSetThreadRef',
                                                                                      'USER32.dll': 'GetWindowThreadProcessId',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateInstance',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateErrorW',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoRevokeActivationFactories',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsStringHasEmbeddedNull',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlAllocateHeap'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'OpenProcess',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'GetLastError',
                                                                                            'GetProcessId',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'DecodePointer',
                                                                                            'AcquireSRWLockShared',
                                                                                            'OpenEventW',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'UnregisterWait',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'DuplicateHandle',
                                                                                            'CompareStringOrdinal',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'EncodePointer',
                                                                                            'SetEvent',
                                                                                            'DispatchMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'GetWindowBand',
                                                                                            'GetPropW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_purecall',
                                                                                            'wcschr',
                                                                                            'memcpy',
                                                                                            '_vsnwprintf',
                                                                                            'memset',
                                                                                            'CoUninitialize',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoGetCallContext',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'CoGetMalloc',
                                                                                            'CoCreateInstance',
                                                                                            'RoRegisterActivationFactories',
                                                                                            'RoRevokeActivationFactories',
                                                                                            'WindowsIsStringEmpty',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsCreateString',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsStringHasEmbeddedNull',
                                                                                            'RoOriginateError',
                                                                                            'RoOriginateErrorW',
                                                                                            'SHSetThreadRef',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetElemsize',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayAccessData',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlEqualSid',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 112,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 15872},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/916f9843e05f135eed67d3374c0e0ed1fa8b8374e89748a451584ba08d8dfc7a'},
 '923c98ddd9a62827fd04e1f42f6f144ba67c444cf102bf29bd1a698e27f7aec8': {'AddressOfEntryPoint': 252173,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 417792,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'GDI32.dll': 'SaveDC',
                                                                                      'KERNEL32.dll': 'lstrcmpW',
                                                                                      'LZ32.dll': 'LZClose',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'SetDlgItemTextW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoInitializeSecurity'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'FindResourceExW',
                                                                                            'GetDriveTypeW',
                                                                                            'WriteFile',
                                                                                            'lstrcpynW',
                                                                                            'lstrcmpiW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'CompareStringA',
                                                                                            'IsBadReadPtr',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetFileAttributesW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'lstrcpyW',
                                                                                            'lstrlenW',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetLastError',
                                                                                            'GetFileSize',
                                                                                            'SetFilePointer',
                                                                                            'CreateEventW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ReleaseMutex',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'CreateMutexW',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryW',
                                                                                            'lstrcatW',
                                                                                            'FreeLibrary',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'VerLanguageNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'ReadFile',
                                                                                            'GetTickCount',
                                                                                            'GetCommandLineW',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'CreateFileA',
                                                                                            'FreeResource',
                                                                                            'lstrcatA',
                                                                                            'MulDiv',
                                                                                            'lstrcmpiA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileSectionNamesA',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'LoadLibraryA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsBadCodePtr',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'lstrcpyA',
                                                                                            'lstrlenA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'InterlockedDecrement',
                                                                                            'LocalFree',
                                                                                            'InterlockedIncrement',
                                                                                            'FormatMessageW',
                                                                                            'GetTempPathW',
                                                                                            'GetVersionExW',
                                                                                            'CreateFileW',
                                                                                            'GlobalFree',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalAlloc',
                                                                                            'LockResource',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'GetThreadContext',
                                                                                            'VirtualProtectEx',
                                                                                            'WriteProcessMemory',
                                                                                            'FlushInstructionCache',
                                                                                            'SetThreadContext',
                                                                                            'ResumeThread',
                                                                                            'GetLastError',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapReAlloc',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedExchange',
                                                                                            'MoveFileExW',
                                                                                            'IsBadWritePtr',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetVersionExA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapSize',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'TlsGetValue',
                                                                                            'GetTempFileNameW',
                                                                                            'OpenProcess',
                                                                                            'CompareFileTime',
                                                                                            'GetProcessTimes',
                                                                                            'TerminateProcess',
                                                                                            'GetLocalTime',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetVersion',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThread',
                                                                                            'VirtualProtect',
                                                                                            'SearchPathW',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SystemTimeToFileTime',
                                                                                            'lstrcmpA',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpW',
                                                                                            'CharUpperW',
                                                                                            'WaitForInputIdle',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'MessageBoxW',
                                                                                            'wsprintfW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowTextW',
                                                                                            'SendMessageW',
                                                                                            'GetDlgItem',
                                                                                            'LoadIconW',
                                                                                            'EndDialog',
                                                                                            'MoveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'MapDialogRect',
                                                                                            'SetFocus',
                                                                                            'BeginPaint',
                                                                                            'LoadStringW',
                                                                                            'FillRect',
                                                                                            'EndPaint',
                                                                                            'GetMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetSystemMetrics',
                                                                                            'MapWindowPoints',
                                                                                            'GetPropW',
                                                                                            'EnableMenuItem',
                                                                                            'SetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetSysColor',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'CreateDialogParamW',
                                                                                            'GetParent',
                                                                                            'GetWindowTextW',
                                                                                            'IsWindowVisible',
                                                                                            'ExitWindowsEx',
                                                                                            'RegisterClassExW',
                                                                                            'InvalidateRect',
                                                                                            'IntersectRect',
                                                                                            'EnumChildWindows',
                                                                                            'GetWindowDC',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetWindowRect',
                                                                                            'UpdateWindow',
                                                                                            'DrawIcon',
                                                                                            'CreateWindowExW',
                                                                                            'wsprintfA',
                                                                                            'GetClassNameW',
                                                                                            'CallWindowProcW',
                                                                                            'DrawFocusRect',
                                                                                            'InflateRect',
                                                                                            'DrawTextW',
                                                                                            'CopyRect',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'GetDesktopWindow',
                                                                                            'GetClientRect',
                                                                                            'IsWindowEnabled',
                                                                                            'FindWindowExW',
                                                                                            'IsDialogMessageW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'EnableWindow',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'PostMessageW',
                                                                                            'ScreenToClient',
                                                                                            'SetWindowPos',
                                                                                            'IsWindow',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'TextOutW',
                                                                                            'RestoreDC',
                                                                                            'SetBkColor',
                                                                                            'CreateSolidBrush',
                                                                                            'UnrealizeObject',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'GetDIBColorTable',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'CreatePalette',
                                                                                            'DeleteDC',
                                                                                            'CreateHalftonePalette',
                                                                                            'GetDeviceCaps',
                                                                                            'TranslateCharsetInfo',
                                                                                            'GetObjectW',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteObject',
                                                                                            'DeleteMetaFile',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateDCW',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreatePatternBrush',
                                                                                            'CreateDIBitmap',
                                                                                            'SetMetaFileBitsEx',
                                                                                            'SetStretchBltMode',
                                                                                            'SelectClipRgn',
                                                                                            'CreateRectRgn',
                                                                                            'SetPixel',
                                                                                            'PatBlt',
                                                                                            'PlayMetaFile',
                                                                                            'StretchBlt',
                                                                                            'CreateBitmap',
                                                                                            'SetViewportExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetMapMode',
                                                                                            'SaveDC',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'GetErrorInfo',
                                                                                            'SysStringLen',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'LZOpenFileW',
                                                                                            'LZCopy',
                                                                                            'LZClose',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 336,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 406184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 33792,
                                                                                       '.rdata\x00\x00': 58368,
                                                                                       '.rsrc\x00\x00\x00': 406528,
                                                                                       '.text\x00\x00\x00': 413184},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/923c98ddd9a62827fd04e1f42f6f144ba67c444cf102bf29bd1a698e27f7aec8'},
 '9271c8e2d116cb38909d004a0b1b0e3235601bfa7588deb5cde143ac6e1539b9': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9271c8e2d116cb38909d004a0b1b0e3235601bfa7588deb5cde143ac6e1539b9'},
 '92a2549710a89a48c8f2f9ef03565fc339c68e6db8c29dbd46cdd735e8731a23': {'AddressOfEntryPoint': 32381,
                                                                      'DebugRVA': 4640,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueW',
                                                                                      'KERNEL32.dll': 'IsDebuggerPresent',
                                                                                      'OLEAUT32.dll': 'SafeArrayAccessData',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'FreeLibrary',
                                                                                            'lstrlenW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'LoadLibraryW',
                                                                                            'SwitchToThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'OutputDebugStringW',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'RtlUnwind',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'Sleep',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'CharNextW',
                                                                                            'DispatchMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoUninitialize',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'VariantClear',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayCreateVector',
                                                                                            'VariantInit',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'VarUI4FromStr',
                                                                                            'SafeArrayAccessData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 111,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 64512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/92a2549710a89a48c8f2f9ef03565fc339c68e6db8c29dbd46cdd735e8731a23'},
 '92c355138fec3314aac791501316b6487b72c610c068d0f166af115bd234eb8d': {'AddressOfEntryPoint': 6720,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'RegisterClassW',
                                                                                      'msvcrt.dll': '_cexit'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetStockObject',
                                                                                            'DefWindowProcW',
                                                                                            'CreateWindowExW',
                                                                                            'LoadCursorW',
                                                                                            'DestroyWindow',
                                                                                            'RegisterClassW',
                                                                                            '_wcmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcschr',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_cexit'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 41,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 53640,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 53760,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/92c355138fec3314aac791501316b6487b72c610c068d0f166af115bd234eb8d'},
 '92e0320d24b7a9dad6a597d55b40e14907ca4ba2125fbe24ec9cb9e247c12ba1': {'AddressOfEntryPoint': 36282,
                                                                      'DebugRVA': 115184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'CharNextExA',
                                                                                            'MessageBoxA',
                                                                                            'InitCommonControlsEx',
                                                                                            'CreateFileW',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetExitCodeThread',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcessId',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'GetFileAttributesA',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'SetFilePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'InterlockedDecrement',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'HeapCreate',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'RtlUnwind',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'CompareStringW',
                                                                                            'ReadFile',
                                                                                            'WriteConsoleW',
                                                                                            'GetDriveTypeW',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 102,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 33208,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 30208,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 33280,
                                                                                       '.text\x00\x00\x00': 108544},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/92e0320d24b7a9dad6a597d55b40e14907ca4ba2125fbe24ec9cb9e247c12ba1'},
 '92fe8e8d5ebd4aab0c03651a8f0010078ac689eb32abdcef5902ad976e443757': {'AddressOfEntryPoint': 41304,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'lstrcmpW',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconA',
                                                                                      'USER32.dll': 'LoadCursorW',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'msvcrt.dll': 'wcschr'},
                                                                      'ImportedFunctions': ['VirtualFree',
                                                                                            'lstrcatA',
                                                                                            'UnlockFile',
                                                                                            'SetFilePointer',
                                                                                            'LockFile',
                                                                                            'CreateFileW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetLocalTime',
                                                                                            'SetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCurrentThreadId',
                                                                                            'WriteFile',
                                                                                            'FormatMessageA',
                                                                                            'EnterCriticalSection',
                                                                                            'GetStdHandle',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GlobalFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcessHeap',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenEventW',
                                                                                            'ExitProcess',
                                                                                            'CreateMutexW',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'HeapCreate',
                                                                                            'GetCommandLineW',
                                                                                            'HeapDestroy',
                                                                                            'CreateEventW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'lstrlenA',
                                                                                            'lstrcpyA',
                                                                                            'SetEvent',
                                                                                            'TerminateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'ResetEvent',
                                                                                            'SwitchToThread',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'ExitThread',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'lstrcpynW',
                                                                                            'lstrcpynA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetStartupInfoW',
                                                                                            'lstrcpyW',
                                                                                            'lstrcatW',
                                                                                            'LoadLibraryA',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlUnwind',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLongPathNameW',
                                                                                            'lstrcmpiW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'StartServiceW',
                                                                                            'EnumDependentServicesW',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatusEx',
                                                                                            'ChangeServiceConfigW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceConfigW',
                                                                                            'RegCloseKey',
                                                                                            'CloseServiceHandle',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetMalloc',
                                                                                            'ShellAboutW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'Shell_NotifyIconA',
                                                                                            'MessageBoxW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MoveWindow',
                                                                                            'GetParent',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetClientRect',
                                                                                            'SetClassLongW',
                                                                                            'LoadIconW',
                                                                                            'wvsprintfA',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'DestroyMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'DialogBoxParamW',
                                                                                            'SetForegroundWindow',
                                                                                            'CreatePopupMenu',
                                                                                            'PostMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetWindowTextLengthW',
                                                                                            'CheckDlgButton',
                                                                                            'CheckRadioButton',
                                                                                            'SetDlgItemTextA',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyIcon',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'FindWindowW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemTextW',
                                                                                            'wsprintfW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'InsertMenuItemW',
                                                                                            'LoadStringW',
                                                                                            'LoadStringA',
                                                                                            'GetWindowRect',
                                                                                            'GetDesktopWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'LoadImageW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetCursorPos',
                                                                                            'SendMessageW',
                                                                                            'LoadCursorW',
                                                                                            'DeleteObject',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'PropertySheetW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Add',
                                                                                            'InitCommonControlsEx',
                                                                                            'NetWkstaGetInfo',
                                                                                            'NetGetDCName',
                                                                                            'NetQueryDisplayInformation',
                                                                                            'NetApiBufferFree',
                                                                                            'towupper',
                                                                                            '_ismbblead',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            'wcsrchr',
                                                                                            'iswctype',
                                                                                            'fflush',
                                                                                            '_iob',
                                                                                            'fputs',
                                                                                            'memset',
                                                                                            'wcschr'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 186,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10752,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.rsrc\x00\x00\x00': 45056,
                                                                                       '.text\x00\x00\x00': 38912},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/92fe8e8d5ebd4aab0c03651a8f0010078ac689eb32abdcef5902ad976e443757'},
 '9323d73e1129eebda48815d13b944098bf4fba87713a086c49dd53bf2ed70103': {'AddressOfEntryPoint': 27136,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'SHLWAPI.dll': 'StrTrimW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'VerSetConditionMask'},
                                                                      'ImportedFunctions': ['GetFullPathNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDateFormatW',
                                                                                            'GetFileSize',
                                                                                            'SetErrorMode',
                                                                                            'FindFirstFileExW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetFileAttributesW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetLongPathNameW',
                                                                                            'SetLastError',
                                                                                            'FindClose',
                                                                                            'HeapSetInformation',
                                                                                            'FindNextFileW',
                                                                                            'CloseHandle',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            'fflush',
                                                                                            'fprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcstok',
                                                                                            'towupper',
                                                                                            '_iob',
                                                                                            'localtime',
                                                                                            '_vsnwprintf',
                                                                                            'wcspbrk',
                                                                                            'wcsrchr',
                                                                                            '_wstat',
                                                                                            '_wgetenv',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            '__iob_func',
                                                                                            'memset',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'WSACleanup',
                                                                                            'StrStrW',
                                                                                            'StrStrIW',
                                                                                            'StrChrW',
                                                                                            'StrChrIW',
                                                                                            'StrTrimW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 100,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9323d73e1129eebda48815d13b944098bf4fba87713a086c49dd53bf2ed70103'},
 '93275d17acf2e2547861d55e935f53c2db216e9fe496552c0bbfe0949e8e19b4': {'AddressOfEntryPoint': 252473,
                                                                      'DebugRVA': 482576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 380928,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SystemFunction036',
                                                                                      'KERNEL32.dll': 'DecodePointer',
                                                                                      'USER32.dll': 'GetClipboardOwner'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetUserNameA',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'SystemFunction036',
                                                                                            'FindWindowA',
                                                                                            'SendMessageA',
                                                                                            'GetCursorPos',
                                                                                            'GetForegroundWindow',
                                                                                            'GetCapture',
                                                                                            'GetQueueStatus',
                                                                                            'GetClipboardOwner',
                                                                                            'SetEndOfFile',
                                                                                            'HeapSize',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CreateFileW',
                                                                                            'GetProcessHeap',
                                                                                            'SetStdHandle',
                                                                                            'GetTickCount',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetOverlappedResult',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FormatMessageA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'GetProcessTimes',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadTimes',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAdjustment',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'WaitNamedPipeA',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeA',
                                                                                            'GetCurrentThreadId',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'LocalAlloc',
                                                                                            'CreateFileMappingA',
                                                                                            'SetHandleInformation',
                                                                                            'CreatePipe',
                                                                                            'CreateProcessA',
                                                                                            'OpenProcess',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'GetFileTime',
                                                                                            'SetFileTime',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'DeleteFileA',
                                                                                            'GetLocalTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryExW',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleExW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExitProcess',
                                                                                            'RaiseException',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'OutputDebugStringW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'GetStringTypeW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'HeapReAlloc',
                                                                                            'ReadConsoleW',
                                                                                            'SetFilePointerEx',
                                                                                            'FindFirstFileExA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'DecodePointer'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 137,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 108032,
                                                                                       '.reloc\x00\x00': 16896,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 374784},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/93275d17acf2e2547861d55e935f53c2db216e9fe496552c0bbfe0949e8e19b4'},
 '933c402506a218e34c36b4661f98c3c3576a5bb16839a90f839c5dbd172d0b5a': {'AddressOfEntryPoint': 22128,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 25664,
                                                                      'ExportSize': 2072,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'WsmSvc.DLL': '?Alloc@WSManMemory@@SGPAXIHW4_NitsFaultMode@@@Z',
                                                                                      'msvcrt.dll': '_except_handler4_common',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceConfigW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'StartServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '_wcsicmp',
                                                                                            '_iob',
                                                                                            'fwprintf',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '_except_handler4_common',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            '?UninstallMigration@@YGHPAVIRequestContext@@@Z',
                                                                                            '??1CErrorContext@@UAE@XZ',
                                                                                            '??0CErrorContext@@QAE@_N@Z',
                                                                                            '??1OnHTTPInitialize@@QAE@XZ',
                                                                                            '??0OnHTTPInitialize@@QAE@XZ',
                                                                                            '?GetErrorCode@CErrorContext@@UBEKXZ',
                                                                                            '??1?$AutoDeleteVector@E@@QAE@XZ',
                                                                                            '??0?$AutoDeleteVector@E@@QAE@XZ',
                                                                                            '?HandleMigration@@YGHPAVWSManMigrationContext@@@Z',
                                                                                            '?MoveSettingsToMigrationKey@@YGHPAVIRequestContext@@_N@Z',
                                                                                            '??1CWSManCriticalSection@@QAE@XZ',
                                                                                            '?WSManError@@YGXPBGK0KPAVIRequestContext@@@Z',
                                                                                            '?Free@WSManMemory@@SGXPAXH@Z',
                                                                                            '??4?$AutoDeleteVector@E@@QAEAAV0@PAE@Z',
                                                                                            '?Alloc@WSManMemory@@SGPAXIHW4_NitsFaultMode@@@Z'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/933c402506a218e34c36b4661f98c3c3576a5bb16839a90f839c5dbd172d0b5a'},
 '939157d713e941c2b50a755d696a9f4880d05bc71218f41adf5c0929736fd2bd': {'AddressOfEntryPoint': 4564,
                                                                      'DebugRVA': 481280,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 479232,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetEntriesInAclW',
                                                                                      'IPHLPAPI.DLL': 'GetIpAddrTable',
                                                                                      'KERNEL32.dll': 'FormatMessageW',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SETUPAPI.dll': 'SetupGetLineTextA',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'WS2_32.dll': 'inet_ntoa',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetTimeZoneInformation',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'FlsAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'FlsFree',
                                                                                            'FlsSetValue',
                                                                                            'FlsGetValue',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'CreateFileA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetVersionExA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryExW',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'MoveFileExW',
                                                                                            'GetProcessHeap',
                                                                                            'CopyFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'DeviceIoControl',
                                                                                            'FormatMessageW',
                                                                                            'WSAStartup',
                                                                                            'htonl',
                                                                                            'ntohl',
                                                                                            'inet_addr',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'recvfrom',
                                                                                            'select',
                                                                                            'sendto',
                                                                                            'socket',
                                                                                            'inet_ntoa',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'LookupAccountSidW',
                                                                                            'CreateServiceW',
                                                                                            'DeleteService',
                                                                                            'QueryServiceConfigW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'UnlockServiceDatabase',
                                                                                            'LockServiceDatabase',
                                                                                            'QueryServiceLockStatusW',
                                                                                            'EnumDependentServicesW',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'StartServiceA',
                                                                                            'QueryServiceStatus',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'LookupPrivilegeNameA',
                                                                                            'LookupPrivilegeDisplayNameA',
                                                                                            'GetSecurityInfo',
                                                                                            'GetAclInformation',
                                                                                            'InitializeAcl',
                                                                                            'AddAce',
                                                                                            'SetSecurityInfo',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetInheritanceSourceW',
                                                                                            'GetAce',
                                                                                            'FreeInheritedFromArray',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegRestoreKeyW',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegSaveKeyW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'IsValidAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegCreateKeyExW',
                                                                                            'FreeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupOpenInfFileA',
                                                                                            'SetupGetInfFileListA',
                                                                                            'SetupDiClassGuidsFromNameW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiGetClassDescriptionW',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'SetupDiBuildClassInfoList',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'CMP_WaitNoPendingInstallEvents',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiDeleteDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiCreateDeviceInfoA',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupGetLineTextA',
                                                                                            'GetIpAddrTable',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SendMessageA',
                                                                                            'EnumChildWindows',
                                                                                            'CreateWindowExW',
                                                                                            'IsWindow',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'SafeArrayGetUBound',
                                                                                            'VariantClear',
                                                                                            'SafeArrayGetElement',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayPutElement',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'UuidCreate',
                                                                                            'UpdateDriverForPlugAndPlayDevicesW',
                                                                                            'SHGetFolderPathW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 231,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 83456,
                                                                                       '.pdata\x00\x00': 22528,
                                                                                       '.rdata\x00\x00': 301056,
                                                                                       '.reloc\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 475136},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/939157d713e941c2b50a755d696a9f4880d05bc71218f41adf5c0929736fd2bd'},
 '93ae2948fedd140cddbf6cf9193f4b14ed3688ca47a8da0208859659e4a0e84a': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/93ae2948fedd140cddbf6cf9193f4b14ed3688ca47a8da0208859659e4a0e84a'},
 '93ca178ddbd4f17b9be409cd4aab5e8108671381d66ad8ee089e81951108c513': {'AddressOfEntryPoint': 10304,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterTraceGuidsW',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlAllocateHeap'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'TraceMessage',
                                                                                            'GetTokenInformation',
                                                                                            'GetTraceEnableFlags',
                                                                                            'CreateProcessAsUserW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'LookupAccountSidW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'WriteFile',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetOverlappedResult',
                                                                                            'GetLastError',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'wprintf',
                                                                                            '__p__commode',
                                                                                            'memset',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 52,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/93ca178ddbd4f17b9be409cd4aab5e8108671381d66ad8ee089e81951108c513'},
 '940c6d3f10b36f3e98b6438b759553edc70992d88ee6f99d2bc7c95677455f13': {'AddressOfEntryPoint': 6960,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteValueW',
                                                                                      'CLBCatQ.DLL': 'OpenComponentLibraryEx',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'msvcrt.dll': '__CxxFrameHandler3'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'GetLastError',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrlenW',
                                                                                            'ExitProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'swscanf',
                                                                                            '_wtol',
                                                                                            '_vsnwprintf',
                                                                                            '_controlfp',
                                                                                            '__CxxFrameHandler3',
                                                                                            'ComPlusMigrate',
                                                                                            'OpenComponentLibraryEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 42,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/940c6d3f10b36f3e98b6438b759553edc70992d88ee6f99d2bc7c95677455f13'},
 '94544102f9e7c0439b095121b8abd6c54d9dd4d57a80244acd25b159a6fc18f0': {'AddressOfEntryPoint': 132016,
                                                                      'DebugRVA': 5696,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'GetCurrentDirectoryW',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'POWRPROF.dll': 'PowerDeterminePlatformRole',
                                                                                      'SETUPAPI.dll': 'SetupIterateCabinetW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'StrFormatByteSizeEx',
                                                                                      'USER32.dll': 'MoveWindow',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegGetValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'GetFirmwareType',
                                                                                            'GetPhysicallyInstalledSystemMemory',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetTempPathW',
                                                                                            'CreateDirectoryExW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'EnterCriticalSection',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'DeleteCriticalSection',
                                                                                            'FormatMessageW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetFileSize',
                                                                                            'LocalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetComputerNameW',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetNativeSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetNumberFormatW',
                                                                                            'GetLocaleInfoW',
                                                                                            'TerminateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExW',
                                                                                            'LoadLibraryW',
                                                                                            'DnsHostnameToComputerNameW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetObjectW',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'EndDoc',
                                                                                            'EndPage',
                                                                                            'StartDocW',
                                                                                            'CreateFontW',
                                                                                            'TextOutW',
                                                                                            'StartPage',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreateFontIndirectW',
                                                                                            'DrawFocusRect',
                                                                                            'GetDCEx',
                                                                                            'SetFocus',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'PtInRect',
                                                                                            'OffsetRect',
                                                                                            'InflateRect',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'OpenClipboard',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'GetFocus',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'ShowWindow',
                                                                                            'ReleaseDC',
                                                                                            'InvalidateRect',
                                                                                            'ScreenToClient',
                                                                                            'CopyRect',
                                                                                            'FillRect',
                                                                                            'SetClassLongW',
                                                                                            'LoadIconW',
                                                                                            'SetWindowPlacement',
                                                                                            'SystemParametersInfoW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'SetDlgItemTextW',
                                                                                            'CheckRadioButton',
                                                                                            'EnableWindow',
                                                                                            'GetWindowTextW',
                                                                                            'CheckDlgButton',
                                                                                            'GetSubMenu',
                                                                                            'IsDlgButtonChecked',
                                                                                            'PostMessageW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'EmptyClipboard',
                                                                                            'MessageBoxW',
                                                                                            'LoadMenuW',
                                                                                            'SetMenu',
                                                                                            'SetRect',
                                                                                            'SetClipboardData',
                                                                                            'BeginPaint',
                                                                                            'UpdateWindow',
                                                                                            'GetSysColor',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'DialogBoxParamW',
                                                                                            'EndDialog',
                                                                                            'SendMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'LoadStringW',
                                                                                            'RedrawWindow',
                                                                                            'EndPaint',
                                                                                            'PostQuitMessage',
                                                                                            'CreateDialogParamW',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'GetClientRect',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            'memcpy',
                                                                                            '_ftol2_sse',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_ftol2',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'malloc',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcsncpy_s',
                                                                                            'wcstod',
                                                                                            '_wtol',
                                                                                            '_wcsupr',
                                                                                            'free',
                                                                                            'iswalpha',
                                                                                            'wcstoul',
                                                                                            'wcstol',
                                                                                            '_wcsicmp',
                                                                                            'swprintf_s',
                                                                                            '_purecall',
                                                                                            '_wcsicoll',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memset',
                                                                                            'WinSqmAddToStream',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetElement',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringLen',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateGuid',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'StringFromCLSID',
                                                                                            'CoInitialize',
                                                                                            'StrFormatByteSizeEx',
                                                                                            'SetupIterateCabinetW',
                                                                                            'PrintDlgExW',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'CommandLineToArgvW',
                                                                                            'InitCommonControlsEx',
                                                                                            'PowerDeterminePlatformRole'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 222,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 150128,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 150528,
                                                                                       '.text\x00\x00\x00': 154112},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/94544102f9e7c0439b095121b8abd6c54d9dd4d57a80244acd25b159a6fc18f0'},
 '945f2ab6a001e5af56cbfeb33f5917ba520239093f81c74ab7e30df8e53daca9': {'AddressOfEntryPoint': 95188,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127784,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 131,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456200,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 89088,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/945f2ab6a001e5af56cbfeb33f5917ba520239093f81c74ab7e30df8e53daca9'},
 '94755d0c49ec3238ba3c74054efe54d4843caeb913a58efc1b696063fe107116': {'AddressOfEntryPoint': 28800,
                                                                      'DebugRVA': 4272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceMessage',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'msvcrt.dll': '__CxxFrameHandler3',
                                                                                      'ntdll.dll': 'WinSqmIsOptedIn'},
                                                                      'ImportedFunctions': ['CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegQueryValueExW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'UnregisterTraceGuids',
                                                                                            'FreeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'CheckTokenMembership',
                                                                                            'QueryServiceConfigW',
                                                                                            'RegCloseKey',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'RegSetKeyValueW',
                                                                                            'TraceMessage',
                                                                                            'OpenMutexW',
                                                                                            'LocalAlloc',
                                                                                            'lstrcmpiW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetVersionExW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'RaiseException',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'Sleep',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'OpenJobObjectW',
                                                                                            'IsProcessInJob',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegEnumKeyExW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'DeleteFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'HeapFree',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateProcessW',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'RegLoadMUIStringW',
                                                                                            'K32EnumProcesses',
                                                                                            'ProcessIdToSessionId',
                                                                                            'OpenProcess',
                                                                                            'K32EnumProcessModules',
                                                                                            'K32GetModuleBaseNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetLastError',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SendInput',
                                                                                            'GetThreadDesktop',
                                                                                            'GetShellWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetUserObjectInformationW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetKeyState',
                                                                                            'UnregisterClassA',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_wtoi',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_wcslwr_s',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            '_except_handler4_common',
                                                                                            '_vsnwprintf',
                                                                                            '_ltow_s',
                                                                                            'wcsspn',
                                                                                            'wcscspn',
                                                                                            'memset',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcscpy_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_CxxThrowException',
                                                                                            'wcsrchr',
                                                                                            '__CxxFrameHandler3',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'ShellExecuteW',
                                                                                            'PathFileExistsW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 125,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1336,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 32256},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/94755d0c49ec3238ba3c74054efe54d4843caeb913a58efc1b696063fe107116'},
 '94e57073e8eeaf63dd55ee3c846a3f734b191ee72786678419ae99140a15dc1d': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 326640,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 805306368,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1368,
                                                                      'SectionNames': {'.data\x00\x00\x00': 13312,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 298496,
                                                                                       '.xdata\x00\x00': 7680},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/94e57073e8eeaf63dd55ee3c846a3f734b191ee72786678419ae99140a15dc1d'},
 '95070392da581b473096bb3fdf3cd8d6093ed027fcac12f216f57f8d14deb15e': {'AddressOfEntryPoint': 14528,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINSTA.dll': 'WinStationNameFromLogonIdW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['LogonIdFromWinStationNameW',
                                                                                            'WinStationConnectW',
                                                                                            'WinStationOpenServerW',
                                                                                            'WinStationNameFromLogonIdW',
                                                                                            'LoadStringW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetThreadUILanguage',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'Sleep',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            '_iob',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcstol',
                                                                                            'memmove',
                                                                                            '_wcslwr',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'wcschr',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            'putchar',
                                                                                            'iswctype',
                                                                                            'swprintf_s',
                                                                                            'memcpy',
                                                                                            'wcstoul',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/95070392da581b473096bb3fdf3cd8d6093ed027fcac12f216f57f8d14deb15e'},
 '951adec65262b39df0cf6d81f56016f22239ca1b1b3678de6f73646bc4bca2c1': {'AddressOfEntryPoint': 315453,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 462848,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CryptUnprotectData',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetCommandLineA',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'IsWindowUnicode',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'WININET.dll': 'InternetCloseHandle',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['IIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'OleRun',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SHGetFolderPathW',
                                                                                            'FindExecutableA',
                                                                                            'Shell_NotifyIconA',
                                                                                            'SHGetFolderPathA',
                                                                                            'ShellExecuteExA',
                                                                                            'InternetCrackUrlA',
                                                                                            'InternetTimeToSystemTime',
                                                                                            'InternetTimeFromSystemTime',
                                                                                            'HttpQueryInfoA',
                                                                                            'InternetConnectA',
                                                                                            'InternetReadFile',
                                                                                            'HttpOpenRequestA',
                                                                                            'InternetGetConnectedState',
                                                                                            'InternetErrorDlg',
                                                                                            'HttpSendRequestA',
                                                                                            'InternetOpenA',
                                                                                            'InternetCloseHandle',
                                                                                            'SetRect',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'RegisterClassExA',
                                                                                            'GetFocus',
                                                                                            'GetAncestor',
                                                                                            'GetSystemMenu',
                                                                                            'GetWindowRect',
                                                                                            'GetParent',
                                                                                            'SetFocus',
                                                                                            'IsChild',
                                                                                            'GetClientRect',
                                                                                            'SendMessageA',
                                                                                            'GetClassInfoExW',
                                                                                            'GetDC',
                                                                                            'RegisterClassExW',
                                                                                            'GetWindowLongW',
                                                                                            'ReleaseDC',
                                                                                            'EnableMenuItem',
                                                                                            'SetWindowLongW',
                                                                                            'GetDesktopWindow',
                                                                                            'SetWindowPos',
                                                                                            'CreateWindowExW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'LoadCursorA',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowLongA',
                                                                                            'CreateWindowExA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CharNextA',
                                                                                            'DispatchMessageW',
                                                                                            'RegisterClassA',
                                                                                            'LoadImageA',
                                                                                            'GetSystemMetrics',
                                                                                            'DispatchMessageA',
                                                                                            'PostMessageA',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'ShowWindow',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'GetCursorPos',
                                                                                            'DefWindowProcA',
                                                                                            'DefWindowProcW',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'SetWindowLongA',
                                                                                            'GetMessageA',
                                                                                            'GetMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'TrackPopupMenu',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadStringA',
                                                                                            'TranslateMessage',
                                                                                            'IsWindowUnicode',
                                                                                            'InitCommonControlsEx',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetStdHandle',
                                                                                            'HeapFree',
                                                                                            'GetFullPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'FindFirstFileExW',
                                                                                            'SetStdHandle',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'RtlUnwind',
                                                                                            'LCMapStringW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleFileNameW',
                                                                                            'ExitThread',
                                                                                            'CreateDirectoryW',
                                                                                            'HeapAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapCreate',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetHandleCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'lstrcmpA',
                                                                                            'GetModuleHandleA',
                                                                                            'FindResourceA',
                                                                                            'lstrlenA',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SizeofResource',
                                                                                            'SetDllDirectoryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'FormatMessageA',
                                                                                            'GetExitCodeProcess',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'lstrcatA',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateThread',
                                                                                            'lstrcpyA',
                                                                                            'lstrcpynA',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'OpenEventA',
                                                                                            'GetSystemTime',
                                                                                            'GetCurrentProcess',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTempPathA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'MulDiv',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'FormatMessageW',
                                                                                            'GetLocalTime',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'LoadLibraryA',
                                                                                            'LockResource',
                                                                                            'GetNativeSystemInfo',
                                                                                            'MoveFileExA',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'FindNextFileA',
                                                                                            'PeekNamedPipe',
                                                                                            'SetHandleInformation',
                                                                                            'CreateProcessA',
                                                                                            'CreatePipe',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetThreadLocale',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetModuleHandleExA',
                                                                                            'OpenThread',
                                                                                            'GetExitCodeThread',
                                                                                            'GetModuleHandleExW',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'ReleaseMutex',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetStringTypeW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetProcessHeap',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetCommandLineA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'CryptGetHashParam',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptCreateHash',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'RegEnumKeyA',
                                                                                            'SysFreeString',
                                                                                            'VarUI4FromStr',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'GetErrorInfo',
                                                                                            'SysStringByteLen',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptMsgClose',
                                                                                            'CryptQueryObject',
                                                                                            'CertGetNameStringW',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertCloseStore',
                                                                                            'CryptMsgGetParam',
                                                                                            'CryptStringToBinaryA',
                                                                                            'CryptBinaryToStringA',
                                                                                            'CryptProtectData',
                                                                                            'CryptUnprotectData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 283,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 262792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 15872,
                                                                                       '.rdata\x00\x00': 140800,
                                                                                       '.reloc\x00\x00': 41984,
                                                                                       '.rsrc\x00\x00\x00': 263168,
                                                                                       '.text\x00\x00\x00': 456704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/951adec65262b39df0cf6d81f56016f22239ca1b1b3678de6f73646bc4bca2c1'},
 '956e7163da398faf99f95edfb50978312b53f4950f4a066eb0eb7896cf3aa518': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/956e7163da398faf99f95edfb50978312b53f4950f4a066eb0eb7896cf3aa518'},
 '95cce95ab9100f71ca6be4c393432a06cd08eb6ba34b43a514f663c8bf7b898a': {'AddressOfEntryPoint': 16704,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'KERNEL32.dll': 'GetPrivateProfileStringA',
                                                                                      'OLEAUT32.dll': 'SafeArrayUnaccessData',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': '??3@YAXPAX@Z',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'GlobalFree',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'ReadFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpA',
                                                                                            'CreateFileA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetUserDefaultLCID',
                                                                                            'CreateProcessW',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'CLSIDFromString',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayAccessData',
                                                                                            'VariantClear',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 79,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 15360},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/95cce95ab9100f71ca6be4c393432a06cd08eb6ba34b43a514f663c8bf7b898a'},
 '96150fe07cae0f883ce6b5b6568541cfa8e9ab40e6ee7af1a027f3df40f642f3': {'AddressOfEntryPoint': 96244,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127792,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456320,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 89600,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/96150fe07cae0f883ce6b5b6568541cfa8e9ab40e6ee7af1a027f3df40f642f3'},
 '96181ada3f08d9a0ca41241dd1222d47744e6c28823abbaaf99ece786a33aa0b': {'AddressOfEntryPoint': 20054,
                                                                      'DebugRVA': 113008,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetFilePointer',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'CharLowerBuffW',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RtlUnwind',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'OutputDebugStringW',
                                                                                            'CloseHandle',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExA',
                                                                                            'FindNextFileA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'DecodePointer',
                                                                                            'CreateFileW',
                                                                                            'RaiseException',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateDirectoryW',
                                                                                            'SizeofResource',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'FormatMessageW',
                                                                                            'LockResource',
                                                                                            'DeleteFileW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'HeapDestroy',
                                                                                            'LocalFree',
                                                                                            'VerSetConditionMask',
                                                                                            'CopyFileW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcmpiW',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'VirtualQuery',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'PathQuoteSpacesW',
                                                                                            'PathAppendW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'SHGetFolderPathW',
                                                                                            'MessageBoxW',
                                                                                            'CharLowerBuffW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 990168,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 27648,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 990208,
                                                                                       '.text\x00\x00\x00': 84480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/96181ada3f08d9a0ca41241dd1222d47744e6c28823abbaaf99ece786a33aa0b'},
 '9631159f2aaf4832d4e4df11054948c4a1439946e21c1680ff8b108274e59c6e': {'AddressOfEntryPoint': 36720,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'GetSystemInfo',
                                                                                      'RASAPI32.dll': 'RasEnumConnectionsA',
                                                                                      'USER32.dll': 'MoveWindow',
                                                                                      'WINHTTP.dll': 'WinHttpGetIEProxyConfigForCurrentUser',
                                                                                      'cmpbk32.dll': 'PhoneBookFreeFilter',
                                                                                      'cmutil.dll': 'CmStrchrA',
                                                                                      'msvcrt.dll': '_XcptFilter'},
                                                                      'ImportedFunctions': ['RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetTempFileNameA',
                                                                                            'CloseHandle',
                                                                                            'GetTempPathA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'lstrcmpA',
                                                                                            'FreeLibrary',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetTickCount',
                                                                                            'GetCommandLineA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'Sleep',
                                                                                            'CreateEventA',
                                                                                            'lstrlenW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryA',
                                                                                            'CopyFileA',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'CreateFileA',
                                                                                            'ConvertDefaultLocale',
                                                                                            'ReadFile',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeleteFileA',
                                                                                            'CreateThread',
                                                                                            'GlobalFree',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'CreateMutexA',
                                                                                            'ReleaseMutex',
                                                                                            'GetFileSize',
                                                                                            'CreateDirectoryA',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlUnwind',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'WriteFile',
                                                                                            'SetFileTime',
                                                                                            'lstrlenA',
                                                                                            'FindNextFileA',
                                                                                            'SetFilePointer',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'DialogBoxParamA',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetWindowTextA',
                                                                                            'GetSystemMetrics',
                                                                                            'SystemParametersInfoA',
                                                                                            'PostMessageA',
                                                                                            'ShowWindow',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetWindowLongA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'SetFocus',
                                                                                            'KillTimer',
                                                                                            'CharNextA',
                                                                                            'GetWindowRect',
                                                                                            'RegisterClassExA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetWindowLongA',
                                                                                            'MoveWindow',
                                                                                            '_vsnprintf',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'PhoneBookLoad',
                                                                                            'PhoneBookMergeChanges',
                                                                                            'PhoneBookUnload',
                                                                                            'PhoneBookParseInfoA',
                                                                                            'PhoneBookFreeFilter',
                                                                                            'CmStrCpyAllocW',
                                                                                            'IsLogonAsSystem',
                                                                                            'CmBuildFullPathFromRelativeA',
                                                                                            'SzToWzWithAlloc',
                                                                                            'CmLoadIconA',
                                                                                            '??0CmLogFile@@QAE@XZ',
                                                                                            '??1CmLogFile@@QAE@XZ',
                                                                                            '?Init@CmLogFile@@QAEJPAUHINSTANCE__@@HPBD@Z',
                                                                                            '?SetParams@CmLogFile@@QAEJHKPBD@Z',
                                                                                            '?Start@CmLogFile@@QAEJH@Z',
                                                                                            '?Stop@CmLogFile@@QAEJXZ',
                                                                                            '?DeInit@CmLogFile@@QAEJXZ',
                                                                                            '?Log@CmLogFile@@QAAXW4_CMLOG_ITEM@@ZZ',
                                                                                            'CmCompareStringA',
                                                                                            'CmStrrchrA',
                                                                                            'CmFmtMsgA',
                                                                                            'WzToSzWithAlloc',
                                                                                            'CmLoadSmallIconA',
                                                                                            'CmStrCpyAllocA',
                                                                                            'CmFree',
                                                                                            'CmRealloc',
                                                                                            'CmMalloc',
                                                                                            'CmStrchrA',
                                                                                            'RasEnumConnectionsA',
                                                                                            'WinHttpQueryDataAvailable',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpCrackUrl',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpGetDefaultProxyConfiguration',
                                                                                            'WinHttpGetProxyForUrl',
                                                                                            'WinHttpGetIEProxyConfigForCurrentUser'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 143,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 36352},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9631159f2aaf4832d4e4df11054948c4a1439946e21c1680ff8b108274e59c6e'},
 '96a69e45dbb5b8a85cf8a5ab36aad4c194a667dc4bec9ad32caccf707f24e7f9': {'AddressOfEntryPoint': 4988,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2664,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/96a69e45dbb5b8a85cf8a5ab36aad4c194a667dc4bec9ad32caccf707f24e7f9'},
 '96c8f4b3e1f325dcd1ee5ae1fec78562d115099a731934aeadc3e49ef19a720d': {'AddressOfEntryPoint': 67696,
                                                                      'DebugRVA': 4752,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'RpcAsyncCompleteCall',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringOrdinal',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ReleaseSRWLockExclusive',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-threadpool-l1-2-0.dll': 'CloseThreadpoolWork',
                                                                                      'api-ms-win-devices-query-l1-1-1.dll': 'DevGetObjectPropertiesEx',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'TraceMessage',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventWrite',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'DuplicateToken',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind'},
                                                                      'ImportedFunctions': ['_vsnwprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RpcServerUnregisterIfEx',
                                                                                            'RpcSsDestroyClientContext',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcBindingSetOption',
                                                                                            'RpcBindingFree',
                                                                                            'MesEncodeIncrementalHandleCreate',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'MesIncrementalHandleReset',
                                                                                            'RpcExceptionFilter',
                                                                                            'MesHandleFree',
                                                                                            'UuidFromStringW',
                                                                                            'I_RpcBindingInqLocalClientPID',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcServerRegisterIf3',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'NdrServerCallAll',
                                                                                            'Ndr64AsyncServerCallAll',
                                                                                            'NdrServerCall2',
                                                                                            'NdrAsyncServerCall',
                                                                                            'NdrMesTypeEncode3',
                                                                                            'RpcRevertToSelf',
                                                                                            'NdrMesTypeAlignSize3',
                                                                                            'NdrClientCall3',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'TraceMessage',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeSRWLock',
                                                                                            'AcquireSRWLockShared',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'WaitForThreadpoolWorkCallbacks',
                                                                                            'SubmitThreadpoolWork',
                                                                                            'CreateThreadpoolWork',
                                                                                            'CloseThreadpoolWait',
                                                                                            'CreateThreadpoolWait',
                                                                                            'SetThreadpoolWait',
                                                                                            'WaitForThreadpoolWaitCallbacks',
                                                                                            'CloseThreadpoolWork',
                                                                                            'DuplicateToken',
                                                                                            'SetThreadToken',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalFree',
                                                                                            'DevFreeObjectProperties',
                                                                                            'DevGetObjectPropertiesEx',
                                                                                            'CompareStringOrdinal',
                                                                                            'RegCloseKey',
                                                                                            'RegGetValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'EventWrite'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 80896},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/96c8f4b3e1f325dcd1ee5ae1fec78562d115099a731934aeadc3e49ef19a720d'},
 '971ef57fe7a61f62cbe81857525206bf03e59df1377a6c6de700dc7856fcc089': {'AddressOfEntryPoint': 10352,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'RASAPI32.dll': 'RasGetAutodialAddressW',
                                                                                      'RASDLG.dll': 'RasAutodialQueryDlgW',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'msvcrt.dll': '_exit',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'VirtualFree',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'VirtualAlloc',
                                                                                            'ProcessIdToSessionId',
                                                                                            'LocalAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'memset',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_except_handler4_common',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_vsnprintf',
                                                                                            'printf',
                                                                                            'strstr',
                                                                                            '_wcsicmp',
                                                                                            '_stricmp',
                                                                                            '__p__commode',
                                                                                            '__setusermatherr',
                                                                                            '_exit',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtClose',
                                                                                            'NtOpenFile',
                                                                                            'DbgPrint',
                                                                                            'NtQuerySystemInformation',
                                                                                            'DwRasUninitialize',
                                                                                            'RasGetAutodialParamW',
                                                                                            'RasEnumAutodialAddressesW',
                                                                                            'RasGetAutodialAddressW',
                                                                                            'RasPhonebookDlgW',
                                                                                            'RasDialDlgW',
                                                                                            'RasAutodialQueryDlgW',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2408,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/971ef57fe7a61f62cbe81857525206bf03e59df1377a6c6de700dc7856fcc089'},
 '976b533b4ceb34aa9ee24ee98303f4423f6e627c8a41697fe0ef428bde511e81': {'AddressOfEntryPoint': 782572,
                                                                      'DebugRVA': 1663168,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 1671648,
                                                                      'ExportSize': 1128,
                                                                      'IATRVA': 995328,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RevertToSelf',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'IPHLPAPI.DLL': 'CancelIPChangeNotify',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'PSAPI.DLL': 'GetProcessMemoryInfo',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINHTTP.dll': 'WinHttpConnect',
                                                                                      'WININET.dll': 'InternetCheckConnectionW',
                                                                                      'WINMM.dll': 'timeEndPeriod',
                                                                                      'ntdll.dll': 'RtlUnwind',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['UuidCreate',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ImpersonateNamedPipeClient',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SystemFunction036',
                                                                                            'RegOverridePredefKey',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'TraceEvent',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RevertToSelf',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'WinHttpAddRequestHeaders',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpSetStatusCallback',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpCrackUrl',
                                                                                            'WinHttpGetIEProxyConfigForCurrentUser',
                                                                                            'WinHttpGetProxyForUrl',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpSetOption',
                                                                                            'WinHttpQueryDataAvailable',
                                                                                            'WinHttpConnect',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'InternetCheckConnectionW',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'timeBeginPeriod',
                                                                                            'timeGetTime',
                                                                                            'timeEndPeriod',
                                                                                            'CryptQueryObject',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertNameToStrW',
                                                                                            'CertCloseStore',
                                                                                            'CryptHashCertificate',
                                                                                            'CertFreeCertificateContext',
                                                                                            'NtQueryKey',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'RtlUnwind',
                                                                                            'NotifyAddrChange',
                                                                                            'CancelIPChangeNotify',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'ReadConsoleW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetCommandLineA',
                                                                                            'EnumSystemLocalesW',
                                                                                            'IsValidLocale',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetACP',
                                                                                            'GetProcessHeap',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringA',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'FormatMessageA',
                                                                                            'GetTickCount',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'GetCommandLineW',
                                                                                            'LocalFree',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcessId',
                                                                                            'GetSystemInfo',
                                                                                            'GetProcessTimes',
                                                                                            'VirtualQueryEx',
                                                                                            'GetVersionExW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'WakeAllConditionVariable',
                                                                                            'WakeConditionVariable',
                                                                                            'InitializeConditionVariable',
                                                                                            'SleepConditionVariableSRW',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetThreadPriority',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentThreadId',
                                                                                            'DuplicateHandle',
                                                                                            'Sleep',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadPriority',
                                                                                            'RaiseException',
                                                                                            'CreateThread',
                                                                                            'QueryThreadCycleTime',
                                                                                            'TzSpecificLocalTimeToSystemTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateEventW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetModuleHandleExW',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'UnregisterWaitEx',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SetEvent',
                                                                                            'CreateIoCompletionPort',
                                                                                            'LoadLibraryW',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'AcquireSRWLockShared',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ResetEvent',
                                                                                            'CreateDirectoryW',
                                                                                            'ReadFile',
                                                                                            'GetLongPathNameW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetFileAttributesW',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetFileAttributesW',
                                                                                            'PeekNamedPipe',
                                                                                            'CopyFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'VirtualQuery',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetFilePointerEx',
                                                                                            'FlushFileBuffers',
                                                                                            'FindFirstFileW',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'TerminateProcess',
                                                                                            'ResumeThread',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'FreeLibrary',
                                                                                            'GlobalFree',
                                                                                            'DecodePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'RemoveVectoredExceptionHandler',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexA',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'OpenProcess',
                                                                                            'ReadProcessMemory',
                                                                                            'SetFilePointer',
                                                                                            'LockFileEx',
                                                                                            'UnlockFileEx',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'SetHandleInformation',
                                                                                            'CreatePipe',
                                                                                            'SleepEx',
                                                                                            'GetVersion',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'TransactNamedPipe',
                                                                                            'WaitNamedPipeW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'SuspendThread',
                                                                                            'GetThreadContext',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFullPathNameW',
                                                                                            'ExitProcess',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'LoadLibraryExW',
                                                                                            'OutputDebugStringW',
                                                                                            'InitializeSListHead',
                                                                                            'GetStartupInfoW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ConnectNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileAttributesExW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLocaleInfoW',
                                                                                            'LCMapStringW',
                                                                                            'CompareStringW',
                                                                                            'GetCPInfo',
                                                                                            'EncodePointer',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'VirtualProtect',
                                                                                            'LoadLibraryExA',
                                                                                            'WideCharToMultiByte',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 255,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 457952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 31744,
                                                                                       '.gfids\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 684544,
                                                                                       '.reloc\x00\x00': 54272,
                                                                                       '.rsrc\x00\x00\x00': 458240,
                                                                                       '.text\x00\x00\x00': 989696,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'CPADinfo': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/976b533b4ceb34aa9ee24ee98303f4423f6e627c8a41697fe0ef428bde511e81'},
 '97881bc9ba7d6bfceedfbe5f605283fcb393345ffa62e11d36f107b63fd3103f': {'AddressOfEntryPoint': 14047,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MulDiv',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'RegisterClassA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'wvsprintfA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'EmptyClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'SetForegroundWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 157,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 26160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 26624,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/97881bc9ba7d6bfceedfbe5f605283fcb393345ffa62e11d36f107b63fd3103f'},
 '97c867cf893874b5924bc41fb93b87a92ae5fb2f4191610898e0fe73bca491ef': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 55440,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 55808,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/97c867cf893874b5924bc41fb93b87a92ae5fb2f4191610898e0fe73bca491ef'},
 '97dfcae8909c23ca43e2b251611dbb38235e8a89f2bfefdbb32c9d8f380c819a': {'AddressOfEntryPoint': 13108,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'MoveFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrlenW',
                                                                                            'WaitForSingleObject',
                                                                                            'CopyFileW',
                                                                                            'CompareFileTime',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'lstrcpyW',
                                                                                            'MoveFileExW',
                                                                                            'lstrcatW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetShortPathNameW',
                                                                                            'SearchPathW',
                                                                                            'lstrcmpiW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrcmpW',
                                                                                            'GlobalUnlock',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableMenuItem',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapW',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'wsprintfW',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharPrevW',
                                                                                            'CharNextA',
                                                                                            'wsprintfA',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EndDialog',
                                                                                            'RegisterClassW',
                                                                                            'SystemParametersInfoW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'CharNextW',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'LoadImageW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowExW',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetForegroundWindow',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 140632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 140800,
                                                                                       '.text\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/97dfcae8909c23ca43e2b251611dbb38235e8a89f2bfefdbb32c9d8f380c819a'},
 '97faeea90c645ee3f2667a8095499675a3c05c4f30f448cc2533506f7eff3481': {'AddressOfEntryPoint': 251817,
                                                                      'DebugRVA': 492928,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 385024,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SystemFunction036',
                                                                                      'KERNEL32.dll': 'RaiseException',
                                                                                      'USER32.dll': 'GetClipboardOwner'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetUserNameA',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'SystemFunction036',
                                                                                            'FindWindowA',
                                                                                            'SendMessageA',
                                                                                            'GetCursorPos',
                                                                                            'GetForegroundWindow',
                                                                                            'GetCapture',
                                                                                            'GetQueueStatus',
                                                                                            'GetClipboardOwner',
                                                                                            'SetEndOfFile',
                                                                                            'HeapSize',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CreateFileW',
                                                                                            'GetProcessHeap',
                                                                                            'SetStdHandle',
                                                                                            'GetTickCount',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetOverlappedResult',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FormatMessageA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DecodePointer',
                                                                                            'GetProcessTimes',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadTimes',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAdjustment',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'CreateFileA',
                                                                                            'LocalFree',
                                                                                            'WaitNamedPipeA',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeA',
                                                                                            'GetCurrentThreadId',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'LocalAlloc',
                                                                                            'CreateFileMappingA',
                                                                                            'SetHandleInformation',
                                                                                            'CreatePipe',
                                                                                            'CreateProcessA',
                                                                                            'OpenProcess',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'GetFileTime',
                                                                                            'SetFilePointer',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'DeleteFileA',
                                                                                            'GetLocalTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryExW',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleExW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'OutputDebugStringW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'GetStringTypeW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'HeapReAlloc',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetFileAttributesExW',
                                                                                            'ReadConsoleW',
                                                                                            'SetFilePointerEx',
                                                                                            'FindFirstFileExA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'RaiseException'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 141,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5336,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.rdata\x00\x00': 114176,
                                                                                       '.reloc\x00\x00': 16896,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 378368},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/97faeea90c645ee3f2667a8095499675a3c05c4f30f448cc2533506f7eff3481'},
 '983b888f0d7ff028516417bbd645b5b52578ab8d433a501718fd2a8569e580e9': {'AddressOfEntryPoint': 4988,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2624,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/983b888f0d7ff028516417bbd645b5b52578ab8d433a501718fd2a8569e580e9'},
 '9845c284c806a2d7943eefcef8af5313937fcc057e249f78b3990c86e282d423': {'AddressOfEntryPoint': 61184,
                                                                      'DebugRVA': 4544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'DWrite.dll': 'DWriteCreateFactory',
                                                                                      'GDI32.dll': 'PatBlt',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'OLEACC.dll': 'LresultFromObject',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SETUPAPI.dll': 'SetupDiOpenDeviceInterfaceW',
                                                                                      'USER32.dll': 'DrawFocusRect',
                                                                                      'UxTheme.dll': 'DrawThemeParentBackground',
                                                                                      'msvcrt.dll': '??0exception@@QAE@ABV0@@Z',
                                                                                      'ntdll.dll': 'WinSqmIncrementDWORD',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'EventWrite',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RegCreateKeyExW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'SetSecurityInfo',
                                                                                            'RegSetValueExW',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'IsWow64Process',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CreateMutexW',
                                                                                            'GetTickCount64',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'MulDiv',
                                                                                            'CloseHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetStretchBltMode',
                                                                                            'SetBkColor',
                                                                                            'Polyline',
                                                                                            'CreatePen',
                                                                                            'GetTextMetricsW',
                                                                                            'SetBkMode',
                                                                                            'StretchBlt',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GdiAlphaBlend',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'GdiSetBatchLimit',
                                                                                            'SetTextColor',
                                                                                            'CreateSolidBrush',
                                                                                            'PatBlt',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'CheckDlgButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckRadioButton',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'ChangeDisplaySettingsExW',
                                                                                            'GetSysColor',
                                                                                            'CopyImage',
                                                                                            'LoadImageW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'DialogBoxParamW',
                                                                                            'DrawTextW',
                                                                                            'GetFocus',
                                                                                            'MapWindowPoints',
                                                                                            'FillRect',
                                                                                            'RedrawWindow',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'PostMessageW',
                                                                                            'SetWindowLongW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItem',
                                                                                            'GetClientRect',
                                                                                            'MapDialogRect',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'EndDialog',
                                                                                            'SetForegroundWindow',
                                                                                            'FindWindowW',
                                                                                            'RegisterClassExW',
                                                                                            'LoadCursorW',
                                                                                            'DefWindowProcW',
                                                                                            'TrackMouseEvent',
                                                                                            'SendMessageW',
                                                                                            'EndPaint',
                                                                                            'GetSysColorBrush',
                                                                                            'FrameRect',
                                                                                            'BeginPaint',
                                                                                            'GetParent',
                                                                                            'InvalidateRect',
                                                                                            'SetWindowTextW',
                                                                                            'MessageBoxW',
                                                                                            'SystemParametersInfoW',
                                                                                            'LoadBitmapW',
                                                                                            'SetFocus',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetWindowPos',
                                                                                            'PtInRect',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'ReleaseDC',
                                                                                            'LoadStringW',
                                                                                            'GetDC',
                                                                                            'GetWindowLongW',
                                                                                            'DrawFocusRect',
                                                                                            '_ftol2',
                                                                                            '_wtoi',
                                                                                            '_lock',
                                                                                            '_ftol2_sse',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_acmdln',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            'memset',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            'free',
                                                                                            'realloc',
                                                                                            'wcschr',
                                                                                            'malloc',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiOpenDeviceInterfaceW',
                                                                                            'CloseThemeData',
                                                                                            'GetThemeSysFont',
                                                                                            'GetThemeSysColor',
                                                                                            'GetThemeColor',
                                                                                            'GetThemeFont',
                                                                                            'OpenThemeData',
                                                                                            'IsThemeActive',
                                                                                            'DrawThemeParentBackground',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'LresultFromObject',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'StringFromGUID2',
                                                                                            'CoGetObject',
                                                                                            'CoCreateInstance',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetElement',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'PropertySheetW',
                                                                                            'InitCommonControlsEx',
                                                                                            'DWriteCreateFactory'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 190,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 241920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 242176,
                                                                                       '.text\x00\x00\x00': 60416},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9845c284c806a2d7943eefcef8af5313937fcc057e249f78b3990c86e282d423'},
 '985eb55ecb750da812876b8569d5f1999a30a24bcc54f9bab4d3fc44dfedb931': {'AddressOfEntryPoint': 382412,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 442368,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'KERNEL32.dll': 'VirtualProtect',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'CharUpperA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'ole32.dll': 'OleSaveToStream'},
                                                                      'ImportedFunctions': ['lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'FindNextFileA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileSize',
                                                                                            'GetFileTime',
                                                                                            'WriteFile',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetTempPathA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTickCount',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcmpiA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateEventA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'FindClose',
                                                                                            'HeapDestroy',
                                                                                            'DeleteCriticalSection',
                                                                                            'lstrcatA',
                                                                                            'OpenEventA',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'WinExec',
                                                                                            'SetFileTime',
                                                                                            'MoveFileExA',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'GetPrivateProfileSectionNamesA',
                                                                                            'WritePrivateProfileSectionA',
                                                                                            'RemoveDirectoryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'GetFileAttributesA',
                                                                                            'MoveFileA',
                                                                                            'DeleteFileA',
                                                                                            'CopyFileA',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'InterlockedDecrement',
                                                                                            'LocalFree',
                                                                                            'InterlockedIncrement',
                                                                                            'FormatMessageA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrcpyA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'SetErrorMode',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsBadCodePtr',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'LCMapStringW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetVersion',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'ExitThread',
                                                                                            'TlsSetValue',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'InterlockedExchange',
                                                                                            'GetCurrentThread',
                                                                                            'LCMapStringA',
                                                                                            'lstrcpynA',
                                                                                            'CreateFileMappingA',
                                                                                            'ResetEvent',
                                                                                            'UnmapViewOfFile',
                                                                                            'SearchPathA',
                                                                                            'VirtualQuery',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetOEMCP',
                                                                                            'MapViewOfFile',
                                                                                            'VirtualProtect',
                                                                                            'GetDesktopWindow',
                                                                                            'PostThreadMessageA',
                                                                                            'wsprintfA',
                                                                                            'PeekMessageA',
                                                                                            'CharNextA',
                                                                                            'DispatchMessageA',
                                                                                            'GetMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'LoadStringA',
                                                                                            'CharLowerBuffA',
                                                                                            'TranslateMessage',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperA',
                                                                                            'RegCloseKey',
                                                                                            'GetFileSecurityA',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'SetFileSecurityA',
                                                                                            'RegEnumValueA',
                                                                                            'RegConnectRegistryA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryValueA',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenThreadToken',
                                                                                            'RegOpenKeyExA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'CoGetClassObject',
                                                                                            'StgOpenStorage',
                                                                                            'CLSIDFromString',
                                                                                            'WriteClassStm',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'CoUninitialize',
                                                                                            'CoTreatAsClass',
                                                                                            'CoInitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'StgCreateDocfile',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleLoadFromStream',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'OleSaveToStream',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayPutElement',
                                                                                            'VariantChangeType',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysReAllocStringLen',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'VariantInit',
                                                                                            'VariantCopyInd',
                                                                                            'VariantCopy',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SafeArrayGetElement',
                                                                                            'SysStringByteLen',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 222,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 57736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 20480,
                                                                                       '.rdata\x00\x00': 90112,
                                                                                       '.rsrc\x00\x00\x00': 61440,
                                                                                       '.text\x00\x00\x00': 438272},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/985eb55ecb750da812876b8569d5f1999a30a24bcc54f9bab4d3fc44dfedb931'},
 '98c63b38c69f40ddab2eaa1c472bc1c3eab7e9158675d2124ccdabdc92d0ed3c': {'AddressOfEntryPoint': 39584,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHLWAPI.dll': 'PathStripToRootW',
                                                                                      'SspiCli.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'IIDFromString',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ReleaseMutex',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetNativeSystemInfo',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'SystemTimeToTzSpecificLocalTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetLengthSid',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlLookupFunctionEntry',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['free',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memmove',
                                                                                            '_vsnwprintf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memset',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'IIDFromString',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'ReleaseMutex',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'CoInitialize',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'IsValidSid',
                                                                                            'FreeSid',
                                                                                            'CopySid',
                                                                                            'CheckTokenMembership',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'OutputDebugStringW',
                                                                                            'GetFileType',
                                                                                            'GetDriveTypeW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteFile',
                                                                                            'GetUserNameExW',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'PathIsRootW',
                                                                                            'StrChrW',
                                                                                            'PathIsRelativeW',
                                                                                            'StrRChrW',
                                                                                            'PathIsUNCW',
                                                                                            'PathStripToRootW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 111,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 78552,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 78848,
                                                                                       '.text\x00\x00\x00': 38912},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/98c63b38c69f40ddab2eaa1c472bc1c3eab7e9158675d2124ccdabdc92d0ed3c'},
 '9914e9e7d4060556b78ebbe3ffd190b6c3d5d37f0cbfeaa95430cbc0d99488ef': {'AddressOfEntryPoint': 14816,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': '__p__fmode',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'ulib.dll': '?QueryString@WSTRING@@QBEPAV1@KK@Z'},
                                                                      'ImportedFunctions': ['HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memmove',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'sprintf_s',
                                                                                            '__p__fmode',
                                                                                            '??1BYTE_STREAM@@UAE@XZ',
                                                                                            '??0BYTE_STREAM@@QAE@XZ',
                                                                                            '?TruncateBase@PATH@@QAEEXZ',
                                                                                            '?SetName@PATH@@QAEEPBVWSTRING@@@Z',
                                                                                            '?QueryWCExpansion@PATH@@QAEPAV1@PAV1@@Z',
                                                                                            '?HasWildCard@PATH@@QBEEXZ',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '?Initialize@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '?Initialize@PATH@@QAEEPBV1@E@Z',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@LONG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0LONG_ARGUMENT@@QAE@XZ',
                                                                                            '?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z',
                                                                                            '?Strcmpis@WSTRING@@SGHPAG0@Z',
                                                                                            '?Strcmps@WSTRING@@SGHPAG0@Z',
                                                                                            '?QueryNumber@WSTRING@@QBEEPAJKK@Z',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '??0FSTRING@@QAE@XZ',
                                                                                            '?ReadWLine@STREAM@@QAEEPAGKPAKEK@Z',
                                                                                            '?ReadMbLine@STREAM@@QAEEPADKPAKEK@Z',
                                                                                            '?SetAttributes@FSN_FILTER@@QAEEKKK@Z',
                                                                                            '??0CLASS_DESCRIPTOR@@QAE@XZ',
                                                                                            '?Initialize@FSN_FILTER@@QAEEXZ',
                                                                                            '??1FSN_FILTER@@UAE@XZ',
                                                                                            '??0FSN_FILTER@@QAE@XZ',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?Initialize@BYTE_STREAM@@QAEEPAVSTREAM@@K@Z',
                                                                                            '?ValidateVersion@PROGRAM@@UBEXKK@Z',
                                                                                            '?Usage@PROGRAM@@UBEXXZ',
                                                                                            '?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?Fatal@PROGRAM@@UBEXXZ',
                                                                                            '?Fatal@PROGRAM@@UBAXKKPADZZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z',
                                                                                            '?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ',
                                                                                            '??1PROGRAM@@UAE@XZ',
                                                                                            '?Initialize@PROGRAM@@QAEEKKK@Z',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?Strcmpis@MBSTR@@SGHPAD0@Z',
                                                                                            '?Strcmps@MBSTR@@SGHPAD0@Z',
                                                                                            '?Stricmp@MBSTR@@SGHPAD0@Z',
                                                                                            '?QueryFsnodeArray@FSN_DIRECTORY@@QBEPAVARRAY@@PAVFSN_FILTER@@@Z',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z',
                                                                                            '?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z',
                                                                                            '??1FSTRING@@UAE@XZ',
                                                                                            '?Initialize@FSTRING@@QAEPAVWSTRING@@PAGK@Z',
                                                                                            '?Strupr@WSTRING@@QAEPAV1@XZ',
                                                                                            '?Stricmp@WSTRING@@QBEJPBV1@@Z',
                                                                                            '?Stricmp@WSTRING@@SGHPAG0@Z',
                                                                                            '?Strcmp@WSTRING@@SGHPAG0@Z',
                                                                                            '?FillAndReadByte@BYTE_STREAM@@AAEEPAE@Z',
                                                                                            '??0PROGRAM@@IAE@XZ',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?Initialize@CLASS_DESCRIPTOR@@QAEEXZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z',
                                                                                            '?QueryString@WSTRING@@QBEPAV1@KK@Z',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 109,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9914e9e7d4060556b78ebbe3ffd190b6c3d5d37f0cbfeaa95430cbc0d99488ef'},
 '99175db05c309a22e8ea0fde205ccdd9c608acb962ea8f3d5db9274db8d87fac': {'AddressOfEntryPoint': 16576,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'DeleteObject',
                                                                                      'IMM32.dll': 'ImmDisableTextFrameService',
                                                                                      'KERNEL32.dll': 'DelayLoadFailureHook',
                                                                                      'NInput.dll': 'ProcessPointerFramesInteractionContext',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'GetPointerInfo',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetStartupInfoW',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'msvcrt.dll': '??3@YAXPEAX@Z',
                                                                                      'ntdll.dll': 'EtwUnregisterTraceGuids',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'ShowWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'IsIconic',
                                                                                            'LoadStringW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'LoadIconW',
                                                                                            'FindWindowW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SendMessageW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'PostMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'ShowCursor',
                                                                                            'InvalidateRect',
                                                                                            'MoveWindow',
                                                                                            'DestroyWindow',
                                                                                            'PostQuitMessage',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetPointerDevices',
                                                                                            'GetRawInputDeviceInfoW',
                                                                                            'GetPointerDevice',
                                                                                            'EndPaint',
                                                                                            'DrawTextExW',
                                                                                            'GetSysColor',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'SkipPointerFrameMessages',
                                                                                            'GetPointerFrameInfoHistory',
                                                                                            'GetPointerInfo',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '_vsnwprintf',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlCaptureContext',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCommandLineW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'ImmDisableTextFrameService',
                                                                                            'CommandLineToArgvW',
                                                                                            'DestroyInteractionContext',
                                                                                            'RegisterOutputCallbackInteractionContext',
                                                                                            'SetPropertyInteractionContext',
                                                                                            'SetInteractionConfigurationInteractionContext',
                                                                                            'CreateInteractionContext',
                                                                                            'ProcessPointerFramesInteractionContext',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'lstrlenW',
                                                                                            'MulDiv',
                                                                                            'LocalFree',
                                                                                            'lstrcmpW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 110,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 28408,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 15872},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/99175db05c309a22e8ea0fde205ccdd9c608acb962ea8f3d5db9274db8d87fac'},
 '9932324e1cdfc4bc88d5bc908b90ae7e032ce999c46091f97e6784faaf8ac97f': {'AddressOfEntryPoint': 17856,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CredpEncodeSecret',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'CRYPT32.dll': 'CryptUnprotectData',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'SetLastError',
                                                                                      'MsCtfMonitor.DLL': 'InitLocalMsCtfMonitor',
                                                                                      'RPCRT4.dll': 'RpcStringBindingComposeW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'PostMessageW',
                                                                                      'msvcrt.dll': '_except_handler4_common',
                                                                                      'netutils.dll': 'NetApiBufferFree',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError',
                                                                                      'samcli.dll': 'NetValidatePasswordPolicy'},
                                                                      'ImportedFunctions': ['GetTokenInformation',
                                                                                            'DuplicateToken',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'RevertToSelf',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CredBackupCredentials',
                                                                                            'CredRestoreCredentials',
                                                                                            'CredpEncodeSecret',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'CreateThread',
                                                                                            'CancelIo',
                                                                                            'DeleteFileW',
                                                                                            'DuplicateHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CreateEventW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'GetTempFileNameW',
                                                                                            'SetEvent',
                                                                                            'SleepEx',
                                                                                            'WriteFile',
                                                                                            'LocalAlloc',
                                                                                            'GetTickCount',
                                                                                            'GlobalFree',
                                                                                            'OpenProcess',
                                                                                            'FormatMessageW',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetOverlappedResult',
                                                                                            'GetTempPathW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetObjectW',
                                                                                            'CreateFontIndirectW',
                                                                                            'ShowWindow',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextW',
                                                                                            'LoadStringW',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetWindowLongW',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowLongW',
                                                                                            'SetFocus',
                                                                                            'SendDlgItemMessageW',
                                                                                            'CheckRadioButton',
                                                                                            'GetParent',
                                                                                            'PostMessageW',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcsncmp',
                                                                                            'swscanf',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_vsnwprintf',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            'memset',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'PropertySheetW',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'TpReleaseWait',
                                                                                            'TpWaitForWait',
                                                                                            'TpAllocWait',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtPrivilegeCheck',
                                                                                            'TpSetWait',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'CryptProtectData',
                                                                                            'CryptUnprotectData',
                                                                                            'RpcAsyncCancelCall',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'NdrAsyncClientCall',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'CommandLineToArgvW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetValidatePasswordPolicy',
                                                                                            'UninitLocalMsCtfMonitor',
                                                                                            'InitLocalMsCtfMonitor'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 114,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 16384},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9932324e1cdfc4bc88d5bc908b90ae7e032ce999c46091f97e6784faaf8ac97f'},
 '995780108f9a112b6b3b4846d42d26a344be86a51d76118fbe3cba2df6ff5307': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 374760,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 374784,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/995780108f9a112b6b3b4846d42d26a344be86a51d76118fbe3cba2df6ff5307'},
 '996cae130528d585bf4c1d60123272b7ebaad73bd005dbed96c3c95e198a2b42': {'AddressOfEntryPoint': 90877,
                                                                      'DebugRVA': 247136,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 184320,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetTokenInformation',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathAppendW',
                                                                                      'USER32.dll': 'CloseWindowStation',
                                                                                      'USERENV.dll': 'UnloadUserProfile',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['TerminateProcess',
                                                                                            'SetLastError',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'RtlUnwind',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetACP',
                                                                                            'GetCurrentThread',
                                                                                            'LCMapStringW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetFileType',
                                                                                            'OutputDebugStringA',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'EncodePointer',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'DuplicateHandle',
                                                                                            'ReleaseMutex',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrcmpiW',
                                                                                            'VirtualQuery',
                                                                                            'GetTempPathW',
                                                                                            'GetLocalTime',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'Sleep',
                                                                                            'lstrcmpW',
                                                                                            'lstrlenW',
                                                                                            'SetFilePointer',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'InitializeSListHead',
                                                                                            'TryEnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'GetFileAttributesExW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'MoveFileExW',
                                                                                            'GetFileTime',
                                                                                            'ReadFile',
                                                                                            'DeviceIoControl',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'OpenProcess',
                                                                                            'CreateProcessW',
                                                                                            'ReadProcessMemory',
                                                                                            'lstrcpynW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'WaitForDebugEvent',
                                                                                            'GetProcessId',
                                                                                            'DebugActiveProcessStop',
                                                                                            'ContinueDebugEvent',
                                                                                            'GetSystemInfo',
                                                                                            'GetThreadContext',
                                                                                            'DebugActiveProcess',
                                                                                            'VirtualQueryEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitNamedPipeW',
                                                                                            'TransactNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'RtlCaptureContext',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'EnterCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcessHeap',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'HeapDestroy',
                                                                                            'DecodePointer',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'HeapReAlloc',
                                                                                            'GetLastError',
                                                                                            'HeapSize',
                                                                                            'IsDebuggerPresent',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetComputerNameExW',
                                                                                            'GetOverlappedResult',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'DisconnectNamedPipe',
                                                                                            'UnregisterWait',
                                                                                            'GetProcessTimes',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapFree',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'GetProcessWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'CloseClipboard',
                                                                                            'CharUpperW',
                                                                                            'DispatchMessageW',
                                                                                            'GetMessageW',
                                                                                            'PeekMessageW',
                                                                                            'EnumWindows',
                                                                                            'IsWindowVisible',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'wvsprintfW',
                                                                                            'PostThreadMessageW',
                                                                                            'CreateWindowStationW',
                                                                                            'SetProcessWindowStation',
                                                                                            'CreateDesktopW',
                                                                                            'GetThreadDesktop',
                                                                                            'SetThreadDesktop',
                                                                                            'CharLowerW',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxW',
                                                                                            'CloseWindowStation',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'InitializeSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'InitializeAcl',
                                                                                            'GetAclInformation',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'MakeAbsoluteSD',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'GetAce',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'EqualSid',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'OpenThreadToken',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'SetSecurityDescriptorSacl',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TraceEvent',
                                                                                            'SetTokenInformation',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'SHGetFolderPathW',
                                                                                            'NetWkstaGetInfo',
                                                                                            'NetApiBufferFree',
                                                                                            'UuidCreate',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathStripPathW',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathIsRelativeW',
                                                                                            'SHQueryValueExW',
                                                                                            'PathAppendW',
                                                                                            'UnloadUserProfile',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 235,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 72704,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 177152},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/996cae130528d585bf4c1d60123272b7ebaad73bd005dbed96c3c95e198a2b42'},
 '997c0e69c490770815dd64189ad2f59f8309ad266981bfc5d70a728dd174d19c': {'AddressOfEntryPoint': 6832,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'msvcrt.dll': 'wcschr'},
                                                                      'ImportedFunctions': ['SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'LocalAlloc',
                                                                                            '_fmode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'wcsncmp',
                                                                                            'wcstoul',
                                                                                            'wcschr',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 38,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2336,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/997c0e69c490770815dd64189ad2f59f8309ad266981bfc5d70a728dd174d19c'},
 '998f3bba8abcd6be600769cae18951bc5a280098524898770ebd762e9fb6fedd': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 95376,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 95744,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/998f3bba8abcd6be600769cae18951bc5a280098524898770ebd762e9fb6fedd'},
 '99fecebad98a67c3d67bdcf5e212f301d5da57f3f7dd2804af89a88d31477bdb': {'AddressOfEntryPoint': 23109,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetTokenInformation',
                                                                                      'KERNEL32.dll': 'GetVersionExA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SetParent',
                                                                                      'msvcrt.dll': '_snprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeviceIoControl',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'GetVersionExA',
                                                                                            'sprintf',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_vsnprintf',
                                                                                            '_snprintf',
                                                                                            'OpenProcessToken',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetTokenInformation',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 107,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3352,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5586944,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/99fecebad98a67c3d67bdcf5e212f301d5da57f3f7dd2804af89a88d31477bdb'},
 '99ff6dc0dc03e0e92ae9e46b897ecfb8f88af4de9bf93d380c1e2f3c4fe86927': {'AddressOfEntryPoint': 62705,
                                                                      'DebugRVA': 82688,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 81920,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapDestroy',
                                                                                      'MSVCP100.dll': '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                      'MSVCR100.dll': '__setusermatherr',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'USER32.dll': 'PostMessageA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['MultiByteToWideChar',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'InterlockedDecrement',
                                                                                            'ResetEvent',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleHandleA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'CloseHandle',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'ResumeThread',
                                                                                            'TerminateThread',
                                                                                            'LocalAlloc',
                                                                                            'lstrlenA',
                                                                                            'FormatMessageA',
                                                                                            'Sleep',
                                                                                            'GetThreadId',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'InterlockedExchange',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'LocalFree',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'TranslateMessage',
                                                                                            'DefWindowProcA',
                                                                                            'PostThreadMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'RegisterClassA',
                                                                                            'PeekMessageA',
                                                                                            'CreateWindowExA',
                                                                                            'SetWindowLongA',
                                                                                            'GetMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetWindowLongA',
                                                                                            'PostMessageA',
                                                                                            'CoCreateGuid',
                                                                                            'CoInitializeEx',
                                                                                            'OleRun',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'VarBstrCat',
                                                                                            'SysStringLen',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'GetErrorInfo',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '_except_handler4_common',
                                                                                            '_crt_debugger_hook',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_invoke_watson',
                                                                                            '__set_app_type',
                                                                                            '_controlfp_s',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_localtime64_s',
                                                                                            '_mktime64',
                                                                                            '_time64',
                                                                                            'memset',
                                                                                            '_CxxThrowException',
                                                                                            '_endthreadex',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_mbsstr',
                                                                                            '_mbscmp',
                                                                                            '_mbsnbcmp',
                                                                                            'free',
                                                                                            'toupper',
                                                                                            '_beginthreadex',
                                                                                            'printf',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'strnlen',
                                                                                            'vsprintf_s',
                                                                                            '_vscprintf',
                                                                                            'sprintf_s',
                                                                                            '_purecall',
                                                                                            'atoi',
                                                                                            'atol',
                                                                                            'tolower',
                                                                                            '_kbhit',
                                                                                            '_getch',
                                                                                            '_mbsncmp',
                                                                                            '_mbslwr_s',
                                                                                            'memcpy',
                                                                                            '_mbsinc',
                                                                                            '_ismbcspace',
                                                                                            '_mbsicmp',
                                                                                            '_mbschr',
                                                                                            '_mbsrchr',
                                                                                            '_mbspbrk',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '_mbsnicmp',
                                                                                            'malloc',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 145,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 28672,
                                                                                       '.reloc\x00\x00': 13312,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 76288,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/99ff6dc0dc03e0e92ae9e46b897ecfb8f88af4de9bf93d380c1e2f3c4fe86927'},
 '9a7bbc43fc996beda3c6e2b7d212662ac660c6f316c4907e2bc7625530a30c27': {'AddressOfEntryPoint': 1422497,
                                                                      'DebugRVA': 1637808,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1634304,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetFileSecurityA',
                                                                                      'COMCTL32.dll': 'ImageList_GetIconSize',
                                                                                      'COMDLG32.dll': 'GetFileTitleA',
                                                                                      'GDI32.dll': 'RestoreDC',
                                                                                      'IMM32.dll': 'ImmGetContext',
                                                                                      'KERNEL32.dll': 'GetStringTypeA',
                                                                                      'MSIMG32.dll': 'TransparentBlt',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SETUPAPI.dll': 'SetupDiOpenDevRegKey',
                                                                                      'SHELL32.dll': 'ExtractIconA',
                                                                                      'SHLWAPI.dll': 'PathIsUNCA',
                                                                                      'USER32.dll': 'LoadIconA',
                                                                                      'UxTheme.dll': 'SetWindowTheme',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'WINMM.dll': 'PlaySoundA',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'gdiplus.dll': 'GdipCreateFontFamilyFromName',
                                                                                      'ole32.dll': 'OleDuplicateData'},
                                                                      'ImportedFunctions': ['VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'PathFileExistsA',
                                                                                            'PathStripToRootA',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFindExtensionA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathIsUNCA',
                                                                                            'SetWindowTheme',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStringTypeW',
                                                                                            'CompareStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'GetTimeZoneInformation',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetStdHandle',
                                                                                            'HeapSize',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'ExitProcess',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'FindResourceExA',
                                                                                            'SetErrorMode',
                                                                                            'VirtualProtect',
                                                                                            'GetTempPathA',
                                                                                            'SearchPathA',
                                                                                            'Sleep',
                                                                                            'GetProfileIntA',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetFileSizeEx',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetFileAttributesExA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'SetEndOfFile',
                                                                                            'LCMapStringW',
                                                                                            'VirtualQuery',
                                                                                            'LCMapStringA',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'lstrcmpiA',
                                                                                            'GetStringTypeExA',
                                                                                            'DeleteFileA',
                                                                                            'MoveFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'lstrcpyA',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleHandleW',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'LocalReAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'EnterCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'LocalAlloc',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetThreadLocale',
                                                                                            'GlobalFlags',
                                                                                            'InterlockedDecrement',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetFileTime',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesA',
                                                                                            'GlobalGetAtomNameA',
                                                                                            'GlobalFindAtomA',
                                                                                            'lstrcmpW',
                                                                                            'GetVersionExA',
                                                                                            'FreeResource',
                                                                                            'ResumeThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GlobalAddAtomA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'ConvertDefaultLocale',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LoadLibraryExA',
                                                                                            'CompareStringA',
                                                                                            'InterlockedExchange',
                                                                                            'lstrcmpA',
                                                                                            'GlobalFree',
                                                                                            'CopyFileA',
                                                                                            'GlobalSize',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetDefaultCommConfigA',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcpynA',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'CloseHandle',
                                                                                            'GetStringTypeA',
                                                                                            'GetUpdateRect',
                                                                                            'UpdateLayeredWindow',
                                                                                            'EnableScrollBar',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'SetClassLongA',
                                                                                            'GetDoubleClickTime',
                                                                                            'CopyIcon',
                                                                                            'GetIconInfo',
                                                                                            'GetMenuDefaultItem',
                                                                                            'SetMenuDefaultItem',
                                                                                            'EmptyClipboard',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'LoadImageA',
                                                                                            'DestroyIcon',
                                                                                            'CopyImage',
                                                                                            'OpenClipboard',
                                                                                            'IsMenu',
                                                                                            'SetParent',
                                                                                            'LockWindowUpdate',
                                                                                            'CharUpperA',
                                                                                            'GetAsyncKeyState',
                                                                                            'NotifyWinEvent',
                                                                                            'GetSystemMenu',
                                                                                            'DeleteMenu',
                                                                                            'UnionRect',
                                                                                            'IsZoomed',
                                                                                            'WindowFromPoint',
                                                                                            'TranslateMDISysAccel',
                                                                                            'DrawMenuBar',
                                                                                            'DefMDIChildProcA',
                                                                                            'DefFrameProcA',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'InsertMenuItemA',
                                                                                            'BringWindowToTop',
                                                                                            'TranslateAcceleratorA',
                                                                                            'DrawIcon',
                                                                                            'GetMenuItemInfoA',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'LoadCursorA',
                                                                                            'DestroyCursor',
                                                                                            'SetCursorPos',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'ClientToScreen',
                                                                                            'LoadMenuA',
                                                                                            'LoadAcceleratorsA',
                                                                                            'DestroyMenu',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowTextA',
                                                                                            'IsDialogMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'CheckDlgButton',
                                                                                            'SendDlgItemMessageA',
                                                                                            'WinHelpA',
                                                                                            'IsChild',
                                                                                            'GetCapture',
                                                                                            'GetClassNameA',
                                                                                            'SetPropA',
                                                                                            'GetPropA',
                                                                                            'RemovePropA',
                                                                                            'GetForegroundWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetTopWindow',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'ScrollWindow',
                                                                                            'TrackPopupMenu',
                                                                                            'SetMenu',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollRange',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowScrollBar',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoExA',
                                                                                            'GetClassInfoA',
                                                                                            'RegisterClassA',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ScreenToClient',
                                                                                            'EqualRect',
                                                                                            'DeferWindowPos',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'SetWindowPlacement',
                                                                                            'CallWindowProcA',
                                                                                            'GetMenu',
                                                                                            'SetWindowLongA',
                                                                                            'SystemParametersInfoA',
                                                                                            'IsIconic',
                                                                                            'GetWindowPlacement',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetActiveWindow',
                                                                                            'GetKeyState',
                                                                                            'ValidateRect',
                                                                                            'IntersectRect',
                                                                                            'SetRectEmpty',
                                                                                            'SetRect',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollPos',
                                                                                            'GetWindow',
                                                                                            'SetFocus',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongA',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'MessageBoxA',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetCursor',
                                                                                            'FrameRect',
                                                                                            'PostQuitMessage',
                                                                                            'DrawIconEx',
                                                                                            'GetSysColorBrush',
                                                                                            'MapWindowPoints',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowRgn',
                                                                                            'DrawFocusRect',
                                                                                            'DrawFrameControl',
                                                                                            'OffsetRect',
                                                                                            'InflateRect',
                                                                                            'IsRectEmpty',
                                                                                            'DrawStateA',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'GetFocus',
                                                                                            'ModifyMenuA',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'GetMenuState',
                                                                                            'GetMenuStringA',
                                                                                            'UnregisterClassA',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'CharUpperBuffA',
                                                                                            'CopyAcceleratorTableA',
                                                                                            'ToAsciiEx',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetWindowRgn',
                                                                                            'CreateMenu',
                                                                                            'GetMenuItemID',
                                                                                            'InsertMenuA',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'RemoveMenu',
                                                                                            'MapVirtualKeyA',
                                                                                            'GetKeyNameTextA',
                                                                                            'IsWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgCtrlID',
                                                                                            'IsWindowVisible',
                                                                                            'DrawTextA',
                                                                                            'GrayStringA',
                                                                                            'DrawEdge',
                                                                                            'DrawTextExA',
                                                                                            'RedrawWindow',
                                                                                            'TabbedTextOutA',
                                                                                            'WindowFromDC',
                                                                                            'GetClassLongA',
                                                                                            'PtInRect',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'LoadBitmapA',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'MessageBeep',
                                                                                            'PeekMessageA',
                                                                                            'PostMessageA',
                                                                                            'InvalidateRect',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'CopyRect',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetCursorPos',
                                                                                            'CreatePopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'GetParent',
                                                                                            'UpdateWindow',
                                                                                            'EnableWindow',
                                                                                            'SendMessageA',
                                                                                            'MapDialogRect',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'MapVirtualKeyExA',
                                                                                            'IsCharLowerA',
                                                                                            'WaitMessage',
                                                                                            'PostThreadMessageA',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'SubtractRect',
                                                                                            'CreateAcceleratorTableA',
                                                                                            'DefWindowProcA',
                                                                                            'GetKeyboardState',
                                                                                            'LoadIconA',
                                                                                            'DeleteObject',
                                                                                            'SelectClipRgn',
                                                                                            'GetPixel',
                                                                                            'SetViewportOrgEx',
                                                                                            'SaveDC',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ExtSelectClipRgn',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'SelectPalette',
                                                                                            'GetObjectType',
                                                                                            'SetRectRgn',
                                                                                            'GetCharWidthA',
                                                                                            'StretchDIBits',
                                                                                            'CreateRoundRectRgn',
                                                                                            'CreateDIBitmap',
                                                                                            'EnumFontFamiliesA',
                                                                                            'GetTextCharsetInfo',
                                                                                            'CreateDIBSection',
                                                                                            'RealizePalette',
                                                                                            'StretchBlt',
                                                                                            'SetPixel',
                                                                                            'CreatePalette',
                                                                                            'GetPaletteEntries',
                                                                                            'OffsetRgn',
                                                                                            'GetRgnBox',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'ExtFloodFill',
                                                                                            'SetPaletteEntries',
                                                                                            'GetViewportOrgEx',
                                                                                            'PtInRegion',
                                                                                            'FillRgn',
                                                                                            'FrameRgn',
                                                                                            'GetBoundsRect',
                                                                                            'EnumFontFamiliesExA',
                                                                                            'GetWindowOrgEx',
                                                                                            'SetPixelV',
                                                                                            'GetTextFaceA',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'GetClipBox',
                                                                                            'SetTextAlign',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'IntersectClipRect',
                                                                                            'ExcludeClipRect',
                                                                                            'SetMapMode',
                                                                                            'SetROP2',
                                                                                            'SetPolyFillMode',
                                                                                            'SetBkMode',
                                                                                            'Escape',
                                                                                            'RectVisible',
                                                                                            'GetViewportExtEx',
                                                                                            'GetObjectA',
                                                                                            'ExtTextOutA',
                                                                                            'TextOutA',
                                                                                            'BitBlt',
                                                                                            'CreateBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'CreateFontA',
                                                                                            'SetDIBColorTable',
                                                                                            'SelectObject',
                                                                                            'GetDCOrgEx',
                                                                                            'GetTextMetricsA',
                                                                                            'RoundRect',
                                                                                            'Rectangle',
                                                                                            'CreatePatternBrush',
                                                                                            'CreatePen',
                                                                                            'Polygon',
                                                                                            'Ellipse',
                                                                                            'Polyline',
                                                                                            'GetTextColor',
                                                                                            'CombineRgn',
                                                                                            'CreatePolygonRgn',
                                                                                            'CreateEllipticRgn',
                                                                                            'CreateHatchBrush',
                                                                                            'CreateSolidBrush',
                                                                                            'CopyMetaFileA',
                                                                                            'GetDeviceCaps',
                                                                                            'PatBlt',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'LPtoDP',
                                                                                            'GetWindowExtEx',
                                                                                            'CreateFontIndirectA',
                                                                                            'DPtoLP',
                                                                                            'GetMapMode',
                                                                                            'PtVisible',
                                                                                            'GetBkColor',
                                                                                            'CreateRectRgn',
                                                                                            'RestoreDC',
                                                                                            'AlphaBlend',
                                                                                            'TransparentBlt',
                                                                                            'GetFileTitleA',
                                                                                            'OpenPrinterA',
                                                                                            'DocumentPropertiesA',
                                                                                            'ClosePrinter',
                                                                                            'RegCreateKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetFileSecurityA',
                                                                                            'SetFileSecurityA',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'DragFinish',
                                                                                            'DragQueryFileA',
                                                                                            'SHAppBarMessage',
                                                                                            'SHBrowseForFolderA',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ExtractIconA',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_GetIconSize',
                                                                                            'RevokeDragDrop',
                                                                                            'CoLockObjectExternal',
                                                                                            'RegisterDragDrop',
                                                                                            'DoDragDrop',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoCreateInstance',
                                                                                            'OleGetClipboard',
                                                                                            'ReleaseStgMedium',
                                                                                            'CoTaskMemFree',
                                                                                            'OleLockRunning',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'OleTranslateAccelerator',
                                                                                            'IsAccelerator',
                                                                                            'OleCreateMenuDescriptor',
                                                                                            'OleDestroyMenuDescriptor',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleDuplicateData',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'PlaySoundA',
                                                                                            'ImmGetOpenStatus',
                                                                                            'ImmReleaseContext',
                                                                                            'ImmGetContext',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipFillRectangle',
                                                                                            'GdipDrawString',
                                                                                            'GdipCreateFont',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteFontFamily',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipFree',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdiplusStartup',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateFontFamilyFromName'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 581,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1856736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 48640,
                                                                                       '.rdata\x00\x00': 921088,
                                                                                       '.reloc\x00\x00': 218112,
                                                                                       '.rsrc\x00\x00\x00': 1857024,
                                                                                       '.text\x00\x00\x00': 1630208},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9a7bbc43fc996beda3c6e2b7d212662ac660c6f316c4907e2bc7625530a30c27'},
 '9aaddc499cedaa3c759632e8dfa15e4ba3dd7425696f5f8adf22a89f224c92ba': {'AddressOfEntryPoint': 52512,
                                                                      'DebugRVA': 4368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'COMCTL32.dll': 'DestroyPropertySheetPage',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'GetFullPathNameA',
                                                                                      'USER32.dll': 'IsDlgButtonChecked',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'imagehlp.dll': 'CheckSumMappedFile',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LocalAlloc',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'CompareStringA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'CloseHandle',
                                                                                            'GetVersion',
                                                                                            'LocalFree',
                                                                                            'DeleteFileA',
                                                                                            'FreeResource',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            '_llseek',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            '_lwrite',
                                                                                            'GlobalLock',
                                                                                            '_lclose',
                                                                                            'GetTickCount',
                                                                                            'EnumResourceTypesA',
                                                                                            'FindResourceExA',
                                                                                            'GlobalAlloc',
                                                                                            'SizeofResource',
                                                                                            'GetProcAddress',
                                                                                            'GlobalUnlock',
                                                                                            'SetLastError',
                                                                                            'GlobalFree',
                                                                                            'GetTempFileNameA',
                                                                                            'CreateFileMappingA',
                                                                                            'MoveFileA',
                                                                                            'LockResource',
                                                                                            '_lread',
                                                                                            'LoadLibraryExA',
                                                                                            'EnumResourceNamesA',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetTempPathA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetSystemTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpiA',
                                                                                            'GetLastError',
                                                                                            'FindFirstFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetShortPathNameA',
                                                                                            'ReadFile',
                                                                                            'CreateProcessA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'WriteFile',
                                                                                            'FormatMessageA',
                                                                                            'GetModuleHandleW',
                                                                                            'WritePrivateProfileSectionA',
                                                                                            'lstrcmpA',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'CreateFileA',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteObject',
                                                                                            'GetObjectA',
                                                                                            'CreateFontIndirectW',
                                                                                            'ShowWindow',
                                                                                            'CheckDlgButton',
                                                                                            'GetWindowRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'CharPrevA',
                                                                                            'CheckRadioButton',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'LoadStringA',
                                                                                            'GetParent',
                                                                                            'MessageBeep',
                                                                                            'CharNextA',
                                                                                            'SetFocus',
                                                                                            'SendMessageA',
                                                                                            'GetDC',
                                                                                            'SetWindowLongA',
                                                                                            'MessageBoxA',
                                                                                            'GetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'GetDlgItem',
                                                                                            'PostMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'GetSystemMetrics',
                                                                                            'EnableWindow',
                                                                                            'CallWindowProcA',
                                                                                            'IsDlgButtonChecked',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_initterm',
                                                                                            '_except_handler4_common',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcsncmp',
                                                                                            'mbstowcs',
                                                                                            '_splitpath_s',
                                                                                            'strtoul',
                                                                                            'toupper',
                                                                                            'memcpy_s',
                                                                                            '_vsnprintf',
                                                                                            'strtok',
                                                                                            'strchr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_itoa_s',
                                                                                            '_itoa',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetSaveFileNameA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'CheckSumMappedFile',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 155,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 88008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 88064,
                                                                                       '.text\x00\x00\x00': 51200},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9aaddc499cedaa3c759632e8dfa15e4ba3dd7425696f5f8adf22a89f224c92ba'},
 '9ac2c67f12b69085fdd7813a351545453a98c3f0074ca4f7eb3d7aee547bce07': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 37720,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'Qt5Core.dll': '_ZNK9QSettings5valueERK7QStringRK8QVariant',
                                                                                      'Qt5Widgets.dll': '_ZThn8_NK7QWidget7devTypeEv',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'libgcc_s_dw2-1.dll': '__register_frame_info',
                                                                                      'libstdc++-6.dll': '__gxx_personality_v0',
                                                                                      'msvcrt.dll': 'vfprintf'},
                                                                      'ImportedFunctions': ['_ZN10QArrayData10deallocateEPS_jj',
                                                                                            '_ZN10QArrayData11shared_nullE',
                                                                                            '_ZN11QFileDevice5closeEv',
                                                                                            '_ZN11QTextStreamlsERK7QString',
                                                                                            '_ZN11QTextStreamlsEc',
                                                                                            '_ZN11QTextStreamlsEi',
                                                                                            '_ZN14QStandardPaths16writableLocationENS_16StandardLocationE',
                                                                                            '_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN5QFile6existsERK7QString',
                                                                                            '_ZN5QFileC1ERK7QString',
                                                                                            '_ZN5QFileD1Ev',
                                                                                            '_ZN6QDebugD1Ev',
                                                                                            '_ZN7QObject10childEventEP11QChildEvent',
                                                                                            '_ZN7QObject10timerEventEP11QTimerEvent',
                                                                                            '_ZN7QObject11customEventEP6QEvent',
                                                                                            '_ZN7QObject11eventFilterEPS_P6QEvent',
                                                                                            '_ZN7QObject13connectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QObject16disconnectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString15fromUtf8_helperEPKci',
                                                                                            '_ZN7QString16fromAscii_helperEPKci',
                                                                                            '_ZN7QString6appendERKS_',
                                                                                            '_ZN7QStringaSERKS_',
                                                                                            '_ZN7QThread5sleepEm',
                                                                                            '_ZN8QProcess15waitForFinishedEi',
                                                                                            '_ZN8QProcess21readAllStandardOutputEv',
                                                                                            '_ZN8QProcess5startERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN8QProcessC1EP7QObject',
                                                                                            '_ZN8QProcessD1Ev',
                                                                                            '_ZN8QVariantC1ERK7QString',
                                                                                            '_ZN8QVariantD1Ev',
                                                                                            '_ZN9QListData11shared_nullE',
                                                                                            '_ZN9QListData6detachEi',
                                                                                            '_ZN9QListData7disposeEPNS_4DataE',
                                                                                            '_ZN9QSettings6removeERK7QString',
                                                                                            '_ZN9QSettings8setValueERK7QStringRK8QVariant',
                                                                                            '_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject',
                                                                                            '_ZNK11QObjectData17dynamicMetaObjectEv',
                                                                                            '_ZNK14QMessageLogger5debugEv',
                                                                                            '_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE',
                                                                                            '_ZNK8QProcess5errorEv',
                                                                                            '_ZNK8QProcess8exitCodeEv',
                                                                                            '_ZNK8QVariant8toStringEv',
                                                                                            '_ZNK9QIODevice11errorStringEv',
                                                                                            '_ZNK9QSettings5valueERK7QStringRK8QVariant',
                                                                                            '_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN11QMainWindow11qt_metacastEPKc',
                                                                                            '_ZN11QMainWindow15createPopupMenuEv',
                                                                                            '_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN11QMainWindow16staticMetaObjectE',
                                                                                            '_ZN11QMainWindow5eventEP6QEvent',
                                                                                            '_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN11QMainWindowD2Ev',
                                                                                            '_ZN12QApplication4execEv',
                                                                                            '_ZN12QApplicationC1ERiPPci',
                                                                                            '_ZN12QApplicationD1Ev',
                                                                                            '_ZN7QWidget10closeEventEP11QCloseEvent',
                                                                                            '_ZN7QWidget10enterEventEP6QEvent',
                                                                                            '_ZN7QWidget10leaveEventEP6QEvent',
                                                                                            '_ZN7QWidget10paintEventEP11QPaintEvent',
                                                                                            '_ZN7QWidget10setVisibleEb',
                                                                                            '_ZN7QWidget10wheelEventEP11QWheelEvent',
                                                                                            '_ZN7QWidget11actionEventEP12QActionEvent',
                                                                                            '_ZN7QWidget11changeEventEP6QEvent',
                                                                                            '_ZN7QWidget11nativeEventERK10QByteArrayPvPl',
                                                                                            '_ZN7QWidget11resizeEventEP12QResizeEvent',
                                                                                            '_ZN7QWidget11tabletEventEP12QTabletEvent',
                                                                                            '_ZN7QWidget12focusInEventEP11QFocusEvent',
                                                                                            '_ZN7QWidget13dragMoveEventEP14QDragMoveEvent',
                                                                                            '_ZN7QWidget13focusOutEventEP11QFocusEvent',
                                                                                            '_ZN7QWidget13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN7QWidget14dragEnterEventEP15QDragEnterEvent',
                                                                                            '_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent',
                                                                                            '_ZN7QWidget14mouseMoveEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget15keyReleaseEventEP9QKeyEvent',
                                                                                            '_ZN7QWidget15mousePressEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget16inputMethodEventEP17QInputMethodEvent',
                                                                                            '_ZN7QWidget17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget18focusNextPrevChildEb',
                                                                                            '_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget9dropEventEP10QDropEvent',
                                                                                            '_ZN7QWidget9hideEventEP10QHideEvent',
                                                                                            '_ZN7QWidget9moveEventEP10QMoveEvent',
                                                                                            '_ZN7QWidget9showEventEP10QShowEvent',
                                                                                            '_ZNK7QWidget10redirectedEP6QPoint',
                                                                                            '_ZNK7QWidget11initPainterEP8QPainter',
                                                                                            '_ZNK7QWidget11paintEngineEv',
                                                                                            '_ZNK7QWidget13sharedPainterEv',
                                                                                            '_ZNK7QWidget14heightForWidthEi',
                                                                                            '_ZNK7QWidget15minimumSizeHintEv',
                                                                                            '_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE',
                                                                                            '_ZNK7QWidget17hasHeightForWidthEv',
                                                                                            '_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE',
                                                                                            '_ZNK7QWidget7devTypeEv',
                                                                                            '_ZNK7QWidget8sizeHintEv',
                                                                                            '_ZThn8_NK7QWidget10redirectedEP6QPoint',
                                                                                            '_ZThn8_NK7QWidget11initPainterEP8QPainter',
                                                                                            '_ZThn8_NK7QWidget11paintEngineEv',
                                                                                            '_ZThn8_NK7QWidget13sharedPainterEv',
                                                                                            '_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE',
                                                                                            '_ZThn8_NK7QWidget7devTypeEv',
                                                                                            '_Unwind_Resume',
                                                                                            '__deregister_frame_info',
                                                                                            '__register_frame_info',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'signal',
                                                                                            'strcmp',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'vfprintf',
                                                                                            'CommandLineToArgvW',
                                                                                            '_ZTVN10__cxxabiv117__class_type_infoE',
                                                                                            '_ZTVN10__cxxabiv120__si_class_type_infoE',
                                                                                            '_ZTVN10__cxxabiv121__vmi_class_type_infoE',
                                                                                            '_ZdaPv',
                                                                                            '_ZdlPv',
                                                                                            '_Znaj',
                                                                                            '_Znwj',
                                                                                            '__gxx_personality_v0'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.eh_fram': 3584,
                                                                                       '.idata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 14848,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/9ac2c67f12b69085fdd7813a351545453a98c3f0074ca4f7eb3d7aee547bce07'},
 '9acf913220503e5fc2121f4ebd85338cf3c2e3b2bd267e2f785054e5a0a34883': {'AddressOfEntryPoint': 12664,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'MulDiv',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'PostQuitMessage',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'ole32.dll': 'OleUninitialize',
                                                                                      'snmpapi.dll': 'SnmpUtilVarBindFree'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'lstrcatA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'lstrcpynA',
                                                                                            'GetCommandLineA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrcpyA',
                                                                                            'lstrlenA',
                                                                                            'SetEndOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'lstrcmpA',
                                                                                            'GetVolumeInformationA',
                                                                                            'InterlockedExchange',
                                                                                            'RtlUnwind',
                                                                                            'lstrcmpiA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'VirtualQuery',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'MulDiv',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'SetWindowPos',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadBitmapA',
                                                                                            'GetClassInfoA',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxA',
                                                                                            'CharPrevA',
                                                                                            'LoadCursorA',
                                                                                            'GetWindowLongA',
                                                                                            'GetSysColor',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'SetTimer',
                                                                                            'SetCursor',
                                                                                            'IsWindowVisible',
                                                                                            'CallWindowProcA',
                                                                                            'GetMessagePos',
                                                                                            'ScreenToClient',
                                                                                            'CheckDlgButton',
                                                                                            'RegisterClassA',
                                                                                            'SetWindowTextA',
                                                                                            'wsprintfA',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'GetClientRect',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'PeekMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'SendMessageA',
                                                                                            'InvalidateRect',
                                                                                            'PostQuitMessage',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'CreateBrushIndirect',
                                                                                            'DeleteObject',
                                                                                            'CreateFontIndirectA',
                                                                                            'GetDeviceCaps',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'ShellExecuteA',
                                                                                            'RegEnumValueA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleUninitialize',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'SnmpUtilOidCpy',
                                                                                            'SnmpUtilOidNCmp',
                                                                                            'SnmpUtilVarBindFree'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 155,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 32768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 29184,
                                                                                       '.rsro\x00\x00\x00': 0,
                                                                                       '.text\x00\x00\x00': 26624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9acf913220503e5fc2121f4ebd85338cf3c2e3b2bd267e2f785054e5a0a34883'},
 '9ae43faa045e6a86e9b220fe305b4142e0bea4733782b28f870e4ad779e80181': {'AddressOfEntryPoint': 27428,
                                                                      'DebugRVA': 4768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetCurrentDirectoryA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': 'exit'},
                                                                      'ImportedFunctions': ['FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrlenA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetShortPathNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'CompareStringA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FormatMessageA',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExA',
                                                                                            'GetVersionExA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'TerminateThread',
                                                                                            'GetDriveTypeA',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'InterlockedExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetDeviceCaps',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowPos',
                                                                                            'SendMessageA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DispatchMessageA',
                                                                                            'CallWindowProcA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'CharPrevA',
                                                                                            'CharUpperA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'LoadStringA',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_vsnprintf',
                                                                                            'exit',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 8612448,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 8612864,
                                                                                       '.text\x00\x00\x00': 43520},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9ae43faa045e6a86e9b220fe305b4142e0bea4733782b28f870e4ad779e80181'},
 '9b1db0b9951bbb3373eb9642ef107e4ce44ae3f79f371e4ddca1201fb0c49491': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 58012,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 58368,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9b1db0b9951bbb3373eb9642ef107e4ce44ae3f79f371e4ddca1201fb0c49491'},
 '9b773adba5e9c85afcd2984cfba4bb180bd251e69f693653d3ab4f2de51eb140': {'AddressOfEntryPoint': 73222,
                                                                      'DebugRVA': 5072,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetStdHandle',
                                                                                      'SHELL32.dll': 'ShellAboutA',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'comdlg32.dll': 'ChooseFontA',
                                                                                      'msvcrt.dll': '_controlfp'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'CreateThread',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetThreadLocale',
                                                                                            'lstrcpynA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'LocalLock',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetExitCodeProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FindNextFileA',
                                                                                            'LocalHandle',
                                                                                            'LocalUnlock',
                                                                                            'LocalFree',
                                                                                            'CopyFileA',
                                                                                            'SetFileTime',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'GetFileSize',
                                                                                            'GetFileTime',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetACP',
                                                                                            'MultiByteToWideChar',
                                                                                            'IsDBCSLeadByte',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'FlushFileBuffers',
                                                                                            'ExitProcess',
                                                                                            'GlobalHandle',
                                                                                            'OutputDebugStringA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetTickCount',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'MulDiv',
                                                                                            'GetFullPathNameA',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'CompareFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcatA',
                                                                                            'GlobalFree',
                                                                                            'lstrlenA',
                                                                                            'lstrcpyA',
                                                                                            'lstrcmpA',
                                                                                            'DeleteFileA',
                                                                                            'GetStdHandle',
                                                                                            'strtok',
                                                                                            '_snprintf',
                                                                                            'strstr',
                                                                                            'calloc',
                                                                                            'system',
                                                                                            '_ltoa',
                                                                                            'exit',
                                                                                            'isalpha',
                                                                                            '_fullpath',
                                                                                            'memmove',
                                                                                            'wcspbrk',
                                                                                            'wcslen',
                                                                                            '_stricmp',
                                                                                            '_mkdir',
                                                                                            'malloc',
                                                                                            'strcspn',
                                                                                            'strncmp',
                                                                                            '_strdup',
                                                                                            'toupper',
                                                                                            'islower',
                                                                                            'strchr',
                                                                                            'atoi',
                                                                                            'wcsncpy',
                                                                                            'isspace',
                                                                                            'isdigit',
                                                                                            '_getcwd',
                                                                                            'free',
                                                                                            'strncat',
                                                                                            '_strnicmp',
                                                                                            'strpbrk',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            '_acmdln',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            'RegOpenKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyA',
                                                                                            'GetStockObject',
                                                                                            'Rectangle',
                                                                                            'SelectObject',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'CreateSolidBrush',
                                                                                            'CreatePen',
                                                                                            'CreateFontA',
                                                                                            'GetTextMetricsA',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextExtentPointA',
                                                                                            'ExtTextOutA',
                                                                                            'SetTextColor',
                                                                                            'EndPage',
                                                                                            'StartPage',
                                                                                            'DeleteDC',
                                                                                            'EndDoc',
                                                                                            'AbortDoc',
                                                                                            'StartDocA',
                                                                                            'SetAbortProc',
                                                                                            'ExtTextOutW',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetROP2',
                                                                                            'DeleteObject',
                                                                                            'CreateDialogParamA',
                                                                                            'IsDialogMessageA',
                                                                                            'GetKeyState',
                                                                                            'ScrollWindow',
                                                                                            'ValidateRect',
                                                                                            'SetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'SetScrollInfo',
                                                                                            'DrawFocusRect',
                                                                                            'SetWindowLongA',
                                                                                            'PtInRect',
                                                                                            'RedrawWindow',
                                                                                            'ReleaseCapture',
                                                                                            'GetParent',
                                                                                            'SetCapture',
                                                                                            'DrawTextA',
                                                                                            'GetFocus',
                                                                                            'GetWindowLongA',
                                                                                            'ScreenToClient',
                                                                                            'ReleaseDC',
                                                                                            'SendMessageA',
                                                                                            'FillRect',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'MessageBoxA',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DefWindowProcA',
                                                                                            'RegisterClassA',
                                                                                            'LoadCursorA',
                                                                                            'wsprintfA',
                                                                                            'SetCursor',
                                                                                            'SetDlgItemTextA',
                                                                                            'CheckDlgButton',
                                                                                            'EndDialog',
                                                                                            'GetDlgItemTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'CheckRadioButton',
                                                                                            'ShowWindow',
                                                                                            'CharLowerBuffA',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'IsDlgButtonChecked',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'CharPrevA',
                                                                                            'GetSysColor',
                                                                                            'AttachThreadInput',
                                                                                            'GetDesktopWindow',
                                                                                            'RegisterWindowMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'TranslateAcceleratorA',
                                                                                            'PeekMessageA',
                                                                                            'MoveWindow',
                                                                                            'LoadStringA',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowPlacement',
                                                                                            'PostMessageA',
                                                                                            'DestroyMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'ClientToScreen',
                                                                                            'EnableMenuItem',
                                                                                            'GetSubMenu',
                                                                                            'LoadMenuA',
                                                                                            'InvalidateRect',
                                                                                            'GetMenu',
                                                                                            'SetWindowTextA',
                                                                                            'InvertRect',
                                                                                            'GetCursorPos',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'LoadIconA',
                                                                                            'DestroyWindow',
                                                                                            'SystemParametersInfoA',
                                                                                            'CheckMenuItem',
                                                                                            'PostQuitMessage',
                                                                                            'WinHelpA',
                                                                                            'SetFocus',
                                                                                            'UpdateWindow',
                                                                                            'CreateWindowExA',
                                                                                            'LoadAcceleratorsA',
                                                                                            'GetMessageA',
                                                                                            'GetOpenFileNameA',
                                                                                            'PrintDlgA',
                                                                                            'ChooseFontA',
                                                                                            'ShellAboutA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 235,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 21672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 22016,
                                                                                       '.text\x00\x00\x00': 99328,
                                                                                       '.tls\x00\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9b773adba5e9c85afcd2984cfba4bb180bd251e69f693653d3ab4f2de51eb140'},
 '9b87765286fc691e8b8ffdc3b28355d21cf37eb3532098c9798c108cfdf63d50': {'AddressOfEntryPoint': 67347,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSidSubAuthorityCount',
                                                                                      'KERNEL32.dll': 'GetUserDefaultUILanguage',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'AssocQueryStringW',
                                                                                      'USER32.dll': 'PeekMessageW',
                                                                                      'WININET.dll': 'InternetCreateUrlW',
                                                                                      'mscoree.dll': 'LoadLibraryShim',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlInitUnicodeString',
                                                                                      'ole32.dll': 'CLSIDFromProgID',
                                                                                      'urlmon.dll': 'GetClassFileOrMime'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'CreateRestrictedToken',
                                                                                            'CreateProcessAsUserW',
                                                                                            'EqualSid',
                                                                                            'CreateWellKnownSid',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaLookupPrivilegeValue',
                                                                                            'LsaNtStatusToWinError',
                                                                                            'LsaClose',
                                                                                            'CopySid',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'SetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'GetAce',
                                                                                            'AddAce',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'TraceEvent',
                                                                                            'RegEnumKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetLastError',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'GetVersionExW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'CloseHandle',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateEventW',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'GetFileAttributesExW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'RaiseException',
                                                                                            'MultiByteToWideChar',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapSetInformation',
                                                                                            'IsDebuggerPresent',
                                                                                            'OpenEventW',
                                                                                            'LoadLibraryW',
                                                                                            'SwitchToThread',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'ActivateActCtx',
                                                                                            'DeactivateActCtx',
                                                                                            'OutputDebugStringW',
                                                                                            'TerminateProcess',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'OpenProcess',
                                                                                            'LocalAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'OutputDebugStringA',
                                                                                            'SearchPathW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetLastError',
                                                                                            'CreateFileMappingW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'DispatchMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'LoadStringW',
                                                                                            'PostMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'UnregisterClassA',
                                                                                            'CharNextW',
                                                                                            'WaitForInputIdle',
                                                                                            'MessageBeep',
                                                                                            'MessageBoxW',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            '_callnewh',
                                                                                            'iswdigit',
                                                                                            'wcsncmp',
                                                                                            'memset',
                                                                                            'memmove_s',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            'tolower',
                                                                                            'bsearch',
                                                                                            'isdigit',
                                                                                            '_wcsnicmp',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'memcpy_s',
                                                                                            'malloc',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsicmp',
                                                                                            'free',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_vsnwprintf',
                                                                                            '_lock',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memcpy',
                                                                                            'RtlInitUnicodeString',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CreateBindCtx',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromProgID',
                                                                                            'SysAllocStringLen',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'CoEEShutDownCOM',
                                                                                            'LoadLibraryShim',
                                                                                            'PathFindExtensionW',
                                                                                            'AssocQueryStringW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetCreateUrlW',
                                                                                            'CreateURLMonikerEx',
                                                                                            'CoInternetParseUrl',
                                                                                            'RegisterBindStatusCallback',
                                                                                            'CoInternetCreateSecurityManager',
                                                                                            'CoInternetCombineUrl',
                                                                                            'URLDownloadToCacheFileW',
                                                                                            'GetClassFileOrMime',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 200,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 158432,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 158720,
                                                                                       '.text\x00\x00\x00': 66560},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9b87765286fc691e8b8ffdc3b28355d21cf37eb3532098c9798c108cfdf63d50'},
 '9bbe91f3da1b1e7beeeefaf6a7b3db584f01926dce79747559a02942996950ab': {'AddressOfEntryPoint': 95188,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127784,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 131,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 403216,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 403456,
                                                                                       '.text\x00\x00\x00': 89088,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9bbe91f3da1b1e7beeeefaf6a7b3db584f01926dce79747559a02942996950ab'},
 '9bcb7a05b9a1752b9fcd7be69eb6d4683341828a28f95f5acadf9a37392af4d9': {'AddressOfEntryPoint': 6112,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'SHELL32.dll': 'Control_RunDLL',
                                                                                      'USER32.dll': 'GetWindow',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['GetUserDefaultUILanguage',
                                                                                            'GetCurrentProcessId',
                                                                                            'EnumUILanguagesW',
                                                                                            'lstrcmpW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetStockObject',
                                                                                            'DestroyIcon',
                                                                                            'SendMessageW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'DefWindowProcW',
                                                                                            'CharNextW',
                                                                                            'GetClassNameW',
                                                                                            'GetWindowLongW',
                                                                                            'LoadCursorW',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowLongW',
                                                                                            'CharUpperBuffW',
                                                                                            'GetWindow',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'Control_RunDLL'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 47,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 112464,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 112640,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9bcb7a05b9a1752b9fcd7be69eb6d4683341828a28f95f5acadf9a37392af4d9'},
 '9c05d671e08bd2310204e4c4f1d2c6d4cf06378ef00d208eb96639b4b4b0e770': {'AddressOfEntryPoint': 14384,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'ExitWindowsEx',
                                                                                      'WINSTA.dll': 'WinStationOpenServerExW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['WinStationGetAllSessionsW',
                                                                                            'WinStationReset',
                                                                                            'LogonIdFromWinStationNameW',
                                                                                            'WinStationFreeMemory',
                                                                                            'WinStationOpenServerW',
                                                                                            'WinStationNameFromLogonIdW',
                                                                                            'WinStationOpenServerExW',
                                                                                            'LoadStringW',
                                                                                            'ExitWindowsEx',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'wcschr',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcstol',
                                                                                            'memmove',
                                                                                            '_wcslwr',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            '_iob',
                                                                                            'fgetwc',
                                                                                            'iswctype',
                                                                                            'swprintf_s',
                                                                                            'memcpy',
                                                                                            'wcstoul',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 79,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9c05d671e08bd2310204e4c4f1d2c6d4cf06378ef00d208eb96639b4b4b0e770'},
 '9c3b9def86e340419c324ebd3de0c6f3c9a97694cebbfc3224f94bec30b7e098': {'AddressOfEntryPoint': 28656,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'UuidCreate',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'StringFromGUID2',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleOutputCP',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'GetConsoleScreenBufferInfo',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'FindFirstFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'LoadLibraryW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetLocaleInfoW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'GetFileVersionInfoExW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'pdh.dll': 'PdhAddCounterW'},
                                                                      'ImportedFunctions': ['_XcptFilter',
                                                                                            '_exit',
                                                                                            '__p__commode',
                                                                                            'exit',
                                                                                            '_getmbcp',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            '_wsplitpath_s',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wfopen',
                                                                                            'fclose',
                                                                                            'wprintf',
                                                                                            'wcstok',
                                                                                            '__set_app_type',
                                                                                            'wcsncmp',
                                                                                            '_wtoi',
                                                                                            '__setusermatherr',
                                                                                            'fwprintf',
                                                                                            '_wcslwr',
                                                                                            '_controlfp',
                                                                                            '_wcsicmp',
                                                                                            'fgetws',
                                                                                            'wcstod',
                                                                                            '_vsnwprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_wmakepath_s',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            'wcsstr',
                                                                                            'memcpy',
                                                                                            '_ftol2',
                                                                                            'memset',
                                                                                            'DeleteFileW',
                                                                                            'ReadFile',
                                                                                            'FindNextFileW',
                                                                                            'GetTempPathW',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'FindClose',
                                                                                            'CreateFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadStringW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'StringFromGUID2',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetLocaleInfoW',
                                                                                            'WriteConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'UuidCreate',
                                                                                            'GetStdHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CopyFileW',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFree',
                                                                                            'PdhEnumObjectItemsHW',
                                                                                            'PdhGetDataSourceTimeRangeH',
                                                                                            'PdhEnumObjectsHW',
                                                                                            'PdhValidatePathExW',
                                                                                            'PdhBindInputDataSourceW',
                                                                                            'PdhParseCounterPathW',
                                                                                            'PdhMakeCounterPathW',
                                                                                            'PdhOpenQueryH',
                                                                                            'PdhEnumMachinesHW',
                                                                                            'PdhRelogW',
                                                                                            'PdhGetLogFileTypeW',
                                                                                            'PdhExpandWildCardPathHW',
                                                                                            'PdhCloseLog',
                                                                                            'PdhAddCounterW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 26624},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9c3b9def86e340419c324ebd3de0c6f3c9a97694cebbfc3224f94bec30b7e098'},
 '9c42598e1a58ae5a34022bc706b35cafd4b4db022f020756f42c79ec6e54e47e': {'AddressOfEntryPoint': 17271,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'COMCTL32.DLL': 'InitCommonControls',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'lstrlenA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'InitCommonControls',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'CloseHandle',
                                                                                            'CompareFileTime',
                                                                                            'CopyFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateThread',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetProcAddress',
                                                                                            'GetShortPathNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetTickCount',
                                                                                            'GetVersion',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryExA',
                                                                                            'MoveFileA',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'SearchPathA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetErrorMode',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'WriteFile',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'lstrcatA',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcpynA',
                                                                                            'lstrlenA',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteA',
                                                                                            'AppendMenuA',
                                                                                            'BeginPaint',
                                                                                            'CallWindowProcA',
                                                                                            'CharNextA',
                                                                                            'CharPrevA',
                                                                                            'CheckDlgButton',
                                                                                            'CloseClipboard',
                                                                                            'CreateDialogParamA',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateWindowExA',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'DialogBoxParamA',
                                                                                            'DispatchMessageA',
                                                                                            'DrawTextA',
                                                                                            'EmptyClipboard',
                                                                                            'EnableMenuItem',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'EndPaint',
                                                                                            'ExitWindowsEx',
                                                                                            'FillRect',
                                                                                            'FindWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'GetDlgItem',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetMessagePos',
                                                                                            'GetSysColor',
                                                                                            'GetSystemMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowLongA',
                                                                                            'GetWindowRect',
                                                                                            'InvalidateRect',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapA',
                                                                                            'LoadCursorA',
                                                                                            'LoadImageA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'OpenClipboard',
                                                                                            'PeekMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassA',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'SetClassLongA',
                                                                                            'SetClipboardData',
                                                                                            'SetCursor',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetTimer',
                                                                                            'SetWindowLongA',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowTextA',
                                                                                            'ShowWindow',
                                                                                            'SystemParametersInfoA',
                                                                                            'TrackPopupMenu',
                                                                                            'wsprintfA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 155,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 47696,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.ndata\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 27136,
                                                                                       '.rsrc\x00\x00\x00': 48128,
                                                                                       '.text\x00\x00\x00': 35328},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/9c42598e1a58ae5a34022bc706b35cafd4b4db022f020756f42c79ec6e54e47e'},
 '9c4a85e6ef2d5ad322d9385fefbd751d8873bf26ccfdb8c9810600dea85c4ff0': {'AddressOfEntryPoint': 2015393,
                                                                      'DebugRVA': 5344,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 2226384,
                                                                      'ExportSize': 89,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptAcquireContextA',
                                                                                      'KERNEL32.dll': 'IsProcessorFeaturePresent',
                                                                                      'MSVCR100.dll': '_ecvt_s',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'mscoree.dll': 'GetCORSystemDirectory',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetStdHandle',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'IsValidCodePage',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FindClose',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'HeapSetInformation',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'GetACP',
                                                                                            'GetTempFileNameW',
                                                                                            'MoveFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpW',
                                                                                            'InterlockedExchange',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetVersion',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'SetFilePointerEx',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEndOfFile',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateFileMappingA',
                                                                                            'GetCPInfo',
                                                                                            'GetProcessHeap',
                                                                                            'CreateFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'CopyFileW',
                                                                                            'CopyFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFullPathNameA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'GetVersionExA',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'CompareStringW',
                                                                                            'AreFileApisANSI',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrlenW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'HeapFree',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapAlloc',
                                                                                            'CompareFileTime',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetShortPathNameA',
                                                                                            'GetShortPathNameW',
                                                                                            'SetLastError',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetTempPathW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetFileTime',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'LockResource',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'SwitchToThread',
                                                                                            'HeapReAlloc',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            '__wgetmainargs',
                                                                                            'swprintf_s',
                                                                                            '_CIpow',
                                                                                            'floor',
                                                                                            '_CIfmod',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'calloc',
                                                                                            '_swab',
                                                                                            'memcpy',
                                                                                            '?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z',
                                                                                            'iswalpha',
                                                                                            'wcspbrk',
                                                                                            'wcsncmp',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            '_mktime64',
                                                                                            '_localtime64',
                                                                                            '_time64',
                                                                                            'memmove',
                                                                                            'bsearch',
                                                                                            '_ui64tow_s',
                                                                                            '_i64tow_s',
                                                                                            'iswspace',
                                                                                            'wcscat_s',
                                                                                            '__iob_func',
                                                                                            'fwprintf',
                                                                                            '_wcsicmp',
                                                                                            '_ultow_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'printf',
                                                                                            'wcscpy_s',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '??0exception@std@@QAE@XZ',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '_wtol',
                                                                                            '_waccess',
                                                                                            'tolower',
                                                                                            'wmemcpy_s',
                                                                                            '_isnan',
                                                                                            '_snwprintf_s',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '_itow_s',
                                                                                            'atof',
                                                                                            'sprintf_s',
                                                                                            'strncat_s',
                                                                                            'strcat_s',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_purecall',
                                                                                            '_amsg_exit',
                                                                                            '_wtoi',
                                                                                            '_mbspbrk',
                                                                                            '_mbsinc',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            'wcsrchr',
                                                                                            '_errno',
                                                                                            'wcstoul',
                                                                                            '_recalloc',
                                                                                            'wcsstr',
                                                                                            'memcpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcsncpy_s',
                                                                                            '_vsnwprintf',
                                                                                            'wcstok_s',
                                                                                            '_wcslwr_s',
                                                                                            'memset',
                                                                                            'qsort',
                                                                                            '_ecvt_s',
                                                                                            'CryptCreateHash',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptHashData',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'ControlTraceW',
                                                                                            'TraceEvent',
                                                                                            'CryptAcquireContextA',
                                                                                            'CorBindToCurrentRuntime',
                                                                                            'GetRealProcAddress',
                                                                                            'LoadLibraryShim',
                                                                                            'GetCORSystemDirectory',
                                                                                            'CoUninitialize',
                                                                                            'CoGetClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'IIDFromString',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'GetErrorInfo',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'VarDecFromStr',
                                                                                            'VarR8FromStr',
                                                                                            'VarR4FromR8',
                                                                                            'VarBstrFromDec',
                                                                                            'VarDecCmp',
                                                                                            'VarR8FromDec',
                                                                                            'VarDecFromR8',
                                                                                            'VarDecAdd',
                                                                                            'VarDecSub',
                                                                                            'VarDecMul',
                                                                                            'VarDecDiv',
                                                                                            'VarDecFix',
                                                                                            'VarDecNeg',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VarUI4FromR4',
                                                                                            'VarUI4FromR8',
                                                                                            'VarUI4FromDec',
                                                                                            'VarBstrCmp',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'PathIsURLW',
                                                                                            'PathIsUNCW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 283,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 239888,
                                                                      'SectionNames': {'.data\x00\x00\x00': 50176,
                                                                                       '.reloc\x00\x00': 161792,
                                                                                       '.rsrc\x00\x00\x00': 240128,
                                                                                       '.text\x00\x00\x00': 2222592},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9c4a85e6ef2d5ad322d9385fefbd751d8873bf26ccfdb8c9810600dea85c4ff0'},
 '9c681c1b22ecb47eb440d637208daf12b1a5e6ba314d8be7fbd25fd8ed2f09c7': {'AddressOfEntryPoint': 15248,
                                                                      'DebugRVA': 21440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'MSVCR90.dll': 'exit',
                                                                                      'VGAuth.dll': 'VGAuth_GetErrorText',
                                                                                      'glib-2.0.dll': 'g_hash_table_lookup'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'g_vsnprintf',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_utf16_to_utf8',
                                                                                            'g_utf8_to_utf16',
                                                                                            'g_once_impl',
                                                                                            'g_key_file_get_string',
                                                                                            'g_key_file_new',
                                                                                            'g_key_file_load_from_file',
                                                                                            'g_malloc',
                                                                                            'g_file_test_utf8',
                                                                                            'g_static_mutex_get_mutex_impl',
                                                                                            'g_mutex_lock',
                                                                                            'g_mutex_unlock',
                                                                                            'g_io_channel_new_file_utf8',
                                                                                            'g_clear_error',
                                                                                            'g_io_channel_read_line',
                                                                                            'g_utf8_validate',
                                                                                            'g_strcompress',
                                                                                            'g_io_channel_unref',
                                                                                            'g_str_equal',
                                                                                            'g_str_hash',
                                                                                            'g_malloc0_n',
                                                                                            'g_static_mutex_init',
                                                                                            'g_hash_table_unref',
                                                                                            'g_strndup',
                                                                                            'g_malloc0',
                                                                                            'g_path_get_basename',
                                                                                            'g_set_prgname',
                                                                                            'g_option_context_new',
                                                                                            'g_strdup_printf',
                                                                                            'g_option_context_set_summary',
                                                                                            'g_option_context_add_main_entries',
                                                                                            'g_snprintf',
                                                                                            'g_print',
                                                                                            'g_file_get_contents_utf8',
                                                                                            'g_error_free',
                                                                                            'g_option_context_get_help',
                                                                                            'g_printerr',
                                                                                            'g_free',
                                                                                            'g_hash_table_new_full',
                                                                                            'g_hash_table_insert',
                                                                                            'g_log',
                                                                                            'g_strdup',
                                                                                            'g_hash_table_lookup',
                                                                                            'VGAuth_Shutdown',
                                                                                            'VGAuth_Init',
                                                                                            'VGAuth_SetLogHandler',
                                                                                            'VGAuth_QueryMappedAliases',
                                                                                            'VGAuth_FreeMappedAliasList',
                                                                                            'VGAuth_QueryUserAliases',
                                                                                            'VGAuth_FreeUserAliasList',
                                                                                            'VGAuth_RemoveAlias',
                                                                                            'VGAuth_RemoveAliasByCert',
                                                                                            'VGAuth_AddAlias',
                                                                                            'VGAuth_GetErrorText',
                                                                                            'strncmp',
                                                                                            'memchr',
                                                                                            'strchr',
                                                                                            'strrchr',
                                                                                            'memcpy',
                                                                                            'free',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'exit',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'FormatMessageA',
                                                                                            'LoadLibraryExA',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 107,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1844,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 12800,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9c681c1b22ecb47eb440d637208daf12b1a5e6ba314d8be7fbd25fd8ed2f09c7'},
 '9c7229f10f11d18e1fed6395391a46225a84b421034b9ab6f81af7430fdc556f': {'AddressOfEntryPoint': 16560,
                                                                      'DebugRVA': 28876,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 17200,
                                                                      'ExportSize': 138,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'RpcServerListen',
                                                                                      'SspiSrv.dll': 'SspiSrvInitialize',
                                                                                      'api-ms-win-core-crt-l1-1-0.dll': 'memset',
                                                                                      'api-ms-win-core-crt-l2-1-0.dll': 'exit',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetEnvironmentVariableW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'OpenEventW',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'ntdll.dll': 'NtSetInformationFile'},
                                                                      'ImportedFunctions': ['wcstol',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'strcpy_s',
                                                                                            '_vsnprintf_s',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            'exit',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlCreateAndSetSD',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'DbgPrintEx',
                                                                                            'RtlAddMandatoryAce',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlFreeSid',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtListenPort',
                                                                                            'NtAcceptConnectPort',
                                                                                            'NtClose',
                                                                                            'NtRequestWaitReplyPort',
                                                                                            'NtConnectPort',
                                                                                            'NtReplyWaitReceivePort',
                                                                                            'NtCreatePort',
                                                                                            'NtCompleteConnectPort',
                                                                                            'NtSetSecurityObject',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtOpenEvent',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlAcquireResourceShared',
                                                                                            'RtlReleaseResource',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlAcquireResourceExclusive',
                                                                                            'RtlInitializeResource',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlLengthSid',
                                                                                            'NtOpenFile',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlMakeSelfRelativeSD',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'NtSetInformationFile',
                                                                                            'RpcServerRegisterIf3',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'NdrServerCall2',
                                                                                            'NdrServerCallAll',
                                                                                            'RpcServerListen',
                                                                                            'SspiSrvClientCallback',
                                                                                            'SspiSrvInitialize',
                                                                                            'SetErrorMode',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcessToken',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'OpenEventW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTokenInformation'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 91,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1800,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 27136},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/9c7229f10f11d18e1fed6395391a46225a84b421034b9ab6f81af7430fdc556f'},
 '9c9c7ea0965fe1b6b34b07921e5c46ff2bd45b1583b26f5e78f3edc202470c63': {'AddressOfEntryPoint': 19508,
                                                                      'DebugRVA': 4128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetTokenInformation',
                                                                                      'KERNEL32.dll': 'CreateActCtxW',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'USER32.dll': 'DefWindowProcW',
                                                                                      'api-ms-win-security-lsalookup-l1-1-1.dll': 'LookupAccountSidLocalW',
                                                                                      'msvcrt.dll': '??0exception@@QAE@ABV0@@Z',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryW',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'ReleaseActCtx',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentThread',
                                                                                            'LoadLibraryExW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CreateActCtxW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'LoadStringW',
                                                                                            'DefWindowProcW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            'memcpy_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcschr',
                                                                                            '_callnewh',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'DeregisterEventSource',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'SysFreeString',
                                                                                            'GetErrorInfo',
                                                                                            'LookupAccountSidLocalW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 26776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 27136,
                                                                                       '.text\x00\x00\x00': 23040},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9c9c7ea0965fe1b6b34b07921e5c46ff2bd45b1583b26f5e78f3edc202470c63'},
 '9cc3d825418bf9941d2f65daf95084467fc014ffe0398efac68a6533347a1a40': {'AddressOfEntryPoint': 54490,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 285212672,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 48,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2884,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 46592},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9cc3d825418bf9941d2f65daf95084467fc014ffe0398efac68a6533347a1a40'},
 '9ce3599fece67a4a8729a164204e4c4302ad0b7b5d3004c2b0cf1afed3ca48b7': {'AddressOfEntryPoint': 61694,
                                                                      'DebugRVA': 61428,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 48,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 20348,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 20480,
                                                                                       '.text\x00\x00\x00': 53760},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9ce3599fece67a4a8729a164204e4c4302ad0b7b5d3004c2b0cf1afed3ca48b7'},
 '9d097860d075865216c42702302493389bb4d102e4a9b26acf1f56c0df71f595': {'AddressOfEntryPoint': 14288,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'ReAgent.dll': 'WinRECheckGuid',
                                                                                      'USER32.dll': 'CharToOemBuffW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetModuleHandleExW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'HeapSetInformation',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'LocalFree',
                                                                                            'WriteFile',
                                                                                            'LocalAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryExW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_wtoi',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            'wcstoul',
                                                                                            '_lock',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_wcsicmp',
                                                                                            '_unlock',
                                                                                            '__p__commode',
                                                                                            'memset',
                                                                                            'CharToOemBuffW',
                                                                                            'UuidFromStringW',
                                                                                            'WinReSetRecoveryAction',
                                                                                            'WinReIsWinPE',
                                                                                            'WinReGetConfig',
                                                                                            'WinReSetError',
                                                                                            'WinReSetupMigrateDrivers',
                                                                                            'WinReValidateRecoveryWim',
                                                                                            'WinReConfigureTask',
                                                                                            'WinReRepair',
                                                                                            'WinReClearError',
                                                                                            'WinReGetError',
                                                                                            'WinReInstall',
                                                                                            'WinReInstallOnTargetOS',
                                                                                            'WinRECheckGuid'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9d097860d075865216c42702302493389bb4d102e4a9b26acf1f56c0df71f595'},
 '9d10013b8f321eee381ae39191a2ec37996289fda32dd7da0319b2fa6e2c0df4': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 180812,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 181248,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9d10013b8f321eee381ae39191a2ec37996289fda32dd7da0319b2fa6e2c0df4'},
 '9d67efa96796e24cbeace6190b29b8dd03271326b83d87582e4f8515d753a429': {'AddressOfEntryPoint': 4816,
                                                                      'DebugRVA': 97440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetTokenInformation',
                                                                                      'KERNEL32.dll': 'DuplicateHandle',
                                                                                      'MSVCP90.dll': '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                      'MSVCR90.dll': '_amsg_exit',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'Secur32.dll': 'EnumerateSecurityPackagesW',
                                                                                      'WTSAPI32.dll': 'WTSQueryUserToken',
                                                                                      'glib-2.0.dll': 'g_find_program_in_path',
                                                                                      'ntdll.dll': 'memmove',
                                                                                      'xerces-c_3_1.dll': '??0MemBufInputSource@xercesc_3_1@@QEAA@QEBE_KQEBD_NQEAVMemoryManager@1@@Z',
                                                                                      'xsec_1_6.dll': '?load@DSIGKeyInfoX509@@UEAAXXZ'},
                                                                      'ImportedFunctions': ['?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_dup2',
                                                                                            '_wmktemp_s',
                                                                                            '_fileno',
                                                                                            '_close',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_open_osfhandle',
                                                                                            '_fdopen',
                                                                                            'fprintf',
                                                                                            'printf',
                                                                                            'free',
                                                                                            '_errno',
                                                                                            'strerror_s',
                                                                                            'fputs',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__iob_func',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'TerminateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetLastError',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'GetLocalTime',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'DeleteFileA',
                                                                                            'CreateFileA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadLibraryW',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetTempPathW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'FormatMessageA',
                                                                                            'CreateFileW',
                                                                                            'OpenProcess',
                                                                                            'CancelIo',
                                                                                            'GetOverlappedResult',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'ReadFile',
                                                                                            'DuplicateHandle',
                                                                                            'LookupAccountSidW',
                                                                                            'AllocateLocallyUniqueId',
                                                                                            'DuplicateTokenEx',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'PrivilegeCheck',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'EqualSid',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetAclInformation',
                                                                                            'GetAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'GetSecurityInfo',
                                                                                            'LsaNtStatusToWinError',
                                                                                            'OpenProcessToken',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'DeleteService',
                                                                                            'OpenServiceW',
                                                                                            'CreateServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'LookupAccountNameW',
                                                                                            'FreeSid',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'IsValidSid',
                                                                                            'GetTokenInformation',
                                                                                            'memset',
                                                                                            'strtoul',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'strrchr',
                                                                                            'strncmp',
                                                                                            'strchr',
                                                                                            'memchr',
                                                                                            'strncpy',
                                                                                            '_wcsicmp',
                                                                                            'strstr',
                                                                                            'atoi',
                                                                                            'memcmp',
                                                                                            'memmove',
                                                                                            'g_mutex_lock',
                                                                                            'g_mutex_unlock',
                                                                                            'g_io_channel_new_file_utf8',
                                                                                            'g_clear_error',
                                                                                            'g_io_channel_read_line',
                                                                                            'g_utf8_validate',
                                                                                            'g_strcompress',
                                                                                            'g_io_channel_unref',
                                                                                            'g_str_equal',
                                                                                            'g_str_hash',
                                                                                            'g_hash_table_new_full',
                                                                                            'g_hash_table_insert',
                                                                                            'g_hash_table_lookup',
                                                                                            'g_once_impl',
                                                                                            'g_malloc0_n',
                                                                                            'g_static_mutex_init',
                                                                                            'g_hash_table_unref',
                                                                                            'g_strndup',
                                                                                            'g_strdup_vprintf',
                                                                                            'g_utf8_to_utf16',
                                                                                            'g_malloc0',
                                                                                            'g_static_rw_lock_init',
                                                                                            'g_filename_from_utf8_utf8',
                                                                                            'g_static_mutex_get_mutex_impl',
                                                                                            'g_static_rw_lock_reader_unlock',
                                                                                            'g_static_rw_lock_writer_lock',
                                                                                            'g_static_rw_lock_writer_unlock',
                                                                                            'g_error_free',
                                                                                            'g_key_file_load_from_file',
                                                                                            'g_atomic_int_add',
                                                                                            'g_file_test_utf8',
                                                                                            'g_stat',
                                                                                            'g_atomic_int_set',
                                                                                            'g_atomic_int_get',
                                                                                            'g_ptr_array_new',
                                                                                            'g_ptr_array_add',
                                                                                            'g_strrstr',
                                                                                            'g_rename',
                                                                                            'g_key_file_new',
                                                                                            'g_key_file_get_string',
                                                                                            'g_key_file_get_integer',
                                                                                            'g_key_file_get_boolean',
                                                                                            'g_strfreev',
                                                                                            'g_realloc',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_key_file_get_value',
                                                                                            'g_malloc',
                                                                                            'g_static_rw_lock_reader_lock',
                                                                                            'g_ptr_array_free',
                                                                                            'g_fopen',
                                                                                            'g_log_set_default_handler',
                                                                                            'g_ascii_strcasecmp',
                                                                                            'g_strdup_printf',
                                                                                            'g_strdup',
                                                                                            'g_main_loop_run',
                                                                                            'g_main_loop_quit',
                                                                                            'g_main_loop_new',
                                                                                            'g_source_remove',
                                                                                            'g_source_attach',
                                                                                            'g_source_unref',
                                                                                            'g_source_new',
                                                                                            'g_source_add_poll',
                                                                                            'g_source_set_callback',
                                                                                            'g_path_is_absolute',
                                                                                            'g_hash_table_size',
                                                                                            'g_hash_table_foreach_remove',
                                                                                            'g_timeout_add_seconds',
                                                                                            'g_hash_table_remove',
                                                                                            'g_base64_encode',
                                                                                            'g_utf8_casefold',
                                                                                            'g_base64_decode',
                                                                                            'g_markup_printf_escaped',
                                                                                            'g_strchomp',
                                                                                            'g_strchug',
                                                                                            'g_set_error',
                                                                                            'g_dir_close',
                                                                                            'g_str_has_suffix',
                                                                                            'g_str_has_prefix',
                                                                                            'g_dir_read_name_utf8',
                                                                                            'g_dir_open_utf8',
                                                                                            'g_markup_parse_context_free',
                                                                                            'g_markup_parse_context_parse',
                                                                                            'g_markup_parse_context_new',
                                                                                            'g_snprintf',
                                                                                            'g_markup_escape_text',
                                                                                            'g_time_val_from_iso8601',
                                                                                            'g_get_host_name',
                                                                                            'g_utf8_strlen',
                                                                                            'g_mkdir_with_parents',
                                                                                            'g_strstr_len',
                                                                                            'g_get_current_time',
                                                                                            'g_utf16_to_utf8',
                                                                                            'g_key_file_get_keys',
                                                                                            'g_key_file_get_groups',
                                                                                            'g_vsnprintf',
                                                                                            'g_unlink',
                                                                                            'g_log',
                                                                                            'g_free',
                                                                                            'g_path_get_dirname',
                                                                                            'g_build_filename',
                                                                                            'g_get_current_dir_utf8',
                                                                                            'g_strcmp0',
                                                                                            'g_find_program_in_path',
                                                                                            'NetLocalGroupGetMembers',
                                                                                            'NetApiBufferFree',
                                                                                            'SHGetFolderPathW',
                                                                                            'WTSQueryUserToken',
                                                                                            '?lockPool@XMLGrammarPoolImpl@xercesc_3_1@@UEAAXXZ',
                                                                                            '?unlockPool@XMLGrammarPoolImpl@xercesc_3_1@@UEAAXXZ',
                                                                                            '?createDTDGrammar@XMLGrammarPoolImpl@xercesc_3_1@@UEAAPEAVDTDGrammar@2@XZ',
                                                                                            '?createSchemaGrammar@XMLGrammarPoolImpl@xercesc_3_1@@UEAAPEAVSchemaGrammar@2@XZ',
                                                                                            '?createDTDDescription@XMLGrammarPoolImpl@xercesc_3_1@@UEAAPEAVXMLDTDDescription@2@QEB_W@Z',
                                                                                            '?createSchemaDescription@XMLGrammarPoolImpl@xercesc_3_1@@UEAAPEAVXMLSchemaDescription@2@QEB_W@Z',
                                                                                            '?getXSModel@XMLGrammarPoolImpl@xercesc_3_1@@UEAAPEAVXSModel@2@AEA_N@Z',
                                                                                            '?getURIStringPool@XMLGrammarPoolImpl@xercesc_3_1@@UEAAPEAVXMLStringPool@2@XZ',
                                                                                            '?serializeGrammars@XMLGrammarPoolImpl@xercesc_3_1@@UEAAXQEAVBinOutputStream@2@@Z',
                                                                                            '?deserializeGrammars@XMLGrammarPoolImpl@xercesc_3_1@@UEAAXQEAVBinInputStream@2@@Z',
                                                                                            '?createXSModel@XMLGrammarPoolImpl@xercesc_3_1@@EEAAXXZ',
                                                                                            '??1XMLGrammarPoolImpl@xercesc_3_1@@UEAA@XZ',
                                                                                            '?clear@XMLGrammarPoolImpl@xercesc_3_1@@UEAA_NXZ',
                                                                                            '?fgXercescDefaultLocale@XMLUni@xercesc_3_1@@2QBDB',
                                                                                            '??1SecurityManager@xercesc_3_1@@UEAA@XZ',
                                                                                            '?setSecurityManager@AbstractDOMParser@xercesc_3_1@@QEAAXQEAVSecurityManager@2@@Z',
                                                                                            '??_7SecurityManager@xercesc_3_1@@6B@',
                                                                                            '?getGrammarEnumerator@XMLGrammarPoolImpl@xercesc_3_1@@UEBA?AV?$RefHashTableOfEnumerator@VGrammar@xercesc_3_1@@UStringHasher@2@@2@XZ',
                                                                                            '?orphanGrammar@XMLGrammarPoolImpl@xercesc_3_1@@UEAAPEAVGrammar@2@QEB_W@Z',
                                                                                            '?retrieveGrammar@XMLGrammarPoolImpl@xercesc_3_1@@UEAAPEAVGrammar@2@QEAVXMLGrammarDescription@2@@Z',
                                                                                            '?cacheGrammar@XMLGrammarPoolImpl@xercesc_3_1@@UEAA_NQEAVGrammar@2@@Z',
                                                                                            '??2XMemory@xercesc_3_1@@SAPEAX_K@Z',
                                                                                            '??0XMLGrammarPoolImpl@xercesc_3_1@@QEAA@QEAVMemoryManager@1@@Z',
                                                                                            '??0XercesDOMParser@xercesc_3_1@@QEAA@QEAVXMLValidator@1@QEAVMemoryManager@1@QEAVXMLGrammarPool@1@@Z',
                                                                                            '?transcode@XMLString@xercesc_3_1@@SAPEADQEB_WQEAVMemoryManager@2@@Z',
                                                                                            '?fgMemoryManager@XMLPlatformUtils@xercesc_3_1@@2PEAVMemoryManager@2@EA',
                                                                                            '?release@XMLString@xercesc_3_1@@SAXPEAPEADQEAVMemoryManager@2@@Z',
                                                                                            '??1ErrorHandler@xercesc_3_1@@UEAA@XZ',
                                                                                            '?setValidationScheme@AbstractDOMParser@xercesc_3_1@@QEAAXW4ValSchemes@12@@Z',
                                                                                            '??_7ErrorHandler@xercesc_3_1@@6B@',
                                                                                            '??1XercesDOMParser@xercesc_3_1@@UEAA@XZ',
                                                                                            '??3XMemory@xercesc_3_1@@SAXPEAX@Z',
                                                                                            '?loadGrammar@XercesDOMParser@xercesc_3_1@@QEAAPEAVGrammar@2@QEBDW4GrammarType@32@_N@Z',
                                                                                            '?getLineNumber@SAXParseException@xercesc_3_1@@QEBA_KXZ',
                                                                                            '?setErrorHandler@XercesDOMParser@xercesc_3_1@@QEAAXQEAVErrorHandler@2@@Z',
                                                                                            '?startsWith@XMLString@xercesc_3_1@@SA_NQEB_W0@Z',
                                                                                            '?equals@XMLString@xercesc_3_1@@SA_NPEB_W0@Z',
                                                                                            '?setDoNamespaces@AbstractDOMParser@xercesc_3_1@@QEAAX_N@Z',
                                                                                            '?setDoSchema@AbstractDOMParser@xercesc_3_1@@QEAAX_N@Z',
                                                                                            '?Initialize@XMLPlatformUtils@xercesc_3_1@@SAXQEBD0QEAVPanicHandler@2@QEAVMemoryManager@2@@Z',
                                                                                            '?getColumnNumber@SAXParseException@xercesc_3_1@@QEBA_KXZ',
                                                                                            '?getDocument@AbstractDOMParser@xercesc_3_1@@QEAAPEAVDOMDocument@2@XZ',
                                                                                            '??1MemBufInputSource@xercesc_3_1@@UEAA@XZ',
                                                                                            '?getErrorCount@AbstractDOMParser@xercesc_3_1@@QEBA_KXZ',
                                                                                            '?parse@AbstractDOMParser@xercesc_3_1@@QEAAXAEBVInputSource@2@@Z',
                                                                                            '?useCachedGrammarInParse@XercesDOMParser@xercesc_3_1@@QEAAX_N@Z',
                                                                                            '??0MemBufInputSource@xercesc_3_1@@QEAA@QEBE_KQEBD_NQEAVMemoryManager@1@@Z',
                                                                                            '?getMsg@XSECException@@QEAAPEB_WXZ',
                                                                                            '??0XSECEnv@@QEAA@PEAVDOMDocument@xercesc_3_1@@@Z',
                                                                                            '??1XSECEnv@@UEAA@XZ',
                                                                                            '?getCertificateListSize@DSIGKeyInfoX509@@QEBAHXZ',
                                                                                            '?getCertificateCryptoItem@DSIGKeyInfoX509@@QEAAPEAVXSECCryptoX509@@H@Z',
                                                                                            '??0XSECProvider@@QEAA@XZ',
                                                                                            '?newSignatureFromDOM@XSECProvider@@QEAAPEAVDSIGSignature@@PEAVDOMDocument@xercesc_3_1@@PEAVDOMNode@4@@Z',
                                                                                            '?load@DSIGSignature@@QEAAXXZ',
                                                                                            '?setSigningKey@DSIGSignature@@QEAAXPEAVXSECCryptoKey@@@Z',
                                                                                            '??1XSECProvider@@QEAA@XZ',
                                                                                            '?verify@DSIGSignature@@QEAA_NXZ',
                                                                                            '?getErrMsgs@DSIGSignature@@QEBAPEB_WXZ',
                                                                                            '?rawCharBuffer@safeBuffer@@QEBAPEBDXZ',
                                                                                            '?Initialise@XSECPlatformUtils@@SAXPEAVXSECCryptoProvider@@@Z',
                                                                                            '??1DSIGKeyInfoX509@@UEAA@XZ',
                                                                                            '?getKeyName@DSIGKeyInfoX509@@UEBAPEB_WXZ',
                                                                                            '?getKeyInfoDOMNode@DSIGKeyInfo@@UEAAPEAVDOMNode@xercesc_3_1@@XZ',
                                                                                            '?getKeyInfoType@DSIGKeyInfoX509@@UEBA?AW4keyInfoType@DSIGKeyInfo@@XZ',
                                                                                            '??0DSIGKeyInfoX509@@QEAA@PEBVXSECEnv@@PEAVDOMNode@xercesc_3_1@@@Z',
                                                                                            '?getReferenceList@DSIGSignature@@QEAAPEAVDSIGReferenceList@@XZ',
                                                                                            '?getSize@DSIGReferenceList@@QEAA_KXZ',
                                                                                            '?item@DSIGReferenceList@@QEAAPEAVDSIGReference@@_K@Z',
                                                                                            '?getURI@DSIGReference@@QEAAPEB_WXZ',
                                                                                            '??0XMLT@@QEAA@PEBD@Z',
                                                                                            '?getUnicodeStr@XMLT@@QEAAPEA_WXZ',
                                                                                            '??1XMLT@@QEAA@XZ',
                                                                                            '?load@DSIGKeyInfoX509@@UEAAXXZ',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXAEAV12@@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            'LsaDeregisterLogonProcess',
                                                                                            'LsaRegisterLogonProcess',
                                                                                            'FreeContextBuffer',
                                                                                            'LsaFreeReturnBuffer',
                                                                                            'LsaLogonUser',
                                                                                            'LsaLookupAuthenticationPackage',
                                                                                            'EnumerateSecurityPackagesW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 353,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 64512,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 87552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9d67efa96796e24cbeace6190b29b8dd03271326b83d87582e4f8515d753a429'},
 '9e4821e46e6728ea485e0a7b82f4ee7cd5a746a9d61e83fded521560cb74c323': {'AddressOfEntryPoint': 5960,
                                                                      'DebugRVA': 4592,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ATXCORE.dll': 'ActiveScriptStartCore',
                                                                                      'KERNEL32.dll': 'RtlCaptureContext',
                                                                                      'MSVCR100.dll': '__winitenv',
                                                                                      'SqlResourceLoader.dll': 'LoadResourceLibrary'},
                                                                      'ImportedFunctions': ['UnmapViewOfFile',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'Sleep',
                                                                                            'MapViewOfFile',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '__crt_debugger_hook',
                                                                                            'wcsncat_s',
                                                                                            '_wtoi64',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            '__winitenv',
                                                                                            'LoadResourceLibrary',
                                                                                            'ActiveScriptEventCore',
                                                                                            'ActiveScriptStartCore'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1736,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9e4821e46e6728ea485e0a7b82f4ee7cd5a746a9d61e83fded521560cb74c323'},
 '9e851105ba5298ec121c085741cc9f521d3d2e418566a2b89abbdf59c2453575': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9e851105ba5298ec121c085741cc9f521d3d2e418566a2b89abbdf59c2453575'},
 '9ea15872b2f24e0c093b7b20f80986f13a99e0c57a7d2a2dc0e4ae0faab1727c': {'AddressOfEntryPoint': 36432,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExW',
                                                                                      'KERNEL32.dll': 'FileTimeToSystemTime',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-timezone-private-l1-1-0.dll': 'IsTimeZoneRedirectionEnabled',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'CreateFileW',
                                                                                            'GetVersionExW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'LockResource',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemTime',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetDynamicTimeZoneInformation',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LeaveCriticalSection',
                                                                                            'CompareStringOrdinal',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLocalTime',
                                                                                            'SetDynamicTimeZoneInformation',
                                                                                            'GetConsoleMode',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wsetlocale',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            '_wtoi',
                                                                                            '_itow_s',
                                                                                            'bsearch',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'LoadStringW',
                                                                                            'IsTimeZoneRedirectionEnabled'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 88,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 34816},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9ea15872b2f24e0c093b7b20f80986f13a99e0c57a7d2a2dc0e4ae0faab1727c'},
 '9ea2099682d5818e9ef3369acbca93c7c7f071a94d6d27eec18d41b7c0ce2f39': {'AddressOfEntryPoint': 60285,
                                                                      'DebugRVA': 4656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LocalFree',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'msvcrt.dll': 'ungetc',
                                                                                      'ntdll.dll': 'RtlAnsiStringToUnicodeString',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['SetErrorMode',
                                                                                            'GetVersion',
                                                                                            'GetComputerNameA',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'FindVolumeMountPointClose',
                                                                                            'FindNextVolumeMountPointW',
                                                                                            'FindFirstVolumeMountPointW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'FindVolumeClose',
                                                                                            'FindNextVolumeW',
                                                                                            'FindFirstVolumeW',
                                                                                            'GetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'CreateFileA',
                                                                                            'ReadFile',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FormatMessageA',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleFileNameA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetLastError',
                                                                                            'GetDriveTypeA',
                                                                                            'SetFilePointer',
                                                                                            'GetLogicalDrives',
                                                                                            'GetComputerNameW',
                                                                                            'GetLocalTime',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetVersionExA',
                                                                                            'WriteFile',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            '_initterm',
                                                                                            'fprintf',
                                                                                            '_iob',
                                                                                            '_stricmp',
                                                                                            '_XcptFilter',
                                                                                            'qsort',
                                                                                            'memmove',
                                                                                            'malloc',
                                                                                            'sprintf',
                                                                                            'printf',
                                                                                            'fopen',
                                                                                            'getc',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'fwprintf',
                                                                                            'wcscat',
                                                                                            'wcscpy',
                                                                                            'wcscmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '__CxxFrameHandler',
                                                                                            'wcslen',
                                                                                            'fflush',
                                                                                            'putc',
                                                                                            'strtoul',
                                                                                            '_errno',
                                                                                            'isprint',
                                                                                            'isspace',
                                                                                            'swprintf',
                                                                                            'strchr',
                                                                                            'isdigit',
                                                                                            'strerror',
                                                                                            'setlocale',
                                                                                            'strtol',
                                                                                            'isalnum',
                                                                                            'isalpha',
                                                                                            'strncmp',
                                                                                            'atol',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'realloc',
                                                                                            '_wcsicmp',
                                                                                            '_strnicmp',
                                                                                            'fclose',
                                                                                            '_beginthread',
                                                                                            '_endthread',
                                                                                            'free',
                                                                                            'fputs',
                                                                                            'strncat',
                                                                                            'vsprintf',
                                                                                            'strncpy',
                                                                                            'vfprintf',
                                                                                            'ungetc',
                                                                                            'NtQuerySystemTime',
                                                                                            'NtQueryObject',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'RtlInitString',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtOpenFile',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtClose',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'CoInitializeEx',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoTaskMemFree'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 155136},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/9ea2099682d5818e9ef3369acbca93c7c7f071a94d6d27eec18d41b7c0ce2f39'},
 '9ef28ff671b13ae24a75b2c84e1968b77f14006e8e1088392fdf999aa38521ae': {'AddressOfEntryPoint': 611347,
                                                                      'DebugRVA': 907184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 905216,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'GetStartupInfoA',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SHELL32.dll': 'DragFinish',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'InflateRect',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'ole32.dll': 'CLSIDFromString',
                                                                                      'urlmon.dll': 'URLDownloadToFileW'},
                                                                      'ImportedFunctions': ['SetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'InterlockedExchange',
                                                                                            'CompareStringA',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'MulDiv',
                                                                                            'CloseHandle',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'InterlockedCompareExchange',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetProcessHeap',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDriveTypeA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'SetStdHandle',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'LCMapStringA',
                                                                                            'VirtualAlloc',
                                                                                            'FatalAppExitA',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFree',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'FindResourceA',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTempPathA',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateFileA',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetLastError',
                                                                                            'ResumeThread',
                                                                                            'GetExitCodeProcess',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'GetTempFileNameA',
                                                                                            'DeleteFileA',
                                                                                            'CopyFileA',
                                                                                            'MoveFileA',
                                                                                            'ReadFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetCurrentProcess',
                                                                                            'FindClose',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetVersionExA',
                                                                                            'GlobalDeleteAtom',
                                                                                            'FreeResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalSize',
                                                                                            'GlobalFree',
                                                                                            'SetThreadPriority',
                                                                                            'SetEvent',
                                                                                            'SuspendThread',
                                                                                            'lstrcmpA',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetCurrentThread',
                                                                                            'GlobalFlags',
                                                                                            'LocalAlloc',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalHandle',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'TlsFree',
                                                                                            'lstrlenA',
                                                                                            'GetThreadLocale',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FlushFileBuffers',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSize',
                                                                                            'DuplicateHandle',
                                                                                            'SetErrorMode',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'HeapFree',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'ExitProcess',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'SetWindowPlacement',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'DeferWindowPos',
                                                                                            'EqualRect',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'IsWindowVisible',
                                                                                            'ShowScrollBar',
                                                                                            'SetForegroundWindow',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollPos',
                                                                                            'GetScrollRange',
                                                                                            'SetScrollRange',
                                                                                            'SetMenu',
                                                                                            'GetKeyState',
                                                                                            'TrackPopupMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'ScrollWindow',
                                                                                            'MapWindowPoints',
                                                                                            'GetMessagePos',
                                                                                            'GetMessageTime',
                                                                                            'DestroyWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetDlgItem',
                                                                                            'EndDeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'SetActiveWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'GetForegroundWindow',
                                                                                            'SetFocus',
                                                                                            'EndPaint',
                                                                                            'IsChild',
                                                                                            'SendDlgItemMessageA',
                                                                                            'CheckDlgButton',
                                                                                            'CheckRadioButton',
                                                                                            'GetDlgItemInt',
                                                                                            'SetDlgItemInt',
                                                                                            'IsDlgButtonChecked',
                                                                                            'MoveWindow',
                                                                                            'ShowWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'ScrollWindowEx',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'GetMenuState',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'WindowFromPoint',
                                                                                            'RemoveMenu',
                                                                                            'ValidateRect',
                                                                                            'GetActiveWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetNextDlgTabItem',
                                                                                            'GetDesktopWindow',
                                                                                            'ShowOwnedPopups',
                                                                                            'DestroyMenu',
                                                                                            'GetSysColorBrush',
                                                                                            'GetDialogBaseUnits',
                                                                                            'WaitMessage',
                                                                                            'DeleteMenu',
                                                                                            'DestroyIcon',
                                                                                            'SetRectEmpty',
                                                                                            'BringWindowToTop',
                                                                                            'CreatePopupMenu',
                                                                                            'GetMenuBarInfo',
                                                                                            'ReuseDDElParam',
                                                                                            'UnpackDDElParam',
                                                                                            'GetSystemMenu',
                                                                                            'SetParent',
                                                                                            'UnionRect',
                                                                                            'GetDCEx',
                                                                                            'LockWindowUpdate',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'ExitWindowsEx',
                                                                                            'CopyRect',
                                                                                            'MessageBoxA',
                                                                                            'PostQuitMessage',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'EndDialog',
                                                                                            'IsRectEmpty',
                                                                                            'GetClientRect',
                                                                                            'InvalidateRect',
                                                                                            'FillRect',
                                                                                            'DrawFocusRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'IsIconic',
                                                                                            'GetSystemMetrics',
                                                                                            'DrawIcon',
                                                                                            'GetCursorPos',
                                                                                            'IsWindow',
                                                                                            'RedrawWindow',
                                                                                            'SetTimer',
                                                                                            'GetSysColor',
                                                                                            'OffsetRect',
                                                                                            'KillTimer',
                                                                                            'GetParent',
                                                                                            'PtInRect',
                                                                                            'SetCapture',
                                                                                            'GetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'GetMenu',
                                                                                            'SetWindowPos',
                                                                                            'IntersectRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindow',
                                                                                            'GetFocus',
                                                                                            'GetSubMenu',
                                                                                            'CallNextHookEx',
                                                                                            'TranslateMessage',
                                                                                            'GetWindowRect',
                                                                                            'SetCursor',
                                                                                            'SetRect',
                                                                                            'UpdateWindow',
                                                                                            'InflateRect',
                                                                                            'SetBkMode',
                                                                                            'SetPolyFillMode',
                                                                                            'SetROP2',
                                                                                            'SetStretchBltMode',
                                                                                            'GetBkColor',
                                                                                            'StretchDIBits',
                                                                                            'DPtoLP',
                                                                                            'PatBlt',
                                                                                            'GetMapMode',
                                                                                            'CombineRgn',
                                                                                            'SetRectRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetDCOrgEx',
                                                                                            'CreateHatchBrush',
                                                                                            'ExtCreatePen',
                                                                                            'PlayMetaFile',
                                                                                            'EnumMetaFile',
                                                                                            'GetObjectType',
                                                                                            'SetBkColor',
                                                                                            'SelectPalette',
                                                                                            'GetStockObject',
                                                                                            'CreateBitmap',
                                                                                            'CreatePatternBrush',
                                                                                            'CreateDIBPatternBrushPt',
                                                                                            'DeleteDC',
                                                                                            'ExtSelectClipRgn',
                                                                                            'PolyBezierTo',
                                                                                            'PolylineTo',
                                                                                            'PolyDraw',
                                                                                            'ArcTo',
                                                                                            'GetCurrentPositionEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'GetCurrentObject',
                                                                                            'SetPixel',
                                                                                            'BitBlt',
                                                                                            'CreatePen',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateSolidBrush',
                                                                                            'Rectangle',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'PlayMetaFileRecord',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SelectObject',
                                                                                            'Escape',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'GetPixel',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'SelectClipPath',
                                                                                            'CreateRectRgn',
                                                                                            'GetClipRgn',
                                                                                            'SelectClipRgn',
                                                                                            'DeleteObject',
                                                                                            'SetColorAdjustment',
                                                                                            'SetArcDirection',
                                                                                            'SetMapperFlags',
                                                                                            'SetTextCharacterExtra',
                                                                                            'SetTextJustification',
                                                                                            'SetTextAlign',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'OffsetClipRgn',
                                                                                            'IntersectClipRect',
                                                                                            'ExcludeClipRect',
                                                                                            'GetClipBox',
                                                                                            'SetMapMode',
                                                                                            'ModifyWorldTransform',
                                                                                            'SetWorldTransform',
                                                                                            'SetGraphicsMode',
                                                                                            'SetTextColor',
                                                                                            'SHGetMalloc',
                                                                                            'DragFinish',
                                                                                            '_TrackMouseEvent',
                                                                                            'PathCombineW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathStripToRootW',
                                                                                            'PathIsUNCW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'IIDFromString',
                                                                                            'CoTaskMemFree',
                                                                                            'SetConvertStg',
                                                                                            'WriteFmtUserTypeStg',
                                                                                            'WriteClassStg',
                                                                                            'OleRegGetUserType',
                                                                                            'ReadFmtUserTypeStg',
                                                                                            'ReadClassStg',
                                                                                            'CreateBindCtx',
                                                                                            'ReleaseStgMedium',
                                                                                            'CoTaskMemAlloc',
                                                                                            'StringFromCLSID',
                                                                                            'CoTreatAsClass',
                                                                                            'OleDuplicateData',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoDisconnectObject',
                                                                                            'CLSIDFromString',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'VarBstrFromDate',
                                                                                            'VarDecFromStr',
                                                                                            'VarBstrFromDec',
                                                                                            'VarBstrFromCy',
                                                                                            'VarCyFromStr',
                                                                                            'SysReAllocStringLen',
                                                                                            'VarDateFromStr',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayAllocDescriptor',
                                                                                            'SafeArrayAllocData',
                                                                                            'VariantCopy',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayGetElemsize',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'URLDownloadToFileW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'FreeSid',
                                                                                            'GetTokenInformation',
                                                                                            'DuplicateToken',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegCloseKey',
                                                                                            'ClosePrinter'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 419,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 75092608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 20480,
                                                                                       '.rdata\x00\x00': 229376,
                                                                                       '.rsrc\x00\x00\x00': 75092992,
                                                                                       '.text\x00\x00\x00': 899584},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9ef28ff671b13ae24a75b2c84e1968b77f14006e8e1088392fdf999aa38521ae'},
 '9f5c12e65607d9e12ee219b8fd93b008cefb8efb2edc792bad0793d461cef8ed': {'AddressOfEntryPoint': 5040,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 1028096,
                                                                      'ExportSize': 408,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.DLL': 'RegSetValueExA',
                                                                                      'COMCTL32.DLL': 'ImageList_Write',
                                                                                      'COMDLG32.DLL': 'PrintDlgA',
                                                                                      'GDI32.DLL': 'UnrealizeObject',
                                                                                      'KERNEL32.DLL': 'lstrlenA',
                                                                                      'OLEAUT32.DLL': 'VariantInit',
                                                                                      'SHELL32.DLL': 'ShellExecuteA',
                                                                                      'USER32.DLL': 'GetSysColor',
                                                                                      'VERSION.DLL': 'VerQueryValueA',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterA'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegFlushKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'CloseHandle',
                                                                                            'CompareStringA',
                                                                                            'CreateEventA',
                                                                                            'CreateFileA',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'EnumCalendarInfoA',
                                                                                            'ExitProcess',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindResourceA',
                                                                                            'FormatMessageA',
                                                                                            'FreeLibrary',
                                                                                            'FreeResource',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetDateFormatA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'GetFileType',
                                                                                            'GetLastError',
                                                                                            'GetLocalTime',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetOEMCP',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessHeap',
                                                                                            'GetProfileStringA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetStdHandle',
                                                                                            'GetStringTypeExA',
                                                                                            'GetStringTypeW',
                                                                                            'GetSystemInfo',
                                                                                            'GetThreadLocale',
                                                                                            'GetTickCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetVersion',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAddAtomA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalFindAtomA',
                                                                                            'GlobalFree',
                                                                                            'GlobalHandle',
                                                                                            'GlobalLock',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalSize',
                                                                                            'GlobalUnlock',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'InitializeCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'LCMapStringA',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryExA',
                                                                                            'LoadResource',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'LockResource',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'ReadFile',
                                                                                            'ResetEvent',
                                                                                            'RtlUnwind',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetEndOfFile',
                                                                                            'SetErrorMode',
                                                                                            'SetEvent',
                                                                                            'SetFilePointer',
                                                                                            'SetHandleCount',
                                                                                            'SetLastError',
                                                                                            'SetThreadLocale',
                                                                                            'SizeofResource',
                                                                                            'Sleep',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'lstrcmpA',
                                                                                            'lstrcpyA',
                                                                                            'lstrcpynA',
                                                                                            'lstrlenA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesA',
                                                                                            'EnumPrintersA',
                                                                                            'OpenPrinterA',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_DrawEx',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_GetBkColor',
                                                                                            'ImageList_GetDragImage',
                                                                                            'ImageList_GetIconSize',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_Read',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_SetBkColor',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_SetIconSize',
                                                                                            'ImageList_Write',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetSaveFileNameA',
                                                                                            'PrintDlgA',
                                                                                            'BitBlt',
                                                                                            'CombineRgn',
                                                                                            'CreateBitmap',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDCA',
                                                                                            'CreateDIBSection',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateFontIndirectA',
                                                                                            'CreateHalftonePalette',
                                                                                            'CreateICA',
                                                                                            'CreatePalette',
                                                                                            'CreatePenIndirect',
                                                                                            'CreateRectRgn',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'EndDoc',
                                                                                            'EndPage',
                                                                                            'ExcludeClipRect',
                                                                                            'ExtTextOutA',
                                                                                            'GetBitmapBits',
                                                                                            'GetBrushOrgEx',
                                                                                            'GetClipBox',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetDCOrgEx',
                                                                                            'GetDIBColorTable',
                                                                                            'GetDIBits',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'GetPaletteEntries',
                                                                                            'GetPixel',
                                                                                            'GetRgnBox',
                                                                                            'GetStockObject',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'GetTextMetricsA',
                                                                                            'GetWindowOrgEx',
                                                                                            'IntersectClipRect',
                                                                                            'LineTo',
                                                                                            'MaskBlt',
                                                                                            'MoveToEx',
                                                                                            'PatBlt',
                                                                                            'Polygon',
                                                                                            'Polyline',
                                                                                            'RealizePalette',
                                                                                            'RectVisible',
                                                                                            'Rectangle',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'SelectObject',
                                                                                            'SelectPalette',
                                                                                            'SetAbortProc',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'SetBrushOrgEx',
                                                                                            'SetDIBColorTable',
                                                                                            'SetMapMode',
                                                                                            'SetPixel',
                                                                                            'SetROP2',
                                                                                            'SetStretchBltMode',
                                                                                            'SetTextColor',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'StartDocA',
                                                                                            'StartPage',
                                                                                            'StretchBlt',
                                                                                            'UnrealizeObject',
                                                                                            'ShellExecuteA',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'AdjustWindowRectEx',
                                                                                            'BeginPaint',
                                                                                            'CallNextHookEx',
                                                                                            'CallWindowProcA',
                                                                                            'CharLowerA',
                                                                                            'CharLowerBuffA',
                                                                                            'CharNextA',
                                                                                            'CheckMenuItem',
                                                                                            'ChildWindowFromPoint',
                                                                                            'ClientToScreen',
                                                                                            'CreateIcon',
                                                                                            'CreateMenu',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateWindowExA',
                                                                                            'DefFrameProcA',
                                                                                            'DefMDIChildProcA',
                                                                                            'DefWindowProcA',
                                                                                            'DeleteMenu',
                                                                                            'DestroyCursor',
                                                                                            'DestroyIcon',
                                                                                            'DestroyMenu',
                                                                                            'DestroyWindow',
                                                                                            'DispatchMessageA',
                                                                                            'DrawEdge',
                                                                                            'DrawFrameControl',
                                                                                            'DrawIcon',
                                                                                            'DrawIconEx',
                                                                                            'DrawMenuBar',
                                                                                            'DrawTextA',
                                                                                            'EnableMenuItem',
                                                                                            'EnableScrollBar',
                                                                                            'EnableWindow',
                                                                                            'EndPaint',
                                                                                            'EnumChildWindows',
                                                                                            'EnumThreadWindows',
                                                                                            'EnumWindows',
                                                                                            'EqualRect',
                                                                                            'FillRect',
                                                                                            'FindWindowA',
                                                                                            'FrameRect',
                                                                                            'GetActiveWindow',
                                                                                            'GetCapture',
                                                                                            'GetClassInfoA',
                                                                                            'GetClassNameA',
                                                                                            'GetClientRect',
                                                                                            'GetCursor',
                                                                                            'GetCursorPos',
                                                                                            'GetDC',
                                                                                            'GetDCEx',
                                                                                            'GetDesktopWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetFocus',
                                                                                            'GetForegroundWindow',
                                                                                            'GetIconInfo',
                                                                                            'GetKeyNameTextA',
                                                                                            'GetKeyState',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyboardType',
                                                                                            'GetLastActivePopup',
                                                                                            'GetMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemInfoA',
                                                                                            'GetMenuState',
                                                                                            'GetMenuStringA',
                                                                                            'GetMessagePos',
                                                                                            'GetParent',
                                                                                            'GetPropA',
                                                                                            'GetScrollInfo',
                                                                                            'GetScrollPos',
                                                                                            'GetScrollRange',
                                                                                            'GetSubMenu',
                                                                                            'GetSystemMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'GetTopWindow',
                                                                                            'GetUpdateRect',
                                                                                            'GetWindow',
                                                                                            'GetWindowDC',
                                                                                            'GetWindowLongA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowTextA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'InflateRect',
                                                                                            'InsertMenuA',
                                                                                            'InsertMenuItemA',
                                                                                            'IntersectRect',
                                                                                            'InvalidateRect',
                                                                                            'IsChild',
                                                                                            'IsDialogMessageA',
                                                                                            'IsIconic',
                                                                                            'IsRectEmpty',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'IsZoomed',
                                                                                            'KillTimer',
                                                                                            'LoadBitmapA',
                                                                                            'LoadCursorA',
                                                                                            'LoadIconA',
                                                                                            'LoadKeyboardLayoutA',
                                                                                            'LoadStringA',
                                                                                            'MapVirtualKeyA',
                                                                                            'MapWindowPoints',
                                                                                            'MessageBoxA',
                                                                                            'OemToCharA',
                                                                                            'OffsetRect',
                                                                                            'PeekMessageA',
                                                                                            'PostMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'PtInRect',
                                                                                            'RedrawWindow',
                                                                                            'RegisterClassA',
                                                                                            'RegisterClipboardFormatA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'ReleaseCapture',
                                                                                            'ReleaseDC',
                                                                                            'RemoveMenu',
                                                                                            'RemovePropA',
                                                                                            'ScreenToClient',
                                                                                            'ScrollWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'SetActiveWindow',
                                                                                            'SetCapture',
                                                                                            'SetClassLongA',
                                                                                            'SetCursor',
                                                                                            'SetFocus',
                                                                                            'SetForegroundWindow',
                                                                                            'SetMenu',
                                                                                            'SetMenuItemInfoA',
                                                                                            'SetPropA',
                                                                                            'SetRect',
                                                                                            'SetScrollInfo',
                                                                                            'SetScrollPos',
                                                                                            'SetScrollRange',
                                                                                            'SetTimer',
                                                                                            'SetWindowLongA',
                                                                                            'SetWindowPlacement',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowTextA',
                                                                                            'SetWindowsHookExA',
                                                                                            'ShowCursor',
                                                                                            'ShowOwnedPopups',
                                                                                            'ShowScrollBar',
                                                                                            'ShowWindow',
                                                                                            'SystemParametersInfoA',
                                                                                            'TrackPopupMenu',
                                                                                            'TranslateMDISysAccel',
                                                                                            'TranslateMessage',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'UnregisterClassA',
                                                                                            'UpdateWindow',
                                                                                            'WaitMessage',
                                                                                            'WinHelpA',
                                                                                            'WindowFromPoint',
                                                                                            'wsprintfA',
                                                                                            'GetSysColor',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayRedim',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantCopyInd',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 384,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 48128,
                                                                      'SectionNames': {'.data\x00\x00\x00': 125952,
                                                                                       '.edata\x00\x00': 512,
                                                                                       '.idata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 68608,
                                                                                       '.rsrc\x00\x00\x00': 48128,
                                                                                       '.text\x00\x00\x00': 827904,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9f5c12e65607d9e12ee219b8fd93b008cefb8efb2edc792bad0793d461cef8ed'},
 '9f5c1d3f314cd4a6260550bf865318252ac9811fa6cf82884ccdea684a10ed06': {'AddressOfEntryPoint': 722793,
                                                                      'DebugRVA': 1048128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1044480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EqualSid',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'MSVCP90.dll': '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z',
                                                                                      'MSVCR90.dll': '_controlfp_s',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'libcurl.dll': 'curl_global_cleanup',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['curl_easy_setopt',
                                                                                            'curl_slist_append',
                                                                                            'curl_easy_perform',
                                                                                            'curl_global_init',
                                                                                            'curl_easy_init',
                                                                                            'curl_easy_escape',
                                                                                            'curl_easy_unescape',
                                                                                            'curl_easy_getinfo',
                                                                                            'curl_easy_strerror',
                                                                                            'curl_slist_free_all',
                                                                                            'curl_easy_cleanup',
                                                                                            'curl_global_cleanup',
                                                                                            'frexp',
                                                                                            '_ftime64',
                                                                                            'strtok_s',
                                                                                            'rewind',
                                                                                            'wcsrchr',
                                                                                            '_wcsdup',
                                                                                            'wcscspn',
                                                                                            'wcschr',
                                                                                            'towupper',
                                                                                            'wcsspn',
                                                                                            'localeconv',
                                                                                            'wcrtomb',
                                                                                            'abort',
                                                                                            'isspace',
                                                                                            '_getpid',
                                                                                            'fprintf',
                                                                                            '_get_osfhandle',
                                                                                            'fputs',
                                                                                            '_wgetenv',
                                                                                            '_wunlink',
                                                                                            '_wrename',
                                                                                            '_wfopen',
                                                                                            'wcsncmp',
                                                                                            '_wopen',
                                                                                            'memchr',
                                                                                            '_strdup',
                                                                                            'realloc',
                                                                                            'calloc',
                                                                                            'isdigit',
                                                                                            'scanf',
                                                                                            'fgets',
                                                                                            'memmove',
                                                                                            'printf',
                                                                                            'fgetc',
                                                                                            'memset',
                                                                                            'strrchr',
                                                                                            'sscanf',
                                                                                            '__iob_func',
                                                                                            'strchr',
                                                                                            '_fileno',
                                                                                            'strncmp',
                                                                                            '_fstat64i32',
                                                                                            'strcspn',
                                                                                            '_strnicmp',
                                                                                            '_errno',
                                                                                            'strtoul',
                                                                                            '_strtoui64',
                                                                                            'strtod',
                                                                                            '_stricmp',
                                                                                            'fflush',
                                                                                            '_setjmp3',
                                                                                            'longjmp',
                                                                                            'clock',
                                                                                            'rand',
                                                                                            'fread',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            'tolower',
                                                                                            'isxdigit',
                                                                                            'strtol',
                                                                                            'isalnum',
                                                                                            '_snprintf',
                                                                                            '_difftime64',
                                                                                            '??0exception@std@@QAE@ABQBDH@Z',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_gmtime64',
                                                                                            '_time64',
                                                                                            '_localtime64',
                                                                                            'signal',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'memcpy',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '__RTDynamicCast',
                                                                                            '__RTtypeid',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??0exception@std@@QAE@XZ',
                                                                                            '_purecall',
                                                                                            'strerror',
                                                                                            'qsort',
                                                                                            '_wfullpath',
                                                                                            '_wgetdcwd',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strncat',
                                                                                            '_strupr',
                                                                                            '?before@type_info@@QBEHABV1@@Z',
                                                                                            '??8type_info@@QBE_NABV0@@Z',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '??0bad_cast@std@@QAE@ABV01@@Z',
                                                                                            '??1bad_cast@std@@UAE@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '??0bad_cast@std@@QAE@PBD@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            'ispunct',
                                                                                            '_beginthreadex',
                                                                                            '_close',
                                                                                            '_write',
                                                                                            '_lseek',
                                                                                            'getenv',
                                                                                            'sprintf',
                                                                                            'getc',
                                                                                            'feof',
                                                                                            'wcsncpy',
                                                                                            '_snwprintf',
                                                                                            '_wtoi',
                                                                                            'wcsstr',
                                                                                            'islower',
                                                                                            '_fcvt_s',
                                                                                            '_ecvt_s',
                                                                                            '_aligned_malloc',
                                                                                            '_aligned_free',
                                                                                            'strspn',
                                                                                            'atoi',
                                                                                            'strpbrk',
                                                                                            '?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@00@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@PBD1@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z',
                                                                                            '?setw@std@@YA?AU?$_Smanip@H@1@H@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z',
                                                                                            '?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z',
                                                                                            '?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z',
                                                                                            '??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z',
                                                                                            '?allocate@?$allocator@D@std@@QAEPADI@Z',
                                                                                            '?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z',
                                                                                            '?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z',
                                                                                            '?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z',
                                                                                            '??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z',
                                                                                            '?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z',
                                                                                            '??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '?tolower@?$ctype@D@std@@QBEDD@Z',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z',
                                                                                            '?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z',
                                                                                            '?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z',
                                                                                            '?classic@locale@std@@SAABV12@XZ',
                                                                                            '??9locale@std@@QBE_NABV01@@Z',
                                                                                            '?grouping@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?thousands_sep@?$numpunct@D@std@@QBEDXZ',
                                                                                            '?id@?$numpunct@D@std@@2V0locale@2@A',
                                                                                            '?_Getcat@?$numpunct@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z',
                                                                                            '?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z',
                                                                                            '?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z',
                                                                                            '??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z',
                                                                                            '??1ios_base@std@@UAE@XZ',
                                                                                            '??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?_Init@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?exceptions@ios_base@std@@QAEXH@Z',
                                                                                            '?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z',
                                                                                            '??1locale@std@@QAE@XZ',
                                                                                            '??4locale@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?widen@?$ctype@D@std@@QBEDD@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z',
                                                                                            '??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '?narrow@?$ctype@D@std@@QBEDDD@Z',
                                                                                            '?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '?allocate@?$allocator@D@std@@QAEPADIPBX@Z',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z',
                                                                                            '?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?deallocate@?$allocator@D@std@@QAEXPADI@Z',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '?id@?$ctype@D@std@@2V0locale@2@A',
                                                                                            '?_Id_cnt@id@locale@std@@0HA',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z',
                                                                                            '?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '?_Unlock@_Mutex@std@@QAEXXZ',
                                                                                            '?_Lock@_Mutex@std@@QAEXXZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z',
                                                                                            '?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z',
                                                                                            '??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z',
                                                                                            '?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z',
                                                                                            '??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z',
                                                                                            '??1_Locimp@locale@std@@MAE@XZ',
                                                                                            '??0_Locimp@locale@std@@AAE@ABV012@@Z',
                                                                                            '?id@?$codecvt@_WDH@std@@2V0locale@2@A',
                                                                                            '?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z',
                                                                                            '?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z',
                                                                                            '?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB',
                                                                                            '?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z',
                                                                                            '?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z',
                                                                                            '?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z',
                                                                                            '??1?$codecvt@_WDH@std@@MAE@XZ',
                                                                                            '?do_length@?$codecvt@_WDH@std@@MBEHABHPBD1I@Z',
                                                                                            '??0?$codecvt@_WDH@std@@QAE@I@Z',
                                                                                            '?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z',
                                                                                            '?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W0@Z',
                                                                                            '?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z',
                                                                                            '?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z',
                                                                                            '?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z',
                                                                                            '?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z',
                                                                                            '?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z',
                                                                                            '?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ',
                                                                                            '?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z',
                                                                                            '?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z',
                                                                                            'AreFileApisANSI',
                                                                                            'OpenEventA',
                                                                                            'ResumeThread',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateWaitableTimerA',
                                                                                            'FormatMessageA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemTime',
                                                                                            'RaiseException',
                                                                                            'GetConsoleMode',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'ResetEvent',
                                                                                            'CreateFileA',
                                                                                            'GetFileAttributesExW',
                                                                                            'FindNextFileW',
                                                                                            'GetFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetEndOfFile',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetACP',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'OutputDebugStringW',
                                                                                            'GetShortPathNameW',
                                                                                            'OpenProcess',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpiA',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'CancelIo',
                                                                                            'GetOverlappedResult',
                                                                                            'FindFirstVolumeW',
                                                                                            'FindNextVolumeW',
                                                                                            'FindVolumeClose',
                                                                                            'DeviceIoControl',
                                                                                            'GetModuleHandleA',
                                                                                            'VirtualQuery',
                                                                                            'FindClose',
                                                                                            'OpenThread',
                                                                                            'GetExitCodeThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetDriveTypeA',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetVersionExW',
                                                                                            'GetVolumePathNameW',
                                                                                            'FormatMessageW',
                                                                                            'GetTempPathW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetFileAttributesW',
                                                                                            'MoveFileExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'OutputDebugStringA',
                                                                                            'DeleteFileW',
                                                                                            'GetVolumeInformationW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetComputerNameExW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryA',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentThread',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'TerminateProcess',
                                                                                            'GetStdHandle',
                                                                                            'IsBadReadPtr',
                                                                                            'PeekNamedPipe',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'PeekConsoleInputA',
                                                                                            'GetTickCount',
                                                                                            'InterlockedCompareExchange',
                                                                                            'SetLastError',
                                                                                            'TlsSetValue',
                                                                                            'SetWaitableTimer',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'TerminateThread',
                                                                                            'QueueUserAPC',
                                                                                            'CreateIoCompletionPort',
                                                                                            'HeapAlloc',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'TlsGetValue',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'TlsAlloc',
                                                                                            'GetLastError',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'TlsFree',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedExchange',
                                                                                            'GetTickCount64',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreA',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventA',
                                                                                            'CloseHandle',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'CryptAcquireContextA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'DuplicateToken',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'GetTokenInformation',
                                                                                            'GetFileSecurityW',
                                                                                            'ImpersonateSelf',
                                                                                            'RevertToSelf',
                                                                                            'CryptGenRandom',
                                                                                            'CheckTokenMembership',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'AccessCheck',
                                                                                            'GetUserNameW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'LookupAccountNameW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'MapGenericMask',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'EqualSid',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'SHGetFolderPathW',
                                                                                            'MessageBoxW',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoTaskMemFree',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 516,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 97280,
                                                                                       '.rdata\x00\x00': 404480,
                                                                                       '.reloc\x00\x00': 122880,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 1039872,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9f5c1d3f314cd4a6260550bf865318252ac9811fa6cf82884ccdea684a10ed06'},
 '9f84dfc0ae2d0fa228457d3f17465f8bea44792951cf917d683888c9c12ec76c': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9f84dfc0ae2d0fa228457d3f17465f8bea44792951cf917d683888c9c12ec76c'},
 '9ff3e2a010bb96dcfbb0093558b6cbcd92604b84766b14b2ff41cf7fc642b048': {'AddressOfEntryPoint': 10584,
                                                                      'DebugRVA': 58128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WriteConsoleW',
                                                                                      'SHLWAPI.dll': 'StrStrIW'},
                                                                      'ImportedFunctions': ['ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetInformationJobObject',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GenerateConsoleCtrlEvent',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryInformationJobObject',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateJobObjectA',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnwindEx',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'EncodePointer',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'WriteFile',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'ReadFile',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'CreateFileW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapReAlloc',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'LCMapStringW',
                                                                                            'WriteConsoleW',
                                                                                            'StrStrIW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 20644,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 20992,
                                                                                       '.text\x00\x00\x00': 49664},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/9ff3e2a010bb96dcfbb0093558b6cbcd92604b84766b14b2ff41cf7fc642b048'},
 'a02ca5e84246f1f7149f9dc4191ca48e6ee8a8ae0f82f4923aafec75ea8be380': {'AddressOfEntryPoint': 23720,
                                                                      'DebugRVA': 4496,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AddAce',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime'},
                                                                      'ImportedFunctions': ['GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'GetFullPathNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'SetThreadUILanguage',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'IsValidCodePage',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LoadLibraryA',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'InterlockedExchange',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'ReadFile',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'EqualSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetFileSecurityW',
                                                                                            'GetFileSecurityW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'FreeSid',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'LookupAccountSidW',
                                                                                            'LookupAccountNameW',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAce'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 6984,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 7168,
                                                                                       '.text\x00\x00\x00': 52224},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a02ca5e84246f1f7149f9dc4191ca48e6ee8a8ae0f82f4923aafec75ea8be380'},
 'a05495dadcf88b1ce9c79262979f7817c3726d6e244267f8530c9111c4e1e08b': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a05495dadcf88b1ce9c79262979f7817c3726d6e244267f8530c9111c4e1e08b'},
 'a077e63dd3e8713ad5433faf385c6a2b48b56d1fc6b48f0dd9ab541cfce810f3': {'AddressOfEntryPoint': 9984,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetLastError',
                                                                                            'CreateEventW',
                                                                                            'CloseHandle',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'swprintf_s',
                                                                                            '_cexit',
                                                                                            'memset',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CLSIDFromString',
                                                                                            'CoSetProxyBlanket'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 54,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a077e63dd3e8713ad5433faf385c6a2b48b56d1fc6b48f0dd9ab541cfce810f3'},
 'a07c4d3b4970e4041201b62daa296ebe8eeae6a940b40c0a545eb6215d13eace': {'AddressOfEntryPoint': 53872,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapFree',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'NETAPI32.dll': 'NetServerGetInfo',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHLWAPI.dll': 'StrCmpNW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'WS2_32.dll': 'FreeAddrInfoW',
                                                                                      'framedynos.dll': '??4CHString@@QAEABV0@PBG@Z',
                                                                                      'msvcrt.dll': 'wcstoul',
                                                                                      'ntdll.dll': 'VerSetConditionMask',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['GetNumberFormatW',
                                                                                            'CreateFileW',
                                                                                            'CreateFileMappingW',
                                                                                            'CloseHandle',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetUserDefaultLocaleName',
                                                                                            'LocaleNameToLCID',
                                                                                            'GetUserDefaultLCID',
                                                                                            'FormatMessageW',
                                                                                            'LocalAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetComputerNameExW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'CreateMutexW',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'ReadFile',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'ExitProcess',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenA',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'wcschr',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'fflush',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            '_get_osfhandle',
                                                                                            '_fileno',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            '_wtoi',
                                                                                            'localtime',
                                                                                            '_stricmp',
                                                                                            '_strnicmp',
                                                                                            '_wcsnset',
                                                                                            'wcstok',
                                                                                            '_ltow',
                                                                                            'swprintf_s',
                                                                                            '_wsetlocale',
                                                                                            '_iob',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'wsprintfW',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetGetLastErrorW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            '?GetBuffer@CHString@@QAEPAGH@Z',
                                                                                            '??1CHString@@QAE@XZ',
                                                                                            '?GetData@CHString@@IBEPAUCHStringData@@XZ',
                                                                                            '?Left@CHString@@QBE?AV1@H@Z',
                                                                                            '?FindOneOf@CHString@@QBEHPBG@Z',
                                                                                            '?Format@CHString@@QAAXPBGZZ',
                                                                                            '?GetBufferSetLength@CHString@@QAEPAGH@Z',
                                                                                            '?Find@CHString@@QBEHG@Z',
                                                                                            '?Mid@CHString@@QBE?AV1@H@Z',
                                                                                            '?Compare@CHString@@QBEHPBG@Z',
                                                                                            '??4CHString@@QAEABV0@ABV0@@Z',
                                                                                            '??0CHString@@QAE@XZ',
                                                                                            '??0CHString@@QAE@PBG@Z',
                                                                                            '?ReleaseBuffer@CHString@@QAEXH@Z',
                                                                                            '??4CHString@@QAEABV0@PBG@Z',
                                                                                            'StrStrW',
                                                                                            'StrChrIW',
                                                                                            'StrChrW',
                                                                                            'StrStrIW',
                                                                                            'StrCmpNW',
                                                                                            'GetUserNameExW',
                                                                                            'WSACleanup',
                                                                                            'GetAddrInfoW',
                                                                                            'GetNameInfoW',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            'FreeAddrInfoW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetServerGetInfo',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 156,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 55808},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a07c4d3b4970e4041201b62daa296ebe8eeae6a940b40c0a545eb6215d13eace'},
 'a0fe17c7abd28a6134fb782a9e0725f4deb78b5855deec86ab1fae62f7c4159c': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 65548,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 66048,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a0fe17c7abd28a6134fb782a9e0725f4deb78b5855deec86ab1fae62f7c4159c'},
 'a126472dac60d6756fd6b582f1d2a240bae68cfc457f5b406176b019f5373661': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a126472dac60d6756fd6b582f1d2a240bae68cfc457f5b406176b019f5373661'},
 'a12fd587781878ef422dfe740a18ac7e43d91e7ac5af7740633ca60d69445019': {'AddressOfEntryPoint': 82270,
                                                                      'DebugRVA': 82036,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2120,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a12fd587781878ef422dfe740a18ac7e43d91e7ac5af7740633ca60d69445019'},
 'a15dca46f832f975de262d3ca0a8f16e5514208a0060f6ac20f5d2d2631ff9e1': {'AddressOfEntryPoint': 12653,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'CopyFileA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrcmpiA',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'lstrcmpA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'CopyFileA',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'EndDialog',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'TrackPopupMenu',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 28672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a15dca46f832f975de262d3ca0a8f16e5514208a0060f6ac20f5d2d2631ff9e1'},
 'a15e75dc88f28191aedb1a429041685ddb667e12adbf089185821f537402a89b': {'AddressOfEntryPoint': 39716,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a15e75dc88f28191aedb1a429041685ddb667e12adbf089185821f537402a89b'},
 'a162fbc31868aa71bb6c2f1ddb5e8c3016f2c9de6a9c46a481a4993e6d258bed': {'AddressOfEntryPoint': 1027552,
                                                                      'DebugRVA': 4336,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1122304,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 21315,
                                                                      'ImportedDLL': {'CRYPT32.dll': 'CertVerifyCertificateChainPolicy',
                                                                                      'CRYPTSP.dll': 'CryptGenRandom',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'RPCRT4.dll': 'UuidToStringW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminAcquireContext',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'RaiseFailFastException',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleFileNameW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetFileMUIPath',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualFree',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegSetValueExW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegEnumKeyW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlCaptureContext',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetVersionExW',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'DecodePointer',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'VerQueryValueW',
                                                                                      'api-ms-win-eventlog-legacy-l1-1-0.dll': 'ReportEventW',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'OpenServiceW',
                                                                                      'api-ms-win-service-management-l2-1-0.dll': 'QueryServiceConfigW',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'QueryServiceStatus',
                                                                                      'api-ms-win-shcore-obsolete-l1-1-0.dll': 'CommandLineToArgvW',
                                                                                      'bcd.dll': 'SyspartDirectGetSystemPartition',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_ismbblead',
                                                                                            '_purecall',
                                                                                            'towupper',
                                                                                            'towlower',
                                                                                            'wcsrchr',
                                                                                            'memmove',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            '__setusermatherr',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '_onexit',
                                                                                            '__C_specific_handler',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_unlock',
                                                                                            '_acmdln',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_XcptFilter',
                                                                                            '__dllonexit',
                                                                                            '_vsnwprintf',
                                                                                            '__set_app_type',
                                                                                            'memset',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleExW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'Sleep',
                                                                                            'EnterCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'SysFreeString',
                                                                                            'RegisterTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'UuidFromStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidToStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'CloseHandle',
                                                                                            'GetTempPathW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'GetFileSizeEx',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'WriteFile',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'DeviceIoControl',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'GetFileMUIPath',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'VerQueryValueW',
                                                                                            'QueryServiceStatus',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'VirtualFree',
                                                                                            'QueryServiceConfigW',
                                                                                            'RtlDeleteFunctionTable',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'RegisterEventSourceW',
                                                                                            'DeregisterEventSource',
                                                                                            'ReportEventW',
                                                                                            'CreateSemaphoreW',
                                                                                            'RaiseFailFastException',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'CommandLineToArgvW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGenRandom',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATAdminReleaseCatalogContext',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'CryptCATAdminReleaseContext',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'CryptCATCatalogInfoFromContext',
                                                                                            'CryptCATAdminEnumCatalogFromHash',
                                                                                            'CryptCATAdminAcquireContext',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'BcdOpenObject',
                                                                                            'BcdEnumerateObjects',
                                                                                            'BcdOpenSystemStore',
                                                                                            'BcdCloseObject',
                                                                                            'BcdEnumerateElements',
                                                                                            'SyspartDirectGetSystemDisk',
                                                                                            'BcdCloseStore',
                                                                                            'SyspartDirectGetSystemPartition',
                                                                                            'NtQuerySystemInformation'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 37,
                                                                      'NumberOfImportFunctions': 163,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 8192,
                                                                                       '.pdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 1091072},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/a162fbc31868aa71bb6c2f1ddb5e8c3016f2c9de6a9c46a481a4993e6d258bed'},
 'a19ab81b3e587b57a773357c039b18814109fec865f0d70ff502ac93fc44d472': {'AddressOfEntryPoint': 13006,
                                                                      'DebugRVA': 12756,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 48,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 5220,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a19ab81b3e587b57a773357c039b18814109fec865f0d70ff502ac93fc44d472'},
 'a23c852d3ed4148044708925e56e17246cdb88d6ecaaa375503fa1f915ba1272': {'AddressOfEntryPoint': 11582,
                                                                      'DebugRVA': 11368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1568,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a23c852d3ed4148044708925e56e17246cdb88d6ecaaa375503fa1f915ba1272'},
 'a2611fb0a85c8b0282b608c1461adb6f61f216675c9fcfbfee382771e083fa9d': {'AddressOfEntryPoint': 58304,
                                                                      'DebugRVA': 92016,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 149120,
                                                                      'ExportSize': 78,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'MSVCP100.dll': '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                      'MSVCR100.dll': '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'VBoxRT.dll': 'RTCritSectInitEx',
                                                                                      'ole32.dll': 'StringFromIID'},
                                                                      'ImportedFunctions': ['memmove_s',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            '_recalloc',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'wcsncpy_s',
                                                                                            'memcpy_s',
                                                                                            'malloc',
                                                                                            'wcsstr',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_CxxThrowException',
                                                                                            'free',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_errno',
                                                                                            'strtoul',
                                                                                            '__CxxFrameHandler3',
                                                                                            'strchr',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            'PostThreadMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'CharNextW',
                                                                                            'GetMessageW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromIID',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayRedim',
                                                                                            'VarUI4FromStr',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocStringLen',
                                                                                            '?c_str@RTCString@@QEBAPEBDXZ',
                                                                                            'RTStrmOpen',
                                                                                            'g_pStdIn',
                                                                                            'RTStrmReadEx',
                                                                                            'RTStrmClose',
                                                                                            'RTEnvGet',
                                                                                            'RTPrintf',
                                                                                            'RTUtf16Cmp',
                                                                                            'RTUtf16LocaleICmp',
                                                                                            '??1RTCString@@UEAA@XZ',
                                                                                            'RTStrDupTag',
                                                                                            'RTLdrGetSymbol',
                                                                                            'SUPR3HardenedLdrLoadAppPriv',
                                                                                            'RTUuidClear',
                                                                                            'RTProcSelf',
                                                                                            'RTGetOptPrintError',
                                                                                            'RTBldCfgVersion',
                                                                                            'RTBldCfgRevisionStr',
                                                                                            'RTGetOpt',
                                                                                            'RTGetOptInit',
                                                                                            'RTR3InitExe',
                                                                                            'RTCritSectDelete',
                                                                                            'RTCritSectRwGetWriteRecursion',
                                                                                            'RTCritSectRwLeaveShared',
                                                                                            'RTCritSectRwEnterShared',
                                                                                            'RTCritSectRwLeaveExcl',
                                                                                            'RTCritSectRwEnterExcl',
                                                                                            'RTCritSectRwIsWriteOwner',
                                                                                            'RTLogLoggerEx',
                                                                                            'RTLogRelDefaultInstance',
                                                                                            '??8RTCString@@QEBA_NPEBD@Z',
                                                                                            'RTStrCmp',
                                                                                            'RTMemFree',
                                                                                            'RTMemAllocZTag',
                                                                                            'RTStrPrintf',
                                                                                            'RTStrFree',
                                                                                            'RTCritSectRwDelete',
                                                                                            'RTCritSectRwInitEx',
                                                                                            'RTThreadNativeSelf',
                                                                                            'RTCritSectEnter',
                                                                                            'RTCritSectLeave',
                                                                                            'RTCritSectInit',
                                                                                            '??4RTCString@@QEAAAEAV0@PEBD@Z',
                                                                                            'RTStrToUtf16ExTag',
                                                                                            'RTStrNLen',
                                                                                            'RTStrCalcUtf16LenEx',
                                                                                            '?jolt@RTCString@@QEAAXXZ',
                                                                                            'RTPathStripTrailingSlash',
                                                                                            'RTPathStripFilename',
                                                                                            'RTPathFilename',
                                                                                            'RTPathStripExt',
                                                                                            'RTUtf16Len',
                                                                                            'RTUtf16ToUtf8ExTag',
                                                                                            'RTStrAllocTag',
                                                                                            'RTUuidIsNull',
                                                                                            'RTUuidFromUtf16',
                                                                                            'RTErrConvertFromWin32',
                                                                                            '??0RTCString@@QEAA@PEBD@Z',
                                                                                            '?printfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z',
                                                                                            '??4RTCString@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '??0RTCString@@QEAA@AEBV0@@Z',
                                                                                            'RTMsgError',
                                                                                            'RTMemReallocTag',
                                                                                            '?append@RTCString@@QEAAAEAV1@AEBV1@@Z',
                                                                                            '??H@YA?BVRTCString@@AEBV0@PEBD@Z',
                                                                                            '?append@RTCString@@QEAAAEAV1@PEBD@Z',
                                                                                            '?cleanup@RTCString@@IEAAXXZ',
                                                                                            '??_7RTCString@@6B@',
                                                                                            '??0RTCString@@QEAA@XZ',
                                                                                            'RTThreadSelf',
                                                                                            'RTPathAppend',
                                                                                            'RTPathUserHome',
                                                                                            'RTStrCopy',
                                                                                            'RTPathStartsWithRoot',
                                                                                            'RTDirCreateFullPath',
                                                                                            'RTDirExists',
                                                                                            'RTPathAbs',
                                                                                            'RTEnvGetEx',
                                                                                            'RTProcGetExecutablePath',
                                                                                            'RTSystemQueryAvailableRam',
                                                                                            'RTSystemQueryTotalRam',
                                                                                            'RTSystemQueryDmiString',
                                                                                            'RTSystemQueryOSInfo',
                                                                                            'RTBldCfgRevision',
                                                                                            'RTBldCfgTargetDotArch',
                                                                                            'RTLogSetBuffering',
                                                                                            'RTTimeSpecToString',
                                                                                            'RTTimeNow',
                                                                                            'RTLogRelSetDefaultInstance',
                                                                                            'RTLogFlush',
                                                                                            'RTLogSetGroupLimit',
                                                                                            'RTLogCreateEx',
                                                                                            'RTStrAPrintfVTag',
                                                                                            'RTCritSectInitEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'EncodePointer',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'lstrcmpiW',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThread',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'lstrlenW',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            '?_Xlength_error@std@@YAXPEBD@Z'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 218,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 59392,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 82944},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a2611fb0a85c8b0282b608c1461adb6f61f216675c9fcfbfee382771e083fa9d'},
 'a26863a3a3e96c9900a9abb54935cd704bc02fc675495b25251201b1b034bca5': {'AddressOfEntryPoint': 5392,
                                                                      'DebugRVA': 4464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 8,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RtlCaptureContext',
                                                                                      'MSVCR80.dll': '_amsg_exit',
                                                                                      'vjsc.dll': 'VJSCCommandLineCompile'},
                                                                      'ImportedFunctions': ['__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__crt_debugger_hook',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_lock',
                                                                                            '_amsg_exit',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            'RtlCaptureContext',
                                                                                            'VJSCCommandLineCompile'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 37,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1520,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a26863a3a3e96c9900a9abb54935cd704bc02fc675495b25251201b1b034bca5'},
 'a283a3000e631e281ec3b9f2a029faaf76aaf267bb8b1921fb2b9b0b51c87d19': {'AddressOfEntryPoint': 31664,
                                                                      'DebugRVA': 112900,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 135168,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'I_RpcBindingIsClientLocal',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetTimeFormatW',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetErrorMode',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CreateFileW',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapCreate',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalReAlloc',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'WTSGetActiveConsoleSessionId',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'SetEnvironmentVariableW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'CreateProcessW',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-psapi-obsolete-l1-1-0.dll': 'K32GetModuleFileNameExW',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryValueExA',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetComputerNameExW',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'QueueUserWorkItem',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'GetFileVersionInfoSizeExW',
                                                                                      'api-ms-win-eventing-controller-l1-1-0.dll': 'EnableTraceEx2',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetSecurityDescriptorOwner',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwRegisterTraceGuidsW'},
                                                                      'ImportedFunctions': ['_acmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_vsnwprintf',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memmove',
                                                                                            'wcschr',
                                                                                            'memcpy',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtSystemDebugControl',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'NtCreateEvent',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'RtlCreateEnvironment',
                                                                                            'NtCompleteConnectPort',
                                                                                            'NtCreatePort',
                                                                                            'NtReplyWaitReceivePort',
                                                                                            'NtAcceptConnectPort',
                                                                                            'NtReplyPort',
                                                                                            'NtAllocateLocallyUniqueId',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlConnectToSm',
                                                                                            'RtlSendMsgToSm',
                                                                                            'NtDelayExecution',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlQueryEnvironmentVariable_U',
                                                                                            'RtlDeregisterWait',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtPowerInformation',
                                                                                            'EtwEventActivityIdControl',
                                                                                            'EtwEventWriteStartScenario',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'NtPrivilegeObjectAuditAlarm',
                                                                                            'NtPrivilegeCheck',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtClose',
                                                                                            'RtlRemovePrivileges',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtShutdownSystem',
                                                                                            'NtSetThreadExecutionState',
                                                                                            'CsrClientCallServer',
                                                                                            'RtlDeregisterWaitEx',
                                                                                            'RtlDestroyEnvironment',
                                                                                            'NtSetValueKey',
                                                                                            'NtCreateKey',
                                                                                            'RtlRegisterWait',
                                                                                            'NtQuerySystemEnvironmentValueEx',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwEventWrite',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'EtwEventRegister',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlSetThreadIsCritical',
                                                                                            'RtlSetProcessIsCritical',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'HeapFree',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcessHeap',
                                                                                            'HeapCreate',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetEvent',
                                                                                            'TryEnterCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'ResetEvent',
                                                                                            'SleepEx',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegGetValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExA',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateThread',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'ResumeThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateRemoteThread',
                                                                                            'OpenProcess',
                                                                                            'OpenProcessToken',
                                                                                            'TerminateProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CreateProcessAsUserW',
                                                                                            'CreateProcessW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLocalTime',
                                                                                            'GetVersionExW',
                                                                                            'GetComputerNameExW',
                                                                                            'FindVolumeClose',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'GetDriveTypeW',
                                                                                            'FindFirstVolumeW',
                                                                                            'GetShortPathNameW',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'FindNextVolumeW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'RevertToSelf',
                                                                                            'GetTokenInformation',
                                                                                            'CheckTokenMembership',
                                                                                            'SetFileSecurityW',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'CreateWellKnownSid',
                                                                                            'SetTokenInformation',
                                                                                            'DuplicateTokenEx',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'NdrServerCall2',
                                                                                            'RpcEpRegisterW',
                                                                                            'UuidFromStringW',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcBindingBind',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'NdrServerCallAll',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcEpUnregister',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcServerInqCallAttributesW',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcServerListen',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcMgmtIsServerListening',
                                                                                            'NdrClientCall3',
                                                                                            'RpcAsyncCancelCall',
                                                                                            'RpcBindingUnbind',
                                                                                            'Ndr64AsyncClientCall',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcExceptionFilter',
                                                                                            'RpcBindingServerFromClient',
                                                                                            'RpcBindingCopy',
                                                                                            'RpcAsyncAbortCall',
                                                                                            'RpcBindingFree',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcBindingCreateW',
                                                                                            'Ndr64AsyncServerCallAll',
                                                                                            'NdrAsyncServerCall',
                                                                                            'RpcServerTestCancel',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'ControlTraceW',
                                                                                            'StartTraceW',
                                                                                            'EnableTraceEx2',
                                                                                            'MoveFileExW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'QueueUserWorkItem',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'LocalSize',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalReAlloc',
                                                                                            'K32GetModuleFileNameExW',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 28,
                                                                      'NumberOfImportFunctions': 253,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 6848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 11776,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 7168,
                                                                                       '.text\x00\x00\x00': 116736},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/a283a3000e631e281ec3b9f2a029faaf76aaf267bb8b1921fb2b9b0b51c87d19'},
 'a29426ceb90c8098d67c5d6850723b8acf9bb6b1c2c3aeac73626b380d213e5e': {'AddressOfEntryPoint': 446064,
                                                                      'DebugRVA': 22384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 8,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'GetTextExtentPoint32W',
                                                                                      'IMM32.dll': 'ImmGetContext',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEAUT32.dll': 'LoadRegTypeLib',
                                                                                      'SETUPAPI.dll': 'SetupIterateCabinetW',
                                                                                      'SHELL32.dll': 'SHGetDesktopFolder',
                                                                                      'SHLWAPI.dll': 'PathCombineW',
                                                                                      'USER32.dll': 'SendMessageW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['UnmapViewOfFile',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'CreateDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'SetLastError',
                                                                                            'GetFileSize',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCommandLineW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentThreadId',
                                                                                            'ResetEvent',
                                                                                            'FlushInstructionCache',
                                                                                            'RaiseException',
                                                                                            'WaitForMultipleObjects',
                                                                                            'FormatMessageW',
                                                                                            'MulDiv',
                                                                                            'lstrlenW',
                                                                                            'GetDriveTypeW',
                                                                                            'GlobalHandle',
                                                                                            'lstrcmpW',
                                                                                            'TerminateThread',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'HeapReAlloc',
                                                                                            'GetLocalTime',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FlsFree',
                                                                                            'TlsSetValue',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'EnterCriticalSection',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CreateFileA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetThreadLocale',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'InitializeCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'Sleep',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'SetFilePointer',
                                                                                            'GlobalAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'CreateFileW',
                                                                                            'GlobalUnlock',
                                                                                            'GetDriveTypeA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'ResumeThread',
                                                                                            'ExitThread',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'SetEndOfFile',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetTempFileNameW',
                                                                                            'CopyFileW',
                                                                                            'CreateMutexW',
                                                                                            'DuplicateHandle',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'ReleaseMutex',
                                                                                            'GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'HeapSize',
                                                                                            'CreateFileMappingW',
                                                                                            'ReadFile',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalReAlloc',
                                                                                            'CloseHandle',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDeviceCaps',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteObject',
                                                                                            'SetDIBitsToDevice',
                                                                                            'PatBlt',
                                                                                            'DeleteDC',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBitmap',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'GetObjectW',
                                                                                            'GetStockObject',
                                                                                            'CreatePalette',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetWindowTextLengthW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'InvalidateRgn',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'MoveWindow',
                                                                                            'ClientToScreen',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'SetWindowLongW',
                                                                                            'GetClassNameW',
                                                                                            'RedrawWindow',
                                                                                            'IsChild',
                                                                                            'EndPaint',
                                                                                            'FillRect',
                                                                                            'BeginPaint',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'LoadImageW',
                                                                                            'DestroyIcon',
                                                                                            'SetWindowContextHelpId',
                                                                                            'MapDialogRect',
                                                                                            'UnregisterClassA',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'DialogBoxParamW',
                                                                                            'GetWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'GetActiveWindow',
                                                                                            'ScreenToClient',
                                                                                            'PtInRect',
                                                                                            'GetCursorPos',
                                                                                            'PostQuitMessage',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetSysColorBrush',
                                                                                            'InvalidateRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowLongW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CharNextW',
                                                                                            'CharPrevW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'SetCursor',
                                                                                            'DrawFocusRect',
                                                                                            'DrawTextW',
                                                                                            'GetWindowTextW',
                                                                                            'EnableWindow',
                                                                                            'GetCursor',
                                                                                            'GetSysColor',
                                                                                            'EndDialog',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetDlgItemTextW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetParent',
                                                                                            'LoadCursorW',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextW',
                                                                                            'CallWindowProcW',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowLongPtrW',
                                                                                            'IsWindow',
                                                                                            'IsDialogMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetClientRect',
                                                                                            'PostMessageW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowRect',
                                                                                            'MapWindowPoints',
                                                                                            'LoadIconW',
                                                                                            'GetDesktopWindow',
                                                                                            'GetSystemMenu',
                                                                                            'EnableMenuItem',
                                                                                            'SetFocus',
                                                                                            'GetFocus',
                                                                                            'SendMessageW',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'InitCommonControlsEx',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetDesktopFolder',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoGetClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'OleLockRunning',
                                                                                            'OleUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VarUI4FromStr',
                                                                                            'VarBstrCmp',
                                                                                            'SysStringLen',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'LoadRegTypeLib',
                                                                                            'ImmAssociateContext',
                                                                                            'ImmReleaseContext',
                                                                                            'ImmGetContext',
                                                                                            'PathRemoveBackslashW',
                                                                                            'PathIsRootW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'PathStripToRootW',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathAddBackslashW',
                                                                                            'PathCombineW',
                                                                                            'SetupIterateCabinetW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 309,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 128000,
                                                                                       '.pdata\x00\x00': 107008,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 1089536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a29426ceb90c8098d67c5d6850723b8acf9bb6b1c2c3aeac73626b380d213e5e'},
 'a2bdbb568693c7c3c221d88d334ec2c86ab71de0982e883b49ccc6291a7d9625': {'AddressOfEntryPoint': 454747,
                                                                      'DebugRVA': 550736,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 548864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'PrintDlgW',
                                                                                      'GDI32.dll': 'GetCurrentPositionEx',
                                                                                      'KERNEL32.dll': 'LoadLibraryExA',
                                                                                      'SETUPAPI.dll': 'SetupDiGetDeviceRegistryPropertyW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathStripPathA',
                                                                                      'USER32.dll': 'GetWindowRect',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['AddAtomW',
                                                                                            'GetAtomNameW',
                                                                                            'OpenProcess',
                                                                                            'SetLastError',
                                                                                            'GetPriorityClass',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Module32FirstW',
                                                                                            'Module32NextW',
                                                                                            'LockResource',
                                                                                            'GetVersion',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateMutexW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetPrivateProfileStructW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetShortPathNameW',
                                                                                            'MoveFileExW',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetTimeFormatW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalHandle',
                                                                                            'GlobalFree',
                                                                                            'GetFileType',
                                                                                            'DuplicateHandle',
                                                                                            'GetFileSize',
                                                                                            'GetTempFileNameW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'lstrcatW',
                                                                                            'lstrcpyW',
                                                                                            'lstrcmpiW',
                                                                                            'FormatMessageW',
                                                                                            'GetTickCount',
                                                                                            'SetFilePointerEx',
                                                                                            'SetFilePointer',
                                                                                            'Sleep',
                                                                                            'GetVolumeInformationW',
                                                                                            'InitAtomTable',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'lstrlenA',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'CreateProcessW',
                                                                                            'DeleteAtom',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FlushFileBuffers',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'GetStdHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'AreFileApisANSI',
                                                                                            'GetModuleHandleExW',
                                                                                            'ExitProcess',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'IsValidLocale',
                                                                                            'LCMapStringW',
                                                                                            'GetStartupInfoW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetConsoleCP',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'RtlUnwind',
                                                                                            'OutputDebugStringW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStringTypeW',
                                                                                            'EncodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'CreateFileW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'FindResourceW',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FreeResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'CreateFileA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetComputerNameA',
                                                                                            'lstrcpynW',
                                                                                            'CompareFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetFileTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTempPathW',
                                                                                            'GetFileSizeEx',
                                                                                            'DecodePointer',
                                                                                            'FileTimeToSystemTime',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetVersionExW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'SetEndOfFile',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'CreateDirectoryA',
                                                                                            'LoadLibraryExA',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'DialogBoxParamW',
                                                                                            'ShowWindow',
                                                                                            'SendMessageW',
                                                                                            'GetDlgItemTextA',
                                                                                            'RegisterClassExW',
                                                                                            'KillTimer',
                                                                                            'LoadMenuW',
                                                                                            'DestroyMenu',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemID',
                                                                                            'TrackPopupMenu',
                                                                                            'SetMenuDefaultItem',
                                                                                            'SetDlgItemTextA',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'SetClassLongW',
                                                                                            'LoadImageW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'wsprintfA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'AttachThreadInput',
                                                                                            'CreateWindowExW',
                                                                                            'IsWindow',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowPos',
                                                                                            'IsWindowVisible',
                                                                                            'IsIconic',
                                                                                            'BringWindowToTop',
                                                                                            'GetDlgItemTextW',
                                                                                            'ExitWindowsEx',
                                                                                            'SendMessageA',
                                                                                            'FindWindowA',
                                                                                            'FindWindowW',
                                                                                            'OpenClipboard',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'UpdateWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'InvalidateRect',
                                                                                            'RedrawWindow',
                                                                                            'GetClientRect',
                                                                                            'wsprintfW',
                                                                                            'EnumWindows',
                                                                                            'PostMessageW',
                                                                                            'LoadCursorW',
                                                                                            'PtInRect',
                                                                                            'MapWindowPoints',
                                                                                            'ScreenToClient',
                                                                                            'GetCursorPos',
                                                                                            'SetCursor',
                                                                                            'GetWindowTextLengthW',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'IsWindowUnicode',
                                                                                            'GetDlgCtrlID',
                                                                                            'CallWindowProcW',
                                                                                            'DefWindowProcW',
                                                                                            'DefWindowProcA',
                                                                                            'GetTitleBarInfo',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'CreateDialogParamW',
                                                                                            'PostQuitMessage',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'SetFocus',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'LoadStringW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'EnumChildWindows',
                                                                                            'GetParent',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowOrgEx',
                                                                                            'TextOutW',
                                                                                            'GetObjectW',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'SelectClipRgn',
                                                                                            'SaveDC',
                                                                                            'RestoreDC',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'GetTextColor',
                                                                                            'GetCurrentObject',
                                                                                            'DeleteObject',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'AbortDoc',
                                                                                            'EndPage',
                                                                                            'StartPage',
                                                                                            'EndDoc',
                                                                                            'StartDocW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetCurrentPositionEx',
                                                                                            'PrintDlgW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'CheckTokenMembership',
                                                                                            'GetFileSecurityW',
                                                                                            'SetFileSecurityW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenProcessToken',
                                                                                            'SetEntriesInAclW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'QueryServiceStatusEx',
                                                                                            'StartServiceW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RevertToSelf',
                                                                                            'AccessCheck',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'OpenThreadToken',
                                                                                            'ImpersonateSelf',
                                                                                            'RegCreateKeyExA',
                                                                                            'Shell_NotifyIconW',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoCreateGuid',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoInitialize',
                                                                                            'SHDeleteKeyW',
                                                                                            'PathIsFileSpecW',
                                                                                            'PathIsRelativeW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveBackslashW',
                                                                                            'PathQuoteSpacesW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathMatchSpecW',
                                                                                            'PathFindFileNameA',
                                                                                            'StrToIntExW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathFindOnPathW',
                                                                                            'PathUnquoteSpacesW',
                                                                                            'PathStripPathW',
                                                                                            'PathAddBackslashW',
                                                                                            'PathStripToRootW',
                                                                                            'PathRenameExtensionW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathCombineW',
                                                                                            'PathFileExistsW',
                                                                                            'PathAddBackslashA',
                                                                                            'PathAppendA',
                                                                                            'PathCombineA',
                                                                                            'PathRemoveFileSpecA',
                                                                                            'PathStripPathA',
                                                                                            'InitCommonControlsEx',
                                                                                            'InternetGetConnectedStateExW',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'InternetOpenW',
                                                                                            'HttpOpenRequestA',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestW',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpSendRequestA',
                                                                                            'InternetErrorDlg',
                                                                                            'InternetCloseHandle',
                                                                                            'FtpFindFirstFileW',
                                                                                            'InternetGetConnectedState',
                                                                                            'InternetCheckConnectionW',
                                                                                            'HttpQueryInfoW',
                                                                                            'FtpGetFileSize',
                                                                                            'FtpOpenFileW',
                                                                                            'InternetReadFile',
                                                                                            'InternetSetFilePointer',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'gethostname',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'recvfrom',
                                                                                            'sendto',
                                                                                            'closesocket',
                                                                                            'setsockopt',
                                                                                            'WSASocketW',
                                                                                            'gethostbyaddr',
                                                                                            'WSACleanup'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 403,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 685820,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11776,
                                                                                       '.rdata\x00\x00': 131584,
                                                                                       '.reloc\x00\x00': 27136,
                                                                                       '.rsrc\x00\x00\x00': 686080,
                                                                                       '.text\x00\x00\x00': 543744},
                                                                      'StackReserveSize': 10485760,
                                                                      'filename': './data/clean/a2bdbb568693c7c3c221d88d334ec2c86ab71de0982e883b49ccc6291a7d9625'},
 'a2dbb68e62468b24185baf6e305a756f0fe3eb34f218417a1d579cf3d4a4bcab': {'AddressOfEntryPoint': 11200,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitiateSystemShutdownExW',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'USERENV.dll': 'ForceSyncFgPolicy',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ntdll.dll': 'RtlConvertSidToUnicodeString',
                                                                                      'wevtapi.dll': 'EvtOpenPublisherMetadata'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'CreateThread',
                                                                                            'LocalReAlloc',
                                                                                            'LocalAlloc',
                                                                                            'Sleep',
                                                                                            'towupper',
                                                                                            '_wsetlocale',
                                                                                            'getwchar',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            'wprintf',
                                                                                            '_ultow',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            'wcstol',
                                                                                            '__set_app_type',
                                                                                            'ExitWindowsEx',
                                                                                            'LoadStringW',
                                                                                            'ForceSyncFgPolicy',
                                                                                            'RtlLengthSid',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlCopySid',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'EvtClose',
                                                                                            'EvtNext',
                                                                                            'EvtQuery',
                                                                                            'EvtFormatMessage',
                                                                                            'EvtOpenPublisherMetadata'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 63,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a2dbb68e62468b24185baf6e305a756f0fe3eb34f218417a1d579cf3d4a4bcab'},
 'a2e5d8b4cd332a567f3851fec3787730894e461df49191ad71b21695805a57eb': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 70264,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHELL32.DLL': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'WININET.DLL': 'InternetOpenW',
                                                                                      'libvlc.dll': 'libvlc_wait',
                                                                                      'msvcrt.dll': '_putenv'},
                                                                      'ImportedFunctions': ['libvlc_add_intf',
                                                                                            'libvlc_new',
                                                                                            'libvlc_playlist_play',
                                                                                            'libvlc_release',
                                                                                            'libvlc_set_app_id',
                                                                                            'libvlc_set_user_agent',
                                                                                            'libvlc_wait',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExW',
                                                                                            'HeapSetInformation',
                                                                                            'InitializeCriticalSection',
                                                                                            'IsBadReadPtr',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'IsDebuggerPresent',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'OpenProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetErrorMode',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__mb_cur_max',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_setmode',
                                                                                            '_snwprintf',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'fputwc',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'strchr',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            '_unlock',
                                                                                            '_wfopen',
                                                                                            '_wremove',
                                                                                            '_wrename',
                                                                                            'abort',
                                                                                            'atoi',
                                                                                            'vfprintf',
                                                                                            'wcscat',
                                                                                            'wcscmp',
                                                                                            'wcscpy',
                                                                                            'wcslen',
                                                                                            'wcsncmp',
                                                                                            '_putenv',
                                                                                            'EnumProcessModules',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'MessageBoxW',
                                                                                            'FtpPutFileW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetConnectW',
                                                                                            'InternetOpenW'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 75520,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 75776,
                                                                                       '.text\x00\x00\x00': 41472,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '/4\x00\x00\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/a2e5d8b4cd332a567f3851fec3787730894e461df49191ad71b21695805a57eb'},
 'a2e5dbb8b6ce5ef7d32dbc75af3ebd9229c8389f468f7fa5457221e55f4e7c6b': {'AddressOfEntryPoint': 15104,
                                                                      'DebugRVA': 4384,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49600,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'USER32.dll': 'GetWindowThreadProcessId',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoTaskMemAlloc',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateErrorW',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoRegisterActivationFactories',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsCreateString',
                                                                                      'msvcrt.dll': '_vsnwprintf'},
                                                                      'ImportedFunctions': ['AcquireSRWLockExclusive',
                                                                                            'OpenProcess',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'GetLastError',
                                                                                            'GetProcessId',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockShared',
                                                                                            'OpenEventW',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'EncodePointer',
                                                                                            'SetEvent',
                                                                                            'UnregisterWait',
                                                                                            'DecodePointer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'DuplicateHandle',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DispatchMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PostThreadMessageW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_get_errno',
                                                                                            '_set_errno',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_purecall',
                                                                                            '_vsnwprintf',
                                                                                            'CoGetCallContext',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'RoUninitialize',
                                                                                            'RoRevokeActivationFactories',
                                                                                            'RoInitialize',
                                                                                            'RoRegisterActivationFactories',
                                                                                            'WindowsIsStringEmpty',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsStringHasEmbeddedNull',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsCreateString',
                                                                                            'RoOriginateError',
                                                                                            'RoOriginateErrorW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 13312},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/a2e5dbb8b6ce5ef7d32dbc75af3ebd9229c8389f468f7fa5457221e55f4e7c6b'},
 'a32c2d6f22bf033a9976f8e0b35497dc05b7945bd58058ab820fb3a4b0a2985d': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 67164,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 67584,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a32c2d6f22bf033a9976f8e0b35497dc05b7945bd58058ab820fb3a4b0a2985d'},
 'a3411d421f61a2ceb425190868b1a06c6d4db7c00ecb397359ff37011a5e0c00': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a3411d421f61a2ceb425190868b1a06c6d4db7c00ecb397359ff37011a5e0c00'},
 'a36b63b8d88b0b23937627dfd967203652cc29f4ad787e4f5867005f8e25a1e5': {'AddressOfEntryPoint': 9920,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'USER32.dll': 'PeekMessageW',
                                                                                      'WININET.dll': 'InternetSetCookieExW',
                                                                                      'msvcrt.dll': '_wcsnicmp',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['HeapSetInformation',
                                                                                            'CreateEventW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateThread',
                                                                                            'SetProcessDEPPolicy',
                                                                                            'VirtualAlloc',
                                                                                            'IsWow64Process',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'TerminateProcess',
                                                                                            'FreeLibrary',
                                                                                            'CloseHandle',
                                                                                            'ResetEvent',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenEventW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PostQuitMessage',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'rand_s',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcstok',
                                                                                            '_wcsnicmp',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'InternetGetCookieExW',
                                                                                            'InternetSetCookieExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 208032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 208384,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a36b63b8d88b0b23937627dfd967203652cc29f4ad787e4f5867005f8e25a1e5'},
 'a372f66c631f9ca7e5d175f013af0b9bca952957e85bd63be8ec02077a888b65': {'AddressOfEntryPoint': 37456,
                                                                      'DebugRVA': 12832,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': '__iob_func'},
                                                                      'ImportedFunctions': ['AddAccessAllowedAce',
                                                                                            'AddAccessDeniedAce',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'LookupAccountNameA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'GetStdHandle',
                                                                                            'SearchPathA',
                                                                                            'CreateFileA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetOverlappedResult',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'lstrlenA',
                                                                                            'GetComputerNameA',
                                                                                            'FillConsoleOutputAttribute',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetConsoleTitleA',
                                                                                            'SetConsoleTitleA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'DuplicateHandle',
                                                                                            'SetLastError',
                                                                                            'ConnectNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'HeapCreate',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'CancelIo',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'SleepEx',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CreateEventA',
                                                                                            'SetWaitableTimer',
                                                                                            'CancelWaitableTimer',
                                                                                            'GetCurrentProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetVersionExA',
                                                                                            'CreateWaitableTimerA',
                                                                                            'CreateNamedPipeA',
                                                                                            'GetNamedPipeHandleStateA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReadFileEx',
                                                                                            'WriteFileEx',
                                                                                            'FlushFileBuffers',
                                                                                            'OutputDebugStringA',
                                                                                            'CreateMutexA',
                                                                                            'GetCurrentProcessId',
                                                                                            'FormatMessageA',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateFileW',
                                                                                            'FindNextFileA',
                                                                                            'GetFileSize',
                                                                                            'GetProcessHeap',
                                                                                            'TerminateProcess',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'GetPriorityClass',
                                                                                            'GetModuleHandleA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GenerateConsoleCtrlEvent',
                                                                                            'WaitNamedPipeA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'malloc',
                                                                                            'realloc',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'puts',
                                                                                            '_vsnprintf',
                                                                                            '_beginthreadex',
                                                                                            'memmove',
                                                                                            'sprintf',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'free',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            'getenv',
                                                                                            'atoi',
                                                                                            'exit',
                                                                                            '_snprintf',
                                                                                            'fputs',
                                                                                            'printf',
                                                                                            'fprintf',
                                                                                            'fgets',
                                                                                            'fflush',
                                                                                            'feof',
                                                                                            'strstr',
                                                                                            'strncpy',
                                                                                            '_strlwr',
                                                                                            'strchr',
                                                                                            '_memicmp',
                                                                                            'isalnum',
                                                                                            'strncat',
                                                                                            '__iob_func',
                                                                                            'GetActiveWindow',
                                                                                            'wsprintfA',
                                                                                            'EnumWindows',
                                                                                            'GetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'NetWkstaGetInfo',
                                                                                            'NetApiBufferFree'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 142,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 4152,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 36864},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a372f66c631f9ca7e5d175f013af0b9bca952957e85bd63be8ec02077a888b65'},
 'a3bb39a8e9ac6177ca65a54279049b12666a8631a995ecc79a59be1d4e539c85': {'AddressOfEntryPoint': 253932,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 303104,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ReportEventW',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SETUPAPI.dll': 'SetupIterateCabinetW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VSSAPI.DLL': 'VssFreeSnapshotPropertiesInternal',
                                                                                      'WINBRAND.dll': 'BrandingFormatString',
                                                                                      'api-ms-win-security-lsalookup-l1-1-1.dll': 'LookupAccountSidLocalW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['ExpandEnvironmentStringsW',
                                                                                            'GetFullPathNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'GetComputerNameW',
                                                                                            'CreateFileA',
                                                                                            'SetFilePointer',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTempPathW',
                                                                                            'LocalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetThreadUILanguage',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetDateFormatW',
                                                                                            'DeviceIoControl',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetTempFileNameW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'GetCurrentThread',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetVolumePathNameW',
                                                                                            'FindClose',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GlobalFree',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetTimeFormatW',
                                                                                            'GetFileType',
                                                                                            'GetThreadLocale',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'OutputDebugStringA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'setvbuf',
                                                                                            'wcscspn',
                                                                                            'setlocale',
                                                                                            'wcsspn',
                                                                                            'mbstowcs_s',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_iob',
                                                                                            'wcschr',
                                                                                            'malloc',
                                                                                            '_wtoi',
                                                                                            'wcstok',
                                                                                            'wcsftime',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'memcmp',
                                                                                            'localtime',
                                                                                            'time',
                                                                                            '_wcsnicmp',
                                                                                            'realloc',
                                                                                            'free',
                                                                                            'wcsncmp',
                                                                                            'iswalpha',
                                                                                            'wcspbrk',
                                                                                            '_wcsicmp',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '_vsnprintf',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'memcpy_s',
                                                                                            '_vsnwprintf',
                                                                                            '__set_app_type',
                                                                                            'memset',
                                                                                            'BrandingFormatString',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'GetErrorInfo',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'SetupIterateCabinetW',
                                                                                            'ShouldBlockRevertInternal',
                                                                                            'CreateVssBackupComponentsInternal',
                                                                                            'VssFreeSnapshotPropertiesInternal',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegisterEventSourceW',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'DeregisterEventSource',
                                                                                            'ReportEventW',
                                                                                            'LoadStringW',
                                                                                            'LookupAccountSidLocalW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 147,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 17920,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 292864},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a3bb39a8e9ac6177ca65a54279049b12666a8631a995ecc79a59be1d4e539c85'},
 'a427cb7a0b453e547318f271d7517a1cb8923b631f5b489d09a538ddc002c95f': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 22000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 22016,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a427cb7a0b453e547318f271d7517a1cb8923b631f5b489d09a538ddc002c95f'},
 'a43ee96f9876ff2836b5096d1cb5c864d7b46d478b6fc544b3eae12db81c5ee4': {'AddressOfEntryPoint': 18430,
                                                                      'DebugRVA': 4608,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'CRYPT32.dll': 'CryptProtectData',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'OLEAUT32.dll': 'VariantTimeToSystemTime',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameW'},
                                                                      'ImportedFunctions': ['GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapFree',
                                                                                            'EnterCriticalSection',
                                                                                            'GetVersion',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'RtlUnwind',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapSize',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleW',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileW',
                                                                                            'RaiseException',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemTime',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessHeap',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'CryptUnprotectData',
                                                                                            'CryptProtectData',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathAppendW',
                                                                                            'PathFindFileNameW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 88,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1492,
                                                                      'SectionNames': {'.data\x00\x00\x00': 22528,
                                                                                       '.reloc\x00\x00': 16384,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 120320},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a43ee96f9876ff2836b5096d1cb5c864d7b46d478b6fc544b3eae12db81c5ee4'},
 'a4532438eaa9ffd439605cc40956892d5790128c1f3484e73ff3258f66550049': {'AddressOfEntryPoint': 1062979,
                                                                      'DebugRVA': 1076464,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1069056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'CommDlgExtendedError',
                                                                                      'GDI32.dll': 'TextOutA',
                                                                                      'KERNEL32.dll': 'GlobalMemoryStatusEx',
                                                                                      'MSVCR120.dll': 'printf',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'DispatchMessageA',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WSOCK32.dll': 'WSAStartup',
                                                                                      'WinSparkle.dll': 'win_sparkle_init',
                                                                                      'libcairo-2.dll': 'cairo_clip',
                                                                                      'libgdk-win32-2.0-0.dll': 'gdk_window_get_pointer',
                                                                                      'libgdk_pixbuf-2.0-0.dll': 'gdk_pixbuf_new_from_inline',
                                                                                      'libglib-2.0-0.dll': 'g_ascii_strcasecmp',
                                                                                      'libgmodule-2.0-0.dll': 'g_module_symbol',
                                                                                      'libgobject-2.0-0.dll': 'g_signal_connect_data',
                                                                                      'libgtk-win32-2.0-0.dll': 'gtk_frame_set_label',
                                                                                      'libpango-1.0-0.dll': 'pango_font_description_get_size',
                                                                                      'libpangocairo-1.0-0.dll': 'pango_cairo_show_layout',
                                                                                      'libwireshark.dll': 'proto_registrar_get_abbrev',
                                                                                      'libwiretap.dll': 'wtap_buf_ptr',
                                                                                      'libwscodecs.dll': 'register_all_codecs',
                                                                                      'libwsutil.dll': 'crc32c_calculate',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['VerSetConditionMask',
                                                                                            'GetVersionExW',
                                                                                            'lstrlenW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'ReadFile',
                                                                                            'TerminateProcess',
                                                                                            'CreateNamedPipeW',
                                                                                            'PeekNamedPipe',
                                                                                            'GlobalFree',
                                                                                            'GetLastError',
                                                                                            'GlobalUnlock',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'CloseHandle',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GlobalLock',
                                                                                            'AllocConsole',
                                                                                            'SetConsoleTitleA',
                                                                                            'AttachConsole',
                                                                                            'FreeConsole',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetOverlappedResult',
                                                                                            'ConnectNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'CreatePipe',
                                                                                            'GlobalHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcessId',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'GetVersionExA',
                                                                                            'SetThreadPriority',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GlobalAlloc',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetExitCodeProcess',
                                                                                            'FlushFileBuffers',
                                                                                            'IsDebuggerPresent',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetParent',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetFocus',
                                                                                            'TranslateMessage',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'MessageBoxA',
                                                                                            'PeekMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'SetAbortProc',
                                                                                            'EndPage',
                                                                                            'StartPage',
                                                                                            'EndDoc',
                                                                                            'StartDocA',
                                                                                            'GetTextMetricsA',
                                                                                            'SetMapMode',
                                                                                            'DeleteDC',
                                                                                            'GetDeviceCaps',
                                                                                            'TextOutA',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'PrintDlgA',
                                                                                            'CommDlgExtendedError',
                                                                                            'g_mutex_init',
                                                                                            'g_thread_new',
                                                                                            'g_strndup',
                                                                                            'g_io_channel_unix_new',
                                                                                            'g_io_channel_set_encoding',
                                                                                            'g_io_add_watch',
                                                                                            'g_mutex_lock',
                                                                                            'g_locale_from_utf8',
                                                                                            'g_strv_length',
                                                                                            'g_regex_split_simple',
                                                                                            'g_string_chunk_clear',
                                                                                            'g_ascii_strtod',
                                                                                            'g_random_int',
                                                                                            'g_mutex_unlock',
                                                                                            'g_cond_init',
                                                                                            'g_cond_wait',
                                                                                            'g_cond_signal',
                                                                                            'g_list_free_1',
                                                                                            'g_hash_table_new',
                                                                                            'g_slist_free',
                                                                                            'g_hash_table_foreach',
                                                                                            'g_slist_nth',
                                                                                            'g_slist_delete_link',
                                                                                            'g_utf8_offset_to_pointer',
                                                                                            'g_unichar_to_utf8',
                                                                                            'g_slist_foreach',
                                                                                            'g_strrstr',
                                                                                            'g_strcanon',
                                                                                            'g_try_realloc',
                                                                                            'g_try_malloc',
                                                                                            'g_filename_display_name',
                                                                                            'g_string_append_len',
                                                                                            'g_node_traverse',
                                                                                            'g_node_insert_before',
                                                                                            'g_node_destroy',
                                                                                            'g_node_new',
                                                                                            'g_queue_unlink',
                                                                                            'g_queue_insert_before',
                                                                                            'g_queue_clear',
                                                                                            'g_queue_sort',
                                                                                            'g_queue_foreach',
                                                                                            'g_queue_free_full',
                                                                                            'g_queue_free',
                                                                                            'g_utf8_substring',
                                                                                            'g_int_hash',
                                                                                            'g_int_equal',
                                                                                            'g_log_default_handler',
                                                                                            'g_log_set_handler',
                                                                                            'g_list_insert',
                                                                                            'g_hash_table_remove',
                                                                                            'g_rand_int_range',
                                                                                            'g_rand_free',
                                                                                            'g_rand_new',
                                                                                            'g_list_concat',
                                                                                            'g_timeout_add_full',
                                                                                            'g_get_monotonic_time',
                                                                                            'g_ptr_array_sort_with_data',
                                                                                            'g_strchomp',
                                                                                            'g_strchug',
                                                                                            'g_str_has_prefix',
                                                                                            'g_strdelimit',
                                                                                            'g_hash_table_lookup_extended',
                                                                                            'g_list_insert_sorted',
                                                                                            'g_error_free',
                                                                                            'g_memdup',
                                                                                            'g_string_chunk_insert_const',
                                                                                            'g_string_chunk_free',
                                                                                            'g_string_chunk_new',
                                                                                            'g_array_set_size',
                                                                                            'g_strlcat',
                                                                                            'g_string_equal',
                                                                                            'g_byte_array_free',
                                                                                            'g_byte_array_new',
                                                                                            'g_slist_insert',
                                                                                            'g_slist_prepend',
                                                                                            'g_strerror',
                                                                                            'g_get_current_dir_utf8',
                                                                                            'g_path_is_absolute',
                                                                                            'g_idle_add',
                                                                                            'g_list_index',
                                                                                            'g_free',
                                                                                            'g_hash_table_new_full',
                                                                                            'g_hash_table_destroy',
                                                                                            'g_direct_hash',
                                                                                            'g_direct_equal',
                                                                                            'g_snprintf',
                                                                                            'g_log',
                                                                                            'g_strdup_printf',
                                                                                            'g_array_new',
                                                                                            'g_array_append_vals',
                                                                                            'g_array_remove_index',
                                                                                            'g_list_free',
                                                                                            'g_main_context_iteration',
                                                                                            'g_locale_to_utf8',
                                                                                            'g_slice_alloc',
                                                                                            'g_slist_reverse',
                                                                                            'g_intern_static_string',
                                                                                            'g_slice_free1',
                                                                                            'g_ptr_array_remove_index_fast',
                                                                                            'g_slist_nth_data',
                                                                                            'g_file_test_utf8',
                                                                                            'g_build_filename',
                                                                                            'g_node_children_foreach',
                                                                                            'g_slist_insert_sorted',
                                                                                            'g_byte_array_set_size',
                                                                                            'g_byte_array_append',
                                                                                            'g_queue_get_length',
                                                                                            'g_queue_new',
                                                                                            'g_print',
                                                                                            'g_queue_peek_nth_link',
                                                                                            'g_queue_push_tail',
                                                                                            'g_sequence_iter_prev',
                                                                                            'g_sequence_iter_is_end',
                                                                                            'g_sequence_iter_is_begin',
                                                                                            'g_sequence_get',
                                                                                            'g_sequence_search',
                                                                                            'g_sequence_insert_sorted',
                                                                                            'g_sequence_free',
                                                                                            'g_sequence_new',
                                                                                            'g_filename_to_uri_utf8',
                                                                                            'g_slist_length',
                                                                                            'g_get_tmp_dir',
                                                                                            'g_string_assign',
                                                                                            'g_str_has_suffix',
                                                                                            'g_utf8_strdown',
                                                                                            'g_markup_escape_text',
                                                                                            'g_string_erase',
                                                                                            'g_string_prepend',
                                                                                            'g_strlcpy',
                                                                                            'g_strdup_vprintf',
                                                                                            'g_string_vprintf',
                                                                                            'g_string_overwrite',
                                                                                            'g_utf8_validate',
                                                                                            'g_utf8_strlen',
                                                                                            'g_slist_remove',
                                                                                            'g_slist_append',
                                                                                            'g_timeout_add',
                                                                                            'g_string_truncate',
                                                                                            'g_utf16_to_utf8',
                                                                                            'g_strescape',
                                                                                            'g_string_sized_new',
                                                                                            'g_utf8_to_utf16',
                                                                                            'g_setenv_utf8',
                                                                                            'g_getenv_utf8',
                                                                                            'g_ascii_strtoll',
                                                                                            'g_ascii_strtoull',
                                                                                            'g_strtod',
                                                                                            'g_strstr_len',
                                                                                            'g_match_info_fetch',
                                                                                            'g_match_info_matches',
                                                                                            'g_match_info_next',
                                                                                            'g_match_info_free',
                                                                                            'g_regex_match_simple',
                                                                                            'g_strconcat',
                                                                                            'g_ascii_strdown',
                                                                                            'g_regex_replace',
                                                                                            'g_regex_unref',
                                                                                            'g_regex_new',
                                                                                            'g_string_printf',
                                                                                            'g_child_watch_add',
                                                                                            'g_source_remove',
                                                                                            'g_str_hash',
                                                                                            'g_str_equal',
                                                                                            'g_hash_table_get_keys',
                                                                                            'g_hash_table_size',
                                                                                            'g_hash_table_foreach_remove',
                                                                                            'g_hash_table_lookup',
                                                                                            'g_hash_table_remove_all',
                                                                                            'g_hash_table_insert',
                                                                                            'g_list_delete_link',
                                                                                            'g_malloc0_n',
                                                                                            'g_path_get_basename',
                                                                                            'g_ptr_array_foreach',
                                                                                            'g_ptr_array_add',
                                                                                            'g_ptr_array_free',
                                                                                            'g_ptr_array_new',
                                                                                            'g_array_insert_vals',
                                                                                            'g_strfreev',
                                                                                            'g_strjoinv',
                                                                                            'g_strsplit',
                                                                                            'g_string_append_printf',
                                                                                            'g_string_append',
                                                                                            'g_list_length',
                                                                                            'g_list_last',
                                                                                            'g_list_remove_link',
                                                                                            'g_string_insert_c',
                                                                                            'g_string_free',
                                                                                            'g_string_new',
                                                                                            'g_list_sort',
                                                                                            'g_list_find_custom',
                                                                                            'g_list_append',
                                                                                            'g_dir_read_name_utf8',
                                                                                            'g_dir_open_utf8',
                                                                                            'g_dir_close',
                                                                                            'g_tree_lookup',
                                                                                            'g_tree_replace',
                                                                                            'g_tree_insert',
                                                                                            'g_tree_destroy',
                                                                                            'g_tree_new_full',
                                                                                            'g_timer_elapsed',
                                                                                            'g_timer_start',
                                                                                            'g_timer_destroy',
                                                                                            'g_timer_new',
                                                                                            'g_strcmp0',
                                                                                            'g_ascii_toupper',
                                                                                            'g_match_info_fetch_pos',
                                                                                            'g_regex_match_full',
                                                                                            'g_regex_match',
                                                                                            'g_get_current_time',
                                                                                            'g_list_nth',
                                                                                            'g_list_remove',
                                                                                            'g_list_prepend',
                                                                                            'g_malloc_n',
                                                                                            'g_realloc',
                                                                                            'g_malloc0',
                                                                                            'g_malloc',
                                                                                            'g_filename_display_basename',
                                                                                            'g_array_free',
                                                                                            'g_array_sized_new',
                                                                                            'g_ascii_table',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_strdup',
                                                                                            'g_ascii_strncasecmp',
                                                                                            'g_string_insert',
                                                                                            'g_hash_table_unref',
                                                                                            'g_hash_table_ref',
                                                                                            'g_list_nth_data',
                                                                                            'g_list_foreach',
                                                                                            'g_list_first',
                                                                                            'g_spawn_close_pid',
                                                                                            'g_ascii_strcasecmp',
                                                                                            'g_object_set_data',
                                                                                            'g_object_ref',
                                                                                            'g_signal_handler_block',
                                                                                            'g_object_unref',
                                                                                            'g_type_check_instance_is_a',
                                                                                            'g_signal_emit_by_name',
                                                                                            'g_signal_handlers_block_matched',
                                                                                            'g_signal_handlers_unblock_matched',
                                                                                            'g_signal_stop_emission_by_name',
                                                                                            'g_object_new',
                                                                                            'g_type_class_peek_parent',
                                                                                            'g_type_register_static',
                                                                                            'g_type_add_interface_static',
                                                                                            'g_value_init',
                                                                                            'g_object_set',
                                                                                            'g_value_set_pointer',
                                                                                            'g_value_unset',
                                                                                            'g_value_get_string',
                                                                                            'g_signal_handler_unblock',
                                                                                            'g_signal_handlers_disconnect_matched',
                                                                                            'g_object_get',
                                                                                            'g_signal_handler_disconnect',
                                                                                            'g_signal_handler_is_connected',
                                                                                            'g_value_take_string',
                                                                                            'g_type_check_class_cast',
                                                                                            'g_value_peek_pointer',
                                                                                            'g_signal_new',
                                                                                            'g_object_ref_sink',
                                                                                            'g_value_get_object',
                                                                                            'g_object_get_data',
                                                                                            'g_value_set_string',
                                                                                            'g_type_check_instance_cast',
                                                                                            'g_signal_connect_data',
                                                                                            'g_module_close',
                                                                                            'g_module_symbol',
                                                                                            'gdk_pixbuf_get_type',
                                                                                            'gdk_pixbuf_format_is_writable',
                                                                                            'gdk_pixbuf_format_get_name',
                                                                                            'gdk_pixbuf_get_formats',
                                                                                            'gdk_pixbuf_save_utf8',
                                                                                            'gdk_pixbuf_new_from_xpm_data',
                                                                                            'gdk_pixbuf_new',
                                                                                            'gdk_pixbuf_get_rowstride',
                                                                                            'gdk_pixbuf_get_pixels',
                                                                                            'gdk_pixbuf_get_has_alpha',
                                                                                            'gdk_pixbuf_new_from_inline',
                                                                                            'cairo_set_tolerance',
                                                                                            'cairo_create',
                                                                                            'cairo_destroy',
                                                                                            'cairo_set_operator',
                                                                                            'cairo_set_source_surface',
                                                                                            'cairo_paint',
                                                                                            'cairo_surface_destroy',
                                                                                            'cairo_surface_status',
                                                                                            'cairo_surface_get_content',
                                                                                            'cairo_surface_flush',
                                                                                            'cairo_image_surface_create',
                                                                                            'cairo_image_surface_get_data',
                                                                                            'cairo_image_surface_get_stride',
                                                                                            'cairo_set_source_rgb',
                                                                                            'cairo_set_line_width',
                                                                                            'cairo_move_to',
                                                                                            'cairo_line_to',
                                                                                            'cairo_rectangle',
                                                                                            'cairo_stroke',
                                                                                            'cairo_fill',
                                                                                            'cairo_arc',
                                                                                            'cairo_save',
                                                                                            'cairo_restore',
                                                                                            'cairo_close_path',
                                                                                            'cairo_translate',
                                                                                            'cairo_pattern_set_extend',
                                                                                            'cairo_get_source',
                                                                                            'cairo_scale',
                                                                                            'cairo_set_dash',
                                                                                            'cairo_set_line_cap',
                                                                                            'cairo_clip',
                                                                                            'pango_layout_get_pixel_size',
                                                                                            'pango_font_description_free',
                                                                                            'pango_layout_set_ellipsize',
                                                                                            'pango_layout_set_width',
                                                                                            'pango_layout_set_font_description',
                                                                                            'pango_layout_get_context',
                                                                                            'pango_context_get_font_description',
                                                                                            'pango_font_description_set_size',
                                                                                            'pango_shape',
                                                                                            'pango_glyph_string_x_to_index',
                                                                                            'pango_glyph_string_get_width',
                                                                                            'pango_glyph_string_free',
                                                                                            'pango_glyph_string_new',
                                                                                            'pango_itemize',
                                                                                            'pango_context_get_language',
                                                                                            'pango_context_get_metrics',
                                                                                            'pango_item_free',
                                                                                            'pango_attr_iterator_destroy',
                                                                                            'pango_attr_list_get_iterator',
                                                                                            'pango_attr_list_insert_before',
                                                                                            'pango_attr_list_unref',
                                                                                            'pango_attr_list_new',
                                                                                            'pango_attr_font_desc_new',
                                                                                            'pango_font_metrics_get_descent',
                                                                                            'pango_font_metrics_get_ascent',
                                                                                            'pango_font_metrics_unref',
                                                                                            'pango_font_description_set_weight',
                                                                                            'pango_font_description_copy',
                                                                                            'pango_layout_set_text',
                                                                                            'pango_context_load_font',
                                                                                            'pango_font_description_from_string',
                                                                                            'pango_font_description_get_size',
                                                                                            'pango_cairo_show_glyph_string',
                                                                                            'pango_cairo_show_layout',
                                                                                            'gdk_flush',
                                                                                            'gdk_window_get_state',
                                                                                            'gdk_window_raise',
                                                                                            'gdk_window_invalidate_rect',
                                                                                            'gdk_screen_get_n_monitors',
                                                                                            'gdk_screen_get_monitor_geometry',
                                                                                            'gdk_screen_get_monitor_at_point',
                                                                                            'gdk_screen_get_default',
                                                                                            'gdk_cairo_set_source_color',
                                                                                            'gdk_window_get_width',
                                                                                            'gdk_window_get_height',
                                                                                            'gdk_window_show',
                                                                                            'gdk_window_get_root_origin',
                                                                                            'gdk_window_maximize',
                                                                                            'gdk_window_unmaximize',
                                                                                            'gdk_window_set_transient_for',
                                                                                            'gdk_keyval_to_unicode',
                                                                                            'gdk_window_get_origin',
                                                                                            'gdk_win32_drawable_get_handle',
                                                                                            'gdk_color_to_string',
                                                                                            'gdk_cairo_create',
                                                                                            'gdk_window_create_similar_surface',
                                                                                            'gdk_cursor_new',
                                                                                            'gdk_cursor_unref',
                                                                                            'gdk_events_pending',
                                                                                            'gdk_event_get',
                                                                                            'gdk_event_free',
                                                                                            'gdk_cairo_region',
                                                                                            'gdk_window_new',
                                                                                            'gdk_window_move_resize',
                                                                                            'gdk_window_set_user_data',
                                                                                            'gdk_window_set_cursor',
                                                                                            'gdk_window_set_back_pixmap',
                                                                                            'gdk_cairo_set_source_pixbuf',
                                                                                            'gdk_window_get_pointer',
                                                                                            'gtk_combo_box_get_active',
                                                                                            'gtk_combo_box_set_active',
                                                                                            'gtk_combo_box_text_get_type',
                                                                                            'gtk_combo_box_text_new',
                                                                                            'gtk_combo_box_text_append_text',
                                                                                            'gtk_tooltip_set_markup',
                                                                                            'gtk_notebook_get_type',
                                                                                            'gtk_notebook_remove_page',
                                                                                            'gtk_notebook_get_nth_page',
                                                                                            'gtk_table_attach_defaults',
                                                                                            'gtk_text_buffer_get_char_count',
                                                                                            'gtk_text_buffer_insert_at_cursor',
                                                                                            'gtk_tree_selection_get_selected',
                                                                                            'gtk_tree_selection_select_iter',
                                                                                            'gtk_widget_size_request',
                                                                                            'gtk_window_set_destroy_with_parent',
                                                                                            'gtk_toggle_button_set_active',
                                                                                            'gtk_radio_button_get_type',
                                                                                            'gtk_radio_button_new_with_label_from_widget',
                                                                                            'gtk_scrolled_window_get_type',
                                                                                            'gtk_scrolled_window_new',
                                                                                            'gtk_scrolled_window_set_policy',
                                                                                            'gtk_scrolled_window_add_with_viewport',
                                                                                            'gtk_rc_parse_utf8',
                                                                                            'gtk_widget_is_focus',
                                                                                            'gtk_widget_set_name',
                                                                                            'gtk_widget_get_visible',
                                                                                            'gtk_tree_view_column_set_cell_data_func',
                                                                                            'gtk_bin_get_child',
                                                                                            'gtk_window_add_accel_group',
                                                                                            'gtk_window_set_position',
                                                                                            'gtk_window_set_icon_list',
                                                                                            'gtk_editable_get_type',
                                                                                            'gtk_editable_get_chars',
                                                                                            'gtk_editable_set_position',
                                                                                            'gtk_tree_view_expand_row',
                                                                                            'gtk_paned_add1',
                                                                                            'gtk_paned_add2',
                                                                                            'gtk_init_abi_check',
                                                                                            'gtk_main',
                                                                                            'gtk_main_quit',
                                                                                            'gtk_widget_get_toplevel',
                                                                                            'gtk_dialog_set_alternative_button_order',
                                                                                            'gtk_file_chooser_get_type',
                                                                                            'gtk_file_chooser_set_do_overwrite_confirmation',
                                                                                            'gtk_file_chooser_get_filename_utf8',
                                                                                            'gtk_file_chooser_set_current_folder_utf8',
                                                                                            'gtk_file_chooser_set_extra_widget',
                                                                                            'gtk_file_chooser_dialog_new',
                                                                                            'gtk_widget_get_style',
                                                                                            'gtk_window_set_default_size',
                                                                                            'gtk_dialog_add_button',
                                                                                            'gtk_dialog_set_default_response',
                                                                                            'gtk_tree_view_column_new_with_attributes',
                                                                                            'gtk_list_store_get_type',
                                                                                            'gtk_list_store_new',
                                                                                            'gtk_list_store_set',
                                                                                            'gtk_list_store_remove',
                                                                                            'gtk_list_store_insert_before',
                                                                                            'gtk_list_store_insert_after',
                                                                                            'gtk_list_store_prepend',
                                                                                            'gtk_list_store_append',
                                                                                            'gtk_tree_view_set_headers_visible',
                                                                                            'gtk_tree_view_set_headers_clickable',
                                                                                            'gtk_scrolled_window_set_shadow_type',
                                                                                            'gtk_tree_selection_set_mode',
                                                                                            'gtk_tree_selection_selected_foreach',
                                                                                            'gtk_tree_selection_iter_is_selected',
                                                                                            'gtk_tree_selection_unselect_all',
                                                                                            'gtk_widget_activate',
                                                                                            'gtk_widget_set_can_default',
                                                                                            'gtk_container_get_children',
                                                                                            'gtk_button_box_get_type',
                                                                                            'gtk_button_box_set_layout',
                                                                                            'gtk_widget_get_has_window',
                                                                                            'gtk_widget_create_pango_layout',
                                                                                            'gtk_window_new',
                                                                                            'gtk_window_set_decorated',
                                                                                            'gtk_window_present',
                                                                                            'gtk_window_move',
                                                                                            'gtk_window_get_position',
                                                                                            'gtk_frame_get_type',
                                                                                            'gtk_frame_set_label_widget',
                                                                                            'gtk_frame_set_shadow_type',
                                                                                            'gtk_image_new_from_pixbuf',
                                                                                            'gtk_tree_path_to_string',
                                                                                            'gtk_tree_path_copy',
                                                                                            'gtk_tree_path_compare',
                                                                                            'gtk_tree_path_next',
                                                                                            'gtk_tree_path_up',
                                                                                            'gtk_tree_path_down',
                                                                                            'gtk_tree_model_iter_children',
                                                                                            'gtk_tree_model_iter_has_child',
                                                                                            'gtk_tree_model_iter_parent',
                                                                                            'gtk_tree_view_column_get_fixed_width',
                                                                                            'gtk_tree_view_column_set_sort_column_id',
                                                                                            'gtk_cell_layout_pack_start',
                                                                                            'gtk_cell_layout_set_attributes',
                                                                                            'gtk_selection_data_set',
                                                                                            'gtk_clipboard_get',
                                                                                            'gtk_clipboard_set_with_data',
                                                                                            'gtk_clipboard_set_text',
                                                                                            'gtk_vbox_new',
                                                                                            'gtk_list_store_set_valist',
                                                                                            'gtk_list_store_swap',
                                                                                            'gtk_tree_view_new_with_model',
                                                                                            'gtk_tree_view_set_rules_hint',
                                                                                            'gtk_tree_view_collapse_row',
                                                                                            'gtk_tree_view_row_expanded',
                                                                                            'gtk_combo_box_new_with_model',
                                                                                            'gtk_combo_box_get_active_iter',
                                                                                            'gtk_combo_box_set_active_iter',
                                                                                            'gtk_combo_box_get_model',
                                                                                            'gtk_hbox_new',
                                                                                            'gtk_hbutton_box_new',
                                                                                            'gtk_hpaned_new',
                                                                                            'gtk_hscrollbar_new',
                                                                                            'gtk_hseparator_new',
                                                                                            'gtk_main_level',
                                                                                            'gtk_vscrollbar_new',
                                                                                            'gtk_tree_store_get_type',
                                                                                            'gtk_tree_store_new',
                                                                                            'gtk_tree_store_set',
                                                                                            'gtk_tree_store_append',
                                                                                            'gtk_tree_store_clear',
                                                                                            'gtk_vbutton_box_new',
                                                                                            'gtk_vpaned_new',
                                                                                            'gtk_vseparator_new',
                                                                                            'gtk_widget_get_sensitive',
                                                                                            'gtk_list_store_insert_with_values',
                                                                                            'gtk_combo_box_text_remove',
                                                                                            'gtk_combo_box_text_get_active_text',
                                                                                            'gtk_image_new_from_stock',
                                                                                            'gtk_button_new_from_stock',
                                                                                            'gtk_icon_factory_new',
                                                                                            'gtk_icon_factory_add',
                                                                                            'gtk_icon_factory_add_default',
                                                                                            'gtk_icon_factory_lookup_default',
                                                                                            'gtk_icon_set_new_from_pixbuf',
                                                                                            'gtk_icon_set_unref',
                                                                                            'gtk_icon_source_new',
                                                                                            'gtk_icon_source_set_pixbuf',
                                                                                            'gtk_icon_source_set_size_wildcarded',
                                                                                            'gtk_icon_source_set_size',
                                                                                            'gtk_icon_theme_add_builtin_icon',
                                                                                            'gtk_tool_button_new_from_stock',
                                                                                            'gtk_toggle_tool_button_new_from_stock',
                                                                                            'gtk_stock_add',
                                                                                            'gtk_tree_sortable_set_sort_func',
                                                                                            'gtk_check_button_new_with_mnemonic',
                                                                                            'gtk_list_store_clear',
                                                                                            'gtk_tree_view_set_reorderable',
                                                                                            'gtk_tree_view_set_search_column',
                                                                                            'gtk_notebook_new',
                                                                                            'gtk_notebook_append_page',
                                                                                            'gtk_menu_shell_get_type',
                                                                                            'gtk_menu_shell_append',
                                                                                            'gtk_menu_get_type',
                                                                                            'gtk_menu_new',
                                                                                            'gtk_menu_popup',
                                                                                            'gtk_tree_view_column_set_expand',
                                                                                            'gtk_cell_renderer_toggle_new',
                                                                                            'gtk_menu_item_get_type',
                                                                                            'gtk_menu_item_set_submenu',
                                                                                            'gtk_menu_item_set_label',
                                                                                            'gtk_check_menu_item_get_type',
                                                                                            'gtk_check_menu_item_new_with_label',
                                                                                            'gtk_check_menu_item_set_active',
                                                                                            'gtk_editable_select_region',
                                                                                            'gtk_separator_menu_item_new',
                                                                                            'gtk_tree_selection_get_tree_view',
                                                                                            'gtk_accel_group_new',
                                                                                            'gtk_label_get_text',
                                                                                            'gtk_action_get_type',
                                                                                            'gtk_action_set_sensitive',
                                                                                            'gtk_action_get_accel_path',
                                                                                            'gtk_action_get_label',
                                                                                            'gtk_action_group_new',
                                                                                            'gtk_action_group_get_name',
                                                                                            'gtk_action_group_get_action',
                                                                                            'gtk_action_group_add_action',
                                                                                            'gtk_action_group_add_actions',
                                                                                            'gtk_action_group_add_toggle_actions',
                                                                                            'gtk_action_group_add_radio_actions',
                                                                                            'gtk_menu_item_new',
                                                                                            'gtk_menu_item_new_with_label',
                                                                                            'gtk_menu_item_get_submenu',
                                                                                            'gtk_check_menu_item_get_active',
                                                                                            'gtk_image_menu_item_get_type',
                                                                                            'gtk_image_menu_item_new_with_label',
                                                                                            'gtk_image_menu_item_set_image',
                                                                                            'gtk_radio_action_get_current_value',
                                                                                            'gtk_radio_menu_item_get_type',
                                                                                            'gtk_radio_menu_item_new_with_label',
                                                                                            'gtk_radio_menu_item_get_group',
                                                                                            'gtk_ui_manager_new',
                                                                                            'gtk_ui_manager_insert_action_group',
                                                                                            'gtk_ui_manager_remove_action_group',
                                                                                            'gtk_ui_manager_get_action_groups',
                                                                                            'gtk_ui_manager_get_accel_group',
                                                                                            'gtk_ui_manager_get_widget',
                                                                                            'gtk_ui_manager_get_action',
                                                                                            'gtk_ui_manager_add_ui_from_string',
                                                                                            'gtk_ui_manager_add_ui',
                                                                                            'gtk_ui_manager_remove_ui',
                                                                                            'gtk_ui_manager_new_merge_id',
                                                                                            'gtk_text_buffer_set_text',
                                                                                            'gtk_text_buffer_get_text',
                                                                                            'gtk_text_buffer_get_start_iter',
                                                                                            'gtk_text_buffer_get_end_iter',
                                                                                            'gtk_text_view_get_type',
                                                                                            'gtk_text_view_new',
                                                                                            'gtk_text_view_get_buffer',
                                                                                            'gtk_text_view_set_wrap_mode',
                                                                                            'gtk_rc_parse_string',
                                                                                            'gtk_tree_path_get_depth',
                                                                                            'gtk_tree_model_row_inserted',
                                                                                            'gtk_tree_model_rows_reordered',
                                                                                            'gtk_tree_sortable_sort_column_changed',
                                                                                            'gtk_settings_get_default',
                                                                                            'gtk_widget_get_pango_context',
                                                                                            'gtk_adjustment_get_type',
                                                                                            'gtk_adjustment_new',
                                                                                            'gtk_dialog_new_with_buttons',
                                                                                            'gtk_check_button_new',
                                                                                            'gtk_editable_set_editable',
                                                                                            'gtk_spin_button_get_type',
                                                                                            'gtk_spin_button_new',
                                                                                            'gtk_spin_button_get_adjustment',
                                                                                            'gtk_spin_button_get_value',
                                                                                            'gtk_spin_button_set_update_policy',
                                                                                            'gtk_spin_button_set_numeric',
                                                                                            'gtk_widget_get_parent_window',
                                                                                            'gtk_widget_modify_text',
                                                                                            'gtk_widget_modify_base',
                                                                                            'gtk_widget_modify_cursor',
                                                                                            'gtk_window_set_transient_for',
                                                                                            'gtk_window_get_modal',
                                                                                            'gtk_tree_model_get_iter_from_string',
                                                                                            'gtk_tree_model_foreach',
                                                                                            'gtk_widget_get_allocation',
                                                                                            'gtk_editable_insert_text',
                                                                                            'gtk_editable_delete_text',
                                                                                            'gtk_editable_delete_selection',
                                                                                            'gtk_editable_get_position',
                                                                                            'gtk_tree_view_new',
                                                                                            'gtk_tree_view_columns_autosize',
                                                                                            'gtk_tree_view_set_hover_selection',
                                                                                            'gtk_tree_selection_get_type',
                                                                                            'gtk_tree_selection_select_path',
                                                                                            'gtk_tree_selection_unselect_iter',
                                                                                            'gtk_button_new_with_label',
                                                                                            'gtk_text_buffer_insert',
                                                                                            'gtk_text_view_set_cursor_visible',
                                                                                            'gtk_text_view_set_editable',
                                                                                            'gtk_text_view_set_left_margin',
                                                                                            'gtk_text_view_set_right_margin',
                                                                                            'gtk_tree_model_get_value',
                                                                                            'gtk_combo_box_text_new_with_entry',
                                                                                            'gtk_combo_box_text_prepend_text',
                                                                                            'gtk_combo_box_get_type',
                                                                                            'gtk_orientable_get_type',
                                                                                            'gtk_orientable_set_orientation',
                                                                                            'gtk_toolbar_get_type',
                                                                                            'gtk_toolbar_new',
                                                                                            'gtk_toolbar_insert',
                                                                                            'gtk_tool_button_new',
                                                                                            'gtk_widget_realize',
                                                                                            'gtk_toggle_tool_button_get_type',
                                                                                            'gtk_toggle_tool_button_set_active',
                                                                                            'gtk_toggle_tool_button_get_active',
                                                                                            'gtk_separator_tool_item_new',
                                                                                            'gtk_toolbar_set_style',
                                                                                            'gtk_adjustment_set_value',
                                                                                            'gtk_window_set_type_hint',
                                                                                            'gtk_image_get_type',
                                                                                            'gtk_image_get_pixbuf',
                                                                                            'gtk_cell_renderer_get_type',
                                                                                            'gtk_tree_path_new_from_string',
                                                                                            'gtk_tree_model_get_string_from_iter',
                                                                                            'gtk_tree_view_column_set_attributes',
                                                                                            'gtk_tree_view_column_set_alignment',
                                                                                            'gtk_cell_renderer_pixbuf_new',
                                                                                            'gtk_cell_renderer_toggle_get_type',
                                                                                            'gtk_cell_renderer_toggle_set_active',
                                                                                            'gtk_entry_set_visibility',
                                                                                            'gtk_tree_view_insert_column_with_attributes',
                                                                                            'gtk_tree_view_expand_all',
                                                                                            'gtk_combo_box_text_insert_text',
                                                                                            'gtk_radio_button_new_with_label',
                                                                                            'gtk_radio_button_get_group',
                                                                                            'gtk_spin_button_get_value_as_int',
                                                                                            'gtk_spin_button_set_value',
                                                                                            'gtk_spin_button_set_wrap',
                                                                                            'gtk_tree_selection_set_select_function',
                                                                                            'gtk_tree_store_remove',
                                                                                            'gtk_widget_modify_bg',
                                                                                            'gtk_selection_data_get_data',
                                                                                            'gtk_selection_data_get_length',
                                                                                            'gtk_drag_dest_set',
                                                                                            'gtk_dialog_add_buttons',
                                                                                            'gtk_tree_path_new_first',
                                                                                            'gtk_tree_view_column_get_type',
                                                                                            'gtk_tree_view_collapse_all',
                                                                                            'gtk_notebook_get_current_page',
                                                                                            'gtk_notebook_page_num',
                                                                                            'gtk_notebook_set_current_page',
                                                                                            'gtk_notebook_set_show_border',
                                                                                            'gtk_notebook_set_show_tabs',
                                                                                            'gtk_notebook_set_tab_pos',
                                                                                            'gtk_notebook_set_scrollable',
                                                                                            'gtk_notebook_popup_enable',
                                                                                            'gtk_tree_selection_count_selected_rows',
                                                                                            'gtk_widget_set_state',
                                                                                            'gtk_label_set_ellipsize',
                                                                                            'gtk_label_set_width_chars',
                                                                                            'gtk_alignment_new',
                                                                                            'gtk_spin_button_new_with_range',
                                                                                            'gtk_tree_view_column_get_visible',
                                                                                            'gtk_tree_view_column_get_sort_column_id',
                                                                                            'gtk_tree_view_column_clicked',
                                                                                            'gtk_color_selection_get_type',
                                                                                            'gtk_color_selection_set_current_color',
                                                                                            'gtk_color_selection_get_current_color',
                                                                                            'gtk_color_selection_dialog_get_type',
                                                                                            'gtk_color_selection_dialog_new',
                                                                                            'gtk_color_selection_dialog_get_color_selection',
                                                                                            'gtk_tree_store_prepend',
                                                                                            'gtk_radio_button_new_with_mnemonic_from_widget',
                                                                                            'gtk_text_buffer_select_range',
                                                                                            'gtk_text_buffer_get_bounds',
                                                                                            'gtk_text_buffer_copy_clipboard',
                                                                                            'gtk_tree_model_row_changed',
                                                                                            'gtk_tree_store_insert_before',
                                                                                            'gtk_tree_view_column_add_attribute',
                                                                                            'gtk_adjustment_changed',
                                                                                            'gtk_adjustment_value_changed',
                                                                                            'gtk_adjustment_set_upper',
                                                                                            'gtk_adjustment_set_step_increment',
                                                                                            'gtk_adjustment_set_page_increment',
                                                                                            'gtk_adjustment_set_page_size',
                                                                                            'gtk_widget_modify_fg',
                                                                                            'gtk_toggle_button_new_with_label',
                                                                                            'gtk_drawing_area_new',
                                                                                            'gtk_file_chooser_set_current_name',
                                                                                            'gtk_tree_model_get_column_type',
                                                                                            'gtk_tree_selection_get_selected_rows',
                                                                                            'gtk_tree_selection_unselect_path',
                                                                                            'gtk_adjustment_get_page_increment',
                                                                                            'gtk_widget_queue_draw_area',
                                                                                            'gtk_widget_add_events',
                                                                                            'gtk_tree_selection_select_all',
                                                                                            'gtk_text_iter_forward_search',
                                                                                            'gtk_text_buffer_insert_with_tags',
                                                                                            'gtk_text_buffer_create_mark',
                                                                                            'gtk_text_buffer_delete_mark',
                                                                                            'gtk_text_buffer_get_mark',
                                                                                            'gtk_text_buffer_create_tag',
                                                                                            'gtk_text_buffer_get_iter_at_mark',
                                                                                            'gtk_text_view_scroll_mark_onscreen',
                                                                                            'gtk_widget_set_events',
                                                                                            'gtk_action_get_name',
                                                                                            'gtk_tree_sortable_get_sort_column_id',
                                                                                            'gtk_tree_sortable_set_default_sort_func',
                                                                                            'gtk_tree_store_newv',
                                                                                            'gtk_tree_store_set_valuesv',
                                                                                            'gtk_cell_renderer_progress_new',
                                                                                            'gtk_tree_store_insert_with_values',
                                                                                            'gtk_widget_style_get',
                                                                                            'gtk_tree_iter_copy',
                                                                                            'gtk_tree_iter_free',
                                                                                            'gtk_event_box_get_type',
                                                                                            'gtk_event_box_set_visible_window',
                                                                                            'gtk_list_store_newv',
                                                                                            'gtk_file_chooser_set_filename_utf8',
                                                                                            'gtk_file_chooser_button_new',
                                                                                            'gtk_tree_view_set_enable_search',
                                                                                            'gtk_tree_model_sort_new_with_model',
                                                                                            'gtk_label_set_use_markup',
                                                                                            'gtk_alignment_get_type',
                                                                                            'gtk_alignment_set_padding',
                                                                                            'gtk_button_new_with_mnemonic',
                                                                                            'gtk_radio_button_new_with_mnemonic',
                                                                                            'gtk_radio_button_set_group',
                                                                                            'gtk_tree_view_convert_bin_window_to_widget_coords',
                                                                                            'gtk_toggle_button_new_with_mnemonic',
                                                                                            'gtk_tree_path_prepend_index',
                                                                                            'gtk_object_get_type',
                                                                                            'gtk_adjustment_get_lower',
                                                                                            'gtk_adjustment_configure',
                                                                                            'gtk_widget_set_can_focus',
                                                                                            'gtk_widget_set_realized',
                                                                                            'gtk_widget_get_realized',
                                                                                            'gtk_widget_set_window',
                                                                                            'gtk_widget_set_allocation',
                                                                                            'gtk_widget_get_colormap',
                                                                                            'gtk_widget_get_visual',
                                                                                            'gtk_widget_get_events',
                                                                                            'gtk_widget_style_attach',
                                                                                            'gtk_adjustment_get_step_increment',
                                                                                            'gtk_widget_is_drawable',
                                                                                            'gtk_viewport_get_type',
                                                                                            'gtk_viewport_new',
                                                                                            'gtk_viewport_set_shadow_type',
                                                                                            'gtk_scrolled_window_set_hadjustment',
                                                                                            'gtk_scrolled_window_get_hadjustment',
                                                                                            'gtk_scrolled_window_get_vadjustment',
                                                                                            'gtk_text_iter_set_line',
                                                                                            'gtk_color_selection_new',
                                                                                            'gtk_color_selection_set_previous_color',
                                                                                            'gtk_font_button_get_type',
                                                                                            'gtk_font_button_new_with_font',
                                                                                            'gtk_font_button_set_title',
                                                                                            'gtk_font_button_get_font_name',
                                                                                            'gtk_text_tag_table_lookup',
                                                                                            'gtk_text_buffer_get_tag_table',
                                                                                            'gtk_text_buffer_insert_with_tags_by_name',
                                                                                            'gtk_text_view_scroll_to_iter',
                                                                                            'gtk_toggle_button_new',
                                                                                            'gtk_cell_renderer_spin_new',
                                                                                            'gtk_tree_view_column_pack_start',
                                                                                            'gtk_tree_view_column_new',
                                                                                            'gtk_tree_sortable_set_sort_column_id',
                                                                                            'gtk_tree_sortable_get_type',
                                                                                            'gtk_tree_model_get',
                                                                                            'gtk_tree_model_iter_nth_child',
                                                                                            'gtk_tree_model_iter_n_children',
                                                                                            'gtk_tree_model_iter_next',
                                                                                            'gtk_tree_model_get_path',
                                                                                            'gtk_tree_model_get_iter_first',
                                                                                            'gtk_tree_model_get_iter',
                                                                                            'gtk_tree_model_get_n_columns',
                                                                                            'gtk_tree_model_get_type',
                                                                                            'gtk_tree_path_prev',
                                                                                            'gtk_tree_path_free',
                                                                                            'gtk_tree_path_get_indices',
                                                                                            'gtk_tree_path_append_index',
                                                                                            'gtk_tree_path_new_from_indices',
                                                                                            'gtk_tree_path_new',
                                                                                            'gtk_box_pack_end',
                                                                                            'gtk_window_resize',
                                                                                            'gtk_window_set_resizable',
                                                                                            'gtk_window_get_focus',
                                                                                            'gtk_window_set_focus',
                                                                                            'gtk_widget_modify_font',
                                                                                            'gtk_widget_grab_focus',
                                                                                            'gtk_widget_queue_draw',
                                                                                            'gtk_adjustment_get_page_size',
                                                                                            'gtk_adjustment_get_upper',
                                                                                            'gtk_adjustment_get_value',
                                                                                            'gtk_main_iteration',
                                                                                            'gtk_events_pending',
                                                                                            'gtk_misc_set_padding',
                                                                                            'gtk_window_set_title',
                                                                                            'gtk_widget_grab_default',
                                                                                            'gtk_widget_show_all',
                                                                                            'gtk_statusbar_set_has_resize_grip',
                                                                                            'gtk_statusbar_remove',
                                                                                            'gtk_statusbar_pop',
                                                                                            'gtk_statusbar_push',
                                                                                            'gtk_statusbar_get_context_id',
                                                                                            'gtk_statusbar_new',
                                                                                            'gtk_statusbar_get_type',
                                                                                            'gtk_paned_set_position',
                                                                                            'gtk_paned_get_position',
                                                                                            'gtk_paned_pack2',
                                                                                            'gtk_paned_pack1',
                                                                                            'gtk_paned_get_type',
                                                                                            'gtk_event_box_new',
                                                                                            'gtk_drag_unhighlight',
                                                                                            'gtk_drag_highlight',
                                                                                            'gtk_container_foreach',
                                                                                            'gtk_container_remove',
                                                                                            'gtk_widget_set_sensitive',
                                                                                            'gtk_widget_hide',
                                                                                            'gtk_message_dialog_format_secondary_text',
                                                                                            'gtk_message_dialog_new',
                                                                                            'gtk_message_dialog_get_type',
                                                                                            'gtk_check_button_new_with_label',
                                                                                            'gtk_toggle_button_get_active',
                                                                                            'gtk_toggle_button_get_type',
                                                                                            'gtk_button_set_label',
                                                                                            'gtk_button_get_type',
                                                                                            'gtk_box_set_spacing',
                                                                                            'gtk_label_set_selectable',
                                                                                            'gtk_label_set_line_wrap',
                                                                                            'gtk_label_set_justify',
                                                                                            'gtk_label_set_markup',
                                                                                            'gtk_dialog_get_content_area',
                                                                                            'gtk_dialog_run',
                                                                                            'gtk_dialog_get_type',
                                                                                            'gtk_window_set_modal',
                                                                                            'gtk_window_get_type',
                                                                                            'gtk_widget_get_settings',
                                                                                            'gtk_widget_get_window',
                                                                                            'gtk_widget_destroy',
                                                                                            'gtk_table_set_homogeneous',
                                                                                            'gtk_table_set_col_spacings',
                                                                                            'gtk_table_set_row_spacings',
                                                                                            'gtk_table_attach',
                                                                                            'gtk_table_new',
                                                                                            'gtk_table_get_type',
                                                                                            'gtk_progress_bar_set_fraction',
                                                                                            'gtk_progress_bar_new',
                                                                                            'gtk_progress_bar_get_type',
                                                                                            'gtk_grab_remove',
                                                                                            'gtk_box_pack_start',
                                                                                            'gtk_box_get_type',
                                                                                            'gtk_frame_new',
                                                                                            'gtk_label_set_text',
                                                                                            'gtk_label_new',
                                                                                            'gtk_label_get_type',
                                                                                            'gtk_misc_set_alignment',
                                                                                            'gtk_misc_get_type',
                                                                                            'gtk_container_add',
                                                                                            'gtk_container_set_border_width',
                                                                                            'gtk_container_get_type',
                                                                                            'gtk_widget_set_tooltip_text',
                                                                                            'gtk_widget_set_size_request',
                                                                                            'gtk_widget_show',
                                                                                            'gtk_widget_get_type',
                                                                                            'gtk_tree_view_get_tooltip_context',
                                                                                            'gtk_tree_view_set_tooltip_cell',
                                                                                            'gtk_tree_view_set_fixed_height_mode',
                                                                                            'gtk_tree_view_get_path_at_pos',
                                                                                            'gtk_tree_view_set_cursor',
                                                                                            'gtk_tree_view_scroll_to_cell',
                                                                                            'gtk_tree_view_get_columns',
                                                                                            'gtk_tree_view_get_column',
                                                                                            'gtk_tree_view_append_column',
                                                                                            'gtk_tree_view_get_vadjustment',
                                                                                            'gtk_tree_view_get_selection',
                                                                                            'gtk_tree_view_set_model',
                                                                                            'gtk_tree_view_get_model',
                                                                                            'gtk_tree_view_get_type',
                                                                                            'gtk_entry_get_text',
                                                                                            'gtk_entry_set_text',
                                                                                            'gtk_entry_set_max_length',
                                                                                            'gtk_entry_new',
                                                                                            'gtk_entry_get_type',
                                                                                            'gtk_cell_renderer_text_new',
                                                                                            'gtk_cell_layout_get_cells',
                                                                                            'gtk_cell_layout_get_type',
                                                                                            'gtk_tree_view_column_get_sort_order',
                                                                                            'gtk_tree_view_column_set_sort_order',
                                                                                            'gtk_tree_view_column_get_sort_indicator',
                                                                                            'gtk_tree_view_column_set_sort_indicator',
                                                                                            'gtk_tree_view_column_set_reorderable',
                                                                                            'gtk_tree_view_column_set_clickable',
                                                                                            'gtk_tree_view_column_get_title',
                                                                                            'gtk_tree_view_column_set_title',
                                                                                            'gtk_tree_view_column_set_min_width',
                                                                                            'gtk_tree_view_column_set_fixed_width',
                                                                                            'gtk_tree_view_column_get_width',
                                                                                            'gtk_tree_view_column_set_sizing',
                                                                                            'gtk_tree_view_column_set_resizable',
                                                                                            'gtk_tool_item_new',
                                                                                            'gtk_tree_view_column_set_visible',
                                                                                            'gtk_bin_get_type',
                                                                                            'gtk_frame_set_label',
                                                                                            'codec_register_plugin_types',
                                                                                            'find_codec',
                                                                                            'codec_init',
                                                                                            'codec_release',
                                                                                            'codec_get_channels',
                                                                                            'codec_get_frequency',
                                                                                            'codec_decode',
                                                                                            'register_all_codecs',
                                                                                            'prefs_pref_foreach',
                                                                                            'uat_load',
                                                                                            'uat_add_record',
                                                                                            'uat_clear',
                                                                                            'uat_save',
                                                                                            'uri_str_to_bytes',
                                                                                            'format_uri',
                                                                                            'byte_array_dup',
                                                                                            'byte_array_equal',
                                                                                            'parse_key_string',
                                                                                            'get_key_string',
                                                                                            'free_key_string',
                                                                                            'register_tap_listener',
                                                                                            'set_tap_dfilter',
                                                                                            'remove_tap_listener',
                                                                                            'register_stat_tap_ui',
                                                                                            'try_val_to_str',
                                                                                            'expert_group_vals',
                                                                                            'expert_severity_vals',
                                                                                            'val_to_str_const',
                                                                                            'proto_can_toggle_protocol',
                                                                                            'find_protocol_by_id',
                                                                                            'proto_get_id',
                                                                                            'proto_get_protocol_short_name',
                                                                                            'proto_get_frame_protocols',
                                                                                            'proto_is_frame_protocol',
                                                                                            'proto_all_finfos',
                                                                                            'proto_can_match_selected',
                                                                                            'tmp_color_filters_used',
                                                                                            'prefs_is_registered_protocol',
                                                                                            'prefs_set_string_like_value',
                                                                                            'prefs_set_range_value',
                                                                                            'find_conversation_filter',
                                                                                            'stats_tree_get_cfg_list',
                                                                                            'plugin_if_register_gui_cb',
                                                                                            'ext_menubar_get_entries',
                                                                                            'timestamp_set_precision',
                                                                                            'timestamp_get_seconds_type',
                                                                                            'get_conversation_proto_id',
                                                                                            'conversation_table_iterate_tables',
                                                                                            'conv_filter_list',
                                                                                            'frame_data_compare',
                                                                                            'wmem_alloc',
                                                                                            'wmem_alloc0',
                                                                                            'wmem_file_scope',
                                                                                            'col_fill_in_frame_data',
                                                                                            'col_fill_in_error',
                                                                                            'col_based_on_frame_data',
                                                                                            'color_filters_used',
                                                                                            'color_filters_prime_edt',
                                                                                            'ipv4_get_net_order_addr',
                                                                                            'fvalue_get',
                                                                                            'fvalue_get_sinteger',
                                                                                            'fvalue_get_uinteger64',
                                                                                            'hfinfo_bitshift',
                                                                                            'get_data_source_tvb',
                                                                                            'address_to_str',
                                                                                            'proto_check_field_name',
                                                                                            'dfilter_deprecated_tokens',
                                                                                            'proto_get_first_protocol',
                                                                                            'proto_get_next_protocol',
                                                                                            'proto_get_first_protocol_field',
                                                                                            'proto_get_next_protocol_field',
                                                                                            'proto_is_protocol_enabled',
                                                                                            'proto_get_protocol_filter_name',
                                                                                            'funnel_set_funnel_ops',
                                                                                            'funnel_register_all_menus',
                                                                                            'dfilter_macro_get_uat',
                                                                                            'prefs_capture_device_monitor_mode',
                                                                                            'prefs_capture_options_dialog_column_is_visible',
                                                                                            'tvb_captured_length',
                                                                                            'fvalue_to_string_repr',
                                                                                            'tree_expanded',
                                                                                            'tree_expanded_set',
                                                                                            'proto_find_field_from_offset',
                                                                                            'get_data_source_name',
                                                                                            'num_tree_types',
                                                                                            'oid_get_default_mib_path',
                                                                                            'geoip_db_get_paths',
                                                                                            'register_count',
                                                                                            'wslua_count_plugins',
                                                                                            'filter_expression_new',
                                                                                            'filter_expression_free',
                                                                                            'pfilter_expression_head',
                                                                                            'get_conversation_hide_ports',
                                                                                            'get_conversation_packet_func',
                                                                                            'conversation_table_get_num',
                                                                                            'reset_conversation_table_data',
                                                                                            'dissector_conversation_init',
                                                                                            'get_conversation_address',
                                                                                            'get_conversation_port',
                                                                                            'get_conversation_filter',
                                                                                            'geoip_db_num_dbs',
                                                                                            'geoip_db_name',
                                                                                            'geoip_db_type',
                                                                                            'geoip_db_lookup_ipv4',
                                                                                            'geoip_db_lookup_ipv6',
                                                                                            'get_hostlist_packet_func',
                                                                                            'reset_hostlist_table_data',
                                                                                            'dissector_hostlist_init',
                                                                                            'get_hostlist_filter',
                                                                                            'proto_get_id_by_filter_name',
                                                                                            'get_srt_proto_id',
                                                                                            'get_srt_tap_listener_name',
                                                                                            'get_srt_max_tables',
                                                                                            'get_srt_packet_func',
                                                                                            'get_srt_table_by_name',
                                                                                            'free_srt_table',
                                                                                            'reset_srt_table',
                                                                                            'srt_table_get_filter',
                                                                                            'srt_table_dissector_init',
                                                                                            'srt_table_get_tap_string',
                                                                                            'val_to_str_wmem',
                                                                                            'get_average',
                                                                                            'get_rtd_proto_id',
                                                                                            'get_rtd_tap_listener_name',
                                                                                            'get_rtd_packet_func',
                                                                                            'get_rtd_value_string',
                                                                                            'get_rtd_table_by_name',
                                                                                            'free_rtd_table',
                                                                                            'reset_rtd_table',
                                                                                            'rtd_table_get_filter',
                                                                                            'rtd_table_dissector_init',
                                                                                            'rtd_table_get_tap_string',
                                                                                            'new_stat_tap_get_filter',
                                                                                            'new_stat_tap_get_field_data',
                                                                                            'reset_stat_table',
                                                                                            'free_stat_tables',
                                                                                            'escape_string_len',
                                                                                            'escape_string',
                                                                                            'convert_string_to_hex',
                                                                                            'wmem_strdup_printf',
                                                                                            'bytes_to_str',
                                                                                            'wmem_memdup',
                                                                                            'port_type_to_str',
                                                                                            'set_fd_time',
                                                                                            'dissector_table_foreach',
                                                                                            'rpc_prog_name',
                                                                                            'set_srt_table_param_data',
                                                                                            'rpc_progs',
                                                                                            'col_set_time',
                                                                                            'in_cksum',
                                                                                            'time_stat_init',
                                                                                            'time_stat_update',
                                                                                            'address_to_display',
                                                                                            'address_to_str_buf',
                                                                                            'mtp3_service_indicator_code_short_vals',
                                                                                            'epan_dissect_prime_hfid',
                                                                                            'proto_registrar_get_id_byname',
                                                                                            'proto_get_finfo_ptr_array',
                                                                                            'wmem_strdup',
                                                                                            'val_to_str_ext_wmem',
                                                                                            'rtp_payload_type_short_vals_ext',
                                                                                            'fvalue_get_sinteger64',
                                                                                            'fvalue_get_floating',
                                                                                            'proto_registrar_get_ftype',
                                                                                            'guid_to_str',
                                                                                            'address_to_name',
                                                                                            'get_follow_proto_id',
                                                                                            'get_follow_tap_string',
                                                                                            'prefs_apply',
                                                                                            'get_follow_conv_func',
                                                                                            'get_follow_port_to_display',
                                                                                            'get_follow_tap_handler',
                                                                                            'follow_info_free',
                                                                                            'EBCDIC_to_ASCII',
                                                                                            'print_stream_text_stdio_new',
                                                                                            'wmem_list_head',
                                                                                            'wmem_list_frame_next',
                                                                                            'wmem_list_frame_data',
                                                                                            'dtbl_entry_get_handle',
                                                                                            'dtbl_entry_get_initial_handle',
                                                                                            'dissector_all_tables_foreach_changed',
                                                                                            'find_dissector_table',
                                                                                            'get_dissector_table_ui_name',
                                                                                            'get_dissector_table_selector_type',
                                                                                            'get_dissector_table_param',
                                                                                            'dissector_handle_get_short_name',
                                                                                            'decode_dcerpc_add_show_list',
                                                                                            'decode_as_list',
                                                                                            'guid_cmp',
                                                                                            'dcerpc_get_proto_name',
                                                                                            'dcerpc_get_proto_sub_dissector',
                                                                                            'dcerpc_uuids',
                                                                                            'stats_tree_presentation',
                                                                                            'stats_tree_new',
                                                                                            'stats_tree_packet',
                                                                                            'stats_tree_reinit',
                                                                                            'stats_tree_free',
                                                                                            'stats_tree_get_abbr',
                                                                                            'stats_tree_get_cfg_by_abbr',
                                                                                            'stats_tree_get_displayname',
                                                                                            'stats_tree_get_default_sort_col',
                                                                                            'stats_tree_is_default_sort_DESC',
                                                                                            'stats_tree_get_column_name',
                                                                                            'stats_tree_get_values_from_node',
                                                                                            'stats_tree_sort_compare',
                                                                                            'stats_tree_format_as_str',
                                                                                            'is_broadcast_bssid',
                                                                                            'format_text',
                                                                                            'ftype_pretty_name',
                                                                                            'proto_get_protocol_name',
                                                                                            'save_disabled_protos_list',
                                                                                            'save_disabled_heur_dissector_list',
                                                                                            'proto_set_decoding',
                                                                                            'heur_dissector_table_foreach',
                                                                                            'dissector_all_heur_tables_foreach_table',
                                                                                            'find_heur_dissector_by_unique_short_name',
                                                                                            'proto_get_protocol_long_name',
                                                                                            'dissector_all_tables_foreach_table',
                                                                                            'dissector_handle_get_dissector_name',
                                                                                            'wmem_map_foreach',
                                                                                            'wmem_map_size',
                                                                                            'get_hash_ether_status',
                                                                                            'get_hash_ether_hexaddr',
                                                                                            'get_hash_ether_resolved_name',
                                                                                            'get_hash_manuf_resolved_name',
                                                                                            'get_manuf_hashtable',
                                                                                            'get_wka_hashtable',
                                                                                            'get_eth_hashtable',
                                                                                            'get_serv_port_hashtable',
                                                                                            'get_ipv4_hash_table',
                                                                                            'get_ipv6_hash_table',
                                                                                            'get_export_pdu_tap_list',
                                                                                            'get_conversation_hashtable_exact',
                                                                                            'get_conversation_hashtable_no_addr2',
                                                                                            'get_conversation_hashtable_no_port2',
                                                                                            'get_conversation_hashtable_no_addr2_or_port2',
                                                                                            'range_convert_str',
                                                                                            'prefs_module_has_submodules',
                                                                                            'prefs_modules_foreach',
                                                                                            'prefs_modules_foreach_submodules',
                                                                                            'prefs_get_title_by_name',
                                                                                            'prefs_pref_type_name',
                                                                                            'protocols_module',
                                                                                            'uat_update_record',
                                                                                            'uat_swap',
                                                                                            'uat_remove_record_idx',
                                                                                            'ftype_can_slice',
                                                                                            'ftype_can_eq',
                                                                                            'ftype_can_ne',
                                                                                            'ftype_can_gt',
                                                                                            'ftype_can_ge',
                                                                                            'ftype_can_lt',
                                                                                            'ftype_can_le',
                                                                                            'ftype_can_contains',
                                                                                            'ftype_can_matches',
                                                                                            'fvalue_from_unparsed',
                                                                                            'proto_initialize_all_prefixes',
                                                                                            'tfs_true_false',
                                                                                            'tvb_get_guint8',
                                                                                            'EBCDIC_to_ASCII1',
                                                                                            'wslua_plugins_get_descriptions',
                                                                                            'get_manuf_name_if_known',
                                                                                            'prefs_is_capture_device_hidden',
                                                                                            'proto_registrar_get_nth',
                                                                                            'proto_get_data_protocol',
                                                                                            'ssl_session_hash',
                                                                                            'ssl_crandom_hash',
                                                                                            'ex_opt_get_nth',
                                                                                            'prefs_get_string_list',
                                                                                            'prefs_clear_string_list',
                                                                                            'read_prefs_file',
                                                                                            'join_string_list',
                                                                                            'get_column_format_from_str',
                                                                                            'val_to_str',
                                                                                            'str_to_val',
                                                                                            'ranges_are_equal',
                                                                                            'range_copy',
                                                                                            'write_prefs',
                                                                                            'dissector_table_foreach_handle',
                                                                                            'dissector_change_uint',
                                                                                            'dissector_reset_uint',
                                                                                            'dissector_change_string',
                                                                                            'dissector_reset_string',
                                                                                            'dissector_table_get_dissector_handles',
                                                                                            'dissector_table_get_type',
                                                                                            'dissector_handle_get_protocol_index',
                                                                                            'decode_dcerpc_reset_all',
                                                                                            'ex_opt_add',
                                                                                            'disable_name_resolution',
                                                                                            'string_to_name_resolve',
                                                                                            'prefs_set_pref',
                                                                                            'process_stat_cmd_arg',
                                                                                            'list_stat_cmd_args',
                                                                                            'read_keytab_file',
                                                                                            'string_replace',
                                                                                            'p_get_proto_data',
                                                                                            'tvb_get_ntohs',
                                                                                            'tvb_get_ntohl',
                                                                                            'tvb_memcpy',
                                                                                            'chunk_type_values',
                                                                                            'wmem_packet_scope',
                                                                                            'val_to_str_ext_const',
                                                                                            'rtp_dyn_payload_get_name',
                                                                                            'find_tap_id',
                                                                                            'h225_RasMessage_vals',
                                                                                            'isup_message_type_value_acro_ext',
                                                                                            'q931_cause_code_vals_ext',
                                                                                            'q931_message_type_vals',
                                                                                            'rtp_event_type_values_ext',
                                                                                            't38_T30_indicator_vals',
                                                                                            't38_T30_data_vals',
                                                                                            't30_facsimile_control_field_vals_ext',
                                                                                            't30_facsimile_control_field_vals_short_ext',
                                                                                            'sccp_message_type_acro_values',
                                                                                            'sua_co_class_type_acro_values',
                                                                                            'epan_dissect_fake_protocols',
                                                                                            'try_val_to_str_ext',
                                                                                            'epan_get_user_comment',
                                                                                            'proto_free_deregistered_fields',
                                                                                            'epan_get_runtime_version_info',
                                                                                            'epan_get_compiled_version_info',
                                                                                            'epan_cleanup',
                                                                                            'epan_init',
                                                                                            'epan_register_plugin_types',
                                                                                            'register_all_protocol_handoffs',
                                                                                            'register_all_protocols',
                                                                                            'proto_enable_heuristic_by_name',
                                                                                            'set_disabled_heur_dissector_list',
                                                                                            'color_filter_list_delete',
                                                                                            'color_filter_delete',
                                                                                            'color_filter_new',
                                                                                            'color_filters_write',
                                                                                            'color_filters_apply',
                                                                                            'color_filters_read_globals',
                                                                                            'color_filters_clone',
                                                                                            'airpdcap_ctx',
                                                                                            'AirPDcapDestroyContext',
                                                                                            'AirPDcapInitContext',
                                                                                            'rtd_table_iterate_tables',
                                                                                            'srt_table_iterate_tables',
                                                                                            'hostlist_table_set_gui_info',
                                                                                            'conversation_table_set_gui_info',
                                                                                            'timestamp_set_seconds_type',
                                                                                            'timestamp_set_type',
                                                                                            'get_node_field_value',
                                                                                            'start_requested_stats',
                                                                                            'new_stat_tap_iterate_tables',
                                                                                            'draw_tap_listeners',
                                                                                            'register_all_plugin_tap_listeners',
                                                                                            'read_prefs',
                                                                                            'prefs_apply_all',
                                                                                            'prefs_reset',
                                                                                            'color_filters_reset_tmp',
                                                                                            'color_filters_set_tmp',
                                                                                            'color_filters_reload',
                                                                                            'color_filters_init',
                                                                                            'ex_opt_get_next',
                                                                                            'ex_opt_count',
                                                                                            'proto_construct_match_selected_string',
                                                                                            'proto_enable_all',
                                                                                            'proto_registrar_is_protocol',
                                                                                            'proto_registrar_get_parent',
                                                                                            'proto_registrar_get_byname',
                                                                                            'get_follow_by_name',
                                                                                            'try_capture_dissector',
                                                                                            'except_setup_try',
                                                                                            'except_pop',
                                                                                            'except_rethrow',
                                                                                            'except_free',
                                                                                            'frame_data_reset',
                                                                                            'frame_data_destroy',
                                                                                            'frame_data_init',
                                                                                            'frame_data_set_before_dissect',
                                                                                            'frame_data_set_after_dissect',
                                                                                            'epan_new',
                                                                                            'epan_free',
                                                                                            'epan_dissect_init',
                                                                                            'epan_dissect_new',
                                                                                            'epan_dissect_reset',
                                                                                            'epan_dissect_run',
                                                                                            'epan_dissect_run_with_taps',
                                                                                            'epan_dissect_prime_dfilter',
                                                                                            'epan_dissect_fill_in_columns',
                                                                                            'epan_dissect_cleanup',
                                                                                            'epan_dissect_free',
                                                                                            'col_custom_prime_edt',
                                                                                            'have_custom_cols',
                                                                                            'have_field_extractors',
                                                                                            'col_has_time_fmt',
                                                                                            'get_column_format',
                                                                                            'get_column_char_width',
                                                                                            'fvalue_get_uinteger',
                                                                                            'proto_tree_children_foreach',
                                                                                            'proto_item_fill_label',
                                                                                            'postseq_cleanup_all_protocols',
                                                                                            'expert_update_comment_count',
                                                                                            'color_filters_cleanup',
                                                                                            'dfilter_compile',
                                                                                            'dfilter_free',
                                                                                            'dfilter_apply_edt',
                                                                                            'tap_build_interesting',
                                                                                            'reset_tap_listeners',
                                                                                            'have_filtering_tap_listeners',
                                                                                            'union_of_tap_listener_flags',
                                                                                            'ber_set_filename',
                                                                                            'dfilter_macro_build_ftv_cache',
                                                                                            'convert_string_case',
                                                                                            'add_ipv4_name',
                                                                                            'add_ipv6_name',
                                                                                            'add_ip_name_from_string',
                                                                                            'get_addrinfo_list',
                                                                                            'new_frame_data_sequence',
                                                                                            'frame_data_sequence_add',
                                                                                            'frame_data_sequence_find',
                                                                                            'free_frame_data_sequence',
                                                                                            'find_and_mark_frame_depended_upon',
                                                                                            'print_preamble',
                                                                                            'print_line',
                                                                                            'print_bookmark',
                                                                                            'new_page',
                                                                                            'print_finale',
                                                                                            'destroy_print_stream',
                                                                                            'packet_range_init',
                                                                                            'packet_range_process_init',
                                                                                            'packet_range_process_packet',
                                                                                            'proto_tree_print',
                                                                                            'print_hex_data',
                                                                                            'write_pdml_preamble',
                                                                                            'write_pdml_proto_tree',
                                                                                            'write_pdml_finale',
                                                                                            'write_json_preamble',
                                                                                            'write_json_proto_tree',
                                                                                            'write_json_finale',
                                                                                            'write_psml_preamble',
                                                                                            'write_psml_columns',
                                                                                            'write_psml_finale',
                                                                                            'write_csv_column_titles',
                                                                                            'write_csv_columns',
                                                                                            'write_carrays_hex_data',
                                                                                            'prefs',
                                                                                            'tvb_ws_mempbrk_pattern_guint8',
                                                                                            'tvb_new',
                                                                                            'prefs_find_module',
                                                                                            'prefs_find_preference',
                                                                                            'prefs_register_string_preference',
                                                                                            'wmem_free',
                                                                                            'tvb_get_ptr',
                                                                                            'print_stream_text_new',
                                                                                            'print_stream_ps_new',
                                                                                            'range_convert_range',
                                                                                            'packet_range_check',
                                                                                            'packet_range_convert_str',
                                                                                            'color_filters_import',
                                                                                            'color_filters_export',
                                                                                            'gbl_resolv_flags',
                                                                                            'proto_get_id_by_short_name',
                                                                                            'capture_dissector_get_count',
                                                                                            'xml_escape',
                                                                                            'expert_get_highest_severity',
                                                                                            'col_cleanup',
                                                                                            'col_format_to_string',
                                                                                            'col_format_desc',
                                                                                            'set_column_format',
                                                                                            'get_column_title',
                                                                                            'set_column_title',
                                                                                            'get_column_visible',
                                                                                            'set_column_visible',
                                                                                            'get_column_resolved',
                                                                                            'set_column_resolved',
                                                                                            'get_column_custom_fields',
                                                                                            'set_column_custom_fields',
                                                                                            'get_column_custom_occurrence',
                                                                                            'set_column_custom_occurrence',
                                                                                            'get_column_width_string',
                                                                                            'get_column_tooltip',
                                                                                            'build_column_format_array',
                                                                                            'ws_strdup_escape_char',
                                                                                            'ws_strdup_unescape_char',
                                                                                            'host_name_lookup_process',
                                                                                            'manually_resolve_cleanup',
                                                                                            'read_disabled_protos_list',
                                                                                            'set_disabled_protos_list',
                                                                                            'proto_disable_proto_by_name',
                                                                                            'read_disabled_heur_dissector_list',
                                                                                            'proto_registrar_get_abbrev',
                                                                                            'win_sparkle_check_update_with_ui',
                                                                                            'win_sparkle_set_update_check_interval',
                                                                                            'win_sparkle_set_automatic_check_for_updates',
                                                                                            'win_sparkle_set_registry_path',
                                                                                            'win_sparkle_set_appcast_url',
                                                                                            'win_sparkle_cleanup',
                                                                                            'win_sparkle_init',
                                                                                            'InitCommonControlsEx',
                                                                                            'wtap_close',
                                                                                            'wtap_phdr',
                                                                                            'wtap_read',
                                                                                            'wtap_cleareof',
                                                                                            'wtap_open_offline',
                                                                                            'wtap_file_type_subtype_string',
                                                                                            'wtap_strerror',
                                                                                            'wtap_block_add_string_option',
                                                                                            'wtap_block_set_nth_string_option_value',
                                                                                            'wtap_block_get_nth_string_option_value',
                                                                                            'wtap_set_cb_new_ipv4',
                                                                                            'wtap_set_cb_new_ipv6',
                                                                                            'wtap_seek_read',
                                                                                            'wtap_phdr_init',
                                                                                            'wtap_phdr_cleanup',
                                                                                            'wtap_read_so_far',
                                                                                            'wtap_file_size',
                                                                                            'wtap_iscompressed',
                                                                                            'wtap_snapshot_length',
                                                                                            'wtap_file_type_subtype',
                                                                                            'wtap_file_encap',
                                                                                            'wtap_file_get_shb',
                                                                                            'wtap_file_get_shb_for_new_file',
                                                                                            'wtap_write_shb_comment',
                                                                                            'wtap_file_get_idb_info',
                                                                                            'wtap_file_get_nrb_for_new_file',
                                                                                            'wtap_fdclose',
                                                                                            'wtap_fdreopen',
                                                                                            'wtap_sequential_close',
                                                                                            'wtap_dump_file_encap_type',
                                                                                            'wtap_dump_has_name_resolution',
                                                                                            'wtap_dump_open_ng',
                                                                                            'wtap_dump',
                                                                                            'wtap_dump_set_addrinfo_list',
                                                                                            'wtap_dump_close',
                                                                                            'wtap_dump_can_write',
                                                                                            'merge_files',
                                                                                            'wtap_block_get_mandatory_data',
                                                                                            'wtap_block_get_uint64_option_value',
                                                                                            'wtap_block_get_string_option_value',
                                                                                            'wtap_block_get_custom_option_value',
                                                                                            'wtap_pcap_encap_to_wtap_encap',
                                                                                            'wtap_dump_supports_comment_types',
                                                                                            'wtap_get_savable_file_types_subtypes',
                                                                                            'wtap_get_all_file_extensions_list',
                                                                                            'wtap_get_file_extensions_list',
                                                                                            'wtap_free_extensions_list',
                                                                                            'wtap_get_num_file_type_extensions',
                                                                                            'wtap_get_file_extension_type_name',
                                                                                            'wtap_get_file_extension_type_extensions',
                                                                                            'open_routines',
                                                                                            'wtap_init',
                                                                                            'register_all_wiretap_modules',
                                                                                            'open_info_name_to_type',
                                                                                            'wtap_default_file_extension',
                                                                                            'wtap_encap_string',
                                                                                            'wtap_wtap_encap_to_pcap_encap',
                                                                                            'wtap_block_create',
                                                                                            'wtap_block_array_free',
                                                                                            'wtap_block_add_string_option_format',
                                                                                            'wtap_free_idb_info',
                                                                                            'wtap_dump_open_tempfile_ng',
                                                                                            'wtap_get_num_encap_types',
                                                                                            'wtap_encap_requires_phdr',
                                                                                            'wtap_block_add_uint8_option',
                                                                                            'wtap_dump_fdopen_ng',
                                                                                            'wtap_buf_ptr',
                                                                                            'get_datafile_path',
                                                                                            'ws_stdio_remove',
                                                                                            'get_dirname',
                                                                                            'get_basename',
                                                                                            'nstime_delta',
                                                                                            'nstime_set_zero',
                                                                                            'ws_buffer_assure_space',
                                                                                            'ws_buffer_free',
                                                                                            'ws_buffer_init',
                                                                                            'copy_file_binary_mode',
                                                                                            'utf_8to16_snprintf',
                                                                                            'ws_stdio_fopen',
                                                                                            'ws_stdio_unlink',
                                                                                            'ws_stdio_rename',
                                                                                            'ws_stdio_open',
                                                                                            'create_tempfile',
                                                                                            'ws_stdio_stat64',
                                                                                            'cmdarg_err',
                                                                                            'get_positive_int',
                                                                                            'get_natural_int',
                                                                                            'file_open_error_message',
                                                                                            'utf_16to8',
                                                                                            'test_for_directory',
                                                                                            'files_identical',
                                                                                            'get_profile_name',
                                                                                            'is_default_profile',
                                                                                            'get_persconffile_path',
                                                                                            'arg_list_utf_16to8',
                                                                                            'ws_add_crash_info',
                                                                                            'init_progfile_dir',
                                                                                            'set_profile_name',
                                                                                            'profile_store_persconffiles',
                                                                                            'profile_exists',
                                                                                            'create_persconffile_profile',
                                                                                            'copy_persconffile_profile',
                                                                                            'get_persdatafile_dir',
                                                                                            'ws_init_dll_search_path',
                                                                                            'ws_load_library',
                                                                                            'create_app_running_mutex',
                                                                                            'init_process_policies',
                                                                                            'running_with_special_privs',
                                                                                            'relinquish_special_privs_perm',
                                                                                            'get_cur_username',
                                                                                            'get_cur_groupname',
                                                                                            'init_report_err',
                                                                                            'cmdarg_err_init',
                                                                                            'scan_plugins',
                                                                                            'get_windows_major_version',
                                                                                            'ieee80211_mhz_to_str',
                                                                                            'has_global_profiles',
                                                                                            'rename_persconffile_profile',
                                                                                            'create_persconffile_dir',
                                                                                            'get_plugin_dir',
                                                                                            'nstime_to_sec',
                                                                                            'get_copyright_info',
                                                                                            'get_os_version_info',
                                                                                            'get_extcap_dir',
                                                                                            'utf_8to16',
                                                                                            'get_progfile_dir',
                                                                                            'protect_arg',
                                                                                            'format_size',
                                                                                            'ws_stdio_freopen',
                                                                                            'get_datafile_dir',
                                                                                            'get_plugins_pers_dir',
                                                                                            'get_systemfile_dir',
                                                                                            'nstime_cmp',
                                                                                            'nstime_to_msec',
                                                                                            'report_failure',
                                                                                            'nstime_set_unset',
                                                                                            'nstime_is_unset',
                                                                                            'nstime_sum',
                                                                                            'alaw2linear',
                                                                                            'ulaw2linear',
                                                                                            'ieee80211_mhz_to_chan',
                                                                                            'plugins_get_descriptions',
                                                                                            'file_write_error_message',
                                                                                            'getopt_long',
                                                                                            'cmdarg_err_cont',
                                                                                            'optarg',
                                                                                            'optind',
                                                                                            'opterr',
                                                                                            'running_in_build_directory',
                                                                                            'get_profiles_dir',
                                                                                            'get_global_profiles_dir',
                                                                                            'delete_persconffile_profile',
                                                                                            'create_tempdir',
                                                                                            'nstime_copy',
                                                                                            'ws_module_open',
                                                                                            'ieee80211_chan_to_mhz',
                                                                                            'win32strexception',
                                                                                            'win32strerror',
                                                                                            'ws_inet_pton6',
                                                                                            'ws_inet_pton4',
                                                                                            'set_persdatafile_dir',
                                                                                            'set_persconffile_dir',
                                                                                            'strptime',
                                                                                            'file_exists',
                                                                                            'crc32c_calculate',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'ferror',
                                                                                            '_errno',
                                                                                            'strtol',
                                                                                            'strchr',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            '_close',
                                                                                            '_setjmp3',
                                                                                            'memcpy',
                                                                                            'strrchr',
                                                                                            '_fstat64',
                                                                                            'fprintf',
                                                                                            'getc',
                                                                                            'putc',
                                                                                            'ungetc',
                                                                                            'memset',
                                                                                            'memchr',
                                                                                            '_write',
                                                                                            'setlocale',
                                                                                            'strftime',
                                                                                            '_localtime64',
                                                                                            '_time64',
                                                                                            '_get_osfhandle',
                                                                                            'sscanf',
                                                                                            '_open_osfhandle',
                                                                                            '__iob_func',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__crtGetShowWindowMode',
                                                                                            '_XcptFilter',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_except1',
                                                                                            '_cwait',
                                                                                            'realloc',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'clearerr',
                                                                                            '_mktime64',
                                                                                            'getenv',
                                                                                            'srand',
                                                                                            'ceil',
                                                                                            'strpbrk',
                                                                                            'floor',
                                                                                            'puts',
                                                                                            'rint',
                                                                                            'lrint',
                                                                                            '_libm_sse2_pow_precise',
                                                                                            '_libm_sse2_log_precise',
                                                                                            '_libm_sse2_log10_precise',
                                                                                            '_read',
                                                                                            'fwrite',
                                                                                            'fflush',
                                                                                            '_CIfmod',
                                                                                            'fgets',
                                                                                            'strtok',
                                                                                            'atoi',
                                                                                            'fputs',
                                                                                            'strncpy',
                                                                                            'strncmp',
                                                                                            'memmove',
                                                                                            'strtoul',
                                                                                            'qsort',
                                                                                            'bsearch',
                                                                                            '__argv',
                                                                                            '__argc',
                                                                                            'strstr',
                                                                                            'vfprintf',
                                                                                            '_vsnwprintf',
                                                                                            'fread',
                                                                                            '_getch',
                                                                                            'printf',
                                                                                            'waveOutGetNumDevs',
                                                                                            'waveOutGetDevCapsA',
                                                                                            'waveOutGetErrorTextA',
                                                                                            'waveOutOpen',
                                                                                            'waveOutClose',
                                                                                            'waveOutPrepareHeader',
                                                                                            'waveOutUnprepareHeader',
                                                                                            'waveOutWrite',
                                                                                            'waveOutPause',
                                                                                            'waveOutRestart',
                                                                                            'waveOutReset',
                                                                                            'waveOutGetPosition',
                                                                                            'waveOutMessage',
                                                                                            'waveInGetNumDevs',
                                                                                            'waveInGetDevCapsA',
                                                                                            'waveInGetErrorTextA',
                                                                                            'waveInOpen',
                                                                                            'waveInClose',
                                                                                            'waveInPrepareHeader',
                                                                                            'waveInUnprepareHeader',
                                                                                            'waveInAddBuffer',
                                                                                            'waveInStart',
                                                                                            'waveInReset',
                                                                                            'waveInMessage',
                                                                                            'timeGetTime',
                                                                                            'ShellExecuteW',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'RegQueryValueExW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'RegOpenKeyExW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 25,
                                                                      'NumberOfImportFunctions': 1816,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 669872,
                                                                      'SectionNames': {'.data\x00\x00\x00': 27136,
                                                                                       '.rdata\x00\x00': 633856,
                                                                                       '.reloc\x00\x00': 81408,
                                                                                       '.rsrc\x00\x00\x00': 670208,
                                                                                       '.text\x00\x00\x00': 1062400},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a4532438eaa9ffd439605cc40956892d5790128c1f3484e73ff3258f66550049'},
 'a47a68c48feb8e447198bdcdde309f97ebe64e5027c3162b270e46de71369bfb': {'AddressOfEntryPoint': 7264,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetProcAddress',
                                                                                      'USER32.dll': 'MoveWindow',
                                                                                      'msvcrt.dll': '_vsnwprintf_s'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'IsIconic',
                                                                                            'OpenIcon',
                                                                                            'GetWindowRect',
                                                                                            'DestroyWindow',
                                                                                            'DefWindowProcW',
                                                                                            'UpdateWindow',
                                                                                            'RegisterClassW',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'ShowWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'LoadStringW',
                                                                                            'GetDesktopWindow',
                                                                                            'BringWindowToTop',
                                                                                            'LoadIconW',
                                                                                            'FindWindowW',
                                                                                            'SetForegroundWindow',
                                                                                            'MoveWindow',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_vsnwprintf_s'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 56,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 62384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 62464,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a47a68c48feb8e447198bdcdde309f97ebe64e5027c3162b270e46de71369bfb'},
 'a494cb94dfd5a6c26694f443e58e1f33f6d79f67094a0ac8ec143bfdc8e1656d': {'AddressOfEntryPoint': 2575063,
                                                                      'DebugRVA': 3561968,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 6473056,
                                                                      'ExportSize': 100,
                                                                      'IATRVA': 3551232,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetTokenInformation',
                                                                                      'CRYPT32.dll': 'CertOpenSystemStoreA',
                                                                                      'KERNEL32.dll': 'IsBadReadPtr',
                                                                                      'MSVCP90.dll': '?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ',
                                                                                      'MSVCR90.dll': '_crt_debugger_hook',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'LoadStringA',
                                                                                      'WS2_32.dll': 'WSASetLastError',
                                                                                      'libcurl.dll': 'curl_easy_setopt',
                                                                                      'ole32.dll': 'CoSetProxyBlanket',
                                                                                      'vim-types.dll': '??0ImageBackingInfo@VirtualFloppy@Device@Vm@Vim@@QAE@XZ',
                                                                                      'vmacore.dll': '??1Throwable@Vmacore@@UAE@XZ',
                                                                                      'vmomi.dll': '??1Any@Vmomi@@UAE@XZ',
                                                                                      'xerces-c_2_8.dll': '?release@XMLString@xercesc_2_8@@SAXPAPAD@Z'},
                                                                      'ImportedFunctions': ['??1DefaultHandler@xercesc_2_8@@UAE@XZ',
                                                                                            '?externalEntityDecl@DefaultHandler@xercesc_2_8@@UAEXQB_W00@Z',
                                                                                            '?internalEntityDecl@DefaultHandler@xercesc_2_8@@UAEXQB_W0@Z',
                                                                                            '?attributeDecl@DefaultHandler@xercesc_2_8@@UAEXQB_W0000@Z',
                                                                                            '?elementDecl@DefaultHandler@xercesc_2_8@@UAEXQB_W0@Z',
                                                                                            '?startEntity@DefaultHandler@xercesc_2_8@@UAEXQB_W@Z',
                                                                                            '?startDTD@DefaultHandler@xercesc_2_8@@UAEXQB_W00@Z',
                                                                                            '?startCDATA@DefaultHandler@xercesc_2_8@@UAEXXZ',
                                                                                            '?endEntity@DefaultHandler@xercesc_2_8@@UAEXQB_W@Z',
                                                                                            '?endDTD@DefaultHandler@xercesc_2_8@@UAEXXZ',
                                                                                            '?endCDATA@DefaultHandler@xercesc_2_8@@UAEXXZ',
                                                                                            '?comment@DefaultHandler@xercesc_2_8@@UAEXQB_WI@Z',
                                                                                            '?resetErrors@DefaultHandler@xercesc_2_8@@UAEXXZ',
                                                                                            '?fatalError@DefaultHandler@xercesc_2_8@@UAEXABVSAXParseException@2@@Z',
                                                                                            '?error@DefaultHandler@xercesc_2_8@@UAEXABVSAXParseException@2@@Z',
                                                                                            '?warning@DefaultHandler@xercesc_2_8@@UAEXABVSAXParseException@2@@Z',
                                                                                            '?skippedEntity@DefaultHandler@xercesc_2_8@@UAEXQB_W@Z',
                                                                                            '?endPrefixMapping@DefaultHandler@xercesc_2_8@@UAEXQB_W@Z',
                                                                                            '?startPrefixMapping@DefaultHandler@xercesc_2_8@@UAEXQB_W0@Z',
                                                                                            '?startElement@DefaultHandler@xercesc_2_8@@UAEXQB_W00ABVAttributes@2@@Z',
                                                                                            '?startDocument@DefaultHandler@xercesc_2_8@@UAEXXZ',
                                                                                            '?setDocumentLocator@DefaultHandler@xercesc_2_8@@UAEXQBVLocator@2@@Z',
                                                                                            '?processingInstruction@DefaultHandler@xercesc_2_8@@UAEXQB_W0@Z',
                                                                                            '?ignorableWhitespace@DefaultHandler@xercesc_2_8@@UAEXQB_WI@Z',
                                                                                            '?endElement@DefaultHandler@xercesc_2_8@@UAEXQB_W00@Z',
                                                                                            '?endDocument@DefaultHandler@xercesc_2_8@@UAEXXZ',
                                                                                            '?characters@DefaultHandler@xercesc_2_8@@UAEXQB_WI@Z',
                                                                                            '?resetDocType@DefaultHandler@xercesc_2_8@@UAEXXZ',
                                                                                            '?unparsedEntityDecl@DefaultHandler@xercesc_2_8@@UAEXQB_W000@Z',
                                                                                            '?notationDecl@DefaultHandler@xercesc_2_8@@UAEXQB_W00@Z',
                                                                                            '?resetDocument@DefaultHandler@xercesc_2_8@@UAEXXZ',
                                                                                            '?resolveEntity@DefaultHandler@xercesc_2_8@@UAEPAVInputSource@2@QB_W0@Z',
                                                                                            '?createXMLReader@XMLReaderFactory@xercesc_2_8@@SAPAVSAX2XMLReader@2@QAVMemoryManager@2@QAVXMLGrammarPool@2@@Z',
                                                                                            '?fgSAX2CoreNameSpaces@XMLUni@xercesc_2_8@@2QB_WB',
                                                                                            '?fgSAX2CoreValidation@XMLUni@xercesc_2_8@@2QB_WB',
                                                                                            '?fgXercesDynamic@XMLUni@xercesc_2_8@@2QB_WB',
                                                                                            '?fgXercesSchema@XMLUni@xercesc_2_8@@2QB_WB',
                                                                                            '?fgXercesSchemaFullChecking@XMLUni@xercesc_2_8@@2QB_WB',
                                                                                            '??0DefaultHandler@xercesc_2_8@@QAE@XZ',
                                                                                            '?fgXercesUseCachedGrammarInParse@XMLUni@xercesc_2_8@@2QB_WB',
                                                                                            '??_7ErrorHandler@xercesc_2_8@@6B@',
                                                                                            '??1ErrorHandler@xercesc_2_8@@UAE@XZ',
                                                                                            '??1MemBufInputSource@xercesc_2_8@@UAE@XZ',
                                                                                            '?setIssueFatalErrorIfNotFound@InputSource@xercesc_2_8@@UAEX_N@Z',
                                                                                            '?setSystemId@InputSource@xercesc_2_8@@UAEXQB_W@Z',
                                                                                            '?setPublicId@InputSource@xercesc_2_8@@UAEXQB_W@Z',
                                                                                            '?setEncoding@InputSource@xercesc_2_8@@UAEXQB_W@Z',
                                                                                            '?getIssueFatalErrorIfNotFound@InputSource@xercesc_2_8@@UBE_NXZ',
                                                                                            '?getSystemId@InputSource@xercesc_2_8@@UBEPB_WXZ',
                                                                                            '?getPublicId@InputSource@xercesc_2_8@@UBEPB_WXZ',
                                                                                            '?getEncoding@InputSource@xercesc_2_8@@UBEPB_WXZ',
                                                                                            '?makeStream@MemBufInputSource@xercesc_2_8@@UBEPAVBinInputStream@2@XZ',
                                                                                            '??2XMemory@xercesc_2_8@@SAPAXI@Z',
                                                                                            '?fgMemoryManager@XMLPlatformUtils@xercesc_2_8@@2PAVMemoryManager@2@A',
                                                                                            '??0MemBufInputSource@xercesc_2_8@@QAE@QBEIQBD_NQAVMemoryManager@1@@Z',
                                                                                            '??3XMemory@xercesc_2_8@@SAXPAX@Z',
                                                                                            '?fgXercescDefaultLocale@XMLUni@xercesc_2_8@@2QBDB',
                                                                                            '?Initialize@XMLPlatformUtils@xercesc_2_8@@SAXQBD0QAVPanicHandler@2@QAVMemoryManager@2@_N@Z',
                                                                                            '?getLineNumber@SAXParseException@xercesc_2_8@@QBEJXZ',
                                                                                            '?getColumnNumber@SAXParseException@xercesc_2_8@@QBEJXZ',
                                                                                            '?transcode@XMLString@xercesc_2_8@@SAPADQB_W@Z',
                                                                                            '?release@XMLString@xercesc_2_8@@SAXPAPAD@Z',
                                                                                            'curl_global_init',
                                                                                            'curl_easy_init',
                                                                                            'curl_easy_cleanup',
                                                                                            'curl_slist_append',
                                                                                            'curl_slist_free_all',
                                                                                            'curl_easy_strerror',
                                                                                            'curl_version_info',
                                                                                            'curl_easy_perform',
                                                                                            'curl_easy_getinfo',
                                                                                            'curl_global_cleanup',
                                                                                            'curl_easy_setopt',
                                                                                            'sprintf',
                                                                                            'getenv',
                                                                                            '_ecvt_s',
                                                                                            '_fcvt_s',
                                                                                            'islower',
                                                                                            '_strupr',
                                                                                            'strncat',
                                                                                            'frexp',
                                                                                            'wcscspn',
                                                                                            'wcschr',
                                                                                            'towupper',
                                                                                            'wcsspn',
                                                                                            '_ftime64',
                                                                                            '_fdopen',
                                                                                            'wcsrchr',
                                                                                            '_wcsdup',
                                                                                            'strcspn',
                                                                                            '_getpid',
                                                                                            'localeconv',
                                                                                            'wcrtomb',
                                                                                            'strtod',
                                                                                            '_strtoui64',
                                                                                            'strtoul',
                                                                                            'memchr',
                                                                                            '_strdup',
                                                                                            '_wgetenv',
                                                                                            '_wunlink',
                                                                                            '_wrename',
                                                                                            '_wstat64i32',
                                                                                            '_wmkdir',
                                                                                            '_wfopen',
                                                                                            '_wopen',
                                                                                            '_get_osfhandle',
                                                                                            '_strlwr',
                                                                                            '_open_osfhandle',
                                                                                            'strerror',
                                                                                            'strstr',
                                                                                            'memmove',
                                                                                            'wcsncmp',
                                                                                            'realloc',
                                                                                            '_wgetdcwd',
                                                                                            '_wfullpath',
                                                                                            'qsort',
                                                                                            'strtok_s',
                                                                                            '_errno',
                                                                                            'isspace',
                                                                                            'tolower',
                                                                                            'toupper',
                                                                                            '_strnicmp',
                                                                                            'strspn',
                                                                                            '_aligned_free',
                                                                                            '_aligned_malloc',
                                                                                            'strpbrk',
                                                                                            '_stricmp',
                                                                                            'calloc',
                                                                                            'fputs',
                                                                                            'strrchr',
                                                                                            'strncmp',
                                                                                            'strchr',
                                                                                            'swprintf_s',
                                                                                            '_gmtime64',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            'isdigit',
                                                                                            'iswspace',
                                                                                            'strncpy',
                                                                                            '_beginthreadex',
                                                                                            '_setjmp3',
                                                                                            'longjmp',
                                                                                            '??0bad_cast@std@@QAE@PBD@Z',
                                                                                            'malloc',
                                                                                            'atoi',
                                                                                            'signal',
                                                                                            'sscanf',
                                                                                            'isalpha',
                                                                                            '_time64',
                                                                                            '_difftime64',
                                                                                            'fprintf',
                                                                                            'fgets',
                                                                                            'fread',
                                                                                            'fwrite',
                                                                                            'fopen',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            '?_open@@YAHPBDHH@Z',
                                                                                            '_read',
                                                                                            '_write',
                                                                                            '_lseek',
                                                                                            '_close',
                                                                                            '_setmode',
                                                                                            '_fileno',
                                                                                            'clearerr',
                                                                                            'ferror',
                                                                                            'feof',
                                                                                            '__RTtypeid',
                                                                                            '?before@type_info@@QBEHABV1@@Z',
                                                                                            '??0bad_typeid@std@@QAE@ABV01@@Z',
                                                                                            '??0bad_cast@std@@QAE@ABV01@@Z',
                                                                                            '??1bad_typeid@std@@UAE@XZ',
                                                                                            '??1bad_cast@std@@UAE@XZ',
                                                                                            'abort',
                                                                                            '??0exception@std@@QAE@ABQBDH@Z',
                                                                                            'memset',
                                                                                            'floor',
                                                                                            'ceil',
                                                                                            '__iob_func',
                                                                                            'fflush',
                                                                                            '__RTDynamicCast',
                                                                                            '??8type_info@@QBE_NABV0@@Z',
                                                                                            'isxdigit',
                                                                                            'strtol',
                                                                                            'isalnum',
                                                                                            '_snprintf',
                                                                                            'memmove_s',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'fclose',
                                                                                            'free',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_CxxThrowException',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            'memcpy',
                                                                                            '_purecall',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '??0exception@std@@QAE@XZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            'strlen',
                                                                                            '_itoa_s',
                                                                                            'strcpy',
                                                                                            '_chsize',
                                                                                            'strcat',
                                                                                            'wcslen',
                                                                                            'strcmp',
                                                                                            'memcmp',
                                                                                            '_getch',
                                                                                            'rewind',
                                                                                            'getc',
                                                                                            'fputc',
                                                                                            'wcsncpy',
                                                                                            '_snwprintf',
                                                                                            '_wtoi',
                                                                                            'wcsstr',
                                                                                            'fsetpos',
                                                                                            'fgetpos',
                                                                                            '_fstat64i32',
                                                                                            '_commit',
                                                                                            'fgetc',
                                                                                            'printf',
                                                                                            'scanf',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z',
                                                                                            '_except_handler4_common',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z',
                                                                                            '?_Unlock@_Mutex@std@@QAEXXZ',
                                                                                            '?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z',
                                                                                            '??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z',
                                                                                            '?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z',
                                                                                            '?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z',
                                                                                            '?setw@std@@YA?AU?$_Smanip@H@1@H@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z',
                                                                                            '??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z',
                                                                                            '??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?deallocate@?$allocator@D@std@@QAEXPADI@Z',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z',
                                                                                            '?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z',
                                                                                            '?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z',
                                                                                            '?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z',
                                                                                            '?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?allocate@?$allocator@D@std@@QAEPADIPBX@Z',
                                                                                            '??1locale@std@@QAE@XZ',
                                                                                            '?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z',
                                                                                            '?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??1ios_base@std@@UAE@XZ',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z',
                                                                                            '?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z',
                                                                                            '?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z',
                                                                                            '?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z',
                                                                                            '??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z',
                                                                                            '?allocate@?$allocator@D@std@@QAEPADI@Z',
                                                                                            '??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z',
                                                                                            '?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z',
                                                                                            '??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z',
                                                                                            '?_Xran@_String_base@std@@SAXXZ',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z',
                                                                                            '??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '?_Getcat@?$numpunct@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?_Id_cnt@id@locale@std@@0HA',
                                                                                            '?id@?$numpunct@D@std@@2V0locale@2@A',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '?thousands_sep@?$numpunct@D@std@@QBEDXZ',
                                                                                            '?grouping@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??9locale@std@@QBE_NABV01@@Z',
                                                                                            '?classic@locale@std@@SAABV12@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?_Init@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z',
                                                                                            '?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?id@?$ctype@D@std@@2V0locale@2@A',
                                                                                            '?tolower@?$ctype@D@std@@QBEDD@Z',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIID@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z',
                                                                                            '_FInf',
                                                                                            '_Inf',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z',
                                                                                            '?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?toupper@?$ctype@D@std@@QBEDD@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@D@Z',
                                                                                            '??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z',
                                                                                            '??0strstreambuf@std@@QAE@H@Z',
                                                                                            '??1strstreambuf@std@@UAE@XZ',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '?length@?$char_traits@D@std@@SAIPBD@Z',
                                                                                            '?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z',
                                                                                            '?eof@?$char_traits@D@std@@SAHXZ',
                                                                                            '?good@ios_base@std@@QBE_NXZ',
                                                                                            '?flags@ios_base@std@@QBEHXZ',
                                                                                            '?width@ios_base@std@@QBEHXZ',
                                                                                            '?width@ios_base@std@@QAEHH@Z',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ',
                                                                                            '?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ',
                                                                                            '?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ',
                                                                                            '?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ',
                                                                                            '?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z',
                                                                                            '?capacity@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ',
                                                                                            '?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ',
                                                                                            'FormatMessageA',
                                                                                            'LCMapStringA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'RaiseException',
                                                                                            'GetStringTypeExA',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetThreadLocale',
                                                                                            'GetFileAttributesA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetACP',
                                                                                            'VirtualQuery',
                                                                                            'OpenThread',
                                                                                            'GetExitCodeThread',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpiA',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'MultiByteToWideChar',
                                                                                            'CancelIo',
                                                                                            'GetOverlappedResult',
                                                                                            'FindFirstVolumeW',
                                                                                            'FindNextVolumeW',
                                                                                            'FindVolumeClose',
                                                                                            'DeviceIoControl',
                                                                                            'LoadLibraryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetDriveTypeA',
                                                                                            'GetSystemTime',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'CreateSemaphoreW',
                                                                                            'WaitNamedPipeW',
                                                                                            'GetVersionExW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetTempPathW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'SetFileAttributesW',
                                                                                            'OutputDebugStringA',
                                                                                            'LoadLibraryExW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryA',
                                                                                            'WriteConsoleW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'DuplicateHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteFile',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetDriveTypeW',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileAttributesExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetCurrentThread',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileTime',
                                                                                            'MoveFileExW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetVolumePathNameW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'CreateWaitableTimerA',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InterlockedCompareExchange',
                                                                                            'SetLastError',
                                                                                            'CreateEventA',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'SetEvent',
                                                                                            'SleepEx',
                                                                                            'SetWaitableTimer',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'TlsAlloc',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'WaitForMultipleObjects',
                                                                                            'TerminateThread',
                                                                                            'QueueUserAPC',
                                                                                            'WaitForSingleObject',
                                                                                            'TlsFree',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedExchange',
                                                                                            'SetFilePointer',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetConsoleMode',
                                                                                            'PeekNamedPipe',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'PeekConsoleInputA',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'Sleep',
                                                                                            'IsBadReadPtr',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'AccessCheck',
                                                                                            'MapGenericMask',
                                                                                            'GetFileSecurityW',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateSelf',
                                                                                            'OpenThreadToken',
                                                                                            'CryptAcquireContextW',
                                                                                            'GetUserNameW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'GetLengthSid',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'htons',
                                                                                            'gethostbyname',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'inet_addr',
                                                                                            'closesocket',
                                                                                            'WSASocketA',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'listen',
                                                                                            'ioctlsocket',
                                                                                            'WSAIoctl',
                                                                                            'getsockopt',
                                                                                            'setsockopt',
                                                                                            'connect',
                                                                                            'bind',
                                                                                            'accept',
                                                                                            '__WSAFDIsSet',
                                                                                            'htonl',
                                                                                            'ntohl',
                                                                                            'WSAEventSelect',
                                                                                            'select',
                                                                                            'socket',
                                                                                            'ntohs',
                                                                                            'getsockname',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSAAddressToStringA',
                                                                                            'WSAGetLastError',
                                                                                            'getaddrinfo',
                                                                                            'freeaddrinfo',
                                                                                            'WSASetLastError',
                                                                                            'SHGetFolderPathW',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringA',
                                                                                            'CertAddEncodedCertificateToStore',
                                                                                            'CertCreateCertificateContext',
                                                                                            'CertGetCertificateChain',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertOpenStore',
                                                                                            'CryptExportPKCS8',
                                                                                            'CertEnumCRLsInStore',
                                                                                            'CertCloseStore',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertOpenSystemStoreA',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'MemPool_InitOnStdHeap',
                                                                                            'MXUser_CreateRWLock',
                                                                                            'MXUser_IsCurThreadHoldingRWLock',
                                                                                            'MXUser_DestroyRWLock',
                                                                                            'MXUser_ReleaseRWLock',
                                                                                            'MXUser_AcquireForWrite',
                                                                                            'MXUser_CreateSingletonRWLock',
                                                                                            'MXUser_AcquireForRead',
                                                                                            '?GetCanonicalPath@System@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '?RegexFromGlob@StringUtil@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '?FindCaseSensitive@File@System@Vmacore@@2HB',
                                                                                            '?ParseBytesFromHexString@StringUtil@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@EV?$allocator@E@std@@@4@@Z',
                                                                                            '?DateTimeFromUtc@System@Vmacore@@YA?AVDateTime@12@_J_N@Z',
                                                                                            '?ParseDouble@StringUtil@Vmacore@@YANABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?ParseFloat@StringUtil@Vmacore@@YAMABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?ParseShort@StringUtil@Vmacore@@YAFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?ParseByte@StringUtil@Vmacore@@YADABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?ValidateAnyURI@Xml@Vmacore@@YAXPBD@Z',
                                                                                            '?PanicNotReached@Vmacore@@YAXPBDH@Z',
                                                                                            '?GetMonotonicTime@System@Vmacore@@YA_JXZ',
                                                                                            '?LogInternal@Service@Vmacore@@YAXPAVLogger@12@W4LogLevel@312@PBDABVPrintFormatter@2@3333@Z',
                                                                                            '?FormatChar@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?FormatObject@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?SetVerifySSLCertificates@Ssl@Vmacore@@YAXW4VerifyType@12@@Z',
                                                                                            '?SetVerifyLocations@Ssl@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?CreateKeyStore@Crypto@Vmacore@@YAXPAVPrivateKey@12@PAVCertificate@12@ABV?$RefList@VCertificate@Crypto@Vmacore@@@2@AAV?$Ref@VKeyStore@Crypto@Vmacore@@@2@@Z',
                                                                                            '?CreateSSLContext@Ssl@Vmacore@@YAXPAVKeyStore@Crypto@2@W4SupportedVersion@12@AAV?$Ref@VSSLContext@Ssl@Vmacore@@@2@@Z',
                                                                                            '?CreateHttpUserAgent@Http@Vmacore@@YAXPAVConnectionSpec@12@AAV?$Ref@VUserAgent@Http@Vmacore@@@2@@Z',
                                                                                            '?EvaluateSimplePath@Xml@Vmacore@@YA_NPAVElementNode@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV45@@Z',
                                                                                            '?CreateTunneledConnectionSpec@Http@Vmacore@@YAXPAVConnectionSpec@12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1AAV?$Ref@VConnectionSpec@Http@Vmacore@@@2@@Z',
                                                                                            '?CreateTCPConnectionSpec@Http@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H_NAAV?$Ref@VConnectionSpec@Http@Vmacore@@@2@@Z',
                                                                                            '?CreateSSLConnectionSpec@Http@Vmacore@@YAXPAVConnectionSpec@12@PAVSSLContext@Ssl@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2AAV?$Ref@VConnectionSpec@Http@Vmacore@@@2@@Z',
                                                                                            '?FormatXmlNode@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?OpenAccessWrite@FileHandle@System@Vmacore@@2HB',
                                                                                            '?GetUtcTime@DateTime@System@Vmacore@@QBE_JXZ',
                                                                                            '?IsReadLocked@RWLockableObjectImpl@System@Vmacore@@UBE_NXZ',
                                                                                            '?DowngradeWriteLock@RWLockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '?UpgradeReadLock@RWLockableObjectImpl@System@Vmacore@@UAE_NXZ',
                                                                                            '?IsWriteLocked@RWLockableObjectImpl@System@Vmacore@@UBE_NXZ',
                                                                                            '?Unlock@RWLockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '?WriteLock@RWLockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '?IsUnlocked@RWLockableObjectImpl@System@Vmacore@@UBE_NXZ',
                                                                                            '?ReadLock@RWLockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '??0RWLockableObjectImpl@System@Vmacore@@QAE@XZ',
                                                                                            '??1RWLockableObjectImpl@System@Vmacore@@UAE@XZ',
                                                                                            '?Created@ResponseCode@Http@Vmacore@@3UInfo@123@A',
                                                                                            '??1WaitableObjectImpl@System@Vmacore@@UAE@XZ',
                                                                                            '??0WaitableObjectImpl@System@Vmacore@@QAE@XZ',
                                                                                            '?Unlock@LockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '?IsLocked@LockableObjectImpl@System@Vmacore@@UBE_NXZ',
                                                                                            '?Lock@LockableObjectImpl@System@Vmacore@@UAEXXZ',
                                                                                            '??0LockableObjectImpl@System@Vmacore@@QAE@XZ',
                                                                                            '?UTF8ToUTF16@System@Vmacore@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z',
                                                                                            '??1LockableObjectImpl@System@Vmacore@@UAE@XZ',
                                                                                            '??0SystemException@Vmacore@@QAE@H@Z',
                                                                                            '??0SystemException@Vmacore@@QAE@ABV01@@Z',
                                                                                            '??1SystemException@Vmacore@@UAE@XZ',
                                                                                            '??0SystemErrorCode@Vmacore@@QAE@XZ',
                                                                                            '??0SystemException@Vmacore@@QAE@ABVSystemErrorCode@1@@Z',
                                                                                            '?URLDecode@Http@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '?Unauthorized@ResponseCode@Http@Vmacore@@3UInfo@123@A',
                                                                                            '?ProxyAuthorizationRequired@ResponseCode@Http@Vmacore@@3UInfo@123@A',
                                                                                            '?Ok@ResponseCode@Http@Vmacore@@3UInfo@123@A',
                                                                                            '?PartialContent@ResponseCode@Http@Vmacore@@3UInfo@123@A',
                                                                                            '?ParseUInt@StringUtil@Vmacore@@YAIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?FormatPtr@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?CreateXMLDocumentHandler@Xml@Vmacore@@YAXAAV?$Ref@VXMLHandler@Xml@Vmacore@@@2@@Z',
                                                                                            '?CreateXMLParser@Xml@Vmacore@@YAXPAVXMLHandler@12@AAV?$Ref@VXMLParser@Xml@Vmacore@@@2@@Z',
                                                                                            '?URLPathEncode@Http@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '?CreateXmlFileConfig@Service@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HIAAV?$Ref@VConfig@Service@Vmacore@@@2@@Z',
                                                                                            '?WriteText@Xml@Vmacore@@YAXPAVWriter@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?ASPrint@MessageFormatter@Vmacore@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDABVPrintFormatter@2@111@Z',
                                                                                            '?ASPrint@MessageFormatter@Vmacore@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDABVPrintFormatter@2@11@Z',
                                                                                            '?ASPrint@MessageFormatter@Vmacore@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDABVPrintFormatter@2@@Z',
                                                                                            '?Base64Encode@StringUtil@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@EV?$allocator@E@std@@@4@@Z',
                                                                                            '?ASPrint@MessageFormatter@Vmacore@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDABVPrintFormatter@2@1@Z',
                                                                                            '?CreateStringReader@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$Ref@UStringReader@Vmacore@@@1@@Z',
                                                                                            '?SetLevelByName@Logger@Service@Vmacore@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?InitSSL@Ssl@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?InitApp@Service@Vmacore@@YAXPAVConfig@12@@Z',
                                                                                            '??0PrintFormatter@Vmacore@@QAE@KPBD@Z',
                                                                                            '?GetThisThread@System@Vmacore@@YAPAVThread@12@XZ',
                                                                                            '?LogInternal@Service@Vmacore@@YAXPAVLogger@12@W4LogLevel@312@PBDABVPrintFormatter@2@33@Z',
                                                                                            '?LogInternal@Service@Vmacore@@YAXPAVLogger@12@W4LogLevel@312@PBDABVPrintFormatter@2@3@Z',
                                                                                            '?LogInternal@Service@Vmacore@@YAXPAVLogger@12@W4LogLevel@312@PBDABVPrintFormatter@2@@Z',
                                                                                            '?ToUpper@StringUtil@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '?GetDefaultLogger@Service@Vmacore@@YAPAVLogger@12@XZ',
                                                                                            '?CreateLogWriter@Service@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVWriter@2@0AAV?$Ref@VLogWriter@Service@Vmacore@@@2@@Z',
                                                                                            '?LogInternal@Service@Vmacore@@YAXPAVLogger@12@W4LogLevel@312@PBD@Z',
                                                                                            '?QuickExit@System@Vmacore@@YAXH@Z',
                                                                                            '?GetThreadPool@System@Vmacore@@YAPAVThreadPool@12@XZ',
                                                                                            '?CreateDocument@Xml@Vmacore@@YAXAAV?$Ref@VDocument@Xml@Vmacore@@@2@@Z',
                                                                                            '?GetUtcDateTime@System@Vmacore@@YA?AVDateTime@12@XZ',
                                                                                            '?ToString@DateTime@System@Vmacore@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?CreateCommentNode@Xml@Vmacore@@YAXAAV?$Ref@VCommentNode@Xml@Vmacore@@@2@@Z',
                                                                                            '??0PrintFormatter@Vmacore@@QAE@JPBD@Z',
                                                                                            '?CreateElementNode@Xml@Vmacore@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AAV?$Ref@VElementNode@Xml@Vmacore@@@2@@Z',
                                                                                            '?CreateTextNode@Xml@Vmacore@@YAXAAV?$Ref@VTextNode@Xml@Vmacore@@@2@@Z',
                                                                                            '?CreateStringWriter@Vmacore@@YA?AV?$TmpRef@VStringWriter@Vmacore@@@1@XZ',
                                                                                            '?ThrowTypeMismatchException@Vmacore@@YAXABVtype_info@@0@Z',
                                                                                            '??0Throwable@Vmacore@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?Inc@?$Atomic@H@Vmacore@@QAEXXZ',
                                                                                            '?GetApp@Service@Vmacore@@YAPAVApp@12@XZ',
                                                                                            '?Read@?$Atomic@H@Vmacore@@QBEHXZ',
                                                                                            '?Dec@?$Atomic@H@Vmacore@@QAEXXZ',
                                                                                            '??0?$Atomic@H@Vmacore@@QAE@H@Z',
                                                                                            '??0PrintFormatter@Vmacore@@QAE@_KPBD@Z',
                                                                                            '??0PrintFormatter@Vmacore@@QAE@_JPBD@Z',
                                                                                            '?FormatUInt@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?Print@MessageFormatter@Vmacore@@SAXPAVWriter@2@PBDABVPrintFormatter@2@222@Z',
                                                                                            '?Print@MessageFormatter@Vmacore@@SAXPAVWriter@2@PBDABVPrintFormatter@2@22@Z',
                                                                                            '?Print@MessageFormatter@Vmacore@@SAXPAVWriter@2@PBDABVPrintFormatter@2@@Z',
                                                                                            '??0ObjectImpl@Vmacore@@IAE@XZ',
                                                                                            '?CreateFlatStringConfig@Service@Vmacore@@YAXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$Ref@VConfig@Service@Vmacore@@@2@@Z',
                                                                                            '?ParseLong@StringUtil@Vmacore@@YA_JABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?ParseURI@Http@Vmacore@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@1111@Z',
                                                                                            '?ParseURIAuthority@Http@Vmacore@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@111@Z',
                                                                                            '?ParseInt@StringUtil@Vmacore@@YAHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?FormatInt@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?Tokenize@StringUtil@Vmacore@@YAIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@0@Z',
                                                                                            '?Trim@StringUtil@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '?CreateScratchConfig@Service@Vmacore@@YAXAAV?$Ref@VConfig@Service@Vmacore@@@2@@Z',
                                                                                            '?IncRef@ObjectImpl@Vmacore@@UBEXXZ',
                                                                                            '?ToString@ObjectImpl@Vmacore@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?GetRefCount@ObjectImpl@Vmacore@@UBEHXZ',
                                                                                            '?DecRef@ObjectImpl@Vmacore@@UBEXXZ',
                                                                                            '?ToLower@StringUtil@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '??1ObjectImpl@Vmacore@@MAE@XZ',
                                                                                            '?FinalDecRef@ObjectImpl@Vmacore@@MAEXABVtype_info@@@Z',
                                                                                            '?FirstIncRef@ObjectImpl@Vmacore@@MAEXABVtype_info@@@Z',
                                                                                            '?ListDirectory@File@System@Vmacore@@SAHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@@Z',
                                                                                            '?EndsWith@StringUtil@Vmacore@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?FormatString@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?URLPathDecode@Http@Vmacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z',
                                                                                            '?Print@MessageFormatter@Vmacore@@SAXPAVWriter@2@PBDABVPrintFormatter@2@2@Z',
                                                                                            '?GetSystemFactory@System@Vmacore@@YAPAVSystemFactory@12@XZ',
                                                                                            '?CreateBufferedReader@Vmacore@@YAXPAVReader@1@HAAV?$Ref@VBufferedReader@Vmacore@@@1@@Z',
                                                                                            '?FormatSTLString@PrintFormatter@Vmacore@@SAXPAVWriter@2@ABTFormatValue@12@PBD@Z',
                                                                                            '?PanicVerify@Vmacore@@YAXPBD0H@Z',
                                                                                            '?StartsWith@StringUtil@Vmacore@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H0@Z',
                                                                                            '?Where@Throwable@Vmacore@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?Dump@Throwable@Vmacore@@UBEXXZ',
                                                                                            '?GetBacktrace@Throwable@Vmacore@@UBEPAVBacktrace@System@2@XZ',
                                                                                            '?what@Throwable@Vmacore@@UBEPBDXZ',
                                                                                            '??0Throwable@Vmacore@@IAE@ABV01@@Z',
                                                                                            '??1Throwable@Vmacore@@UAE@XZ',
                                                                                            '??$GetPrimitiveExtraSize@V?$vector@EV?$allocator@E@std@@@std@@@Vmomi@@YAIABV?$vector@EV?$allocator@E@std@@@std@@@Z',
                                                                                            '??$GetType@D@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetPrimitiveExtraSize@VUri@Vmomi@@@Vmomi@@YAIABVUri@0@@Z',
                                                                                            '??1InvalidType@Fault@Vmomi@@UAE@XZ',
                                                                                            '?CreateException@InvalidType@Fault@Vmomi@@UAEPAVException@123@XZ',
                                                                                            '?Throw@InvalidType@Fault@Vmomi@@UAEXXZ',
                                                                                            '?_GetDataType@InvalidType@Fault@Vmomi@@UBEPAVDataObjectType@3@XZ',
                                                                                            '?_IsEqual@InvalidType@Fault@Vmomi@@UBE_NPAVAny@3@_N@Z',
                                                                                            '?_Clone@InvalidType@Fault@Vmomi@@UBEPAV123@XZ',
                                                                                            '?_GetSize@InvalidType@Fault@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@InvalidType@Fault@Vmomi@@UBEPAVType@3@XZ',
                                                                                            '??0InvalidType@Fault@Vmomi@@QAE@ABV?$Optional@VPropertyPath@Vmomi@@@Vmacore@@@Z',
                                                                                            '??1MethodFault@Vmomi@@UAE@XZ',
                                                                                            '?CreateException@MethodFault@Vmomi@@UAEPAVException@12@XZ',
                                                                                            '?Throw@MethodFault@Vmomi@@UAEXXZ',
                                                                                            '?_GetDataType@MethodFault@Vmomi@@UBEPAVDataObjectType@2@XZ',
                                                                                            '?_DiffProperties@DynamicData@Vmomi@@UBEXPAVAny@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@2@@Z',
                                                                                            '?_IsEqual@MethodFault@Vmomi@@UBE_NPAVAny@2@_N@Z',
                                                                                            '?_Clone@MethodFault@Vmomi@@UBEPAV12@XZ',
                                                                                            '?_GetSize@MethodFault@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@MethodFault@Vmomi@@UBEPAVType@2@XZ',
                                                                                            '??0MethodFault@Vmomi@@QAE@XZ',
                                                                                            '??0Exception@InvalidArgument@Fault@Vmomi@@QAE@ABV0123@@Z',
                                                                                            '??1Exception@InvalidArgument@Fault@Vmomi@@UAE@XZ',
                                                                                            '??0Exception@InvalidArgument@Fault@Vmomi@@QAE@ABV?$Optional@VPropertyPath@Vmomi@@@Vmacore@@@Z',
                                                                                            '??0PropertyPath@Vmomi@@QAE@PBD@Z',
                                                                                            '??1LocalizableMessage@Vmomi@@UAE@XZ',
                                                                                            '?_GetDataType@LocalizableMessage@Vmomi@@UBEPAVDataObjectType@2@XZ',
                                                                                            '?_DiffProperties@LocalizableMessage@Vmomi@@UBEXPAVAny@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@2@@Z',
                                                                                            '?_IsEqual@LocalizableMessage@Vmomi@@UBE_NPAVAny@2@_N@Z',
                                                                                            '?_Clone@LocalizableMessage@Vmomi@@UBEPAV12@XZ',
                                                                                            '?_GetSize@LocalizableMessage@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@LocalizableMessage@Vmomi@@UBEPAVType@2@XZ',
                                                                                            '??0LocalizableMessage@Vmomi@@QAE@XZ',
                                                                                            '?SetKey@LocalizableMessage@Vmomi@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?GetFaultMessage@MethodFault@Vmomi@@QAEPAV?$DataArray@VLocalizableMessage@Vmomi@@@2@XZ',
                                                                                            '??1WaitOptions@PropertyCollector@Core@Vmomi@@UAE@XZ',
                                                                                            '??1ObjectSpec@PropertyCollector@Core@Vmomi@@UAE@XZ',
                                                                                            '??1PropertySpec@PropertyCollector@Core@Vmomi@@UAE@XZ',
                                                                                            '??1FilterSpec@PropertyCollector@Core@Vmomi@@UAE@XZ',
                                                                                            '?_GetDataType@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEPAVDataObjectType@4@XZ',
                                                                                            '?_DiffProperties@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEXPAVAny@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@ObjectSpec@PropertyCollector@Core@Vmomi@@UBE_NPAVAny@4@_N@Z',
                                                                                            '?_Clone@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEPAV1234@XZ',
                                                                                            '?_GetSize@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@ObjectSpec@PropertyCollector@Core@Vmomi@@UBEPAVType@4@XZ',
                                                                                            '?_GetDataType@PropertySpec@PropertyCollector@Core@Vmomi@@UBEPAVDataObjectType@4@XZ',
                                                                                            '?_DiffProperties@PropertySpec@PropertyCollector@Core@Vmomi@@UBEXPAVAny@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@PropertySpec@PropertyCollector@Core@Vmomi@@UBE_NPAVAny@4@_N@Z',
                                                                                            '?_Clone@PropertySpec@PropertyCollector@Core@Vmomi@@UBEPAV1234@XZ',
                                                                                            '?_GetSize@PropertySpec@PropertyCollector@Core@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@PropertySpec@PropertyCollector@Core@Vmomi@@UBEPAVType@4@XZ',
                                                                                            '?_GetDataType@FilterSpec@PropertyCollector@Core@Vmomi@@UBEPAVDataObjectType@4@XZ',
                                                                                            '?_DiffProperties@FilterSpec@PropertyCollector@Core@Vmomi@@UBEXPAVAny@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@FilterSpec@PropertyCollector@Core@Vmomi@@UBE_NPAVAny@4@_N@Z',
                                                                                            '?_Clone@FilterSpec@PropertyCollector@Core@Vmomi@@UBEPAV1234@XZ',
                                                                                            '?_GetSize@FilterSpec@PropertyCollector@Core@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@FilterSpec@PropertyCollector@Core@Vmomi@@UBEPAVType@4@XZ',
                                                                                            '?_GetDataType@WaitOptions@PropertyCollector@Core@Vmomi@@UBEPAVDataObjectType@4@XZ',
                                                                                            '?_DiffProperties@WaitOptions@PropertyCollector@Core@Vmomi@@UBEXPAVAny@4@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@WaitOptions@PropertyCollector@Core@Vmomi@@UBE_NPAVAny@4@_N@Z',
                                                                                            '?_Clone@WaitOptions@PropertyCollector@Core@Vmomi@@UBEPAV1234@XZ',
                                                                                            '?_GetSize@WaitOptions@PropertyCollector@Core@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@WaitOptions@PropertyCollector@Core@Vmomi@@UBEPAVType@4@XZ',
                                                                                            '??0WaitOptions@PropertyCollector@Core@Vmomi@@QAE@ABV?$Optional@H@Vmacore@@0@Z',
                                                                                            '??0FilterSpec@PropertyCollector@Core@Vmomi@@QAE@XZ',
                                                                                            '??0PropertySpec@PropertyCollector@Core@Vmomi@@QAE@ABVTypeName@3@ABV?$Optional@_N@Vmacore@@PAV?$Array@VPropertyPath@Vmomi@@@3@@Z',
                                                                                            '?SetPropSet@FilterSpec@PropertyCollector@Core@Vmomi@@QAEXPAV?$DataArray@VPropertySpec@PropertyCollector@Core@Vmomi@@@4@@Z',
                                                                                            '??0ObjectSpec@PropertyCollector@Core@Vmomi@@QAE@PAVMoRef@3@ABV?$Optional@_N@Vmacore@@PAV?$DataArray@VSelectionSpec@PropertyCollector@Core@Vmomi@@@3@@Z',
                                                                                            '?SetObjectSet@FilterSpec@PropertyCollector@Core@Vmomi@@QAEXPAV?$DataArray@VObjectSpec@PropertyCollector@Core@Vmomi@@@4@@Z',
                                                                                            '??$GetType@VObjectSpec@PropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSelectionSpec@PropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPropertySpec@PropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?Compare@PropertyPath@Vmomi@@QBEHABV12@@Z',
                                                                                            '??$GetExtraSize@VPropertyPath@Vmomi@@@Vmomi@@YAIABV?$vector@VPropertyPath@Vmomi@@V?$allocator@VPropertyPath@Vmomi@@@std@@@std@@P6AII@Z@Z',
                                                                                            '??0PropertyPath@Vmomi@@QAE@XZ',
                                                                                            '?GetFilterSet@UpdateSet@PropertyCollector@Core@Vmomi@@QBEPAV?$DataArray@VFilterUpdate@PropertyCollector@Core@Vmomi@@@4@XZ',
                                                                                            '?GetObjectSet@FilterUpdate@PropertyCollector@Core@Vmomi@@QBEPAV?$DataArray@VObjectUpdate@PropertyCollector@Core@Vmomi@@@4@XZ',
                                                                                            '?GetChangeSet@ObjectUpdate@PropertyCollector@Core@Vmomi@@QBEPAV?$DataArray@VChange@PropertyCollector@Core@Vmomi@@@4@XZ',
                                                                                            '?Compare@PropertyPath@Vmomi@@QBEHPBD@Z',
                                                                                            '?GetVal@Change@PropertyCollector@Core@Vmomi@@QBEPAVAny@4@XZ',
                                                                                            '??4PropertyPath@Vmomi@@QAEAAV01@ABV01@@Z',
                                                                                            '??$GetType@VFilter@PropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPropertyCollector@Core@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?FindVersion@Vmomi@@YAPAVVersion@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?_GetSize@?$DataArray@VMoRef@Vmomi@@@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?_DiffProperties@MoRef@Vmomi@@UBEXPAVAny@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@2@@Z',
                                                                                            '?_IsEqual@MoRef@Vmomi@@UBE_NPAVAny@2@_N@Z',
                                                                                            '?_GetSize@MoRef@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '?CreateSoapStubAdapter@Vmomi@@YAXPAVUserAgent@Http@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVVersion@1@PAVLogger@Service@4@PAVResultFilter@1@V?$Optional@_J@4@55AAV?$Ref@VStubAdapter@Vmomi@@@4@@Z',
                                                                                            '??$GetPrimitiveExtraSize@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@YAIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?DeserializeObjectFromConfig@Vmomi@@YAXAAV?$Ref@VAny@Vmomi@@@Vmacore@@PAVType@1@AAVView@Config@Service@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NPAVResultFilter@1@PAVVersion@1@@Z',
                                                                                            '??$GetType@C@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?SetMsg@MethodFault@Vmomi@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??$GetType@VMethodName@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VTypeName@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPropertyPath@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VMoRef@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@V?$vector@EV?$allocator@E@std@@@std@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VUri@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDateTime@System@Vmacore@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@N@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@M@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@_J@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@H@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@F@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@_N@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?GetMsg@MethodFault@Vmomi@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?SerializeObj@Vmomi@@YAXPAVAny@1@PAVSerializationVisitor@1@I@Z',
                                                                                            '??0PropertyPath@Vmomi@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??1PropertyPath@Vmomi@@QAE@XZ',
                                                                                            '??0PropertyPath@Vmomi@@QAE@ABV01@@Z',
                                                                                            '??$GetExtraSize@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@YAIABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@P6AII@Z@Z',
                                                                                            '??$GetType@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0Any@Vmomi@@IAE@ABV01@@Z',
                                                                                            '?InitializeStaticTypes@Vmomi@@YAXXZ',
                                                                                            '?InitLocale@Vmomi@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?GetTypeMap@Vmomi@@YAPAVTypeMap@1@XZ',
                                                                                            '?CreateLocale@Vmomi@@YAXAAV?$Ref@VLocale@Vmomi@@@Vmacore@@@Z',
                                                                                            '??$GetType@VMethodFault@Vmomi@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0DataArrayBase@Vmomi@@IAE@ABV01@@Z',
                                                                                            '?_DiffProperties@DataArrayBase@Vmomi@@UBEXPAVAny@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@2@@Z',
                                                                                            '?_IsEqual@DataArrayBase@Vmomi@@UBE_NPAVAny@2@_N@Z',
                                                                                            '?_GetSize@DataArrayBase@Vmomi@@UBEIP6AII@Z@Z',
                                                                                            '??0Any@Vmomi@@IAE@XZ',
                                                                                            '??1Any@Vmomi@@UAE@XZ',
                                                                                            '??0ConnectInfo@VirtualDevice@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0OvfUnknownDeviceBacking@Fault@Vim@@QAE@PAVVirtualDevice@Device@Vm@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVBackingInfo@3452@@Z',
                                                                                            '??0VirtualPS2Controller@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualKeyboard@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualPointingDevice@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0DeviceBackingInfo@VirtualPointingDevice@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0OvfUnknownDevice@Fault@Vim@@QAE@XZ',
                                                                                            '??0VirtualDevice@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0Description@Vim@@QAE@XZ',
                                                                                            '?SetDevice@OvfUnknownDevice@Fault@Vim@@QAEXPAVVirtualDevice@Device@Vm@3@@Z',
                                                                                            '??$GetType@VVirtualAHCIController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VParaVirtualSCSIController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualLsiLogicSASController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualBusLogicController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualLsiLogicController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0Description@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfMappedOsId@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfNoSupportedHardwareFamily@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0OvfHardwareCheck@Fault@Vim@@QAE@XZ',
                                                                                            '??0OvfHostValueNotParsed@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0ProductInfo@VApp@Vim@@QAE@XZ',
                                                                                            '??0ProductSpec@VApp@Vim@@QAE@W4Operation@ArrayUpdateSpec@Option@2@PAVAny@Vmomi@@PAVProductInfo@12@@Z',
                                                                                            '??0PropertySpec@VApp@Vim@@QAE@XZ',
                                                                                            '?SetInfo@PropertySpec@VApp@Vim@@QAEXPAVPropertyInfo@23@@Z',
                                                                                            '??0OvfSectionInfo@VApp@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@4@1ABV?$Optional@_N@4@1@Z',
                                                                                            '??0OvfSectionSpec@VApp@Vim@@QAE@XZ',
                                                                                            '?SetInfo@OvfSectionSpec@VApp@Vim@@QAEXPAVOvfSectionInfo@23@@Z',
                                                                                            '?GetOvfSection@VmConfigSpec@VApp@Vim@@QBEPAV?$DataArray@VOvfSectionSpec@VApp@Vim@@@Vmomi@@XZ',
                                                                                            '??0BootableCdromDevice@BootOptions@Vm@Vim@@QAE@XZ',
                                                                                            '??0BootOptions@Vm@Vim@@QAE@XZ',
                                                                                            '??0BootableFloppyDevice@BootOptions@Vm@Vim@@QAE@XZ',
                                                                                            '??0BootableDiskDevice@BootOptions@Vm@Vim@@QAE@H@Z',
                                                                                            '??0BootableEthernetDevice@BootOptions@Vm@Vim@@QAE@H@Z',
                                                                                            '?GetBootOrder@BootOptions@Vm@Vim@@QBEPAV?$DataArray@VBootableDevice@BootOptions@Vm@Vim@@@Vmomi@@XZ',
                                                                                            '?SetBootOptions@ConfigSpec@Vm@Vim@@QAEXPAVBootOptions@23@@Z',
                                                                                            '??0CpuIdInfo@Host@Vim@@QAE@XZ',
                                                                                            '??0CpuIdInfoSpec@ConfigSpec@Vm@Vim@@QAE@XZ',
                                                                                            '?SetInfo@CpuIdInfoSpec@ConfigSpec@Vm@Vim@@QAEXPAVCpuIdInfo@Host@4@@Z',
                                                                                            '?SetCpuFeatureMask@ConfigSpec@Vm@Vim@@QAEXPAV?$DataArray@VCpuIdInfoSpec@ConfigSpec@Vm@Vim@@@Vmomi@@@Z',
                                                                                            '??0OptionValue@Option@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVAny@Vmomi@@@Z',
                                                                                            '?SetIpAssignment@VmConfigSpec@VApp@Vim@@QAEXPAVIPAssignmentInfo@23@@Z',
                                                                                            '?GetEula@VmConfigSpec@VApp@Vim@@QBEPAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@XZ',
                                                                                            '??0ToolsConfigInfo@Vm@Vim@@QAE@XZ',
                                                                                            '?SetTools@ConfigSpec@Vm@Vim@@QAEXPAVToolsConfigInfo@23@@Z',
                                                                                            '??0OvfInvalidValueReference@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '??0OvfDiskOrderConstraint@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0OvfPropertyValue@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfPropertyNetwork@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfDuplicatedElementBoundary@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfMissingElementNormalBoundary@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfUnsupportedElementValue@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z',
                                                                                            '??0OvfPropertyType@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfPropertyExport@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0DeviceBackingInfo@VirtualParallelPort@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0OvfUnsupportedAttribute@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z',
                                                                                            '??0OvfToXmlUnsupportedElement@Fault@Vim@@QAE@ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@@Z',
                                                                                            '??0SharesInfo@Vim@@IAE@ABV01@@Z',
                                                                                            '?_GetDataType@SharesInfo@Vim@@UBEPAVDataObjectType@Vmomi@@XZ',
                                                                                            '?_DiffProperties@SharesInfo@Vim@@UBEXPAVAny@Vmomi@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVPropertyDiffSet@4@@Z',
                                                                                            '?_IsEqual@SharesInfo@Vim@@UBE_NPAVAny@Vmomi@@_N@Z',
                                                                                            '?_GetSize@SharesInfo@Vim@@UBEIP6AII@Z@Z',
                                                                                            '?_GetType@SharesInfo@Vim@@UBEPAVType@Vmomi@@XZ',
                                                                                            '??1SharesInfo@Vim@@UAE@XZ',
                                                                                            '??0OvfInvalidValueConfiguration@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '??0OvfPropertyQualifier@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '??0OvfPropertyQualifierDuplicate@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '??0OvfPropertyQualifierIgnored@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '??0OvfInvalidValueFormatMalformed@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '??0OvfElementInvalidValue@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfInvalidVmName@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0OvfUnsupportedSection@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z',
                                                                                            '?LEVEL_CUSTOM@SharesInfo@Vim@@2QBDB',
                                                                                            '?LEVEL_LOW@SharesInfo@Vim@@2QBDB',
                                                                                            '?LEVEL_NORMAL@SharesInfo@Vim@@2QBDB',
                                                                                            '?LEVEL_HIGH@SharesInfo@Vim@@2QBDB',
                                                                                            '??0OvfPropertyNetworkExport@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0OvfDuplicatedPropertyIdExport@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?SetDatastore@FileBackingInfo@VirtualDevice@Device@Vm@Vim@@QAEXPAVMoRef@Vmomi@@@Z',
                                                                                            '?SetBootOptions@ConfigInfo@Vm@Vim@@QAEXPAVBootOptions@23@@Z',
                                                                                            '?GetExtraConfig@ConfigSpec@Vm@Vim@@QBEPAV?$DataArray@VOptionValue@Option@Vim@@@Vmomi@@XZ',
                                                                                            '??0FileInfo@Vm@Vim@@QAE@XZ',
                                                                                            '?GetExtraConfig@ConfigInfo@Vm@Vim@@QBEPAV?$DataArray@VOptionValue@Option@Vim@@@Vmomi@@XZ',
                                                                                            '?GetCpuFeatureMask@ConfigInfo@Vm@Vim@@QBEPAV?$DataArray@VCpuIdInfo@Host@Vim@@@Vmomi@@XZ',
                                                                                            '?SetConnectable@VirtualDevice@Device@Vm@Vim@@QAEXPAVConnectInfo@1234@@Z',
                                                                                            '?SetDeviceInfo@VirtualDevice@Device@Vm@Vim@@QAEXPAVDescription@4@@Z',
                                                                                            '??$GetType@VCpuIdInfoSpec@ConfigSpec@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualDeviceSpec@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?GetGuestOSDescriptor@ConfigOption@Vm@Vim@@QBEPAV?$DataArray@VGuestOsDescriptor@Vm@Vim@@@Vmomi@@XZ',
                                                                                            '??0FileBackingInfo@VirtualParallelPort@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualParallelPort@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0ThinPrintBackingInfo@VirtualSerialPort@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0DeviceBackingInfo@VirtualSerialPort@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0PipeBackingInfo@VirtualSerialPort@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0FileBackingInfo@VirtualSerialPort@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualSerialPort@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0DeviceBackingInfo@VirtualFloppy@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0OvfInvalidValueEmpty@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '??0PciBusSlotInfo@VirtualDevice@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0PciBusSlotInfo@VirtualUSBController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '?SetSlotInfo@VirtualDevice@Device@Vm@Vim@@QAEXPAVBusSlotInfo@1234@@Z',
                                                                                            '?GetCpuPkg@HardwareInfo@Host@Vim@@QBEPAV?$DataArray@VCpuPackage@Host@Vim@@@Vmomi@@XZ',
                                                                                            '??0OvfCpuCompatibilityCheckNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '?GetCpuFeature@CpuPackage@Host@Vim@@QBEPAV?$DataArray@VCpuIdInfo@Host@Vim@@@Vmomi@@XZ',
                                                                                            '??0OvfCpuCompatibility@Fault@Vim@@QAE@XZ',
                                                                                            '??0OvfUnsupportedDiskProvisioning@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?SetFiles@ConfigSpec@Vm@Vim@@QAEXPAVFileInfo@23@@Z',
                                                                                            '?SetDeviceChange@ConfigSpec@Vm@Vim@@QAEXPAV?$DataArray@VVirtualDeviceSpec@Device@Vm@Vim@@@Vmomi@@@Z',
                                                                                            '??0URIBackingInfo@VirtualSerialPort@Device@Vm@Vim@@QAE@XZ',
                                                                                            '?SetDevice@VirtualController@Device@Vm@Vim@@QAEXPAV?$Array@H@Vmomi@@@Z',
                                                                                            '??0OpaqueNetworkBackingInfo@VirtualEthernetCard@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0DistributedVirtualPortBackingInfo@VirtualEthernetCard@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0PortConnection@Dvs@Vim@@QAE@XZ',
                                                                                            '?SetPort@DistributedVirtualPortBackingInfo@VirtualEthernetCard@Device@Vm@Vim@@QAEXPAVPortConnection@Dvs@5@@Z',
                                                                                            '??0OvfNoHostNic@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@@Z',
                                                                                            '?MACTYPES_GENERATED@VirtualEthernetCardOption@Device@Vm@Vim@@2QBDB',
                                                                                            '??0VirtualDeviceSpec@Device@Vm@Vim@@QAE@XZ',
                                                                                            '?SetDevice@VirtualDeviceSpec@Device@Vm@Vim@@QAEXPAVVirtualDevice@234@@Z',
                                                                                            '??0FlatVer1BackingInfo@VirtualDisk@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0SparseVer1BackingInfo@VirtualDisk@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0RawDiskVer2BackingInfo@VirtualDisk@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0PartitionedRawDiskVer2BackingInfo@VirtualDisk@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0RawDiskMappingVer1BackingInfo@VirtualDisk@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0RemotePassthroughBackingInfo@VirtualCdrom@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0RemoteAtapiBackingInfo@VirtualCdrom@Device@Vm@Vim@@QAE@XZ',
                                                                                            '?GetChoiceInfo@ChoiceOption@Option@Vim@@QBEPAV?$DataArray@VElementDescription@Vim@@@Vmomi@@XZ',
                                                                                            '??0OvfUnsupportedDeviceBackingInfo@Fault@Vim@@QAE@ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@0ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0RemoteDeviceBackingInfo@VirtualFloppy@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0ConnectInfo@VirtualDevice@Device@Vm@Vim@@QAE@_N00ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@@Z',
                                                                                            '??0OvfHostResourceConstraint@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfUnsupportedSubType@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1H1@Z',
                                                                                            '??0OvfUnsupportedDeviceBackingOption@Fault@Vim@@QAE@ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@0ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??$GetType@VVirtualEthernetCardOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualEnsoniq1371Option@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSoundBlaster16Option@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualHdAudioCardOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VRawDiskMappingVer1BackingOption@VirtualDiskOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPartitionedRawDiskVer2BackingOption@VirtualDiskOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VRawDiskVer2BackingOption@VirtualDiskOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSparseVer1BackingOption@VirtualDiskOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFlatVer1BackingOption@VirtualDiskOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPartitionedRawDiskVer2BackingInfo@VirtualDisk@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSparseVer2BackingInfo@VirtualDisk@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSparseVer1BackingInfo@VirtualDisk@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFlatVer1BackingInfo@VirtualDisk@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VAtapiBackingOption@VirtualCdromOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPassthroughBackingOption@VirtualCdromOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VRemoteAtapiBackingOption@VirtualCdromOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VRemotePassthroughBackingOption@VirtualCdromOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VIsoBackingOption@VirtualCdromOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualCdromOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDeviceBackingOption@VirtualPointingDeviceOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualPointingDeviceOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDeviceBackingInfo@VirtualPointingDevice@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VRemoteDeviceBackingOption@VirtualFloppyOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VImageBackingOption@VirtualFloppyOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDeviceBackingOption@VirtualFloppyOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualFloppyOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0OvfNoSpaceOnController@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z',
                                                                                            '??0OvfMissingHardware@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z',
                                                                                            '??0OvfUnsupportedType@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1H@Z',
                                                                                            '??$GetType@VVirtualPCIControllerOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualPS2ControllerOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSIOControllerOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualUSBXHCIControllerOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualUSBControllerOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSATAControllerOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualIDEControllerOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSCSIControllerOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualControllerOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?GetEula@VmConfigInfo@VApp@Vim@@QBEPAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@XZ',
                                                                                            '?GetOvfSection@VmConfigInfo@VApp@Vim@@QBEPAV?$DataArray@VOvfSectionInfo@VApp@Vim@@@Vmomi@@XZ',
                                                                                            '??0OvfUnableToExportDisk@Fault@Vim@@QAE@PAVVirtualDevice@Device@Vm@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z',
                                                                                            '??$GetType@VVirtualVmxnet@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualVmxnet2@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualVmxnet3@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualPCNet32@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualE1000@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualE1000e@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFileBackingInfo@VirtualDevice@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0VirtualHardwareVersionNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '??$GetType@VBootableFloppyDevice@BootOptions@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VBootableCdromDevice@BootOptions@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0MissingController@Fault@Vim@@QAE@XZ',
                                                                                            '??$GetType@VVirtualEnsoniq1371@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSoundBlaster16@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualHdAudioCard@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0OvfUnsupportedDeviceExport@Fault@Vim@@QAE@XZ',
                                                                                            '?SetDevice@OvfHardwareExport@Fault@Vim@@QAEXPAVVirtualDevice@Device@Vm@3@@Z',
                                                                                            '??$GetType@VBootableDiskDevice@BootOptions@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VBootableEthernetDevice@BootOptions@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VThinPrintBackingInfo@VirtualSerialPort@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VURIBackingInfo@VirtualSerialPort@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPipeBackingInfo@VirtualSerialPort@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDeviceBackingInfo@VirtualSerialPort@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFileBackingInfo@VirtualSerialPort@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDeviceBackingInfo@VirtualParallelPort@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFileBackingInfo@VirtualParallelPort@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VRemoteDeviceBackingInfo@VirtualFloppy@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDeviceBackingInfo@VirtualFloppy@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VImageBackingInfo@VirtualFloppy@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VIsoBackingInfo@VirtualCdrom@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VRemotePassthroughBackingInfo@VirtualCdrom@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPassthroughBackingInfo@VirtualCdrom@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VRemoteAtapiBackingInfo@VirtualCdrom@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VAtapiBackingInfo@VirtualCdrom@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualUSB@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0OvfUnknownEntity@Fault@Vim@@QAE@H@Z',
                                                                                            '??0VAppImportSpec@VApp@Vim@@QAE@XZ',
                                                                                            '??0VmImportSpec@Vm@Vim@@QAE@XZ',
                                                                                            '?SetConfigSpec@VmImportSpec@Vm@Vim@@QAEXPAVConfigSpec@23@@Z',
                                                                                            '??0VAppConfigSpec@VApp@Vim@@QAE@XZ',
                                                                                            '?SetVAppConfigSpec@VAppImportSpec@VApp@Vim@@QAEXPAVVAppConfigSpec@23@@Z',
                                                                                            '??0VmConfigSpec@VApp@Vim@@QAE@XZ',
                                                                                            '?SetVAppConfig@ConfigSpec@Vm@Vim@@QAEXPAVVmConfigSpec@VApp@3@@Z',
                                                                                            '??0OvfUnknownDevice@Fault@Vim@@QAE@PAVVirtualDevice@Device@Vm@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?SetResourcePoolSpec@VAppImportSpec@VApp@Vim@@QAEXPAVResourceConfigSpec@3@@Z',
                                                                                            '??0EntityConfigInfo@VApp@Vim@@QAE@XZ',
                                                                                            '?SetEntityConfig@ImportSpec@Vim@@QAEXPAVEntityConfigInfo@VApp@2@@Z',
                                                                                            '?ACTION_POWEROFF@EntityConfigInfo@VApp@Vim@@2QBDB',
                                                                                            '??0ConfigInfo@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualHardware@Vm@Vim@@QAE@XZ',
                                                                                            '?SetHardware@ConfigInfo@Vm@Vim@@QAEXPAVVirtualHardware@23@@Z',
                                                                                            '??0VirtualPCIController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualIDEController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualPCNet32@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualVmxnet2@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualVmxnet@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualVmxnet3@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualE1000@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualE1000e@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0NetworkBackingInfo@VirtualEthernetCard@Device@Vm@Vim@@QAE@XZ',
                                                                                            '?MACTYPES_MANUAL@VirtualEthernetCardOption@Device@Vm@Vim@@2QBDB',
                                                                                            '??0VirtualAHCIController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualBusLogicController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualLsiLogicController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualLsiLogicSASController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0ParaVirtualSCSIController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0FileNotFound@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0VirtualDisk@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0FileBackingInfo@VirtualDevice@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualSIOController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0BootableDiskDevice@BootOptions@Vm@Vim@@QAE@XZ',
                                                                                            '??0BootableEthernetDevice@BootOptions@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualVMCIDevice@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualVideoCard@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualUSBController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualUSBXHCIController@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualEnsoniq1371@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualSoundBlaster16@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualHdAudioCard@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0DeviceBackingInfo@VirtualSoundCard@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualSCSIPassthrough@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0DeviceBackingInfo@VirtualSCSIPassthrough@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualCdrom@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0IsoBackingInfo@VirtualCdrom@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0AtapiBackingInfo@VirtualCdrom@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0PassthroughBackingInfo@VirtualCdrom@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0VirtualFloppy@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0DeviceBackingNotSupported@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@0@Z',
                                                                                            '?IPALLOCATIONPOLICY_FIXEDALLOCATEDPOLICY@IPAssignmentInfo@VApp@Vim@@2QBDB',
                                                                                            '?IPALLOCATIONPOLICY_TRANSIENTPOLICY@IPAssignmentInfo@VApp@Vim@@2QBDB',
                                                                                            '?IPALLOCATIONPOLICY_FIXEDPOLICY@IPAssignmentInfo@VApp@Vim@@2QBDB',
                                                                                            '?IPALLOCATIONPOLICY_DHCPPOLICY@IPAssignmentInfo@VApp@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_SPARSE@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_FLAT@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_THIN@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_THICK@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_SESPARSE@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_EAGERZEROEDTHICK@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_TWOGBMAXEXTENTSPARSE@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_TWOGBMAXEXTENTFLAT@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_MONOLITHICSPARSE@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '?DISKPROVISIONINGTYPE_MONOLITHICFLAT@CreateImportSpecParams@OvfManager@Vim@@2QBDB',
                                                                                            '??$GetType@VKeyValue@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0KeyValue@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0PropertyInfo@VApp@Vim@@QAE@XZ',
                                                                                            '??0OvfUnsupportedAttributeValue@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11@Z',
                                                                                            '??0OvfDuplicateElement@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0OvfXmlFormat@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0OvfInvalidValue@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '??0OvfMissingElement@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0OvfFile@OvfManager@Vim@@QAE@XZ',
                                                                                            '??$GetType@VOvfUnsupportedPackage@Fault@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0KeyValue@Vim@@QAE@XZ',
                                                                                            '??$GetType@VConfigOption@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0OvfFile@OvfManager@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@ABV?$Optional@_J@6@_J22@Z',
                                                                                            '??0OvfMissingAttribute@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '??0OvfUnexpectedElement@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??0OvfWrongNamespace@Fault@Vim@@QAE@HABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??$GetType@VFolder@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDatacenter@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VResourcePool@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VComputeResource@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VManagedEntity@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualMachine@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VServiceInstance@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSessionManager@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VNfcService@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSearchIndex@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VOvfManager@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualApp@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VGuestOperationsManager@Guest@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFileManager@Guest@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VOptionValue@Option@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0NamePasswordAuthentication@Guest@Vm@Vim@@QAE@XZ',
                                                                                            '?SetExtraConfig@ConfigSpec@Vm@Vim@@QAEXPAV?$DataArray@VOptionValue@Option@Vim@@@Vmomi@@@Z',
                                                                                            '?SetValue@OptionValue@Option@Vim@@QAEXPAVAny@Vmomi@@@Z',
                                                                                            '??0OptionValue@Option@Vim@@QAE@XZ',
                                                                                            '??0ConfigSpec@Vm@Vim@@QAE@XZ',
                                                                                            '??$GetType@VStoragePod@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDatastore@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualDisk@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVAppImportSpec@VApp@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVmImportSpec@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?GetDeviceChange@ConfigSpec@Vm@Vim@@QBEPAV?$DataArray@VVirtualDeviceSpec@Device@Vm@Vim@@@Vmomi@@XZ',
                                                                                            '?GetChild@VAppImportSpec@VApp@Vim@@QBEPAV?$DataArray@VImportSpec@Vim@@@Vmomi@@XZ',
                                                                                            '??$GetType@VResourceMap@OvfManager@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?SetDatastore@ResourceMap@OvfManager@Vim@@QAEXPAVMoRef@Vmomi@@@Z',
                                                                                            '??0ResourceMap@OvfManager@Vim@@QAE@XZ',
                                                                                            '??$GetType@VTask@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VHttpNfcLease@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0OvfConsumerValidationFault@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z',
                                                                                            '?GetChild@OstNode@OvfConsumer@Vim@@QBEPAV?$DataArray@VOstNode@OvfConsumer@Vim@@@Vmomi@@XZ',
                                                                                            '?OSTNODETYPE_VIRTUALSYSTEMCOLLECTION@OvfConsumer@Vim@@2QBDB',
                                                                                            '?GetSection@OstNode@OvfConsumer@Vim@@QBEPAV?$DataArray@VOvfSection@OvfConsumer@Vim@@@Vmomi@@XZ',
                                                                                            '?OSTNODETYPE_ENVELOPE@OvfConsumer@Vim@@2QBDB',
                                                                                            '?SetShares@ResourceAllocationInfo@Vim@@QAEXPAVSharesInfo@2@@Z',
                                                                                            '??0SharesInfo@Vim@@QAE@XZ',
                                                                                            '??$GetType@VOvfFile@OvfManager@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VPropertyInfo@VApp@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?SetIpAssignment@VmConfigInfo@VApp@Vim@@QAEXPAVIPAssignmentInfo@23@@Z',
                                                                                            '?GetSupportedIpProtocol@IPAssignmentInfo@VApp@Vim@@QBEPAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@XZ',
                                                                                            '?GetSupportedAllocationScheme@IPAssignmentInfo@VApp@Vim@@QBEPAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@XZ',
                                                                                            '??0IPAssignmentInfo@VApp@Vim@@QAE@XZ',
                                                                                            '?GetProperty@VmConfigInfo@VApp@Vim@@QBEPAV?$DataArray@VPropertyInfo@VApp@Vim@@@Vmomi@@XZ',
                                                                                            '??0PropertyInfo@VApp@Vim@@QAE@HABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@000000ABV?$Optional@_N@4@000@Z',
                                                                                            '?GetProduct@VmConfigInfo@VApp@Vim@@QBEPAV?$DataArray@VProductInfo@VApp@Vim@@@Vmomi@@XZ',
                                                                                            '??0ProductInfo@VApp@Vim@@QAE@HABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@00000000@Z',
                                                                                            '?GetOvfEnvironmentTransport@VmConfigInfo@VApp@Vim@@QBEPAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@XZ',
                                                                                            '?SetVAppConfig@ConfigInfo@Vm@Vim@@QAEXPAVVmConfigInfo@VApp@3@@Z',
                                                                                            '??0VmConfigInfo@VApp@Vim@@QAE@XZ',
                                                                                            '??0EntityConfigInfo@VApp@Vim@@QAE@PAVMoRef@Vmomi@@ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@ABV?$Optional@H@6@2ABV?$Optional@_N@6@1213@Z',
                                                                                            '?ACTION_POWERON@EntityConfigInfo@VApp@Vim@@2QBDB',
                                                                                            '?ACTION_GUESTSHUTDOWN@EntityConfigInfo@VApp@Vim@@2QBDB',
                                                                                            '?GetEntityConfig@VAppConfigInfo@VApp@Vim@@QBEPAV?$DataArray@VEntityConfigInfo@VApp@Vim@@@Vmomi@@XZ',
                                                                                            '?SetMemoryAllocation@ResourceConfigSpec@Vim@@QAEXPAVResourceAllocationInfo@2@@Z',
                                                                                            '?SetCpuAllocation@ResourceConfigSpec@Vim@@QAEXPAVResourceAllocationInfo@2@@Z',
                                                                                            '??0ResourceAllocationInfo@Vim@@QAE@XZ',
                                                                                            '??0ResourceConfigSpec@Vim@@QAE@XZ',
                                                                                            '??0VAppConfigInfo@VApp@Vim@@QAE@XZ',
                                                                                            '?GetDevice@VirtualHardware@Vm@Vim@@QBEPAV?$DataArray@VVirtualDevice@Device@Vm@Vim@@@Vmomi@@XZ',
                                                                                            '?GetError@CreateDescriptorResult@OvfManager@Vim@@QBEPAV?$DataArray@VMethodFault@Vmomi@@@Vmomi@@XZ',
                                                                                            '?GetWarning@CreateDescriptorResult@OvfManager@Vim@@QBEPAV?$DataArray@VMethodFault@Vmomi@@@Vmomi@@XZ',
                                                                                            '?SetExportOption@CreateDescriptorParams@OvfManager@Vim@@QAEXPAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@@Z',
                                                                                            '??0CreateDescriptorParams@OvfManager@Vim@@QAE@XZ',
                                                                                            '?GetDeviceUrl@Info@HttpNfcLease@Vim@@QBEPAV?$DataArray@VDeviceUrl@HttpNfcLease@Vim@@@Vmomi@@XZ',
                                                                                            '??$GetType@VVirtualSIOController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?GetProperty@VmConfigSpec@VApp@Vim@@QBEPAV?$DataArray@VPropertySpec@VApp@Vim@@@Vmomi@@XZ',
                                                                                            '?GetProduct@VmConfigSpec@VApp@Vim@@QBEPAV?$DataArray@VProductSpec@VApp@Vim@@@Vmomi@@XZ',
                                                                                            '?GetOvfEnvironmentTransport@VmConfigSpec@VApp@Vim@@QBEPAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@XZ',
                                                                                            '??0OvfUnsupportedElement@Fault@Vim@@QAE@ABV?$Optional@H@Vmacore@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '??$GetType@VNetwork@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VOpaqueNetwork@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDistributedVirtualPortgroup@Dvs@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0SharesInfo@Vim@@QAE@HW4Level@01@@Z',
                                                                                            '?SetMemoryAllocation@ConfigSpec@Vm@Vim@@QAEXPAVResourceAllocationInfo@3@@Z',
                                                                                            '?SetCpuAllocation@ConfigSpec@Vm@Vim@@QAEXPAVResourceAllocationInfo@3@@Z',
                                                                                            '??$GetType@VNetworkMapping@OvfManager@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VProfileSpec@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?SetProfile@VirtualDeviceSpec@Device@Vm@Vim@@QAEXPAV?$DataArray@VProfileSpec@Vm@Vim@@@Vmomi@@@Z',
                                                                                            '?SetVmProfile@ConfigSpec@Vm@Vim@@QAEXPAV?$DataArray@VProfileSpec@Vm@Vim@@@Vmomi@@@Z',
                                                                                            '??0DefinedProfileSpec@Vm@Vim@@QAE@XZ',
                                                                                            '?GetSupportedDiskProvisioning@ValidateHostResult@OvfManager@Vim@@QBEPAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmomi@@XZ',
                                                                                            '?PORTGROUPTYPE_EPHEMERAL@DistributedVirtualPortgroup@Dvs@Vim@@2QBDB',
                                                                                            '?GetDistributedVirtualPortgroup@ConfigTarget@Vm@Vim@@QBEPAV?$DataArray@VDistributedVirtualPortgroupInfo@Dvs@Vim@@@Vmomi@@XZ',
                                                                                            '?GetOpaqueNetwork@ConfigTarget@Vm@Vim@@QBEPAV?$DataArray@VOpaqueNetworkInfo@Vm@Vim@@@Vmomi@@XZ',
                                                                                            '?GetNetwork@ConfigTarget@Vm@Vim@@QBEPAV?$DataArray@VNetworkInfo@Vm@Vim@@@Vmomi@@XZ',
                                                                                            '?GetError@CreateImportSpecResult@OvfManager@Vim@@QBEPAV?$DataArray@VMethodFault@Vmomi@@@Vmomi@@XZ',
                                                                                            '??0CreateImportSpecParams@OvfManager@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAV?$DataArray@VKeyValue@Vim@@@Vmomi@@PAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@6@0PAVMoRef@6@PAV?$DataArray@VNetworkMapping@OvfManager@Vim@@@6@ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@51PAV?$DataArray@VResourceMap@OvfManager@Vim@@@6@5PAVOstNode@OvfConsumer@2@@Z',
                                                                                            '?GetMsgBundle@CommonParams@OvfManager@Vim@@QBEPAV?$DataArray@VKeyValue@Vim@@@Vmomi@@XZ',
                                                                                            '?GetWarning@ValidateHostResult@OvfManager@Vim@@QBEPAV?$DataArray@VMethodFault@Vmomi@@@Vmomi@@XZ',
                                                                                            '?GetError@ValidateHostResult@OvfManager@Vim@@QBEPAV?$DataArray@VMethodFault@Vmomi@@@Vmomi@@XZ',
                                                                                            '?GetFileItem@CreateImportSpecResult@OvfManager@Vim@@QBEPAV?$DataArray@VFileItem@OvfManager@Vim@@@Vmomi@@XZ',
                                                                                            '?GetWarning@CreateImportSpecResult@OvfManager@Vim@@QBEPAV?$DataArray@VMethodFault@Vmomi@@@Vmomi@@XZ',
                                                                                            '??0ValidateHostParams@OvfManager@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAV?$DataArray@VKeyValue@Vim@@@Vmomi@@PAV?$Array@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@6@@Z',
                                                                                            '??0NetworkMapping@OvfManager@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVMoRef@Vmomi@@@Z',
                                                                                            '??$GetType@VHostSystem@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VClusterComputeResource@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualDiskOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFlatVer2BackingOption@VirtualDiskOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSparseVer2BackingOption@VirtualDiskOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSeSparseBackingOption@VirtualDiskOption@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDistributedVirtualSwitch@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VEnvironmentBrowser@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '?GetBackingOption@VirtualDeviceOption@Device@Vm@Vim@@QBEPAV?$DataArray@VBackingOption@VirtualDeviceOption@Device@Vm@Vim@@@Vmomi@@XZ',
                                                                                            '??0SeSparseBackingInfo@VirtualDisk@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0SparseVer2BackingInfo@VirtualDisk@Device@Vm@Vim@@QAE@XZ',
                                                                                            '??0FlatVer2BackingInfo@VirtualDisk@Device@Vm@Vim@@QAE@XZ',
                                                                                            '?SetBacking@VirtualDevice@Device@Vm@Vim@@QAEXPAVBackingInfo@1234@@Z',
                                                                                            '?GetHost@ConfigOptionDescriptor@Vm@Vim@@QBEPAV?$DataArray@VMoRef@Vmomi@@@Vmomi@@XZ',
                                                                                            '?GetVirtualDeviceOption@VirtualHardwareOption@Vm@Vim@@QBEPAV?$DataArray@VVirtualDeviceOption@Device@Vm@Vim@@@Vmomi@@XZ',
                                                                                            '??$GetType@VVirtualController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VBackingInfo@VirtualDevice@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualDevice@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualVideoCard@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualVMIROM@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualEthernetCard@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VRawDiskMappingVer1BackingInfo@VirtualDisk@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDistributedVirtualPortBackingInfo@VirtualEthernetCard@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualIDEController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualPCIController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualPS2Controller@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualUSBController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualUSBXHCIController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSCSIController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSATAController@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSoundCard@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualVMCIDevice@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualFloppy@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualCdrom@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualKeyboard@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualParallelPort@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSerialPort@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualPointingDevice@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VVirtualSCSIPassthrough@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0MemorySizeNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '??0NumVirtualCpusNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '?GetNumCPU@VirtualHardwareOption@Vm@Vim@@QBEPAV?$Array@H@Vmomi@@XZ',
                                                                                            '??0NumVirtualCoresPerSocketNotSupported@Fault@Vim@@QAE@HH@Z',
                                                                                            '??0UnsupportedGuest@Fault@Vim@@QAE@XZ',
                                                                                            '??0DeviceControllerNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '?GetSupportedDiskControllerList@GuestOsDescriptor@Vm@Vim@@QBEPAV?$Array@VTypeName@Vmomi@@@Vmomi@@XZ',
                                                                                            '??0VirtualEthernetCardNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '?GetSupportedEthernetCard@GuestOsDescriptor@Vm@Vim@@QBEPAV?$Array@VTypeName@Vmomi@@@Vmomi@@XZ',
                                                                                            '??0DeviceBackingNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '??0DVPortNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '??0RDMNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '?REASON_HOST@DeviceNotSupported@Fault@Vim@@2QBDB',
                                                                                            '??0DeviceNotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '??0VMINotSupported@Fault@Vim@@QAE@XZ',
                                                                                            '?USE3DRENDERER_HARDWARE@VirtualVideoCard@Device@Vm@Vim@@2QBDB',
                                                                                            '??0VmValidateMaxDevice@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HH@Z',
                                                                                            '??0DeviceNotSupported@Fault@Vim@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$Optional@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Vmacore@@@Z',
                                                                                            '?GetDevice@VirtualController@Device@Vm@Vim@@QBEPAV?$Array@H@Vmomi@@XZ',
                                                                                            '?GetDefaultDevice@ConfigOption@Vm@Vim@@QBEPAV?$DataArray@VVirtualDevice@Device@Vm@Vim@@@Vmomi@@XZ',
                                                                                            '??$GetType@VRawDiskVer2BackingInfo@VirtualDisk@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VDeviceBackingInfo@VirtualSCSIPassthrough@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@W4GuestOsIdentifier@GuestOsDescriptor@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VFlatVer2BackingInfo@VirtualDisk@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??$GetType@VSeSparseBackingInfo@VirtualDisk@Device@Vm@Vim@@@Vmomi@@YAPAVType@0@XZ',
                                                                                            '??0ImageBackingInfo@VirtualFloppy@Device@Vm@Vim@@QAE@XZ'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 1387,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 133120,
                                                                                       '.rdata\x00\x00': 2921984,
                                                                                       '.reloc\x00\x00': 434688,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 3543552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a494cb94dfd5a6c26694f443e58e1f33f6d79f67094a0ac8ec143bfdc8e1656d'},
 'a4ad03c8b96059ac25cc470965653bc1ea2a0c88926337c62dee94a303087ce3': {'AddressOfEntryPoint': 54112,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'PrivilegeCheck',
                                                                                      'KERNEL32.dll': 'CreateDirectoryW',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'RtlAllocateHeap'},
                                                                      'ImportedFunctions': ['GetUserNameW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'RegDeleteKeyW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'PrivilegeCheck',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'HeapSetInformation',
                                                                                            'LocaleNameToLCID',
                                                                                            'SetUserGeoID',
                                                                                            'GetSystemDefaultLocaleName',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'GetLocaleInfoEx',
                                                                                            'CompareStringOrdinal',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FreeLibrary',
                                                                                            'GetUserDefaultLocaleName',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'NlsUpdateLocale',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'CreateFileMappingW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CloseHandle',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetFileAttributesExW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegUnLoadKeyW',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            '_wcsicmp',
                                                                                            'memcpy',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'bsearch',
                                                                                            'wcsrchr',
                                                                                            '_vsnprintf',
                                                                                            'RtlpSetInstallLanguage',
                                                                                            'RtlpSetPreferredUILanguages',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlGetUILanguageInfo',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 52224},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a4ad03c8b96059ac25cc470965653bc1ea2a0c88926337c62dee94a303087ce3'},
 'a4c00cdcc99dc257184025b05a5caef0ed9bf624aa5fe716f88533e64c23a60c': {'AddressOfEntryPoint': 26654,
                                                                      'DebugRVA': 26448,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1552,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a4c00cdcc99dc257184025b05a5caef0ed9bf624aa5fe716f88533e64c23a60c'},
 'a4f8c322fdb17b22770aee031c3ddc1068273b301385c36ff6564dd8eb65f683': {'AddressOfEntryPoint': 48016,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'KERNEL32.dll': 'GetVersionExW',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SETUPAPI.dll': 'SetupFindNextLine',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'newdev.dll': 'DiInstallDriverW',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['RegEnumKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CheckTokenMembership',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'TraceEvent',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'OpenEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadLibraryW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetEndOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'SetFilePointer',
                                                                                            'GetProcessHeap',
                                                                                            'CreateMutexW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FindNextFileW',
                                                                                            'lstrcmpiW',
                                                                                            'FindClose',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpW',
                                                                                            'CompareStringW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'DebugBreak',
                                                                                            'OutputDebugStringA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleFileNameA',
                                                                                            'EnterCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapCreate',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapDestroy',
                                                                                            'InitializeCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LCMapStringW',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'ReleaseMutex',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'GetThreadLocale',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExW',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            'strrchr',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'memcpy',
                                                                                            'wprintf',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_resetstkoflw',
                                                                                            '_wcsnicmp',
                                                                                            'wcsrchr',
                                                                                            'memset',
                                                                                            'LoadStringW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlCaptureContext',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupDiGetActualModelsSectionW',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupDiGetINFClassW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupFindNextLine',
                                                                                            'DiInstallDriverW',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 129,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 48640},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/a4f8c322fdb17b22770aee031c3ddc1068273b301385c36ff6564dd8eb65f683'},
 'a50f35f9742e856869b2fc4c67628daef10e7fddc8ee0095a13e82bd07ff36f7': {'AddressOfEntryPoint': 17056,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'IPHLPAPI.DLL': 'InternalCreateIpForwardEntry2',
                                                                                      'KERNEL32.dll': 'HeapAlloc',
                                                                                      'NSI.dll': 'NsiGetAllPersistentParametersWithMask',
                                                                                      'dhcpcsvc.DLL': 'DhcpEnableDhcp',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlIpv4StringToAddressW'},
                                                                      'ImportedFunctions': ['RegQueryInfoKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'GetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'HeapFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'FreeLibrary',
                                                                                            'HeapAlloc',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'wcschr',
                                                                                            'exit',
                                                                                            '_vsnwprintf',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_stricmp',
                                                                                            '_strnicmp',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'iswdigit',
                                                                                            '_wcsnicmp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcsrchr',
                                                                                            '_vsnprintf',
                                                                                            'memset',
                                                                                            'DhcpEnableDhcp',
                                                                                            'InitializeIpForwardEntry',
                                                                                            'ConvertInterfacePhysicalAddressToLuid',
                                                                                            'ConvertStringToInterfacePhysicalAddress',
                                                                                            'ConvertInterfaceAliasToLuid',
                                                                                            'ConvertInterfaceNameToLuidW',
                                                                                            'ParseNetworkString',
                                                                                            'ConvertInterfaceLuidToNameW',
                                                                                            'InternalCreateUnicastIpAddressEntry',
                                                                                            'InitializeUnicastIpAddressEntry',
                                                                                            'InternalCreateIpForwardEntry2',
                                                                                            'NsiSetAllParameters',
                                                                                            'NsiGetAllParameters',
                                                                                            'NsiSetAllPersistentParametersWithMask',
                                                                                            'NsiGetAllPersistentParametersWithMask',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlIpv6StringToAddressW',
                                                                                            'RtlIpv4StringToAddressW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 15360},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a50f35f9742e856869b2fc4c67628daef10e7fddc8ee0095a13e82bd07ff36f7'},
 'a53cb0e16ec752ade4f70fed25e84d5f69463f5ee745e5d0fbefe9ce652327e1': {'AddressOfEntryPoint': 8316,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'KERNEL32.dll': 'CreateProcessW',
                                                                                      'MSVCRT.dll': 'wcscat',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'ShowWindow',
                                                                                            'PeekMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'MessageBoxW',
                                                                                            'CreateDialogParamW',
                                                                                            'LoadIconW',
                                                                                            'SendMessageW',
                                                                                            'GetMessageW',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItem',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'DestroyWindow',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'SHGetFolderPathW',
                                                                                            'wcslen',
                                                                                            'wcscpy',
                                                                                            'wcsncpy',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            'memset',
                                                                                            'wcscat',
                                                                                            'SetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateDirectoryW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineW',
                                                                                            'GetLastError',
                                                                                            'CopyFileW',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 63,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a53cb0e16ec752ade4f70fed25e84d5f69463f5ee745e5d0fbefe9ce652327e1'},
 'a57ef2c5eacd068df9240721344ad07aefb0fe7a141cf26a2abcafd58ea03dfa': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 247152,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 247296,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a57ef2c5eacd068df9240721344ad07aefb0fe7a141cf26a2abcafd58ea03dfa'},
 'a596c36731eb24fec689091e741c52159ba802440aa91c39c3ba826dea4f9276': {'AddressOfEntryPoint': 29632,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'XmlLite.dll': 'CreateXmlWriter',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetCurrentProcess',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetTempPathW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetLastError',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_exit',
                                                                                            '__setusermatherr',
                                                                                            'memset',
                                                                                            'PropVariantClear',
                                                                                            'StringFromCLSID',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateXmlWriter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 47,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1896,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 27648},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a596c36731eb24fec689091e741c52159ba802440aa91c39c3ba826dea4f9276'},
 'a5a04cb1eac50b89451935e31078f8648ea70c2f6386c0f58e1ecafad30045de': {'AddressOfEntryPoint': 5296,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 724992,
                                                                      'ExportSize': 354,
                                                                      'IATRVA': 731564,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherA',
                                                                                      'GDI32.dll': 'TextOutA',
                                                                                      'KERNEL32.dll': 'lstrlenA',
                                                                                      'OLEAUT32.dll': 'OleLoadPicture',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExA',
                                                                                      'USER32.dll': 'UpdateWindow',
                                                                                      'msvcrt.dll': '_fdopen',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal'},
                                                                      'ImportedFunctions': ['CloseServiceHandle',
                                                                                            'CreateServiceA',
                                                                                            'DeleteService',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegisterEventSourceA',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'ReportEventA',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateFontA',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'TextOutA',
                                                                                            'AllocConsole',
                                                                                            'BeginUpdateResourceA',
                                                                                            'CloseHandle',
                                                                                            'CopyFileA',
                                                                                            'CreateEventA',
                                                                                            'CreateFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateSemaphoreA',
                                                                                            'CreateThread',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'DuplicateHandle',
                                                                                            'EndUpdateResourceA',
                                                                                            'EnterCriticalSection',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'EnumResourceNamesA',
                                                                                            'EnumResourceTypesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindResourceA',
                                                                                            'FlushFileBuffers',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'GetFullPathNameA',
                                                                                            'GetHandleInformation',
                                                                                            'GetLastError',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessAffinityMask',
                                                                                            'GetStartupInfoA',
                                                                                            'GetStdHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetThreadContext',
                                                                                            'GetThreadPriority',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GlobalUnlock',
                                                                                            'InitializeCriticalSection',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'MoveFileA',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'OpenProcess',
                                                                                            'OutputDebugStringA',
                                                                                            'Process32First',
                                                                                            'Process32Next',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RaiseException',
                                                                                            'ReadFile',
                                                                                            'ReleaseSemaphore',
                                                                                            'ResetEvent',
                                                                                            'ResumeThread',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetCriticalSectionSpinCount',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetEvent',
                                                                                            'SetFilePointer',
                                                                                            'SetLastError',
                                                                                            'SetPriorityClass',
                                                                                            'SetProcessAffinityMask',
                                                                                            'SetStdHandle',
                                                                                            'SetThreadContext',
                                                                                            'SetThreadPriority',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SizeofResource',
                                                                                            'Sleep',
                                                                                            'SuspendThread',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TryEnterCriticalSection',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'UpdateResourceA',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WaitForSingleObject',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'lstrcatA',
                                                                                            'lstrcpyA',
                                                                                            'lstrlenA',
                                                                                            '__C_specific_handler',
                                                                                            '___lc_codepage_func',
                                                                                            '__dllonexit',
                                                                                            '__doserrno',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__iob_func',
                                                                                            '__lconv_init',
                                                                                            '__mb_cur_max',
                                                                                            '__pioinfo',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_beginthreadex',
                                                                                            '_cexit',
                                                                                            '_endthreadex',
                                                                                            '_errno',
                                                                                            '_filelengthi64',
                                                                                            '_fileno',
                                                                                            '_fmode',
                                                                                            '_fstat64',
                                                                                            '_ftime',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_lseeki64',
                                                                                            '_onexit',
                                                                                            '_setjmp',
                                                                                            '_strdup',
                                                                                            '_strnicmp',
                                                                                            '_unlock',
                                                                                            '_write',
                                                                                            'abort',
                                                                                            'atof',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'fgetpos',
                                                                                            'fgets',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'fputs',
                                                                                            'fread',
                                                                                            'free',
                                                                                            'fsetpos',
                                                                                            'fwrite',
                                                                                            'getc',
                                                                                            'getenv',
                                                                                            'getwc',
                                                                                            'isspace',
                                                                                            'iswctype',
                                                                                            'localeconv',
                                                                                            'longjmp',
                                                                                            'malloc',
                                                                                            'memchr',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'printf',
                                                                                            'putc',
                                                                                            'puts',
                                                                                            'putwc',
                                                                                            'rand',
                                                                                            'realloc',
                                                                                            'setlocale',
                                                                                            'setvbuf',
                                                                                            'signal',
                                                                                            'sprintf',
                                                                                            'srand',
                                                                                            'sscanf',
                                                                                            'strcat',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcoll',
                                                                                            'strcpy',
                                                                                            'strerror',
                                                                                            'strftime',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'strtok',
                                                                                            'strtol',
                                                                                            'strxfrm',
                                                                                            'tolower',
                                                                                            'toupper',
                                                                                            'towlower',
                                                                                            'towupper',
                                                                                            'ungetc',
                                                                                            'ungetwc',
                                                                                            'vfprintf',
                                                                                            'vsprintf',
                                                                                            'wcscoll',
                                                                                            'wcsftime',
                                                                                            'wcslen',
                                                                                            'wcsxfrm',
                                                                                            '_write',
                                                                                            '_read',
                                                                                            '_fileno',
                                                                                            '_fdopen',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleLoadPicture',
                                                                                            'GetModuleFileNameExA',
                                                                                            'BeginPaint',
                                                                                            'CopyImage',
                                                                                            'CreateWindowExA',
                                                                                            'DdeClientTransaction',
                                                                                            'DdeConnect',
                                                                                            'DdeCreateStringHandleA',
                                                                                            'DdeFreeStringHandle',
                                                                                            'DdeGetData',
                                                                                            'DdeInitializeA',
                                                                                            'DdeNameService',
                                                                                            'DdeUninitialize',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'DispatchMessageA',
                                                                                            'EndPaint',
                                                                                            'EnumWindows',
                                                                                            'GetDC',
                                                                                            'GetMessageA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowInfo',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'InvalidateRect',
                                                                                            'LoadCursorA',
                                                                                            'MessageBoxA',
                                                                                            'PeekMessageA',
                                                                                            'RegisterClassExA',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'TranslateMessage',
                                                                                            'UpdateWindow'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 279,
                                                                      'NumberOfSections': 12,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2648556,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 91648,
                                                                                       '.edata\x00\x00': 512,
                                                                                       '.idata\x00\x00': 10752,
                                                                                       '.pdata\x00\x00': 32256,
                                                                                       '.rdata\x00\x00': 53760,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 2648576,
                                                                                       '.text\x00\x00\x00': 472576,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.xdata\x00\x00': 43520},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/a5a04cb1eac50b89451935e31078f8648ea70c2f6386c0f58e1ecafad30045de'},
 'a5b6deb455845311db511677ae3674dfc4a7d506d5a84fb0dc6c229230028e15': {'AddressOfEntryPoint': 82984,
                                                                      'DebugRVA': 5232,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCR100.dll': '__CxxFrameHandler3',
                                                                                      'USER32.dll': 'LoadStringA',
                                                                                      'sqlncli11.dll': 'bcp_colfmt'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'CreateFileA',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'GetACP',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetFileType',
                                                                                            'CloseHandle',
                                                                                            'GetFullPathNameW',
                                                                                            'SearchPathW',
                                                                                            'GetDriveTypeW',
                                                                                            'VirtualQuery',
                                                                                            'FreeLibrary',
                                                                                            'GetUserDefaultLCID',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'OutputDebugStringW',
                                                                                            'GetTickCount',
                                                                                            'SetThreadUILanguage',
                                                                                            'LoadLibraryW',
                                                                                            'CreateEventA',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenW',
                                                                                            'SetLastError',
                                                                                            'GetProcAddress',
                                                                                            'ResetEvent',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryExA',
                                                                                            'HeapSetInformation',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'EncodePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'DecodePointer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'fgets',
                                                                                            'wcsncpy_s',
                                                                                            '_makepath_s',
                                                                                            'strrchr',
                                                                                            '_splitpath_s',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '__crt_debugger_hook',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'fgetc',
                                                                                            'atol',
                                                                                            '_vsnprintf',
                                                                                            'fprintf',
                                                                                            'fopen',
                                                                                            'printf',
                                                                                            'strtol',
                                                                                            'scanf_s',
                                                                                            'atoi',
                                                                                            'strchr',
                                                                                            '_resetstkoflw',
                                                                                            '__iob_func',
                                                                                            'fputs',
                                                                                            '_strtoi64',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'strncmp',
                                                                                            'perror',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'fflush',
                                                                                            '__CxxFrameHandler3',
                                                                                            'CharToOemA',
                                                                                            'LoadStringA',
                                                                                            'bcp_setbulkmode',
                                                                                            'bcp_readfmtA',
                                                                                            'bcp_initA',
                                                                                            'bcp_gettypenameA',
                                                                                            'bcp_writefmtA',
                                                                                            'bcp_columns',
                                                                                            'bcp_control',
                                                                                            'bcp_exec',
                                                                                            'bcp_colfmt'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 113,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1668,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.sdbid\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 87552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a5b6deb455845311db511677ae3674dfc4a7d506d5a84fb0dc6c229230028e15'},
 'a5fbef3efb22970120c5b40d58401b59a80f74dc92b85d637eaab52b6136473d': {'AddressOfEntryPoint': 173452,
                                                                      'DebugRVA': 3272448,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 4430112,
                                                                      'ExportSize': 83,
                                                                      'IATRVA': 3268608,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'DeleteFileW',
                                                                                      'OLEAUT32.dll': 'VarBstrCmp',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'USER32.dll': 'EnableMenuItem',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['ConvertSidToStringSidW',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'InitializeSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'LookupAccountNameW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'InitializeAcl',
                                                                                            'GetAclInformation',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'MakeAbsoluteSD',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'ImpersonateNamedPipeClient',
                                                                                            'RevertToSelf',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'GetUserNameW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'EqualSid',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetAce',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'RegQueryValueExA',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptCreateHash',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptHashData',
                                                                                            'PrivilegeCheck',
                                                                                            'DuplicateToken',
                                                                                            'AddAccessAllowedAce',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'AccessCheck',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'OpenThreadToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'SetThreadToken',
                                                                                            'GetSecurityInfo',
                                                                                            'SetSecurityInfo',
                                                                                            'LookupPrivilegeNameW',
                                                                                            'GetTokenInformation',
                                                                                            'LookupAccountSidW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'CreateProcessW',
                                                                                            'ResumeThread',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'GetComputerNameW',
                                                                                            'CreateThread',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetVersionExW',
                                                                                            'GetExitCodeThread',
                                                                                            'SetPriorityClass',
                                                                                            'LocalAlloc',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetLocalTime',
                                                                                            'GetThreadLocale',
                                                                                            'RaiseException',
                                                                                            'lstrcmpiW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadContext',
                                                                                            'GetCurrentThread',
                                                                                            'GetVersion',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetThreadPriority',
                                                                                            'SuspendThread',
                                                                                            'IsDebuggerPresent',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'FlushViewOfFile',
                                                                                            'MapViewOfFileEx',
                                                                                            'GetDriveTypeW',
                                                                                            'DeviceIoControl',
                                                                                            'CopyFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'SetEndOfFile',
                                                                                            'IsWow64Process',
                                                                                            'ExitThread',
                                                                                            'VirtualQuery',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeW',
                                                                                            'CloseHandle',
                                                                                            'SetHandleInformation',
                                                                                            'CreateEventA',
                                                                                            'WaitForDebugEvent',
                                                                                            'ContinueDebugEvent',
                                                                                            'DebugActiveProcess',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetLogicalDrives',
                                                                                            'QueryDosDeviceW',
                                                                                            'CreateRemoteThread',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'SetThreadContext',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'VirtualQueryEx',
                                                                                            'VirtualProtectEx',
                                                                                            'FlushInstructionCache',
                                                                                            'SearchPathW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'ReadProcessMemory',
                                                                                            'FormatMessageA',
                                                                                            'ProcessIdToSessionId',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'VirtualProtect',
                                                                                            'lstrcmpW',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetFileSize',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryExA',
                                                                                            'FindResourceA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'lstrcmpiA',
                                                                                            'GetModuleHandleA',
                                                                                            'FormatMessageW',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryA',
                                                                                            'GetTempPathW',
                                                                                            'GetProcessAffinityMask',
                                                                                            'SetThreadAffinityMask',
                                                                                            'GetThreadPriority',
                                                                                            'GetCommandLineW',
                                                                                            'DisconnectNamedPipe',
                                                                                            'ConnectNamedPipe',
                                                                                            'SetErrorMode',
                                                                                            'GetModuleHandleW',
                                                                                            'GetTickCount',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'SwitchToThread',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'WaitForSingleObject',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetCurrentProcess',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateEventW',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'CreateFileW',
                                                                                            'WaitNamedPipeW',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'TransactNamedPipe',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapFree',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwindEx',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'HeapSize',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'GetProcessHeap',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsFree',
                                                                                            'LockResource',
                                                                                            'FindResourceExW',
                                                                                            'TlsSetValue',
                                                                                            'UnregisterWaitEx',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ResetEvent',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'OpenThread',
                                                                                            'GetSystemInfo',
                                                                                            'WriteProcessMemory',
                                                                                            'TlsGetValue',
                                                                                            'OutputDebugStringW',
                                                                                            'OpenFileMappingW',
                                                                                            'VirtualAllocEx',
                                                                                            'DeleteFileW',
                                                                                            'SetMenu',
                                                                                            'LoadMenuW',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'PostThreadMessageW',
                                                                                            'PeekMessageW',
                                                                                            'CharUpperBuffW',
                                                                                            'CharNextA',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadStringW',
                                                                                            'IsWindowVisible',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'EnumWindows',
                                                                                            'SetDebugErrorLevel',
                                                                                            'CharLowerBuffW',
                                                                                            'PeekMessageA',
                                                                                            'DialogBoxParamW',
                                                                                            'SetDlgItemTextW',
                                                                                            'EndDialog',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SetDlgItemInt',
                                                                                            'GetWindowLongPtrW',
                                                                                            'EmptyClipboard',
                                                                                            'GetDlgItemInt',
                                                                                            'LoadIconW',
                                                                                            'SendMessageW',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageW',
                                                                                            'GetSubMenu',
                                                                                            'SetMenuDefaultItem',
                                                                                            'GetCursorPos',
                                                                                            'TrackPopupMenu',
                                                                                            'CharNextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'OpenClipboard',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'SetFocus',
                                                                                            'GetParent',
                                                                                            'SetWindowTextW',
                                                                                            'CheckRadioButton',
                                                                                            'CheckDlgButton',
                                                                                            'DestroyMenu',
                                                                                            'CreateWindowExW',
                                                                                            'UpdateWindow',
                                                                                            'LoadAcceleratorsW',
                                                                                            'DestroyWindow',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetMenu',
                                                                                            'RegisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'EnableMenuItem',
                                                                                            'CoGetClassObject',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoLoadLibrary',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CoUnmarshalInterface',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitialize',
                                                                                            'CoInitializeEx',
                                                                                            'StringFromCLSID',
                                                                                            'CoMarshalInterface',
                                                                                            'StringFromGUID2',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoCreateGuid',
                                                                                            'CoLockObjectExternal',
                                                                                            'CoUninitialize',
                                                                                            'VarUI4FromStr',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'VarBstrCat',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'CreateErrorInfo',
                                                                                            'VarDecCmp',
                                                                                            'VarDecDiv',
                                                                                            'VarDecMul',
                                                                                            'VarDecSub',
                                                                                            'VarDecAdd',
                                                                                            'VarDecFromR8',
                                                                                            'VarDecFromR4',
                                                                                            'VarDecFromUI4',
                                                                                            'VarDecFromI4',
                                                                                            'VarDecFix',
                                                                                            'VarUI2FromDec',
                                                                                            'VarUI1FromDec',
                                                                                            'VarI2FromDec',
                                                                                            'VarI1FromDec',
                                                                                            'VarUI4FromDec',
                                                                                            'VarR8FromDec',
                                                                                            'VarR4FromDec',
                                                                                            'VarBstrFromDec',
                                                                                            'GetErrorInfo',
                                                                                            'VarI4FromDec',
                                                                                            'VarR8FromStr',
                                                                                            'SetErrorInfo',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VarBstrCmp',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 409,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 253528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 41472,
                                                                                       '.pdata\x00\x00': 158208,
                                                                                       '.rdata\x00\x00': 1161728,
                                                                                       '.reloc\x00\x00': 90624,
                                                                                       '.rsrc\x00\x00\x00': 253952,
                                                                                       '.text\x00\x00\x00': 3262464},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a5fbef3efb22970120c5b40d58401b59a80f74dc92b85d637eaab52b6136473d'},
 'a65902d9d21bc94ceecf467a923fe19302cffd589bdf49e8b49c0be4a3cd163f': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 7952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a65902d9d21bc94ceecf467a923fe19302cffd589bdf49e8b49c0be4a3cd163f'},
 'a6b27618a98caecad262502065b99823a3244387fc2f034d592db4483c906b32': {'AddressOfEntryPoint': 308430,
                                                                      'DebugRVA': 1149712,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1146880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterEventSourceA',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'VirtualAllocEx',
                                                                                      'MSVCP100.dll': '?_Xlength_error@std@@YAXPBD@Z',
                                                                                      'MSVCR100.dll': '_stat64i32',
                                                                                      'OLEAUT32.dll': 'SafeArrayLock',
                                                                                      'PSAPI.DLL': 'GetProcessMemoryInfo',
                                                                                      'USER32.dll': 'CreateAcceleratorTableA',
                                                                                      'WININET.dll': 'InternetGetCookieW',
                                                                                      'WS2_32.dll': 'closesocket',
                                                                                      'ole32.dll': 'CLSIDFromProgID',
                                                                                      'urlmon.dll': 'ObtainUserAgentString'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryExA',
                                                                                            'lstrcmpA',
                                                                                            'MulDiv',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetProcessTimes',
                                                                                            'GetSystemTimes',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcessId',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetModuleHandleW',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTickCount',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'SetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'TerminateProcess',
                                                                                            'LockResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleFileNameA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'GlobalMemoryStatus',
                                                                                            'LoadLibraryA',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'GetVersion',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedExchange',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushInstructionCache',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'VirtualFree',
                                                                                            'VirtualProtectEx',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualAllocEx',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'PostMessageA',
                                                                                            'MoveWindow',
                                                                                            'GetClientRect',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'EnumChildWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'CharNextW',
                                                                                            'PostThreadMessageA',
                                                                                            'GetMessageA',
                                                                                            'CharUpperA',
                                                                                            'GetTopWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'BringWindowToTop',
                                                                                            'SetWindowsHookExA',
                                                                                            'CallNextHookEx',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'GetDesktopWindow',
                                                                                            'SetFocus',
                                                                                            'GetFocus',
                                                                                            'GetWindow',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'CallWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'FillRect',
                                                                                            'ReleaseCapture',
                                                                                            'GetClassNameA',
                                                                                            'GetDlgItem',
                                                                                            'GetParent',
                                                                                            'IsChild',
                                                                                            'SetCapture',
                                                                                            'RedrawWindow',
                                                                                            'InvalidateRgn',
                                                                                            'InvalidateRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'ScreenToClient',
                                                                                            'ClientToScreen',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'RegisterClassExA',
                                                                                            'CharLowerBuffA',
                                                                                            'DefWindowProcA',
                                                                                            'LoadStringA',
                                                                                            'CreateWindowExA',
                                                                                            'UnregisterClassA',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'MessageBoxA',
                                                                                            'SetForegroundWindow',
                                                                                            'CharNextA',
                                                                                            'LoadCursorA',
                                                                                            'GetClassInfoExA',
                                                                                            'DispatchMessageA',
                                                                                            'RegisterWindowMessageA',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'SetWindowTextA',
                                                                                            'SendMessageA',
                                                                                            'CreateAcceleratorTableA',
                                                                                            'GetStockObject',
                                                                                            'GetObjectA',
                                                                                            'CreateSolidBrush',
                                                                                            'GetDeviceCaps',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'ReportEventA',
                                                                                            'DeregisterEventSource',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegisterEventSourceA',
                                                                                            'CoCreateGuid',
                                                                                            'ProgIDFromCLSID',
                                                                                            'StringFromGUID2',
                                                                                            'OleLockRunning',
                                                                                            'CoGetClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromProgID',
                                                                                            'SafeArrayCreate',
                                                                                            'SysFreeString',
                                                                                            'VarBstrCat',
                                                                                            'VarBstrCmp',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'VarUI4FromStr',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'OleCreateFontIndirect',
                                                                                            'DispCallFunc',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCopy',
                                                                                            'UnRegisterTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'VariantChangeType',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantCopy',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayLock',
                                                                                            '?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z',
                                                                                            '?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z',
                                                                                            '?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z',
                                                                                            '?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ',
                                                                                            '?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z',
                                                                                            '??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z',
                                                                                            '??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?width@ios_base@std@@QBE_JXZ',
                                                                                            '?getloc@ios_base@std@@QBE?AVlocale@2@XZ',
                                                                                            '?flags@ios_base@std@@QBEHXZ',
                                                                                            '?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z',
                                                                                            '?widen@?$ctype@_W@std@@QBE_WD@Z',
                                                                                            '?width@ios_base@std@@QAE_J_J@Z',
                                                                                            '?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z',
                                                                                            '?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ',
                                                                                            '?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ',
                                                                                            '?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ',
                                                                                            '?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?good@ios_base@std@@QBE_NXZ',
                                                                                            '?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?id@?$codecvt@_WDH@std@@2V0locale@2@A',
                                                                                            '?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ',
                                                                                            '?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z',
                                                                                            '?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z',
                                                                                            '?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ',
                                                                                            '??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '?id@?$ctype@_W@std@@2V0locale@2@A',
                                                                                            '??Bid@locale@std@@QAEIXZ',
                                                                                            '?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '?always_noconv@codecvt_base@std@@QBE_NXZ',
                                                                                            '?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?_Orphan_all@_Container_base0@std@@QAEXXZ',
                                                                                            '?_Orphan_all@_Container_base12@std@@QAEXXZ',
                                                                                            '??0_Container_base12@std@@QAE@XZ',
                                                                                            '??1_Container_base12@std@@QAE@XZ',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '_mbsupr_s',
                                                                                            'wcsxfrm',
                                                                                            'iswspace',
                                                                                            'iswprint',
                                                                                            'iswcntrl',
                                                                                            'iswupper',
                                                                                            'iswlower',
                                                                                            'iswalpha',
                                                                                            'iswdigit',
                                                                                            'iswpunct',
                                                                                            'iswxdigit',
                                                                                            'wcstol',
                                                                                            'wcscpy_s',
                                                                                            'towlower',
                                                                                            '_vswprintf_c_l',
                                                                                            'abort',
                                                                                            '_getch',
                                                                                            'signal',
                                                                                            'fputs',
                                                                                            'fprintf',
                                                                                            'strstr',
                                                                                            'sprintf',
                                                                                            'fgets',
                                                                                            'feof',
                                                                                            '_fileno',
                                                                                            '_setmode',
                                                                                            'ferror',
                                                                                            'fopen',
                                                                                            '_wfopen',
                                                                                            '_errno',
                                                                                            '_gmtime64',
                                                                                            'strcmp',
                                                                                            'isxdigit',
                                                                                            'strtoul',
                                                                                            'realloc',
                                                                                            'sscanf',
                                                                                            'memchr',
                                                                                            'isupper',
                                                                                            'tolower',
                                                                                            'isspace',
                                                                                            'strchr',
                                                                                            '__iob_func',
                                                                                            'raise',
                                                                                            '_vsnprintf',
                                                                                            'wcsstr',
                                                                                            'qsort',
                                                                                            'strncpy',
                                                                                            'getenv',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'free',
                                                                                            '_mbsnbcpy_s',
                                                                                            '_mbsstr',
                                                                                            '_mbsnbcmp',
                                                                                            'malloc',
                                                                                            'memcpy_s',
                                                                                            '_CxxThrowException',
                                                                                            'strcpy_s',
                                                                                            'sprintf_s',
                                                                                            '_vscwprintf',
                                                                                            'vswprintf_s',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'strnlen',
                                                                                            'wcsnlen',
                                                                                            '_mbscmp',
                                                                                            '_mbsicmp',
                                                                                            'memmove_s',
                                                                                            '_recalloc',
                                                                                            'calloc',
                                                                                            'memset',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            'memmove',
                                                                                            '_resetstkoflw',
                                                                                            'memcpy',
                                                                                            'strncmp',
                                                                                            'fclose',
                                                                                            'fread',
                                                                                            '_wfopen_s',
                                                                                            '_findclose',
                                                                                            '_wfindfirst64i32',
                                                                                            '_vscprintf',
                                                                                            'vsprintf_s',
                                                                                            'getenv_s',
                                                                                            '_beginthread',
                                                                                            '_stricmp',
                                                                                            'wcsncpy_s',
                                                                                            'strcat_s',
                                                                                            '_wsplitpath_s',
                                                                                            'ftell',
                                                                                            'fseek',
                                                                                            'fwrite',
                                                                                            '_beginthreadex',
                                                                                            '_time64',
                                                                                            '??0bad_cast@std@@QAE@PBD@Z',
                                                                                            '??1bad_cast@std@@UAE@XZ',
                                                                                            '??0bad_cast@std@@QAE@ABV01@@Z',
                                                                                            '_lock_file',
                                                                                            '_unlock_file',
                                                                                            'fgetwc',
                                                                                            'fputwc',
                                                                                            'ungetwc',
                                                                                            'setvbuf',
                                                                                            'fflush',
                                                                                            'ungetc',
                                                                                            'fgetc',
                                                                                            'fgetpos',
                                                                                            '_fseeki64',
                                                                                            'fsetpos',
                                                                                            '_localtime64_s',
                                                                                            '_mktime64',
                                                                                            'printf',
                                                                                            'atoi',
                                                                                            '_mbsrchr',
                                                                                            '_mbsinc',
                                                                                            '_ismbcspace',
                                                                                            '_mbschr',
                                                                                            '_mbsncmp',
                                                                                            '_mbslwr_s',
                                                                                            '_mbspbrk',
                                                                                            'isdigit',
                                                                                            '_strnicmp',
                                                                                            '_mbsnicmp',
                                                                                            '_stat64i32',
                                                                                            'UrlMkSetSessionOption',
                                                                                            'ObtainUserAgentString',
                                                                                            'InternetSetCookieExW',
                                                                                            'InternetSetCookieW',
                                                                                            'InternetSetCookieExA',
                                                                                            'InternetSetCookieA',
                                                                                            'InternetGetCookieExW',
                                                                                            'GetUrlCacheEntryInfoA',
                                                                                            'InternetGetCookieExA',
                                                                                            'InternetGetCookieA',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetSetOptionA',
                                                                                            'InternetOpenA',
                                                                                            'GetUrlCacheEntryInfoExA',
                                                                                            'InternetGetCookieW',
                                                                                            'EnumProcessModules',
                                                                                            'GetProcessMemoryInfo',
                                                                                            '__WSAFDIsSet',
                                                                                            'select',
                                                                                            'WSASetLastError',
                                                                                            'socket',
                                                                                            'setsockopt',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'connect',
                                                                                            'recv',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'shutdown',
                                                                                            'closesocket'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 484,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 53760,
                                                                                       '.rdata\x00\x00': 383488,
                                                                                       '.reloc\x00\x00': 113664,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 1141760,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a6b27618a98caecad262502065b99823a3244387fc2f034d592db4483c906b32'},
 'a70008779e308a1f9dd567d28cb8933388c2fbe915262f2d1589576b5a616a7c': {'AddressOfEntryPoint': 4816,
                                                                      'DebugRVA': 17280,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherW',
                                                                                      'KERNEL32.dll': 'CreateEventW',
                                                                                      'MSVCR90.dll': '__wgetmainargs',
                                                                                      'NETAPI32.dll': 'NetRequestOfflineDomainJoin',
                                                                                      'USER32.dll': 'RegisterDeviceNotificationW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'glib-2.0.dll': 'g_strdup_printf',
                                                                                      'vmtools.dll': 'Str_Aswprintf'},
                                                                      'ImportedFunctions': ['_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_amsg_exit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'free',
                                                                                            'calloc',
                                                                                            '_wcsicmp',
                                                                                            'wprintf',
                                                                                            '_purecall',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CloseHandle',
                                                                                            'LocalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'OutputDebugStringA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEvent',
                                                                                            'RtlCaptureContext',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CreateEventW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'CreateServiceW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'DeregisterEventSource',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeleteService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'InitiateSystemShutdownW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxW',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'NetRequestOfflineDomainJoin',
                                                                                            'g_free',
                                                                                            'g_strdup_printf',
                                                                                            'Base64_Decode',
                                                                                            'RpcOut_sendOne',
                                                                                            'Str_Wcscpy',
                                                                                            'Str_Snwprintf',
                                                                                            'Str_Vaswprintf',
                                                                                            'Panic',
                                                                                            'Str_Vasprintf',
                                                                                            'Str_Aswprintf'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12956,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 8704,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 9728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a70008779e308a1f9dd567d28cb8933388c2fbe915262f2d1589576b5a616a7c'},
 'a7488e0bbf2c837ad00cf1862a4097d640c5086628058d62a1f745749ac13057': {'AddressOfEntryPoint': 59808,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'WecApi.dll': 'EcGetObjectArrayProperty',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'LocalFileTimeToFileTime',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'TraceMessage',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwTraceMessage'},
                                                                      'ImportedFunctions': ['__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'memcpy',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_controlfp',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wprintf',
                                                                                            'fgetwc',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            'wcstok',
                                                                                            'wcstoul',
                                                                                            '_errno',
                                                                                            'iswspace',
                                                                                            'swscanf',
                                                                                            '_purecall',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            'swprintf_s',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '_except_handler4_common',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'memcpy_s',
                                                                                            'setlocale',
                                                                                            'sprintf_s',
                                                                                            '_iob',
                                                                                            'fwprintf',
                                                                                            'memset',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateFileW',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleA',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'Sleep',
                                                                                            'OutputDebugStringA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'lstrcmpiW',
                                                                                            'LocalFree',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwTraceMessage',
                                                                                            'EcOpenSubscriptionEnum',
                                                                                            'EcGetSubscriptionRunTimeStatus',
                                                                                            'EcEnumNextSubscription',
                                                                                            'EcGetSubscriptionProperty',
                                                                                            'EcQuickConfig',
                                                                                            'EcSaveSubscription',
                                                                                            'EcRemoveObjectArrayElement',
                                                                                            'EcInsertObjectArrayElement',
                                                                                            'EcSetObjectArrayProperty',
                                                                                            'EcSetSubscriptionProperty',
                                                                                            'EcRetrySubscription',
                                                                                            'EcDeleteSubscription',
                                                                                            'EcGetObjectArraySize',
                                                                                            'EcOpenSubscription',
                                                                                            'EcClose',
                                                                                            'EcGetObjectArrayProperty',
                                                                                            'TraceMessage',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 111,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 66560},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a7488e0bbf2c837ad00cf1862a4097d640c5086628058d62a1f745749ac13057'},
 'a80d97af3881757ca91955b0d2ed0e6132c834e0dcd61cd68dd88b617b7f3c14': {'AddressOfEntryPoint': 12491,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 28016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 28160,
                                                                                       '.text\x00\x00\x00': 23040},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a80d97af3881757ca91955b0d2ed0e6132c834e0dcd61cd68dd88b617b7f3c14'},
 'a80f927c1cf42200a2777121d013c2a4a09403e3fe15559b857cbc6eb489b66e': {'AddressOfEntryPoint': 372240,
                                                                      'DebugRVA': 6336,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 462848,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'InitializeSecurityDescriptor',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'GetTextExtentPoint32W',
                                                                                      'KERNEL32.dll': 'ResolveDelayLoadedAPI',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'SHGetValueW',
                                                                                      'SLWGA.dll': 'SLIsGenuineLocal',
                                                                                      'USER32.dll': 'SetDlgItemTextW',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'TraceEvent',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'EqualSid',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetSidLengthRequired',
                                                                                            'InitializeSid',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'FreeSid',
                                                                                            'SetEntriesInAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetSystemInfo',
                                                                                            'CreateIoCompletionPort',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetExitCodeThread',
                                                                                            'TerminateThread',
                                                                                            'LoadLibraryExW',
                                                                                            'lstrcmpiW',
                                                                                            'CreateMutexW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'ResetEvent',
                                                                                            'RegisterApplicationRestart',
                                                                                            'ReleaseMutex',
                                                                                            'GetCurrentThread',
                                                                                            'CompareStringW',
                                                                                            'CreateThread',
                                                                                            'ResumeThread',
                                                                                            'RaiseException',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LocalAlloc',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryW',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'DelayLoadFailureHook',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSection',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'GetModuleHandleExW',
                                                                                            'OpenEventW',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'GetProductInfo',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'LoadLibraryExA',
                                                                                            'DecodePointer',
                                                                                            'VirtualAlloc',
                                                                                            'FlushInstructionCache',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualFree',
                                                                                            'EncodePointer',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'SizeofResource',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'MulDiv',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'SelectObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetStockObject',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetObjectW',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'LoadMenuW',
                                                                                            'GetParent',
                                                                                            'InvalidateRect',
                                                                                            'CheckMenuRadioItem',
                                                                                            'EnableMenuItem',
                                                                                            'ClientToScreen',
                                                                                            'TrackPopupMenuEx',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyMenu',
                                                                                            'SetWindowTextW',
                                                                                            'GetKeyState',
                                                                                            'SetActiveWindow',
                                                                                            'MessageBoxW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'PostMessageW',
                                                                                            'CharNextW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetMessageW',
                                                                                            'GetSubMenu',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyIcon',
                                                                                            'SystemParametersInfoW',
                                                                                            'LoadCursorW',
                                                                                            'PostQuitMessage',
                                                                                            'UnregisterClassA',
                                                                                            'GetWindowRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromRect',
                                                                                            'GetWindowPlacement',
                                                                                            'IsIconic',
                                                                                            'IsZoomed',
                                                                                            'SetCursor',
                                                                                            'LockWindowUpdate',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'RegisterClassExW',
                                                                                            'GetClassInfoExW',
                                                                                            'CreateWindowExW',
                                                                                            'DefWindowProcW',
                                                                                            'SetFocus',
                                                                                            'IsWindowVisible',
                                                                                            'IsWindowEnabled',
                                                                                            'MoveWindow',
                                                                                            'MonitorFromPoint',
                                                                                            'CallWindowProcW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetMenu',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'GetDlgItemTextW',
                                                                                            'BringWindowToTop',
                                                                                            'EndDialog',
                                                                                            'EnableWindow',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckDlgButton',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetShellWindow',
                                                                                            'ShowWindow',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'TranslateAcceleratorW',
                                                                                            'SetDlgItemTextW',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'strchr',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcmp',
                                                                                            '_vscwprintf',
                                                                                            '_wcslwr_s',
                                                                                            'memcpy',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'realloc',
                                                                                            '_errno',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            '_wtoi',
                                                                                            '_itow_s',
                                                                                            'swprintf_s',
                                                                                            'wcsncpy_s',
                                                                                            'wcschr',
                                                                                            '_beginthreadex',
                                                                                            'calloc',
                                                                                            'wcsstr',
                                                                                            'towupper',
                                                                                            '_vsnwprintf',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'malloc',
                                                                                            '_resetstkoflw',
                                                                                            'free',
                                                                                            '_purecall',
                                                                                            'iswspace',
                                                                                            '_wcsicmp',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '_wcsnicmp',
                                                                                            'vswprintf_s',
                                                                                            'wcscmp',
                                                                                            'ImageList_LoadImageW',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_Destroy',
                                                                                            'PropVariantClear',
                                                                                            'CoRevertToSelf',
                                                                                            'CoImpersonateClient',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoInitializeSecurity',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoGetMalloc',
                                                                                            'OleUninitialize',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'VarBstrCat',
                                                                                            'LoadTypeLibEx',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'VariantCopy',
                                                                                            'SysAllocStringLen',
                                                                                            'DispCallFunc',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysFreeString',
                                                                                            'SHGetPropertyStoreForWindow',
                                                                                            'ShellExecuteW',
                                                                                            'SHRegGetValueW',
                                                                                            'SHStrDupW',
                                                                                            'UrlUnescapeW',
                                                                                            'UrlEscapeW',
                                                                                            'SHGetValueW',
                                                                                            'SLIsGenuineLocal',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 301,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 536416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14848,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 10752,
                                                                                       '.pdata\x00\x00': 10752,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 536576,
                                                                                       '.text\x00\x00\x00': 424448},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/a80f927c1cf42200a2777121d013c2a4a09403e3fe15559b857cbc6eb489b66e'},
 'a89a924f95aaad929bb3f3aef4b52e1523ad51e61f3688f278962159b5afe45d': {'AddressOfEntryPoint': 12491,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 16944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 17408,
                                                                                       '.text\x00\x00\x00': 23040},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a89a924f95aaad929bb3f3aef4b52e1523ad51e61f3688f278962159b5afe45d'},
 'a912ff7e63c233d4cfe3fbf0a92da134861638d9feee57ff0099a65862c5b3e3': {'AddressOfEntryPoint': 12557,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_AddMasked',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileAttributesA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'CreateDirectoryA',
                                                                                            'lstrcmpiA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GlobalFree',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetProcAddress',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'MulDiv',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'ScreenToClient',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetForegroundWindow',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassA',
                                                                                            'EndDialog',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'SendMessageTimeoutA',
                                                                                            'GetDC',
                                                                                            'LoadImageA',
                                                                                            'GetDlgItem',
                                                                                            'FindWindowExA',
                                                                                            'IsWindow',
                                                                                            'SetClipboardData',
                                                                                            'SetWindowLongA',
                                                                                            'EmptyClipboard',
                                                                                            'SetTimer',
                                                                                            'CreateDialogParamA',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteValueA',
                                                                                            'SetFileSecurityA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_AddMasked',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 16880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 16896,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a912ff7e63c233d4cfe3fbf0a92da134861638d9feee57ff0099a65862c5b3e3'},
 'a914c81d3a3805c0500d70fdec8a10a3b7333314796c4aeb08b5f9bf6c08f544': {'AddressOfEntryPoint': 1447063,
                                                                      'DebugRVA': 1962960,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 2518464,
                                                                      'ExportSize': 745,
                                                                      'IATRVA': 1949696,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'CRYPT32.dll': 'CertFindCertificateInStore',
                                                                                      'GDI32.dll': 'TextOutW',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableW',
                                                                                      'MPR.dll': 'WNetOpenEnumW',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'RPCRT4.dll': 'RpcStringFreeA',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathAddBackslashW',
                                                                                      'USER32.dll': 'wvsprintfW',
                                                                                      'UxTheme.dll': 'SetWindowTheme',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WS2_32.dll': '__WSAFDIsSet',
                                                                                      'gdiplus.dll': 'GdipDeleteBrush',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GdipDrawImageRectRectI',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipFree',
                                                                                            'GdipCloneStringFormat',
                                                                                            'GdipStringFormatGetGenericTypographic',
                                                                                            'GdipMeasureString',
                                                                                            'GdipGetFontSize',
                                                                                            'GdipGetFontStyle',
                                                                                            'GdipGetFamily',
                                                                                            'GdipGetCellDescent',
                                                                                            'GdipGetEmHeight',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdipSetClipRectI',
                                                                                            'GdipCreateFontFamilyFromName',
                                                                                            'GdipDrawImagePointRectI',
                                                                                            'GdipLoadImageFromStream',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipDeleteFontFamily',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDrawString',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipCreateFont',
                                                                                            'GdipGetGenericFontFamilySansSerif',
                                                                                            'GdipResetClip',
                                                                                            'GdipDeleteBrush',
                                                                                            'ReadEncryptedFileRaw',
                                                                                            'QueryServiceConfig2W',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'IsValidSid',
                                                                                            'GetTokenInformation',
                                                                                            'StartServiceW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RevertToSelf',
                                                                                            'OpenThreadToken',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'EncryptFileW',
                                                                                            'DecryptFileW',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'SetFileSecurityW',
                                                                                            'GetFileSecurityW',
                                                                                            'SetThreadToken',
                                                                                            'OpenEncryptedFileRawW',
                                                                                            'QueryServiceStatus',
                                                                                            'WriteEncryptedFileRaw',
                                                                                            'CloseEncryptedFileRaw',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'DuplicateTokenEx',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetUserNameW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegSetKeySecurity',
                                                                                            'SetSecurityInfo',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'EnumDependentServicesW',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceConfigW',
                                                                                            'CloseHandle',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExW',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'SizeofResource',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetProcAddress',
                                                                                            'lstrcmpiW',
                                                                                            'GetVersion',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetThreadPriority',
                                                                                            'TerminateThread',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventA',
                                                                                            'LoadLibraryA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetStdHandle',
                                                                                            'CopyFileW',
                                                                                            'CreateProcessW',
                                                                                            'SuspendThread',
                                                                                            'ResumeThread',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetCommandLineW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileExW',
                                                                                            'LoadLibraryW',
                                                                                            'LockResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'GetVersionExA',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteConsoleW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'SetErrorMode',
                                                                                            'GetLogicalDrives',
                                                                                            'FindClose',
                                                                                            'GetDriveTypeA',
                                                                                            'GetProcessWorkingSetSize',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'LockFileEx',
                                                                                            'UnlockFileEx',
                                                                                            'FlushFileBuffers',
                                                                                            'DeviceIoControl',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileW',
                                                                                            'CreateHardLinkW',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'ReadFile',
                                                                                            'CompareStringW',
                                                                                            'FindNextChangeNotification',
                                                                                            'FindCloseChangeNotification',
                                                                                            'ExitThread',
                                                                                            'FindResourceExW',
                                                                                            'EnumResourceNamesW',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetFileTime',
                                                                                            'BackupRead',
                                                                                            'BackupSeek',
                                                                                            'BackupWrite',
                                                                                            'GetFileAttributesExW',
                                                                                            'TerminateProcess',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetTempFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetShortPathNameW',
                                                                                            'FindFirstFileA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateMutexA',
                                                                                            'LocalAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryExA',
                                                                                            'OutputDebugStringA',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateMutexW',
                                                                                            'GetModuleHandleW',
                                                                                            'MulDiv',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'SetLastError',
                                                                                            'FlushInstructionCache',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'DecodePointer',
                                                                                            'HeapSize',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'HeapDestroy',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'RtlUnwind',
                                                                                            'CreateThread',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStringTypeW',
                                                                                            'IsValidCodePage',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'OutputDebugStringW',
                                                                                            'LCMapStringW',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesW',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'InitializeSListHead',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'lstrlenA',
                                                                                            'CompareFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetSystemTime',
                                                                                            'GlobalMemoryStatus',
                                                                                            'CreateSemaphoreA',
                                                                                            'ReleaseSemaphore',
                                                                                            'LCMapStringA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetTempPathW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'FindWindowA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'PostMessageA',
                                                                                            'CreateWindowExA',
                                                                                            'RegisterClassExA',
                                                                                            'DefWindowProcA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageA',
                                                                                            'CharUpperBuffW',
                                                                                            'FillRect',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetAsyncKeyState',
                                                                                            'RegisterClassExW',
                                                                                            'LoadCursorW',
                                                                                            'LoadImageW',
                                                                                            'IsIconic',
                                                                                            'UpdateLayeredWindow',
                                                                                            'DestroyWindow',
                                                                                            'MessageBoxW',
                                                                                            'CharNextW',
                                                                                            'IsWindowEnabled',
                                                                                            'GetClassInfoExW',
                                                                                            'CallWindowProcW',
                                                                                            'EnableWindow',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetFocus',
                                                                                            'LoadIconW',
                                                                                            'CreateWindowExW',
                                                                                            'GetSystemMetrics',
                                                                                            'DefWindowProcW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EndPaint',
                                                                                            'GetParent',
                                                                                            'SetCursor',
                                                                                            'GetShellWindow',
                                                                                            'SetTimer',
                                                                                            'GetWindowRect',
                                                                                            'SetCapture',
                                                                                            'PostMessageW',
                                                                                            'KillTimer',
                                                                                            'DialogBoxParamW',
                                                                                            'BeginPaint',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'GetActiveWindow',
                                                                                            'ReleaseCapture',
                                                                                            'IsWindowVisible',
                                                                                            'SwitchToThisWindow',
                                                                                            'SendMessageW',
                                                                                            'UpdateWindow',
                                                                                            'SetWindowTextW',
                                                                                            'UnregisterClassW',
                                                                                            'wsprintfW',
                                                                                            'wvsprintfW',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'SetBkMode',
                                                                                            'DeleteDC',
                                                                                            'SetTextColor',
                                                                                            'SetViewportOrgEx',
                                                                                            'BitBlt',
                                                                                            'DPtoLP',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetStockObject',
                                                                                            'GetObjectW',
                                                                                            'TextOutW',
                                                                                            'InitCommonControlsEx',
                                                                                            'connect',
                                                                                            'freeaddrinfo',
                                                                                            'getaddrinfo',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'socket',
                                                                                            'ioctlsocket',
                                                                                            'closesocket',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAGetLastError',
                                                                                            'shutdown',
                                                                                            'setsockopt',
                                                                                            'select',
                                                                                            '__WSAFDIsSet',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'ShellExecuteExW',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW',
                                                                                            'WNetCloseEnum',
                                                                                            'WNetEnumResourceW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetAddConnection3W',
                                                                                            'WNetGetUniversalNameW',
                                                                                            'WNetOpenEnumW',
                                                                                            'CoTaskMemRealloc',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SysAllocString',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'VarBstrCat',
                                                                                            'SysAllocStringLen',
                                                                                            'NdrPointerMarshall',
                                                                                            'UuidCreate',
                                                                                            'UuidToStringA',
                                                                                            'UuidFromStringA',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingFromStringBindingA',
                                                                                            'NdrConformantArrayBufferSize',
                                                                                            'NdrConformantArrayUnmarshall',
                                                                                            'NdrConformantArrayMarshall',
                                                                                            'NdrFullPointerXlatFree',
                                                                                            'NdrFullPointerXlatInit',
                                                                                            'NdrFreeBuffer',
                                                                                            'NdrSendReceive',
                                                                                            'NdrGetBuffer',
                                                                                            'NdrServerInitializeNew',
                                                                                            'NdrClientInitializeNew',
                                                                                            'NdrConvert',
                                                                                            'NdrPointerBufferSize',
                                                                                            'NdrPointerUnmarshall',
                                                                                            'RpcStringBindingComposeA',
                                                                                            'RpcRaiseException',
                                                                                            'RpcStringFreeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueW',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'PathAppendW',
                                                                                            'PathAddBackslashW',
                                                                                            'CertGetCertificateChain',
                                                                                            'CertGetNameStringW',
                                                                                            'CertNameToStrW',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CertDeleteCertificateFromStore',
                                                                                            'CertAddCertificateContextToStore',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertCreateCertificateContext',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'PFXImportCertStore',
                                                                                            'PFXIsPFXBlob',
                                                                                            'CertGetStoreProperty',
                                                                                            'CertOpenStore',
                                                                                            'CryptDecodeObject',
                                                                                            'PFXExportCertStoreEx',
                                                                                            'CertDuplicateStore',
                                                                                            'CertCloseStore',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'GetModuleFileNameExW',
                                                                                            'SetWindowTheme'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 480,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 146612,
                                                                      'SectionNames': {'.data\x00\x00\x00': 80896,
                                                                                       '.rdata\x00\x00': 581632,
                                                                                       '.reloc\x00\x00': 159232,
                                                                                       '.rsrc\x00\x00\x00': 146944,
                                                                                       '.text\x00\x00\x00': 1944576,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a914c81d3a3805c0500d70fdec8a10a3b7333314796c4aeb08b5f9bf6c08f544'},
 'a938a6f437c40becfe407ad7d5ecaa9ef2169f29a77ca978deabf3c388f986a1': {'AddressOfEntryPoint': 16016,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'DeleteFileA',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageA',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetSystemDirectoryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'getenv',
                                                                                            'fclose',
                                                                                            'fopen',
                                                                                            '_vsnwprintf',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            'vfprintf',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'fgets',
                                                                                            '_errno',
                                                                                            'fflush',
                                                                                            'strerror',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_fsopen',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'fprintf',
                                                                                            'fputs',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 61,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 14336},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a938a6f437c40becfe407ad7d5ecaa9ef2169f29a77ca978deabf3c388f986a1'},
 'a93bd5979575645c9968e7aa6b097bf93ba4788df8a73dccbd5056f6905b49ee': {'AddressOfEntryPoint': 206315,
                                                                      'DebugRVA': 5328,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LsaClose',
                                                                                      'DNSAPI.dll': 'DnsQuery_W',
                                                                                      'KERNEL32.dll': 'lstrcmpW',
                                                                                      'MPRAPI.dll': 'MprConfigServerDisconnect',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'NTDSAPI.dll': 'DsFreeNameResultW',
                                                                                      'RASAPI32.dll': 'RasGetEntryPropertiesA',
                                                                                      'SAMLIB.dll': 'SamConnect',
                                                                                      'TAPI32.dll': 'lineInitializeExA',
                                                                                      'USER32.dll': 'CharUpperBuffA',
                                                                                      'WS2_32.dll': 'htonl',
                                                                                      'icmp.dll': 'IcmpCloseHandle',
                                                                                      'iphlpapi.dll': 'InternalGetIpForwardTable',
                                                                                      'msvcrt.dll': 'memmove',
                                                                                      'ntdll.dll': 'RtlInitString',
                                                                                      'ole32.dll': 'StringFromGUID2',
                                                                                      'snmpapi.dll': 'SnmpUtilMemFree'},
                                                                      'ImportedFunctions': ['strchr',
                                                                                            'sprintf',
                                                                                            '_stricmp',
                                                                                            'strtoul',
                                                                                            'wcsncpy',
                                                                                            '_wcsicmp',
                                                                                            '_except_handler3',
                                                                                            'strtok',
                                                                                            'fgets',
                                                                                            'fopen',
                                                                                            'wcschr',
                                                                                            'strncpy',
                                                                                            '_ultoa',
                                                                                            'swprintf',
                                                                                            '_wcsdup',
                                                                                            'isprint',
                                                                                            'wcscpy',
                                                                                            'wcslen',
                                                                                            'atoi',
                                                                                            'realloc',
                                                                                            '_strdup',
                                                                                            'strncmp',
                                                                                            'localtime',
                                                                                            '_ltoa',
                                                                                            'fflush',
                                                                                            'wcscat',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            '_iob',
                                                                                            'fclose',
                                                                                            'setlocale',
                                                                                            'strpbrk',
                                                                                            'strspn',
                                                                                            'printf',
                                                                                            'fprintf',
                                                                                            '_vsnprintf',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wcsnicmp',
                                                                                            'strstr',
                                                                                            'vsprintf',
                                                                                            'wcscmp',
                                                                                            'qsort',
                                                                                            'time',
                                                                                            '_controlfp',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'memmove',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaSetInformationPolicy',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceA',
                                                                                            'OpenSCManagerA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'LsaGetUserName',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueA',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'LsaClose',
                                                                                            'GetTickCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'ReadFile',
                                                                                            'AllocConsole',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'SetLastError',
                                                                                            'GetLocalTime',
                                                                                            'GetStdHandle',
                                                                                            'OutputDebugStringA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'LoadLibraryA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'CreateMailslotA',
                                                                                            'CreateFileA',
                                                                                            'WideCharToMultiByte',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetComputerNameExW',
                                                                                            'FormatMessageA',
                                                                                            'lstrlenA',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateEventA',
                                                                                            'lstrcpynA',
                                                                                            'lstrcpynW',
                                                                                            'GetProcAddress',
                                                                                            'MoveFileExA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcatA',
                                                                                            'lstrcpyA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'DeviceIoControl',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'GetComputerNameW',
                                                                                            'GetComputerNameExA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'lstrcpyW',
                                                                                            'lstrcmpW',
                                                                                            'IcmpCreateFile',
                                                                                            'IcmpSendEcho',
                                                                                            'IcmpCloseHandle',
                                                                                            'SamFreeMemory',
                                                                                            'SamQueryDisplayInformation',
                                                                                            'SamOpenDomain',
                                                                                            'SamCloseHandle',
                                                                                            'SamConnect',
                                                                                            'RtlIpv6AddressToStringA',
                                                                                            'NtClose',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'RtlLengthSid',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtOpenFile',
                                                                                            'NtWaitForSingleObject',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'NtCreateFile',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'NtSetInformationThread',
                                                                                            'NtImpersonateAnonymousToken',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlFreeOemString',
                                                                                            'RtlUnicodeStringToOemString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtFsControlFile',
                                                                                            'NtQueryValueKey',
                                                                                            'ZwFreeVirtualMemory',
                                                                                            'ZwClose',
                                                                                            'ZwConnectPort',
                                                                                            'NtOpenEvent',
                                                                                            'ZwRequestWaitReplyPort',
                                                                                            'RtlOemStringToUnicodeString',
                                                                                            'NlsMbOemCodePageTag',
                                                                                            'RtlUpcaseUnicodeStringToOemString',
                                                                                            'RtlxUnicodeStringToOemSize',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlInitString',
                                                                                            'CharToOemA',
                                                                                            'CharLowerA',
                                                                                            'wsprintfA',
                                                                                            'LoadStringA',
                                                                                            'CharUpperBuffA',
                                                                                            'DnsUpdateTest_UTF8',
                                                                                            'DnsNameCompare_W',
                                                                                            'DnsFreeConfigStructure',
                                                                                            'DnsRecordSetDetach',
                                                                                            'DnsModifyRecordsInSet_A',
                                                                                            'DnsQueryConfigDword',
                                                                                            'DnsStatusString',
                                                                                            'DnsQueryConfig',
                                                                                            'DnsValidateName_W',
                                                                                            'DnsRecordListFree',
                                                                                            'DnsQuery_UTF8',
                                                                                            'DnsQueryConfigAllocEx',
                                                                                            'DnsNetworkInformation_CreateFromFAZ',
                                                                                            'DnsRecordSetCompare',
                                                                                            'DnsApiSetDebugGlobals',
                                                                                            'DnsQuery_W',
                                                                                            'DsGetDomainControllerInfoW',
                                                                                            'DsCrackNamesW',
                                                                                            'DsUnBindA',
                                                                                            'DsUnBindW',
                                                                                            'DsFreeDomainControllerInfoW',
                                                                                            'DsBindW',
                                                                                            'DsFreeNameResultW',
                                                                                            'WSAStartup',
                                                                                            'ntohl',
                                                                                            'WSACleanup',
                                                                                            'gethostbyaddr',
                                                                                            'getservbyport',
                                                                                            'htons',
                                                                                            'gethostname',
                                                                                            'getsockopt',
                                                                                            'socket',
                                                                                            'WSAEnumProtocolsA',
                                                                                            'sendto',
                                                                                            'closesocket',
                                                                                            'recvfrom',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'inet_addr',
                                                                                            'gethostbyname',
                                                                                            'WSAGetLastError',
                                                                                            'inet_ntoa',
                                                                                            'htonl',
                                                                                            'GetIpAddrTable',
                                                                                            'GetNetworkParams',
                                                                                            'GetAdaptersInfo',
                                                                                            'InternalGetIpForwardTable',
                                                                                            'MprConfigServerConnect',
                                                                                            'MprConfigGetFriendlyName',
                                                                                            'MprConfigServerDisconnect',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'RasGetConnectionStatistics',
                                                                                            'RasEnumConnectionsA',
                                                                                            'RasGetEntryPropertiesA',
                                                                                            'DsGetDcNameW',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'DsRoleFreeMemory',
                                                                                            'I_NetLogonControl2',
                                                                                            'NetServerGetInfo',
                                                                                            'NetApiBufferAllocate',
                                                                                            'RxNetServerEnum',
                                                                                            'I_NetNameCanonicalize',
                                                                                            'NetEnumerateTrustedDomains',
                                                                                            'NetWkstaTransportEnum',
                                                                                            'NetApiBufferFree',
                                                                                            'lineClose',
                                                                                            'lineGetDevCapsA',
                                                                                            'lineOpenA',
                                                                                            'lineGetIDA',
                                                                                            'lineShutdown',
                                                                                            'lineGetDevConfigA',
                                                                                            'lineInitializeExA',
                                                                                            'SnmpUtilVarBindFree',
                                                                                            'SnmpUtilOidCpy',
                                                                                            'SnmpUtilMemAlloc',
                                                                                            'SnmpUtilMemFree'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 265,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 127504,
                                                                      'SectionNames': {'.data\x00\x00\x00': 43008,
                                                                                       '.rsrc\x00\x00\x00': 128000,
                                                                                       '.text\x00\x00\x00': 218112},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a93bd5979575645c9968e7aa6b097bf93ba4788df8a73dccbd5056f6905b49ee'},
 'a94fbfdc3f7cab32b966c153ad06bfee9c1f406f82e0c579a8d0b34b7918ed3b': {'AddressOfEntryPoint': 284928,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 401408,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceMessage',
                                                                                      'KERNEL32.dll': 'GetConsoleOutputCP',
                                                                                      'NTDSAPI.dll': 'DsFreeDomainControllerInfoW',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WS2_32.dll': 'WSAAddressToStringA',
                                                                                      'logoncli.dll': 'I_NetlogonGetTrustRid',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'netutils.dll': 'NetApiBufferFree',
                                                                                      'ntdll.dll': 'RtlConvertSidToUnicodeString'},
                                                                      'ImportedFunctions': ['CryptAcquireContextW',
                                                                                            'GetAclInformation',
                                                                                            'RegSetValueExA',
                                                                                            'EqualSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryValueExW',
                                                                                            'AbortSystemShutdownA',
                                                                                            'GetAce',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegConnectRegistryW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SystemFunction025',
                                                                                            'FreeSid',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegCloseKey',
                                                                                            'SystemFunction027',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'InitiateSystemShutdownExA',
                                                                                            'TraceMessage',
                                                                                            'WaitForMultipleObjects',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'CreateThread',
                                                                                            'SetMailslotInfo',
                                                                                            'CreateMailslotA',
                                                                                            'CreateFileW',
                                                                                            'GetStdHandle',
                                                                                            'CreateEventW',
                                                                                            'WriteFile',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'LocalAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'OutputDebugStringA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLocalTime',
                                                                                            'EnterCriticalSection',
                                                                                            'GetLastError',
                                                                                            'GetOverlappedResult',
                                                                                            'ReadFile',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'GetComputerNameW',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetConsoleOutputCP',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            'isleadbyte',
                                                                                            '_fileno',
                                                                                            'free',
                                                                                            '_snprintf',
                                                                                            '_stricmp',
                                                                                            'time',
                                                                                            'rand',
                                                                                            '_wsetlocale',
                                                                                            'fwprintf',
                                                                                            '_itoa',
                                                                                            '_vsnwprintf',
                                                                                            '_strnicmp',
                                                                                            'strchr',
                                                                                            'strtol',
                                                                                            'printf',
                                                                                            'fprintf',
                                                                                            'iswctype',
                                                                                            '_iob',
                                                                                            'strtoul',
                                                                                            '_errno',
                                                                                            '_lseeki64',
                                                                                            '_write',
                                                                                            '_isatty',
                                                                                            '__pioinfo',
                                                                                            '__badioinfo',
                                                                                            'malloc',
                                                                                            'wctomb',
                                                                                            'srand',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'DsGetDomainControllerInfoW',
                                                                                            'DsUnBindW',
                                                                                            'DsBindW',
                                                                                            'DsFreeDomainControllerInfoW',
                                                                                            'I_NetlogonComputeServerDigest',
                                                                                            'NetLogonGetTimeServiceParentDomain',
                                                                                            'I_NetlogonComputeClientSignature',
                                                                                            'I_NetlogonComputeServerSignature',
                                                                                            'DsAddressToSiteNamesExA',
                                                                                            'I_NetLogonControl',
                                                                                            'DsGetForestTrustInformationW',
                                                                                            'DsGetSiteNameA',
                                                                                            'DsGetDcCloseW',
                                                                                            'DsGetDcSiteCoverageA',
                                                                                            'I_NetGetDCList',
                                                                                            'I_NetLogonControl2',
                                                                                            'DsEnumerateDomainTrustsA',
                                                                                            'NetGetDCName',
                                                                                            'DsGetDcNextA',
                                                                                            'DsGetDcNameA',
                                                                                            'DsGetDcOpenA',
                                                                                            'DsGetDcNameW',
                                                                                            'DsGetDcNameWithAccountW',
                                                                                            'I_NetlogonComputeClientDigest',
                                                                                            'DsDeregisterDnsHostRecordsA',
                                                                                            'I_NetlogonGetTrustRid',
                                                                                            'UuidFromStringA',
                                                                                            'UuidToStringW',
                                                                                            'UuidToStringA',
                                                                                            'RpcStringFreeA',
                                                                                            'RpcStringFreeW',
                                                                                            'htonl',
                                                                                            'WSAStringToAddressA',
                                                                                            'WSAStartup',
                                                                                            'getaddrinfo',
                                                                                            'ntohs',
                                                                                            'WSAGetLastError',
                                                                                            'WSACleanup',
                                                                                            'freeaddrinfo',
                                                                                            'WSAAddressToStringA',
                                                                                            'RtlInitAnsiString',
                                                                                            'NlsMbCodePageTag',
                                                                                            'RtlxAnsiStringToUnicodeSize',
                                                                                            'RtlOemStringToUnicodeString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlInitString',
                                                                                            'RtlUnwind',
                                                                                            'RtlTimeToTimeFields',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlSystemTimeToLocalTime',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'NetApiBufferAllocate',
                                                                                            'NetpwNameCompare',
                                                                                            'NetApiBufferFree',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 161,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 65536,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 18432,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 289792},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/a94fbfdc3f7cab32b966c153ad06bfee9c1f406f82e0c579a8d0b34b7918ed3b'},
 'a9b095ed024118d9d990daf7b84159d899e856f1e344389f575a1e2c274969b6': {'AddressOfEntryPoint': 1700380,
                                                                      'DebugRVA': 2353392,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1880064,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'GDI32.dll': 'CopyMetaFileW',
                                                                                      'IMM32.dll': 'ImmReleaseContext',
                                                                                      'KERNEL32.dll': 'GlobalReAlloc',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEACC.dll': 'LresultFromObject',
                                                                                      'OLEAUT32.dll': 'VariantTimeToSystemTime',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'SHLWAPI.dll': 'PathIsUNCW',
                                                                                      'USER32.dll': 'MapWindowPoints',
                                                                                      'UxTheme.dll': 'GetThemePartSize',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'DocumentPropertiesW',
                                                                                      'gdiplus.dll': 'GdiplusShutdown',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileExW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LCMapStringW',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'SetStdHandle',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'HeapQueryInformation',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlPcToFileHeader',
                                                                                            'OutputDebugStringW',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'GlobalHandle',
                                                                                            'LocalReAlloc',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'EncodePointer',
                                                                                            'FreeResource',
                                                                                            'GlobalFindAtomW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GlobalFlags',
                                                                                            'VirtualProtect',
                                                                                            'lstrcpyW',
                                                                                            'FindResourceExW',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetProfileIntW',
                                                                                            'SearchPathW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'GlobalAddAtomW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'CompareStringA',
                                                                                            'lstrcmpW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetCurrentThread',
                                                                                            'QueryActCtxW',
                                                                                            'FindActCtxSectionStringW',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'GetModuleHandleExW',
                                                                                            'DuplicateHandle',
                                                                                            'OutputDebugStringA',
                                                                                            'DecodePointer',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersion',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'lstrcmpA',
                                                                                            'lstrlenA',
                                                                                            'LoadLibraryW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'WriteFile',
                                                                                            'UnlockFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventW',
                                                                                            'Sleep',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetCurrentThreadId',
                                                                                            'FormatMessageW',
                                                                                            'TerminateThread',
                                                                                            'ResumeThread',
                                                                                            'GlobalFree',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpiW',
                                                                                            'GlobalAlloc',
                                                                                            'CreateEventW',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateProcessW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcessId',
                                                                                            'SleepEx',
                                                                                            'GetTickCount',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'MulDiv',
                                                                                            'CopyFileW',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetEndOfFile',
                                                                                            'SetThreadPriority',
                                                                                            'SuspendThread',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileSize',
                                                                                            'GetFullPathNameW',
                                                                                            'GetVolumeInformationW',
                                                                                            'LockFile',
                                                                                            'ReadFile',
                                                                                            'GlobalReAlloc',
                                                                                            'UnregisterClassW',
                                                                                            'MessageBoxW',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetMenuStringW',
                                                                                            'GetMenuState',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'DestroyCursor',
                                                                                            'GetWindowRgn',
                                                                                            'CreateMenu',
                                                                                            'SubtractRect',
                                                                                            'TranslateMDISysAccel',
                                                                                            'DefMDIChildProcW',
                                                                                            'DefFrameProcW',
                                                                                            'DrawMenuBar',
                                                                                            'GetUpdateRect',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'CharUpperBuffW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'ModifyMenuW',
                                                                                            'GetDoubleClickTime',
                                                                                            'SetMenuDefaultItem',
                                                                                            'LockWindowUpdate',
                                                                                            'SetRect',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'GetKeyboardState',
                                                                                            'ToUnicodeEx',
                                                                                            'MapVirtualKeyExW',
                                                                                            'IsCharLowerW',
                                                                                            'GetKeyboardLayout',
                                                                                            'WaitMessage',
                                                                                            'PostThreadMessageW',
                                                                                            'GetComboBoxInfo',
                                                                                            'ReuseDDElParam',
                                                                                            'UnpackDDElParam',
                                                                                            'InsertMenuItemW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'MonitorFromPoint',
                                                                                            'UpdateLayeredWindow',
                                                                                            'UnionRect',
                                                                                            'DrawIcon',
                                                                                            'FrameRect',
                                                                                            'CopyIcon',
                                                                                            'SetCursorPos',
                                                                                            'BringWindowToTop',
                                                                                            'GetSystemMenu',
                                                                                            'IsZoomed',
                                                                                            'DrawFrameControl',
                                                                                            'DrawEdge',
                                                                                            'DrawStateW',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'OpenClipboard',
                                                                                            'SetParent',
                                                                                            'SetWindowRgn',
                                                                                            'SetClassLongPtrW',
                                                                                            'EnumDisplayMonitors',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'LoadMenuW',
                                                                                            'GetKeyNameTextW',
                                                                                            'MapVirtualKeyW',
                                                                                            'GetMenuDefaultItem',
                                                                                            'CreatePopupMenu',
                                                                                            'NotifyWinEvent',
                                                                                            'InvertRect',
                                                                                            'HideCaret',
                                                                                            'EnableScrollBar',
                                                                                            'AppendMenuW',
                                                                                            'RemoveMenu',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'MessageBeep',
                                                                                            'GetIconInfo',
                                                                                            'DrawIconEx',
                                                                                            'IsRectEmpty',
                                                                                            'DrawFocusRect',
                                                                                            'WindowFromPoint',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'LoadImageW',
                                                                                            'TrackMouseEvent',
                                                                                            'MapDialogRect',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'OffsetRect',
                                                                                            'SetRectEmpty',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetMenuItemInfoW',
                                                                                            'DestroyMenu',
                                                                                            'IntersectRect',
                                                                                            'InflateRect',
                                                                                            'DestroyIcon',
                                                                                            'InvalidateRect',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'RealChildWindowFromPoint',
                                                                                            'GetDesktopWindow',
                                                                                            'DeleteMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'CopyImage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'SendMessageW',
                                                                                            'IsWindowVisible',
                                                                                            'IsDialogMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'CheckDlgButton',
                                                                                            'MoveWindow',
                                                                                            'ShowWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'WinHelpW',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'LoadIconW',
                                                                                            'GetWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongW',
                                                                                            'PtInRect',
                                                                                            'EqualRect',
                                                                                            'CopyRect',
                                                                                            'GetActiveWindow',
                                                                                            'GetKeyState',
                                                                                            'ValidateRect',
                                                                                            'GetCursorPos',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'CharUpperW',
                                                                                            'GetSystemMetrics',
                                                                                            'PostMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetFocus',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetParent',
                                                                                            'LoadBitmapW',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetCursor',
                                                                                            'EnableWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetLastActivePopup',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'LoadCursorW',
                                                                                            'GetWindowTextW',
                                                                                            'InsertMenuW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'DrawTextW',
                                                                                            'DrawTextExW',
                                                                                            'GrayStringW',
                                                                                            'TabbedTextOutW',
                                                                                            'GetWindowDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'FillRect',
                                                                                            'RegisterWindowMessageW',
                                                                                            'GetMessagePos',
                                                                                            'GetMessageTime',
                                                                                            'CallWindowProcW',
                                                                                            'GetClassInfoW',
                                                                                            'GetClassInfoExW',
                                                                                            'IsWindow',
                                                                                            'IsMenu',
                                                                                            'IsChild',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowPlacement',
                                                                                            'SetWindowPlacement',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'IsIconic',
                                                                                            'GetDlgItem',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetFocus',
                                                                                            'GetCapture',
                                                                                            'GetMenu',
                                                                                            'SetMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'UpdateWindow',
                                                                                            'SetActiveWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'RedrawWindow',
                                                                                            'ScrollWindow',
                                                                                            'SetScrollPos',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollRange',
                                                                                            'ShowScrollBar',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'GetClientRect',
                                                                                            'GetWindowRect',
                                                                                            'AdjustWindowRectEx',
                                                                                            'MapWindowPoints',
                                                                                            'GetTextFaceW',
                                                                                            'GetViewportOrgEx',
                                                                                            'GetWindowOrgEx',
                                                                                            'SetPixelV',
                                                                                            'SetPaletteEntries',
                                                                                            'ExtFloodFill',
                                                                                            'PtInRegion',
                                                                                            'GetBoundsRect',
                                                                                            'FrameRgn',
                                                                                            'FillRgn',
                                                                                            'RoundRect',
                                                                                            'OffsetRgn',
                                                                                            'GetRgnBox',
                                                                                            'Rectangle',
                                                                                            'LPtoDP',
                                                                                            'CreateRoundRectRgn',
                                                                                            'Polyline',
                                                                                            'Polygon',
                                                                                            'CreatePolygonRgn',
                                                                                            'GetTextColor',
                                                                                            'Ellipse',
                                                                                            'CreateEllipticRgn',
                                                                                            'SetDIBColorTable',
                                                                                            'CreateDIBSection',
                                                                                            'StretchBlt',
                                                                                            'SetPixel',
                                                                                            'GetTextCharsetInfo',
                                                                                            'EnumFontFamiliesW',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'GetBkColor',
                                                                                            'RealizePalette',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'GetPaletteEntries',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'CreatePalette',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DPtoLP',
                                                                                            'SetRectRgn',
                                                                                            'PatBlt',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'CombineRgn',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'ExtTextOutW',
                                                                                            'TextOutW',
                                                                                            'MoveToEx',
                                                                                            'GetObjectW',
                                                                                            'SetTextAlign',
                                                                                            'SetTextColor',
                                                                                            'SetROP2',
                                                                                            'SetPolyFillMode',
                                                                                            'GetLayout',
                                                                                            'SetLayout',
                                                                                            'SetMapMode',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SelectPalette',
                                                                                            'SelectObject',
                                                                                            'ExtSelectClipRgn',
                                                                                            'SelectClipRgn',
                                                                                            'SaveDC',
                                                                                            'RestoreDC',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'LineTo',
                                                                                            'IntersectClipRect',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'GetStockObject',
                                                                                            'GetPixel',
                                                                                            'GetObjectType',
                                                                                            'GetClipBox',
                                                                                            'ExcludeClipRect',
                                                                                            'Escape',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePatternBrush',
                                                                                            'CreatePen',
                                                                                            'CreateHatchBrush',
                                                                                            'CreateCompatibleDC',
                                                                                            'BitBlt',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateDCW',
                                                                                            'CopyMetaFileW',
                                                                                            'TransparentBlt',
                                                                                            'AlphaBlend',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterW',
                                                                                            'DocumentPropertiesW',
                                                                                            'SystemFunction036',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateProcessAsUserW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'DeleteService',
                                                                                            'CreateServiceW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'EqualSid',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegOpenKeyA',
                                                                                            'RegCloseKey',
                                                                                            'GetUserNameW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'SetEntriesInAclW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'DragQueryFileW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetDesktopFolder',
                                                                                            'DragFinish',
                                                                                            'SHAppBarMessage',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'PathStripToRootW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'StrFormatKBSizeW',
                                                                                            'PathIsUNCW',
                                                                                            'DrawThemeBackground',
                                                                                            'GetThemeSysColor',
                                                                                            'IsThemeBackgroundPartiallyTransparent',
                                                                                            'IsAppThemed',
                                                                                            'GetWindowTheme',
                                                                                            'GetCurrentThemeName',
                                                                                            'DrawThemeText',
                                                                                            'DrawThemeParentBackground',
                                                                                            'OpenThemeData',
                                                                                            'CloseThemeData',
                                                                                            'GetThemeColor',
                                                                                            'GetThemePartSize',
                                                                                            'RevokeDragDrop',
                                                                                            'RegisterDragDrop',
                                                                                            'OleLockRunning',
                                                                                            'OleCreateMenuDescriptor',
                                                                                            'OleDestroyMenuDescriptor',
                                                                                            'OleTranslateAccelerator',
                                                                                            'IsAccelerator',
                                                                                            'CoLockObjectExternal',
                                                                                            'OleGetClipboard',
                                                                                            'DoDragDrop',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoInitializeEx',
                                                                                            'CoDisconnectObject',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoCreateGuid',
                                                                                            'CoUninitialize',
                                                                                            'ReleaseStgMedium',
                                                                                            'OleDuplicateData',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'VariantInit',
                                                                                            'VarBstrFromDate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'LresultFromObject',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdiplusStartup',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdiplusShutdown',
                                                                                            'ImmGetContext',
                                                                                            'ImmGetOpenStatus',
                                                                                            'ImmReleaseContext',
                                                                                            'PlaySoundW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 626,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 389472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 29696,
                                                                                       '.pdata\x00\x00': 90112,
                                                                                       '.rdata\x00\x00': 728064,
                                                                                       '.reloc\x00\x00': 60416,
                                                                                       '.rsrc\x00\x00\x00': 389632,
                                                                                       '.text\x00\x00\x00': 1874944,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/a9b095ed024118d9d990daf7b84159d899e856f1e344389f575a1e2c274969b6'},
 'aa10bfe51228e5210c7e34372d4e9ebe75e920ba85edb2e6350c2e390899cf09': {'AddressOfEntryPoint': 852014,
                                                                      'DebugRVA': 851804,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 796983296,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4784,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 844288},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/aa10bfe51228e5210c7e34372d4e9ebe75e920ba85edb2e6350c2e390899cf09'},
 'aa2d76729131d3f6a422a79925dcdd43bd2c4b341f4d765cf3c4338e4ec5de63': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 439004,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 6891409244160,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1084,
                                                                      'SectionNames': {'.data\x00\x00\x00': 84480,
                                                                                       '.reloc\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 337408,
                                                                                       '.xdata\x00\x00': 11264},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/aa2d76729131d3f6a422a79925dcdd43bd2c4b341f4d765cf3c4338e4ec5de63'},
 'aa300b32cbe3c2109ac25bfc50a3a08de43efba5889ded23ce20a828978ad616': {'AddressOfEntryPoint': 101598,
                                                                      'DebugRVA': 101196,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 161460,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 161792,
                                                                                       '.text\x00\x00\x00': 93696},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/aa300b32cbe3c2109ac25bfc50a3a08de43efba5889ded23ce20a828978ad616'},
 'aa33292c6e8044d6884d4bb776b58549feda71e226b1c23980063d312af18506': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 58360,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 58368,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/aa33292c6e8044d6884d4bb776b58549feda71e226b1c23980063d312af18506'},
 'aa4e300420b301d397e3bb66fd62655f86724f2b0c17968217829b91f9443c1f': {'AddressOfEntryPoint': 12991,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpynA',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 28632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/aa4e300420b301d397e3bb66fd62655f86724f2b0c17968217829b91f9443c1f'},
 'aa68b43decac8bda949004112ca75af5660da1e46a387399fc3ad48106534078': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 442928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 443392,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/aa68b43decac8bda949004112ca75af5660da1e46a387399fc3ad48106534078'},
 'aac9977d146ce101fb96fad70ca53010b0504155fff000f70d2c71e36798c3e2': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 58012,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 58368,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/aac9977d146ce101fb96fad70ca53010b0504155fff000f70d2c71e36798c3e2'},
 'ab1f26c4c0e9babd0feed715e3d4b835ed68395492f2af089343eeba2005d25b': {'AddressOfEntryPoint': 62046,
                                                                      'DebugRVA': 61816,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 790822912,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 4824,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 54272},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ab1f26c4c0e9babd0feed715e3d4b835ed68395492f2af089343eeba2005d25b'},
 'ab3f84f1a8627f2046e19e064ee900e869280e8e8c049ce60615671d6fa84aec': {'AddressOfEntryPoint': 8688,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AllocateAndInitializeSid',
                                                                                      'KERNEL32.dll': 'HeapAlloc',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'msvcrt.dll': '_resetstkoflw',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetMessageW',
                                                                                            'PostMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'wcschr',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'swscanf',
                                                                                            'wcsrchr',
                                                                                            '_resetstkoflw',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'CommandLineToArgvW',
                                                                                            'GetProcessHeap',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'HeapFree',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SetEvent',
                                                                                            'SetLastError',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'HeapAlloc',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 66,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 61936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 61952,
                                                                                       '.text\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ab3f84f1a8627f2046e19e064ee900e869280e8e8c049ce60615671d6fa84aec'},
 'ab560f01a77f8591bbd7468cbd046bbc300f020b6e09e13c2df4a58dd7603cf9': {'AddressOfEntryPoint': 357836,
                                                                      'DebugRVA': 743040,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 741376,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptVerifySignatureW',
                                                                                      'GDI32.dll': 'TranslateCharsetInfo',
                                                                                      'KERNEL32.dll': 'EncodePointer',
                                                                                      'OLEAUT32.dll': 'SystemTimeToVariantTime',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'USER32.dll': 'LoadIconW',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['LoadLibraryW',
                                                                                            'lstrcmpW',
                                                                                            'lstrcmpiW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'VerLanguageNameW',
                                                                                            'CompareFileTime',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'MoveFileW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemInfo',
                                                                                            'MulDiv',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVersion',
                                                                                            'GetLocalTime',
                                                                                            'IsValidLocale',
                                                                                            'GetCommandLineW',
                                                                                            'GetFileAttributesW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'VirtualQuery',
                                                                                            'lstrcpyA',
                                                                                            'IsBadReadPtr',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentThread',
                                                                                            'GetLocaleInfoW',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryExA',
                                                                                            'DecodePointer',
                                                                                            'LCMapStringW',
                                                                                            'RtlUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'MoveFileExW',
                                                                                            'WriteProcessMemory',
                                                                                            'VirtualProtectEx',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'SetThreadContext',
                                                                                            'GetThreadContext',
                                                                                            'CreateProcessW',
                                                                                            'ResumeThread',
                                                                                            'TerminateProcess',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'DuplicateHandle',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynA',
                                                                                            'LocalAlloc',
                                                                                            'lstrcmpA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FindResourceExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetFileTime',
                                                                                            'GetFileTime',
                                                                                            'OpenProcess',
                                                                                            'GetProcessTimes',
                                                                                            'ReadConsoleW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FatalAppExitA',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'OutputDebugStringW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'CreateSemaphoreW',
                                                                                            'GetStartupInfoW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'lstrcatW',
                                                                                            'GetVersionExW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'CreateEventW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetTempFileNameW',
                                                                                            'CopyFileW',
                                                                                            'GetTickCount',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'FindResourceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'lstrcpyW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'SetErrorMode',
                                                                                            'GetTempPathW',
                                                                                            'FlushInstructionCache',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrcpynW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CloseHandle',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStringTypeW',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapSize',
                                                                                            'AreFileApisANSI',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetStdHandle',
                                                                                            'EncodePointer',
                                                                                            'CreateWindowExW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'PostMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetSysColorBrush',
                                                                                            'CharPrevW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'wvsprintfW',
                                                                                            'LoadImageW',
                                                                                            'CreateDialogParamW',
                                                                                            'MoveWindow',
                                                                                            'SetCursor',
                                                                                            'GetWindow',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'EnableWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'SetDlgItemTextW',
                                                                                            'IsDialogMessageW',
                                                                                            'FindWindowW',
                                                                                            'SubtractRect',
                                                                                            'IntersectRect',
                                                                                            'SetRect',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'GetWindowRect',
                                                                                            'GetDC',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDlgCtrlID',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'SendMessageW',
                                                                                            'MessageBoxW',
                                                                                            'CharNextW',
                                                                                            'WaitForInputIdle',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetClientRect',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'ReleaseDC',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperW',
                                                                                            'GetWindowDC',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowTextW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'ShowWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfW',
                                                                                            'LoadIconW',
                                                                                            'UnrealizeObject',
                                                                                            'CreateHalftonePalette',
                                                                                            'GetDIBColorTable',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'CreatePalette',
                                                                                            'CreateFontW',
                                                                                            'GetObjectW',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetStretchBltMode',
                                                                                            'StretchBlt',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'BitBlt',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'TranslateCharsetInfo',
                                                                                            'CryptCreateHash',
                                                                                            'CryptSignHashW',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateWellKnownSid',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegOverridePredefKey',
                                                                                            'RegCreateKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDeriveKey',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptExportKey',
                                                                                            'CryptImportKey',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptVerifySignatureW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CreateItemMoniker',
                                                                                            'GetRunningObjectTable',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitialize',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SetErrorInfo',
                                                                                            'LoadTypeLib',
                                                                                            'CreateErrorInfo',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VarBstrCat',
                                                                                            'VarBstrFromDate',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'GetErrorInfo',
                                                                                            'VarUI4FromStr',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'UuidToStringW',
                                                                                            'UuidFromStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 343,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 400104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10240,
                                                                                       '.rdata\x00\x00': 222208,
                                                                                       '.rsrc\x00\x00\x00': 400384,
                                                                                       '.text\x00\x00\x00': 733696},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ab560f01a77f8591bbd7468cbd046bbc300f020b6e09e13c2df4a58dd7603cf9'},
 'ab5e21c17a4ea0d66f826657ed714c2db0880a0a19ade61abb92dacc3acfbc28': {'AddressOfEntryPoint': 8464,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'IsTextUnicode',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': '_initterm',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'ulib.dll': '?Initialize@WSTRING@@QAEEPBDK@Z'},
                                                                      'ImportedFunctions': ['IsTextUnicode',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_XcptFilter',
                                                                                            '_initterm',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@LONG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0LONG_ARGUMENT@@QAE@XZ',
                                                                                            '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z',
                                                                                            '?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '?WriteByte@STREAM@@QAEEE@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '??0PROGRAM@@IAE@XZ',
                                                                                            '?ValidateVersion@PROGRAM@@UBEXKK@Z',
                                                                                            '?Usage@PROGRAM@@UBEXXZ',
                                                                                            '?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '??0CLASS_DESCRIPTOR@@QAE@XZ',
                                                                                            '?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?Fatal@PROGRAM@@UBEXXZ',
                                                                                            '?Fatal@PROGRAM@@UBAXKKPADZZ',
                                                                                            '?Initialize@PATH@@QAEEPBGE@Z',
                                                                                            '?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ',
                                                                                            '??1PROGRAM@@UAE@XZ',
                                                                                            '?Initialize@MULTIPLE_PATH_ARGUMENT@@QAEEPADEE@Z',
                                                                                            '??1MULTIPLE_PATH_ARGUMENT@@UAE@XZ',
                                                                                            '??0MULTIPLE_PATH_ARGUMENT@@QAE@XZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?Initialize@PRINT_STREAM@@QAEEPBVPATH@@@Z',
                                                                                            '??1PRINT_STREAM@@UAE@XZ',
                                                                                            '??0PRINT_STREAM@@QAE@XZ',
                                                                                            '?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z',
                                                                                            '??1STREAM_MESSAGE@@UAE@XZ',
                                                                                            '??0STREAM_MESSAGE@@QAE@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?Display@MESSAGE@@QAAEPBDZZ',
                                                                                            '?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '?Initialize@CLASS_DESCRIPTOR@@QAEEXZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 87,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2000,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ab5e21c17a4ea0d66f826657ed714c2db0880a0a19ade61abb92dacc3acfbc28'},
 'ab96a75ee3116059dcc7a35b96c5c0dce73083b1729d9341bee17485ecb048d7': {'AddressOfEntryPoint': 36552,
                                                                      'DebugRVA': 42448,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCR90.dll': '__winitenv',
                                                                                      'WS2_32.dll': 'ntohl',
                                                                                      'glib-2.0.dll': 'g_log',
                                                                                      'vmGuestLib.DLL': 'VMGuestLib_UpdateInfo',
                                                                                      'vmtools.dll': 'Backdoor'},
                                                                      'ImportedFunctions': ['RegEnumValueA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'GetLastError',
                                                                                            'SetPriorityClass',
                                                                                            'GetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'WSASetLastError',
                                                                                            'ntohs',
                                                                                            'getservbyport',
                                                                                            'gethostbyaddr',
                                                                                            'htons',
                                                                                            'getservbyname',
                                                                                            'htonl',
                                                                                            'inet_ntoa',
                                                                                            'gethostbyname',
                                                                                            'WSAGetLastError',
                                                                                            'inet_addr',
                                                                                            'ntohl',
                                                                                            'VMGuestLib_GetErrorText',
                                                                                            'VMGuestLib_OpenHandle',
                                                                                            'VMGuestLib_CloseHandle',
                                                                                            'VMGuestLib_GetSessionId',
                                                                                            'VMGuestLib_GetMemBalloonedMB',
                                                                                            'VMGuestLib_GetMemReservationMB',
                                                                                            'VMGuestLib_GetMemSwappedMB',
                                                                                            'VMGuestLib_GetMemLimitMB',
                                                                                            'VMGuestLib_GetCpuReservationMHz',
                                                                                            'VMGuestLib_GetCpuLimitMHz',
                                                                                            'VMGuestLib_StatFree',
                                                                                            'VMGuestLib_StatGet',
                                                                                            'VMGuestLib_UpdateInfo',
                                                                                            '_strdup',
                                                                                            '__crt_debugger_hook',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            'setlocale',
                                                                                            '_localtime64',
                                                                                            'strftime',
                                                                                            'free',
                                                                                            'fflush',
                                                                                            '__iob_func',
                                                                                            'putchar',
                                                                                            'strcpy_s',
                                                                                            'calloc',
                                                                                            'strncpy_s',
                                                                                            'memset',
                                                                                            'strtoul',
                                                                                            'strchr',
                                                                                            'sprintf_s',
                                                                                            'strcat_s',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            '_stricmp',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            'g_free',
                                                                                            'g_print',
                                                                                            'g_vasprintf',
                                                                                            'g_printerr',
                                                                                            'g_key_file_free',
                                                                                            'g_clear_error',
                                                                                            'g_key_file_set_string',
                                                                                            'g_key_file_new',
                                                                                            'g_key_file_get_string',
                                                                                            'g_key_file_remove_key',
                                                                                            'g_strdup_printf',
                                                                                            'g_locale_to_utf8',
                                                                                            'g_path_is_absolute',
                                                                                            'g_strdup',
                                                                                            'g_strfreev',
                                                                                            'g_strsplit_set',
                                                                                            'g_strchomp',
                                                                                            'g_strchug',
                                                                                            'g_log',
                                                                                            'DynXdr_Destroy',
                                                                                            'vm_free',
                                                                                            'DynXdr_Get',
                                                                                            'DynXdr_AppendRaw',
                                                                                            'DynXdr_Create',
                                                                                            'StrUtil_StrToUint',
                                                                                            'VMTools_WriteConfig',
                                                                                            'WiperPartition_Open',
                                                                                            'Panic',
                                                                                            'WiperPartition_Close',
                                                                                            'Wiper_IsWipeSupported',
                                                                                            'Wiper_Next',
                                                                                            'Wiper_Start',
                                                                                            'WiperSinglePartition_Close',
                                                                                            'GuestApp_GetInstallPath',
                                                                                            'GuestApp_GetDefaultScript',
                                                                                            'File_Exists',
                                                                                            'Str_Sprintf',
                                                                                            'Warning',
                                                                                            'Err_Errno2String',
                                                                                            'Str_Strcpy',
                                                                                            'Debug',
                                                                                            'UtilSafeCalloc0',
                                                                                            'Hostinfo_GetOSType',
                                                                                            'UtilSafeRealloc0',
                                                                                            'UtilSafeMalloc0',
                                                                                            'xdr_free',
                                                                                            'UtilSafeStrdup0',
                                                                                            'XdrUtil_ArrayAppend',
                                                                                            'Unicode_AllocWithLength',
                                                                                            'Win32U_GetComputerNameEx',
                                                                                            'Str_Snprintf',
                                                                                            'Registry_ReadMultiString',
                                                                                            'Registry_ReadString',
                                                                                            'xdr_u_int32_t',
                                                                                            'xdr_char',
                                                                                            'xdr_enum',
                                                                                            'xdr_vector',
                                                                                            'xdr_array',
                                                                                            'xdr_bytes',
                                                                                            'xdr_u_int',
                                                                                            'xdr_pointer',
                                                                                            'xdr_string',
                                                                                            'xdr_bool',
                                                                                            'Unicode_InitW',
                                                                                            'VMTools_LoadConfig',
                                                                                            'VMTools_ConfigLogging',
                                                                                            'VMTools_BindTextDomain',
                                                                                            'VmCheck_IsVirtualWorld',
                                                                                            'getopt_long',
                                                                                            'System_IsUserAdmin',
                                                                                            'optind',
                                                                                            'RpcChannel_New',
                                                                                            'RpcChannel_Start',
                                                                                            'RpcChannel_Send',
                                                                                            'RpcChannel_Destroy',
                                                                                            'VMTools_GetString',
                                                                                            'Backdoor'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 172,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1684,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 23552,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 34816},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ab96a75ee3116059dcc7a35b96c5c0dce73083b1729d9341bee17485ecb048d7'},
 'abcb6e3abec368b658ed100b7e112c3571ef6ee9044c5723ac6ebfca265229d9': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 25988,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12600,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/clean/abcb6e3abec368b658ed100b7e112c3571ef6ee9044c5723ac6ebfca265229d9'},
 'ac12debc2bea2651a322f7ad1f7f2deed652ee992bd4b7f22a7096b2d85b7868': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 42248,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 42496,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ac12debc2bea2651a322f7ad1f7f2deed652ee992bd4b7f22a7096b2d85b7868'},
 'ac173e71ffd0cb0b6e1a25c67d35098291b0abe6037843497796f3e0312b59f3': {'AddressOfEntryPoint': 6472,
                                                                      'DebugRVA': 4128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'DebugBreak',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CloseHandle',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetStockObject',
                                                                                            'KillTimer',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'SetTimer',
                                                                                            'DefWindowProcW',
                                                                                            'UpdateWindow',
                                                                                            'RegisterClassW',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'LoadCursorW',
                                                                                            'ShowWindow',
                                                                                            'LoadStringW',
                                                                                            'LoadIconW',
                                                                                            'TranslateMessage',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_exit',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            '_waccess',
                                                                                            'wcsrchr',
                                                                                            'swprintf_s',
                                                                                            '_initterm',
                                                                                            '_XcptFilter',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 58,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 13960,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ac173e71ffd0cb0b6e1a25c67d35098291b0abe6037843497796f3e0312b59f3'},
 'ad1911fa84b13decf301c78fb1561c635bcadb1e8fc76150814b62c3c0c9d979': {'AddressOfEntryPoint': 409406,
                                                                      'DebugRVA': 1198160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1196032,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyA',
                                                                                      'CRYPT32.dll': 'CryptStringToBinaryA',
                                                                                      'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'MSVCP100.dll': '?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                      'MSVCR100.dll': '_stat64i32',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'RPCRT4.dll': 'UuidToStringA',
                                                                                      'USER32.dll': 'GetProcessWindowStation',
                                                                                      'WS2_32.dll': '__WSAFDIsSet',
                                                                                      'libfcgi.dll': 'OS_LibShutdown',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['FCGX_GetStr',
                                                                                            'FCGX_OpenSocket',
                                                                                            'FCGX_Init',
                                                                                            'FCGX_InitRequest',
                                                                                            'FCGX_GetParam',
                                                                                            'FCGX_PutStr',
                                                                                            'FCGX_FPrintF',
                                                                                            'FCGX_Finish_r',
                                                                                            'FCGX_Accept_r',
                                                                                            'OS_LibShutdown',
                                                                                            'EnumProcessModules',
                                                                                            'GetModuleHandleA',
                                                                                            'GetFileAttributesW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcessTimes',
                                                                                            'GetSystemTimes',
                                                                                            'SwitchToFiber',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'SetPriorityClass',
                                                                                            'CreateEventA',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount64',
                                                                                            'CreateThread',
                                                                                            'LocalAlloc',
                                                                                            'lstrlenA',
                                                                                            'FormatMessageA',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'InterlockedIncrement',
                                                                                            'FindResourceExW',
                                                                                            'LocalFree',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExA',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'TerminateThread',
                                                                                            'ResumeThread',
                                                                                            'ResetEvent',
                                                                                            'InterlockedDecrement',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetVersion',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'SetLastError',
                                                                                            'SystemTimeToFileTime',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'MultiByteToWideChar',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'InterlockedExchange',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'GetSystemTime',
                                                                                            'HeapAlloc',
                                                                                            'FindResourceW',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ExitWindowsEx',
                                                                                            'GetSystemMetrics',
                                                                                            'RegisterClassA',
                                                                                            'GetWindowLongA',
                                                                                            'PostMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcA',
                                                                                            'GetUserObjectInformationW',
                                                                                            'MessageBoxA',
                                                                                            'GetProcessWindowStation',
                                                                                            'StartServiceW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'CreateServiceA',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'RegisterEventSourceA',
                                                                                            'ReportEventA',
                                                                                            'DeregisterEventSource',
                                                                                            'SetServiceStatus',
                                                                                            'OpenProcessToken',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceA',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatusEx',
                                                                                            'ControlService',
                                                                                            'RegOpenKeyA',
                                                                                            'CoUninitialize',
                                                                                            'OleRun',
                                                                                            'CoCreateGuid',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'SysFreeString',
                                                                                            'GetErrorInfo',
                                                                                            'VariantClear',
                                                                                            'VarDateFromStr',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ',
                                                                                            '?always_noconv@codecvt_base@std@@QBE_NXZ',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?_Id_cnt@id@locale@std@@0HA',
                                                                                            '?id@?$ctype@_W@std@@2V0locale@2@A',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?id@?$codecvt@_WDH@std@@2V0locale@2@A',
                                                                                            '??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ',
                                                                                            '?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ',
                                                                                            '?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ',
                                                                                            '?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ',
                                                                                            '?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?widen@?$ctype@_W@std@@QBE_WD@Z',
                                                                                            '?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z',
                                                                                            '?getloc@ios_base@std@@QBE?AVlocale@2@XZ',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z',
                                                                                            '?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z',
                                                                                            '?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z',
                                                                                            '?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z',
                                                                                            '?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z',
                                                                                            '??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??1ios_base@std@@UAE@XZ',
                                                                                            '??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z',
                                                                                            '??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@',
                                                                                            '??_7ios_base@std@@6B@',
                                                                                            '??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@',
                                                                                            '?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z',
                                                                                            '?_Orphan_all@_Container_base0@std@@QAEXXZ',
                                                                                            '?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z',
                                                                                            '?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '??Bid@locale@std@@QAEIXZ',
                                                                                            '?id@?$codecvt@DDH@std@@2V0locale@2@A',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z',
                                                                                            '?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z',
                                                                                            '?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ',
                                                                                            '??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z',
                                                                                            '?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z',
                                                                                            '?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z',
                                                                                            '?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z',
                                                                                            '??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z',
                                                                                            '?fail@ios_base@std@@QBE_NXZ',
                                                                                            '?_Init@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z',
                                                                                            '?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z',
                                                                                            '?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z',
                                                                                            '??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z',
                                                                                            '?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z',
                                                                                            '?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '??Bios_base@std@@QBEPAXXZ',
                                                                                            '?_Xfunc@tr1@std@@YAXXZ',
                                                                                            '?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z',
                                                                                            '?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ',
                                                                                            '?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z',
                                                                                            '?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ',
                                                                                            '?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z',
                                                                                            '?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z',
                                                                                            '?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z',
                                                                                            '?id@?$ctype@D@std@@2V0locale@2@A',
                                                                                            '?tolower@?$ctype@D@std@@QBEDD@Z',
                                                                                            '?classic@locale@std@@SAABV12@XZ',
                                                                                            '?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z',
                                                                                            '?exceptions@ios_base@std@@QAEXH@Z',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z',
                                                                                            '?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z',
                                                                                            '?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            'CryptStringToBinaryA',
                                                                                            'getenv',
                                                                                            'strncpy',
                                                                                            'qsort',
                                                                                            'raise',
                                                                                            '__iob_func',
                                                                                            'strncmp',
                                                                                            '_stricmp',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            'sscanf',
                                                                                            'realloc',
                                                                                            'strtoul',
                                                                                            'isxdigit',
                                                                                            'strcmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_CxxThrowException',
                                                                                            'strnlen',
                                                                                            'memcpy_s',
                                                                                            'memset',
                                                                                            '_mbsnbcmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_localtime64_s',
                                                                                            '_mktime64',
                                                                                            '_time64',
                                                                                            'memmove_s',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_wsplitpath_s',
                                                                                            '_vscprintf',
                                                                                            'vsprintf_s',
                                                                                            '_vscwprintf',
                                                                                            'vswprintf_s',
                                                                                            'wcsnlen',
                                                                                            'malloc',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_findclose',
                                                                                            '_wfindnext64i32',
                                                                                            '_wfindfirst64i32',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            'memcpy',
                                                                                            '_purecall',
                                                                                            '??0bad_cast@std@@QAE@PBD@Z',
                                                                                            '??1bad_cast@std@@UAE@XZ',
                                                                                            '??0bad_cast@std@@QAE@ABV01@@Z',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            'memmove',
                                                                                            'fgetwc',
                                                                                            'fputwc',
                                                                                            'ungetwc',
                                                                                            '_lock_file',
                                                                                            '_unlock_file',
                                                                                            'fflush',
                                                                                            'setvbuf',
                                                                                            'ungetc',
                                                                                            'fgetc',
                                                                                            'fwrite',
                                                                                            'fgetpos',
                                                                                            '_fseeki64',
                                                                                            'fsetpos',
                                                                                            'fclose',
                                                                                            '_beginthreadex',
                                                                                            'sprintf_s',
                                                                                            'free',
                                                                                            'fputc',
                                                                                            'memchr',
                                                                                            '??0exception@std@@QAE@XZ',
                                                                                            '_mbscmp',
                                                                                            'strtol',
                                                                                            '_wcsicmp',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            '_wrename',
                                                                                            '_mbslwr_s',
                                                                                            'wcsstr',
                                                                                            'wcschr',
                                                                                            '_mbsinc',
                                                                                            '_mbsicmp',
                                                                                            '_mbsstr',
                                                                                            '_mbschr',
                                                                                            '__RTDynamicCast',
                                                                                            '_errno',
                                                                                            'atoi',
                                                                                            'sscanf_s',
                                                                                            '??8type_info@@QBE_NABV0@@Z',
                                                                                            'mbstowcs_s',
                                                                                            '_get_errno',
                                                                                            '_vsnprintf',
                                                                                            'strcpy_s',
                                                                                            'printf',
                                                                                            'wprintf',
                                                                                            '_mbsncmp',
                                                                                            '_ismbcspace',
                                                                                            '_mbsrchr',
                                                                                            '_mbspbrk',
                                                                                            'fread',
                                                                                            'ftell',
                                                                                            'fseek',
                                                                                            'isupper',
                                                                                            'iswprint',
                                                                                            'isdigit',
                                                                                            'isspace',
                                                                                            'tolower',
                                                                                            '_CIpow',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_gmtime64',
                                                                                            '_wfopen',
                                                                                            'fopen',
                                                                                            'ferror',
                                                                                            '_setmode',
                                                                                            '_fileno',
                                                                                            'feof',
                                                                                            'fgets',
                                                                                            'sprintf',
                                                                                            'strstr',
                                                                                            'fprintf',
                                                                                            'fputs',
                                                                                            'signal',
                                                                                            '_getch',
                                                                                            'abort',
                                                                                            '_stat64i32',
                                                                                            'UuidCreate',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidFromStringA',
                                                                                            'UuidToStringA',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'connect',
                                                                                            'setsockopt',
                                                                                            'WSASetLastError',
                                                                                            'send',
                                                                                            'WSAGetLastError',
                                                                                            'shutdown',
                                                                                            'closesocket',
                                                                                            'select',
                                                                                            'recv',
                                                                                            'gethostbyname',
                                                                                            'gethostname',
                                                                                            '__WSAFDIsSet'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 443,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 64512,
                                                                                       '.rdata\x00\x00': 382976,
                                                                                       '.reloc\x00\x00': 141312,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 1190400,
                                                                                       '.tls\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ad1911fa84b13decf301c78fb1561c635bcadb1e8fc76150814b62c3c0c9d979'},
 'ad65408a22b4d8080e6acedda2ed2f45224849d57faba767dede626b102fd70c': {'AddressOfEntryPoint': 13238,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'MoveFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareFileTime',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'lstrcpyW',
                                                                                            'MoveFileExW',
                                                                                            'lstrcatW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetShortPathNameW',
                                                                                            'SearchPathW',
                                                                                            'lstrcmpiW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrcmpW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableMenuItem',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapW',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'wsprintfW',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharPrevW',
                                                                                            'CharNextA',
                                                                                            'wsprintfA',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EndDialog',
                                                                                            'RegisterClassW',
                                                                                            'SystemParametersInfoW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'CharNextW',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'LoadImageW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowExW',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetForegroundWindow',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 38288,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 38400,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ad65408a22b4d8080e6acedda2ed2f45224849d57faba767dede626b102fd70c'},
 'ad6e5a41a6f3ace6fa0128b0c8e77c473fca5aa9e2daaf55cf956ad22e63f45c': {'AddressOfEntryPoint': 17280,
                                                                      'DebugRVA': 87672,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 87616,
                                                                      'ExportSize': 56,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'GetPrivateProfileIntA',
                                                                                      'OLEAUT32.dll': 'SetErrorInfo',
                                                                                      'USER32.dll': 'PeekMessageA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'msvcrt.dll': '??2@YAPAXI@Z',
                                                                                      'ole32.dll': 'CoGetClassObject'},
                                                                      'ImportedFunctions': ['GetSystemDefaultUILanguage',
                                                                                            'SearchPathW',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateFileW',
                                                                                            'UnmapViewOfFile',
                                                                                            'FindResourceExW',
                                                                                            'GetFileSize',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVersionExW',
                                                                                            'SetLastError',
                                                                                            'CreateFileMappingW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetModuleHandleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'ExitProcess',
                                                                                            'GetLastError',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'WideCharToMultiByte',
                                                                                            'MapViewOfFile',
                                                                                            'WriteFile',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'FormatMessageA',
                                                                                            'FormatMessageW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetACP',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'GetCPInfo',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'CreateFileA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LoadLibraryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryExA',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetPrivateProfileIntA',
                                                                                            '_except_handler4_common',
                                                                                            'wcscat_s',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcsncmp',
                                                                                            '_ftol2',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'strcpy_s',
                                                                                            'wcsrchr',
                                                                                            '_itow',
                                                                                            '_swab',
                                                                                            'memmove',
                                                                                            '_vsnprintf',
                                                                                            'sprintf_s',
                                                                                            'swprintf_s',
                                                                                            'wcscpy_s',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'bsearch',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayGetLBound',
                                                                                            'LoadRegTypeLib',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayCreate',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayGetElement',
                                                                                            'VariantChangeType',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantInit',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'CreateErrorInfo',
                                                                                            'SysAllocString',
                                                                                            'SetErrorInfo',
                                                                                            'CoUninitialize',
                                                                                            'CLSIDFromProgID',
                                                                                            'MkParseDisplayName',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'CoInitializeSecurity',
                                                                                            'CreateFileMoniker',
                                                                                            'CreateBindCtx',
                                                                                            'CoInitialize',
                                                                                            'CoGetClassObject',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'IsTextUnicode',
                                                                                            'ReportEventW',
                                                                                            'LookupAccountNameW',
                                                                                            'DeregisterEventSource',
                                                                                            'GetUserNameW',
                                                                                            'RegisterEventSourceW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'GetClassNameA',
                                                                                            'GetMessageA',
                                                                                            'GetActiveWindow',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'CharNextA',
                                                                                            'LoadStringA',
                                                                                            'LoadStringW',
                                                                                            'DefWindowProcA',
                                                                                            'GetClassInfoA',
                                                                                            'PostMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'IsWindowVisible',
                                                                                            'RegisterClassA',
                                                                                            'KillTimer',
                                                                                            'EnumThreadWindows',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetParent',
                                                                                            'SendMessageA',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'CreateWindowExA',
                                                                                            'PeekMessageA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 181,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 33368,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 33792,
                                                                                       '.text\x00\x00\x00': 83968},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ad6e5a41a6f3ace6fa0128b0c8e77c473fca5aa9e2daaf55cf956ad22e63f45c'},
 'adf30bc2e756b42bff841159d28dc72ccc98ddc1c04fbbb3fc44110cfdae5abf': {'AddressOfEntryPoint': 11360,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LoadLibraryExW',
                                                                                      'USER32.dll': 'DefWindowProcW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventW',
                                                                                            'OpenProcess',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'GetVersionExW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapCreate',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetHandleCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapFree',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'RtlUnwindEx',
                                                                                            'OutputDebugStringA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExW',
                                                                                            'DispatchMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'PostMessageW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetWindowTextW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'FindWindowW',
                                                                                            'DefWindowProcW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/adf30bc2e756b42bff841159d28dc72ccc98ddc1c04fbbb3fc44110cfdae5abf'},
 'ae2cbe9a574d919bd18d4a335ab0119fa509e2b69af8dd3681c67c7584d16e53': {'AddressOfEntryPoint': 59078,
                                                                      'DebugRVA': 62336,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'KERNEL32.dll': 'VerSetConditionMask',
                                                                                      'MSVCR120.dll': '_commode',
                                                                                      'WSOCK32.dll': 'WSAGetLastError',
                                                                                      'libglib-2.0-0.dll': 'g_thread_exit',
                                                                                      'libgmodule-2.0-0.dll': 'g_module_close',
                                                                                      'libwsutil.dll': 'ieee80211_chan_to_mhz'},
                                                                      'ImportedFunctions': ['WaitNamedPipeW',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'PeekNamedPipe',
                                                                                            'FormatMessageW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'DecodePointer',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'EncodePointer',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'WideCharToMultiByte',
                                                                                            'VerifyVersionInfoW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'VerSetConditionMask',
                                                                                            'optind',
                                                                                            'optarg',
                                                                                            'ws_inet_ntop6',
                                                                                            'ws_inet_pton4',
                                                                                            'ws_inet_ntop4',
                                                                                            'create_app_running_mutex',
                                                                                            'ws_init_dll_search_path',
                                                                                            'create_tempfile',
                                                                                            'relinquish_special_privs_perm',
                                                                                            'init_process_policies',
                                                                                            'arg_list_utf_16to8',
                                                                                            'utf_16to8',
                                                                                            'utf_8to16',
                                                                                            'getopt_long',
                                                                                            'ws_add_crash_info',
                                                                                            'cmdarg_err_cont',
                                                                                            'cmdarg_err_init',
                                                                                            'get_os_version_info',
                                                                                            'get_copyright_info',
                                                                                            'ws_stdio_open',
                                                                                            'get_persconffile_path',
                                                                                            'get_datafile_path',
                                                                                            'ws_stdio_fopen',
                                                                                            'ws_stdio_remove',
                                                                                            'ws_stdio_unlink',
                                                                                            'ws_stdio_rename',
                                                                                            'ws_stdio_stat64',
                                                                                            'cmdarg_err',
                                                                                            'get_positive_int',
                                                                                            'get_natural_int',
                                                                                            'ws_module_open',
                                                                                            'ws_load_library',
                                                                                            'ieee80211_mhz_to_chan',
                                                                                            'ieee80211_chan_to_mhz',
                                                                                            'g_async_queue_timeout_pop_unlocked',
                                                                                            'g_path_get_basename',
                                                                                            'g_slist_nth',
                                                                                            'g_string_free',
                                                                                            'g_string_truncate',
                                                                                            'g_log_set_handler',
                                                                                            'g_strerror',
                                                                                            'g_strdup_vprintf',
                                                                                            'g_strsplit_set',
                                                                                            'g_list_prepend',
                                                                                            'g_async_queue_timeout_pop',
                                                                                            'g_strlcpy',
                                                                                            'g_array_free',
                                                                                            'g_file_test_utf8',
                                                                                            'g_malloc0',
                                                                                            'g_str_has_prefix',
                                                                                            'g_strrstr',
                                                                                            'g_mutex_trylock',
                                                                                            'g_mutex_lock',
                                                                                            'g_mutex_init',
                                                                                            'g_async_queue_try_pop_unlocked',
                                                                                            'g_async_queue_pop',
                                                                                            'g_async_queue_push_unlocked',
                                                                                            'g_async_queue_push',
                                                                                            'g_async_queue_unlock',
                                                                                            'g_async_queue_lock',
                                                                                            'g_async_queue_new',
                                                                                            'g_slist_append',
                                                                                            'g_mutex_unlock',
                                                                                            'g_thread_join',
                                                                                            'g_thread_new',
                                                                                            'g_array_insert_vals',
                                                                                            'g_strfreev',
                                                                                            'g_strjoinv',
                                                                                            'g_strsplit',
                                                                                            'g_string_append_printf',
                                                                                            'g_string_append',
                                                                                            'g_string_new',
                                                                                            'g_strconcat',
                                                                                            'g_snprintf',
                                                                                            'g_strdup_printf',
                                                                                            'g_list_length',
                                                                                            'g_list_last',
                                                                                            'g_list_remove_link',
                                                                                            'g_list_append',
                                                                                            'g_realloc',
                                                                                            'g_str_hash',
                                                                                            'g_str_equal',
                                                                                            'g_hash_table_foreach',
                                                                                            'g_hash_table_lookup',
                                                                                            'g_hash_table_remove',
                                                                                            'g_hash_table_insert',
                                                                                            'g_hash_table_new',
                                                                                            'g_malloc',
                                                                                            'g_ascii_table',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_strdup',
                                                                                            'g_ascii_strncasecmp',
                                                                                            'g_ascii_strcasecmp',
                                                                                            'g_spawn_close_pid',
                                                                                            'g_log',
                                                                                            'g_slist_foreach',
                                                                                            'g_slist_free',
                                                                                            'g_hash_table_unref',
                                                                                            'g_hash_table_ref',
                                                                                            'g_list_nth_data',
                                                                                            'g_list_foreach',
                                                                                            'g_list_first',
                                                                                            'g_list_free',
                                                                                            'g_free',
                                                                                            'g_array_remove_index',
                                                                                            'g_array_append_vals',
                                                                                            'g_array_new',
                                                                                            'g_thread_exit',
                                                                                            'g_module_symbol',
                                                                                            'g_module_close',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'socket',
                                                                                            'select',
                                                                                            'recv',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            'sscanf',
                                                                                            'fwrite',
                                                                                            'memcpy',
                                                                                            '_setmode',
                                                                                            'strstr',
                                                                                            'strncmp',
                                                                                            'strtoul',
                                                                                            'atoi',
                                                                                            'exit',
                                                                                            'vfprintf',
                                                                                            'fflush',
                                                                                            '__iob_func',
                                                                                            'memset',
                                                                                            'setlocale',
                                                                                            '_write',
                                                                                            '_close',
                                                                                            '_localtime64',
                                                                                            '_tzset',
                                                                                            'strftime',
                                                                                            'strrchr',
                                                                                            '_fdopen',
                                                                                            'ungetc',
                                                                                            'putc',
                                                                                            'getc',
                                                                                            'fprintf',
                                                                                            'ferror',
                                                                                            'fclose',
                                                                                            '_time64',
                                                                                            'strchr',
                                                                                            'strtol',
                                                                                            '_errno',
                                                                                            '_initterm',
                                                                                            'printf',
                                                                                            '__initenv',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegQueryValueExW',
                                                                                            'CloseServiceHandle'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 209,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 290912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 26624,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 291328,
                                                                                       '.text\x00\x00\x00': 56832},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ae2cbe9a574d919bd18d4a335ab0119fa509e2b69af8dd3681c67c7584d16e53'},
 'ae2d8b0a9b26652de141f01f22f39b35dc97c9e0b6c08130ddd82a8a0a96738d': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 9736,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ae2d8b0a9b26652de141f01f22f39b35dc97c9e0b6c08130ddd82a8a0a96738d'},
 'ae8b7135284c9f111b34bf7ef631350b98f35298adafd7269bd364f63bb74b2e': {'AddressOfEntryPoint': 267102,
                                                                      'DebugRVA': 266860,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 17440,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 17920,
                                                                                       '.text\x00\x00\x00': 259072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ae8b7135284c9f111b34bf7ef631350b98f35298adafd7269bd364f63bb74b2e'},
 'ae93b015de5835809704350581fcdf568914e20349a1584cee87cfb49b63813f': {'AddressOfEntryPoint': 6273,
                                                                      'DebugRVA': 37184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'HeapSize',
                                                                                      'USER32.dll': 'UnhookWindowsHookEx'},
                                                                      'ImportedFunctions': ['SetWindowsHookExW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetStdHandle',
                                                                                            'RtlUnwind',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetModuleHandleW',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'InterlockedDecrement',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'Sleep',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RaiseException',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'HeapSize'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 63,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 10240,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ae93b015de5835809704350581fcdf568914e20349a1584cee87cfb49b63813f'},
 'aea3d46a8c61945550368341bd122adf88a3b8116a6911844583324888220745': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 190568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 190976,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/aea3d46a8c61945550368341bd122adf88a3b8116a6911844583324888220745'},
 'aeb641f87a15958fb28d62bd50872b5b6801f901cdab70353a381016ead714a9': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 114032,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 114176,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/aeb641f87a15958fb28d62bd50872b5b6801f901cdab70353a381016ead714a9'},
 'aed4b8e81e615a54a9491fdce19e3e3b4ecaefd6acd3b4a53f79858460dd0851': {'AddressOfEntryPoint': 5344,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 33352,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualQuery',
                                                                                      'msvcrt.dll': 'vfprintf',
                                                                                      'x64-msvcrt-ruby220.dll': 'ruby_sysinit'},
                                                                      'ImportedFunctions': ['Sleep',
                                                                                            'ruby_init',
                                                                                            'ruby_init_stack',
                                                                                            'ruby_options',
                                                                                            'ruby_run_node',
                                                                                            'ruby_sysinit',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlAddFunctionTable',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            '__C_specific_handler',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__iob_func',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'vfprintf'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 60,
                                                                      'NumberOfSections': 18,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 16356,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 7680,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.xdata\x00\x00': 512,
                                                                                       '/19\x00\x00\x00\x00\x00': 48128,
                                                                                       '/31\x00\x00\x00\x00\x00': 7168,
                                                                                       '/4\x00\x00\x00\x00\x00\x00': 1536,
                                                                                       '/45\x00\x00\x00\x00\x00': 7680,
                                                                                       '/57\x00\x00\x00\x00\x00': 3072,
                                                                                       '/70\x00\x00\x00\x00\x00': 1024,
                                                                                       '/81\x00\x00\x00\x00\x00': 17408,
                                                                                       '/92\x00\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/aed4b8e81e615a54a9491fdce19e3e3b4ecaefd6acd3b4a53f79858460dd0851'},
 'af7a12602ec998600ed807820608aa716f1a2ae0042440f773ff6ad7b2e62c3e': {'AddressOfEntryPoint': 101120,
                                                                      'DebugRVA': 77376,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 561152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'VirtualFree',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'msvcrt.dll': '_wsopen'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'RtlCaptureContext',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetProcAddress',
                                                                                            'UnmapViewOfFile',
                                                                                            'FlushViewOfFile',
                                                                                            'MapViewOfFileEx',
                                                                                            'SetFilePointer',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateFileMappingW',
                                                                                            'DeviceIoControl',
                                                                                            'WriteFile',
                                                                                            'SetFilePointerEx',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileType',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesA',
                                                                                            'FreeLibrary',
                                                                                            'GetFileSize',
                                                                                            'GetSystemInfo',
                                                                                            'CreateFileA',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'LoadLibraryExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'fclose',
                                                                                            'puts',
                                                                                            'strcpy_s',
                                                                                            'fopen',
                                                                                            'printf',
                                                                                            'fputs',
                                                                                            'calloc',
                                                                                            'free',
                                                                                            '_purecall',
                                                                                            'strcat_s',
                                                                                            'strchr',
                                                                                            'wcsncat_s',
                                                                                            'wcsncpy_s',
                                                                                            'wcsrchr',
                                                                                            '_wcsicmp',
                                                                                            'swprintf_s',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            'time',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'wcscpy_s',
                                                                                            '_wfullpath',
                                                                                            '_wcsdup',
                                                                                            '_chsize_s',
                                                                                            '_close',
                                                                                            '_read',
                                                                                            '_write',
                                                                                            '_lseeki64',
                                                                                            '_get_osfhandle',
                                                                                            '_open_osfhandle',
                                                                                            'memmove',
                                                                                            'strncpy_s',
                                                                                            'strstr',
                                                                                            'wcscat_s',
                                                                                            '_wcsnicmp',
                                                                                            'bsearch',
                                                                                            'qsort',
                                                                                            '_stricmp',
                                                                                            '_snwprintf_s',
                                                                                            'sprintf_s',
                                                                                            '_mbscmp',
                                                                                            '_memicmp',
                                                                                            'wcsncmp',
                                                                                            'strncmp',
                                                                                            '__unDName',
                                                                                            'wcstoul',
                                                                                            'towlower',
                                                                                            '_wsopen',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 118,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 27136,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 543744},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/af7a12602ec998600ed807820608aa716f1a2ae0042440f773ff6ad7b2e62c3e'},
 'afe047a12616834738381aaed5607f2dc6ba3e23b72c593aea3b9afdf5169441': {'AddressOfEntryPoint': 180332,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 278528,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'SHLWAPI.dll': 'PathIsDirectoryW',
                                                                                      'USER32.dll': 'PeekMessageW'},
                                                                      'ImportedFunctions': ['PathIsDirectoryW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetFileSize',
                                                                                            'CloseHandle',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'GetProcAddress',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadResource',
                                                                                            'FindClose',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateProcessW',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FindResourceW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FindNextFileW',
                                                                                            'GetVersionExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetNumberFormatW',
                                                                                            'GetConsoleTitleW',
                                                                                            'GetConsoleWindow',
                                                                                            'GetModuleHandleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'HeapReAlloc',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'IsValidLocale',
                                                                                            'LCMapStringW',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryExW',
                                                                                            'OutputDebugStringW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FindFirstFileW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetFilePointer',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetFileTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReadConsoleW',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'InterlockedDecrement',
                                                                                            'GetCPInfo',
                                                                                            'HeapFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ReadFile',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FindFirstFileExW',
                                                                                            'GetDriveTypeW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'MoveFileExW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'HeapAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'AreFileApisANSI',
                                                                                            'HeapSize',
                                                                                            'Sleep',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedIncrement',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcessHeap',
                                                                                            'LoadStringW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'FindWindowW',
                                                                                            'GetWindowLongW',
                                                                                            'DrawTextW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'GetKeyState',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'DialogBoxParamW',
                                                                                            'ShowWindow',
                                                                                            'RegisterClassExW',
                                                                                            'PostQuitMessage',
                                                                                            'DefWindowProcW',
                                                                                            'SendMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetStockObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 137,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 350116,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10752,
                                                                                       '.rdata\x00\x00': 60928,
                                                                                       '.reloc\x00\x00': 24064,
                                                                                       '.rsrc\x00\x00\x00': 350208,
                                                                                       '.text\x00\x00\x00': 274432},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/afe047a12616834738381aaed5607f2dc6ba3e23b72c593aea3b9afdf5169441'},
 'b052acd6a50bbf19b95297578aea8bfbd1c9282a40519bbd32ae8bf484a867ae': {'AddressOfEntryPoint': 13262,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'FindWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 168,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 34912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 35328,
                                                                                       '.text\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b052acd6a50bbf19b95297578aea8bfbd1c9282a40519bbd32ae8bf484a867ae'},
 'b071a327f1ef63a137ff5a7c5aba0b0fd28818a0e476606d05192deda81d5fe5': {'AddressOfEntryPoint': 97840,
                                                                      'DebugRVA': 46576,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 204800,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyW',
                                                                                      'HTTPAPI.dll': 'HttpInitialize',
                                                                                      'KERNEL32.dll': 'ReadConsoleW',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CloseServiceHandle',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'QueryServiceConfigW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'StartServiceW',
                                                                                            'EnumDependentServicesW',
                                                                                            'ControlService',
                                                                                            'CreateServiceW',
                                                                                            'DeleteService',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetServiceObjectSecurity',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'GetTokenInformation',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemTime',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileW',
                                                                                            'Sleep',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'ConvertDefaultLocale',
                                                                                            'HeapSize',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadLibraryExW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrcmpiA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'WideCharToMultiByte',
                                                                                            'LeaveCriticalSection',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleFileNameA',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'IsWow64Process',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'lstrlenW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'DecodePointer',
                                                                                            'ReadFile',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleCP',
                                                                                            'OutputDebugStringW',
                                                                                            'RtlUnwind',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleHandleW',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'HeapDestroy',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetFullPathNameW',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCommandLineA',
                                                                                            'EncodePointer',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'ReadConsoleW',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'SysStringLen',
                                                                                            'VarUI4FromStr',
                                                                                            'GetErrorInfo',
                                                                                            'VarBstrCmp',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'CharNextA',
                                                                                            'LoadStringW',
                                                                                            'HttpSetServiceConfiguration',
                                                                                            'HttpDeleteServiceConfiguration',
                                                                                            'HttpTerminate',
                                                                                            'HttpQueryServiceConfiguration',
                                                                                            'HttpInitialize',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 163,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1936,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 8704,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 183808},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b071a327f1ef63a137ff5a7c5aba0b0fd28818a0e476606d05192deda81d5fe5'},
 'b0863d305a74c6c74657cc57b3f1c21a829d7a6183a9f38fdc5bfed9cf320e10': {'AddressOfEntryPoint': 25280,
                                                                      'DebugRVA': 4672,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'RpcStringBindingComposeW',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'IsDebuggerPresent',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapDestroy',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetThreadPriority',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegGetValueW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlVirtualUnwind',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeSRWLock',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'CreateTimerQueueTimer',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceEnableLevel',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetSecurityDescriptorDacl',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'DbgPrintEx'},
                                                                      'ImportedFunctions': ['_purecall',
                                                                                            'calloc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_XcptFilter',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            'malloc',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'free',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            'wcsstr',
                                                                                            '_fmode',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            'exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '__set_app_type',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'TraceMessage',
                                                                                            'GetTraceEnableLevel',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapDestroy',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'WaitForSingleObject',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'InitializeSRWLock',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'CreateThread',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'SetThreadPriority',
                                                                                            'GetExitCodeThread',
                                                                                            'GetThreadPriority',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadStringW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'Ndr64AsyncClientCall',
                                                                                            'NdrClientCall3',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcAsyncCancelCall',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'CoCreateInstance',
                                                                                            'CoCancelCall',
                                                                                            'CoEnableCallCancellation',
                                                                                            'CoDisableCallCancellation',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'GetAclInformation',
                                                                                            'AddAce',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeAcl',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'IsValidSid',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'GetSidSubAuthority',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'MakeAbsoluteSD',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'CloseHandle',
                                                                                            'OutputDebugStringA',
                                                                                            'IsDebuggerPresent',
                                                                                            'RegGetValueW',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'EtwTraceMessage',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'DbgPrintEx',
                                                                                            'LocalFree',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 136,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/b0863d305a74c6c74657cc57b3f1c21a829d7a6183a9f38fdc5bfed9cf320e10'},
 'b0bcdf7cd1d65e61a9061d539d83527a89b69583958f8a26c6bf9766c1b61e0c': {'AddressOfEntryPoint': 91744,
                                                                      'DebugRVA': 4656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-com-l1-1-1.dll': 'CoDisconnectContext',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'FileTimeToLocalFileTime',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'LoadLibraryW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThread',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegSetValueExW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegDeleteKeyW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlVirtualUnwind',
                                                                                      'api-ms-win-core-shutdown-l1-1-1.dll': 'InitiateSystemShutdownExW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'SetEvent',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventWrite',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AdjustTokenPrivileges',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'RegisterServiceCtrlHandlerExW',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'OpenServiceW',
                                                                                      'api-ms-win-service-management-l2-1-0.dll': 'ChangeServiceConfigW',
                                                                                      'api-ms-win-service-private-l1-1-1.dll': 'I_ScRegisterPreshutdownRestart',
                                                                                      'msvcrt.dll': '??3@YAXPEAX@Z',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            'memcpy',
                                                                                            '_commode',
                                                                                            'wcstoul',
                                                                                            '_errno',
                                                                                            '_vsnwprintf_s',
                                                                                            '_vsnwprintf',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_wcsicmp',
                                                                                            'memmove',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcsrchr',
                                                                                            '_fmode',
                                                                                            '_vsnprintf',
                                                                                            'wcsstr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            '_purecall',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'SetEvent',
                                                                                            'CoMarshalInterface',
                                                                                            'CoUnmarshalInterface',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoTaskMemFree',
                                                                                            'CoGetMalloc',
                                                                                            'CoResumeClassObjects',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoGetClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevertToSelf',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoImpersonateClient',
                                                                                            'CoGetCallContext',
                                                                                            'CoInitializeEx',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoCreateInstance',
                                                                                            'CoDisconnectContext',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenProcessToken',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeThread',
                                                                                            'TerminateProcess',
                                                                                            'TerminateThread',
                                                                                            'CreateThread',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentThread',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'CloseHandle',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegSetValueExW',
                                                                                            'HeapSetInformation',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetTempPathW',
                                                                                            'DeleteFileW',
                                                                                            'CompareFileTime',
                                                                                            'CreateFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'GetOsSafeBootMode',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RegOpenKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LoadLibraryW',
                                                                                            'lstrcmpW',
                                                                                            'I_ScRegisterPreshutdownRestart',
                                                                                            'NtQuerySystemInformation',
                                                                                            'OutputDebugStringA',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'MoveFileExW',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'ImpersonateSelf',
                                                                                            'RevertToSelf',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'EventWrite',
                                                                                            'QueryServiceConfigW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'DeviceIoControl',
                                                                                            'InitiateSystemShutdownExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 29,
                                                                      'NumberOfImportFunctions': 142,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 92160},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/b0bcdf7cd1d65e61a9061d539d83527a89b69583958f8a26c6bf9766c1b61e0c'},
 'b0bea6e6254f069b22fe9b6af14a316587dfd4b6642134677de5901744f4a08e': {'AddressOfEntryPoint': 10960,
                                                                      'DebugRVA': 53680,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 323584,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'WS2_32.dll': 'WSACleanup',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleOutputCP',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetTempFileNameW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'CopyFileW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryValueExW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegSaveKeyW',
                                                                                      'api-ms-win-core-shlwapi-obsolete-l1-1-0.dll': 'StrChrW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharNextW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AdjustTokenPrivileges',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupPrivilegeValueW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtQueryKey'},
                                                                      'ImportedFunctions': ['_get_osfhandle',
                                                                                            'fprintf',
                                                                                            '_fileno',
                                                                                            'wcstoul',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcstol',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_memicmp',
                                                                                            '_resetstkoflw',
                                                                                            '_wcstoui64',
                                                                                            '_errno',
                                                                                            'fgetwc',
                                                                                            'fflush',
                                                                                            '__iob_func',
                                                                                            'memset',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExA',
                                                                                            'RegGetValueW',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegFlushKey',
                                                                                            'RegSaveKeyExW',
                                                                                            'RegRestoreKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'ExitProcess',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'CloseHandle',
                                                                                            'SearchPathW',
                                                                                            'GetStdHandle',
                                                                                            'OutputDebugStringW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'CharUpperW',
                                                                                            'CharNextW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CompareStringW',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RegEnumKeyW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegSetValueW',
                                                                                            'RegSaveKeyW',
                                                                                            'CopyFileW',
                                                                                            'StrToIntW',
                                                                                            'StrDupW',
                                                                                            'StrChrIW',
                                                                                            'StrStrIW',
                                                                                            'StrChrW',
                                                                                            'LocalReAlloc',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpW',
                                                                                            'NtSetInformationKey',
                                                                                            'NtQueryKey',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetThreadLocale',
                                                                                            'FormatMessageW',
                                                                                            'WSACleanup',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 113,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 50176},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b0bea6e6254f069b22fe9b6af14a316587dfd4b6642134677de5901744f4a08e'},
 'b13ea663a13efa2530694203a1eea7299f1e90c535e01917308dd2c0f964c7af': {'AddressOfEntryPoint': 1661422,
                                                                      'DebugRVA': 1661032,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2336,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 1653248},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b13ea663a13efa2530694203a1eea7299f1e90c535e01917308dd2c0f964c7af'},
 'b166863491ff19a0f1f22767b0b0506bbf11f6670229181a68e56f850368ad3e': {'AddressOfEntryPoint': 5247,
                                                                      'DebugRVA': 68080,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'RaiseException',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'CreateFileW',
                                                                                            'DecodePointer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'RaiseException',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 66,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 22528,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 43008},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b166863491ff19a0f1f22767b0b0506bbf11f6670229181a68e56f850368ad3e'},
 'b192e074f68fa824644dfa15b4075a06f127ec238a81e9b61cec7dbefb31f659': {'AddressOfEntryPoint': 6720,
                                                                      'DebugRVA': 4896,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': '__iob_func'},
                                                                      'ImportedFunctions': ['?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 27,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b192e074f68fa824644dfa15b4075a06f127ec238a81e9b61cec7dbefb31f659'},
 'b205f7ac445810ad7d8ac8d4b758d6a70bb5f799497eb2cf1684627f8e60fd96': {'AddressOfEntryPoint': 7520,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyValueW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetProcessPreferredUILanguages',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegGetValueW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlCaptureContext',
                                                                                      'api-ms-win-core-shlwapi-obsolete-l1-1-0.dll': 'StrToIntExW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError'},
                                                                      'ImportedFunctions': ['GetSystemMetrics',
                                                                                            '_wcmdln',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            'wcschr',
                                                                                            '__C_specific_handler',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_wtol',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'memset',
                                                                                            'GetCommandLineW',
                                                                                            'SetProcessPreferredUILanguages',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcessId',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'StrToIntExW',
                                                                                            'LocalFree',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'CommandLineToArgvW',
                                                                                            'RegDeleteKeyValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegGetValueW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 47,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2248,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/b205f7ac445810ad7d8ac8d4b758d6a70bb5f799497eb2cf1684627f8e60fd96'},
 'b210d589290a6364a9e303c2f72831c9f6a303b73f898e9ae4aec961e61df875': {'AddressOfEntryPoint': 11550,
                                                                      'DebugRVA': 11152,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1440,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b210d589290a6364a9e303c2f72831c9f6a303b73f898e9ae4aec961e61df875'},
 'b239c9c92f5c032eafddbe34e9c3c8ed068831ba9d735a5c5cc1ea237d97324c': {'AddressOfEntryPoint': 13109,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'GetDlgItem',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'lstrcpynA',
                                                                                            'GetCommandLineA',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'SetEndOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'lstrcpyA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'MulDiv',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SystemParametersInfoA',
                                                                                            'RegisterClassA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CreateWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxA',
                                                                                            'CharPrevA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'IsWindow',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'CreateDialogParamA',
                                                                                            'EmptyClipboard',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'PeekMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'GetDlgItem',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 155,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 32768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 31744,
                                                                                       '.text\x00\x00\x00': 23040},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b239c9c92f5c032eafddbe34e9c3c8ed068831ba9d735a5c5cc1ea237d97324c'},
 'b23d7c93c9b1d568e608ebae4ed38634f73280aa61104687d60aa3db33f93307': {'AddressOfEntryPoint': 33840,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'USER32.dll': 'CharLowerW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'VerSetConditionMask'},
                                                                      'ImportedFunctions': ['GetDateFormatW',
                                                                                            'SearchPathW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'CloseHandle',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FindFirstFileW',
                                                                                            'SetErrorMode',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FindClose',
                                                                                            'GetLocalTime',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'HeapSetInformation',
                                                                                            'FindNextFileW',
                                                                                            'LocalFree',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'fflush',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcstoul',
                                                                                            'toupper',
                                                                                            '_vsnwprintf',
                                                                                            '_ui64tow',
                                                                                            '_iob',
                                                                                            '_ultow',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            'memset',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'VerQueryValueW',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'CharLowerW',
                                                                                            'WSACleanup',
                                                                                            'PathRelativePathToW',
                                                                                            'StrRChrW',
                                                                                            'StrPBrkW',
                                                                                            'StrStrW',
                                                                                            'StrChrW',
                                                                                            'StrDupW',
                                                                                            'StrChrIW',
                                                                                            'StrStrIW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 101,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2128,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 31744},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b23d7c93c9b1d568e608ebae4ed38634f73280aa61104687d60aa3db33f93307'},
 'b23f91ec3fca66017b3e52c7172277751567a670d698b55b5110405dabc06bb4': {'AddressOfEntryPoint': 65880,
                                                                      'DebugRVA': 4752,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'IsValidSecurityDescriptor',
                                                                                      'KERNEL32.dll': 'GetFileType',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SETUPAPI.dll': 'SetupCloseInfFile',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'dsprop.dll': 'CrackName',
                                                                                      'msvcp60.dll': '?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z',
                                                                                      'msvcrt.dll': '__initenv',
                                                                                      'ntdll.dll': 'RtlLengthSid',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '__getmainargs',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__CxxFrameHandler',
                                                                                            '_wcsnicmp',
                                                                                            'wcslen',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_controlfp',
                                                                                            '_c_exit',
                                                                                            'wcsncmp',
                                                                                            '_getche',
                                                                                            'free',
                                                                                            'wcscmp',
                                                                                            'malloc',
                                                                                            'realloc',
                                                                                            '_wtoi',
                                                                                            'wcscat',
                                                                                            '_purecall',
                                                                                            '_wcsicmp',
                                                                                            '__initenv',
                                                                                            '?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z',
                                                                                            '?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIIG@Z',
                                                                                            '??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z',
                                                                                            '?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB',
                                                                                            '?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB',
                                                                                            '??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z',
                                                                                            '?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z',
                                                                                            '??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z',
                                                                                            '?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHABV12@@Z',
                                                                                            '??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z',
                                                                                            '??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBG@Z',
                                                                                            '?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z',
                                                                                            '?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z',
                                                                                            '?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'BuildTrusteeWithObjectsAndSidW',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'LookupAccountSidW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SetThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'FreeSid',
                                                                                            'GetAce',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'EqualSid',
                                                                                            'IsValidSid',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'LocalAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcess',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetFileType',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CommandLineToArgvW',
                                                                                            'LoadStringW',
                                                                                            'wsprintfW',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetElement',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlLengthSid',
                                                                                            'CrackName',
                                                                                            'SetupGetLineTextW',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupGetLineCountW',
                                                                                            'SetupGetLineByIndexW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupCloseInfFile'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 134,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 11864,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 12288,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b23f91ec3fca66017b3e52c7172277751567a670d698b55b5110405dabc06bb4'},
 'b2aba986be6e8acd51964867ab3c18c7782b5f146b4def56e04c7226aeaf9a7c': {'AddressOfEntryPoint': 11997,
                                                                      'DebugRVA': 61856,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetDllDirectoryW',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateFileW',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetProcAddress',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapReAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'Sleep',
                                                                                            'LoadLibraryW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapSize',
                                                                                            'FlushFileBuffers',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'MessageBoxW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2584,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 14336,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 56832},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b2aba986be6e8acd51964867ab3c18c7782b5f146b4def56e04c7226aeaf9a7c'},
 'b2e32b3fa44b3a9a8fdfa906627355f6f48b4821929f9bce5ded2d07894361d4': {'AddressOfEntryPoint': 57804,
                                                                      'DebugRVA': 157120,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 155648,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'COMCTL32.dll': 'PropertySheetA',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'HeapCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'SetDlgItemTextA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'FreeLibrary',
                                                                                            'SetStdHandle',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersionExA',
                                                                                            'ResumeThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEndOfFile',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetHandleCount',
                                                                                            'FatalAppExitA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'RtlUnwindEx',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'DeleteFileA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileA',
                                                                                            'GetLastError',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateDirectoryA',
                                                                                            'SetLastError',
                                                                                            'Sleep',
                                                                                            'GetProcessHeap',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'WriteFile',
                                                                                            'HeapDestroy',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'GetFileType',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'HeapReAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'wsprintfA',
                                                                                            'GetFocus',
                                                                                            'MessageBoxA',
                                                                                            'SetCursor',
                                                                                            'GetDlgItem',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetParent',
                                                                                            'PostMessageA',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'CreateFontA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'TextOutA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateSolidBrush',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'ShellExecuteA',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 161,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 7168,
                                                                                       '.rdata\x00\x00': 53760,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 148992},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b2e32b3fa44b3a9a8fdfa906627355f6f48b4821929f9bce5ded2d07894361d4'},
 'b2ee86dee2bb94276918a3285781e67c9fdb697d4a3100ec9a604242c59934f2': {'AddressOfEntryPoint': 10737,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetACP',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects'},
                                                                      'ImportedFunctions': ['lstrlenA',
                                                                                            '_lclose',
                                                                                            'GetModuleFileNameA',
                                                                                            '_lread',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            '_lwrite',
                                                                                            '_lcreat',
                                                                                            'CreateDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'GetTempPathA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'MoveFileExA',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'CompareStringA',
                                                                                            'DeleteFileA',
                                                                                            'Sleep',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapCreate',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'wsprintfA',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'MessageBoxA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'ShellExecuteExA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 134332,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 134656,
                                                                                       '.text\x00\x00\x00': 22528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b2ee86dee2bb94276918a3285781e67c9fdb697d4a3100ec9a604242c59934f2'},
 'b2eeea7a9589bfc37394a3159bdf5cf708bf8e8769f5b4930b9bd095adaa9849': {'AddressOfEntryPoint': 18308,
                                                                      'DebugRVA': 4416,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetLastError',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'msvcrt.dll': '_cexit',
                                                                                      'ntdll.dll': '_alldiv'},
                                                                      'ImportedFunctions': ['GetGuiResources',
                                                                                            'GetSystemMetrics',
                                                                                            'qsort',
                                                                                            'NtQuerySystemInformation',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'sscanf',
                                                                                            '_strcmpi',
                                                                                            '_stricmp',
                                                                                            'atol',
                                                                                            'sprintf',
                                                                                            '_allmul',
                                                                                            '_alldiv',
                                                                                            'ftell',
                                                                                            'fscanf',
                                                                                            'fputc',
                                                                                            'fseek',
                                                                                            'fputs',
                                                                                            '_filelength',
                                                                                            '_fcloseall',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'fgetc',
                                                                                            '__initenv',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            'exit',
                                                                                            'fopen',
                                                                                            'fclose',
                                                                                            'malloc',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fgets',
                                                                                            'fgetpos',
                                                                                            'fsetpos',
                                                                                            'printf',
                                                                                            '_cexit',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetPriorityClass',
                                                                                            'SetPriorityClass',
                                                                                            'GetTempFileNameA',
                                                                                            'DeleteFileA',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetComputerNameA',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetLastError'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b2eeea7a9589bfc37394a3159bdf5cf708bf8e8769f5b4930b9bd095adaa9849'},
 'b30947d6cf4ea9fd67a8b2d2be43109e9ddafe9cb20c9bcfba0e1e7a65375ad5': {'AddressOfEntryPoint': 6760,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'mscoree.dll': 'ClrCreateManagedInstance',
                                                                                      'msvcrt.dll': '??3@YAXPEAX@Z',
                                                                                      'ole32.dll': 'CoInitializeSecurity'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'GetCommandLineW',
                                                                                            'GlobalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_errno',
                                                                                            '_wcsicmp',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteW',
                                                                                            'LoadLibraryShim',
                                                                                            'CorBindToRuntimeEx',
                                                                                            'ClrCreateManagedInstance'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 113784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 114176,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/b30947d6cf4ea9fd67a8b2d2be43109e9ddafe9cb20c9bcfba0e1e7a65375ad5'},
 'b30ab08efd763bf8d9216baf03beb57800618f26cae2ec792ae6cddaa7a6d640': {'AddressOfEntryPoint': 14544,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameA',
                                                                                      'USER32.dll': 'LoadStringA',
                                                                                      'msvcrt.dll': '_strnicmp',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FormatMessageA',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesA',
                                                                                            'GetACP',
                                                                                            'MultiByteToWideChar',
                                                                                            'LocalAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'CompareStringOrdinal',
                                                                                            'WideCharToMultiByte',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RegisterApplicationRestart',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'DefWindowProcA',
                                                                                            'LoadStringW',
                                                                                            'ShowWindow',
                                                                                            'PostMessageA',
                                                                                            'EndDialog',
                                                                                            'SetDlgItemTextW',
                                                                                            'DispatchMessageA',
                                                                                            'IsDlgButtonChecked',
                                                                                            'PeekMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowLongA',
                                                                                            'SendMessageA',
                                                                                            'IsWindowEnabled',
                                                                                            'DialogBoxParamW',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBoxW',
                                                                                            'EnableWindow',
                                                                                            'TranslateMessage',
                                                                                            'LoadStringA',
                                                                                            'memset',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'toupper',
                                                                                            '_strnicmp',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHQueryValueExA',
                                                                                            'PathAppendA',
                                                                                            'PathRemoveFileSpecA',
                                                                                            'StrCmpW',
                                                                                            'PathFindFileNameA',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoInitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 93,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 46048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 46080,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b30ab08efd763bf8d9216baf03beb57800618f26cae2ec792ae6cddaa7a6d640'},
 'b3e952c49ff1182df5ffa0b165aca07609eb5a4476cb78b7f8aeaea47d5d3ffa': {'AddressOfEntryPoint': 12843,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpynA',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 22912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 23040,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b3e952c49ff1182df5ffa0b165aca07609eb5a4476cb78b7f8aeaea47d5d3ffa'},
 'b3f3a2a45b697ae64e23214be6c36ea95aa2b298878c76889a4dd294ea842bbe': {'AddressOfEntryPoint': 62396,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94972,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 603220,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 603648,
                                                                                       '.text\x00\x00\x00': 57344,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b3f3a2a45b697ae64e23214be6c36ea95aa2b298878c76889a4dd294ea842bbe'},
 'b433ea2114390c85a1c662494b432d4c731eb64d350bf31501afcab579a058a4': {'AddressOfEntryPoint': 11392,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'msvcrt.dll': 'swprintf_s',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'ulib.dll': '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z'},
                                                                      'ImportedFunctions': ['?Usage@PROGRAM@@UBEXXZ',
                                                                                            '?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?Fatal@PROGRAM@@UBEXXZ',
                                                                                            '?Fatal@PROGRAM@@UBAXKKPADZZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z',
                                                                                            '?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ',
                                                                                            '??1PROGRAM@@UAE@XZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?DeleteAllMembers@ARRAY@@UAEEXZ',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '?ValidateVersion@PROGRAM@@UBEXKK@Z',
                                                                                            '?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z',
                                                                                            '??1STREAM_MESSAGE@@UAE@XZ',
                                                                                            '??0STREAM_MESSAGE@@QAE@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?Display@MESSAGE@@QAAEPBDZZ',
                                                                                            '?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z',
                                                                                            '?WorkOnReparsePoint@FSNODE@@QAEEE@Z',
                                                                                            '?Strchr@WSTRING@@QBEKGK@Z',
                                                                                            '?Initialize@PATH@@QAEEPBV1@E@Z',
                                                                                            '?Initialize@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '??0PROGRAM@@IAE@XZ',
                                                                                            '??0FSN_FILTER@@QAE@XZ',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '??1FSN_FILTER@@UAE@XZ',
                                                                                            '?Initialize@FSN_FILTER@@QAEEXZ',
                                                                                            '?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z',
                                                                                            '?SetFileName@FSN_FILTER@@QAEEPBD@Z',
                                                                                            '?SetAttributes@FSN_FILTER@@QAEEKKK@Z',
                                                                                            '?SetAttributes@FSNODE@@QAEEKPAK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?QueryString@WSTRING@@QBEPAV1@KK@Z',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '?QueryFsnodeArray@FSN_DIRECTORY@@QBEPAVARRAY@@PAVFSN_FILTER@@@Z',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '?Initialize@PATH@@QAEEPBGE@Z',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '?IsDrive@PATH@@QBEEXZ',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ',
                                                                                            '??0CLASS_DESCRIPTOR@@QAE@XZ',
                                                                                            '?Initialize@CLASS_DESCRIPTOR@@QAEEXZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            'HeapSetInformation',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'swprintf_s',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b433ea2114390c85a1c662494b432d4c731eb64d350bf31501afcab579a058a4'},
 'b4552f62e1238bb2679d44fd9d863ba505133d804d03e08f5882a9abda7d8b72': {'AddressOfEntryPoint': 5000,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2652,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/b4552f62e1238bb2679d44fd9d863ba505133d804d03e08f5882a9abda7d8b72'},
 'b484d3b22c3ea105240ddd0128963768e7007b6fd5b803f304adc7b45ef79ab7': {'AddressOfEntryPoint': 97438,
                                                                      'DebugRVA': 213632,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 212992,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptCreateHash',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'GetProcAddress',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathCombineW',
                                                                                      'USER32.dll': 'GetDesktopWindow',
                                                                                      'WININET.dll': 'HttpQueryInfoW'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetVersion',
                                                                                            'DeleteFileW',
                                                                                            'GetLastError',
                                                                                            'CreateEventW',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetVersionExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'OutputDebugStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetExitCodeProcess',
                                                                                            'lstrlenW',
                                                                                            'lstrcpyW',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'SetEndOfFile',
                                                                                            'SetStdHandle',
                                                                                            'HeapReAlloc',
                                                                                            'ReadConsoleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'CopyFileW',
                                                                                            'Sleep',
                                                                                            'OpenProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'ReadFile',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetProcessHeap',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapSize',
                                                                                            'AreFileApisANSI',
                                                                                            'ExitProcess',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'HeapFree',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetModuleHandleExW',
                                                                                            'WriteConsoleW',
                                                                                            'HeapAlloc',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'GetCPInfo',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcAddress',
                                                                                            'MessageBoxW',
                                                                                            'CloseWindow',
                                                                                            'SetWindowTextW',
                                                                                            'FindWindowExW',
                                                                                            'SendMessageW',
                                                                                            'CreateDialogParamW',
                                                                                            'SetWindowPos',
                                                                                            'wsprintfW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'ClientToScreen',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'GetWindowLongW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'GetDesktopWindow',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptCreateHash',
                                                                                            'ShellExecuteExW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathCombineW',
                                                                                            'InternetSetStatusCallbackW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetErrorDlg',
                                                                                            'InternetReadFile',
                                                                                            'InternetOpenW',
                                                                                            'HttpQueryInfoW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 126,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2392,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 61952,
                                                                                       '.reloc\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 206848},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b484d3b22c3ea105240ddd0128963768e7007b6fd5b803f304adc7b45ef79ab7'},
 'b4cd6a5722d3f77f5bc9af2f2e00efe66de62cd7997dc2882c0e07f5c1d21ed5': {'AddressOfEntryPoint': 138980,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 299008,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'GDI32.dll': 'SaveDC',
                                                                                      'KERNEL32.dll': 'VirtualAlloc',
                                                                                      'LZ32.dll': 'LZClose',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'RPCRT4.dll': 'UuidToStringA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GetSystemInfo',
                                                                                            'CreateFileMappingA',
                                                                                            'VirtualQuery',
                                                                                            'CompareStringA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileSize',
                                                                                            'LoadLibraryExA',
                                                                                            'CompareStringW',
                                                                                            'GlobalSize',
                                                                                            'FreeResource',
                                                                                            'VirtualFree',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapDestroy',
                                                                                            'DuplicateHandle',
                                                                                            'GetThreadContext',
                                                                                            'VirtualProtectEx',
                                                                                            'WriteProcessMemory',
                                                                                            'FlushInstructionCache',
                                                                                            'SetThreadContext',
                                                                                            'ResumeThread',
                                                                                            'GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'DeleteFileA',
                                                                                            'RemoveDirectoryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'CreateProcessA',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'lstrlenA',
                                                                                            'UnmapViewOfFile',
                                                                                            'IsBadReadPtr',
                                                                                            'ReadFile',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcpynA',
                                                                                            'WriteFile',
                                                                                            'GetDriveTypeA',
                                                                                            'SetFilePointer',
                                                                                            'GetFileAttributesA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'CreateEventA',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'lstrcatA',
                                                                                            'ReleaseMutex',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'CreateMutexA',
                                                                                            'SetErrorMode',
                                                                                            'GetSystemDirectoryA',
                                                                                            'MulDiv',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileSectionNamesA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetTickCount',
                                                                                            'FindResourceExA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'InterlockedDecrement',
                                                                                            'LocalFree',
                                                                                            'InterlockedIncrement',
                                                                                            'FormatMessageA',
                                                                                            'GetTempPathA',
                                                                                            'GetVersionExA',
                                                                                            'CreateFileA',
                                                                                            'GlobalFree',
                                                                                            'FindResourceA',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalAlloc',
                                                                                            'LockResource',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'WaitForSingleObject',
                                                                                            'SetLastError',
                                                                                            'ExitProcess',
                                                                                            'lstrcpyA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'HeapCreate',
                                                                                            'IsBadCodePtr',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'RaiseException',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapSize',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'IsBadWritePtr',
                                                                                            'HeapReAlloc',
                                                                                            'SearchPathA',
                                                                                            'FindNextFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetExitCodeProcess',
                                                                                            'OpenProcess',
                                                                                            'CompareFileTime',
                                                                                            'GetProcessTimes',
                                                                                            'TerminateProcess',
                                                                                            'GetLocalTime',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetVersion',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThread',
                                                                                            'VirtualProtect',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SystemTimeToFileTime',
                                                                                            'lstrcmpA',
                                                                                            'MoveFileExA',
                                                                                            'InterlockedExchange',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'WaitForInputIdle',
                                                                                            'CharUpperA',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetWindowLongA',
                                                                                            'SetFocus',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'LoadStringA',
                                                                                            'FillRect',
                                                                                            'ScreenToClient',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'SystemParametersInfoA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetWindowDC',
                                                                                            'UpdateWindow',
                                                                                            'InvalidateRect',
                                                                                            'DrawIcon',
                                                                                            'MapDialogRect',
                                                                                            'GetClassNameA',
                                                                                            'CallWindowProcA',
                                                                                            'DrawFocusRect',
                                                                                            'InflateRect',
                                                                                            'DrawTextA',
                                                                                            'GetWindowTextA',
                                                                                            'CopyRect',
                                                                                            'EnumChildWindows',
                                                                                            'CreateWindowExA',
                                                                                            'RegisterClassExA',
                                                                                            'IntersectRect',
                                                                                            'GetDlgItemTextA',
                                                                                            'MapWindowPoints',
                                                                                            'SetWindowPos',
                                                                                            'GetPropA',
                                                                                            'EnableMenuItem',
                                                                                            'SetPropA',
                                                                                            'RemovePropA',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'GetSysColor',
                                                                                            'LoadImageA',
                                                                                            'CreateDialogParamA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SetActiveWindow',
                                                                                            'PeekMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'GetClientRect',
                                                                                            'EnableWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'GetWindowLongA',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'EndDialog',
                                                                                            'LoadIconA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'TextOutA',
                                                                                            'RestoreDC',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkColor',
                                                                                            'CreateRectRgn',
                                                                                            'DeleteObject',
                                                                                            'CreateSolidBrush',
                                                                                            'GetDIBColorTable',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'CreatePalette',
                                                                                            'CreateHalftonePalette',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleDC',
                                                                                            'UnrealizeObject',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateDCA',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'CreatePatternBrush',
                                                                                            'DeleteMetaFile',
                                                                                            'SetMetaFileBitsEx',
                                                                                            'SetStretchBltMode',
                                                                                            'SelectClipRgn',
                                                                                            'SetPixel',
                                                                                            'PatBlt',
                                                                                            'PlayMetaFile',
                                                                                            'StretchBlt',
                                                                                            'CreateBitmap',
                                                                                            'SetViewportExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetMapMode',
                                                                                            'SaveDC',
                                                                                            'OpenProcessToken',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyA',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenThreadToken',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'GetErrorInfo',
                                                                                            'LZOpenFileA',
                                                                                            'LZCopy',
                                                                                            'LZClose',
                                                                                            'UuidCreate',
                                                                                            'RpcStringFreeA',
                                                                                            'UuidToStringA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteExA',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 295,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 397948,
                                                                      'SectionNames': {'.data\x00\x00\x00': 24576,
                                                                                       '.rdata\x00\x00': 40960,
                                                                                       '.rsrc\x00\x00\x00': 401408,
                                                                                       '.text\x00\x00\x00': 294912},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b4cd6a5722d3f77f5bc9af2f2e00efe66de62cd7997dc2882c0e07f5c1d21ed5'},
 'b4d0ae06b4831719849c83a113ff7be4f44df6fc7c8fb369de5b93f70c8d194a': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 392568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 392704,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b4d0ae06b4831719849c83a113ff7be4f44df6fc7c8fb369de5b93f70c8d194a'},
 'b6268ab457f407e7e9ef0cc98bcb8db5742706d0c76b84a926a62435420651ef': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b6268ab457f407e7e9ef0cc98bcb8db5742706d0c76b84a926a62435420651ef'},
 'b62848d3c4a165eb4d42671f6838fd7c437e5bedb41c9648d457c4ec734bb97b': {'AddressOfEntryPoint': 28688,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'Framework.dll': '?log@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDHPEBVCCafException@2@@Z',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCP90.dll': '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                      'MSVCR90.dll': '__CxxFrameHandler3',
                                                                                      'ProviderFx.dll': '?createSchema@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCSchemaDoc@Caf@@V?$TCafObject@VCSchemaDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@@std@@@std@@V?$deque@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                      'glib-2.0.dll': 'g_atomic_int_dec_and_test'},
                                                                      'ImportedFunctions': ['g_atomic_int_inc',
                                                                                            'g_atomic_int_dec_and_test',
                                                                                            '?throwSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '??1CCafException@Caf@@UEAA@XZ',
                                                                                            '?throwAddRefedSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '??1CLogger@Caf@@UEAA@XZ',
                                                                                            '??0CLogger@Caf@@QEAA@PEBD@Z',
                                                                                            '?getName@CAttachmentDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getAttachment@CAttachmentCollectionDoc@Caf@@QEBA?AV?$deque@V?$TCafSmartPtr@VCAttachmentDoc@Caf@@V?$TCafObject@VCAttachmentDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCAttachmentDoc@Caf@@V?$TCafObject@VCAttachmentDoc@Caf@@@@@@@std@@@std@@XZ',
                                                                                            '?populateVA@CCafException@Caf@@QEAAXJAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PEBDZZ',
                                                                                            '??0InvalidArgumentException@Caf@@QEAA@XZ',
                                                                                            '?logVA@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDH1ZZ',
                                                                                            '?findRequiredParameterAsString@ParameterUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@AEBV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@@Z',
                                                                                            '?getParameterCollection@COperationDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCParameterCollectionDoc@Caf@@V?$TCafObject@VCParameterCollectionDoc@Caf@@@@@@XZ',
                                                                                            '?getName@COperationDoc@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getOperation@CProviderInvokeOperationDoc@Caf@@QEBA?AV?$TCafSmartPtr@VCOperationDoc@Caf@@V?$TCafObject@VCOperationDoc@Caf@@@@@@XZ',
                                                                                            '?notNullPtr@CValidate@Caf@@SAXPEBXPEBD11@Z',
                                                                                            '?AddRef@CCafException@Caf@@UEAAXXZ',
                                                                                            '?Release@CCafException@Caf@@UEAAXXZ',
                                                                                            '?QueryInterface@CCafException@Caf@@UEAAXAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?throwSelf@InvalidArgumentException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@InvalidArgumentException@Caf@@UEAAXXZ',
                                                                                            '?getMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getFullMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '??1InvalidArgumentException@Caf@@UEAA@XZ',
                                                                                            '?notEmptyStr@CValidate@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD11@Z',
                                                                                            '?populate@CCafException@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@J00@Z',
                                                                                            '??0CCafException@Caf@@QEAA@XZ',
                                                                                            '?log@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDHPEBVCCafException@2@@Z',
                                                                                            '?processProviderCommandline@CProviderDriver@Caf@@SAHAEAUIInvokedProvider@2@HQEAPEAD@Z',
                                                                                            '?createDataClassProperty@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?createDataClassInstance@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassInstanceDoc@Caf@@V?$TCafObject@VCDataClassInstanceDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$deque@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassPropertyDoc@Caf@@V?$TCafObject@VCDataClassPropertyDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCDataClassSubInstanceDoc@Caf@@V?$TCafObject@VCDataClassSubInstanceDo',
                                                                                            '?createClassProperty@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCClassPropertyDoc@Caf@@V?$TCafObject@VCClassPropertyDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PROPERTY_TYPE@2@_N22@Z',
                                                                                            '?createDataClass@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$deque@V?$TCafSmartPtr@VCClassPropertyDoc@Caf@@V?$TCafObject@VCClassPropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCClassPropertyDoc@Caf@@V?$TCafObject@VCClassPropertyDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCClassInstancePropertyDoc@Caf@@V?$TCafObject@VCClassInstancePropertyDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPt',
                                                                                            '?createMethodParameter@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PARAMETER_TYPE@2@_N2@Z',
                                                                                            '?createMethod@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$deque@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCInstanceParameterDoc@Caf@@V?$TCafObject@VCInstanceParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCInstanc',
                                                                                            '?createCollectMethod@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCCollectMethodDoc@Caf@@V?$TCafObject@VCCollectMethodDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$deque@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodParameterDoc@Caf@@V?$TCafObject@VCMethodParameterDoc@Caf@@@@@@@std@@@5@V?$deque@V?$TCafSmartPtr@VCInstanceParameterDoc@Caf@@V?$TCafObject@VCInstanceParameterDoc@Caf@@@@@@V?$allocator@V?$T',
                                                                                            '?createActionClass@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00V?$TCafSmartPtr@VCCollectMethodDoc@Caf@@V?$TCafObject@VCCollectMethodDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCMethodDoc@Caf@@V?$TCafObject@VCMethodDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '?createSchema@CProviderDocHelper@Caf@@SA?AV?$TCafSmartPtr@VCSchemaDoc@Caf@@V?$TCafObject@VCSchemaDoc@Caf@@@@@@V?$deque@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCDataClassDoc@Caf@@V?$TCafObject@VCDataClassDoc@Caf@@@@@@@std@@@std@@V?$deque@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@V?$allocator@V?$TCafSmartPtr@VCActionClassDoc@Caf@@V?$TCafObject@VCActionClassDoc@Caf@@@@@@@std@@@5@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@PEBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBDAEBV10@@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z',
                                                                                            '??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAHAEBV12@@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAHPEBD@Z',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memmove_s',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__CxxFrameHandler3',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 99,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.rdata\x00\x00': 25600,
                                                                                       '.text\x00\x00\x00': 35840},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b62848d3c4a165eb4d42671f6838fd7c437e5bedb41c9648d457c4ec734bb97b'},
 'b79e0890e5acffe7966bb32a6aaa415d6e334d0df5452debe6a867bb03451ea6': {'AddressOfEntryPoint': 11872,
                                                                      'DebugRVA': 56356,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'RpcStringBindingComposeW',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'IsDebuggerPresent',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapDestroy',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetThreadPriority',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegGetValueW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlVirtualUnwind',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeSRWLock',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'CreateTimerQueueTimer',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceEnableLevel',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetSecurityDescriptorDacl',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'DbgPrintEx'},
                                                                      'ImportedFunctions': ['_purecall',
                                                                                            'calloc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_XcptFilter',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            'malloc',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'free',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            'wcsstr',
                                                                                            '_fmode',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            'exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '__set_app_type',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'TraceMessage',
                                                                                            'GetTraceEnableLevel',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapDestroy',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'WaitForSingleObject',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'InitializeSRWLock',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'CreateThread',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'SetThreadPriority',
                                                                                            'GetExitCodeThread',
                                                                                            'GetThreadPriority',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadStringW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'Ndr64AsyncClientCall',
                                                                                            'NdrClientCall3',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcAsyncCancelCall',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'CoCreateInstance',
                                                                                            'CoCancelCall',
                                                                                            'CoEnableCallCancellation',
                                                                                            'CoDisableCallCancellation',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'GetAclInformation',
                                                                                            'AddAce',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeAcl',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'IsValidSid',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'GetSidSubAuthority',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeSid',
                                                                                            'GetSidLengthRequired',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'MakeAbsoluteSD',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'CloseHandle',
                                                                                            'OutputDebugStringA',
                                                                                            'IsDebuggerPresent',
                                                                                            'RegGetValueW',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'EtwTraceMessage',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'DbgPrintEx',
                                                                                            'LocalFree',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 136,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2248,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 61440},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/b79e0890e5acffe7966bb32a6aaa415d6e334d0df5452debe6a867bb03451ea6'},
 'b7b264eae44c58a7a3989c373b725ffff356610774c65d1898f21a3e7452d413': {'AddressOfEntryPoint': 57358,
                                                                      'DebugRVA': 57168,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1624,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 53248},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b7b264eae44c58a7a3989c373b725ffff356610774c65d1898f21a3e7452d413'},
 'b7dcbabf2b8de426e3997392d73b4fba6e8ee1e00d28daf609db9ae5e24bb2b5': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 65912,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 66048,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b7dcbabf2b8de426e3997392d73b4fba6e8ee1e00d28daf609db9ae5e24bb2b5'},
 'b81028c41722e254953b5134439ba04e741cff656120349b6175ce1383729945': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 219920,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 220160,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b81028c41722e254953b5134439ba04e741cff656120349b6175ce1383729945'},
 'b820ed135975f062802abeeb232addc9a3a75102d4fb69f725df1a0e7396e896': {'AddressOfEntryPoint': 7376,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'SHELL32.dll': 'Control_RunDLLW',
                                                                                      'SHLWAPI.dll': 'PathIsRelativeW',
                                                                                      'USER32.dll': 'LoadCursorW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['SetErrorMode',
                                                                                            'lstrlenW',
                                                                                            'LocalAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'ReleaseActCtx',
                                                                                            'DeactivateActCtx',
                                                                                            'CompareStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'ActivateActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'SetSearchPathMode',
                                                                                            'SearchPathW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'CharNextW',
                                                                                            'GetClassLongW',
                                                                                            'LoadIconW',
                                                                                            'GetWindowLongW',
                                                                                            'SetClassLongW',
                                                                                            'GetClassNameW',
                                                                                            'SetWindowLongW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindow',
                                                                                            'DestroyWindow',
                                                                                            'LoadCursorW',
                                                                                            '__set_app_type',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            'memset',
                                                                                            'Control_RunDLLW',
                                                                                            'PathIsRelativeW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 56,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 49144,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 49152,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b820ed135975f062802abeeb232addc9a3a75102d4fb69f725df1a0e7396e896'},
 'b8240ccba03ee8cf8b1f281f3a517be42798c792d7925043d9eb6dcbb56955c3': {'AddressOfEntryPoint': 15268,
                                                                      'DebugRVA': 4368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LookupPrivilegeValueW',
                                                                                      'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'NETAPI32.dll': 'NetAlertRaiseEx',
                                                                                      'USER32.dll': 'CharUpperBuffW',
                                                                                      'msvcrt.dll': '_XcptFilter'},
                                                                      'ImportedFunctions': ['CharUpperBuffW',
                                                                                            'NetAlertRaiseEx',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_controlfp',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'fclose',
                                                                                            '_iob',
                                                                                            'fopen',
                                                                                            'swscanf',
                                                                                            'wprintf',
                                                                                            'fwprintf',
                                                                                            'fflush',
                                                                                            'wcscmp',
                                                                                            'wcslen',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'GetStdHandle',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FindFirstFileW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'HeapFree',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'FillConsoleOutputCharacterW',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 57,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b8240ccba03ee8cf8b1f281f3a517be42798c792d7925043d9eb6dcbb56955c3'},
 'b82725880d35a907e0a615e54759c3a4e2828faa3bb83f6b04ebd2634376eb40': {'AddressOfEntryPoint': 446176,
                                                                      'DebugRVA': 2055120,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2076672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'GetConsoleMode',
                                                                                      'MSVCR120_CLR0400.dll': 'wprintf_s',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['CryptAcquireContextA',
                                                                                            'CryptReleaseContext',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExW',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptDestroyHash',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetConsoleCP',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FormatMessageW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetVersionExA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineW',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'IsValidCodePage',
                                                                                            'FindClose',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapSetInformation',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapDestroy',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'lstrcmpiA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'LeaveCriticalSection',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryExA',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'DeleteCriticalSection',
                                                                                            'DecodePointer',
                                                                                            'Module32NextW',
                                                                                            'Module32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'ReadProcessMemory',
                                                                                            'lstrlenW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetSystemDirectoryW',
                                                                                            'OpenThread',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetUserDefaultLangID',
                                                                                            'LoadLibraryExW',
                                                                                            'GetLocaleInfoA',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'GetFileType',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryA',
                                                                                            'SwitchToThread',
                                                                                            'GlobalMemoryStatus',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryW',
                                                                                            'lstrcmpW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetEvent',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateMutexW',
                                                                                            'CreateEventW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetVersion',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'Sleep',
                                                                                            'GetSystemInfo',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'FindNextFileW',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileW',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateFileW',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LockResource',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'LocalFree',
                                                                                            'ReadFile',
                                                                                            'GetACP',
                                                                                            'GetFileSize',
                                                                                            'GetShortPathNameA',
                                                                                            'GetShortPathNameW',
                                                                                            'SetLastError',
                                                                                            'OutputDebugStringW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'FreeLibrary',
                                                                                            'GetConsoleMode',
                                                                                            '_CIsqrt',
                                                                                            '_CIfmod',
                                                                                            'strrchr',
                                                                                            'atoi',
                                                                                            'memcmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'memcpy_s',
                                                                                            '_wcsicmp',
                                                                                            '_localtime64_s',
                                                                                            '_time64',
                                                                                            'wcscpy_s',
                                                                                            'wcsncpy_s',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            '__iob_func',
                                                                                            '_setmode',
                                                                                            'swprintf_s',
                                                                                            '_wsetlocale',
                                                                                            '_vsnwprintf',
                                                                                            '_vscwprintf',
                                                                                            'vswprintf_s',
                                                                                            '_mbspbrk',
                                                                                            'wcspbrk',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_recalloc',
                                                                                            'strstr',
                                                                                            '_resetstkoflw',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'strncpy_s',
                                                                                            'memmove_s',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'bsearch',
                                                                                            '_wsplitpath_s',
                                                                                            'wcstoul',
                                                                                            'wcstok_s',
                                                                                            'wcschr',
                                                                                            'wcsrchr',
                                                                                            'swscanf_s',
                                                                                            '_wcsnicmp',
                                                                                            'isxdigit',
                                                                                            'iswspace',
                                                                                            '_errno',
                                                                                            'fflush',
                                                                                            'fgetws',
                                                                                            'wcsftime',
                                                                                            'vfwprintf_s',
                                                                                            'btowc',
                                                                                            'fread',
                                                                                            'fclose',
                                                                                            'fwrite',
                                                                                            '_open_osfhandle',
                                                                                            '_fdopen',
                                                                                            '_mbsinc',
                                                                                            'fwprintf_s',
                                                                                            'memset',
                                                                                            'wcsncmp',
                                                                                            '_swab',
                                                                                            'wmemcpy_s',
                                                                                            '_waccess_s',
                                                                                            '_access_s',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            '_itow_s',
                                                                                            '_vsnprintf',
                                                                                            'calloc',
                                                                                            '_purecall',
                                                                                            '_finite',
                                                                                            'wcstol',
                                                                                            'isdigit',
                                                                                            'wcsnlen',
                                                                                            'wcscspn',
                                                                                            'wcscat_s',
                                                                                            'wcsstr',
                                                                                            'fwprintf',
                                                                                            '_wfopen_s',
                                                                                            'qsort',
                                                                                            'iswdigit',
                                                                                            '_wtoi',
                                                                                            '_isnan',
                                                                                            'printf_s',
                                                                                            'wprintf_s',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'VarR8FromStr',
                                                                                            'VarBstrFromDec',
                                                                                            'VariantChangeType',
                                                                                            'VarBstrCat',
                                                                                            'VarDecFromI4',
                                                                                            'VarDecFromUI4',
                                                                                            'VarDecFromR4',
                                                                                            'VarDecFromR8',
                                                                                            'VarDecFix',
                                                                                            'VarI1FromDec',
                                                                                            'VarUI1FromDec',
                                                                                            'VarI2FromDec',
                                                                                            'VarUI2FromDec',
                                                                                            'VarI4FromDec',
                                                                                            'VarUI4FromDec',
                                                                                            'VarR4FromDec',
                                                                                            'VarR8FromDec',
                                                                                            'VarDecAdd',
                                                                                            'VarDecSub',
                                                                                            'VarDecMul',
                                                                                            'VarDecDiv',
                                                                                            'VarDecCmp',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathCommonPrefixW',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathIsURLW',
                                                                                            'PathIsUNCW',
                                                                                            'PathRelativePathToW',
                                                                                            'PathStripPathW',
                                                                                            'PathFindFileNameW',
                                                                                            'PeekMessageA',
                                                                                            'CharNextA',
                                                                                            'LoadStringW',
                                                                                            'GetModuleFileNameExW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 301,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1868,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 82944,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 2051584},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/b82725880d35a907e0a615e54759c3a4e2828faa3bb83f6b04ebd2634376eb40'},
 'b8828c663a4f4e1a4f201bfb85b272f28184061ba3bfd6431e0a4cad09f4ffb1': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 88032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 88064,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b8828c663a4f4e1a4f201bfb85b272f28184061ba3bfd6431e0a4cad09f4ffb1'},
 'b969b5c2e61bca437799ca56819a15ce9356dd4699f64920f88b6b26470b8075': {'AddressOfEntryPoint': 14304,
                                                                      'DebugRVA': 17264,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR100.dll': '_cexit',
                                                                                      'OLEAUT32.dll': 'LoadTypeLib',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['GetCurrentThreadId',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'lstrlenW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'CreateEventW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CharNextW',
                                                                                            'CharUpperW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CoCreateInstance',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'LoadRegTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'LoadTypeLib',
                                                                                            '__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_CxxThrowException',
                                                                                            'wcsncpy_s',
                                                                                            'free',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_purecall',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 181984,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 182272,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b969b5c2e61bca437799ca56819a15ce9356dd4699f64920f88b6b26470b8075'},
 'b9865611be065755c23b108e053e5098f0edfe679a6b6628386569412efcd88c': {'AddressOfEntryPoint': 46946,
                                                                      'DebugRVA': 86704,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'CRYPT32.dll': 'CertGetNameStringW',
                                                                                      'KERNEL32.dll': 'WriteFile',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'WINTRUST.dll': 'WTHelperGetProvCertFromChain',
                                                                                      'ole32.dll': 'CoReleaseServerProcess'},
                                                                      'ImportedFunctions': ['Sleep',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessW',
                                                                                            'LoadLibraryExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetFilePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'HeapCreate',
                                                                                            'GetStdHandle',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'RtlUnwind',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'CharNextW',
                                                                                            'CharUpperW',
                                                                                            'MessageBoxW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'LoadStringW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'ControlService',
                                                                                            'DeleteService',
                                                                                            'CreateServiceW',
                                                                                            'RegQueryValueExW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CreateErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'SetErrorInfo',
                                                                                            'SysStringLen',
                                                                                            'VarUI4FromStr',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysAllocString',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysAllocStringLen',
                                                                                            'CertGetNameStringW',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WinVerifyTrust',
                                                                                            'WTHelperGetProvCertFromChain'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 142,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 4492,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 25600,
                                                                                       '.reloc\x00\x00': 9728,
                                                                                       '.rsrc\x00\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 81920},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b9865611be065755c23b108e053e5098f0edfe679a6b6628386569412efcd88c'},
 'b9c549419499dc662224f4519bd9adec595b47e65e11db00d4fb83effa8c5212': {'AddressOfEntryPoint': 42111,
                                                                      'DebugRVA': 58480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetServiceStatus',
                                                                                      'KERNEL32.dll': 'HeapDestroy',
                                                                                      'MSVCP100.dll': '?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z',
                                                                                      'MSVCR100.dll': '_configthreadlocale',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'USER32.dll': 'GetWindowLongA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetModuleFileNameA',
                                                                                            'Sleep',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetFullPathNameW',
                                                                                            'CloseHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'LocalFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'InterlockedExchange',
                                                                                            'CreateEventA',
                                                                                            'GetLastError',
                                                                                            'FormatMessageA',
                                                                                            'lstrlenA',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeCriticalSection',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'DefWindowProcA',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassA',
                                                                                            'PostMessageA',
                                                                                            'GetWindowLongA',
                                                                                            'OpenServiceA',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'OpenSCManagerA',
                                                                                            'CreateServiceA',
                                                                                            'CloseServiceHandle',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'RegisterEventSourceA',
                                                                                            'ReportEventA',
                                                                                            'DeregisterEventSource',
                                                                                            'SetServiceStatus',
                                                                                            'OleRun',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateGuid',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            '??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z',
                                                                                            '??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z',
                                                                                            '??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z',
                                                                                            '?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ',
                                                                                            '?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ',
                                                                                            '?always_noconv@codecvt_base@std@@QBE_NXZ',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z',
                                                                                            '?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '??Bid@locale@std@@QAEIXZ',
                                                                                            '?id@?$codecvt@DDH@std@@2V0locale@2@A',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?good@ios_base@std@@QBE_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z',
                                                                                            '?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ',
                                                                                            '?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?width@ios_base@std@@QAE_J_J@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '?flags@ios_base@std@@QBEHXZ',
                                                                                            '?width@ios_base@std@@QBE_JXZ',
                                                                                            '??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z',
                                                                                            '?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z',
                                                                                            '?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z',
                                                                                            '?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z',
                                                                                            '??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '?fail@ios_base@std@@QBE_NXZ',
                                                                                            '?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ',
                                                                                            '?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ',
                                                                                            '?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?id@?$ctype@_W@std@@2V0locale@2@A',
                                                                                            '??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ',
                                                                                            '?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z',
                                                                                            '?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ',
                                                                                            '?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?id@?$codecvt@_WDH@std@@2V0locale@2@A',
                                                                                            '?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ',
                                                                                            '?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ',
                                                                                            '?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ',
                                                                                            '?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ',
                                                                                            '?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?widen@?$ctype@_W@std@@QBE_WD@Z',
                                                                                            '?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z',
                                                                                            '?getloc@ios_base@std@@QBE?AVlocale@2@XZ',
                                                                                            '?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z',
                                                                                            '?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z',
                                                                                            '?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_mbsnbcmp',
                                                                                            '_CxxThrowException',
                                                                                            '_vscprintf',
                                                                                            'vsprintf_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            'sprintf_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'wcsnlen',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '_lock_file',
                                                                                            '_unlock_file',
                                                                                            'fgetc',
                                                                                            'fputc',
                                                                                            'ungetc',
                                                                                            'setvbuf',
                                                                                            'fflush',
                                                                                            '??0bad_cast@std@@QAE@PBD@Z',
                                                                                            '??1bad_cast@std@@UAE@XZ',
                                                                                            '??0bad_cast@std@@QAE@ABV01@@Z',
                                                                                            'fwrite',
                                                                                            'fgetpos',
                                                                                            '_fseeki64',
                                                                                            'fsetpos',
                                                                                            'fclose',
                                                                                            'wprintf',
                                                                                            '_stricmp',
                                                                                            'printf',
                                                                                            '_vsnprintf',
                                                                                            '_purecall',
                                                                                            '_time64',
                                                                                            'fgetwc',
                                                                                            'fputwc',
                                                                                            'ungetwc',
                                                                                            '_wsplitpath_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_localtime64_s',
                                                                                            '_mktime64',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            'EnumProcessModules'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 245,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1340,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 23552,
                                                                                       '.reloc\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 50176,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b9c549419499dc662224f4519bd9adec595b47e65e11db00d4fb83effa8c5212'},
 'b9e673f60fd682b29a66ab3e819a8e1100f2a3621bef102ba71af66b072e9600': {'AddressOfEntryPoint': 17008,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'UTILDLL.dll': 'GetUnknownString',
                                                                                      'WINSTA.dll': 'WinStationQueryInformationW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlInitializeCriticalSection'},
                                                                      'ImportedFunctions': ['WinStationEnumerateW',
                                                                                            'WinStationEnumerateProcesses',
                                                                                            'WinStationGetAllProcesses',
                                                                                            'WinStationFreeMemory',
                                                                                            'WinStationFreeGAPMemory',
                                                                                            'WinStationOpenServerW',
                                                                                            'WinStationQueryInformationW',
                                                                                            'GetUnknownString',
                                                                                            'OemToCharBuffW',
                                                                                            'CharToOemW',
                                                                                            'LoadStringW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'SetThreadUILanguage',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'SetFileApisToOEM',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'LocalAlloc',
                                                                                            'GetOEMCP',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'RtlEnterCriticalSection',
                                                                                            'RtlLeaveCriticalSection',
                                                                                            'RtlInitializeCriticalSection',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'CopySid',
                                                                                            'EqualSid',
                                                                                            'GetLengthSid',
                                                                                            'LookupAccountSidW',
                                                                                            'OpenProcessToken',
                                                                                            '_wsetlocale',
                                                                                            'wcscpy_s',
                                                                                            '_wcsicmp',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcstol',
                                                                                            'iswdigit',
                                                                                            'wcschr',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            'wcscat_s',
                                                                                            '_wcsnicmp',
                                                                                            'wprintf',
                                                                                            'printf',
                                                                                            'memmove',
                                                                                            'wcstoul',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'setlocale',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            '_wcslwr',
                                                                                            'swprintf_s',
                                                                                            'memcpy',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 99,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 14848},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/b9e673f60fd682b29a66ab3e819a8e1100f2a3621bef102ba71af66b072e9600'},
 'b9f65699acedb38dd6ae3c7130ab67a68edfadeceb9025a7335335c9863b8ae0': {'AddressOfEntryPoint': 159976,
                                                                      'DebugRVA': 6592,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 427952,
                                                                      'ExportSize': 113,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'KERNEL32.dll': 'DecodePointer',
                                                                                      'MPR.dll': 'WNetGetUniversalNameW',
                                                                                      'MSVCR100.dll': '_wmakepath_s',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'instapi110.dll': 'GetCOMPath',
                                                                                      'ole32.dll': 'CoCreateGuid',
                                                                                      'sqlncli11.dll': 'bcp_colfmt'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegOpenKeyW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetHandleInformation',
                                                                                            'ReadProcessMemory',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'GetFileAttributesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'DebugBreak',
                                                                                            'VirtualQuery',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CompareStringW',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetComputerNameW',
                                                                                            'CreateEventA',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WaitForSingleObject',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Module32NextW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'LocalFree',
                                                                                            'MoveFileExW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSizeEx',
                                                                                            'lstrlenW',
                                                                                            'GetVersionExA',
                                                                                            'CreateFileMappingA',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetExitCodeThread',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineW',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'SetErrorMode',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'AllocConsole',
                                                                                            'GetModuleFileNameA',
                                                                                            'MapViewOfFile',
                                                                                            'GetSystemInfo',
                                                                                            'ReadFile',
                                                                                            'GetUserDefaultLCID',
                                                                                            'OutputDebugStringW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateMutexW',
                                                                                            'GetSystemTime',
                                                                                            'SetFilePointer',
                                                                                            'ReleaseMutex',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'CreateFileW',
                                                                                            'GetLocalTime',
                                                                                            'GetFileSize',
                                                                                            'SetLastError',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetVersionExW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'FormatMessageA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_strnicmp',
                                                                                            'wcsncpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '__iob_func',
                                                                                            '_resetstkoflw',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_swscanf_s_l',
                                                                                            'fclose',
                                                                                            '_purecall',
                                                                                            'printf',
                                                                                            'wcsncat_s',
                                                                                            '__C_specific_handler',
                                                                                            'iswxdigit',
                                                                                            'iswspace',
                                                                                            'wcscat_s',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            'wcsncmp',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'freopen',
                                                                                            '_amsg_exit',
                                                                                            '_snwprintf_s',
                                                                                            '_wcsicmp_l',
                                                                                            '_wtol',
                                                                                            'wcstok',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_localtime64',
                                                                                            '_time64',
                                                                                            'wcsftime',
                                                                                            '_waccess',
                                                                                            '_local_unwind',
                                                                                            'strcpy_s',
                                                                                            'strcat_s',
                                                                                            'strncpy_s',
                                                                                            'sprintf_s',
                                                                                            '_swprintf_c',
                                                                                            'iswalpha',
                                                                                            'wcsrchr',
                                                                                            '_wcsnicmp',
                                                                                            'swprintf_s',
                                                                                            'memcpy',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wtoi',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcmp',
                                                                                            '_CxxThrowException',
                                                                                            'memmove',
                                                                                            '_itow_s',
                                                                                            '_vsnwprintf_l',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_wsystem',
                                                                                            '_wsplitpath_s',
                                                                                            'wprintf',
                                                                                            'memset',
                                                                                            '_beginthreadex',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf',
                                                                                            '_wmakepath_s',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoGetMalloc',
                                                                                            'CoCreateGuid',
                                                                                            'VariantCopy',
                                                                                            'GetErrorInfo',
                                                                                            'SysStringByteLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'UnRegisterTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'CharNextW',
                                                                                            'CharLowerW',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringW',
                                                                                            'bcp_columns',
                                                                                            'bcp_control',
                                                                                            'bcp_initW',
                                                                                            'bcp_exec',
                                                                                            'bcp_colfmt',
                                                                                            'GetSQLVerSpecificRegString',
                                                                                            'GetCOMPath',
                                                                                            'WNetGetUniversalNameA',
                                                                                            'WNetGetUniversalNameW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 233,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7944,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.pdata\x00\x00': 15360,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 424448},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/b9f65699acedb38dd6ae3c7130ab67a68edfadeceb9025a7335335c9863b8ae0'},
 'baaed3870c0c5a5c48ce296b549d7d933f385e1591f16745f336f25d51114909': {'AddressOfEntryPoint': 25024,
                                                                      'DebugRVA': 1175552,
                                                                      'DebugSize': 56,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 1279296,
                                                                      'ExportSize': 54,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 0,
                                                                      'ResSize': 10968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17920,
                                                                                       '.pdata\x00\x00': 33792,
                                                                                       '.rdata\x00\x00': 108032,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.text\x00\x00\x00': 1141248,
                                                                                       'PAGE\x00\x00\x00\x00': 6144,
                                                                                       'PAGER32C': 15872,
                                                                                       'PAGER32R': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/baaed3870c0c5a5c48ce296b549d7d933f385e1591f16745f336f25d51114909'},
 'bab24f57a195d485e397fe45cb4846e542645cd6c4ae4444b681025b20378136': {'AddressOfEntryPoint': 129088,
                                                                      'DebugRVA': 4624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyW',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'ExitProcess',
                                                                                            'GetComputerNameW',
                                                                                            'SetThreadUILanguage',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetConsoleMode',
                                                                                            'GetVersionExW',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'HeapSetInformation',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'Sleep',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'LocalAlloc',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'TerminateProcess',
                                                                                            '_wfopen',
                                                                                            'setvbuf',
                                                                                            '_iob',
                                                                                            'setlocale',
                                                                                            'fclose',
                                                                                            '_wcsnicmp',
                                                                                            'wcsstr',
                                                                                            'fgetwc',
                                                                                            'swscanf',
                                                                                            'iswalpha',
                                                                                            'towupper',
                                                                                            'wcstol',
                                                                                            '_ui64tow',
                                                                                            '_ltow',
                                                                                            '_wcstoui64',
                                                                                            '_wtoi',
                                                                                            'wcsrchr',
                                                                                            '_wtoi64',
                                                                                            '_wcsupr',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_callnewh',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'memcpy_s',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memcmp',
                                                                                            '_errno',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcstoul',
                                                                                            'memmove_s',
                                                                                            'wcschr',
                                                                                            '_wtol',
                                                                                            '_amsg_exit',
                                                                                            '_vsnwprintf',
                                                                                            'wcsspn',
                                                                                            '_ultow',
                                                                                            '_wcsicmp',
                                                                                            'wcspbrk',
                                                                                            'memset',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'UuidFromStringW',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 112,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 130048},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bab24f57a195d485e397fe45cb4846e542645cd6c4ae4444b681025b20378136'},
 'baddd1785777b240daec204cc72a840c75f1cc1d428b691e3b491c5fb75eca75': {'AddressOfEntryPoint': 15584,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'KERNEL32.dll': 'WaitForSingleObject',
                                                                                      'OLEAUT32.dll': 'SysAllocStringByteLen',
                                                                                      'RPCRT4.dll': 'I_RpcExceptionFilter',
                                                                                      'SHELL32.dll': 'SHGetKnownFolderPath',
                                                                                      'WINSTA.dll': 'WinStationGetAllProcesses',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchCombine',
                                                                                      'msvcrt.dll': '_cexit',
                                                                                      'ntdll.dll': 'EtwEventUnregister',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'RegDeleteKeyValueW',
                                                                                            'RegSetKeyValueW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'StartServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'CreateWellKnownSid',
                                                                                            'CloseServiceHandle',
                                                                                            'ProcessIdToSessionId',
                                                                                            'DuplicateHandle',
                                                                                            'OpenEventW',
                                                                                            'SetEvent',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateEventW',
                                                                                            'UnmapViewOfFile',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetCurrentProcessId',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleExA',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'WaitForSingleObject',
                                                                                            '__p__fmode',
                                                                                            'memset',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '__setusermatherr',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsicmp',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '_lock',
                                                                                            '_XcptFilter',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_cexit',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventUnregister',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateBindCtx',
                                                                                            'StringFromCLSID',
                                                                                            'MkParseDisplayName',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'NdrClientCall2',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcStringFreeW',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'WinStationFreeGAPMemory',
                                                                                            'WinStationGetAllProcesses',
                                                                                            'PathCchCombine',
                                                                                            'SHGetKnownFolderPath'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2304,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/baddd1785777b240daec204cc72a840c75f1cc1d428b691e3b491c5fb75eca75'},
 'bafb54ce450a431bb2967b80d8a721c9aa47dae05acb6c39019144adf390d54f': {'AddressOfEntryPoint': 353923,
                                                                      'DebugRVA': 484672,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 483328,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyW',
                                                                                      'GDI32.dll': 'TranslateCharsetInfo',
                                                                                      'KERNEL32.dll': 'LocalAlloc',
                                                                                      'OLEAUT32.dll': 'CreateErrorInfo',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'SetActiveWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetMalloc',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'LockResource',
                                                                                            'GlobalAlloc',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'GlobalFree',
                                                                                            'GetTickCount',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'CopyFileW',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'CreateEventW',
                                                                                            'lstrcatW',
                                                                                            'GetTempFileNameW',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'GetVersionExW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'lstrcmpW',
                                                                                            'lstrcmpiW',
                                                                                            'VerLanguageNameW',
                                                                                            'MoveFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'CompareFileTime',
                                                                                            'FindFirstFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetFileAttributesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'CreateDirectoryW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemInfo',
                                                                                            'MulDiv',
                                                                                            'IsValidLocale',
                                                                                            'GetVersion',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCommandLineW',
                                                                                            'GetFileAttributesW',
                                                                                            'IsBadReadPtr',
                                                                                            'VirtualQuery',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcpyA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentThread',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetACP',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTempPathW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsBadCodePtr',
                                                                                            'GetUserDefaultLCID',
                                                                                            'ReadFile',
                                                                                            'GetLocaleInfoA',
                                                                                            'IsValidCodePage',
                                                                                            'GetCPInfo',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsBadWritePtr',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetVersionExA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'FatalAppExitA',
                                                                                            'TlsGetValue',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleA',
                                                                                            'RtlUnwind',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'lstrcpynA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'lstrcpynW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'SearchPathW',
                                                                                            'VirtualProtect',
                                                                                            'GetCurrentProcessId',
                                                                                            'FindResourceExW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLocalTime',
                                                                                            'TerminateProcess',
                                                                                            'GetProcessTimes',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetErrorMode',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'lstrcpyW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'DuplicateHandle',
                                                                                            'GetThreadContext',
                                                                                            'VirtualProtectEx',
                                                                                            'WriteProcessMemory',
                                                                                            'FlushInstructionCache',
                                                                                            'SetThreadContext',
                                                                                            'ResumeThread',
                                                                                            'DeleteFileW',
                                                                                            'Sleep',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFilePointer',
                                                                                            'GetProcessHeap',
                                                                                            'WriteFile',
                                                                                            'HeapAlloc',
                                                                                            'GetModuleFileNameW',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'EnumSystemLocalesA',
                                                                                            'HeapFree',
                                                                                            'GetOEMCP',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetTimeFormatA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'GetDateFormatA',
                                                                                            'RaiseException',
                                                                                            'InterlockedExchange',
                                                                                            'lstrcmpA',
                                                                                            'SetStdHandle',
                                                                                            'LocalAlloc',
                                                                                            'CreateDialogParamW',
                                                                                            'SetCursor',
                                                                                            'GetWindow',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'EnableWindow',
                                                                                            'MessageBoxW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetDC',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'IsDialogMessageW',
                                                                                            'SendMessageW',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetRect',
                                                                                            'FindWindowW',
                                                                                            'IntersectRect',
                                                                                            'SubtractRect',
                                                                                            'IsWindow',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'CharNextW',
                                                                                            'LoadImageW',
                                                                                            'GetWindowLongW',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'SetWindowLongW',
                                                                                            'GetClientRect',
                                                                                            'ClientToScreen',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowDC',
                                                                                            'ReleaseDC',
                                                                                            'EndDialog',
                                                                                            'SetWindowTextW',
                                                                                            'GetDlgItem',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'GetDesktopWindow',
                                                                                            'wsprintfW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'PostMessageW',
                                                                                            'KillTimer',
                                                                                            'PostQuitMessage',
                                                                                            'SetTimer',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'MoveWindow',
                                                                                            'wvsprintfW',
                                                                                            'CharPrevW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'ExitWindowsEx',
                                                                                            'CharUpperW',
                                                                                            'WaitForInputIdle',
                                                                                            'SetActiveWindow',
                                                                                            'UnrealizeObject',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'GetDIBColorTable',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'CreatePalette',
                                                                                            'CreateHalftonePalette',
                                                                                            'CreateFontW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'GetObjectW',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBitmap',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'TranslateCharsetInfo',
                                                                                            'RegEnumKeyW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExA',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegEnumValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyW',
                                                                                            'RegCreateKeyW',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CreateItemMoniker',
                                                                                            'GetRunningObjectTable',
                                                                                            'ProgIDFromCLSID',
                                                                                            'StringFromGUID2',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateGuid',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'GetErrorInfo',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'UuidToStringW',
                                                                                            'UuidCreate',
                                                                                            'UuidFromStringW',
                                                                                            'RpcStringFreeW'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 325,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 328204,
                                                                      'SectionNames': {'.data\x00\x00\x00': 43008,
                                                                                       '.rdata\x00\x00': 79360,
                                                                                       '.rsrc\x00\x00\x00': 328704,
                                                                                       '.text\x00\x00\x00': 476672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bafb54ce450a431bb2967b80d8a721c9aa47dae05acb6c39019144adf390d54f'},
 'bafb6b0fe18ca094691b912d68c782e59be615436e7a320e7e9cffb285528499': {'AddressOfEntryPoint': 8015,
                                                                      'DebugRVA': 12640,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'InterlockedExchange',
                                                                                      'MSVCR100.dll': '_onexit',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'USER32.dll': 'GetMessageA',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'LocalFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'InterlockedExchange',
                                                                                            'TranslateMessage',
                                                                                            'TranslateAcceleratorA',
                                                                                            'DispatchMessageA',
                                                                                            'LoadAcceleratorsA',
                                                                                            'PostQuitMessage',
                                                                                            'LoadStringA',
                                                                                            'GetMessageA',
                                                                                            'OleRun',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'GetErrorInfo',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_ismbblead',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler4_common',
                                                                                            '_crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_mbsnbcmp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_onexit'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 350868,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 351232,
                                                                                       '.text\x00\x00\x00': 6144,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bafb6b0fe18ca094691b912d68c782e59be615436e7a320e7e9cffb285528499'},
 'bb39024c490bd804bab068ac14cf7cbabba1c2e7e3dfeb495d23b549955cebd1': {'AddressOfEntryPoint': 14640,
                                                                      'DebugRVA': 4352,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'GenerateConsoleCtrlEvent',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetConsoleWindow',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadPreferredUILanguages',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceLoggerHandle',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_lock',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '__dllonexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'mbtowc',
                                                                                            '_wcsicmp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcessHeap',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableFlags',
                                                                                            'TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExW',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'AllocConsole',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'CreateProcessW',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'CloseHandle',
                                                                                            'SetConsoleOutputCP',
                                                                                            'WriteConsoleInputW',
                                                                                            'SetConsoleCP',
                                                                                            'GenerateConsoleCtrlEvent',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetConsoleWindow',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1824,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 14848},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bb39024c490bd804bab068ac14cf7cbabba1c2e7e3dfeb495d23b549955cebd1'},
 'bb783a594067db5cb4e43030d9e6928636555a9ce6aa3533532731975094230a': {'AddressOfEntryPoint': 308976,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 315392,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'FindClose',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'msvcrt.dll': '__set_app_type'},
                                                                      'ImportedFunctions': ['SysStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SysStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'CharUpperW',
                                                                                            'OpenProcessToken',
                                                                                            'GetFileSecurityW',
                                                                                            'SetFileSecurityW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegCloseKey',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__C_specific_handler',
                                                                                            '_beginthreadex',
                                                                                            '_isatty',
                                                                                            '_purecall',
                                                                                            'strlen',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'wcsstr',
                                                                                            '_cexit',
                                                                                            'wcscmp',
                                                                                            'strcmp',
                                                                                            'memmove',
                                                                                            'fflush',
                                                                                            'fputc',
                                                                                            'fputs',
                                                                                            '_iob',
                                                                                            'fgetc',
                                                                                            'fclose',
                                                                                            'free',
                                                                                            '_CxxThrowException',
                                                                                            'malloc',
                                                                                            '__CxxFrameHandler',
                                                                                            'memcpy',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSection',
                                                                                            'LocalFree',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'SetFileApisToOEM',
                                                                                            'GetCommandLineW',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetProcessTimes',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetProcessAffinityMask',
                                                                                            'OpenEventW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingW',
                                                                                            'GetStdHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetSystemInfo',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CompareFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetEndOfFile',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'DeviceIoControl',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'CreateFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'RemoveDirectoryW',
                                                                                            'MoveFileW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'SetLastError',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'FindClose'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 123,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 24576,
                                                                                       '.rdata\x00\x00': 110592,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 307712},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bb783a594067db5cb4e43030d9e6928636555a9ce6aa3533532731975094230a'},
 'bb837fa21e4dca9c61df68aea4f0635b3a695b5c495ef500b971e3391927e2bb': {'AddressOfEntryPoint': 23408,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'IPHLPAPI.DLL': 'ParseNetworkString',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'GetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'TerminateProcess',
                                                                                            'SetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLastError',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'wcstoul',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            '__set_app_type',
                                                                                            'wcsrchr',
                                                                                            '_vsnprintf',
                                                                                            'wcschr',
                                                                                            'memcpy',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'memset',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'ConvertInterfaceLuidToGuid',
                                                                                            'ConvertInterfacePhysicalAddressToLuid',
                                                                                            'ConvertStringToInterfacePhysicalAddress',
                                                                                            'ConvertInterfaceAliasToLuid',
                                                                                            'ConvertInterfaceNameToLuidW',
                                                                                            'ParseNetworkString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 22528},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/bb837fa21e4dca9c61df68aea4f0635b3a695b5c495ef500b971e3391927e2bb'},
 'bb8ec51d8faad286833ea9f71575a6244f3a64fdb510c933930bf48b322314a3': {'AddressOfEntryPoint': 23879,
                                                                      'DebugRVA': 4656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'lstrlenA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            'lstrcatA',
                                                                                            'lstrcpyA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetShortPathNameA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrcmpiA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetProcAddress',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceA',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'LoadLibraryExA',
                                                                                            'lstrcpynA',
                                                                                            'GetVolumeInformationA',
                                                                                            'FormatMessageA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemInfo',
                                                                                            'CreateMutexA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'TerminateThread',
                                                                                            'GetDriveTypeA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ReadFile',
                                                                                            'LoadLibraryA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'MulDiv',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'FreeLibrary',
                                                                                            'GlobalAlloc',
                                                                                            'GetDeviceCaps',
                                                                                            'ExitWindowsEx',
                                                                                            'wsprintfA',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'CharPrevA',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'CallWindowProcA',
                                                                                            'DispatchMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageA',
                                                                                            'SendMessageA',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetWindowRect',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'MessageBoxA',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextA',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBeep',
                                                                                            'SetDlgItemTextA',
                                                                                            'LoadStringA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 132,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 647960,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 648192,
                                                                                       '.text\x00\x00\x00': 36864},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bb8ec51d8faad286833ea9f71575a6244f3a64fdb510c933930bf48b322314a3'},
 'bbd0be7bd07c90aa690c6484b765d19a02bf5c60841d6497d8395bc5b1f976d2': {'AddressOfEntryPoint': 101424,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 376832,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'AUTHZ.dll': 'AuthzInitializeResourceManager',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'PrintDlgExW',
                                                                                      'GDI32.dll': 'PatBlt',
                                                                                      'KERNEL32.dll': 'GlobalLock',
                                                                                      'SHELL32.dll': 'ShellAboutW',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'USER32.dll': 'CharLowerW',
                                                                                      'UxTheme.dll': 'SetWindowTheme',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchAddBackslash',
                                                                                      'clb.dll': 'ClbSetColumnWidths',
                                                                                      'msvcrt.dll': 'memmove',
                                                                                      'ntdll.dll': 'RtlCreateUnicodeString',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'ulib.dll': '?Resize@DSTRING@@UAEEK@Z'},
                                                                      'ImportedFunctions': ['RegEnumKeyW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegRenameKey',
                                                                                            'OpenProcessToken',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'RegQueryValueExW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'GetSecurityInfo',
                                                                                            'RegSetKeySecurity',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegRestoreKeyW',
                                                                                            'RegSetValueExA',
                                                                                            'RegSetValueW',
                                                                                            'RegSaveKeyW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegUnLoadKeyW',
                                                                                            'GetSidSubAuthority',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'MapGenericMask',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'LookupAccountSidW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'SetSecurityInfo',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'GetInheritanceSourceW',
                                                                                            'SetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'RegFlushKey',
                                                                                            'RegCloseKey',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'MulDiv',
                                                                                            'GetTimeFormatW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetDateFormatW',
                                                                                            'DeleteFileW',
                                                                                            'GetLastError',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpW',
                                                                                            'CreateFileW',
                                                                                            'GlobalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GetComputerNameW',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'FormatMessageW',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetLongPathNameW',
                                                                                            'GetThreadLocale',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetFileSize',
                                                                                            'SearchPathW',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'GlobalLock',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'EndPage',
                                                                                            'SetViewportOrgEx',
                                                                                            'StartPage',
                                                                                            'DeleteDC',
                                                                                            'SetAbortProc',
                                                                                            'StartDocW',
                                                                                            'EndDoc',
                                                                                            'AbortDoc',
                                                                                            'CreateBitmap',
                                                                                            'CreatePatternBrush',
                                                                                            'ExtTextOutW',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'GetTextMetricsW',
                                                                                            'SelectClipRgn',
                                                                                            'ExcludeClipRect',
                                                                                            'PatBlt',
                                                                                            'CheckMenuItem',
                                                                                            'GetProcessDefaultLayout',
                                                                                            'SetMenuItemInfoW',
                                                                                            'EndDeferWindowPos',
                                                                                            'DestroyIcon',
                                                                                            'SetWindowTextW',
                                                                                            'EnableWindow',
                                                                                            'UpdateWindow',
                                                                                            'BeginDeferWindowPos',
                                                                                            'SetCapture',
                                                                                            'InsertMenuW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'CreateWindowExW',
                                                                                            'DrawMenuBar',
                                                                                            'ShowWindow',
                                                                                            'LoadStringW',
                                                                                            'GetSysColor',
                                                                                            'SetCursorPos',
                                                                                            'GetWindowPlacement',
                                                                                            'LoadIconW',
                                                                                            'RegisterClassExW',
                                                                                            'GetMenu',
                                                                                            'ShowCursor',
                                                                                            'InsertMenuItemW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'DeleteMenu',
                                                                                            'PostMessageW',
                                                                                            'LoadImageW',
                                                                                            'GetMenuItemID',
                                                                                            'IsIconic',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'ScreenToClient',
                                                                                            'SetCursor',
                                                                                            'SetWindowPlacement',
                                                                                            'ClientToScreen',
                                                                                            'CreateDialogParamW',
                                                                                            'CheckDlgButton',
                                                                                            'DestroyWindow',
                                                                                            'GetMessagePos',
                                                                                            'IntersectRect',
                                                                                            'DispatchMessageW',
                                                                                            'GetClientRect',
                                                                                            'DrawAnimatedRects',
                                                                                            'BringWindowToTop',
                                                                                            'LoadAcceleratorsW',
                                                                                            'TranslateMessage',
                                                                                            'FindWindowW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'CharNextW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetWindow',
                                                                                            'PeekMessageW',
                                                                                            'IsDialogMessageW',
                                                                                            'CharUpperBuffW',
                                                                                            'CharUpperW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'KillTimer',
                                                                                            'GetKeyState',
                                                                                            'GetSubMenu',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'LoadCursorW',
                                                                                            'MessageBeep',
                                                                                            'SetFocus',
                                                                                            'ShowCaret',
                                                                                            'BeginPaint',
                                                                                            'GetDC',
                                                                                            'TrackPopupMenuEx',
                                                                                            'InvalidateRect',
                                                                                            'LoadMenuW',
                                                                                            'GetWindowLongW',
                                                                                            'GetClipboardData',
                                                                                            'ReleaseDC',
                                                                                            'EnableMenuItem',
                                                                                            'EmptyClipboard',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'EndDialog',
                                                                                            'DestroyCaret',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetDlgItemInt',
                                                                                            'CallWindowProcW',
                                                                                            'GetParent',
                                                                                            'GetWindowTextW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckRadioButton',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SetWindowPos',
                                                                                            'CreateCaret',
                                                                                            'OpenClipboard',
                                                                                            'GetDlgItemTextW',
                                                                                            'SendMessageW',
                                                                                            'EndPaint',
                                                                                            'CloseClipboard',
                                                                                            'SetTimer',
                                                                                            'HideCaret',
                                                                                            'ModifyMenuW',
                                                                                            'GetWindowRect',
                                                                                            'ReleaseCapture',
                                                                                            'ScrollWindowEx',
                                                                                            'RegisterClassW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetCaretPos',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'SetDlgItemTextW',
                                                                                            'MapWindowPoints',
                                                                                            'SetClipboardData',
                                                                                            'DestroyMenu',
                                                                                            'SetScrollInfo',
                                                                                            'DefWindowProcW',
                                                                                            'MoveWindow',
                                                                                            'DeferWindowPos',
                                                                                            'CharLowerW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            'memcpy',
                                                                                            '_vsnwprintf',
                                                                                            'atoi',
                                                                                            'wcschr',
                                                                                            'wcsrchr',
                                                                                            'wcsncmp',
                                                                                            '_wcsnicmp',
                                                                                            '_resetstkoflw',
                                                                                            'iswprint',
                                                                                            '_purecall',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            'memset',
                                                                                            'memmove',
                                                                                            'PathCchAddBackslash',
                                                                                            'StrChrIW',
                                                                                            'StrChrW',
                                                                                            'StrRChrW',
                                                                                            'StrToIntW',
                                                                                            'StrStrIW',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'CreateStatusWindowW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_SetBkColor',
                                                                                            'InitCommonControlsEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'PrintDlgExW',
                                                                                            'SHGetStockIconInfo',
                                                                                            'DragFinish',
                                                                                            'DragQueryFileW',
                                                                                            'ShellAboutW',
                                                                                            'AuthzInitializeContextFromSid',
                                                                                            'AuthzFreeContext',
                                                                                            'AuthzFreeResourceManager',
                                                                                            'AuthzAccessCheck',
                                                                                            'AuthzInitializeResourceManager',
                                                                                            'CoInitializeEx',
                                                                                            'ReleaseStgMedium',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            '?SPrintfAppend@DSTRING@@UAAEPBGZZ',
                                                                                            '?SPrintf@DSTRING@@UAAEPBGZZ',
                                                                                            '?NewBuf@DSTRING@@UAEEK@Z',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '??0OBJECT@@IAE@XZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '?Resize@DSTRING@@UAEEK@Z',
                                                                                            'ClbAddData',
                                                                                            'ClbSetColumnWidths',
                                                                                            'RtlIoDecodeMemIoResource',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlCmDecodeMemIoResource',
                                                                                            'RtlCreateUnicodeString',
                                                                                            'SetWindowTheme'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 316,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 13448,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 9216,
                                                                                       '.reloc\x00\x00': 8704,
                                                                                       '.rsrc\x00\x00\x00': 13824,
                                                                                       '.text\x00\x00\x00': 100352},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bbd0be7bd07c90aa690c6484b765d19a02bf5c60841d6497d8395bc5b1f976d2'},
 'bbeceb8dbeb159152b1d1b63aa4a23bb97a93ee7e63271213c181d3064f2ddf3': {'AddressOfEntryPoint': 13680,
                                                                      'DebugRVA': 4128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetThreadToken',
                                                                                      'KERNEL32.dll': 'SetThreadPreferredUILanguages',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateInstance',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'iisutil.dll': '??0STRU@@QAE@PAGK@Z',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlTimeToTimeFields'},
                                                                      'ImportedFunctions': ['PerfSetCounterSetInfo',
                                                                                            'PerfStartProvider',
                                                                                            'PerfStopProvider',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenThreadToken',
                                                                                            'RevertToSelf',
                                                                                            'SetThreadToken',
                                                                                            'SetErrorMode',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcessAffinityMask',
                                                                                            'GetCurrentProcess',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetConsoleTitleW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'GetCurrentThread',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wcsicmp',
                                                                                            'wcstoul',
                                                                                            'swprintf_s',
                                                                                            '_wsetlocale',
                                                                                            '_ultow',
                                                                                            'towupper',
                                                                                            '_getwch',
                                                                                            'wprintf',
                                                                                            '_vsnwprintf',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlSystemTimeToLocalTime',
                                                                                            'NtQuerySystemTime',
                                                                                            'RtlTimeToTimeFields',
                                                                                            '?Copy@STRU@@QAEJPBG@Z',
                                                                                            '??1STRU@@QAE@XZ',
                                                                                            'PuLoadDebugFlagsFromRegStr',
                                                                                            'InitializeSdFromProcessToken',
                                                                                            'MakePathCanonicalizationProof',
                                                                                            'PuDbgPrintError',
                                                                                            'PuDbgPrint',
                                                                                            '??0STRU@@QAE@XZ',
                                                                                            '?Append@STRU@@QAEJPBG@Z',
                                                                                            '?Copy@STRU@@QAEJPBGK@Z',
                                                                                            '?Resize@STRU@@QAEJK@Z',
                                                                                            '??0STRU@@QAE@PAGK@Z'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 11264},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bbeceb8dbeb159152b1d1b63aa4a23bb97a93ee7e63271213c181d3064f2ddf3'},
 'bbf6d9ed2664f6bfcce40348a0cbd73c55ba364cec8649b2bf332e3301ed7a19': {'AddressOfEntryPoint': 13440,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'msvcrt.dll': '_vsnprintf',
                                                                                      'ntdll.dll': 'DbgPrintEx',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['EventUnregister',
                                                                                            'MakeAbsoluteSD',
                                                                                            'EventRegister',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EventWrite',
                                                                                            'GetTokenInformation',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'AllocConsole',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'CreateEventW',
                                                                                            'GetLastError',
                                                                                            '_amsg_exit',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'memset',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'DbgPrintEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 11776},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bbf6d9ed2664f6bfcce40348a0cbd73c55ba364cec8649b2bf332e3301ed7a19'},
 'bc32ec3f42c1d48fec5f2320d7e9fb026cac68a40fc573c73f731735a8653d96': {'AddressOfEntryPoint': 45516,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EqualSid',
                                                                                      'GDI32.dll': 'GetObjectA',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'LZ32.dll': 'LZOpenFileA',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoMarshalInterThreadInterfaceInStream'},
                                                                      'ImportedFunctions': ['VerInstallFileA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenA',
                                                                                            'CompareStringW',
                                                                                            'GetVersionExA',
                                                                                            'DeleteFileA',
                                                                                            'CompareStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTempFileNameA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetTickCount',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'lstrcpyA',
                                                                                            'SetErrorMode',
                                                                                            'FreeLibrary',
                                                                                            'RemoveDirectoryA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateThread',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'OpenEventA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'HeapCreate',
                                                                                            'lstrcpynA',
                                                                                            'lstrcatA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrlenW',
                                                                                            'FindFirstFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'MoveFileA',
                                                                                            'FindResourceExA',
                                                                                            'GetFileSize',
                                                                                            'HeapDestroy',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'SizeofResource',
                                                                                            'GetStartupInfoA',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'DebugBreak',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'SearchPathA',
                                                                                            'ResetEvent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SystemTimeToFileTime',
                                                                                            'lstrcmpA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentThread',
                                                                                            'GetVersion',
                                                                                            'IsBadReadPtr',
                                                                                            'ReadFile',
                                                                                            'Sleep',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'CreateEventA',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'CreateFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'CreateProcessA',
                                                                                            'GetCurrentProcess',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'LoadStringA',
                                                                                            'CharNextA',
                                                                                            'PeekMessageA',
                                                                                            'PostThreadMessageA',
                                                                                            'CharUpperA',
                                                                                            'SetTimer',
                                                                                            'SetWindowRgn',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'SetActiveWindow',
                                                                                            'CharLowerBuffA',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'LoadIconA',
                                                                                            'GetWindowRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'SetWindowPos',
                                                                                            'CharLowerA',
                                                                                            'GetWindowTextA',
                                                                                            'GetDesktopWindow',
                                                                                            'ScreenToClient',
                                                                                            'MoveWindow',
                                                                                            'KillTimer',
                                                                                            'DestroyWindow',
                                                                                            'GetMessageA',
                                                                                            'IsDialogMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowTextA',
                                                                                            'ShowWindow',
                                                                                            'EndDialog',
                                                                                            'wsprintfA',
                                                                                            'CreateFontIndirectA',
                                                                                            'LPtoDP',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'DeleteObject',
                                                                                            'GetObjectA',
                                                                                            'RegCreateKeyExA',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueA',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromGUID2',
                                                                                            'GetRunningObjectTable',
                                                                                            'CoCreateInstance',
                                                                                            'CoCreateGuid',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoInitialize',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoUninitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'SysAllocString',
                                                                                            'LZClose',
                                                                                            'LZCopy',
                                                                                            'LZOpenFileA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 177,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 186812,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 186880,
                                                                                       '.text\x00\x00\x00': 58880},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bc32ec3f42c1d48fec5f2320d7e9fb026cac68a40fc573c73f731735a8653d96'},
 'bc706b94bf2046f1b255d674ddbed58ffd2ad2bcba56ade9f3a285349c27fe3a': {'AddressOfEntryPoint': 22898,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'ReadFile',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenProcessToken',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2440,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 922112,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bc706b94bf2046f1b255d674ddbed58ffd2ad2bcba56ade9f3a285349c27fe3a'},
 'bc770f47a3d8fb4f08bfc3150cc2065e42d5f3653ea102daf180e5cdd261cfc9': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 603416,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 603648,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bc770f47a3d8fb4f08bfc3150cc2065e42d5f3653ea102daf180e5cdd261cfc9'},
 'bc8b17f12b3cbbbaff23389de5d8eb6a65ee18293648a66ff62b695089289731': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bc8b17f12b3cbbbaff23389de5d8eb6a65ee18293648a66ff62b695089289731'},
 'bc93b7edaeb63fd12b221c47ee2234e9a1bdfd57314f128dad993c2bd8c1522f': {'AddressOfEntryPoint': 75744,
                                                                      'DebugRVA': 322072,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 331776,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'FastProx.dll': '?SetThreadSecurity@CWbemCallSecurity@@UAGJPAU_IWmiThreadSecHandle@@@Z',
                                                                                      'NCObjAPI.DLL': 'WmiEventSourceDisconnect',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetStartupInfoA',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'LCMapStringW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'UnmapViewOfFile',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'SetThreadToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'GetStringTypeExW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForMultipleObjectsEx',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'ChangeTimerQueueTimer',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventWrite',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwTraceMessage',
                                                                                      'wbemcomn.dll': '?_Free@CMUILocale@@SGHPAX@Z'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '_acmdln',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_purecall',
                                                                                            '_except_handler4_common',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '_itow',
                                                                                            'wcstok',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '_vsnwprintf',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            'memset',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'MapGenericMask',
                                                                                            'AccessCheck',
                                                                                            'RevertToSelf',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'AddAce',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetAclInformation',
                                                                                            'MakeAbsoluteSD',
                                                                                            'InitializeAcl',
                                                                                            'CopySid',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'GetLengthSid',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetTokenInformation',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'TlsAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcessToken',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'TerminateProcess',
                                                                                            'TlsFree',
                                                                                            'SetThreadToken',
                                                                                            'GetCommandLineW',
                                                                                            'CompareStringW',
                                                                                            'GetStringTypeExW',
                                                                                            'HeapCreate',
                                                                                            'GetProcessHeap',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSetInformation',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenFileMappingW',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LCMapStringW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ChangeTimerQueueTimer',
                                                                                            'GetStartupInfoA',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'NtQuerySystemInformation',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwTraceMessage',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            '?Release@CWbemCallSecurity@@UAGKXZ',
                                                                                            '?QueryInterface@CWbemCallSecurity@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?New@CWbemCallSecurity@@SGPAV1@XZ',
                                                                                            '?AddRef@CWbemCallSecurity@@UAGKXZ',
                                                                                            '?GetThreadSecurity@CWbemCallSecurity@@UAGJW4tag_WMI_THREAD_SECURITY_ORIGIN@@PAPAU_IWmiThreadSecHandle@@@Z',
                                                                                            '?SetThreadSecurity@CWbemCallSecurity@@UAGJPAU_IWmiThreadSecHandle@@@Z',
                                                                                            'WmiSetAndCommitObject',
                                                                                            'WmiEventSourceConnect',
                                                                                            'WmiCreateObjectWithFormat',
                                                                                            'WmiDestroyObject',
                                                                                            'WmiEventSourceDisconnect',
                                                                                            '?BreakOnDbgAndRenterLoop@@YGKXZ',
                                                                                            '?GetMemLogObject@@YGPAVCMemoryLog@@XZ',
                                                                                            '?Write@CMemoryLog@@QAEXJ@Z',
                                                                                            '?_ThrowMemoryException_@@YGXXZ',
                                                                                            '?Init@CPublishWMIOperationEvent@@SGJXZ',
                                                                                            '?PublishProviderStarted@CPublishWMIOperationEvent@@SGJPAGJ0K0@Z',
                                                                                            '?SetPreferredLanguages@CMUILocale@@SGJKPBGPAK@Z',
                                                                                            '?GetPreferredLanguages@CMUILocale@@SGJKPAPAGPAK@Z',
                                                                                            '?_Free@CMUILocale@@SGHPAX@Z',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 25,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 64072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 21504,
                                                                                       '.rsrc\x00\x00\x00': 64512,
                                                                                       '.text\x00\x00\x00': 318464},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bc93b7edaeb63fd12b221c47ee2234e9a1bdfd57314f128dad993c2bd8c1522f'},
 'bc9cd1e95d6fd6e4428ca2ae85e48a84ff4fe06cd5c5ac3a33eb762fcdb0ab5c': {'AddressOfEntryPoint': 8752,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CreateThread',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['LoadLibraryExW',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'WaitForMultipleObjects',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'CreateThread',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wsetlocale',
                                                                                            '_iob',
                                                                                            '_vsnwprintf',
                                                                                            'printf',
                                                                                            'fgetws',
                                                                                            '_flushall',
                                                                                            '_wcsicmp',
                                                                                            '_lock',
                                                                                            'memset',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleA',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 60,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bc9cd1e95d6fd6e4428ca2ae85e48a84ff4fe06cd5c5ac3a33eb762fcdb0ab5c'},
 'bd7ea44dfd278c44ab7e49437d44d6c279bb1da1f92c9afefcb02babaa00b360': {'AddressOfEntryPoint': 11680,
                                                                      'DebugRVA': 32892,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileTime',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'CreateDirectoryExW',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'ifsutil.dll': '?QueryFreeDiskSpace@IFS_SYSTEM@@SGEPBVWSTRING@@PAVBIG_INT@@@Z',
                                                                                      'msvcrt.dll': '_XcptFilter',
                                                                                      'ntdll.dll': 'NtSetInformationProcess',
                                                                                      'ulib.dll': '?TruncateBase@PATH@@QAEEXZ'},
                                                                      'ImportedFunctions': ['__setusermatherr',
                                                                                            '_wgetenv',
                                                                                            'towupper',
                                                                                            'exit',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '_wcsnicmp',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z',
                                                                                            '?QueryString@WSTRING@@QBEPAV1@KK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?GetPattern@ARGUMENT@@QAEPAVWSTRING@@XZ',
                                                                                            '?GetLexeme@ARGUMENT@@QAEPAVWSTRING@@XZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?DeleteAllMembers@ARRAY@@UAEEXZ',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@TIMEINFO_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1TIMEINFO_ARGUMENT@@UAE@XZ',
                                                                                            '??0TIMEINFO_ARGUMENT@@QAE@XZ',
                                                                                            '?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z',
                                                                                            '?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z',
                                                                                            '?PathWasTooBig@PATH@@QAEEXZ',
                                                                                            '?Truncate@WSTRING@@QAEKK@Z',
                                                                                            '?Strchr@WSTRING@@QBEKGK@Z',
                                                                                            '?Strupr@WSTRING@@QAEPAV1@XZ',
                                                                                            '?Strcmp@WSTRING@@QBEJPBV1@@Z',
                                                                                            '?GetWSTR@WSTRING@@QBEPBGXZ',
                                                                                            '?QueryChAt@WSTRING@@QBEGK@Z',
                                                                                            '?QueryChCount@WSTRING@@QBEKXZ',
                                                                                            '?ExitProgram@PROGRAM@@SGXK@Z',
                                                                                            '?QueryResourceString@BASE_SYSTEM@@SAEPAVWSTRING@@KPBDZZ',
                                                                                            '?Initialize@CLASS_DESCRIPTOR@@QAEEXZ',
                                                                                            '??0CLASS_DESCRIPTOR@@QAE@XZ',
                                                                                            '?FindFirstFileW@@YGPAXPBVPATH@@PAU_WIN32_FIND_DATAW@@@Z',
                                                                                            '??OTIMEINFO@@QBEEV0@@Z',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '?QueryFullPathString@PATH@@QBEPAVWSTRING@@XZ',
                                                                                            '?QueryComponentArray@PATH@@QBEPAVARRAY@@PAV2@@Z',
                                                                                            '?ModifyName@PATH@@QAEEPBVWSTRING@@@Z',
                                                                                            '?HasWildCard@PATH@@QBEEXZ',
                                                                                            '?EndsWithDelimiter@PATH@@QBEEXZ',
                                                                                            '?Copy@FSN_FILE@@QBEEPAVPATH@@PAW4_COPY_ERROR@@KP6GKT_LARGE_INTEGER@@222KKPAX33@Z3PAH@Z',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '?Resize@FSTRING@@UAEEK@Z',
                                                                                            '??0FSTRING@@QAE@XZ',
                                                                                            '?UseAlternateName@FSNODE@@QAEEXZ',
                                                                                            '?SetAttributes@FSNODE@@QAEEKPAK@Z',
                                                                                            '?SetTimeInfo@FSN_FILTER@@QAEEPBVTIMEINFO@@W4FSN_TIME@@G@Z',
                                                                                            '?SetAttributes@FSN_FILTER@@QAEEKKK@Z',
                                                                                            '?SetFileName@FSN_FILTER@@QAEEPBD@Z',
                                                                                            '?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z',
                                                                                            '?DoesNodeMatch@FSN_FILTER@@QAEEPAVFSNODE@@@Z',
                                                                                            '?Initialize@FSN_FILTER@@QAEEXZ',
                                                                                            '??0FSN_FILTER@@QAE@XZ',
                                                                                            '??0PROGRAM@@IAE@XZ',
                                                                                            '?ValidateVersion@PROGRAM@@UBEXKK@Z',
                                                                                            '?Usage@PROGRAM@@UBEXXZ',
                                                                                            '?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?Fatal@PROGRAM@@UBEXXZ',
                                                                                            '?Fatal@PROGRAM@@UBAXKKPADZZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z',
                                                                                            '?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ',
                                                                                            '??1PROGRAM@@UAE@XZ',
                                                                                            '?Initialize@PROGRAM@@QAEEKKK@Z',
                                                                                            '?GetNext@FSN_DIRECTORY@@QAEPAVFSNODE@@PAPAXPAK@Z',
                                                                                            '?IsEmpty@FSN_DIRECTORY@@QBEEXZ',
                                                                                            '?DeleteDirectory@FSN_DIRECTORY@@QAEEXZ',
                                                                                            '?CreateDirectoryPath@FSN_DIRECTORY@@QBEPAV1@PBVPATH@@@Z',
                                                                                            '?Display@MESSAGE@@QAAEPBDZZ',
                                                                                            '?DisplaySystemError@SYSTEM@@SGXKH@Z',
                                                                                            '?QueryWindowsErrorMessage@SYSTEM@@SGEKPAVWSTRING@@@Z',
                                                                                            '?QueryDriveType@SYSTEM@@SG?AW4DRIVE_TYPE@@PBVWSTRING@@@Z',
                                                                                            '?RemoveNode@SYSTEM@@SGEPAPAVFSNODE@@E@Z',
                                                                                            '?MakeDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@0PAW4_COPY_ERROR@@P6GKT_LARGE_INTEGER@@222KKPAX33@Z3PAHK@Z',
                                                                                            '?GetPFlagBreak@KEYBOARD@@QBEQAHXZ',
                                                                                            '?GotABreak@KEYBOARD@@SGEXZ',
                                                                                            '?EnableLineMode@KEYBOARD@@QAEEXZ',
                                                                                            '?EnableBreakHandling@KEYBOARD@@SGEXZ',
                                                                                            '?DisableLineMode@KEYBOARD@@QAEEXZ',
                                                                                            '?DisableBreakHandling@KEYBOARD@@SGEXZ',
                                                                                            '?Initialize@KEYBOARD@@QAEEEE@Z',
                                                                                            '?Cast@KEYBOARD@@SGPAV1@PBVOBJECT@@@Z',
                                                                                            '??0KEYBOARD@@QAE@XZ',
                                                                                            '??0OBJECT@@QAE@ABV0@@Z',
                                                                                            '??1FSTRING@@UAE@XZ',
                                                                                            '?Initialize@FSTRING@@QAEPAVWSTRING@@PAGK@Z',
                                                                                            '??9WSTRING@@QBEEABV0@@Z',
                                                                                            '??8WSTRING@@QBEEABV0@@Z',
                                                                                            '?Strstr@WSTRING@@QBEKPBV1@@Z',
                                                                                            '?Stricmp@WSTRING@@QBEJPBV1@@Z',
                                                                                            '?SetClassDescriptor@OBJECT@@IAEXPBVCLASS_DESCRIPTOR@@@Z',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '?Resize@DSTRING@@UAEEK@Z',
                                                                                            '?NewBuf@DSTRING@@UAEEK@Z',
                                                                                            '?SPrintf@DSTRING@@UAAEPBGZZ',
                                                                                            '?SPrintfAppend@DSTRING@@UAAEPBGZZ',
                                                                                            '??0PATH_ARGUMENT@@QAE@XZ',
                                                                                            '??1PATH_ARGUMENT@@UAE@XZ',
                                                                                            '?Initialize@PATH_ARGUMENT@@QAEEPADE@Z',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '?Initialize@PATH@@QAEEPBV1@E@Z',
                                                                                            '?Initialize@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '?Initialize@PATH@@QAEEPBGE@Z',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '?AppendBase@PATH@@QAEEPBVWSTRING@@E@Z',
                                                                                            '?TruncateNameAtColon@PATH@@QAEXXZ',
                                                                                            '??0TIMEINFO@@QAE@XZ',
                                                                                            '?Initialize@TIMEINFO@@QAEXPBV1@@Z',
                                                                                            '?ConvertToUTC@TIMEINFO@@QAEEXZ',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '??0STRING_ARRAY@@QAE@XZ',
                                                                                            '?Initialize@STRING_ARRAY@@QAEEKKK@Z',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?GetLexemeAt@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@K@Z',
                                                                                            '?PutMultipleSwitch@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?SetAllowSwitchGlomming@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?SetNoSpcBetweenDstAndSwitch@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?TruncateBase@PATH@@QAEEXZ',
                                                                                            '?QueryFreeDiskSpace@IFS_SYSTEM@@SGEPBVWSTRING@@PAVBIG_INT@@@Z',
                                                                                            'GetCommandLineW',
                                                                                            'SetFileTime',
                                                                                            'FindClose',
                                                                                            'GetFileTime',
                                                                                            'CreateDirectoryExW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'NtSetInformationProcess'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 170,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 8192,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 29184},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bd7ea44dfd278c44ab7e49437d44d6c279bb1da1f92c9afefcb02babaa00b360'},
 'bdb16bf6b4f2467b5a30d59c4b544c1a23a1daca6cb113273e0c3d3d69782553': {'AddressOfEntryPoint': 14464,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINSTA.dll': 'WinStationQueryInformationW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['WinStationOpenServerW',
                                                                                            'WinStationReset',
                                                                                            'WinStationNameFromLogonIdW',
                                                                                            'LogonIdFromWinStationNameW',
                                                                                            'WinStationQueryInformationW',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'Sleep',
                                                                                            'wcschr',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'memmove',
                                                                                            'wcstol',
                                                                                            '_wcsnicmp',
                                                                                            '_wcslwr',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            'fgetwc',
                                                                                            'iswctype',
                                                                                            'wcstoul',
                                                                                            'swprintf_s',
                                                                                            'memcpy',
                                                                                            '_iob',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 76,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bdb16bf6b4f2467b5a30d59c4b544c1a23a1daca6cb113273e0c3d3d69782553'},
 'bdb3b96ff30a8a3f4f020e09d0cb9771e065db376b6a9a8d504d16b12396a920': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 10911,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bdb3b96ff30a8a3f4f020e09d0cb9771e065db376b6a9a8d504d16b12396a920'},
 'bdc3d19257cb069a4aca183f7a3f88cb94ced2f14390158f1cce06f37f2530e5': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bdc3d19257cb069a4aca183f7a3f88cb94ced2f14390158f1cce06f37f2530e5'},
 'bde229bb4eb76ab2a58b46ccdeb0a0fb35990404a840dd47c4a8932f47d221a0': {'AddressOfEntryPoint': 58832,
                                                                      'DebugRVA': 4640,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetTokenInformation',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'RPCRT4.dll': 'RpcServerListen',
                                                                                      'USER32.dll': 'AttachThreadInput',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'msvcrt.dll': 'sqrt',
                                                                                      'ntdll.dll': 'NtReplyWaitReceivePort'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RevertToSelf',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetTokenInformation',
                                                                                            'SystemTimeToFileTime',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateActCtxW',
                                                                                            'ActivateActCtx',
                                                                                            'GetFullPathNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeactivateActCtx',
                                                                                            'ReleaseActCtx',
                                                                                            'LoadLibraryW',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapSetInformation',
                                                                                            'SetErrorMode',
                                                                                            'GetErrorMode',
                                                                                            'TlsSetValue',
                                                                                            'OpenProcess',
                                                                                            'DuplicateHandle',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateFileW',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetThreadpoolTimer',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetSystemTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'RaiseException',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'EnumChildWindows',
                                                                                            'GetGUIThreadInfo',
                                                                                            'IsWindow',
                                                                                            'AttachThreadInput',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            'memcpy',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            '_wtol',
                                                                                            '_wcsicmp',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_vsnwprintf',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_amsg_exit',
                                                                                            '_fmode',
                                                                                            'sqrt',
                                                                                            'GetPrinterDataW',
                                                                                            'GetPrintOutputInfo',
                                                                                            'GetPrinterDriverW',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterW',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcMgmtStopServerListening',
                                                                                            'NdrAsyncServerCall',
                                                                                            'NdrServerCall2',
                                                                                            'Ndr64AsyncServerCallAll',
                                                                                            'NdrServerCallAll',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcServerRegisterIf3',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcServerListen',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtReplyPort',
                                                                                            'NtAlpcOpenSenderThread',
                                                                                            'NtClose',
                                                                                            'NtCompleteConnectPort',
                                                                                            'NtAcceptConnectPort',
                                                                                            'NtCreatePort',
                                                                                            'RtlInitUnicodeString',
                                                                                            'TpReleasePool',
                                                                                            'TpCallbackMayRunLong',
                                                                                            'TpSetWait',
                                                                                            'TpSimpleTryPost',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'TpAllocWork',
                                                                                            'TpPostWork',
                                                                                            'TpAllocWait',
                                                                                            'TpAllocTimer',
                                                                                            'TpSetTimer',
                                                                                            'TpAllocIoCompletion',
                                                                                            'TpStartAsyncIoOperation',
                                                                                            'TpAllocAlpcCompletion',
                                                                                            'TpWaitForWork',
                                                                                            'TpReleaseWork',
                                                                                            'TpWaitForWait',
                                                                                            'TpReleaseWait',
                                                                                            'TpWaitForTimer',
                                                                                            'TpReleaseTimer',
                                                                                            'TpWaitForIoCompletion',
                                                                                            'TpReleaseIoCompletion',
                                                                                            'TpWaitForAlpcCompletion',
                                                                                            'TpReleaseAlpcCompletion',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwEventWrite',
                                                                                            'NtReplyWaitReceivePort'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 166,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 57072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 57344,
                                                                                       '.text\x00\x00\x00': 59392},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/bde229bb4eb76ab2a58b46ccdeb0a0fb35990404a840dd47c4a8932f47d221a0'},
 'bdf28cfbe67c3d4a584f1b5a1583ee3b7e48bfcd4b81f77115dea244d551a4a1': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 22888,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 23040,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bdf28cfbe67c3d4a584f1b5a1583ee3b7e48bfcd4b81f77115dea244d551a4a1'},
 'bdf333ebad3c91e5280755c07ab6eb4e8ffd4463f96617f33c25f66ef82b341f': {'AddressOfEntryPoint': 4800,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 733588,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'msvcrt.dll': 'wcstombs'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'InitializeCriticalSection',
                                                                                            'InterlockedExchange',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TlsGetValue',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            '_strdup',
                                                                                            '_stricoll',
                                                                                            '__getmainargs',
                                                                                            '__mb_cur_max',
                                                                                            '__p__environ',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_assert',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_fdopen',
                                                                                            '_fullpath',
                                                                                            '_iob',
                                                                                            '_isctype',
                                                                                            '_onexit',
                                                                                            '_pctype',
                                                                                            '_setmode',
                                                                                            '_sopen_s',
                                                                                            '_unlink',
                                                                                            'abort',
                                                                                            'atexit',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'clock',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fopen_s',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'fread',
                                                                                            'free',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'mbstowcs',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'perror',
                                                                                            'printf',
                                                                                            'realloc',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcoll',
                                                                                            'strlen',
                                                                                            'tolower',
                                                                                            'vfprintf',
                                                                                            'wcslen',
                                                                                            'wcstombs'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.eh_fram': 17920,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 431104,
                                                                                       '.text\x00\x00\x00': 264192,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/bdf333ebad3c91e5280755c07ab6eb4e8ffd4463f96617f33c25f66ef82b341f'},
 'be0f78992dfa50f6516115378f216bb8e49ed4e25e63599b7f39243355a4332b': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 18480,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 6891409244160,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 6656,
                                                                                       '.xdata\x00\x00': 512},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/be0f78992dfa50f6516115378f216bb8e49ed4e25e63599b7f39243355a4332b'},
 'be3ee03e1829dd4a86af9037f4d85529ed32d5940ab22e2b7c4c675424cd016b': {'AddressOfEntryPoint': 35808,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-base-util-l1-1-0.dll': 'IsTextUnicode',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileSize',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegSetValueExW',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegEnumKeyW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'CreateMutexW',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventUnregister',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AllocateAndInitializeSid',
                                                                                      'api-ms-win-security-provider-l1-1-0.dll': 'SetEntriesInAclW',
                                                                                      'loadperf.dll': 'SetServiceAsTrustedW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_amsg_exit',
                                                                                            '_exit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_iob',
                                                                                            'wcschr',
                                                                                            '_except_handler4_common',
                                                                                            '_vsnwprintf',
                                                                                            'fprintf',
                                                                                            '_wsplitpath_s',
                                                                                            '_cexit',
                                                                                            '_wcsicmp',
                                                                                            'wcstoul',
                                                                                            '_wtof',
                                                                                            '_wcsnicmp',
                                                                                            'floor',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'BackupPerfRegistryToFileW',
                                                                                            'LpReleaseInstallationMutex',
                                                                                            'RestorePerfRegistryFromFileW',
                                                                                            'LpAcquireInstallationMutex',
                                                                                            'LoadPerfCounterTextStringsW',
                                                                                            'UpdatePerfNameFilesW',
                                                                                            'SetServiceAsTrustedW',
                                                                                            'SearchPathW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetCommandLineW',
                                                                                            'GetStdHandle',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'EventWrite',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'Sleep',
                                                                                            'CreateMutexW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'FormatMessageW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LoadStringW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'CloseHandle',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'FreeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'WriteConsoleW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'IsTextUnicode',
                                                                                            'SetEntriesInAclW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 94,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 33792},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/be3ee03e1829dd4a86af9037f4d85529ed32d5940ab22e2b7c4c675424cd016b'},
 'be42aa1ac3bfa70aa8c277a190743fbf1b942ba29ab149693aa86889ebe7ce04': {'AddressOfEntryPoint': 15600,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'UTILDLL.dll': 'GetUnknownString',
                                                                                      'WINSTA.dll': 'WinStationOpenServerW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlExtendedLargeIntegerDivide'},
                                                                      'ImportedFunctions': ['WinStationFreeMemory',
                                                                                            'WinStationEnumerateW',
                                                                                            'WinStationQueryInformationW',
                                                                                            'WinStationOpenServerW',
                                                                                            'StrConnectState',
                                                                                            'GetUnknownString',
                                                                                            'CharToOemW',
                                                                                            'LoadStringW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetDateFormatW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GlobalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'GlobalFree',
                                                                                            'HeapSetInformation',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'LocalAlloc',
                                                                                            'GetOEMCP',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'RtlExtendedLargeIntegerDivide',
                                                                                            'wcscpy_s',
                                                                                            'wcschr',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            'wcscat_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcstol',
                                                                                            'iswdigit',
                                                                                            'wprintf',
                                                                                            '_wsetlocale',
                                                                                            'memmove',
                                                                                            'wcstoul',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'setlocale',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            '_wcslwr',
                                                                                            'swprintf_s',
                                                                                            'printf',
                                                                                            'memcpy',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/be42aa1ac3bfa70aa8c277a190743fbf1b942ba29ab149693aa86889ebe7ce04'},
 'beb0475dc80b99ea8c0e3c391fa206c1bc051b171d756e0bdc20d284ee8ccd21': {'AddressOfEntryPoint': 20456,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegConnectRegistryA',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'SendMessageA',
                                                                                      'msvcrt.dll': '__CxxFrameHandler3'},
                                                                      'ImportedFunctions': ['RegCreateKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegConnectRegistryA',
                                                                                            'GetComputerNameA',
                                                                                            'lstrcmpiA',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'EnableWindow',
                                                                                            'MessageBeep',
                                                                                            'MessageBoxA',
                                                                                            'PostMessageA',
                                                                                            'SendMessageA',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_purecall',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__getmainargs',
                                                                                            '_setmbcp',
                                                                                            '__CxxFrameHandler3'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 57,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3328,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 20992},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/beb0475dc80b99ea8c0e3c391fa206c1bc051b171d756e0bdc20d284ee8ccd21'},
 'beb715404b799f3181c699e233f98b2a913beb677e94abe8e2872499fc755385': {'AddressOfEntryPoint': 209276,
                                                                      'DebugRVA': 4976,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 244912,
                                                                      'ExportSize': 115,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'KERNEL32.dll': 'HeapDestroy',
                                                                                      'MSVCR100.dll': '_lock',
                                                                                      'WS2_32.dll': 'WSAStartup'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'DeregisterEventSource',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegConnectRegistryA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumValueW',
                                                                                            'RegFlushKey',
                                                                                            'RegOpenKeyA',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueW',
                                                                                            'RegSetValueW',
                                                                                            'RegSetValueExA',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'OutputDebugStringW',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'VirtualQuery',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'InterlockedExchange',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrlenA',
                                                                                            'GetFullPathNameA',
                                                                                            'SearchPathA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetModuleFileNameA',
                                                                                            'OutputDebugStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetVersionExW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'InterlockedDecrement',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenThread',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetSystemInfo',
                                                                                            'RaiseException',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetModuleFileNameW',
                                                                                            'DebugBreak',
                                                                                            'lstrlenW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CompareStringW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'VirtualFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'WideCharToMultiByte',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetEvent',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CreateThread',
                                                                                            'InterlockedIncrement',
                                                                                            'ResetEvent',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateMutexW',
                                                                                            'SetHandleInformation',
                                                                                            'ReleaseMutex',
                                                                                            'ReadProcessMemory',
                                                                                            'HeapCreate',
                                                                                            'GetComputerNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapDestroy',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memset',
                                                                                            '_resetstkoflw',
                                                                                            '_vsnwprintf_l',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'setlocale',
                                                                                            '_purecall',
                                                                                            'strncpy_s',
                                                                                            'wcstol',
                                                                                            'wprintf',
                                                                                            '_vsnwprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'wcsstr',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnprintf',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcstoul',
                                                                                            'wcschr',
                                                                                            '_swscanf_s_l',
                                                                                            'memcpy',
                                                                                            '_wcsnicmp_l',
                                                                                            '_sprintf_s_l',
                                                                                            '_strtoul_l',
                                                                                            'free',
                                                                                            'calloc',
                                                                                            '_snwprintf_l',
                                                                                            'strchr',
                                                                                            'wcsrchr',
                                                                                            'strcpy_s',
                                                                                            '_wcsicmp_l',
                                                                                            '_wcstoul_l',
                                                                                            'strcat_s',
                                                                                            '_wtoi_l',
                                                                                            '_wtol',
                                                                                            'wcstok',
                                                                                            '_lock',
                                                                                            'getservbyname',
                                                                                            'WSACleanup',
                                                                                            'getservbyport',
                                                                                            'htonl',
                                                                                            'inet_addr',
                                                                                            'inet_ntoa',
                                                                                            'WSASetLastError',
                                                                                            'gethostbyaddr',
                                                                                            'gethostbyname',
                                                                                            'WSARecvFrom',
                                                                                            'WSASendTo',
                                                                                            'getsockname',
                                                                                            'WSAIoctl',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'htons',
                                                                                            'setsockopt',
                                                                                            'WSASocketW',
                                                                                            'WSAEnumProtocolsW',
                                                                                            'ntohs',
                                                                                            'getnameinfo',
                                                                                            'WSAGetLastError',
                                                                                            'getaddrinfo',
                                                                                            'freeaddrinfo',
                                                                                            'WSAStartup'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 206,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1708,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.sdbid\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 241152},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/beb715404b799f3181c699e233f98b2a913beb677e94abe8e2872499fc755385'},
 'bee011f3fe9711abf80f4fff607b5e1809ef62f0430985bf0ec96ec83f20151d': {'AddressOfEntryPoint': 6448,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49216,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'FreeLibrary',
                                                                                            'SetProcessDEPPolicy',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnprintf',
                                                                                            '_ismbblead',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 41,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 7680,
                                                                                       '.text\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bee011f3fe9711abf80f4fff607b5e1809ef62f0430985bf0ec96ec83f20151d'},
 'bf1411eefbbc09cc2c15471faff70c89a47d4a796a2520c5bc0e9b90ecd95554': {'AddressOfEntryPoint': 26856,
                                                                      'DebugRVA': 34528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'MSVCR100.dll': 'strstr',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'PeekMessageA',
                                                                                      'VBoxRT.dll': 'RTProcGetExecutablePath',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memcpy',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            'strpbrk',
                                                                                            'strchr',
                                                                                            'memcmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__iob_func',
                                                                                            'freopen',
                                                                                            '_errno',
                                                                                            'strncmp',
                                                                                            '_unlock',
                                                                                            'strstr',
                                                                                            'RTProcSelf',
                                                                                            'RTPathJoin',
                                                                                            'RTFileQueryInfo',
                                                                                            'RTGetOptPrintError',
                                                                                            '?c_str@RTCString@@QEBAPEBDXZ',
                                                                                            'RTSha256FromString',
                                                                                            'RTFileFromNative',
                                                                                            'RTGetOpt',
                                                                                            'RTGetOptInit',
                                                                                            '??1RTCString@@UEAA@XZ',
                                                                                            '??0RTCString@@QEAA@AEBV0@@Z',
                                                                                            'RTDirClose',
                                                                                            'RTDirReadEx',
                                                                                            'RTDirOpen',
                                                                                            'RTStrmFlush',
                                                                                            'RTFileRead',
                                                                                            'RTUtf16Free',
                                                                                            'RTStrToUInt64Ex',
                                                                                            'RTGetOptArgvToString',
                                                                                            'RTStrToUtf16Tag',
                                                                                            'RTDirRemove',
                                                                                            'RTFileDelete',
                                                                                            'RTMemTmpFree',
                                                                                            'g_pStdOut',
                                                                                            'g_pStdErr',
                                                                                            'RTMemTmpAllocZTag',
                                                                                            'RTDirCreateTemp',
                                                                                            'RTPathTemp',
                                                                                            'RTVfsObjRelease',
                                                                                            'RTMemAllocTag',
                                                                                            'RTMemFree',
                                                                                            'RTMemAllocZTag',
                                                                                            'RTStrmPrintf',
                                                                                            'RTAssertShouldPanic',
                                                                                            'RTAssertMsg1Weak',
                                                                                            'RTErrConvertFromErrno',
                                                                                            'SUPR3HardenedVerifySelf',
                                                                                            'RTMsgInitFailure',
                                                                                            'RTR3InitExe',
                                                                                            'RTGetOptArgvFree',
                                                                                            'RTGetOptArgvFromString',
                                                                                            'RTUtf16ToUtf8Tag',
                                                                                            'RTR3InitExeNoArguments',
                                                                                            '??0RTCString@@QEAA@PEBD_K@Z',
                                                                                            'RTStrPrintfV',
                                                                                            '??_7RTCString@@6B@',
                                                                                            'RTManifestReadStandard',
                                                                                            'RTVfsFileToIoStream',
                                                                                            'RTVfsFileSeek',
                                                                                            '??4RTCString@@QEAAAEAV0@PEBD@Z',
                                                                                            'RTManifestEntryQueryAttr',
                                                                                            'RTVfsFileRelease',
                                                                                            'RTVfsObjFromFile',
                                                                                            'RTVfsIoStrmValidateUtf8Encoding',
                                                                                            'RTVfsMemorizeIoStreamAsFile',
                                                                                            'RTPathStartsWithRoot',
                                                                                            'RTZipTarFsStreamFromIoStream',
                                                                                            'RTStrPrintf',
                                                                                            'RTFileSeek',
                                                                                            '?append@RTCString@@QEAAAEAV1@AEBV1@@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAPEBD0@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAI0@Z',
                                                                                            '?append@RTCString@@QEAAAEAV1@PEBD@Z',
                                                                                            '?getValue@Node@xml@@QEBAPEBDXZ',
                                                                                            '?findChildElementNS@ElementNode@xml@@QEBAPEBV12@PEBD0@Z',
                                                                                            'RTStrCmp',
                                                                                            '??0RTCString@@QEAA@PEBD@Z',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAVRTCString@@0@Z',
                                                                                            '?getName@Node@xml@@QEBAPEBDXZ',
                                                                                            '?getRootElement@Document@xml@@QEAAPEAVElementNode@2@XZ',
                                                                                            '??1XmlError@xml@@UEAA@XZ',
                                                                                            '??_7RTCError@@6B@',
                                                                                            '?what@RTCError@@UEBAPEBDXZ',
                                                                                            '??1Document@xml@@QEAA@XZ',
                                                                                            '??1XmlFileParser@xml@@QEAA@XZ',
                                                                                            '?read@XmlFileParser@xml@@QEAAXAEBVRTCString@@AEAVDocument@2@@Z',
                                                                                            '??0XmlFileParser@xml@@QEAA@XZ',
                                                                                            '??0Document@xml@@QEAA@XZ',
                                                                                            '?printf@RTCString@@QEAAAEAV1@PEBDZZ',
                                                                                            '??1XmlMemParser@xml@@QEAA@XZ',
                                                                                            '?read@XmlMemParser@xml@@QEAAXPEBX_KAEBVRTCString@@AEAVDocument@2@@Z',
                                                                                            '??0XmlMemParser@xml@@QEAA@XZ',
                                                                                            'RTVfsFileRead',
                                                                                            'RTMemTmpAllocTag',
                                                                                            'RTVfsFileQueryInfo',
                                                                                            'RTPathFilename',
                                                                                            'RTStrICmp',
                                                                                            '?cleanup@RTCString@@IEAAXXZ',
                                                                                            '??0RTCString@@QEAA@XZ',
                                                                                            'RTVfsFileRetain',
                                                                                            'RTManifestRetain',
                                                                                            'RTManifestEntryAddIoStream',
                                                                                            'RTStrFree',
                                                                                            'RTManifestEqualsEx',
                                                                                            'RTManifestRelease',
                                                                                            'RTVfsFsStrmRelease',
                                                                                            'RTVfsIoStrmQueryInfo',
                                                                                            'RTFileOpen',
                                                                                            'RTVfsIoStrmFromRTFile',
                                                                                            'RTManifestEntryAddPassthruIoStream',
                                                                                            'RTVfsIoStrmRelease',
                                                                                            'RTVfsUtilPumpIoStreams',
                                                                                            'RTManifestPtIosAddEntryNow',
                                                                                            'RTFileSetMode',
                                                                                            'RTFileClose',
                                                                                            'RTMsgError',
                                                                                            'RTVfsObjQueryInfo',
                                                                                            'RTDirCreate',
                                                                                            'SUPR3HardenedVerifyDir',
                                                                                            'RTStrCopy',
                                                                                            'RTStrCat',
                                                                                            'RTDirRename',
                                                                                            'RTDirRemoveRecursive',
                                                                                            'RTMsgErrorExit',
                                                                                            'RTPathQueryInfoEx',
                                                                                            'RTDirExists',
                                                                                            'RTPathAbs',
                                                                                            'RTPathStripTrailingSlash',
                                                                                            'RTManifestCreate',
                                                                                            'RTVfsFsStrmNext',
                                                                                            'RTZipGzipDecompressIoStream',
                                                                                            'RTVfsObjToIoStream',
                                                                                            'RTPathAppPrivateArchTop',
                                                                                            'RTPathAppPrivateNoArch',
                                                                                            'RTPathAppend',
                                                                                            'RTPathCompare',
                                                                                            'RTProcShortName',
                                                                                            'RTMsgInfo',
                                                                                            'RTBldCfgRevision',
                                                                                            'RTPrintf',
                                                                                            'RTStrmWriteEx',
                                                                                            'RTProcGetExecutablePath',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'DecodePointer',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLastError',
                                                                                            'MonitorFromWindow',
                                                                                            'MonitorFromPoint',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'OpenProcessToken',
                                                                                            'ShellExecuteExW',
                                                                                            'CoInitializeEx'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 205,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 20480,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 27136},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bf1411eefbbc09cc2c15471faff70c89a47d4a796a2520c5bc0e9b90ecd95554'},
 'bf359e51873234caf87a319aa1099560e2557a942f6d9b3af61ab9f0bcf51339': {'AddressOfEntryPoint': 18192,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueA',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'LZ32.dll': 'LZClose',
                                                                                      'USER32.dll': 'RegisterClassA',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegDeleteKeyA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueA',
                                                                                            '_llseek',
                                                                                            'SetErrorMode',
                                                                                            '_lwrite',
                                                                                            '_lclose',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'LocalReAlloc',
                                                                                            'IsDBCSLeadByte',
                                                                                            'LocalLock',
                                                                                            'SetFileAttributesA',
                                                                                            'GlobalCompact',
                                                                                            'LocalAlloc',
                                                                                            'GetDriveTypeA',
                                                                                            'GetModuleFileNameA',
                                                                                            '_lread',
                                                                                            '_lopen',
                                                                                            'GetDiskFreeSpaceExA',
                                                                                            'WinExec',
                                                                                            'GetVersion',
                                                                                            'LocalFree',
                                                                                            'LocalUnlock',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'ExitProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenA',
                                                                                            'OpenFile',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'GetTextExtentPointA',
                                                                                            'SetBkMode',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'LoadStringA',
                                                                                            'DrawTextA',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'GetMessageA',
                                                                                            'DestroyWindow',
                                                                                            'EndPaint',
                                                                                            'GetClientRect',
                                                                                            'OemToCharBuffA',
                                                                                            'CharToOemA',
                                                                                            'FindWindowA',
                                                                                            'UpdateWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'DispatchMessageA',
                                                                                            'PostMessageA',
                                                                                            'IsWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'CharPrevA',
                                                                                            'SendMessageA',
                                                                                            'TranslateMessage',
                                                                                            'BeginPaint',
                                                                                            'DefWindowProcA',
                                                                                            'PeekMessageA',
                                                                                            'CreateWindowExA',
                                                                                            'MessageBoxA',
                                                                                            'RegisterClassA',
                                                                                            'remove',
                                                                                            'fopen',
                                                                                            '_mkdir',
                                                                                            '_rmdir',
                                                                                            '_chdir',
                                                                                            'toupper',
                                                                                            '_chdrive',
                                                                                            'atoi',
                                                                                            'fclose',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'strchr',
                                                                                            '_access',
                                                                                            'strstr',
                                                                                            'rename',
                                                                                            '_close',
                                                                                            '_ltoa',
                                                                                            '_write',
                                                                                            '_lseek',
                                                                                            '_unlink',
                                                                                            '_mktemp',
                                                                                            '_vsnprintf',
                                                                                            '_read',
                                                                                            '_chmod',
                                                                                            '_stat',
                                                                                            'malloc',
                                                                                            '_open',
                                                                                            'free',
                                                                                            '_tempnam',
                                                                                            '_splitpath_s',
                                                                                            '_itoa',
                                                                                            'memset',
                                                                                            'LZCopy',
                                                                                            'LZOpenFileA',
                                                                                            'LZClose'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 126,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 16384},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/bf359e51873234caf87a319aa1099560e2557a942f6d9b3af61ab9f0bcf51339'},
 'bf6b8afbf1e795aac967382b78608166d9d9d8c35ee815645abd8ea2c1f60176': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 92932,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 93184,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/bf6b8afbf1e795aac967382b78608166d9d9d8c35ee815645abd8ea2c1f60176'},
 'c0018bd9d4f84661b795f64b9baf3f548170676c1d99c24e17edc8d43c83077e': {'AddressOfEntryPoint': 356185,
                                                                      'DebugRVA': 447824,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 446464,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'KERNEL32.dll': 'GetOEMCP',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathAppendA',
                                                                                      'USER32.dll': 'RegisterClassExW',
                                                                                      'WINHTTP.dll': 'WinHttpSetTimeouts',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'gdiplus.dll': 'GdipFree',
                                                                                      'iphlpapi.dll': 'GetAdaptersAddresses',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'GetStartupInfoW',
                                                                                            'GetTickCount',
                                                                                            'GetLocalTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'ReadFile',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetDriveTypeW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'SetFilePointer',
                                                                                            'CloseHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetFileSize',
                                                                                            'WriteFile',
                                                                                            'SetEndOfFile',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCommandLineW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'CreateFileA',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'IsValidCodePage',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetACP',
                                                                                            'FreeResource',
                                                                                            'MulDiv',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetCPInfo',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapSize',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'GetOEMCP',
                                                                                            'IsZoomed',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageW',
                                                                                            'LoadCursorW',
                                                                                            'SendMessageW',
                                                                                            'wsprintfW',
                                                                                            'CharNextW',
                                                                                            'PtInRect',
                                                                                            'IsRectEmpty',
                                                                                            'GetParent',
                                                                                            'ReleaseDC',
                                                                                            'MapWindowPoints',
                                                                                            'GetDC',
                                                                                            'GetCursorPos',
                                                                                            'GetKeyState',
                                                                                            'GetFocus',
                                                                                            'GetWindowLongW',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'PostMessageW',
                                                                                            'SetCursor',
                                                                                            'SetFocus',
                                                                                            'GetUpdateRect',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'wvsprintfW',
                                                                                            'OffsetRect',
                                                                                            'InflateRect',
                                                                                            'IntersectRect',
                                                                                            'CreateCaret',
                                                                                            'ShowCaret',
                                                                                            'HideCaret',
                                                                                            'SetCaretPos',
                                                                                            'ClientToScreen',
                                                                                            'GetSysColor',
                                                                                            'CharPrevW',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'SetWindowTextW',
                                                                                            'EnableWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'InvalidateRgn',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'MoveWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'TranslateMessage',
                                                                                            'GetClassInfoExW',
                                                                                            'CallWindowProcW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'LoadIconW',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'PostQuitMessage',
                                                                                            'SetRect',
                                                                                            'UnregisterClassW',
                                                                                            'InvalidateRect',
                                                                                            'GetWindow',
                                                                                            'RegisterClassW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'ScreenToClient',
                                                                                            'KillTimer',
                                                                                            'LoadAcceleratorsW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'DispatchMessageW',
                                                                                            'RegisterClassExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFolderPathA',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromProgID',
                                                                                            'CLSIDFromString',
                                                                                            'OleLockRunning',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'PathAppendA',
                                                                                            'GetAdaptersAddresses',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'Rectangle',
                                                                                            'DeleteDC',
                                                                                            'RestoreDC',
                                                                                            'DeleteObject',
                                                                                            'BitBlt',
                                                                                            'SaveDC',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SetWindowOrgEx',
                                                                                            'GetTextMetricsW',
                                                                                            'GetObjectW',
                                                                                            'GetStockObject',
                                                                                            'GetObjectA',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetCharABCWidthsW',
                                                                                            'StretchBlt',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'TextOutW',
                                                                                            'SetStretchBltMode',
                                                                                            'SetBkColor',
                                                                                            'ExtTextOutW',
                                                                                            'CreateSolidBrush',
                                                                                            'CreatePenIndirect',
                                                                                            'MoveToEx',
                                                                                            'SelectClipRgn',
                                                                                            'LineTo',
                                                                                            'GetClipBox',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'RoundRect',
                                                                                            'ExtSelectClipRgn',
                                                                                            'SetBkMode',
                                                                                            'CreateRoundRectRgn',
                                                                                            'SetTextColor',
                                                                                            'CombineRgn',
                                                                                            'CreateDIBSection',
                                                                                            'CreatePen',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            '_TrackMouseEvent',
                                                                                            'GdipCreateLineBrushI',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDrawString',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdiplusStartup',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipAlloc',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipFree'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 284,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 51546624,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 81920,
                                                                                       '.rsrc\x00\x00\x00': 51548160,
                                                                                       '.text\x00\x00\x00': 442368},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c0018bd9d4f84661b795f64b9baf3f548170676c1d99c24e17edc8d43c83077e'},
 'c0540a82fbc2bdc45dcc755bb8a8eb0f19dc3e55d9cc6998a0d089d9ccef7239': {'AddressOfEntryPoint': 1271598,
                                                                      'DebugRVA': 1271379,
                                                                      'DebugSize': 145,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 27850,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 28160,
                                                                                       '.text\x00\x00\x00': 1263616},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c0540a82fbc2bdc45dcc755bb8a8eb0f19dc3e55d9cc6998a0d089d9ccef7239'},
 'c0551cbb37772545f50b00bde96b83d16f35ef146cf44cea124beda934d53300': {'AddressOfEntryPoint': 124837,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 163840,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'VariantClear',
                                                                                      'api-ms-win-downlevel-advapi32-l1-1-1.dll': 'UnregisterTraceGuids',
                                                                                      'api-ms-win-downlevel-advapi32-l4-1-0.dll': 'LookupPrivilegeValueW',
                                                                                      'api-ms-win-downlevel-kernel32-l1-1-0.dll': 'SetFilePointer',
                                                                                      'api-ms-win-downlevel-kernel32-l2-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-downlevel-ole32-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-downlevel-user32-l1-1-1.dll': 'CharLowerBuffW',
                                                                                      'api-ms-win-downlevel-version-l1-1-0.dll': 'VerQueryValueW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'NtSetInformationFile'},
                                                                      'ImportedFunctions': ['_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'wcsstr',
                                                                                            'iswalpha',
                                                                                            '_wcsnicmp',
                                                                                            'towlower',
                                                                                            '__dllonexit',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'wcscpy_s',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            '_except_handler4_common',
                                                                                            'memset',
                                                                                            'wcsrchr',
                                                                                            'calloc',
                                                                                            'malloc',
                                                                                            '_purecall',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'free',
                                                                                            '_vsnwprintf',
                                                                                            'towupper',
                                                                                            '_getwch',
                                                                                            'vswprintf_s',
                                                                                            '_vscwprintf',
                                                                                            '_controlfp',
                                                                                            '_wcslwr_s',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'wprintf',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcmp',
                                                                                            '_ftol2',
                                                                                            '__RTDynamicCast',
                                                                                            'memcpy',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCommandLineW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'SizeofResource',
                                                                                            'SetThreadUILanguage',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'Sleep',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'LockResource',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'SetErrorMode',
                                                                                            'CompareStringW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetStdHandle',
                                                                                            'HeapAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'SearchPathW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'FindFirstFileW',
                                                                                            'CopyFileExW',
                                                                                            'FindClose',
                                                                                            'DeviceIoControl',
                                                                                            'FindNextFileW',
                                                                                            'IsWow64Process',
                                                                                            'FormatMessageW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetLastError',
                                                                                            'CreateFileW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetSystemInfo',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'OutputDebugStringA',
                                                                                            'GetModuleHandleExW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetLengthSid',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'GetAclInformation',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'MakeAbsoluteSD',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetSidLengthRequired',
                                                                                            'InitializeSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'TraceEvent',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'InitializeAcl',
                                                                                            'RegOpenKeyExW',
                                                                                            'IsValidSid',
                                                                                            'GetTraceEnableFlags',
                                                                                            'CopySid',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'GetErrorInfo',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'CharLowerBuffW',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'VarBstrCmp',
                                                                                            'VariantClear',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlGetVersion',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'NtSetInformationFile'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 189,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 31376,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 31744,
                                                                                       '.text\x00\x00\x00': 151552},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c0551cbb37772545f50b00bde96b83d16f35ef146cf44cea124beda934d53300'},
 'c0a6a84369cb3e709a6ffebed2b38ab62d731b79d052d6d6fa8ef855bc428778': {'AddressOfEntryPoint': 347888,
                                                                      'DebugRVA': 689968,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 15556,
                                                                      'ExportSize': 7355,
                                                                      'IATRVA': 753664,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'DNSAPI.dll': 'DnsFree',
                                                                                      'KERNEL32.dll': 'LocalAlloc',
                                                                                      'POWRPROF.dll': 'PowerDeterminePlatformRole',
                                                                                      'RPCRT4.dll': 'Ndr64AsyncServerCallAll',
                                                                                      'USER32.dll': 'RegisterPowerSettingNotification',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'IsDebuggerPresent',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetTempFileNameW',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapCreate',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'DisableThreadLibraryCalls',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'ExitProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-power-base-l1-1-0.dll': 'GetPwrCapabilities',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AllocateAndInitializeSid',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'RegisterServiceCtrlHandlerExW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlIpv6AddressToStringW'},
                                                                      'ImportedFunctions': ['DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'SendNotifyMessageW',
                                                                                            'UnregisterPowerSettingNotification',
                                                                                            'RegisterPowerSettingNotification',
                                                                                            '_commode',
                                                                                            '_unlock',
                                                                                            'memcpy',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_fmode',
                                                                                            '_lock',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_strnicmp',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'wcsncmp',
                                                                                            'memmove',
                                                                                            '_XcptFilter',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcsstr',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_purecall',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'strchr',
                                                                                            'wcschr',
                                                                                            'towlower',
                                                                                            '_stricmp',
                                                                                            '_wcsicmp',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'towupper',
                                                                                            'memset',
                                                                                            'RtlIpv4AddressToStringW',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtClose',
                                                                                            'NtSetInformationThread',
                                                                                            'NtOpenThreadToken',
                                                                                            'RtlIpv4StringToAddressExW',
                                                                                            'RtlIpv6StringToAddressExW',
                                                                                            'EtwEventEnabled',
                                                                                            'RtlReportException',
                                                                                            'TpAllocPool',
                                                                                            'TpReleaseAlpcCompletion',
                                                                                            'TpWaitForAlpcCompletion',
                                                                                            'TpReleaseIoCompletion',
                                                                                            'TpWaitForIoCompletion',
                                                                                            'TpReleaseTimer',
                                                                                            'TpWaitForTimer',
                                                                                            'TpReleaseWait',
                                                                                            'TpWaitForWait',
                                                                                            'TpReleaseWork',
                                                                                            'TpWaitForWork',
                                                                                            'TpAllocAlpcCompletion',
                                                                                            'TpStartAsyncIoOperation',
                                                                                            'TpAllocIoCompletion',
                                                                                            'TpSetTimer',
                                                                                            'TpAllocTimer',
                                                                                            'TpAllocWait',
                                                                                            'TpPostWork',
                                                                                            'TpAllocWork',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'TpSimpleTryPost',
                                                                                            'TpSetWait',
                                                                                            'TpCallbackMayRunLong',
                                                                                            'TpReleasePool',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'EtwEventWrite',
                                                                                            'NtQuerySystemInformation',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwEventUnregister',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwEventRegister',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'RtlIpv6AddressToStringW',
                                                                                            'ReleaseMutex',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateMutexW',
                                                                                            'AcquireSRWLockShared',
                                                                                            'InitializeSRWLock',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'OpenEventW',
                                                                                            'EnterCriticalSection',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleW',
                                                                                            'DisableThreadLibraryCalls',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsAlloc',
                                                                                            'CreateThread',
                                                                                            'TlsGetValue',
                                                                                            'CreateProcessAsUserW',
                                                                                            'TlsSetValue',
                                                                                            'SetPriorityClass',
                                                                                            'TlsFree',
                                                                                            'SetThreadToken',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentThread',
                                                                                            'OpenThreadToken',
                                                                                            'ExitProcess',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'SetErrorMode',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetErrorMode',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'HeapDestroy',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegGetKeySecurity',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegOpenCurrentUser',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDisablePredefinedCacheEx',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'OutputDebugStringW',
                                                                                            'DebugBreak',
                                                                                            'IsDebuggerPresent',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcServerSubscribeForNotification',
                                                                                            'RpcServerUnsubscribeForNotification',
                                                                                            'Ndr64AsyncClientCall',
                                                                                            'NdrClientCall3',
                                                                                            'RpcBindingServerFromClient',
                                                                                            'RpcBindingFree',
                                                                                            'RpcStringBindingParseW',
                                                                                            'RpcObjectSetType',
                                                                                            'RpcServerInqBindingHandle',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcBindingToStringBindingW',
                                                                                            'RpcServerInterfaceGroupDeactivate',
                                                                                            'RpcServerInterfaceGroupActivate',
                                                                                            'RpcServerInterfaceGroupCreateW',
                                                                                            'RpcEpRegisterW',
                                                                                            'RpcServerTestCancel',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcSsContextLockExclusive',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcServerRegisterIf',
                                                                                            'RpcRevertToSelf',
                                                                                            'I_RpcSessionStrictContextHandle',
                                                                                            'I_RpcBindingIsClientLocal',
                                                                                            'RpcRaiseException',
                                                                                            'NdrServerCallAll',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcMgmtSetServerStackSize',
                                                                                            'RpcServerRegisterIf2',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcRevertToSelfEx',
                                                                                            'RpcSmDestroyClientContext',
                                                                                            'I_RpcBindingInqTransportType',
                                                                                            'RpcAsyncAbortCall',
                                                                                            'NdrAsyncServerCall',
                                                                                            'NdrServerCall2',
                                                                                            'Ndr64AsyncServerCallAll',
                                                                                            'CopySid',
                                                                                            'DuplicateToken',
                                                                                            'AddAccessDeniedAceEx',
                                                                                            'GetLengthSid',
                                                                                            'AddAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'RevertToSelf',
                                                                                            'IsWellKnownSid',
                                                                                            'CreateWellKnownSid',
                                                                                            'InitializeAcl',
                                                                                            'GetAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'FreeSid',
                                                                                            'GetAclInformation',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'SetTokenInformation',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'EqualSid',
                                                                                            'DuplicateTokenEx',
                                                                                            'GetTokenInformation',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'SetThreadpoolTimer',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'ResetEvent',
                                                                                            'HeapAlloc',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleExW',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetComputerNameW',
                                                                                            'lstrcmpiW',
                                                                                            'QueueUserWorkItem',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'CreateThreadpoolTimer',
                                                                                            'WaitForThreadpoolTimerCallbacks',
                                                                                            'CloseThreadpoolTimer',
                                                                                            'GetTickCount64',
                                                                                            'LoadLibraryW',
                                                                                            'LocalAlloc',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'GetTempFileNameW',
                                                                                            'MoveFileExW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'DnsQuery_W',
                                                                                            'DnsFree',
                                                                                            'GetPwrCapabilities',
                                                                                            'PowerDeterminePlatformRole'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 24,
                                                                      'NumberOfImportFunctions': 272,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 58096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 11776,
                                                                                       '.pdata\x00\x00': 29184,
                                                                                       '.reloc\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 58368,
                                                                                       '.text\x00\x00\x00': 704512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c0a6a84369cb3e709a6ffebed2b38ab62d731b79d052d6d6fa8ef855bc428778'},
 'c133c69794f369ea0a4041e4edf085e39c1cc1343665f5bc4765667230069d41': {'AddressOfEntryPoint': 19628,
                                                                      'DebugRVA': 4128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'TAPI32.dll': 'MMCSetServerConfig',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['FindResourceW',
                                                                                            'LoadResource',
                                                                                            'GetModuleHandleW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'SizeofResource',
                                                                                            'FormatMessageW',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetTempPathW',
                                                                                            'GetLastError',
                                                                                            'lstrlenA',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'GetComputerNameW',
                                                                                            'SetThreadUILanguage',
                                                                                            'LoadLibraryW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetProcAddress',
                                                                                            'HeapSetInformation',
                                                                                            'LockResource',
                                                                                            'GetTempFileNameW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memmove',
                                                                                            '_wcsicmp',
                                                                                            'setlocale',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            'wcschr',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__p__fmode',
                                                                                            'memset',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'MMCGetProviderList',
                                                                                            'MMCInitialize',
                                                                                            'MMCGetServerConfig',
                                                                                            'MMCSetLineInfo',
                                                                                            'MMCShutdown',
                                                                                            'MMCGetLineInfo',
                                                                                            'MMCGetAvailableProviders',
                                                                                            'MMCSetServerConfig',
                                                                                            'LoadStringW',
                                                                                            'CreateWindowExW',
                                                                                            'DestroyWindow'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4888,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 17408},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c133c69794f369ea0a4041e4edf085e39c1cc1343665f5bc4765667230069d41'},
 'c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf': {'AddressOfEntryPoint': 446284,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 499712,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetOEMCP',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'CharUpperW'},
                                                                      'ImportedFunctions': ['SysAllocString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysFreeString',
                                                                                            'CharLowerA',
                                                                                            'CharUpperA',
                                                                                            'CharLowerW',
                                                                                            'CharPrevExA',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'SetEndOfFile',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCommandLineW',
                                                                                            'SetFileApisToOEM',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryA',
                                                                                            'AreFileApisANSI',
                                                                                            'GetModuleFileNameA',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'FormatMessageW',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'SetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'SetFileAttributesW',
                                                                                            'RemoveDirectoryW',
                                                                                            'MoveFileW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SearchPathA',
                                                                                            'SearchPathW',
                                                                                            'GetTempPathA',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempFileNameW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileA',
                                                                                            'FindNextFileW',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'SetFilePointer',
                                                                                            'DeviceIoControl',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'CompareFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetSystemInfo',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetModuleHandleA',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'WaitForMultipleObjects',
                                                                                            'OpenEventA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'OpenFileMappingA',
                                                                                            'GetTickCount',
                                                                                            'GetProcessTimes',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventA',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'CreateSemaphoreA',
                                                                                            'ReleaseSemaphore',
                                                                                            'InitializeCriticalSection',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CreateThread',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'ExitThread',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'ExitProcess',
                                                                                            'TlsAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'HeapSize',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'IsBadWritePtr',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'FlushFileBuffers',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadCodePtr',
                                                                                            'SetStdHandle',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 145,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 27648,
                                                                                       '.rdata\x00\x00': 62464,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.sxdata\x00': 512,
                                                                                       '.text\x00\x00\x00': 495104},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf'},
 'c1455b1e8c9f3d41b7d131b296215ba912a312907049ca36844d1cf472da2857': {'AddressOfEntryPoint': 8880,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'TAPI32.dll': 'lineRemoveProvider',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'msvcrt.dll': '_vsnwprintf'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'RegOpenKeyExW',
                                                                                            'CheckTokenMembership',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'GetCommandLineW',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'GlobalAlloc',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'GlobalFree',
                                                                                            'lstrcmpiW',
                                                                                            'HeapSetInformation',
                                                                                            'ReleaseMutex',
                                                                                            'CloseHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_vsnwprintf',
                                                                                            'lineAddProviderW',
                                                                                            'lineRemoveProvider'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c1455b1e8c9f3d41b7d131b296215ba912a312907049ca36844d1cf472da2857'},
 'c149cb85f732beb95bf6564d72bdfdd9306f7050edfd9d2cd475420efe3b84fc': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 5424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c149cb85f732beb95bf6564d72bdfdd9306f7050edfd9d2cd475420efe3b84fc'},
 'c16aec3a691863790f1f4ff755eb36a5853b2b9f2ad78abb0acf42b22dbfc7e1': {'AddressOfEntryPoint': 63388,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'api-ms-win-core-com-l1-1-0.dll': 'CoTaskMemFree',
                                                                                      'api-ms-win-core-debug-l1-1-0.dll': 'IsDebuggerPresent',
                                                                                      'api-ms-win-core-errorhandling-l1-1-0.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-1-0.dll': 'CreateFileW',
                                                                                      'api-ms-win-core-file-l1-2-0.dll': 'GetTempPathW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-1-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-io-l1-1-0.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-0.dll': 'GetStartupInfoA',
                                                                                      'api-ms-win-core-libraryloader-l1-1-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-0.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-memory-l1-1-0.dll': 'UnmapViewOfFile',
                                                                                      'api-ms-win-core-processenvironment-l1-1-0.dll': 'SearchPathW',
                                                                                      'api-ms-win-core-processsecurity-l1-1-0.dll': 'OpenThreadToken',
                                                                                      'api-ms-win-core-processthreads-l1-1-0.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-stringloader-l1-1-1.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-synch-l1-1-0.dll': 'EnterCriticalSection',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-1-0.dll': 'GetVersion',
                                                                                      'api-ms-win-security-base-l1-1-0.dll': 'GetAclInformation',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlAllocateHeap'},
                                                                      'ImportedFunctions': ['__set_app_type',
                                                                                            '__getmainargs',
                                                                                            'exit',
                                                                                            '_amsg_exit',
                                                                                            'fclose',
                                                                                            'wcstok_s',
                                                                                            'swscanf_s',
                                                                                            '__p__commode',
                                                                                            'fgetws',
                                                                                            '_wfopen',
                                                                                            'feof',
                                                                                            'iswctype',
                                                                                            '_XcptFilter',
                                                                                            'strrchr',
                                                                                            '_CxxThrowException',
                                                                                            '_vsnprintf',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'memset',
                                                                                            'wcscpy_s',
                                                                                            '_wcsicmp',
                                                                                            '_beginthreadex',
                                                                                            'wcsstr',
                                                                                            'wcsrchr',
                                                                                            'calloc',
                                                                                            'memmove_s',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            'malloc',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            'free',
                                                                                            'towlower',
                                                                                            '_wcsnicmp',
                                                                                            '_wtoi',
                                                                                            'wcschr',
                                                                                            'memcpy_s',
                                                                                            '_vsnwprintf',
                                                                                            'vswprintf_s',
                                                                                            '_vscwprintf',
                                                                                            'vsprintf_s',
                                                                                            '_vscprintf',
                                                                                            'rand',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcmp',
                                                                                            '_purecall',
                                                                                            'memcpy',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'CreateEventExW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateMutexA',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateMutexW',
                                                                                            'OpenEventW',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'CLSIDFromString',
                                                                                            'ProgIDFromCLSID',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoRegisterPSClsid',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoTaskMemFree',
                                                                                            'GetSidLengthRequired',
                                                                                            'GetSidSubAuthority',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'InitializeSid',
                                                                                            'CopySid',
                                                                                            'IsValidSid',
                                                                                            'GetLengthSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'MakeAbsoluteSD',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'EqualSid',
                                                                                            'AddAce',
                                                                                            'InitializeAcl',
                                                                                            'GetTokenInformation',
                                                                                            'GetAclInformation',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetCommandLineW',
                                                                                            'SearchPathW',
                                                                                            'FormatMessageA',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'TlsAlloc',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'OutputDebugStringW',
                                                                                            'DebugBreak',
                                                                                            'OutputDebugStringA',
                                                                                            'IsDebuggerPresent',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadResource',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindResourceExW',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapDestroy',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetLocalTime',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersion',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateFileMappingA',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysStringLen',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'GetFileSizeEx',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'GetTempFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateFileW',
                                                                                            'LocalFree',
                                                                                            'GetTempPathW',
                                                                                            'VirtualQuery',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'DeviceIoControl',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 200,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 10240,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 9728,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 68096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c16aec3a691863790f1f4ff755eb36a5853b2b9f2ad78abb0acf42b22dbfc7e1'},
 'c16f020f56a563b8f92f2830d795907c2b828f1a5f48d6b674d4b2d8a715af60': {'AddressOfEntryPoint': 4874,
                                                                      'DebugRVA': 570256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 801824,
                                                                      'ExportSize': 122,
                                                                      'IATRVA': 565248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'MSVCP90.dll': '?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                      'MSVCR90.dll': '_snwprintf',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'SHELL32.dll': 'ExtractIconExW',
                                                                                      'USER32.dll': 'GetMessageTime',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal',
                                                                                      'sigc-2.0.dll': '??1slot_rep@internal@sigc@@QAE@XZ',
                                                                                      'vmapputil.DLL': '?VMComSingletonAuthority_ReleaseAll@@YAXXZ',
                                                                                      'vmclientcore.dll': '?RunEmbeddedVMRC@vmClientCore@@YAXKABVstring@utf@@IW4VMRC_MessageMode@@I@Z',
                                                                                      'vmwarecui.dll': '?SetMKS@VM@cui@@UAEXPAVMKS@2@@Z',
                                                                                      'vmwarestring.dll': '?substr@string@utf@@QBE?AV12@II@Z',
                                                                                      'vmwarewui.dll': '?ShowDialog@RemovableDevices@dialog@wui@@SAHPAVVM@cui@@ABV?$vector@ULocalUSBDev@VMDeviceMgr@cui@@V?$allocator@ULocalUSBDev@VMDeviceMgr@cui@@@std@@@std@@PAUHWND__@@V?$slot@UtagRECT@@Unil@sigc@@U23@U23@U23@U23@U23@U23@@sigc@@@Z'},
                                                                      'ImportedFunctions': ['swprintf_s',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '__iob_func',
                                                                                            'setvbuf',
                                                                                            '__wargv',
                                                                                            '__argc',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'printf',
                                                                                            'memset',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '_recalloc',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'wcsncpy_s',
                                                                                            'memcpy_s',
                                                                                            'wcsstr',
                                                                                            'memmove_s',
                                                                                            'malloc',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '_CxxThrowException',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            'strncmp',
                                                                                            'strtol',
                                                                                            'strtoul',
                                                                                            'free',
                                                                                            '??0exception@std@@QAE@XZ',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@std@@QAE@ABQBDH@Z',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_wcsnicmp',
                                                                                            'swscanf',
                                                                                            '__RTDynamicCast',
                                                                                            '_wcslwr',
                                                                                            '_wsplitpath',
                                                                                            '_purecall',
                                                                                            '_wcsdup',
                                                                                            'iswpunct',
                                                                                            'iswalnum',
                                                                                            '_stricmp',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            '_resetstkoflw',
                                                                                            'towlower',
                                                                                            '_wcsicmp',
                                                                                            'wcsncpy',
                                                                                            '_wcsupr_s',
                                                                                            '_wtoi',
                                                                                            '_snwprintf_s',
                                                                                            'ceil',
                                                                                            '_getpid',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '_amsg_exit',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_except_handler4_common',
                                                                                            '_decode_pointer',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            '_snwprintf',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'lstrlenW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrcmpiW',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'ReadFile',
                                                                                            'PeekNamedPipe',
                                                                                            'GetStdHandle',
                                                                                            'FlushInstructionCache',
                                                                                            'IsDebuggerPresent',
                                                                                            'VerSetConditionMask',
                                                                                            'SetLastError',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'MulDiv',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalHandle',
                                                                                            'LockResource',
                                                                                            'GetVersion',
                                                                                            'CompareStringW',
                                                                                            'OutputDebugStringW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'InterlockedExchange',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'LoadLibraryA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'GetDesktopWindow',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'IsChild',
                                                                                            'InvalidateRgn',
                                                                                            'LoadBitmapW',
                                                                                            'TrackMouseEvent',
                                                                                            'FillRect',
                                                                                            'DrawIconEx',
                                                                                            'GetDlgItem',
                                                                                            'GetWindow',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetCursorPos',
                                                                                            'GetClassNameW',
                                                                                            'FindWindowExW',
                                                                                            'EnableWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'OpenClipboard',
                                                                                            'EnableMenuItem',
                                                                                            'MonitorFromRect',
                                                                                            'CreatePopupMenu',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetActiveWindow',
                                                                                            'GetAncestor',
                                                                                            'IsDialogMessageW',
                                                                                            'SetWindowRgn',
                                                                                            'IsWindowEnabled',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'IsWindowVisible',
                                                                                            'ClientToScreen',
                                                                                            'SetWindowPlacement',
                                                                                            'SetWindowPos',
                                                                                            'UnregisterClassA',
                                                                                            'GetSysColorBrush',
                                                                                            'CloseClipboard',
                                                                                            'GetClipboardData',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'IsZoomed',
                                                                                            'FlashWindowEx',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemCount',
                                                                                            'TrackPopupMenuEx',
                                                                                            'DestroyMenu',
                                                                                            'AppendMenuW',
                                                                                            'GetCapture',
                                                                                            'UpdateWindow',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemID',
                                                                                            'IsMenu',
                                                                                            'GetSystemMenu',
                                                                                            'PostMessageW',
                                                                                            'CreateMenu',
                                                                                            'InsertMenuItemW',
                                                                                            'GetForegroundWindow',
                                                                                            'SetRectEmpty',
                                                                                            'IsRectEmpty',
                                                                                            'CopyRect',
                                                                                            'DestroyIcon',
                                                                                            'GetMessagePos',
                                                                                            'SetCursor',
                                                                                            'ReleaseCapture',
                                                                                            'CallWindowProcW',
                                                                                            'DrawFocusRect',
                                                                                            'CharPrevW',
                                                                                            'GetKeyState',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetCapture',
                                                                                            'GetUpdateRgn',
                                                                                            'ScreenToClient',
                                                                                            'IntersectRect',
                                                                                            'InflateRect',
                                                                                            'PtInRect',
                                                                                            'GetSysColor',
                                                                                            'DialogBoxParamW',
                                                                                            'GetIconInfo',
                                                                                            'GetDC',
                                                                                            'DrawTextW',
                                                                                            'ReleaseDC',
                                                                                            'EqualRect',
                                                                                            'GetFocus',
                                                                                            'GetWindowRect',
                                                                                            'MapWindowPoints',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetParent',
                                                                                            'DefWindowProcW',
                                                                                            'EndDialog',
                                                                                            'SetFocus',
                                                                                            'SetWindowTextW',
                                                                                            'SetRect',
                                                                                            'MessageBeep',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'GetPropW',
                                                                                            'GetActiveWindow',
                                                                                            'SendNotifyMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'CreateDialogParamW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'EnumDisplayMonitors',
                                                                                            'DestroyWindow',
                                                                                            'LoadImageW',
                                                                                            'LoadCursorW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetSystemMetrics',
                                                                                            'IsWindow',
                                                                                            'RedrawWindow',
                                                                                            'LockWindowUpdate',
                                                                                            'ShowWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetWindowPlacement',
                                                                                            'GetClientRect',
                                                                                            'MoveWindow',
                                                                                            'IsIconic',
                                                                                            'SendMessageW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'ExitWindowsEx',
                                                                                            'CharNextW',
                                                                                            'MessageBoxW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'SystemParametersInfoW',
                                                                                            'OffsetRect',
                                                                                            'GetMessageTime',
                                                                                            'SetDCBrushColor',
                                                                                            'SetBkMode',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateSolidBrush',
                                                                                            'Polyline',
                                                                                            'SetDCPenColor',
                                                                                            'GetClipRgn',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteDC',
                                                                                            'GetTextMetricsW',
                                                                                            'SelectClipRgn',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'SelectObject',
                                                                                            'GetStockObject',
                                                                                            'RectInRegion',
                                                                                            'CreateRectRgn',
                                                                                            'CombineRgn',
                                                                                            'BitBlt',
                                                                                            'DeleteObject',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            '_TrackMouseEvent',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoGetClassObject',
                                                                                            'OleLockRunning',
                                                                                            'StringFromGUID2',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'SysStringLen',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'GetErrorInfo',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VarUI4FromStr',
                                                                                            'GetOpenFileNameW',
                                                                                            'ShellExecuteW',
                                                                                            'ExtractIconExW',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ',
                                                                                            '??0?$allocator@D@std@@QAE@ABV01@@Z',
                                                                                            '?max_size@?$allocator@D@std@@QBEIXZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z',
                                                                                            '?allocate@?$allocator@_W@std@@QAEPA_WI@Z',
                                                                                            '?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ',
                                                                                            '?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z',
                                                                                            '?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ',
                                                                                            '?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z',
                                                                                            '?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z',
                                                                                            '?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z',
                                                                                            '?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z',
                                                                                            '?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '??3slot_rep@internal@sigc@@SAXPAX@Z',
                                                                                            '??2slot_rep@internal@sigc@@SAPAXI@Z',
                                                                                            '?add_destroy_notify_callback@trackable@sigc@@QBEXPAXP6APAX0@Z@Z',
                                                                                            '?notify@slot_rep@internal@sigc@@SAPAXPAX@Z',
                                                                                            '?connect@signal_base@sigc@@IAE?AV?$_Iterator@$00@?$list@Vslot_base@sigc@@V?$allocator@Vslot_base@sigc@@@std@@@std@@ABVslot_base@2@@Z',
                                                                                            '?add_destroy_notify_callback@slot_base@sigc@@QBEXPAXP6APAX0@Z@Z',
                                                                                            '?notify@connection@sigc@@SAPAXPAX@Z',
                                                                                            '?set_slot@connection@sigc@@AAEXPAVslot_base@2@@Z',
                                                                                            '??4connection@sigc@@QAEAAU01@ABU01@@Z',
                                                                                            '??0trackable@sigc@@QAE@XZ',
                                                                                            '??1signal_exec@internal@sigc@@QAE@XZ',
                                                                                            '??0slot_base@sigc@@QAE@PAUslot_rep@internal@1@@Z',
                                                                                            '?disconnect@connection@sigc@@QAEXXZ',
                                                                                            '?notify_callbacks@trackable@sigc@@QAEXXZ',
                                                                                            '?connected@connection@sigc@@QBE_NXZ',
                                                                                            '?clear@signal_base@sigc@@QAEXXZ',
                                                                                            '??Bconnection@sigc@@QAE_NXZ',
                                                                                            '?remove_destroy_notify_callback@trackable@sigc@@QBEXPAX@Z',
                                                                                            '??0slot_base@sigc@@QAE@ABV01@@Z',
                                                                                            '??0signal_base@sigc@@QAE@XZ',
                                                                                            '??0connection@sigc@@QAE@ABU01@@Z',
                                                                                            '??1connection@sigc@@QAE@XZ',
                                                                                            '??0connection@sigc@@QAE@XZ',
                                                                                            '??4slot_base@sigc@@QAEAAV01@ABV01@@Z',
                                                                                            '??1signal_base@sigc@@QAE@XZ',
                                                                                            '??0slot_base@sigc@@QAE@XZ',
                                                                                            '??1trackable@sigc@@QAE@XZ',
                                                                                            '??1slot_base@sigc@@QAE@XZ',
                                                                                            '??1slot_rep@internal@sigc@@QAE@XZ',
                                                                                            '?VMAppUtil_GetResourceModule@@YAPAUHINSTANCE__@@XZ',
                                                                                            '?VMAppUtil_SetResourceModule@@YAXPAUHINSTANCE__@@@Z',
                                                                                            '?VMComPtr_CreateInstance@@YAPAXHABU_GUID@@0ABVstring@utf@@@Z',
                                                                                            '?VMComSingletonAuthority_ReleaseAll@@YAXXZ',
                                                                                            '?Save@PrefsBase@cui@@QAEX_N@Z',
                                                                                            '?CloseVM@VMMgr@cui@@QAEXPAVVM@2@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@sigc@@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@5@@Z',
                                                                                            '?ShowDownloadsDialog@ToolsMgr@cui@@QAEX_N@Z',
                                                                                            '?IsClosable@ToolsMgr@cui@@QAE_NXZ',
                                                                                            '?isRunning@OVFTool@cui@@2V?$Property@_N@2@A',
                                                                                            '?IsRunning@Converter@cui@@SA_NXZ',
                                                                                            '?SetBrowseSlot@cui@@YAXABV?$slot@XABVstring@utf@@Unil@sigc@@U34@U34@U34@U34@U34@@sigc@@@Z',
                                                                                            '?SetVMMgr@cui@@YAXAAVVMMgr@1@@Z',
                                                                                            '??B?$Property@H@cui@@QBEHXZ',
                                                                                            '?GetVMs@VMMgr@cui@@QBE?AV?$list@PAVVM@cui@@V?$allocator@PAVVM@cui@@@std@@@std@@XZ',
                                                                                            '?ScheduleCallback@cui@@3V?$slot@Uconnection@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@2@IUnil@2@U42@U42@U42@U42@@sigc@@A',
                                                                                            '?DeleteVM@CnxFS@cui@@QAEXABVstring@utf@@PAVDlgMgr@2@_NV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@7@@Z',
                                                                                            '?GetString@VMID@cui@@QBEABVstring@utf@@XZ',
                                                                                            '??0Error@cui@@QAE@ABVstring@utf@@@Z',
                                                                                            '?SetLocale@ToolsMgr@cui@@QAEXABVstring@utf@@@Z',
                                                                                            '?SetDataCollection@cui@@YAXAAVDataCollection@1@@Z',
                                                                                            '?SetInfoBarMgr@cui@@YAXAAVInfoBarMgr@1@@Z',
                                                                                            '?USBLibGlue_Init@cui@@YA_NQAPBUVUsbBackendInterface@@I@Z',
                                                                                            '?SetSecurePrefs@cui@@YAXAAVSecurePrefs@1@@Z',
                                                                                            '??0SecurePrefs@cui@@QAE@XZ',
                                                                                            '?connect@DeferredSignal@cui@@QAE?AU?$slot_iterator@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@sigc@@@sigc@@ABV?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@4@@Z',
                                                                                            '?SetPlayerPrefs@cui@@YAXAAVPlayerPrefs@1@@Z',
                                                                                            '?Load@PrefsBase@cui@@QAEXXZ',
                                                                                            '?SetHostMgr@cui@@YAXAAVHostMgr@1@@Z',
                                                                                            '??0HostMgr@cui@@QAE@XZ',
                                                                                            '?SetRpcMgr@cui@@YAXAAVMgr@rpc@vmdbLayout@@@Z',
                                                                                            '??0Mgr@rpc@vmdbLayout@@QAE@ABVCtx@vmdb@@PAUIVmdbPoll@@@Z',
                                                                                            '?SetFoundrySDK@foundry@@YAXH@Z',
                                                                                            '?SetVmdbCtx@cui@@YAXAAVCtx@vmdb@@@Z',
                                                                                            '??4Ctx@vmdb@@QAEAAV01@ABV01@@Z',
                                                                                            '??0Ctx@vmdb@@QAE@PAUVmdbCtx@@_NH@Z',
                                                                                            '?NewHost@HostMgr@cui@@MAEPAVHost@2@ABUHostConstructParams@2@@Z',
                                                                                            '?NewClientHost@HostMgr@cui@@MAEPAVLocalHost@2@ABUHostConstructParams@2@@Z',
                                                                                            '?LoadPreferences@SecurePrefs@cui@@MAEXPAUDictionary@@@Z',
                                                                                            '?SavePreferences@SecurePrefs@cui@@MAEXPAUDictionary@@@Z',
                                                                                            '?IsInitialized@ToolsMgr@cui@@UBE_NXZ',
                                                                                            '?SendData@DataCollection@cui@@UAEXXZ',
                                                                                            '?LogData@DataCollection@cui@@UAEXABVstring@utf@@0V34@@Z',
                                                                                            '??1Mgr@rpc@vmdbLayout@@UAE@XZ',
                                                                                            '??1HostMgr@cui@@UAE@XZ',
                                                                                            '??1SecurePrefs@cui@@UAE@XZ',
                                                                                            '?c_str@SensitiveString@cui@@QBEPBDXZ',
                                                                                            '?GetVMByCfgPath@VMMgr@cui@@QBEPAVVM@2@ABVstring@utf@@@Z',
                                                                                            '?Cancel@cui@@YAXV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@@Z',
                                                                                            '?GetFilename@VM@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '?Invoke@Confirm@cui@@QAEXXZ',
                                                                                            '??0Confirm@cui@@QAE@ABVstring@utf@@PAVDlgMgr@1@0ABV?$vector@VLocalizedString@cui@@V?$allocator@VLocalizedString@cui@@@std@@@std@@W4ChoiceIndex@01@W4Level@severity@1@@Z',
                                                                                            '?YES_NO@Confirm@cui@@2V?$vector@VLocalizedString@cui@@V?$allocator@VLocalizedString@cui@@@std@@@std@@B',
                                                                                            '??1Confirm@cui@@UAE@XZ',
                                                                                            '?SetIsPaused@VM@cui@@QAEX_NV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@4@@Z',
                                                                                            '?GetIsPaused@VM@cui@@QBE_NXZ',
                                                                                            '?Add@VMMRU@cui@@QAEXABVstring@utf@@0@Z',
                                                                                            '?ShowCloseVMDlg@cui@@YAXPAVDlgMgr@1@ABVstring@utf@@_N2V?$slot@XW4CloseVMButton@cui@@Unil@sigc@@U34@U34@U34@U34@U34@@sigc@@@Z',
                                                                                            '?GetPowerSuspendActionState@VM@cui@@QBE?AW4State@powerAction@2@XZ',
                                                                                            '?GetNumClientDevices@RemoteDeviceMgr@cui@@QBEHXZ',
                                                                                            '?CreateVMFromUrl@StreamMgr@cui@@SAXABVstring@utf@@PAVHost@2@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XVstring@utf@@Unil@sigc@@U34@U34@U34@U34@U34@@7@@Z',
                                                                                            '?GetClientHost@cui@@YAPAVLocalHost@1@XZ',
                                                                                            '?GetInfo@Host@cui@@QAEAAVHostInfo@2@XZ',
                                                                                            '?InsertRegisteredTrademark@cui@@YA?AVstring@utf@@ABV23@@Z',
                                                                                            '?GetDlgMgr@VM@cui@@UBEPAVDlgMgr@2@XZ',
                                                                                            '?SetDlgMgr@VM@cui@@UAEXPAVDlgMgr@2@@Z',
                                                                                            '?Delete@VM@cui@@UAEXV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@@Z',
                                                                                            '?Clone@VM@cui@@UAEXHW4CloneType@snapshots@2@ABVstring@utf@@1V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@8@3@Z',
                                                                                            '?GetSecurePrefs@cui@@YAAAVSecurePrefs@1@XZ',
                                                                                            '?UnsetMKS@VM@cui@@UAEXPAVMKS@2@@Z',
                                                                                            '?IsUnityMgrPresent@VM@cui@@UBE_NXZ',
                                                                                            '?SetPowerState@VM@cui@@UAEXW4State@power@2@W4Option@42@_NHV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@7@@Z',
                                                                                            '?PowerOn@VM@cui@@UAEXXZ',
                                                                                            '?GetNotificationMgr@VM@cui@@UBEAAVNotificationMgr@2@XZ',
                                                                                            '?GetSharedFolderMgr@VM@cui@@UBEAAVSharedFolderMgr@2@XZ',
                                                                                            '?GetStreamMgr@VM@cui@@UAEAAVStreamMgr@2@XZ',
                                                                                            '?CollectSupportInformation@VM@cui@@UAEXXZ',
                                                                                            '?InitSubclass@VM@cui@@MAEXV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@4@@Z',
                                                                                            '?Get@?$Property@Vstring@utf@@@cui@@UBEABVstring@utf@@XZ',
                                                                                            '?IsSet@VMConfigTransaction@cui@@QBE_NABVPropertyBase@2@@Z',
                                                                                            '?GetRemDevs@VM@cui@@QAEXABV?$slot@XABV?$list@PAVRemovableDevice@vmdevice@cui@@V?$allocator@PAVRemovableDevice@vmdevice@cui@@@std@@@std@@Unil@sigc@@U34@U34@U34@U34@U34@@sigc@@@Z',
                                                                                            '?OnPropertyDestroyed@VMConfigTransaction@cui@@AAEXPBVPropertyBase@2@PBVValueBase@12@@Z',
                                                                                            '?OnPropertyChanged@VMConfigTransaction@cui@@AAEXPBVPropertyBase@2@PBVValueBase@12@@Z',
                                                                                            '?LookupDeviceByKey@DeviceMgr@cui@@QBEPAVDevice@vmdevice@2@ABVstring@utf@@PAVVMConfigTransaction@2@@Z',
                                                                                            '?GetDeviceMgr@VMEditable@cui@@UBE?AV?$RefPtr@VDeviceMgr@cui@@@Glib@@XZ',
                                                                                            '?GetTransaction@VMEditable@cui@@QAEAAVVMConfigTransaction@2@XZ',
                                                                                            '??1FullscreenMgr@cui@@QAE@XZ',
                                                                                            '?IsInfoBarShowing@InfoBarMgr@cui@@QBE_NXZ',
                                                                                            '?LeaveFullscreen@FullscreenMgr@cui@@QAEXXZ',
                                                                                            '?Add@NotificationMgr@cui@@QAEIW4Type@Notification@2@ABVstring@utf@@1_J_N@Z',
                                                                                            '?GetVNCLastError@VM@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '??8Rect@cui@@QBE_NABV01@@Z',
                                                                                            '??1PropertyBase@cui@@QAE@XZ',
                                                                                            '?CanMultiMon@FullscreenMgr@cui@@QAE_NPAVVM@2@PAV?$vector@Vstring@utf@@V?$allocator@Vstring@utf@@@std@@@std@@_N@Z',
                                                                                            '?CurrentlyFullscreen@FullscreenMgr@cui@@QBE_NXZ',
                                                                                            '??0PropertyBase@cui@@QAE@XZ',
                                                                                            '?MarkRead@NotificationMgr@cui@@QAEXI@Z',
                                                                                            '?GetPowerTooltip@VM@cui@@SA?AVstring@utf@@PBV12@W4State@power@2@W4Option@62@@Z',
                                                                                            '?ShowFullscreenWindows@MKSScreenWindowCoordinator@cui@@QAEXABVVM@2@@Z',
                                                                                            '?ShowEnterUnityFailedMessage@UnityMgr@cui@@QBEXXZ',
                                                                                            '?HandleGuestTopologyChange@MKSScreenWindowCoordinator@cui@@QAEXAAVVM@2@ABVRect@2@@Z',
                                                                                            '?Width@Rect@cui@@QBEHXZ',
                                                                                            '?Height@Rect@cui@@QBEHXZ',
                                                                                            '?GotoCurTopology@FullscreenMgr@cui@@QAE?AV?$vector@IV?$allocator@I@std@@@std@@PAVVM@2@PAIV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@7@@Z',
                                                                                            '?NextTopology@FullscreenMgr@cui@@QAEXXZ',
                                                                                            '?SetHostTopology@FullscreenMgr@cui@@QAEXABV?$vector@VRect@cui@@V?$allocator@VRect@cui@@@std@@@std@@H@Z',
                                                                                            '?GotoFallbackTopology@FullscreenMgr@cui@@QAE?AV?$vector@IV?$allocator@I@std@@@std@@PAVVM@2@IV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@7@@Z',
                                                                                            '?StartFullscreen@FullscreenMgr@cui@@QAEXI@Z',
                                                                                            '?MULTIMON_FAIL_TITLE@FullscreenMgr@cui@@2VLocalizedString@2@B',
                                                                                            '?MULTIMON_FAIL_DIALOG_FORMAT@FullscreenMgr@cui@@2VLocalizedString@2@B',
                                                                                            '?MULTIMON_FAIL_DIALOG_HEADER@FullscreenMgr@cui@@2VLocalizedString@2@B',
                                                                                            '?MULTIMON_FAIL_REASON_FORMAT@FullscreenMgr@cui@@2VLocalizedString@2@B',
                                                                                            '?str@LocalizedString@cui@@QBEABVstring@utf@@XZ',
                                                                                            '?MULTIMON_FAIL_DIALOG_FOOTER_PLAYER@FullscreenMgr@cui@@2VLocalizedString@2@B',
                                                                                            '?MULTIMON_FAIL_DIALOG_FOOTER_PLAYER_LICENSED@FullscreenMgr@cui@@2VLocalizedString@2@B',
                                                                                            '??1DeferredSignal@cui@@QAE@XZ',
                                                                                            '?NewProgressFromProgress@DlgMgr@cui@@UAEPAVDlgProgress@2@V?$RefPtr@VProgress@progress@cui@@@Glib@@@Z',
                                                                                            '?GetText@Notification@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '?GetDetail@Notification@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '?GetID@Notification@cui@@QBEIXZ',
                                                                                            '?GetType@Notification@cui@@QBE?AW4Type@12@XZ',
                                                                                            '?GetBoundBox@FullscreenMgr@cui@@QAE?AVRect@2@ABV?$vector@IV?$allocator@I@std@@@std@@@Z',
                                                                                            '?SetFullscreenMgr@VM@cui@@QAEXAAVFullscreenMgr@2@@Z',
                                                                                            '??0FullscreenMgr@cui@@QAE@ABV?$vector@VRect@cui@@V?$allocator@VRect@cui@@@std@@@std@@_N@Z',
                                                                                            '??0DeferredSignal@cui@@QAE@XZ',
                                                                                            '?make_slot@DeferredSignal@cui@@QAE?AV?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@sigc@@XZ',
                                                                                            '?SetCurrentVM@InfoBarMgr@cui@@QAEXPAVVM@2@@Z',
                                                                                            '??1MKSScreenWindowCoordinator@cui@@UAE@XZ',
                                                                                            '??_7MKSScreenWindowCoordinator@cui@@6B@',
                                                                                            '?Delete@VMMRU@cui@@QAEXABVstring@utf@@_N@Z',
                                                                                            '?HaveEncryptionKeys@VMMgr@cui@@QBE_NABVVMID@2@@Z',
                                                                                            '?CombineScreenshots@cui@@YA_NABV?$vector@UScreenshot@cui@@V?$allocator@UScreenshot@cui@@@std@@@std@@PAUImageInfo@@PAV?$vector@UtagRECT@@V?$allocator@UtagRECT@@@std@@@3@@Z',
                                                                                            '?GetShouldPowerOnAfterCreation@VM@wizard@cui@@QBE_NXZ',
                                                                                            '?OnNewVM@InfoBarMgr@cui@@QAEXABV?$WeakPtr@VCnx@cui@@@2@ABVstring@utf@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@sigc@@@Z',
                                                                                            '?GetResultID@VM@wizard@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '?GetConnection@Host@cui@@QBE?AV?$WeakPtr@VCnx@cui@@@2@XZ',
                                                                                            '?GetHost@New@wizard@cui@@QBEPAVHost@3@XZ',
                                                                                            '?PreparePaschalOvum@cui@@YAXPAVHost@1@ABVstring@utf@@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XVstring@utf@@Unil@sigc@@U34@U34@U34@U34@U34@@6@@Z',
                                                                                            '?GetClientHost@HostMgr@cui@@QAEPAVLocalHost@2@XZ',
                                                                                            '?GetHostMgr@cui@@YAAAVHostMgr@1@XZ',
                                                                                            '??0VMEditableCreate@cui@@QAE@PAVHost@1@@Z',
                                                                                            '?GetHost@VMEditable@cui@@UBEPAVHost@2@XZ',
                                                                                            '?GetConnection@VMEditable@cui@@UBE?AV?$WeakPtr@VCnx@cui@@@2@XZ',
                                                                                            '?GetVM@VMEditableVMDB@cui@@UBEPAVVM@2@XZ',
                                                                                            '?SetName@VMEditable@cui@@UAEXABVstring@utf@@@Z',
                                                                                            '?GetName@VMEditable@cui@@UBE?AVstring@utf@@XZ',
                                                                                            '?SetFilename@VMEditable@cui@@UAEXABVstring@utf@@@Z',
                                                                                            '?SetConfigVersion@VMEditable@cui@@UAEXH@Z',
                                                                                            '?GetConfigVersion@VMEditable@cui@@UBEHXZ',
                                                                                            '?SetHardwareVersion@VMEditable@cui@@UAEXH@Z',
                                                                                            '?SetProductCompat@VMEditable@cui@@UAEXW4ProductCompat@2@@Z',
                                                                                            '?SetGuestOSInfo@VMEditable@cui@@UAEXABUGuestOSInfo@2@_N@Z',
                                                                                            '?Load@VMEditableCreate@cui@@UAEXXZ',
                                                                                            '?Save@VMEditableCreate@cui@@UAEXV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@4@@Z',
                                                                                            '?GetSaveWillFail@VMEditableCreate@cui@@UAE_NXZ',
                                                                                            '??1VMEditableCreate@cui@@UAE@XZ',
                                                                                            '??1GuestOSInfo@cui@@QAE@XZ',
                                                                                            '?GetDevices@DeviceListBase@vmdevice@cui@@QBE?BV?$vector@PAVDevice@vmdevice@cui@@V?$allocator@PAVDevice@vmdevice@cui@@@std@@@std@@PBVVMConfigTransaction@3@@Z',
                                                                                            '?GetVMVersionDescription@HardwareVersion@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '?GetGuestOSInfo@VM@cui@@QBE?AUGuestOSInfo@2@XZ',
                                                                                            '??1PreferencePropertyBase@cui@@UAE@XZ',
                                                                                            '??_7PreferencePropertyBase@cui@@6B@',
                                                                                            '??1PlayerPrefs@cui@@UAE@XZ',
                                                                                            '??_D?$PreferenceProperty@H@cui@@QAEXXZ',
                                                                                            '?LoadPreferences@PrefsBase@cui@@MAEXPAUDictionary@@@Z',
                                                                                            '?SavePreferences@PrefsBase@cui@@MAEXPAUDictionary@@@Z',
                                                                                            '??0?$PreferenceProperty@H@cui@@QAE@Vstring@utf@@ABHV?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@sigc@@@Z',
                                                                                            '??0PlayerPrefs@cui@@QAE@XZ',
                                                                                            '?LV7_SERIAL_NUMBER_MAX_LENGTH@HostInfo@cui@@2IB',
                                                                                            '??1Dlg@cui@@UAE@XZ',
                                                                                            '??0Dlg@cui@@QAE@XZ',
                                                                                            '?Reply@Dlg@cui@@UAE?AW4RepliedAction@12@XZ',
                                                                                            '?LV7_SERIAL_NUMBER_DIGITS@HostInfo@cui@@2IB',
                                                                                            '?LV7_SERIAL_NUMBER_HYPHENS@HostInfo@cui@@2IB',
                                                                                            '??_D?$Property@Vstring@utf@@@cui@@QAEXXZ',
                                                                                            '??0?$Property@Vstring@utf@@@cui@@QAE@XZ',
                                                                                            '?GetCurrentIconState@ToolsMgr@cui@@QBE?AW4IconState@tools@2@XZ',
                                                                                            '?GetCount@NotificationMgr@cui@@QBEIXZ',
                                                                                            '?GetUnreadCount@NotificationMgr@cui@@QBEIXZ',
                                                                                            '?GetSequenceDescription@MKSKeys@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '?GetCurrentIconTooltip@ToolsMgr@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '?GetTooltip@NotificationMgr@cui@@QAE?AVstring@utf@@XZ',
                                                                                            '??4?$Property@Vstring@utf@@@cui@@QAEAAV01@ABVstring@utf@@@Z',
                                                                                            '?EnableAll@HintsState@cui@@QAEXPAVDlgMgr@2@@Z',
                                                                                            '?Cleanup@NotificationMgr@cui@@QAEXXZ',
                                                                                            '?SendCtrlAltDel@VM@cui@@QAEXXZ',
                                                                                            '?MakeAbortSlot@DlgMgr@cui@@QAE?AV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@ABVstring@utf@@@Z',
                                                                                            '?ToggleShowInStatusBar@USBDisplay@cui@@QAEX_J@Z',
                                                                                            '?GetShowInStatusBar@USBDisplay@cui@@QBE_N_J@Z',
                                                                                            '?SetShowInStatusBar@USBDisplay@cui@@QAEX_J_N@Z',
                                                                                            '??8?$Property@Vstring@utf@@@cui@@QBE_NABVstring@utf@@@Z',
                                                                                            '?Set@?$Property@Vstring@utf@@@cui@@UAEXABVstring@utf@@@Z',
                                                                                            '?ConnectDevice@RemoteDeviceMgr@cui@@QAE_NABVstring@utf@@_N0V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@sigc@@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@6@3@Z',
                                                                                            '?RemDevSetUseClientBackend@VM@cui@@QAEXABVstring@utf@@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@6@_N@Z',
                                                                                            '?SetUsePhysicalBackend@PhysicalBackend@vmdevice@cui@@QAEXPAVVMConfigTransaction@3@@Z',
                                                                                            '?SetUseFileBackend@FileBackend@vmdevice@cui@@QAEXPAVVMConfigTransaction@3@@Z',
                                                                                            '?CreateEditable@VM@cui@@QAEPAVVMEditable@2@XZ',
                                                                                            '?GetIsLocalClient@ClientBackend@vmdevice@cui@@QBE_NXZ',
                                                                                            '?ToggleRemDev@VM@cui@@QAEXABVstring@utf@@@Z',
                                                                                            '?GetClientDevice@RemoteDeviceMgr@cui@@QBE?AU?$pair@Vstring@utf@@_N@std@@ABVstring@utf@@@Z',
                                                                                            '?GetIsConnected@RemoteDeviceMgr@cui@@QBE_NABVstring@utf@@@Z',
                                                                                            '?GetUsePhysicalBackend@PhysicalBackend@vmdevice@cui@@QBE_NPBVVMConfigTransaction@3@@Z',
                                                                                            '?GetUseFileBackend@FileBackend@vmdevice@cui@@QBE_NPBVVMConfigTransaction@3@@Z',
                                                                                            '?GetUseClientBackend@ClientBackend@vmdevice@cui@@QBE_NPBVVMConfigTransaction@3@@Z',
                                                                                            '?GetFetchAllToolsPending@ToolsMgr@cui@@QBE_NXZ',
                                                                                            '?ActivateDownloadsDialog@ToolsMgr@cui@@QAEXXZ',
                                                                                            '?FetchAllTools@ToolsMgr@cui@@QAEXV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@4@I@Z',
                                                                                            '?GetDisplayName@Device@vmdevice@cui@@QBEABVstring@utf@@PBVVMConfigTransaction@3@@Z',
                                                                                            '??_DCapability@cui@@QAEXXZ',
                                                                                            '??0Capability@cui@@QAE@PBD_N@Z',
                                                                                            '??1Capability@cui@@UAE@XZ',
                                                                                            '??1SensitiveString@cui@@QAE@XZ',
                                                                                            '??0SensitiveString@cui@@QAE@XZ',
                                                                                            '?IsStreamUrl@StreamMgr@cui@@SA_NABVstring@utf@@@Z',
                                                                                            '?Format@cui@@YA?AVstring@utf@@PBDZZ',
                                                                                            '??4SensitiveString@cui@@QAEAAV01@ABV01@@Z',
                                                                                            '?GetTimeFormatW@cui@@YA?AVstring@utf@@_J_N1@Z',
                                                                                            '??0SensitiveString@cui@@QAE@PBD@Z',
                                                                                            '?SetExtraRemoteMKSArgs@cui@@YAXABVstring@utf@@@Z',
                                                                                            '?InitGVmomi@gvmomi@@YAXXZ',
                                                                                            '?GetLocalString@cui@@YA?AVstring@utf@@PBD@Z',
                                                                                            '?SetInitialState@Capability@cui@@QAEX_N@Z',
                                                                                            '?Own@SensitiveString@cui@@QAEXAAV?$vector@DV?$SensitiveAllocator@D@cui@@@std@@@Z',
                                                                                            '??1FilePath@cui@@UAE@XZ',
                                                                                            '??1FilePathWin32@cui@@UAE@XZ',
                                                                                            '?GetPrefs@cui@@YAAAVPrefs@1@XZ',
                                                                                            '?GetPlayerPrefs@cui@@YAAAVPlayerPrefs@1@XZ',
                                                                                            '?c_str@LocalizedString@cui@@QBEPBDXZ',
                                                                                            '?w_str@LocalizedString@cui@@QBEPB_WXZ',
                                                                                            '?SetCertificateCheck@CnxMgr@cui@@QAEXPAVCertificateCheck@2@@Z',
                                                                                            '?GetCnxMgr@cui@@YAAAVCnxMgr@1@XZ',
                                                                                            '??1LocalizedString@cui@@QAE@XZ',
                                                                                            '??BLocalizedString@cui@@QBEABVstring@utf@@XZ',
                                                                                            '?SetFeatures@cui@@YAXPAVFeatures@1@@Z',
                                                                                            '??0LocalizedString@cui@@QAE@PBD@Z',
                                                                                            '??_7FilePath@cui@@6B@',
                                                                                            '??0FilePathWin32@cui@@QAE@XZ',
                                                                                            '??1VMMgr@cui@@UAE@XZ',
                                                                                            '??0VMMgr@cui@@IAE@PAUVMHS@@@Z',
                                                                                            '?OpenVM@VMMgr@cui@@UAEXABVVMID@2@_NPAVDlgMgr@2@V?$slot@X_NABVOpenVMError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XPAVVM@cui@@_NUnil@sigc@@U34@U34@U34@U34@@6@@Z',
                                                                                            '?OpenVM@VMMgr@cui@@UAEXABV?$WeakPtr@VCnx@cui@@@2@ABVstring@utf@@PAVDlgMgr@2@V?$slot@XPAVVM@cui@@_NUnil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@X_NABVOpenVMError@cui@@Unil@sigc@@U34@U34@U34@U34@@8@@Z',
                                                                                            '?OpenVM@VMMgr@cui@@UAEXABV?$WeakPtr@VCnx@cui@@@2@ABVstring@utf@@1PAVDlgMgr@2@V?$slot@XPAVVM@cui@@_NUnil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@X_NABVOpenVMError@cui@@Unil@sigc@@U34@U34@U34@U34@@8@@Z',
                                                                                            '?OpenVM@VMMgr@cui@@UAEXABVstring@utf@@VSensitiveString@2@1_NPAVDlgMgr@2@V?$slot@XPAVVM@cui@@_NUnil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@X_NABVOpenVMError@cui@@Unil@sigc@@U34@U34@U34@U34@@8@@Z',
                                                                                            '?OpenVM@VMMgr@cui@@UAEXABVstring@utf@@_NPAVDlgMgr@2@V?$slot@XPAVVM@cui@@_NUnil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@X_NABVOpenVMError@cui@@Unil@sigc@@U34@U34@U34@U34@@7@@Z',
                                                                                            '?ManageMessages@VM@cui@@QAEXXZ',
                                                                                            '?SetParentPID@MKS@cui@@QAEXH@Z',
                                                                                            '?GetMKS@VM@cui@@QBEPAVMKS@2@XZ',
                                                                                            '??1OpenVMError@cui@@UAE@XZ',
                                                                                            '??1Error@cui@@UAE@XZ',
                                                                                            '?SetAccepted@EULA@cui@@QAEXXZ',
                                                                                            '?GetAccepted@EULA@cui@@QAE_NXZ',
                                                                                            '?SetAcceptedSingleSession@EULA@cui@@QAEXXZ',
                                                                                            '?SetPlayerType@DataCollection@cui@@QAEX_N0@Z',
                                                                                            '?GetDataCollection@cui@@YAAAVDataCollection@1@XZ',
                                                                                            '??BCapability@cui@@QBE_NXZ',
                                                                                            '?GetFeatures@cui@@YAPAVFeatures@1@XZ',
                                                                                            '?GetLocalURL@cui@@YA?AVstring@utf@@ABV23@_N@Z',
                                                                                            '?unreference@RefCounted@cui@@QBEXXZ',
                                                                                            '??0OpenVMError@cui@@QAE@ABV01@@Z',
                                                                                            '??0Error@cui@@QAE@ABV01@@Z',
                                                                                            '??0NullPointerError@cui@@QAE@ABV01@@Z',
                                                                                            '??1NullPointerError@cui@@UAE@XZ',
                                                                                            '??0OpenVMError@cui@@QAE@ABVError@1@@Z',
                                                                                            '??0NullPointerError@cui@@QAE@XZ',
                                                                                            '??1VMID@cui@@QAE@XZ',
                                                                                            '?UnlockVM@VMMgr@cui@@QAE_NABVVMID@2@ABVSensitiveString@2@@Z',
                                                                                            '?GetVMMgr@cui@@YAAAVVMMgr@1@XZ',
                                                                                            '??0VMID@cui@@QAE@ABV?$WeakPtr@VCnx@cui@@@1@ABVstring@utf@@@Z',
                                                                                            '?GetClientCnx@CnxMgr@cui@@QBE?AV?$WeakPtr@VCnx@cui@@@2@XZ',
                                                                                            '?Rename@VMMRU@cui@@QAEXABVstring@utf@@0@Z',
                                                                                            '?SanitizeMessage@cui@@YA?AVstring@utf@@ABV23@_N@Z',
                                                                                            '?GetDeviceList@DeviceMgr@cui@@QBE?AV?$WeakPtr@VDeviceListBase@vmdevice@cui@@@2@W4DeviceType@2@@Z',
                                                                                            '?GetDeviceMgr@VM@cui@@QBE?AV?$RefPtr@VVMDeviceMgr@cui@@@Glib@@XZ',
                                                                                            '?Get@NotificationMgr@cui@@QAEPAVNotification@2@I@Z',
                                                                                            '?GetInUnity@VM@cui@@QBE_NXZ',
                                                                                            '?SetEnterUnityOnReady@UnityMgr@cui@@QAEX_N@Z',
                                                                                            '?GetEnterUnityOnReady@UnityMgr@cui@@QBE_NXZ',
                                                                                            '?GetCanGuestRunUnity@VM@cui@@QBE_NXZ',
                                                                                            '?GetBusyDescription@VMBackgroundJobMgr@cui@@QBE?AVstring@utf@@_N@Z',
                                                                                            '?GetTotalProgress@VMBackgroundJobMgr@cui@@QBEHXZ',
                                                                                            '?IsStreamVM@StreamMgr@cui@@QBE_NXZ',
                                                                                            '?GetBackgroundJobMgr@VM@cui@@QBEPAVVMBackgroundJobMgr@2@XZ',
                                                                                            '?GetStatusMsg@StreamMgr@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '?empty@SensitiveString@cui@@QBE_NXZ',
                                                                                            '??0OpenVMError@cui@@QAE@ABVstring@utf@@@Z',
                                                                                            '?SetGrabState@MKS@cui@@QAEXW4GrabState@12@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@5@@Z',
                                                                                            '?GetGrabState@MKS@cui@@QBE?AW4GrabState@12@XZ',
                                                                                            '?LogViewMode@DataCollection@cui@@QAEXPBVVM@2@W4ViewMode@12@@Z',
                                                                                            '?GetIsClientCnx@Cnx@cui@@QBE_NXZ',
                                                                                            '?GetConnection@VM@cui@@QBE?AV?$WeakPtr@VCnx@cui@@@2@XZ',
                                                                                            '??B?$Property@Vstring@utf@@@cui@@QBE?AVstring@utf@@XZ',
                                                                                            '??1Ctx@vmdb@@QAE@XZ',
                                                                                            '??0Ctx@vmdb@@QAE@XZ',
                                                                                            '?GetRpcMgr@cui@@YAAAVMgr@rpc@vmdbLayout@@XZ',
                                                                                            '?SetMKS@VM@cui@@UAEXPAVMKS@2@@Z',
                                                                                            '?ProcessWindowMessage@CUnityStatusPage@view@wui@@UAEHPAUHWND__@@IIJAAJK@Z',
                                                                                            '?GetWindowProc@?$CWindowImplBaseT@VCWindowExport@wui@@V?$CWinTraits@$0EGAAAAAA@$0A@@ATL@@@ATL@@UAEP6GJPAUHWND__@@IIJ@ZXZ',
                                                                                            '?OnFinalMessage@CUnityStatusPage@view@wui@@MAEXPAUHWND__@@@Z',
                                                                                            '??1CUnityStatusPage@view@wui@@UAE@XZ',
                                                                                            '?UWM_MKS_TOUCH_NOTIFICATION@wui@@3IB',
                                                                                            '??_7MKSScreenWindowCoordinator@wui@@6B@',
                                                                                            '?GetMargins@Bar@unibar@wui@@QBE?AUBorders@3@XZ',
                                                                                            '?GetChildRect@util@wui@@YA?AUtagRECT@@PAUHWND__@@@Z',
                                                                                            '?CommandBarBorderFullScreen@Palette@xui@@3VTColor@2@A',
                                                                                            '?CommandBarBorderWindowed@Palette@xui@@3VTColor@2@A',
                                                                                            '?CommandBarBottom@Palette@xui@@3VTColor@2@A',
                                                                                            '?ToCOLORREF@TColor@xui@@QBEKXZ',
                                                                                            '?CommandBarTop@Palette@xui@@3VTColor@2@A',
                                                                                            '?MoveWindowVertically@util@wui@@YA_NPAUHWND__@@0H@Z',
                                                                                            '??BPlayerLibrary@view@wui@@QBE?AVCWindow@ATL@@XZ',
                                                                                            '?GetWindowTextAsStr@util@wui@@YA?AVstring@utf@@PAUHWND__@@@Z',
                                                                                            '?FileFilter@util@wui@@YA?AV?$vector@_WV?$allocator@_W@std@@@std@@ABVstring@utf@@@Z',
                                                                                            '?MakeComdlgFilterSpecs@shell@util@wui@@YAXABVstring@utf@@AAV?$vector@Vstring@utf@@V?$allocator@Vstring@utf@@@std@@@std@@AAV?$vector@U_COMDLG_FILTERSPEC@@V?$allocator@U_COMDLG_FILTERSPEC@@@std@@@7@@Z',
                                                                                            '?ResizeBmp@util@wui@@YAPAUHBITMAP__@@PAUHWND__@@PAU3@ABUtagRECT@@PAUtagSIZE@@@Z',
                                                                                            '?CreateInstance@NewVM@wizard@wui@@SAPAV123@PAVHost@cui@@PAVVMEditableCreate@5@@Z',
                                                                                            '?GetWindowTextAsSensitiveStr@util@wui@@YA?AVSensitiveString@cui@@PAUHWND__@@@Z',
                                                                                            '?PlayerLibrary_CreateInstance@view@wui@@YAPAVPlayerLibrary@12@PAUHWND__@@JI@Z',
                                                                                            '??1Dlg@wui@@UAE@XZ',
                                                                                            '??0Dlg@wui@@QAE@XZ',
                                                                                            '?DlgProcessMessage@wui@@YAHPAUtagMSG@@@Z',
                                                                                            '?Register@DlgMgr@wui@@QAEXPAUHWND__@@V?$slot@HPAUtagMSG@@Unil@sigc@@U23@U23@U23@U23@U23@@sigc@@_N@Z',
                                                                                            '?GetTopParent@DlgMgr@wui@@QBEPAUHWND__@@XZ',
                                                                                            '?IsConverterInstalled@wui@@YA_NXZ',
                                                                                            '?GetHasXPMode@wui@@YA_NXZ',
                                                                                            '?GetMenuItemText@Tools@util@wui@@SA?AVstring@utf@@PBVVM@3@@Z',
                                                                                            '?ShouldEnableMenuItem@Tools@util@wui@@SA_NPBVVM@3@@Z',
                                                                                            '?CancelToolsInstall@VM@wui@@QAEXV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@4@@Z',
                                                                                            '?DownloadAndInstallTools@VM@wui@@QAEX_NV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@4@@Z',
                                                                                            '?ToggleWorkOffline@VM@wui@@QAEXXZ',
                                                                                            '?ImportXPMode@wui@@YAXV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XABVstring@utf@@Unil@sigc@@U34@U34@U34@U34@U34@@3@@Z',
                                                                                            '?ShowDialog@USBIconPicker@dialog@wui@@SAHABULocalUSBDev@VMDeviceMgr@cui@@@Z',
                                                                                            '?BrowseFile@util@wui@@YAXPAUHWND__@@ABUBrowseFileOptions@12@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XVstring@utf@@Unil@sigc@@U34@U34@U34@U34@U34@@6@@Z',
                                                                                            '?GetDisplayNames@hostDevSel@util@wui@@YA?AV?$vector@Vstring@utf@@V?$allocator@Vstring@utf@@@std@@@std@@PBVDevice@vmdevice@cui@@PBVVMConfigTransaction@8@PAVHost@8@_N@Z',
                                                                                            '??1Menubar@unibar@wui@@UAE@XZ',
                                                                                            '??0Menubar@unibar@wui@@QAE@ABVstring@utf@@@Z',
                                                                                            '?GetWindowProc@?$CWindowImplBaseT@V?$CToolBarCtrlT@VCWindowExport@wui@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEP6GJPAUHWND__@@IIJ@ZXZ',
                                                                                            '?OnFinalMessage@?$CWindowImplBaseT@V?$CToolBarCtrlT@VCWindowExport@wui@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEXPAUHWND__@@@Z',
                                                                                            '?GetText@Toolbar@unibar@wui@@MAEXIAAVstring@utf@@@Z',
                                                                                            '?GetTooltip@Toolbar@unibar@wui@@MAEXIAAVstring@utf@@@Z',
                                                                                            '?OnButton@Toolbar@unibar@wui@@MAEXI@Z',
                                                                                            '?OnDropdown@Toolbar@unibar@wui@@MAEXIABUtagRECT@@@Z',
                                                                                            '?OnItem@Menubar@unibar@wui@@MAEXI@Z',
                                                                                            '?Create@Menubar@unibar@wui@@UAEXPAUHWND__@@PAVPartParent@23@@Z',
                                                                                            '?GetHWND@Toolbar@unibar@wui@@UAEPAUHWND__@@XZ',
                                                                                            '?AdjustPartWidth@Menubar@unibar@wui@@UAEXPAI@Z',
                                                                                            '?GetSize@Menubar@unibar@wui@@UAE?AUtagSIZE@@W4SizeType@Part@23@@Z',
                                                                                            '??1XuiToolbar@unibar@wui@@UAE@XZ',
                                                                                            '?SetTooltipDelay@XuiToolbar@unibar@wui@@QAEXI@Z',
                                                                                            '?SetButtonSpacing@XuiToolbar@unibar@wui@@QAEXI@Z',
                                                                                            '?SetButtonPadding@XuiToolbar@unibar@wui@@QAEXI@Z',
                                                                                            '??0XuiToolbar@unibar@wui@@QAE@ABVstring@utf@@@Z',
                                                                                            '?GetType@TForm@xui@@UBEABVstring@utf@@XZ',
                                                                                            '?Load@TControl@xui@@UAEXAAVTStream@2@@Z',
                                                                                            '?Save@TControl@xui@@UAEXAAVTStream@2@@Z',
                                                                                            '?LoadProperties@TControl@xui@@UAEXAAVTStream@2@@Z',
                                                                                            '?LoadProperty@TControl@xui@@UAEXAAVTStream@2@@Z',
                                                                                            '?SaveProperties@TControl@xui@@UAEXAAVTStream@2@@Z',
                                                                                            '?DoInit@TControl@xui@@UAEXXZ',
                                                                                            '?DoCalcMinSize@TControl@xui@@UAEXXZ',
                                                                                            '?DoMove@TControl@xui@@UAEXHH@Z',
                                                                                            '?DoMouseMove@TControl@xui@@UAEXHH@Z',
                                                                                            '?DoMouseEnter@TControl@xui@@UAEXXZ',
                                                                                            '?DoMouseLeave@TControl@xui@@UAEXXZ',
                                                                                            '?DoMouseHover@TControl@xui@@UAEXXZ',
                                                                                            '?DoMouseEvent@TControl@xui@@UAEXHHI@Z',
                                                                                            '?DoKeyEvent@TControl@xui@@UAEXII@Z',
                                                                                            '?DoSetCursor@TControl@xui@@UAEXAAPB_W@Z',
                                                                                            '?DoContextMenu@TControl@xui@@UAEXHH@Z',
                                                                                            '?DoDraw@TControl@xui@@UAEXAAVGraphics@Gdiplus@@@Z',
                                                                                            '?DoResize@TControl@xui@@UAEXHH@Z',
                                                                                            '?DoLayout@TControl@xui@@UAEXXZ',
                                                                                            '?DoSetDirtyState@TControl@xui@@UAEXXZ',
                                                                                            '?DoUpdateVisibleState@TControl@xui@@UAEX_N@Z',
                                                                                            '?DoAction@TControl@xui@@UAEXXZ',
                                                                                            '?HitTest@TControl@xui@@UAE_NHH@Z',
                                                                                            '?AddControl@TControl@xui@@UAEXPAV12@@Z',
                                                                                            '?RemoveControl@TControl@xui@@UAEXPAV12@@Z',
                                                                                            '?SetParent@TControl@xui@@UAEXPAV12@@Z',
                                                                                            '?DrawControl@TControl@xui@@UAEXAAVGraphics@Gdiplus@@PAV12@@Z',
                                                                                            '?Refresh@TControl@xui@@UAEXXZ',
                                                                                            '?FindControl@TControl@xui@@UBEPAV12@ABVstring@utf@@_N@Z',
                                                                                            '?FindControl@TControl@xui@@UBEPAV12@HH@Z',
                                                                                            '?FindTopControl@TControl@xui@@UBEPAV12@HH@Z',
                                                                                            '?DoConvertXY@TControl@xui@@UBEXAAH0H@Z',
                                                                                            '?OnCreate@XuiToolbar@unibar@wui@@MAEXXZ',
                                                                                            '?GetText@XuiToolbar@unibar@wui@@MAEXIAAVstring@utf@@@Z',
                                                                                            '?Create@XuiPart@unibar@wui@@UAEXPAUHWND__@@PAVPartParent@23@@Z',
                                                                                            '?GetHWND@XuiPart@unibar@wui@@UAEPAUHWND__@@XZ',
                                                                                            '?AdjustPartWidth@Part@unibar@wui@@UAEXPAI@Z',
                                                                                            '?GetSize@XuiToolbar@unibar@wui@@UAE?AUtagSIZE@@W4SizeType@Part@23@@Z',
                                                                                            '??1XuiPart@unibar@wui@@UAE@XZ',
                                                                                            '??0XuiPart@unibar@wui@@QAE@ABVstring@utf@@@Z',
                                                                                            '?GetSize@XuiPart@unibar@wui@@UAE?AUtagSIZE@@W4SizeType@Part@23@@Z',
                                                                                            '??1DeviceLEDs@unibar@wui@@UAE@XZ',
                                                                                            '??0DeviceLEDs@unibar@wui@@QAE@ABVstring@utf@@@Z',
                                                                                            '?GetTooltip@XuiToolbar@unibar@wui@@MAEXIAAVstring@utf@@@Z',
                                                                                            '?OnButton@XuiToolbar@unibar@wui@@MAEXI@Z',
                                                                                            '?OnContext@DeviceLEDs@unibar@wui@@MAEXIABUtagPOINT@@@Z',
                                                                                            '?OnDropdown@XuiToolbar@unibar@wui@@MAEXIABUtagRECT@@@Z',
                                                                                            '?SetTooltip@XuiToolbar@unibar@wui@@QAEXIABVstring@utf@@@Z',
                                                                                            '?SetChecked@XuiToolbar@unibar@wui@@QAEXI_N@Z',
                                                                                            '?SetIcon@XuiToolbar@unibar@wui@@QAEXII@Z',
                                                                                            '?GetHeight@Bar@unibar@wui@@QAEIXZ',
                                                                                            '?GetRect@XuiToolbar@unibar@wui@@QBE?AUtagRECT@@I@Z',
                                                                                            '?TranslateKbdMessage@Menubar@unibar@wui@@QAE_NAAUtagMSG@@@Z',
                                                                                            '?OnPreprocessItem@Menu@unibar@wui@@MAE_NI@Z',
                                                                                            '?OnCreate@Menu@unibar@wui@@MAEXPAUHMENU__@@@Z',
                                                                                            '?OnDestroy@Menu@unibar@wui@@MAEXPAUHMENU__@@@Z',
                                                                                            '?TrackMenuByRect@Menu@unibar@wui@@QAEIPAUtagRECT@@_N@Z',
                                                                                            '?SetEnabled@XuiToolbar@unibar@wui@@QAEXI_N@Z',
                                                                                            '??1TFont@xui@@UAE@XZ',
                                                                                            '?GetBox@XuiPart@unibar@wui@@IBEPAVTBox@xui@@XZ',
                                                                                            '??_7TFont@xui@@6B@',
                                                                                            '?FontSet@xui@@3VTFontSet@1@A',
                                                                                            '?SetOwnerWindow@MKSScreenWindowCoordinator@wui@@QAEXPAUHWND__@@@Z',
                                                                                            '?GetType@TLabel@xui@@UBEABVstring@utf@@XZ',
                                                                                            '?DoCalcMinSize@TLabel@xui@@UAEXXZ',
                                                                                            '?DoDraw@TLabel@xui@@UAEXAAVGraphics@Gdiplus@@@Z',
                                                                                            '?DoLayout@TLabel@xui@@UAEXXZ',
                                                                                            '?SetParent@TLabel@xui@@UAEXPAVTControl@2@@Z',
                                                                                            '??1TLabel@xui@@UAE@XZ',
                                                                                            '?ProcessWindowMessage@Menubar@unibar@wui@@UAEHPAUHWND__@@IIJAAJK@Z',
                                                                                            '?ProcessWindowMessage@TForm@xui@@UAEHPAUHWND__@@IIJAAJK@Z',
                                                                                            '?GetTextSize@util@wui@@YA?AUtagSIZE@@PAUHFONT__@@ABVstring@utf@@J_N@Z',
                                                                                            '?TrackMenuByPoint@Menu@unibar@wui@@QAEIUtagPOINT@@_N@Z',
                                                                                            '?DrawGradient@util@wui@@YAXPAUHDC__@@ABUtagRECT@@KK@Z',
                                                                                            '?SetPartVisible@Bar@unibar@wui@@QAEXPAVPart@23@_N@Z',
                                                                                            '?SuspendLayout@Bar@unibar@wui@@QAEX_N@Z',
                                                                                            '?SetVisible@XuiToolbar@unibar@wui@@QAEXI_N@Z',
                                                                                            '??1Bar@unibar@wui@@UAE@XZ',
                                                                                            '??0Bar@unibar@wui@@QAE@XZ',
                                                                                            '?GetWindowProc@?$CWindowImplBaseT@VCWindowExport@wui@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEP6GJPAUHWND__@@IIJ@ZXZ',
                                                                                            '?OnFinalMessage@?$CWindowImplBaseT@VCWindowExport@wui@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEXPAUHWND__@@@Z',
                                                                                            '?AdjustPartWidths@Bar@unibar@wui@@MAEXABV?$vector@UPartInfo@Bar@unibar@wui@@V?$allocator@UPartInfo@Bar@unibar@wui@@@std@@@std@@AAV?$vector@IV?$allocator@I@std@@@5@@Z',
                                                                                            '?SetDirty@Bar@unibar@wui@@MAEXPAVPart@23@@Z',
                                                                                            '?SetVM@DeviceLEDs@unibar@wui@@QAEXPAVVM@cui@@@Z',
                                                                                            '?ProcessWindowMessage@Bar@unibar@wui@@UAEHPAUHWND__@@IIJAAJK@Z',
                                                                                            '?Create@?$CWindowImpl@VBar@unibar@wui@@VCWindowExport@3@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@QAEPAUHWND__@@PAU3@V_U_RECT@2@PB_WKKV_U_MENUorID@2@PAX@Z',
                                                                                            '?SetOverflow@XuiToolbar@unibar@wui@@QAEX_N@Z',
                                                                                            '?AddTextButton@XuiToolbar@unibar@wui@@QAEXIW4ButtonType@123@ABVstring@utf@@1@Z',
                                                                                            '?SetMenu@Menubar@unibar@wui@@QAEXPAVMenu@23@_N@Z',
                                                                                            '?SetButtonHeight@Toolbar@unibar@wui@@QAEXI@Z',
                                                                                            '?SetMargins@Bar@unibar@wui@@QAEXABUBorders@3@@Z',
                                                                                            '?AddSeparator@XuiToolbar@unibar@wui@@QAEXI@Z',
                                                                                            '?AddIconButton@XuiToolbar@unibar@wui@@QAEXIW4ButtonType@123@IABVstring@utf@@@Z',
                                                                                            '?AddIcon@XuiToolbar@unibar@wui@@QAEXIPAUHICON__@@00@Z',
                                                                                            '?AddPart@Bar@unibar@wui@@QAEIPAVPart@23@I_N@Z',
                                                                                            '?UpdatesAdvanced_CreateInstance@dialog@wui@@YAPAVDlg@2@XZ',
                                                                                            '??1Menu@unibar@wui@@UAE@XZ',
                                                                                            '??0Menu@unibar@wui@@QAE@XZ',
                                                                                            '?AddSeparator@Menu@unibar@wui@@QAEIII@Z',
                                                                                            '?autoItemID@Menu@unibar@wui@@2IB',
                                                                                            '?Add@Menu@unibar@wui@@QAEIIABVstring@utf@@PAUHICON__@@I@Z',
                                                                                            '?lastItemID@Menu@unibar@wui@@2IB',
                                                                                            '?AddSubmenu@Menu@unibar@wui@@QAEIIABVstring@utf@@PAV123@I@Z',
                                                                                            '?SetIcon@Menu@unibar@wui@@QAEXIPAUHICON__@@@Z',
                                                                                            '?SetChecked@Menu@unibar@wui@@QAEXI_N@Z',
                                                                                            '?SetEnabled@Menu@unibar@wui@@QAEXI_N@Z',
                                                                                            '?GetString@menu@wui@@YA?AVstring@utf@@PAUHMENU__@@I@Z',
                                                                                            '?IsSeparator@menu@wui@@YA_NPAUHMENU__@@I@Z',
                                                                                            '?SetText@Menu@unibar@wui@@QAEXIABVstring@utf@@@Z',
                                                                                            '?SetVisible@Menu@unibar@wui@@QAEXI_N@Z',
                                                                                            '?IsAutoItemID@Menu@unibar@wui@@SA_NI@Z',
                                                                                            '?GetItemInfos@Menu@unibar@wui@@IBE?AV?$vector@UItemInfo@Menu@unibar@wui@@V?$allocator@UItemInfo@Menu@unibar@wui@@@std@@@std@@XZ',
                                                                                            '?EscapeWindowText@util@wui@@YA?AVstring@utf@@ABV34@@Z',
                                                                                            '?TransientEnd@Menu@unibar@wui@@QAEXXZ',
                                                                                            '?TransientBegin@Menu@unibar@wui@@QAEXXZ',
                                                                                            '?NewPassword@DlgMgr@wui@@UAEPAVDlgPassword@cui@@W4Type@34@ABVstring@utf@@11@Z',
                                                                                            '?NewSQuestion@DlgMgr@wui@@UAEPAVDlgSQuestion@cui@@ABVstring@utf@@ABV?$vector@Vstring@utf@@V?$allocator@Vstring@utf@@@std@@@std@@HH0@Z',
                                                                                            '?NewQuestion@DlgMgr@wui@@UAEPAVDlgQuestion@cui@@ABVstring@utf@@ABV?$vector@Vstring@utf@@V?$allocator@Vstring@utf@@@std@@@std@@HH0W4Level@severity@4@@Z',
                                                                                            '?NewHint@DlgMgr@wui@@UAEPAVDlgHint@cui@@ABVstring@utf@@0@Z',
                                                                                            '?NewError@DlgMgr@wui@@UAEPAVDlgError@cui@@ABVstring@utf@@0@Z',
                                                                                            '?NewWarning@DlgMgr@wui@@UAEPAVDlgWarning@cui@@ABVstring@utf@@0@Z',
                                                                                            '?NewInfo@DlgMgr@wui@@UAEPAVDlgInfo@cui@@ABVstring@utf@@0@Z',
                                                                                            '??_7TrackableWindow@wui@@6B@',
                                                                                            '??1TrackableWindow@wui@@MAE@XZ',
                                                                                            '?GetDisplayMonitorRects@util@wui@@YA_NAAV?$vector@VRect@cui@@V?$allocator@VRect@cui@@@std@@@std@@@Z',
                                                                                            '?VmwShutdownBlockReasonCreate@@YAHPAUHWND__@@PB_W@Z',
                                                                                            '?VmwShutdownBlockReasonDestroy@@YAHPAUHWND__@@@Z',
                                                                                            '?GetNormalizedDisplayMonitorRects@util@wui@@YA_NAAV?$vector@VRect@cui@@V?$allocator@VRect@cui@@@std@@@std@@@Z',
                                                                                            '?GetInfoBarHwnd@InfoBarMgr@wui@@QBEPAUHWND__@@XZ',
                                                                                            '?GetInfoBarHeight@InfoBarMgr@wui@@QBEJXZ',
                                                                                            '?UnRegister@DlgMgr@wui@@QAEXPAUHWND__@@@Z',
                                                                                            '?GetPowerBroadcastText@util@wui@@YA?AVstring@utf@@IJ@Z',
                                                                                            '??BToolTipWnd@control@wui@@QAE?AVCWindow@ATL@@XZ',
                                                                                            '?GetInfoBarMgr@wui@@YAAAVInfoBarMgr@1@XZ',
                                                                                            '?PreTranslateMessage@InfoBarMgr@wui@@QAEHPAUtagMSG@@@Z',
                                                                                            '??0JumpList@util@wui@@QAE@XZ',
                                                                                            '?Init@JumpList@util@wui@@QAEJABVstring@utf@@@Z',
                                                                                            '?AddKnownCategory@JumpList@util@wui@@QAEJW4KNOWNDESTCATEGORY@@@Z',
                                                                                            '?GetModuleDir@util@wui@@YA?AVstring@utf@@PAUHINSTANCE__@@@Z',
                                                                                            '?AddUserTask@JumpList@util@wui@@QAEJABVstring@utf@@0000H@Z',
                                                                                            '?Save@JumpList@util@wui@@QAEJXZ',
                                                                                            '??1JumpList@util@wui@@QAE@XZ',
                                                                                            '?NewGuestAppMgr@VM@wui@@MAEPAVGuestAppMgr@cui@@XZ',
                                                                                            '?GetUnityMgr@VM@wui@@UBEPAVUnityMgr@2@XZ',
                                                                                            '??0VM@wui@@IAE@ABUVMConstructParams@cui@@@Z',
                                                                                            '??1VM@wui@@MAE@XZ',
                                                                                            '?OnStaticLinkNotify@util@wui@@YAJHPAUtagNMHDR@@AAH@Z',
                                                                                            '?SanitizeLineEndings@util@wui@@YA?AVstring@utf@@ABV34@0@Z',
                                                                                            '?IsServiceRunning@util@wui@@YA_NPB_W@Z',
                                                                                            '?CanImportConfigFile@wui@@YA_NABVstring@utf@@@Z',
                                                                                            '?ImportConfigFile@wui@@YAXABVstring@utf@@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XABVstring@utf@@Unil@sigc@@U34@U34@U34@U34@U34@@5@@Z',
                                                                                            '?Off@UnityMgr@wui@@QAEXABV?$vector@VRect@cui@@V?$allocator@VRect@cui@@@std@@@std@@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@6@@Z',
                                                                                            '??1DataCollection@wui@@UAE@XZ',
                                                                                            '??1InfoBarMgr@wui@@UAE@XZ',
                                                                                            '??1ToolsMgr@wui@@UAE@XZ',
                                                                                            '?CollectPlatformData@DataCollection@wui@@MAEXAAUCustomerData@cui@@@Z',
                                                                                            '?CreateInfoBar@InfoBarMgr@wui@@EAEXW4InfoBarType@1cui@@@Z',
                                                                                            '?SetAppContext@wui@@YAXAAVAppContext@1@@Z',
                                                                                            '??0ToolsMgr@wui@@QAE@XZ',
                                                                                            '?SetToolsMgr@wui@@YAXAAVToolsMgr@1@@Z',
                                                                                            '??0InfoBarMgr@wui@@QAE@XZ',
                                                                                            '??0DataCollection@wui@@QAE@XZ',
                                                                                            '?CreateInstance@VMAppControlServer@wui@@SAPAV12@XZ',
                                                                                            '?DIALOG_EXPANDABLE@ToolsMgr@wui@@2IB',
                                                                                            '?Initialize@ToolsMgr@wui@@QAE_NW4ProductType@12@I@Z',
                                                                                            '?SoftwareUpdatesCheck@ToolsMgr@wui@@QAEX_NV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@X_NUnil@sigc@@U12@U12@U12@U12@U12@@4@@Z',
                                                                                            '?Show@VMSettings@dialog@wui@@SAXPAUHWND__@@PAVVM@cui@@W4Tab@123@ABVstring@utf@@V?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@sigc@@@Z',
                                                                                            '?GetToolsMgr@wui@@YAAAVToolsMgr@1@XZ',
                                                                                            '?GetTopOwnedWindow@DlgMgr@wui@@SAPAUHWND__@@PAU3@@Z',
                                                                                            '?InitUtils@util@wui@@YAXXZ',
                                                                                            '?SetInstance@resource@wui@@YAXPAUHINSTANCE__@@@Z',
                                                                                            '?LoadLanguageDLL@util@wui@@YAPAUHINSTANCE__@@ABVstring@utf@@0PAU3@@Z',
                                                                                            '?InitDALFont@util@wui@@YAXXZ',
                                                                                            '?CreateMessageWindow@vmnetcfg@util@wui@@YAPAUHWND__@@XZ',
                                                                                            '?Init@xui@@YAXXZ',
                                                                                            '?GetMKSWindow@MKSScreenView@wui@@QBEPAUHWND__@@XZ',
                                                                                            '?CreateInstance@MessageLog@dialog@wui@@SAPAV123@PAVNotificationMgr@cui@@@Z',
                                                                                            '?LaunchWirelessDialog@util@wui@@YAXXZ',
                                                                                            '?OpenWebBrowser@util@wui@@YA_NABVstring@utf@@_N@Z',
                                                                                            '?IsWorkstationPresent@util@wui@@YA_NXZ',
                                                                                            '?SetDlgCreateParams@InfoBarMgr@wui@@QAEXPAUHWND__@@J@Z',
                                                                                            '??0CUnityStatusPage@view@wui@@QAE@XZ',
                                                                                            '?Create@?$CWindowImpl@VCUnityStatusPage@view@wui@@VCWindowExport@3@V?$CWinTraits@$0EGAAAAAA@$0A@@ATL@@@ATL@@QAEPAUHWND__@@PAU3@V_U_RECT@2@PB_WKKV_U_MENUorID@2@PAX@Z',
                                                                                            '?SetDefaultOwner@DlgMgr@wui@@QAEXPAUHWND__@@@Z',
                                                                                            '?CreateInstance@ToolTipWnd@control@wui@@SAPAV123@PAUHWND__@@PAUtagRECT@@K@Z',
                                                                                            '?CreateInstance@ForegroundChanger@util@wui@@SAPAV123@PAVCWindow@ATL@@@Z',
                                                                                            '?SetVM@CUnityStatusPage@view@wui@@QAEXPAVVM@cui@@@Z',
                                                                                            '?NewProgress@DlgMgr@wui@@UAEPAVDlgProgress@cui@@ABVstring@utf@@@Z',
                                                                                            '??0DlgMgr@wui@@QAE@XZ',
                                                                                            '?SetDlgMgr@wui@@YAXPAVDlgMgr@1@@Z',
                                                                                            '?SetTitle@DlgMgr@wui@@QAEXABVstring@utf@@@Z',
                                                                                            '?UWM_FRAME_WINDOWPOSCHANGED@wui@@3IB',
                                                                                            '?ShowDialog@RemovableDevices@dialog@wui@@SAHPAVVM@cui@@PAUHWND__@@V?$slot@UtagRECT@@Unil@sigc@@U23@U23@U23@U23@U23@U23@@sigc@@@Z',
                                                                                            '?DlgProgress_CreateInstance@wui@@YAPAVDlgProgress@1@ABVstring@utf@@0@Z',
                                                                                            '?On@UnityMgr@wui@@QAEXV?$slot@X_NABVError@cui@@Unil@sigc@@U34@U34@U34@U34@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@4@@Z',
                                                                                            '?ShouldShowNewUSBDevHint@usb@util@wui@@YA_NABV?$vector@ULocalUSBDev@VMDeviceMgr@cui@@V?$allocator@ULocalUSBDev@VMDeviceMgr@cui@@@std@@@std@@0AAV?$map@Vstring@utf@@_JU?$less@Vstring@utf@@@std@@V?$allocator@U?$pair@$$CBVstring@utf@@_J@std@@@4@@5@@Z',
                                                                                            '?NewActivate@DlgMgr@wui@@UAEPAVDlgActivate@cui@@W4Type@34@ABVstring@utf@@1@Z',
                                                                                            '??1DlgMgr@wui@@UAE@XZ',
                                                                                            '?EnableAllControls@util@wui@@YAXPAUHWND__@@_N@Z',
                                                                                            '?GetInstance@resource@wui@@YAPAUHINSTANCE__@@XZ',
                                                                                            '?windowsSettingsChanged@WorkstationPrefs@wui@@2V?$signal@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@sigc@@A',
                                                                                            '?NewSerialNumber@DlgMgr@wui@@UAEPAVDlgSerialNumber@cui@@ABVstring@utf@@0@Z',
                                                                                            '?NewLicenseExpiration@DlgMgr@wui@@UAEPAVDlgLicenseExpiration@cui@@PAVHost@4@@Z',
                                                                                            '?NewCloseRoamingVM@DlgMgr@wui@@UAEPAVDlgCloseRoamingVM@cui@@_N@Z',
                                                                                            '?NewFileBrowser@DlgMgr@wui@@UAEPAVDlgFileBrowser@cui@@PAVHost@4@ABVstring@utf@@11ABV?$vector@U?$pair@VLocalizedString@cui@@V?$vector@Vstring@utf@@V?$allocator@Vstring@utf@@@std@@@std@@@std@@V?$allocator@U?$pair@VLocalizedString@cui@@V?$vector@Vstring@utf@@V?$allocator@Vstring@utf@@@std@@@std@@@std@@@2@@std@@I@Z',
                                                                                            '?NewChangePassword@DlgMgr@wui@@UAEPAVDlgChangePassword@cui@@ABVstring@utf@@@Z',
                                                                                            '??0TLabel@xui@@QAE@XZ',
                                                                                            '?NewAuthenticate@DlgMgr@wui@@UAEPAVDlgAuthenticate@cui@@W4Type@34@ABVstring@utf@@1@Z',
                                                                                            '?GetAppContext@wui@@YAABVAppContext@1@XZ',
                                                                                            '?GetDlgMgr@wui@@YAPAVDlgMgr@1@XZ',
                                                                                            '?GetActiveParent@DlgMgr@wui@@QAEPAUHWND__@@_N@Z',
                                                                                            '?ShowHelp@util@wui@@YAXPAUHWND__@@I@Z',
                                                                                            '?EULADlg_LaunchEULA@@YAHPAUHICON__@@ABVstring@utf@@1@Z',
                                                                                            '??0AppContext@wui@@QAE@XZ',
                                                                                            '??1AppContext@wui@@UAE@XZ',
                                                                                            '??_DMKS@wui@@QAEXXZ',
                                                                                            '?GetMainMKSScreenView@MKS@wui@@UAEPAVMKSScreenView@2@XZ',
                                                                                            '?SetScreenWindows@MKS@wui@@UAEXABV?$vector@VScreenWindow@cui@@V?$allocator@VScreenWindow@cui@@@std@@@std@@@Z',
                                                                                            '??0MKS@wui@@QAE@PAVVM@1@@Z',
                                                                                            '??1CertificateCheck@wui@@UAE@XZ',
                                                                                            '?ShowDialog@CertificateCheck@wui@@MAEXABV?$vector@Vstring@utf@@V?$allocator@Vstring@utf@@@std@@@std@@AAV?$vector@PAU_SSLDERCert@@V?$allocator@PAU_SSLDERCert@@@std@@@4@ABVstring@utf@@PAVDlgMgr@cui@@V?$slot@X_NUnil@sigc@@U12@U12@U12@U12@U12@@sigc@@V?$slot@XUnil@sigc@@U12@U12@U12@U12@U12@U12@@sigc@@@Z',
                                                                                            '??0CInitGdiplus@util@wui@@QAE@_N@Z',
                                                                                            '??1CInitGdiplus@util@wui@@QAE@XZ',
                                                                                            '?VmwSetCurrentProcessExplicitAppUserModelID@@YAJPB_W@Z',
                                                                                            '?Succeeded@CInitGdiplus@util@wui@@QBE_NXZ',
                                                                                            '??0CertificateCheck@wui@@QAE@_N@Z',
                                                                                            '?GenericExceptionHandler@wui@@YAXXZ',
                                                                                            '?LogProcessElevation@util@wui@@YAXXZ',
                                                                                            '?GetLongPathNameW@util@wui@@YA?AVstring@utf@@ABV34@_N@Z',
                                                                                            '?ShowDialog@RemovableDevices@dialog@wui@@SAHPAVVM@cui@@ABV?$vector@ULocalUSBDev@VMDeviceMgr@cui@@V?$allocator@ULocalUSBDev@VMDeviceMgr@cui@@@std@@@std@@PAUHWND__@@V?$slot@UtagRECT@@Unil@sigc@@U23@U23@U23@U23@U23@U23@@sigc@@@Z',
                                                                                            '?NewDlgProgress@vmClientCore@@YAPAVDlgProgress@1@ABVstring@utf@@PAVIVMControlEx@1@@Z',
                                                                                            '?NewVMControlEx@vmClientCore@@YAPAVIVMControlEx@1@XZ',
                                                                                            '?RunEmbeddedVMRC@vmClientCore@@YAXKABVstring@utf@@IW4VMRC_MessageMode@@I@Z',
                                                                                            '?find_first_of@string@utf@@QBEIII@Z',
                                                                                            '?find_first_not_of@string@utf@@QBEIII@Z',
                                                                                            '??Astring@utf@@QBEII@Z',
                                                                                            '?trim@string@utf@@QBE?AV12@XZ',
                                                                                            '?length@string@utf@@QBEIXZ',
                                                                                            '?IntToStr@utf@@YA?AVstring@1@_J@Z',
                                                                                            '?find@string@utf@@QBEIABV12@I@Z',
                                                                                            '?npos@string@utf@@2IB',
                                                                                            '?size@string@utf@@QBEIXZ',
                                                                                            '??Hstring@utf@@QBE?AV01@ABV01@@Z',
                                                                                            '?replace@string@utf@@QAEAAV12@ABV12@0@Z',
                                                                                            '??Ystring@utf@@QAEAAV01@ABV01@@Z',
                                                                                            '??9string@utf@@QBE_NABV01@@Z',
                                                                                            '?append@string@utf@@QAEAAV12@ABV12@@Z',
                                                                                            '??Bstring@utf@@QBE?BVubstr_t@@XZ',
                                                                                            '??8string@utf@@QBE_NABV01@@Z',
                                                                                            '?clear@string@utf@@QAEXXZ',
                                                                                            '?w_str@string@utf@@QBEPB_WXZ',
                                                                                            '??0string@utf@@QAE@PB_W@Z',
                                                                                            '?c_str@string@utf@@QBEPBDXZ',
                                                                                            '??0string@utf@@QAE@PBD@Z',
                                                                                            '??4string@utf@@QAEAAV01@V01@@Z',
                                                                                            '?empty@string@utf@@QBE_NXZ',
                                                                                            '??0string@utf@@QAE@ABV01@@Z',
                                                                                            '??0string@utf@@QAE@XZ',
                                                                                            '??1string@utf@@QAE@XZ',
                                                                                            '?substr@string@utf@@QBE?AV12@II@Z'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 997,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1751812,
                                                                      'SectionNames': {'.data\x00\x00\x00': 20480,
                                                                                       '.rdata\x00\x00': 237056,
                                                                                       '.reloc\x00\x00': 103424,
                                                                                       '.rsrc\x00\x00\x00': 1752064,
                                                                                       '.text\x00\x00\x00': 559616},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c16f020f56a563b8f92f2830d795907c2b828f1a5f48d6b674d4b2d8a715af60'},
 'c17b1807961c71492016a9ccd29290eeef4c4835980e3f605cb58ecc13cb9dda': {'AddressOfEntryPoint': 361420,
                                                                      'DebugRVA': 493088,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 491520,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'DeleteService',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'KERNEL32.dll': 'GetQueuedCompletionStatus',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'SHSetValueW',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjectsEx',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'gdiplus.dll': 'GdipSetImageAttributesColorKeys',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal'},
                                                                      'ImportedFunctions': ['GetModuleFileNameW',
                                                                                            'MoveFileExW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetFileType',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'ExitProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCommandLineW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'lstrcmpW',
                                                                                            'DebugBreak',
                                                                                            'OutputDebugStringW',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SetEndOfFile',
                                                                                            'CreateDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'CompareFileTime',
                                                                                            'GetFileTime',
                                                                                            'CreateFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocalTime',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'GetModuleHandleExA',
                                                                                            'InterlockedExchange',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GlobalUnlock',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CompareStringW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStringTypeW',
                                                                                            'SetHandleCount',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'HeapCreate',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStdHandle',
                                                                                            'HeapSize',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringW',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineA',
                                                                                            'ExitThread',
                                                                                            'HeapReAlloc',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetFileAttributesW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlUnwind',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GlobalLock',
                                                                                            'lstrlenA',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'CreateFileW',
                                                                                            'SizeofResource',
                                                                                            'WriteFile',
                                                                                            'FreeResource',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'lstrcpyW',
                                                                                            'lstrcmpiW',
                                                                                            'Process32NextW',
                                                                                            'CreateDirectoryW',
                                                                                            'InterlockedIncrement',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'InterlockedDecrement',
                                                                                            'lstrlenW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushInstructionCache',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'OpenProcess',
                                                                                            'TerminateProcess',
                                                                                            'CreatePipe',
                                                                                            'GetStartupInfoW',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'GetVersionExW',
                                                                                            'CreateProcessW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'FindWindowW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'CharNextW',
                                                                                            'TrackMouseEvent',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'DrawIcon',
                                                                                            'DrawIconEx',
                                                                                            'DrawTextW',
                                                                                            'GetFocus',
                                                                                            'wvsprintfW',
                                                                                            'GetKeyState',
                                                                                            'UpdateWindow',
                                                                                            'EnableWindow',
                                                                                            'UnregisterClassW',
                                                                                            'GetQueueStatus',
                                                                                            'WaitMessage',
                                                                                            'GetWindowRect',
                                                                                            'UnregisterClassA',
                                                                                            'DestroyWindow',
                                                                                            'SetFocus',
                                                                                            'GetClientRect',
                                                                                            'SetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindowLongW',
                                                                                            'CallWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'IsZoomed',
                                                                                            'ScreenToClient',
                                                                                            'IsIconic',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetDC',
                                                                                            'PeekMessageW',
                                                                                            'SetForegroundWindow',
                                                                                            'SendMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'MapWindowPoints',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetWindow',
                                                                                            'GetParent',
                                                                                            'GetMessagePos',
                                                                                            'InvalidateRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetClassLongW',
                                                                                            'LoadCursorW',
                                                                                            'LoadImageW',
                                                                                            'GetSystemMetrics',
                                                                                            'OffsetRect',
                                                                                            'SetWindowRgn',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'ReleaseDC',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'AttachThreadInput',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetForegroundWindow',
                                                                                            'LoadStringW',
                                                                                            'FillRect',
                                                                                            'CopyRect',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'Rectangle',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'GetObjectA',
                                                                                            'SetTextColor',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'DeleteDC',
                                                                                            'SetBkColor',
                                                                                            'CreateFontW',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CombineRgn',
                                                                                            'CreateRectRgn',
                                                                                            'CreateRoundRectRgn',
                                                                                            'StretchBlt',
                                                                                            'BitBlt',
                                                                                            'GetObjectW',
                                                                                            'RoundRect',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SetBkMode',
                                                                                            'CreatePen',
                                                                                            'CreateSolidBrush',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'CreateServiceW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatus',
                                                                                            'StartServiceW',
                                                                                            'ControlService',
                                                                                            'DeleteService',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'PathFileExistsA',
                                                                                            'PathIsDirectoryA',
                                                                                            'PathIsRootW',
                                                                                            'PathFindFileNameA',
                                                                                            'PathAppendA',
                                                                                            'PathCombineA',
                                                                                            'PathRemoveFileSpecA',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathFileExistsW',
                                                                                            'SHSetValueW',
                                                                                            'InitCommonControlsEx',
                                                                                            'TransparentBlt',
                                                                                            'AlphaBlend',
                                                                                            'GdipClonePath',
                                                                                            'GdipCreatePath',
                                                                                            'GdipAddPathArcI',
                                                                                            'GdipAddPathLineI',
                                                                                            'GdipDrawPath',
                                                                                            'GdipFillPath',
                                                                                            'GdipDeletePath',
                                                                                            'GdipDrawRectangleI',
                                                                                            'GdipReleaseDC',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipSetStringFormatFlags',
                                                                                            'GdipSetStringFormatTrimming',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipDrawString',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipDrawLineI',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreateTexture2I',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipTranslateTextureTransform',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateBitmapFromFileICM',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawImageRectRectI',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipCreateImageAttributes',
                                                                                            'GdipDisposeImageAttributes',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipSetImageAttributesColorKeys',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 330,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 26345688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16384,
                                                                                       '.rdata\x00\x00': 117760,
                                                                                       '.rsrc\x00\x00\x00': 26345984,
                                                                                       '.text\x00\x00\x00': 486400},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c17b1807961c71492016a9ccd29290eeef4c4835980e3f605cb58ecc13cb9dda'},
 'c196e8245cd28369f7635bb704dfb31a7f977ef48c8f7401eb516916244a61b7': {'AddressOfEntryPoint': 5744,
                                                                      'DebugRVA': 17088,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'KERNEL32.dll': 'FindClose',
                                                                                      'MSVCR100.dll': '_wcsicmp',
                                                                                      'SETUPAPI.dll': 'SetupOpenInfFileW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesW'},
                                                                      'ImportedFunctions': ['_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            'printf',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            'wcsrchr',
                                                                                            '_wsplitpath',
                                                                                            'memcpy',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            '_vsnprintf',
                                                                                            '_wcsicmp',
                                                                                            'GetFullPathNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'EncodePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'FindClose',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'StartServiceW',
                                                                                            'DeleteService',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenServiceA',
                                                                                            'QueryServiceStatus',
                                                                                            'ControlService',
                                                                                            'CloseServiceHandle',
                                                                                            'SHGetFolderPathW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupUninstallOEMInfW',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'UpdateDriverForPlugAndPlayDevicesW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 9728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c196e8245cd28369f7635bb704dfb31a7f977ef48c8f7401eb516916244a61b7'},
 'c1d073c5ddb95f8ed36274eb9aef152c59f9a1cc0b9a26958eab094a8b68256d': {'AddressOfEntryPoint': 101790,
                                                                      'DebugRVA': 101592,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1280,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1520,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 94208},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c1d073c5ddb95f8ed36274eb9aef152c59f9a1cc0b9a26958eab094a8b68256d'},
 'c22da09fe420825082bcc728e582aebadd74a1d7ee84ae8d2d6e4067c3ba508b': {'AddressOfEntryPoint': 741897,
                                                                      'DebugRVA': 960592,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 958464,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'COMCTL32.dll': 'CreatePropertySheetPageW',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'MSIMG32.dll': 'TransparentBlt',
                                                                                      'NETAPI32.dll': 'NetUserGetLocalGroups',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'SHLWAPI.dll': 'PathIsDirectoryW',
                                                                                      'USER32.dll': 'ScreenToClient',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'dbghelp.dll': 'SymGetLineFromAddr',
                                                                                      'ole32.dll': 'OleLockRunning'},
                                                                      'ImportedFunctions': ['lstrcmpW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetModuleFileNameW',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'CompareStringW',
                                                                                            'GetDriveTypeW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'WriteConsoleA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'ExitProcess',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GlobalFree',
                                                                                            'LCMapStringA',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringW',
                                                                                            'RtlUnwind',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'GetStartupInfoW',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'InterlockedCompareExchange',
                                                                                            'PeekNamedPipe',
                                                                                            'OpenEventW',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'SearchPathW',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'ResetEvent',
                                                                                            'MoveFileW',
                                                                                            'TerminateThread',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetLocalTime',
                                                                                            'OutputDebugStringW',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetVersion',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempPathA',
                                                                                            'GetSystemTime',
                                                                                            'GetTempFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'GetTempFileNameA',
                                                                                            'DeleteFileA',
                                                                                            'FindFirstFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileA',
                                                                                            'SetFileAttributesW',
                                                                                            'CopyFileW',
                                                                                            'LocalAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetSystemInfo',
                                                                                            'InterlockedExchange',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'FindClose',
                                                                                            'HeapCreate',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeThread',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'SetLastError',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'MulDiv',
                                                                                            'WaitForSingleObject',
                                                                                            'lstrcpynW',
                                                                                            'FindResourceExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetLocaleInfoW',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'SetEndOfFile',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCommandLineW',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindResourceW',
                                                                                            'CreateProcessA',
                                                                                            'CreateProcessW',
                                                                                            'DuplicateHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'GetStdHandle',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'RaiseException',
                                                                                            'FlushInstructionCache',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryA',
                                                                                            'GetVersionExW',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetCurrentThread',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'FormatMessageW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateThread',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CallWindowProcW',
                                                                                            'GetClientRect',
                                                                                            'SetWindowLongW',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'SendMessageW',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'FillRect',
                                                                                            'IsWindow',
                                                                                            'ShowWindow',
                                                                                            'GetWindowRect',
                                                                                            'UnionRect',
                                                                                            'IsWindowVisible',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetWindowTextW',
                                                                                            'DefWindowProcW',
                                                                                            'ReleaseDC',
                                                                                            'GetWindowDC',
                                                                                            'SetWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'SetCursor',
                                                                                            'DrawFrameControl',
                                                                                            'RegisterWindowMessageW',
                                                                                            'InvalidateRgn',
                                                                                            'GetDesktopWindow',
                                                                                            'GetKeyState',
                                                                                            'DrawStateW',
                                                                                            'DrawTextExW',
                                                                                            'DrawFocusRect',
                                                                                            'ValidateRect',
                                                                                            'DestroyMenu',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'InflateRect',
                                                                                            'LoadBitmapW',
                                                                                            'MessageBeep',
                                                                                            'CharNextW',
                                                                                            'GetClassNameW',
                                                                                            'ReleaseCapture',
                                                                                            'GetCapture',
                                                                                            'SetCapture',
                                                                                            'UpdateWindow',
                                                                                            'DestroyIcon',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollPos',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'SetScrollPos',
                                                                                            'SetRect',
                                                                                            'MoveWindow',
                                                                                            'GetScrollInfo',
                                                                                            'GetMessagePos',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetActiveWindow',
                                                                                            'TrackMouseEvent',
                                                                                            'GetAsyncKeyState',
                                                                                            'DestroyCursor',
                                                                                            'GetWindowRgn',
                                                                                            'CopyRect',
                                                                                            'IsZoomed',
                                                                                            'SetWindowRgn',
                                                                                            'GetComboBoxInfo',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'CreateDialogParamW',
                                                                                            'EndDialog',
                                                                                            'DialogBoxParamW',
                                                                                            'InvalidateRect',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetFocus',
                                                                                            'GetDC',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'LoadImageW',
                                                                                            'IsDialogMessageW',
                                                                                            'IsChild',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetCursorPos',
                                                                                            'GetCursorPos',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'GetForegroundWindow',
                                                                                            'EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetPropW',
                                                                                            'GetSystemMenu',
                                                                                            'EnableMenuItem',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ModifyMenuW',
                                                                                            'FindWindowW',
                                                                                            'ExitWindowsEx',
                                                                                            'GetScrollRange',
                                                                                            'SetPropW',
                                                                                            'RemovePropW',
                                                                                            'LoadMenuW',
                                                                                            'GetSubMenu',
                                                                                            'OpenClipboard',
                                                                                            'CloseClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'GetIconInfo',
                                                                                            'SendMessageTimeoutW',
                                                                                            'UnregisterClassA',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'GetFocus',
                                                                                            'RedrawWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableWindow',
                                                                                            'DestroyWindow',
                                                                                            'DrawTextW',
                                                                                            'DrawIconEx',
                                                                                            'GetSystemMetrics',
                                                                                            'ClientToScreen',
                                                                                            'OffsetRect',
                                                                                            'SetRectEmpty',
                                                                                            'PtInRect',
                                                                                            'GetSysColorBrush',
                                                                                            'IntersectRect',
                                                                                            'IsRectEmpty',
                                                                                            'SendMessageA',
                                                                                            'GetSysColor',
                                                                                            'CreateWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowTextW',
                                                                                            'EqualRect',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'ScreenToClient',
                                                                                            'GetLayout',
                                                                                            'GetBrushOrgEx',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateSolidBrush',
                                                                                            'Rectangle',
                                                                                            'CreatePen',
                                                                                            'ExtTextOutW',
                                                                                            'SetBkColor',
                                                                                            'GetRgnBox',
                                                                                            'EqualRgn',
                                                                                            'CreatePolygonRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetStockObject',
                                                                                            'CreateFontW',
                                                                                            'ExcludeClipRect',
                                                                                            'SetBkMode',
                                                                                            'GetBitmapBits',
                                                                                            'SetBrushOrgEx',
                                                                                            'CreatePatternBrush',
                                                                                            'FillRgn',
                                                                                            'SelectClipRgn',
                                                                                            'CombineRgn',
                                                                                            'CreateRectRgn',
                                                                                            'GetObjectW',
                                                                                            'GetDeviceCaps',
                                                                                            'BitBlt',
                                                                                            'SetViewportOrgEx',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'CreateDIBSection',
                                                                                            'CreateBitmapIndirect',
                                                                                            'SetTextColor',
                                                                                            'RegOpenKeyW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'StartServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyA',
                                                                                            'OpenSCManagerW',
                                                                                            'LockServiceDatabase',
                                                                                            'UnlockServiceDatabase',
                                                                                            'CloseServiceHandle',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'LookupAccountSidW',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'FreeSid',
                                                                                            'GetUserNameW',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'CLSIDFromString',
                                                                                            'OleInitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoGetClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleUninitialize',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'OleLockRunning',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysStringLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'VariantCopy',
                                                                                            'SysStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'OleLoadPicture',
                                                                                            'VarDateFromStr',
                                                                                            'VarUI4FromStr',
                                                                                            'VariantInit',
                                                                                            'SymSetSearchPath',
                                                                                            'SymCleanup',
                                                                                            'SymInitialize',
                                                                                            'SymSetOptions',
                                                                                            'SymFunctionTableAccess',
                                                                                            'SymGetModuleBase',
                                                                                            'StackWalk',
                                                                                            'SymGetLineFromAddr',
                                                                                            'PathIsUNCW',
                                                                                            'PathAddBackslashW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsDirectoryW',
                                                                                            'ImageList_Add',
                                                                                            'PropertySheetW',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'InitCommonControlsEx',
                                                                                            'ImageList_LoadImageW',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_SetBkColor',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Destroy',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_Create',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'AlphaBlend',
                                                                                            'TransparentBlt',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'NetUserGetLocalGroups',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetSaveFileNameW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 452,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 83592,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 235008,
                                                                                       '.reloc\x00\x00': 91648,
                                                                                       '.rsrc\x00\x00\x00': 83968,
                                                                                       '.text\x00\x00\x00': 954368},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c22da09fe420825082bcc728e582aebadd74a1d7ee84ae8d2d6e4067c3ba508b'},
 'c27715d59ab8541b7e90e7e982758f817f1d6e52410a9fb4706a52ecd5bf0587': {'AddressOfEntryPoint': 14364,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'CreateEventW',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetStartupInfoW',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memmove_s',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'CoInitializeEx',
                                                                                            'IIDFromString',
                                                                                            'CoRegisterSurrogate',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoMarshalInterface',
                                                                                            'CoGetClassObject',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 15360},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/c27715d59ab8541b7e90e7e982758f817f1d6e52410a9fb4706a52ecd5bf0587'},
 'c27ccb3657d83e9e0cb329807c1ab66d02e49a90230ef711d8348562b6f2486d': {'AddressOfEntryPoint': 15952,
                                                                      'DebugRVA': 4288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CreateWellKnownSid',
                                                                                      'DUI70.dll': 'InitThread',
                                                                                      'KERNEL32.dll': 'GetModuleHandleExW',
                                                                                      'RPCRT4.dll': 'RpcBindingFromStringBindingW',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoUninitialize',
                                                                                      'msvcrt.dll': '_wtoi',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenProcess',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetCommandLineW',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentProcessId',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'UnregisterWaitEx',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'SetWaitableTimer',
                                                                                            'CreateWaitableTimerW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleExW',
                                                                                            'SetCursor',
                                                                                            'PostQuitMessage',
                                                                                            'GetThreadDesktop',
                                                                                            'LoadCursorW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetAncestor',
                                                                                            'GetUserObjectInformationW',
                                                                                            'EnableWindow',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'CreateWindowExW',
                                                                                            'SetForegroundWindow',
                                                                                            'DestroyWindow',
                                                                                            'LoadIconW',
                                                                                            'DestroyIcon',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            '_wtol',
                                                                                            '__getmainargs',
                                                                                            'wcsstr',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_amsg_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_acmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            '_wtoi',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlVirtualUnwind',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ',
                                                                                            '?Destroy@Element@DirectUI@@QEAAJ_N@Z',
                                                                                            'UnInitProcessPriv',
                                                                                            '?CreateString@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z',
                                                                                            '?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z',
                                                                                            '?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ',
                                                                                            '?_ZeroRelease@Value@DirectUI@@AEAAXXZ',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z',
                                                                                            'UnInitThread',
                                                                                            'InitProcessPriv',
                                                                                            'InitThread',
                                                                                            'RoInitialize',
                                                                                            'RoUninitialize',
                                                                                            'QueryServiceStatus',
                                                                                            'StartServiceW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'CreateWellKnownSid',
                                                                                            'RpcAsyncCancelCall',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'Ndr64AsyncClientCall',
                                                                                            'RpcAsyncInitializeHandle',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcBindingFromStringBindingW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 111,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 26480,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 26624,
                                                                                       '.text\x00\x00\x00': 15360},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/c27ccb3657d83e9e0cb329807c1ab66d02e49a90230ef711d8348562b6f2486d'},
 'c2b98bc036fa232039422554bfd4fc1517d6143d6914aa1114de2e2982b9eea4': {'AddressOfEntryPoint': 4816,
                                                                      'DebugRVA': 37616,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'MSVCR90.dll': 'free',
                                                                                      'VGAuth.dll': 'VGAuth_AddAlias',
                                                                                      'glib-2.0.dll': 'g_get_current_time',
                                                                                      'ntdll.dll': 'memchr',
                                                                                      'vmtools.dll': 'RpcChannel_SendOneRaw'},
                                                                      'ImportedFunctions': ['__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '__dllonexit',
                                                                                            '__crt_debugger_hook',
                                                                                            '_ecvt_s',
                                                                                            '_fcvt_s',
                                                                                            'localeconv',
                                                                                            'wcrtomb',
                                                                                            '_strdup',
                                                                                            'realloc',
                                                                                            '_amsg_exit',
                                                                                            'malloc',
                                                                                            'fputs',
                                                                                            'abort',
                                                                                            'printf',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'free',
                                                                                            'RtlCaptureContext',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'memset',
                                                                                            '_strupr',
                                                                                            '_strlwr',
                                                                                            'islower',
                                                                                            'memcpy',
                                                                                            '_stricmp',
                                                                                            'memmove',
                                                                                            'memchr',
                                                                                            'VGAuth_SetLogHandler',
                                                                                            'VGAuth_Init',
                                                                                            'VGAuth_QueryMappedAliases',
                                                                                            'VGAuth_Shutdown',
                                                                                            'VGAuth_FreeMappedAliasList',
                                                                                            'VGAuth_AddAlias',
                                                                                            'g_option_context_parse',
                                                                                            'g_path_get_basename',
                                                                                            'g_set_prgname',
                                                                                            'g_option_context_new',
                                                                                            'g_option_context_set_summary',
                                                                                            'g_free',
                                                                                            'g_printerr',
                                                                                            'g_option_context_get_help',
                                                                                            'g_strchomp',
                                                                                            'g_strchug',
                                                                                            'g_time_val_to_iso8601',
                                                                                            'g_option_context_add_main_entries',
                                                                                            'g_option_context_free',
                                                                                            'g_error_free',
                                                                                            'g_get_current_time',
                                                                                            'RpcChannel_SendOneRaw'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 80,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1708,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 30720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c2b98bc036fa232039422554bfd4fc1517d6143d6914aa1114de2e2982b9eea4'},
 'c306ae721c046eb3246e863b7bd4f1fdecb4dac5c1ed04c06f29c582443a389c': {'AddressOfEntryPoint': 13017,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTickCount',
                                                                                            'lstrcmpiA',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'lstrcmpA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetErrorMode',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetCurrentProcess',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'EndDialog',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'CreateDialogParamA',
                                                                                            'DestroyWindow',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'TrackPopupMenu',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 30480,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 30720,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c306ae721c046eb3246e863b7bd4f1fdecb4dac5c1ed04c06f29c582443a389c'},
 'c30ab3feda30d4b435db24ed19b5d047411a2208a3153dffa948e7dcf0bda9bf': {'AddressOfEntryPoint': 62155,
                                                                      'DebugRVA': 4800,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'OLEAUT32.dll': 'VarUI4FromStr',
                                                                                      'USER32.dll': 'CharPrevW',
                                                                                      'ole32.dll': 'CoTaskMemRealloc'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExW',
                                                                                            'CloseHandle',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrlenW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrcmpiA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleFileNameA',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'LoadLibraryExW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFullPathNameW',
                                                                                            'MapViewOfFile',
                                                                                            'GetStartupInfoW',
                                                                                            'GetStdHandle',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'LockResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersion',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetFilePointer',
                                                                                            'GetLastError',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineW',
                                                                                            'ReadFile',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'RtlUnwind',
                                                                                            'LoadLibraryW',
                                                                                            'CreateFileMappingA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'SetErrorMode',
                                                                                            'IsValidCodePage',
                                                                                            'GetProcessHeap',
                                                                                            'GetLongPathNameW',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'HeapSize',
                                                                                            'Sleep',
                                                                                            'GetWindowRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'SetWindowPos',
                                                                                            'CharNextA',
                                                                                            'DialogBoxParamW',
                                                                                            'GetDlgItem',
                                                                                            'SetDlgItemTextW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'SendMessageA',
                                                                                            'EndDialog',
                                                                                            'CharPrevW',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'VarUI4FromStr'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 55684,
                                                                      'SectionNames': {'.data\x00\x00\x00': 22528,
                                                                                       '.reloc\x00\x00': 18944,
                                                                                       '.rsrc\x00\x00\x00': 55808,
                                                                                       '.text\x00\x00\x00': 154112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c30ab3feda30d4b435db24ed19b5d047411a2208a3153dffa948e7dcf0bda9bf'},
 'c31d2eb970ef723d6ba6634e710a9075bafd439e9a419e760bbc5f65d81bd438': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 234452,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 234496,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c31d2eb970ef723d6ba6634e710a9075bafd439e9a419e760bbc5f65d81bd438'},
 'c36c3a1d074de32d53f371c665243196a7608652a2fc6be9520312d5ce560871': {'AddressOfEntryPoint': 22898,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'ReadFile',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenProcessToken',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5208,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 24716800,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c36c3a1d074de32d53f371c665243196a7608652a2fc6be9520312d5ce560871'},
 'c38c686d11f1ede897fb6701ebb3fbc0f638b2423d48608739de6a63046b1c60': {'AddressOfEntryPoint': 13238,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'MoveFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareFileTime',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'lstrcpyW',
                                                                                            'MoveFileExW',
                                                                                            'lstrcatW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetShortPathNameW',
                                                                                            'SearchPathW',
                                                                                            'lstrcmpiW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrcmpW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableMenuItem',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapW',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'wsprintfW',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharPrevW',
                                                                                            'CharNextA',
                                                                                            'wsprintfA',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EndDialog',
                                                                                            'RegisterClassW',
                                                                                            'SystemParametersInfoW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'CharNextW',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'LoadImageW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowExW',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetForegroundWindow',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 113952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 114176,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c38c686d11f1ede897fb6701ebb3fbc0f638b2423d48608739de6a63046b1c60'},
 'c3ab8b0ea57f0c7219fbd28793d08b7e436b00a47f11385349fd49def094666c': {'AddressOfEntryPoint': 235088,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'GDI32.dll': 'SetBkMode',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'RegEnumKeyA',
                                                                                            'SetBkMode',
                                                                                            'CoTaskMemFree',
                                                                                            'ShellExecuteA',
                                                                                            'GetDC',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 12,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 28624,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 29184,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 18432},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c3ab8b0ea57f0c7219fbd28793d08b7e436b00a47f11385349fd49def094666c'},
 'c3dc71edc05a9e1778bbea6757b65c1f9b2f491615cb68ba686eedafb3afc0f5': {'AddressOfEntryPoint': 168974,
                                                                      'DebugRVA': 168768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 91056,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 91136,
                                                                                       '.text\x00\x00\x00': 161280},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c3dc71edc05a9e1778bbea6757b65c1f9b2f491615cb68ba686eedafb3afc0f5'},
 'c4019deb9772a8e4e38134cbb4038d1bb5c73ba5d0f14b03bb5fbceae4e16f67': {'AddressOfEntryPoint': 61744,
                                                                      'DebugRVA': 18064,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'WS2_32.dll': 'shutdown',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['GetCurrentProcess',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'GetCurrentProcessId',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetVersionExA',
                                                                                            'CreateThread',
                                                                                            'DebugBreak',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetOverlappedResult',
                                                                                            'WaitNamedPipeW',
                                                                                            'WriteFile',
                                                                                            'PeekNamedPipe',
                                                                                            'ResetEvent',
                                                                                            'DeviceIoControl',
                                                                                            'CreateEventW',
                                                                                            'DuplicateHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'DeleteCriticalSection',
                                                                                            'OpenFileMappingW',
                                                                                            'OpenEventW',
                                                                                            'CreateFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryExA',
                                                                                            'SetLastError',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'VirtualProtect',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'Sleep',
                                                                                            'LoadLibraryW',
                                                                                            'OpenProcess',
                                                                                            'FreeLibrary',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'FreeSid',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AddAccessAllowedAce',
                                                                                            'AddAccessDeniedAce',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueW',
                                                                                            'WSAGetOverlappedResult',
                                                                                            'WSASend',
                                                                                            'ioctlsocket',
                                                                                            'WSACreateEvent',
                                                                                            'WSAAddressToStringW',
                                                                                            'WSASocketW',
                                                                                            'bind',
                                                                                            'WSARecv',
                                                                                            'setsockopt',
                                                                                            'listen',
                                                                                            'accept',
                                                                                            'connect',
                                                                                            'select',
                                                                                            'GetAddrInfoW',
                                                                                            'FreeAddrInfoW',
                                                                                            'WSAResetEvent',
                                                                                            'WSACloseEvent',
                                                                                            'getsockname',
                                                                                            'htons',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'socket',
                                                                                            'ntohs',
                                                                                            'WSAStartup',
                                                                                            'shutdown',
                                                                                            'GetDesktopWindow',
                                                                                            'MessageBoxW',
                                                                                            'iswspace',
                                                                                            '_purecall',
                                                                                            'wcstoul',
                                                                                            '_wcsicmp',
                                                                                            'swscanf',
                                                                                            '_wtol',
                                                                                            'vswprintf_s',
                                                                                            '_callnewh',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'free',
                                                                                            'realloc',
                                                                                            'malloc',
                                                                                            '_vsnwprintf',
                                                                                            'memmove',
                                                                                            'exit',
                                                                                            '_memicmp',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 121,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 63488},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c4019deb9772a8e4e38134cbb4038d1bb5c73ba5d0f14b03bb5fbceae4e16f67'},
 'c44c4a2a4c98ef90f221f0e5a176ef8635ccc2cac2697479c886d1202b8f5ea6': {'AddressOfEntryPoint': 1123216,
                                                                      'DebugRVA': 1445104,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 1514560,
                                                                      'ExportSize': 80,
                                                                      'IATRVA': 1277952,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'UnregisterTraceGuids',
                                                                                      'KERNEL32.dll': 'SystemTimeToTzSpecificLocalTime',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'PSAPI.DLL': 'GetProcessMemoryInfo',
                                                                                      'SHELL32.dll': 'SHGetKnownFolderPath',
                                                                                      'SHLWAPI.dll': 'PathMatchSpecW',
                                                                                      'USER32.dll': 'PostMessageW',
                                                                                      'USERENV.dll': 'DestroyEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINHTTP.dll': 'WinHttpSendRequest',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'ntohl',
                                                                                      'WTSAPI32.dll': 'WTSQuerySessionInformationW',
                                                                                      'ole32.dll': 'PropVariantClear',
                                                                                      'urlmon.dll': 'CreateURLMonikerEx'},
                                                                      'ImportedFunctions': ['NetGetJoinInformation',
                                                                                            'NetApiBufferFree',
                                                                                            'RevertToSelf',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'EqualSid',
                                                                                            'GetAce',
                                                                                            'GetAclInformation',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegUnLoadKeyW',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAce',
                                                                                            'IsValidSid',
                                                                                            'InitializeSid',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'CopySid',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'GetSidLengthRequired',
                                                                                            'GetSidSubAuthority',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCloseKey',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'SystemFunction036',
                                                                                            'GetUserNameW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetFileSecurityW',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'SetFileSecurityW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'ImpersonateNamedPipeClient',
                                                                                            'TraceEvent',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'QueueUserAPC',
                                                                                            'GetPriorityClass',
                                                                                            'GetProcAddress',
                                                                                            'VirtualAllocEx',
                                                                                            'WTSGetActiveConsoleSessionId',
                                                                                            'CreateProcessW',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateEventW',
                                                                                            'HeapFree',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'RaiseException',
                                                                                            'HeapAlloc',
                                                                                            'DecodePointer',
                                                                                            'HeapDestroy',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcessHeap',
                                                                                            'CreateDirectoryW',
                                                                                            'GetCommandLineW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileAttributesW',
                                                                                            'MultiByteToWideChar',
                                                                                            'OutputDebugStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetTempPathW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'VirtualProtect',
                                                                                            'GetModuleFileNameW',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'HeapSetInformation',
                                                                                            'ReadFile',
                                                                                            'GetLongPathNameW',
                                                                                            'WriteFile',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'DeleteFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'MoveFileExW',
                                                                                            'ReplaceFileW',
                                                                                            'CopyFileW',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'MoveFileW',
                                                                                            'SetHandleInformation',
                                                                                            'GetStdHandle',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'IsDebuggerPresent',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'GetSystemInfo',
                                                                                            'GetProcessTimes',
                                                                                            'VirtualQueryEx',
                                                                                            'FileTimeToSystemTime',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'WriteProcessMemory',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'OutputDebugStringA',
                                                                                            'GetLocalTime',
                                                                                            'FormatMessageA',
                                                                                            'GetTickCount',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'GetVersionExW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'FlushViewOfFile',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFileTime',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetFilePointerEx',
                                                                                            'FlushFileBuffers',
                                                                                            'GetModuleHandleExW',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'ResumeThread',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'TlsGetValue',
                                                                                            'VirtualQuery',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'LoadLibraryExW',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'CompareStringW',
                                                                                            'GetShortPathNameW',
                                                                                            'SetFilePointer',
                                                                                            'GetDateFormatW',
                                                                                            'InitOnceExecuteOnce',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetVersion',
                                                                                            'SleepEx',
                                                                                            'GetFileType',
                                                                                            'UnlockFileEx',
                                                                                            'LockFileEx',
                                                                                            'Wow64GetThreadContext',
                                                                                            'SuspendThread',
                                                                                            'GetThreadContext',
                                                                                            'ReadProcessMemory',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetThreadLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'WaitNamedPipeW',
                                                                                            'TransactNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetTimeZoneInformation',
                                                                                            'EnumSystemLocalesW',
                                                                                            'IsValidLocale',
                                                                                            'ReadConsoleW',
                                                                                            'GetACP',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetStdHandle',
                                                                                            'ExitProcess',
                                                                                            'GetFullPathNameW',
                                                                                            'PeekNamedPipe',
                                                                                            'GetDriveTypeW',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlPcToFileHeader',
                                                                                            'InitializeSListHead',
                                                                                            'GetStartupInfoW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'GetCPInfo',
                                                                                            'GetLocaleInfoW',
                                                                                            'LCMapStringW',
                                                                                            'EncodePointer',
                                                                                            'GetStringTypeW',
                                                                                            'FreeConsole',
                                                                                            'GetConsoleDisplayMode',
                                                                                            'AttachConsole',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'ReleaseMutex',
                                                                                            'TerminateProcess',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'UnregisterWaitEx',
                                                                                            'SetPriorityClass',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'GetFileInformationByHandleEx',
                                                                                            'DisconnectNamedPipe',
                                                                                            'ConnectNamedPipe',
                                                                                            'IsWow64Process',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'LoadLibraryExA',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'CoTaskMemFree',
                                                                                            'CoAllowSetForegroundWindow',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'PropVariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'GetPerformanceInfo',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'ShellExecuteW',
                                                                                            'SHOpenWithDialog',
                                                                                            'SHChangeNotify',
                                                                                            'SHQueryUserNotificationState',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'UrlCanonicalizeW',
                                                                                            'PathMatchSpecW',
                                                                                            'MonitorFromRect',
                                                                                            'EqualRect',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongW',
                                                                                            'UnregisterClassW',
                                                                                            'GetSystemMetrics',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SendMessageW',
                                                                                            'CallNextHookEx',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'LoadIconW',
                                                                                            'SetWindowsHookExW',
                                                                                            'MonitorFromWindow',
                                                                                            'MoveWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateWindowExW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetForegroundWindow',
                                                                                            'IntersectRect',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassW',
                                                                                            'GetMessageW',
                                                                                            'GetMonitorInfoW',
                                                                                            'PostMessageW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'timeGetTime',
                                                                                            'ntohl',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateURLMonikerEx',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSQueryUserToken',
                                                                                            'WTSQuerySessionInformationW',
                                                                                            'WinHttpCrackUrl',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpWriteData',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpAddRequestHeaders',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpSendRequest'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 327,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 317968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 52736,
                                                                                       '.rdata\x00\x00': 246784,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 318464,
                                                                                       '.text\x00\x00\x00': 1271808,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       'CPADinfo': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c44c4a2a4c98ef90f221f0e5a176ef8635ccc2cac2697479c886d1202b8f5ea6'},
 'c52bee78658c897ab70714ee4600a4fd509c7362f4dddfd1fc643ff52d6ba314': {'AddressOfEntryPoint': 14416,
                                                                      'DebugRVA': 4416,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-com-l1-1-1.dll': 'CoRevokeClassObject',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForSingleObject',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateErrorW',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoGetActivationFactory',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsDeleteString',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'MapGenericMask',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlInitUnicodeString'},
                                                                      'ImportedFunctions': ['__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_vsnwprintf',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_initterm',
                                                                                            '_XcptFilter',
                                                                                            '_lock',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'NtQueryValueKey',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'NtOpenKey',
                                                                                            'NtQueryKey',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlInitUnicodeString',
                                                                                            'OpenProcessToken',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenThreadToken',
                                                                                            'GetStartupInfoW',
                                                                                            'SetProcessMitigationPolicy',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessMitigationPolicy',
                                                                                            'SetThreadToken',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetCurrentProcess',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoIncrementMTAUsage',
                                                                                            'CoRevertToSelf',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoImpersonateClient',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoDecrementMTAUsage',
                                                                                            'CoFreeUnusedLibrariesEx',
                                                                                            'CoUninitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'AccessCheck',
                                                                                            'PrivilegeCheck',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'MapGenericMask',
                                                                                            'WindowsCreateString',
                                                                                            'WindowsDeleteString',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'RoSetErrorReportingFlags',
                                                                                            'RoGetErrorReportingFlags',
                                                                                            'RoOriginateError',
                                                                                            'RoOriginateErrorW',
                                                                                            'RoActivateInstance',
                                                                                            'RoGetActivationFactory',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CloseHandle',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalFree',
                                                                                            'ConvertSidToStringSidW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2144,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/c52bee78658c897ab70714ee4600a4fd509c7362f4dddfd1fc643ff52d6ba314'},
 'c55de3917fc4188e711bb3154974fb16c7ad65026c29a1680bd48d6854d46e14': {'AddressOfEntryPoint': 8177,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'HTTPAPI.dll': 'HttpTerminate',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'WS2_32.dll': 'WSAAddressToStringW',
                                                                                      'msvcrt.dll': '__winitenv',
                                                                                      'ntdll.dll': 'RtlGUIDFromString'},
                                                                      'ImportedFunctions': ['QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalFree',
                                                                                            'exit',
                                                                                            'wcslen',
                                                                                            '__wgetmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            'wprintf',
                                                                                            '_wcsicmp',
                                                                                            'iswxdigit',
                                                                                            'iswdigit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_wtoi',
                                                                                            '__set_app_type',
                                                                                            'toupper',
                                                                                            'iswlower',
                                                                                            '__winitenv',
                                                                                            'RtlStringFromGUID',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlGUIDFromString',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'WSAStringToAddressW',
                                                                                            'WSAGetLastError',
                                                                                            'WSAAddressToStringW',
                                                                                            'HttpInitialize',
                                                                                            'HttpSetServiceConfiguration',
                                                                                            'HttpQueryServiceConfiguration',
                                                                                            'HttpDeleteServiceConfiguration',
                                                                                            'HttpTerminate'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 8472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c55de3917fc4188e711bb3154974fb16c7ad65026c29a1680bd48d6854d46e14'},
 'c567cbe2d4c5be63c4aeb21232ce28fb7f4e9364e6222d35e4d16b1d018c69d1': {'AddressOfEntryPoint': 807118,
                                                                      'DebugRVA': 806892,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1960,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 802816},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c567cbe2d4c5be63c4aeb21232ce28fb7f4e9364e6222d35e4d16b1d018c69d1'},
 'c56c433c5b65db5d184fdc273725ce81d92ff103e9b281f697389f7e48877f73': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 451608,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 6891409244160,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 96768,
                                                                                       '.reloc\x00\x00': 10752,
                                                                                       '.text\x00\x00\x00': 333312,
                                                                                       '.xdata\x00\x00': 13312},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/c56c433c5b65db5d184fdc273725ce81d92ff103e9b281f697389f7e48877f73'},
 'c5aa5c1e611e0bb0712528171ad3aae3c9da8ec3ea1348d447bb3a9df1588a0d': {'AddressOfEntryPoint': 13260,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'CreateFileW',
                                                                                            'lstrcatW',
                                                                                            'lstrcpyW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'FindWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 308568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 308736,
                                                                                       '.text\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c5aa5c1e611e0bb0712528171ad3aae3c9da8ec3ea1348d447bb3a9df1588a0d'},
 'c5ac447cfbf3957509e9281fd1f4b52ccfc27d404481baa3e6a9a46a0fb2191c': {'AddressOfEntryPoint': 204736,
                                                                      'DebugRVA': 393152,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49632,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 339688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CryptMsgClose',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'SetEndOfFile',
                                                                                      'OLEAUT32.dll': 'SafeArrayGetUBound',
                                                                                      'RPCRT4.dll': 'UuidFromStringW',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'CloseClipboard',
                                                                                      'USERENV.dll': 'DestroyEnvironmentBlock',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'ntdll.dll': 'RtlLookupFunctionEntry',
                                                                                      'ole32.dll': 'CoSetProxyBlanket'},
                                                                      'ImportedFunctions': ['GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'TraceMessage',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'RegCloseKey',
                                                                                            'CloseServiceHandle',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CopySid',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetLengthSid',
                                                                                            'GetTokenInformation',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenSCManagerW',
                                                                                            'StartServiceW',
                                                                                            'QueryServiceConfigW',
                                                                                            'OpenServiceW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessAsUserW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CreateProcessW',
                                                                                            'HeapSetInformation',
                                                                                            'LoadLibraryW',
                                                                                            'CreateEventW',
                                                                                            'SetFileAttributesW',
                                                                                            'OpenFileMappingW',
                                                                                            'OpenEventW',
                                                                                            'DecodePointer',
                                                                                            'VirtualLock',
                                                                                            'CreateFileMappingW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetExitCodeProcess',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'ReadConsoleW',
                                                                                            'GetExitCodeThread',
                                                                                            'ResumeThread',
                                                                                            'SuspendThread',
                                                                                            'FreeLibrary',
                                                                                            'Sleep',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetDriveTypeW',
                                                                                            'GetLogicalDrives',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTimeFormatW',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetLocalTime',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetTickCount',
                                                                                            'DeleteFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'EnterCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'LeaveCriticalSection',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetLastError',
                                                                                            'MapViewOfFile',
                                                                                            'FormatMessageW',
                                                                                            'WideCharToMultiByte',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeSListHead',
                                                                                            'GetStartupInfoW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'GetACP',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryExW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'OutputDebugStringW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetStdHandle',
                                                                                            'GetProcessHeap',
                                                                                            'GetTimeZoneInformation',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointerEx',
                                                                                            'FlushFileBuffers',
                                                                                            'RaiseException',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'EncodePointer',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetEvent',
                                                                                            'LocalFree',
                                                                                            'SetErrorMode',
                                                                                            'WaitForSingleObject',
                                                                                            'GetSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'MoveFileExW',
                                                                                            'EnumResourceNamesW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'lstrcmpA',
                                                                                            'LocalAlloc',
                                                                                            'CreateDirectoryW',
                                                                                            'ReadFile',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFullPathNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempPathW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetEndOfFile',
                                                                                            'GetWindowRect',
                                                                                            'LoadImageW',
                                                                                            'MapWindowPoints',
                                                                                            'ShowWindow',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyWindow',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassW',
                                                                                            'SetClipboardData',
                                                                                            'KillTimer',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'GetScrollBarInfo',
                                                                                            'PostMessageW',
                                                                                            'MessageBoxW',
                                                                                            'GetForegroundWindow',
                                                                                            'DialogBoxParamW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetWindowTextW',
                                                                                            'LoadIconW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'CheckRadioButton',
                                                                                            'CheckDlgButton',
                                                                                            'CopyRect',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetDC',
                                                                                            'DrawTextW',
                                                                                            'ReleaseDC',
                                                                                            'GetParent',
                                                                                            'SetFocus',
                                                                                            'SetRectEmpty',
                                                                                            'DrawTextExW',
                                                                                            'ScreenToClient',
                                                                                            'GetKeyState',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SendMessageW',
                                                                                            'MoveWindow',
                                                                                            'DestroyIcon',
                                                                                            'SetWindowLongPtrW',
                                                                                            'SetTimer',
                                                                                            'EnableWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'SendInput',
                                                                                            'CloseClipboard',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFolderLocation',
                                                                                            'SHBrowseForFolderW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoInitializeEx',
                                                                                            'CoSetProxyBlanket',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayGetUBound',
                                                                                            'UuidFromStringW',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlGetVersion',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'SelectObject',
                                                                                            'PropertySheetW',
                                                                                            'InitCommonControlsEx',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptQueryObject',
                                                                                            'CryptDecodeObject',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptMsgGetParam',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CryptMsgClose',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'DestroyEnvironmentBlock'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 263,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 131191496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 18432,
                                                                                       '.rdata\x00\x00': 135680,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 131191808,
                                                                                       '.text\x00\x00\x00': 314880},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/c5ac447cfbf3957509e9281fd1f4b52ccfc27d404481baa3e6a9a46a0fb2191c'},
 'c5b4311ff7cd97c1bbb2becb4c2e0560d811b082a8b6ad1a16f34266e26688ac': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 122092,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 122368,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c5b4311ff7cd97c1bbb2becb4c2e0560d811b082a8b6ad1a16f34266e26688ac'},
 'c6722da37f8fe062d11c93d8dc108faee7b1b34cf8abd778dc8858dbe5ccc651': {'AddressOfEntryPoint': 247056,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSVCRT.dll': 'free'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'free'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 7,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 28176,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 28672,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 63488},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c6722da37f8fe062d11c93d8dc108faee7b1b34cf8abd778dc8858dbe5ccc651'},
 'c680f6fd7be34cbd33b700acec414c6057651d305b6609edb61e709831fec22f': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 54668,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 54784,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c680f6fd7be34cbd33b700acec414c6057651d305b6609edb61e709831fec22f'},
 'c6f9843a59b1b0d2775b39b7a70ed92f513bbcf0c0209e3f9da75faf0ae73a90': {'AddressOfEntryPoint': 84128,
                                                                      'DebugRVA': 4528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertSidToStringSidW',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'Polygon',
                                                                                      'IMM32.dll': 'ImmAssociateContext',
                                                                                      'KERNEL32.dll': 'DeleteCriticalSection',
                                                                                      'OLEAUT32.dll': 'VarDateFromStr',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'DialogBoxParamW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'IIDFromString'},
                                                                      'ImportedFunctions': ['ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'OpenProcessToken',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetTokenInformation',
                                                                                            'IsValidSid',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'LoadLibraryExW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'MulDiv',
                                                                                            'DeleteFileW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'WaitForSingleObject',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetCommandLineW',
                                                                                            'GetLastError',
                                                                                            'CreateMutexW',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'CompareStringW',
                                                                                            'FindResourceExW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateProcessW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FindResourceW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'CreateSolidBrush',
                                                                                            'GetObjectW',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'SetBkColor',
                                                                                            'GetStockObject',
                                                                                            'CreatePen',
                                                                                            'Rectangle',
                                                                                            'CreateFontW',
                                                                                            'Polygon',
                                                                                            'UpdateWindow',
                                                                                            'ReleaseCapture',
                                                                                            'MapWindowPoints',
                                                                                            'SetRect',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'SetCapture',
                                                                                            'PtInRect',
                                                                                            'GetCursorPos',
                                                                                            'EndPaint',
                                                                                            'DrawTextExW',
                                                                                            'BeginPaint',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'GetWindowRect',
                                                                                            'ScreenToClient',
                                                                                            'GetParent',
                                                                                            'OffsetRect',
                                                                                            'SendMessageW',
                                                                                            'GetSysColor',
                                                                                            'DrawTextW',
                                                                                            'LoadIconW',
                                                                                            'DrawIconEx',
                                                                                            'EnableWindow',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EndDialog',
                                                                                            'LoadCursorW',
                                                                                            'InvalidateRect',
                                                                                            'DestroyWindow',
                                                                                            'PostMessageW',
                                                                                            'SetWindowPos',
                                                                                            'SetPropW',
                                                                                            'SetWindowLongW',
                                                                                            'InflateRect',
                                                                                            'DrawFocusRect',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'TrackMouseEvent',
                                                                                            'CallWindowProcW',
                                                                                            'FrameRect',
                                                                                            'FillRect',
                                                                                            'DrawFrameControl',
                                                                                            'IsWindow',
                                                                                            'GetWindowLongW',
                                                                                            'GetClientRect',
                                                                                            'GetSystemMetrics',
                                                                                            'CheckDlgButton',
                                                                                            'CheckRadioButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SetWindowTextW',
                                                                                            'IsWindowEnabled',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'FindWindowW',
                                                                                            'GetLastActivePopup',
                                                                                            'DrawStateW',
                                                                                            'GetDlgItemTextW',
                                                                                            'DestroyIcon',
                                                                                            'ShowWindow',
                                                                                            'LoadImageW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetCursor',
                                                                                            'MoveWindow',
                                                                                            'GetShellWindow',
                                                                                            'GetDlgItem',
                                                                                            'DialogBoxParamW',
                                                                                            '_ftol2_sse',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'wcsnlen',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'fclose',
                                                                                            '_wfopen_s',
                                                                                            '_itow_s',
                                                                                            'rand',
                                                                                            'vswprintf_s',
                                                                                            'swprintf_s',
                                                                                            'strstr',
                                                                                            '_wtoi',
                                                                                            'wcsstr',
                                                                                            '_vsnwprintf_s',
                                                                                            'wcsncat_s',
                                                                                            'iswalpha',
                                                                                            'wcsncpy_s',
                                                                                            'memset',
                                                                                            'PropertySheetW',
                                                                                            'ImmAssociateContext',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'IIDFromString',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VarDateFromStr'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 210,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 150248,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 150528,
                                                                                       '.text\x00\x00\x00': 93696},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c6f9843a59b1b0d2775b39b7a70ed92f513bbcf0c0209e3f9da75faf0ae73a90'},
 'c708ed1d07678ff314a88b65f840dab14fab99589c164ea2e96f4afc612dd9b7': {'AddressOfEntryPoint': 5568,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'SetPriorityClass',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__set_app_type',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__wgetmainargs',
                                                                                            '_wcmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_initterm',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '__setusermatherr',
                                                                                            'memset',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'SetPriorityClass',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ShellExecuteExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 35,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 175080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 175104,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c708ed1d07678ff314a88b65f840dab14fab99589c164ea2e96f4afc612dd9b7'},
 'c73a7928dc9f9baa4b7dbb14d75b7a5a556adf76e283ed6b3392241727eef96b': {'AddressOfEntryPoint': 67024,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventRegister',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SCECLI.dll': 'SceConfigureSystem',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathCanonicalizeW',
                                                                                      'SMEF.DLL': 'SMEFLOG',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '_commode',
                                                                                      'ntdll.dll': 'RtlQueueWorkItem',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'EventUnregister',
                                                                                            'EventEnabled',
                                                                                            'EventWrite',
                                                                                            'EventRegister',
                                                                                            'SizeofResource',
                                                                                            'FormatMessageW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetThreadPreferredUILanguages',
                                                                                            'GetLastError',
                                                                                            'LockResource',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'LocalFree',
                                                                                            'FindFirstFileW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadConsoleW',
                                                                                            'WriteFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetConsoleMode',
                                                                                            'Sleep',
                                                                                            'CopyFileW',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'EnterCriticalSection',
                                                                                            'FindClose',
                                                                                            'LocalAlloc',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FindNextFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'GetSystemTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'RaiseException',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'WriteConsoleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'free',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_fmode',
                                                                                            '_onexit',
                                                                                            'malloc',
                                                                                            '_wtol',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            'wcsncat_s',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_snwprintf_s',
                                                                                            'wcsrchr',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_wcsnicmp',
                                                                                            'memmove_s',
                                                                                            '_commode',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'VarBstrCmp',
                                                                                            'VarBstrCat',
                                                                                            'SysAllocString',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoUninitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'UnregisterClassA',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlQueueWorkItem',
                                                                                            'PathAppendW',
                                                                                            'PathIsRelativeW',
                                                                                            'PathCanonicalizeW',
                                                                                            'SMEFLOG',
                                                                                            'ShellExecuteExW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidFromStringW',
                                                                                            'UuidToStringW',
                                                                                            'UuidCreate',
                                                                                            'SceSetupGenerateTemplate',
                                                                                            'SceConfigureSystem'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 125,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 14112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 91136},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/c73a7928dc9f9baa4b7dbb14d75b7a5a556adf76e283ed6b3392241727eef96b'},
 'c7d08e602bbd09b03bb6454357873cfb07f51d679ee2dea9f1c9c54dfbe29612': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 376548,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 376832,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c7d08e602bbd09b03bb6454357873cfb07f51d679ee2dea9f1c9c54dfbe29612'},
 'c7e38d167f3756b4d818debef7f69fd205f550f95be1e1903df668343272832e': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 33288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'VirtualQuery',
                                                                                      'Qt5Core.dll': '_ZNK9QIODevice11errorStringEv',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathW',
                                                                                      'libgcc_s_dw2-1.dll': '__register_frame_info',
                                                                                      'libstdc++-6.dll': '__gxx_personality_v0',
                                                                                      'msvcrt.dll': 'vfprintf'},
                                                                      'ImportedFunctions': ['_ZN10QArrayData10deallocateEPS_jj',
                                                                                            '_ZN10QArrayData11shared_nullE',
                                                                                            '_ZN11QTextStreamlsERK7QString',
                                                                                            '_ZN11QTextStreamlsEc',
                                                                                            '_ZN11QTextStreamlsEi',
                                                                                            '_ZN16QCoreApplicationC1ERiPPci',
                                                                                            '_ZN16QCoreApplicationD1Ev',
                                                                                            '_ZN5QFile6existsERK7QString',
                                                                                            '_ZN6QDebugD1Ev',
                                                                                            '_ZN7QString10setUnicodeEPK5QChari',
                                                                                            '_ZN7QString15fromUtf8_helperEPKci',
                                                                                            '_ZN7QString16fromAscii_helperEPKci',
                                                                                            '_ZN7QString6appendERKS_',
                                                                                            '_ZN7QString9fromUtf16EPKti',
                                                                                            '_ZN7QStringaSERKS_',
                                                                                            '_ZN8QProcess15waitForFinishedEi',
                                                                                            '_ZN8QProcess21readAllStandardOutputEv',
                                                                                            '_ZN8QProcess5startERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN8QProcess9terminateEv',
                                                                                            '_ZN8QProcessC1EP7QObject',
                                                                                            '_ZN8QProcessD1Ev',
                                                                                            '_ZNK14QMessageLogger5debugEv',
                                                                                            '_ZNK8QProcess5errorEv',
                                                                                            '_ZNK8QProcess8exitCodeEv',
                                                                                            '_ZNK9QIODevice11errorStringEv',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            '_Unwind_Resume',
                                                                                            '__deregister_frame_info',
                                                                                            '__register_frame_info',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'signal',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'vfprintf',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            '__gxx_personality_v0'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.eh_fram': 3072,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/c7e38d167f3756b4d818debef7f69fd205f550f95be1e1903df668343272832e'},
 'c824e459c950b4d249fc2484c441d9d14b02dbe4192a96d2655fbb7ff19c6857': {'AddressOfEntryPoint': 19232,
                                                                      'DebugRVA': 4640,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LsaNtStatusToWinError',
                                                                                      'KERNEL32.dll': 'ExpandEnvironmentStringsW',
                                                                                      'MSVCP100.dll': '?_Orphan_all@_Container_base0@std@@QAEXXZ',
                                                                                      'MSVCR100.dll': 'memcpy',
                                                                                      'USER32.dll': 'CharNextW'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyW',
                                                                                            'LsaNtStatusToWinError',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryA',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetLastError',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetModuleHandleW',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CompareStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LockResource',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'VirtualQuery',
                                                                                            'SetLastError',
                                                                                            'DebugBreak',
                                                                                            'LocalAlloc',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'CharNextW',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_except_handler4_common',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_ismbblead',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '_vscwprintf',
                                                                                            'vswprintf_s',
                                                                                            '_wtol',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'wmemcpy_s',
                                                                                            'wcsrchr',
                                                                                            'wcscat_s',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_swscanf_s_l',
                                                                                            '_unlock',
                                                                                            'memcpy',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '?_Orphan_all@_Container_base0@std@@QAEXXZ'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 186584,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 186880,
                                                                                       '.text\x00\x00\x00': 31744},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c824e459c950b4d249fc2484c441d9d14b02dbe4192a96d2655fbb7ff19c6857'},
 'c8a56a8288d2326fdbd47788820d501c5c74c211e3da8f5f2669ce06e213aed7': {'AddressOfEntryPoint': 27324,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SspiCli.dll': 'GetUserNameExW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'WriteConsoleInputW',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CreateFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenProcessToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'CreateEventW',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AllocateAndInitializeSid',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCreateUnicodeString'},
                                                                      'ImportedFunctions': ['__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            'toupper',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'swprintf_s',
                                                                                            'wcsncpy_s',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_purecall',
                                                                                            '?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcsstr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'wcscpy_s',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_beginthreadex',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'NtQueryInformationToken',
                                                                                            'RtlFindMessage',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlCreateUnicodeString',
                                                                                            'ResetEvent',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'SetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LogonUserExExW',
                                                                                            'GetUserNameExW',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessAsUserW',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcessToken',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'SetConsoleWindowInfo',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'GetLargestConsoleWindowSize',
                                                                                            'ReadConsoleOutputW',
                                                                                            'GenerateConsoleCtrlEvent',
                                                                                            'WriteConsoleInputW',
                                                                                            'GetConsoleMode',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'CreateFileW',
                                                                                            'LoadUserProfileW',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'UnloadUserProfile',
                                                                                            'CreateEnvironmentBlock',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'CopySid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAce',
                                                                                            'FreeSid',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'UuidCreate',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'DeviceIoControl'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/c8a56a8288d2326fdbd47788820d501c5c74c211e3da8f5f2669ce06e213aed7'},
 'c8bebe08952543ba996ca294b5638deb26c2f55695d87de2de1282888642e449': {'AddressOfEntryPoint': 187872,
                                                                      'DebugRVA': 6528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 225280,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSidSubAuthorityCount',
                                                                                      'KERNEL32.dll': 'SizeofResource',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'SHELL32.dll': 'SHCreateDirectoryExW',
                                                                                      'SHLWAPI.dll': 'PathIsRelativeW',
                                                                                      'USER32.dll': 'SendMessageTimeoutW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'msvcrt.dll': 'vswprintf_s',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetEntriesInAclW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetKeyValueW',
                                                                                            'RegDeleteKeyValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegGetValueW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'IsValidSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'CreateDirectoryW',
                                                                                            'SetErrorMode',
                                                                                            'CreateProcessW',
                                                                                            'OpenFileMappingW',
                                                                                            'FindResourceExW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'SetFileAttributesW',
                                                                                            'MoveFileExW',
                                                                                            'GetVersionExW',
                                                                                            'OpenMutexW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFileSize',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'GetFullPathNameW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LocalAlloc',
                                                                                            'GetBinaryTypeW',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'OutputDebugStringA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'DeleteCriticalSection',
                                                                                            'CompareStringW',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileTime',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'DeleteFileA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'CreateFileA',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'LocalFree',
                                                                                            'DeleteFileW',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'OutputDebugStringW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'SizeofResource',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'wcsnlen',
                                                                                            'memcpy_s',
                                                                                            'wcscpy_s',
                                                                                            'tolower',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'memmove',
                                                                                            'memcmp',
                                                                                            '__crtLCMapStringW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '__uncaught_exception',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'abort',
                                                                                            'memcpy',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__mb_cur_max',
                                                                                            '_errno',
                                                                                            'islower',
                                                                                            '__crtLCMapStringA',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            'isupper',
                                                                                            '__pctype_func',
                                                                                            'setlocale',
                                                                                            'fputc',
                                                                                            'memset',
                                                                                            '___mb_cur_max_func',
                                                                                            'ungetwc',
                                                                                            'fputwc',
                                                                                            'fgetwc',
                                                                                            'ungetc',
                                                                                            'setvbuf',
                                                                                            'fwrite',
                                                                                            'fseek',
                                                                                            'fsetpos',
                                                                                            'fgetpos',
                                                                                            'fgetc',
                                                                                            'fflush',
                                                                                            'fclose',
                                                                                            '__iob_func',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??1bad_cast@@UAE@XZ',
                                                                                            '??0bad_cast@@QAE@ABV0@@Z',
                                                                                            '_wcsicmp',
                                                                                            'swscanf_s',
                                                                                            '_purecall',
                                                                                            'strncpy_s',
                                                                                            'strncat_s',
                                                                                            'wcsncat_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'wcsncpy_s',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            'wcsncmp',
                                                                                            '_wtoi',
                                                                                            'vswprintf_s',
                                                                                            'LoadStringW',
                                                                                            'EnumWindows',
                                                                                            'RegisterWindowMessageW',
                                                                                            'PostMessageW',
                                                                                            'GetClassNameW',
                                                                                            'CharPrevW',
                                                                                            'CharNextW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'IIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFindFileNameA',
                                                                                            'PathCanonicalizeW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathRemoveBackslashW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsRelativeW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'SHFileOperationW',
                                                                                            'SHCreateDirectoryExA',
                                                                                            'SHCreateDirectoryExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 215,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 12752,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 12800,
                                                                                       '.text\x00\x00\x00': 210944},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c8bebe08952543ba996ca294b5638deb26c2f55695d87de2de1282888642e449'},
 'c9153e347c544d1b4a25c21d7a2a7d3887c3f5c0822b32c36ef132e4fa65c485': {'AddressOfEntryPoint': 35111,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'RtlUnwind',
                                                                                      'LZ32.dll': 'LZClose',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'USER32.dll': 'TranslateMessage'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'FormatMessageA',
                                                                                            'DeleteFileA',
                                                                                            'MulDiv',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'WaitForSingleObject',
                                                                                            'CompareStringA',
                                                                                            'Sleep',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FreeLibrary',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindNextFileA',
                                                                                            'WritePrivateProfileSectionA',
                                                                                            'GetStartupInfoA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFileAttributesA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'SizeofResource',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpiA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'lstrcpynA',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'FindFirstFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'GetFileAttributesA',
                                                                                            'lstrcatA',
                                                                                            'lstrlenA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetPrivateProfileSectionA',
                                                                                            'LoadLibraryA',
                                                                                            'MoveFileExA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetShortPathNameA',
                                                                                            'FlushFileBuffers',
                                                                                            'CloseHandle',
                                                                                            'IsBadCodePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetEnvironmentStrings',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'TerminateProcess',
                                                                                            'GetStringTypeW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetStringTypeA',
                                                                                            'IsBadWritePtr',
                                                                                            'HeapReAlloc',
                                                                                            'GetCPInfo',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'VirtualAlloc',
                                                                                            'GetVersion',
                                                                                            'GetCommandLineA',
                                                                                            'HeapDestroy',
                                                                                            'RtlUnwind',
                                                                                            'GetParent',
                                                                                            'GetDlgItem',
                                                                                            'SetFocus',
                                                                                            'SendDlgItemMessageA',
                                                                                            'EnableWindow',
                                                                                            'CheckRadioButton',
                                                                                            'GetWindowLongA',
                                                                                            'LoadStringA',
                                                                                            'LoadImageA',
                                                                                            'MessageBoxA',
                                                                                            'CharNextA',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetDlgItemTextA',
                                                                                            'CheckDlgButton',
                                                                                            'SetDlgItemTextA',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetWindow',
                                                                                            'PostMessageA',
                                                                                            'SetWindowTextA',
                                                                                            'wsprintfA',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowTextA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'FillRect',
                                                                                            'GetSysColor',
                                                                                            'GetSysColorBrush',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'DrawTextA',
                                                                                            'MoveWindow',
                                                                                            'GetClientRect',
                                                                                            'ScreenToClient',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetParent',
                                                                                            'MapDialogRect',
                                                                                            'IsWindow',
                                                                                            'GetWindowRect',
                                                                                            'CreateDialogIndirectParamA',
                                                                                            'ShowWindow',
                                                                                            'InvalidateRect',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'UpdateWindow',
                                                                                            'IsDialogMessageA',
                                                                                            'SetWindowLongA',
                                                                                            'GetActiveWindow',
                                                                                            'SetActiveWindow',
                                                                                            'LoadIconA',
                                                                                            'PeekMessageA',
                                                                                            'SendMessageA',
                                                                                            'DispatchMessageA',
                                                                                            'TranslateMessage',
                                                                                            'CreateFontIndirectA',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'CreatePalette',
                                                                                            'GetObjectA',
                                                                                            'GetStockObject',
                                                                                            'CreateDIBitmap',
                                                                                            'GetTextExtentPointA',
                                                                                            'SelectObject',
                                                                                            'EnumFontFamiliesExA',
                                                                                            'DeleteDC',
                                                                                            'BitBlt',
                                                                                            'TextOutA',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateSolidBrush',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetMalloc',
                                                                                            'LZOpenFileA',
                                                                                            'LZCopy',
                                                                                            'LZClose'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 183,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 182952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 8192,
                                                                                       '.rdata\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 184320,
                                                                                       '.text\x00\x00\x00': 73728},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c9153e347c544d1b4a25c21d7a2a7d3887c3f5c0822b32c36ef132e4fa65c485'},
 'c9481b9dbe4a9689b0d694a17d2d3b02813c283435b11be3f345ef449db47626': {'AddressOfEntryPoint': 30304,
                                                                      'DebugRVA': 4784,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'LoadLibraryW',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'USER32.dll': 'PostMessageW',
                                                                                      'WS2_32.dll': 'WSAStringToAddressW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netutils.dll': 'NetpwNameValidate',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'srvcli.dll': 'NetShareGetInfo'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'FreeSid',
                                                                                            'GetLengthSid',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegOpenKeyExW',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'LookupAccountNameW',
                                                                                            'MapGenericMask',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'RegQueryValueExA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegOpenKeyExA',
                                                                                            'CreateDirectoryW',
                                                                                            'LocalAlloc',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileAttributesW',
                                                                                            'GetComputerNameExW',
                                                                                            'lstrcmpiW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'FormatMessageW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'LoadLibraryExA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'HeapSetInformation',
                                                                                            'RegisterApplicationRestart',
                                                                                            'lstrlenW',
                                                                                            'GetComputerNameW',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'EnableWindow',
                                                                                            'SendMessageW',
                                                                                            'GetParent',
                                                                                            'GetActiveWindow',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'LoadImageW',
                                                                                            'PostMessageW',
                                                                                            '__p__commode',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_XcptFilter',
                                                                                            'calloc',
                                                                                            'wcsncmp',
                                                                                            'free',
                                                                                            '_wcsnicmp',
                                                                                            'wcschr',
                                                                                            '__CxxFrameHandler3',
                                                                                            'towupper',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'wcsrchr',
                                                                                            'iswspace',
                                                                                            'memset',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'PropertySheetW',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'NetApiBufferFree',
                                                                                            'NetpwPathType',
                                                                                            'NetpIsRemote',
                                                                                            'NetpwNameValidate',
                                                                                            'NetShareAdd',
                                                                                            'NetShareEnum',
                                                                                            'NetpsNameValidate',
                                                                                            'NetServerGetInfo',
                                                                                            'NetServerDiskEnum',
                                                                                            'NetShareSetInfo',
                                                                                            'NetShareGetInfo',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'WSAStringToAddressW',
                                                                                            'SHChangeNotify',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetPathFromIDListW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 121,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 349688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 349696,
                                                                                       '.text\x00\x00\x00': 32768},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c9481b9dbe4a9689b0d694a17d2d3b02813c283435b11be3f345ef449db47626'},
 'c995f2247a1f50f4471ff00bed9adba769eadc0f612fa633d4ec550a6fe648df': {'AddressOfEntryPoint': 18080,
                                                                      'DebugRVA': 12800,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-delayload-l1-1-0.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-0.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-1-0.dll': 'CreateFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-libraryloader-l1-1-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localregistry-l1-1-0.dll': 'RegSetValueExW',
                                                                                      'api-ms-win-core-misc-l1-1-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-processenvironment-l1-1-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-0.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-sysinfo-l1-1-0.dll': 'GetTickCount',
                                                                                      'dbgeng.dll': 'DebugCreate',
                                                                                      'msvcrt.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['free',
                                                                                            'realloc',
                                                                                            'malloc',
                                                                                            '_vsnwprintf',
                                                                                            'wcsncmp',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'WriteConsoleW',
                                                                                            'CreateFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'DebugCreate',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 51,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2952,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 16384},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c995f2247a1f50f4471ff00bed9adba769eadc0f612fa633d4ec550a6fe648df'},
 'c9b87bbb56caa63d0bb1588e44a3cfbf686f0e5f5dac173c3c25f864f44b7991': {'AddressOfEntryPoint': 283104,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.DLL': 'RegCloseKey',
                                                                                      'COMDLG32.DLL': 'GetOpenFileNameA',
                                                                                      'GDI32.DLL': 'DeleteObject',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'OLE32.DLL': 'OleInitialize',
                                                                                      'SHELL32.DLL': 'SHGetMalloc',
                                                                                      'USER32.DLL': 'SetMenu'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'RegCloseKey',
                                                                                            'GetOpenFileNameA',
                                                                                            'DeleteObject',
                                                                                            'OleInitialize',
                                                                                            'SHGetMalloc',
                                                                                            'SetMenu'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 9,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 6460,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 7168,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 66560},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c9b87bbb56caa63d0bb1588e44a3cfbf686f0e5f5dac173c3c25f864f44b7991'},
 'c9dc8da0a972fc885c965454bf1d69a44b269ca7cf295ccadcf888bfbdece5f5': {'AddressOfEntryPoint': 22898,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'ReadFile',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenProcessToken',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3244,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 73810944,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c9dc8da0a972fc885c965454bf1d69a44b269ca7cf295ccadcf888bfbdece5f5'},
 'c9f160b3458f10f2303b7ff6eea7a29735b58e4b9fa9ec3de79af6062641986d': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 59424,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 59904,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/c9f160b3458f10f2303b7ff6eea7a29735b58e4b9fa9ec3de79af6062641986d'},
 'c9ffb13f7a582cc472f73c4512524487067ebcd7dae435316a3a243747624468': {'AddressOfEntryPoint': 1392144,
                                                                      'DebugRVA': 6368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1720320,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGenRandom',
                                                                                      'CRYPT32.dll': 'CertDuplicateCertificateContext',
                                                                                      'DNSAPI.dll': 'Dns_SkipToRecord',
                                                                                      'DSROLE.dll': 'DsRoleGetPrimaryDomainInformation',
                                                                                      'IPHLPAPI.DLL': 'CancelMibChangeNotify2',
                                                                                      'KERNEL32.dll': 'GetModuleHandleA',
                                                                                      'MPRAPI.dll': 'MprAdminTransportGetInfo',
                                                                                      'NTDSAPI.dll': 'DsBindA',
                                                                                      'RPCRT4.dll': 'RpcServerRegisterAuthInfoW',
                                                                                      'SspiCli.dll': 'FreeContextBuffer',
                                                                                      'WINHTTP.dll': 'WinHttpSendRequest',
                                                                                      'WS2_32.dll': 'send',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CreateStreamOnHGlobal',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetTimeFormatW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CompareFileTime',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'PostQueuedCompletionStatus',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'MoveFileW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'CreateFileMappingW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'ExitProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryValueExA',
                                                                                      'api-ms-win-core-registry-l2-1-0.dll': 'RegDeleteKeyW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlLookupFunctionEntry',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharLowerBuffW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForSingleObjectEx',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount64',
                                                                                      'api-ms-win-core-threadpool-l1-2-0.dll': 'SetThreadpoolTimer',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'FileTimeToSystemTime',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'EncodePointer',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'GetFileVersionInfoSizeExW',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceEnableFlags',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventRegister',
                                                                                      'api-ms-win-eventlog-legacy-l1-1-0.dll': 'RegisterEventSourceW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AccessCheck',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupAccountNameW',
                                                                                      'api-ms-win-security-lsapolicy-l1-1-0.dll': 'LsaQueryInformationPolicy',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'api-ms-win-service-core-l1-1-1.dll': 'StartServiceCtrlDispatcherW',
                                                                                      'api-ms-win-service-management-l1-1-0.dll': 'CloseServiceHandle',
                                                                                      'api-ms-win-service-winsvc-l1-2-0.dll': 'QueryServiceStatus',
                                                                                      'bcrypt.dll': 'BCryptDestroyKey',
                                                                                      'ktmw32.dll': 'CommitTransaction',
                                                                                      'logoncli.dll': 'DsGetDcCloseW',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ncrypt.dll': 'NCryptFreeBuffer',
                                                                                      'netutils.dll': 'NetApiBufferFree',
                                                                                      'ntdll.dll': 'RtlNewSecurityObject',
                                                                                      'ole32.dll': 'CoTaskMemFree',
                                                                                      'samcli.dll': 'NetLocalGroupAdd'},
                                                                      'ImportedFunctions': ['__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'abort',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'islower',
                                                                                            'calloc',
                                                                                            '__crtLCMapStringA',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            'isupper',
                                                                                            '__pctype_func',
                                                                                            '_wfsopen',
                                                                                            'fseek',
                                                                                            'setlocale',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'strerror',
                                                                                            'swscanf_s',
                                                                                            'fclose',
                                                                                            '_onexit',
                                                                                            'fwrite',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'setvbuf',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            'fsetpos',
                                                                                            'fgetc',
                                                                                            'fflush',
                                                                                            '_fseeki64',
                                                                                            'memchr',
                                                                                            'fgetpos',
                                                                                            'ungetc',
                                                                                            'free',
                                                                                            'fputc',
                                                                                            'strncmp',
                                                                                            'tolower',
                                                                                            'sscanf_s',
                                                                                            'strncpy_s',
                                                                                            '_time32',
                                                                                            'strnlen',
                                                                                            'strtoul',
                                                                                            'strcpy_s',
                                                                                            'wcsrchr',
                                                                                            '_wgetenv',
                                                                                            'wcsnlen',
                                                                                            '_itow_s',
                                                                                            '_ultow',
                                                                                            'atoi',
                                                                                            'wcsstr',
                                                                                            '_wcsnicmp',
                                                                                            'time',
                                                                                            'wcstol',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            '_itow',
                                                                                            'wcschr',
                                                                                            'wcsncmp',
                                                                                            '_vsnwprintf',
                                                                                            'ctime',
                                                                                            'isprint',
                                                                                            '_strlwr',
                                                                                            '_vsnprintf',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strcmp',
                                                                                            'swprintf_s',
                                                                                            'isdigit',
                                                                                            'srand',
                                                                                            'rand',
                                                                                            'sprintf_s',
                                                                                            'localeconv',
                                                                                            'strcspn',
                                                                                            'memmove_s',
                                                                                            'qsort',
                                                                                            '_strupr_s',
                                                                                            'wcstoul',
                                                                                            'strtol',
                                                                                            '__uncaught_exception',
                                                                                            '___mb_cur_max_func',
                                                                                            '_errno',
                                                                                            '__crtLCMapStringW',
                                                                                            'ldiv',
                                                                                            'strtok',
                                                                                            'strstr',
                                                                                            'strtok_s',
                                                                                            'strchr',
                                                                                            'memmove',
                                                                                            'memcpy_s',
                                                                                            'wcscmp',
                                                                                            'DsRoleFreeMemory',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'GetLocalTime',
                                                                                            'GetTickCount',
                                                                                            'GetComputerNameExW',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount64',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentThread',
                                                                                            'ExitThread',
                                                                                            'TerminateProcess',
                                                                                            'ExitProcess',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'DnsQuery_UTF8',
                                                                                            'DnsFree',
                                                                                            'DnsRecordListUnmapV4MappedAAAAInPlace',
                                                                                            'Dns_WriteDottedNameToPacket',
                                                                                            'Dns_ReadRecordStructureFromPacket',
                                                                                            'DnsIsNSECType',
                                                                                            'DnsValidateName_W',
                                                                                            'GetCurrentTimeInSeconds',
                                                                                            'DnsRecordStringForType',
                                                                                            'DnsRecordStringForWritableType',
                                                                                            'DnsRecordTypeForName',
                                                                                            'DnsUtf8ToUnicode',
                                                                                            'DnsReplaceRecordSetUTF8',
                                                                                            'DnsIsAMailboxType',
                                                                                            'Dns_WriteRecordStructureToPacketEx',
                                                                                            'Dns_ReadPacketNameAllocate',
                                                                                            'Dns_SetRecordDatalength',
                                                                                            'Dns_ParsePacketRecord',
                                                                                            'DnsUnicodeToUtf8',
                                                                                            'DnsApiFree',
                                                                                            'DnsStringCopyAllocateEx',
                                                                                            'Dns_SkipPacketName',
                                                                                            'Dns_SkipToRecord',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'EnterCriticalSection',
                                                                                            'OpenEventW',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'FormatMessageW',
                                                                                            'EventUnregister',
                                                                                            'EventWrite',
                                                                                            'EventRegister',
                                                                                            'MoveFileExW',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'sendto',
                                                                                            'connect',
                                                                                            'getprotobynumber',
                                                                                            'GetAddrInfoW',
                                                                                            'ntohs',
                                                                                            'select',
                                                                                            'GetNameInfoW',
                                                                                            'htonl',
                                                                                            'closesocket',
                                                                                            'WSAGetLastError',
                                                                                            'FreeAddrInfoW',
                                                                                            'ntohl',
                                                                                            'inet_addr',
                                                                                            'getservbyname',
                                                                                            'shutdown',
                                                                                            'getservbyport',
                                                                                            'getsockname',
                                                                                            'WSARecvFrom',
                                                                                            'recv',
                                                                                            'htons',
                                                                                            'inet_ntoa',
                                                                                            'accept',
                                                                                            'getprotobyname',
                                                                                            '__WSAFDIsSet',
                                                                                            'recvfrom',
                                                                                            'WSASetLastError',
                                                                                            'WSACleanup',
                                                                                            'getsockopt',
                                                                                            'listen',
                                                                                            'ioctlsocket',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'socket',
                                                                                            'WSASocketW',
                                                                                            'WSAIoctl',
                                                                                            'WSAStartup',
                                                                                            'send',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'DeleteFileW',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'CompareFileTime',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceConfigA',
                                                                                            'OpenServiceA',
                                                                                            'ChangeServiceConfigA',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerA',
                                                                                            'QueryServiceStatus',
                                                                                            'DsGetDcNameA',
                                                                                            'DsGetDcNameW',
                                                                                            'DsGetDcOpenW',
                                                                                            'DsGetSiteNameW',
                                                                                            'DsGetDcNextW',
                                                                                            'DsGetDcCloseW',
                                                                                            'NetApiBufferFree',
                                                                                            'RpcMgmtSetComTimeout',
                                                                                            'RpcBindingSetAuthInfoExA',
                                                                                            'I_RpcGetExtendedError',
                                                                                            'RpcBindingFree',
                                                                                            'RpcBindingInqAuthClientW',
                                                                                            'RpcBindingSetOption',
                                                                                            'RpcServerUseProtseqA',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcEpRegisterA',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerUseProtseqEpA',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcBindingSetAuthInfoA',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'NdrClientCall3',
                                                                                            'RpcErrorStartEnumeration',
                                                                                            'RpcErrorEndEnumeration',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcErrorGetNextRecord',
                                                                                            'UuidCreateSequential',
                                                                                            'RpcStringFreeA',
                                                                                            'RpcBindingInqAuthClientA',
                                                                                            'RpcRevertToSelf',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcEpUnregister',
                                                                                            'NdrServerCall2',
                                                                                            'NdrServerCallAll',
                                                                                            'RpcMgmtWaitServerListen',
                                                                                            'RpcMgmtStopServerListening',
                                                                                            'RpcServerListen',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStringTypeW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'AddAce',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'FreeSid',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetTokenInformation',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'IsValidAcl',
                                                                                            'GetLengthSid',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'DeleteAce',
                                                                                            'AddAccessAllowedAce',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'MapGenericMask',
                                                                                            'CreateWellKnownSid',
                                                                                            'CheckTokenMembership',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CopySid',
                                                                                            'GetAclInformation',
                                                                                            'AccessCheck',
                                                                                            'QueryContextAttributesW',
                                                                                            'FreeContextBuffer',
                                                                                            'NotifyUnicastIpAddressChange',
                                                                                            'GetAdaptersAddresses',
                                                                                            'CancelMibChangeNotify2',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'TraceEvent',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'CharUpperBuffW',
                                                                                            'CharLowerBuffW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'OpenFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CloseThreadpoolTimer',
                                                                                            'CreateThreadpoolTimer',
                                                                                            'WaitForThreadpoolTimerCallbacks',
                                                                                            'SetThreadpoolTimer',
                                                                                            'NCryptOpenStorageProvider',
                                                                                            'NCryptFreeObject',
                                                                                            'NCryptOpenKey',
                                                                                            'NCryptDeleteKey',
                                                                                            'NCryptSignHash',
                                                                                            'NCryptCreatePersistedKey',
                                                                                            'NCryptFinalizeKey',
                                                                                            'NCryptGetProperty',
                                                                                            'NCryptSetProperty',
                                                                                            'NCryptImportKey',
                                                                                            'NCryptExportKey',
                                                                                            'NCryptEnumStorageProviders',
                                                                                            'NCryptFreeBuffer',
                                                                                            'CertGetNameStringW',
                                                                                            'CertDeleteCertificateFromStore',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertOpenStore',
                                                                                            'CertStrToNameW',
                                                                                            'CryptEncodeObjectEx',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertCompareCertificateName',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CertCompareIntegerBlob',
                                                                                            'CertAddCertificateContextToStore',
                                                                                            'CertCreateSelfSignCertificate',
                                                                                            'CertSetCertificateContextProperty',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'WinHttpQueryDataAvailable',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpCrackUrl',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpSendRequest',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'LookupAccountNameW',
                                                                                            'NetLocalGroupAdd',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetComputerNameW',
                                                                                            'LoadLibraryW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'MoveFileW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegisterEventSourceW',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaClose',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'RtlDeleteElementGenericTableAvl',
                                                                                            'RtlInsertElementGenericTableAvl',
                                                                                            'RtlInitializeGenericTableAvl',
                                                                                            'RtlRandom',
                                                                                            'NtClose',
                                                                                            'NtCreateFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtCancelIoFile',
                                                                                            'RtlOemToUnicodeN',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlEqualSid',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwTraceMessage',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'RtlCopySid',
                                                                                            'RtlLengthSid',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlUpcaseUnicodeToOemN',
                                                                                            'RtlAbsoluteToSelfRelativeSD',
                                                                                            'NtAccessCheckAndAuditAlarm',
                                                                                            'RtlDestroyHeap',
                                                                                            'RtlIpv6StringToAddressA',
                                                                                            'RtlIpv6StringToAddressW',
                                                                                            'RtlIpv4StringToAddressA',
                                                                                            'RtlIpv4StringToAddressW',
                                                                                            'RtlIpv6AddressToStringA',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'RtlIpv6AddressToStringExA',
                                                                                            'RtlIpv6StringToAddressExW',
                                                                                            'RtlIpv6StringToAddressExA',
                                                                                            'RtlGetNtProductType',
                                                                                            'NtOpenProcessToken',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlSubAuthorityCountSid',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlNewSecurityObject',
                                                                                            'TraceMessage',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'BCryptVerifySignature',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptFinishHash',
                                                                                            'BCryptImportKeyPair',
                                                                                            'BCryptHashData',
                                                                                            'BCryptCreateHash',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptDestroyHash',
                                                                                            'BCryptDestroyKey',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'HeapReAlloc',
                                                                                            'GetTimeFormatEx',
                                                                                            'GetDateFormatEx',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'LocalFree',
                                                                                            'DeleteFileTransactedW',
                                                                                            'MoveFileTransactedW',
                                                                                            'CopyFileTransactedW',
                                                                                            'GetFileSize',
                                                                                            'ReleaseMutex',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'LocalAlloc',
                                                                                            'OutputDebugStringA',
                                                                                            'UnmapViewOfFile',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'lstrcmpiW',
                                                                                            'LoadLibraryExA',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateTransaction',
                                                                                            'CommitTransaction',
                                                                                            'MprInfoBlockFind',
                                                                                            'MprConfigTransportGetHandle',
                                                                                            'MprAdminBufferFree',
                                                                                            'MprAdminServerDisconnect',
                                                                                            'MprAdminTransportSetInfo',
                                                                                            'MprInfoBlockQuerySize',
                                                                                            'MprConfigServerConnect',
                                                                                            'MprInfoBlockSet',
                                                                                            'MprAdminServerConnect',
                                                                                            'MprConfigServerDisconnect',
                                                                                            'MprConfigTransportGetInfo',
                                                                                            'MprConfigBufferFree',
                                                                                            'MprAdminTransportGetInfo',
                                                                                            'DsReplicaFreeInfo',
                                                                                            'DsMakeSpnW',
                                                                                            'DsQuerySitesFree',
                                                                                            'DsListSitesW',
                                                                                            'DsFreeNameResultW',
                                                                                            'DsQuerySitesByCostW',
                                                                                            'DsFreeSpnArrayW',
                                                                                            'DsWriteAccountSpnW',
                                                                                            'DsBindW',
                                                                                            'DsReplicaGetInfoW',
                                                                                            'DsUnBindW',
                                                                                            'DsGetSpnW',
                                                                                            'DsBindA',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateGuid',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateXmlReader'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 58,
                                                                      'NumberOfImportFunctions': 540,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 177856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 24576,
                                                                                       '.idata\x00\x00': 23040,
                                                                                       '.pdata\x00\x00': 32256,
                                                                                       '.reloc\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 178176,
                                                                                       '.text\x00\x00\x00': 1442816,
                                                                                       '.tls\x00\x00\x00\x00': 27136},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/c9ffb13f7a582cc472f73c4512524487067ebcd7dae435316a3a243747624468'},
 'c9ffde0dfdf93941e4777682da7e57b41d55fcd23ac19c370f36d5dfd9b3c9db': {'AddressOfEntryPoint': 264192,
                                                                      'DebugRVA': 4576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 265952,
                                                                      'ExportSize': 179,
                                                                      'IATRVA': 274432,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlIpv6AddressToStringExW',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['WideCharToMultiByte',
                                                                                            'Sleep',
                                                                                            'lstrcmpiW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetComputerNameW',
                                                                                            'SetThreadUILanguage',
                                                                                            'RegisterApplicationRestart',
                                                                                            'GetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetLocalTime',
                                                                                            'GetFileType',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleW',
                                                                                            'WriteFile',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_wtoi',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            '_iob',
                                                                                            'setlocale',
                                                                                            'setvbuf',
                                                                                            '_controlfp',
                                                                                            '_wfopen',
                                                                                            '_wcsicmp',
                                                                                            '_vsnprintf',
                                                                                            'fprintf',
                                                                                            '_wtol',
                                                                                            '_vsnwprintf',
                                                                                            'fgetwc',
                                                                                            '_wcsnicmp',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'RtlIpv6AddressToStringExW',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'LoadStringW',
                                                                                            'htons',
                                                                                            'WSAStartup',
                                                                                            'WSAAddressToStringW',
                                                                                            'WSACleanup'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 14336,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 262144},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/c9ffde0dfdf93941e4777682da7e57b41d55fcd23ac19c370f36d5dfd9b3c9db'},
 'ca58d3b98c17640c85081c77c49d30465b72cb83285abc9a56c803c0ec3dbaa1': {'AddressOfEntryPoint': 77136,
                                                                      'DebugRVA': 33504,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleMode',
                                                                                      'api-ms-win-core-debug-l1-1-0.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-0.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-0.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-1-0.dll': 'DeleteFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-1-0.dll': 'HeapAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-1-0.dll': 'LoadLibraryExW',
                                                                                      'api-ms-win-core-localregistry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-memory-l1-1-0.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-misc-l1-1-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-namedpipe-l1-1-0.dll': 'PeekNamedPipe',
                                                                                      'api-ms-win-core-processenvironment-l1-1-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-0.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-synch-l1-1-0.dll': 'CreateEventA',
                                                                                      'api-ms-win-core-sysinfo-l1-1-0.dll': 'GetSystemInfo',
                                                                                      'api-ms-win-core-util-l1-1-0.dll': 'Beep',
                                                                                      'dbgeng.dll': 'DebugConnect',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_vsnprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_strnicmp',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'feof',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'fgetwc',
                                                                                            '__iob_func',
                                                                                            'realloc',
                                                                                            'isprint',
                                                                                            '_spawnlp',
                                                                                            'strrchr',
                                                                                            '_stricmp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            'rewind',
                                                                                            '_CxxThrowException',
                                                                                            'getenv',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'calloc',
                                                                                            '??0exception@@QAE@ABQBDH@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            'fopen',
                                                                                            'free',
                                                                                            'wcsstr',
                                                                                            'malloc',
                                                                                            'isspace',
                                                                                            'printf',
                                                                                            '_purecall',
                                                                                            'atoi',
                                                                                            '_callnewh',
                                                                                            '_cexit',
                                                                                            'sscanf_s',
                                                                                            'strtoul',
                                                                                            'memmove',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_strlwr',
                                                                                            'strstr',
                                                                                            'tolower',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'strchr',
                                                                                            'fclose',
                                                                                            'fgets',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_XcptFilter',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'FormatMessageA',
                                                                                            'Sleep',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateEventA',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'SetStdHandle',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetStdHandle',
                                                                                            'ReadConsoleA',
                                                                                            'WriteConsoleA',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetConsoleMode',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetFileType',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetPriorityClass',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentProcessId',
                                                                                            'OutputDebugStringA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameA',
                                                                                            'LoadLibraryExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'PeekNamedPipe',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExA',
                                                                                            'GetComputerNameExA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'Beep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DebugCreate',
                                                                                            'DebugConnect',
                                                                                            'DelayLoadFailureHook',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 137,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 3816,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.mrdata\x00': 5632,
                                                                                       '.reloc\x00\x00': 7168,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 77312},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ca58d3b98c17640c85081c77c49d30465b72cb83285abc9a56c803c0ec3dbaa1'},
 'ca8615cd448c19e7a6bc9f345e8178a41c3ba3c5f4663f60e8b711b53edfc6df': {'AddressOfEntryPoint': 75996,
                                                                      'DebugRVA': 5968,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_AddMasked',
                                                                                      'GDI32.dll': 'GetTextMetricsW',
                                                                                      'KERNEL32.dll': 'VirtualFree',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'USER32.dll': 'ShowCaret',
                                                                                      'msvcrt.dll': '_wcsicmp',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['GetDriveTypeW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeviceIoControl',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetFileSize',
                                                                                            'LoadLibraryA',
                                                                                            'GetStartupInfoW',
                                                                                            'ReadFile',
                                                                                            'VirtualAlloc',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'GetLastError',
                                                                                            'WriteFile',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'VirtualFree',
                                                                                            'iswspace',
                                                                                            'towupper',
                                                                                            'iswalpha',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_CxxThrowException',
                                                                                            'wcsncpy',
                                                                                            'toupper',
                                                                                            'iswxdigit',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            '__CxxFrameHandler',
                                                                                            'isprint',
                                                                                            '_ultow',
                                                                                            '_purecall',
                                                                                            'wcslen',
                                                                                            '_strnicmp',
                                                                                            'strncmp',
                                                                                            'wcstoul',
                                                                                            '_wtol',
                                                                                            '_itow',
                                                                                            '_i64tow',
                                                                                            '_ui64tow',
                                                                                            '_wcsicmp',
                                                                                            'CreateFontW',
                                                                                            'TextOutA',
                                                                                            'GetStockObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetTextMetricsW',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetCursorPos',
                                                                                            'GetParent',
                                                                                            'PostMessageW',
                                                                                            'LoadMenuW',
                                                                                            'ModifyMenuW',
                                                                                            'GetSubMenu',
                                                                                            'LoadBitmapW',
                                                                                            'MessageBeep',
                                                                                            'GetClassNameW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetFocus',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'SendMessageA',
                                                                                            'UpdateWindow',
                                                                                            'MessageBoxW',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'InvalidateRect',
                                                                                            'CreateCaret',
                                                                                            'GetCaretPos',
                                                                                            'EnableWindow',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'SetCaretPos',
                                                                                            'ShowCaret',
                                                                                            'UuidFromStringW',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'ImageList_AddMasked',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoCreateInstance',
                                                                                            'OleRun',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromString',
                                                                                            'GetErrorInfo',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 119,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 32520,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14848,
                                                                                       '.rsrc\x00\x00\x00': 32768,
                                                                                       '.text\x00\x00\x00': 82432},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ca8615cd448c19e7a6bc9f345e8178a41c3ba3c5f4663f60e8b711b53edfc6df'},
 'cad2ab101c037d8f45073f61f927dc8750a937b9d5b878453fdf48a6c04660db': {'AddressOfEntryPoint': 19888,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': '_amsg_exit',
                                                                                      'ntdll.dll': 'VerSetConditionMask'},
                                                                      'ImportedFunctions': ['RtlVerifyVersionInfo',
                                                                                            'VerSetConditionMask',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'WSACleanup',
                                                                                            'StrChrW',
                                                                                            'StrChrIW',
                                                                                            'StrStrW',
                                                                                            'StrStrIW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW',
                                                                                            'HeapFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetNumberOfConsoleInputEvents',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleMode',
                                                                                            'Sleep',
                                                                                            'SetConsoleMode',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'PeekConsoleInputW',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'GetFileType',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'HeapSetInformation',
                                                                                            'ReadConsoleInputW',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'WideCharToMultiByte',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringA',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'time',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            'wcstod',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_exit',
                                                                                            '_memicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcstol',
                                                                                            '_errno',
                                                                                            '__iob_func',
                                                                                            'memset',
                                                                                            '_amsg_exit'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 17920},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/cad2ab101c037d8f45073f61f927dc8750a937b9d5b878453fdf48a6c04660db'},
 'cada5671fc807eef94e1afb85b6a466447426e430a52957997d802eff7056d80': {'AddressOfEntryPoint': 4988,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2664,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/cada5671fc807eef94e1afb85b6a466447426e430a52957997d802eff7056d80'},
 'cadeb025a83fc2d084d609c9858fd055b8528457c49b434ea47a7f301a5817b6': {'AddressOfEntryPoint': 7712,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'lstrlenW',
                                                                                      'msvcrt.dll': 'wcschr',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError'},
                                                                      'ImportedFunctions': ['LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'SetLastError',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_resetstkoflw',
                                                                                            'wcsrchr',
                                                                                            'wcschr',
                                                                                            'RtlNtStatusToDosError'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 51,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 52720,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 52736,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/cadeb025a83fc2d084d609c9858fd055b8528457c49b434ea47a7f301a5817b6'},
 'cb326627c0de82a5cb6159dcdd40b5f2e5ce2bc87cf5b0f85fa8d8bc62d2e92c': {'AddressOfEntryPoint': 4640,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 2,
                                                                      'ImportedDLL': {'MSVBVM60.DLL': 'ProcCallEngine'},
                                                                      'ImportedFunctions': ['MethCallEngine',
                                                                                            'EVENT_SINK_AddRef',
                                                                                            'DllFunctionCall',
                                                                                            'EVENT_SINK_Release',
                                                                                            'EVENT_SINK_QueryInterface',
                                                                                            '__vbaExceptHandler',
                                                                                            'ProcCallEngine'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 7,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 260812,
                                                                      'SectionNames': {'.data\x00\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 262144,
                                                                                       '.text\x00\x00\x00': 192512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/cb326627c0de82a5cb6159dcdd40b5f2e5ce2bc87cf5b0f85fa8d8bc62d2e92c'},
 'cb41e9d0e8107aa9337dbd1c56f22461131ad0952a2472b4477e2649d16ecb15': {'AddressOfEntryPoint': 4448,
                                                                      'DebugRVA': 4112,
                                                                      'DebugSize': 56,
                                                                      'Dll': 352,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CSRSRV.dll': 'CsrUnhandledExceptionFilter',
                                                                                      'ntdll.dll': 'RtlNormalizeProcessParams'},
                                                                      'ImportedFunctions': ['RtlSetHeapInformation',
                                                                                            'RtlSetUnhandledExceptionFilter',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'NtTerminateThread',
                                                                                            'isspace',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlNormalizeProcessParams',
                                                                                            'CsrServerInitialization',
                                                                                            'CsrUnhandledExceptionFilter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 16,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/cb41e9d0e8107aa9337dbd1c56f22461131ad0952a2472b4477e2649d16ecb15'},
 'cbb1f476f531b8b4c6d4376ef3a634618966d9e3bf1821c70daf1b6d24e21b43': {'AddressOfEntryPoint': 87856,
                                                                      'DebugRVA': 4848,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventRegister',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'api-ms-win-core-winrt-error-l1-1-0.dll': 'RoOriginateError',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateErrorW',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoRegisterActivationFactories',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsCreateString',
                                                                                      'msvcrt.dll': '_snwprintf_s',
                                                                                      'ntdll.dll': 'RtlLookupFunctionEntry',
                                                                                      'ole32.dll': 'CoReleaseServerProcess'},
                                                                      'ImportedFunctions': ['EventWrite',
                                                                                            'EventUnregister',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'EventRegister',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleExW',
                                                                                            'OpenMutexW',
                                                                                            'InitializeCriticalSection',
                                                                                            'AcquireSRWLockShared',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ResetEvent',
                                                                                            'CreateEventExW',
                                                                                            'CloseHandle',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'InitializeSRWLock',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DispatchMessageW',
                                                                                            'SetCoalescableTimer',
                                                                                            'GetAncestor',
                                                                                            'ToUnicode',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetForegroundWindow',
                                                                                            'RealGetWindowClassW',
                                                                                            'KillTimer',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'memmove',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'memset',
                                                                                            '_purecall',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'memcpy_s',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '__set_app_type',
                                                                                            '_snwprintf_s',
                                                                                            'CoCreateInstance',
                                                                                            'PropVariantClear',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoTaskMemFree',
                                                                                            'CoReleaseServerProcess',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'RoOriginateError',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlQueryWnfStateData',
                                                                                            'RtlSubscribeWnfStateChangeNotification',
                                                                                            'RtlUnsubscribeWnfStateChangeNotification',
                                                                                            'RtlPublishWnfStateData',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RoGetMatchingRestrictedErrorInfo',
                                                                                            'IsErrorPropagationEnabled',
                                                                                            'RoTransformError',
                                                                                            'RoReportFailedDelegate',
                                                                                            'RoOriginateErrorW',
                                                                                            'RoRevokeActivationFactories',
                                                                                            'RoRegisterActivationFactories',
                                                                                            'WindowsStringHasEmbeddedNull',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsIsStringEmpty',
                                                                                            'WindowsCreateString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 104960},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/cbb1f476f531b8b4c6d4376ef3a634618966d9e3bf1821c70daf1b6d24e21b43'},
 'cbce8ce128420399fe99b34141a78be6926212b75bc0a1dbafc280af2faa8a42': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/cbce8ce128420399fe99b34141a78be6926212b75bc0a1dbafc280af2faa8a42'},
 'cc33ab1818656f24b77c35455de22c060f476f3a919c2db84c4f82f761c977b9': {'AddressOfEntryPoint': 43672,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 31896,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 32256,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 41472,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/cc33ab1818656f24b77c35455de22c060f476f3a919c2db84c4f82f761c977b9'},
 'cc449330841a638d70c3b37d0973babe1f51250fb43f69bb2fe18ffe7ddde81b': {'AddressOfEntryPoint': 188842,
                                                                      'DebugRVA': 422864,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 307200,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'LoadLibraryExA',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'GetUserNameW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'DecryptFileW',
                                                                                            'CreateWellKnownSid',
                                                                                            'InitializeAcl',
                                                                                            'SetEntriesInAclW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'CloseServiceHandle',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetTokenInformation',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'SystemFunction036',
                                                                                            'QueryServiceConfigW',
                                                                                            'GetMessageW',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'WaitForInputIdle',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'GetCursorPos',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'GetObjectW',
                                                                                            'DeleteDC',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromProgID',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'LCMapStringW',
                                                                                            'Sleep',
                                                                                            'GetLocalTime',
                                                                                            'GetModuleFileNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'CompareStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'FindClose',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'TlsAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'CreateProcessW',
                                                                                            'GetVersionExW',
                                                                                            'VerSetConditionMask',
                                                                                            'FreeLibrary',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetDateFormatW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetStringTypeW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'DuplicateHandle',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'OpenProcess',
                                                                                            'GetProcessId',
                                                                                            'WaitForSingleObject',
                                                                                            'ConnectNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'CreateNamedPipeW',
                                                                                            'CreateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'ResetEvent',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CompareStringA',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetThreadExecutionState',
                                                                                            'CopyFileExW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateMutexW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetThreadLocale',
                                                                                            'IsValidCodePage',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'TlsGetValue',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'DecodePointer',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GetFileSizeEx',
                                                                                            'CopyFileW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FindFirstFileExW',
                                                                                            'GetFileType',
                                                                                            'GetACP',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'RtlUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadLibraryExA',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 237,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 171588,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 125952,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 172032,
                                                                                       '.text\x00\x00\x00': 302080,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.wixburn': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/cc449330841a638d70c3b37d0973babe1f51250fb43f69bb2fe18ffe7ddde81b'},
 'cc5af9e22b93bd22a7640e58583a05458823098f415c1b06743ff881efcedfd6': {'AddressOfEntryPoint': 22898,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'ReadFile',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenProcessToken',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 7620096,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/cc5af9e22b93bd22a7640e58583a05458823098f415c1b06743ff881efcedfd6'},
 'cc74d0bf88a9aedd0568857d1805bfb52e7ef04202cbf3c2d29e6c49dd001a12': {'AddressOfEntryPoint': 12960,
                                                                      'DebugRVA': 7728,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetTickCount',
                                                                                      'dbghelp.dll': 'SymSetOptions',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['FindFirstFileW',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            '_amsg_exit',
                                                                                            '_except_handler4_common',
                                                                                            '__p__commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            'wcscpy_s',
                                                                                            'wcsstr',
                                                                                            'wprintf',
                                                                                            '_wsplitpath_s',
                                                                                            'towlower',
                                                                                            'swprintf_s',
                                                                                            'wcschr',
                                                                                            '_controlfp',
                                                                                            'memset',
                                                                                            'SymCleanup',
                                                                                            'SymLoadModuleExW',
                                                                                            'SymSetHomeDirectoryW',
                                                                                            'SymAddSourceStreamW',
                                                                                            'SymMatchStringW',
                                                                                            'SymUnloadModule64',
                                                                                            'SymRegisterCallbackW64',
                                                                                            'SymEnumSourceFileTokens',
                                                                                            'SymGetSourceFileTokenW',
                                                                                            'SymEnumSourceFilesW',
                                                                                            'SymGetSourceVarFromTokenW',
                                                                                            'SymInitializeW',
                                                                                            'SymSrvGetFileIndexesW',
                                                                                            'SymGetOptions',
                                                                                            'EnumDirTreeW',
                                                                                            'SymGetSourceFileFromTokenW',
                                                                                            'SymGetModuleInfoW64',
                                                                                            'SymSetOptions'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 63,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 10752},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/cc74d0bf88a9aedd0568857d1805bfb52e7ef04202cbf3c2d29e6c49dd001a12'},
 'ccc66e744649d6973b19e5c0f6fd35829d366843a00cbd98f62f49d952396eea': {'AddressOfEntryPoint': 186642,
                                                                      'DebugRVA': 186664,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 186656,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 16854,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 16896,
                                                                                       '.text\x00\x00\x00': 178688},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ccc66e744649d6973b19e5c0f6fd35829d366843a00cbd98f62f49d952396eea'},
 'ccc881be5c4cec84bbaae993c76a67427a90df9a51b573552becdd998cccaa50': {'AddressOfEntryPoint': 370174,
                                                                      'DebugRVA': 369964,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 26736,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 364544},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ccc881be5c4cec84bbaae993c76a67427a90df9a51b573552becdd998cccaa50'},
 'cd0a1121e8a7b96dfd341fbd1f53016cd1c185ef868cd7250326047b7cb48a0d': {'AddressOfEntryPoint': 14808,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33248,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'DUI70.dll': '?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'SHELL32.dll': 'SHCreateItemInKnownFolder',
                                                                                      'USER32.dll': 'PostQuitMessage',
                                                                                      'api-ms-win-core-winrt-error-l1-1-1.dll': 'RoOriginateError',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoInitialize',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'VirtualQuery',
                                                                                            'GetModuleHandleW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'DecodePointer',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'CompareStringW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleExW',
                                                                                            'HeapFree',
                                                                                            'FindResourceExW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetMessageW',
                                                                                            'CharNextW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PostQuitMessage',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            'memcpy',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memmove',
                                                                                            '_purecall',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_lock',
                                                                                            'memset',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetIDListFromObject',
                                                                                            'SHCreateItemInKnownFolder',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'RoUninitialize',
                                                                                            'RoInitialize',
                                                                                            'RoOriginateError',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z',
                                                                                            '?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z',
                                                                                            'StrToID',
                                                                                            '?SetContentString@Element@DirectUI@@QEAAJPEBG@Z',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2592,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 14336,
                                                                                       'minATL\x00\x00': 512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/cd0a1121e8a7b96dfd341fbd1f53016cd1c185ef868cd7250326047b7cb48a0d'},
 'cd1eb2bfba4f7ced178a1dfe059b36f6e09e7a12f6f765d10d8c827fec1f4849': {'AddressOfEntryPoint': 21408,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ProcessTrace',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlAllocateHeap'},
                                                                      'ImportedFunctions': ['EnableTraceEx',
                                                                                            'ControlTraceW',
                                                                                            'CloseTrace',
                                                                                            'StartTraceW',
                                                                                            'OpenTraceW',
                                                                                            'ProcessTrace',
                                                                                            'GetModuleHandleW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'RaiseException',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'HeapSetInformation',
                                                                                            'GetUserDefaultLangID',
                                                                                            'FormatMessageW',
                                                                                            'CreateFileW',
                                                                                            'lstrlenW',
                                                                                            'GetLastError',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'memcpy_s',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            'wcsstr',
                                                                                            '_initterm',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '__setusermatherr',
                                                                                            'wcsrchr',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '_vsnwprintf',
                                                                                            'printf',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'memmove_s',
                                                                                            'getchar',
                                                                                            'memset',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 22016},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/cd1eb2bfba4f7ced178a1dfe059b36f6e09e7a12f6f765d10d8c827fec1f4849'},
 'cd3d19b80432b32c76b565bc1cbdecc1c23b536dbfe81d76c2726bedcec18089': {'AddressOfEntryPoint': 6536,
                                                                      'DebugRVA': 189840,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 188416,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'FindClose',
                                                                                      'OLEAUT32.dll': 'SysStringByteLen',
                                                                                      'SETUPAPI.dll': 'SetupDefaultQueueCallbackW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'WS2_32.dll': 'inet_ntoa',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesW',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['UpdateDriverForPlugAndPlayDevicesW',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EncodePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'HeapFree',
                                                                                            'FatalAppExitA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'SetFilePointer',
                                                                                            'HeapSize',
                                                                                            'CloseHandle',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetLocaleInfoA',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RtlPcToFileHeader',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'lstrlenA',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'EnterCriticalSection',
                                                                                            'RtlUnwindEx',
                                                                                            'GetCommandLineA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameW',
                                                                                            'RaiseException',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FindClose',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegCloseKey',
                                                                                            'StartServiceW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'SetupDiSetSelectedDriverW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'SetupDiEnumDriverInfoW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiCreateDeviceInfoW',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'SetupInitDefaultQueueCallback',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupUninstallOEMInfW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupDiDeleteDeviceInfo',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiGetClassDevsExW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'inet_addr',
                                                                                            'htonl',
                                                                                            'inet_ntoa',
                                                                                            'CLSIDFromString',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'SafeArrayPutElement',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayCreateVector',
                                                                                            'GetErrorInfo',
                                                                                            'VariantChangeType',
                                                                                            'SetErrorInfo',
                                                                                            'CreateErrorInfo',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysStringByteLen',
                                                                                            'GetAdaptersAddresses'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 54272,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 180736},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/cd3d19b80432b32c76b565bc1cbdecc1c23b536dbfe81d76c2726bedcec18089'},
 'cd46a7b9994d48386a8d0e813b2aa4288cf915c7ea99bb24a8616f993435efc1': {'AddressOfEntryPoint': 19208,
                                                                      'DebugRVA': 95072,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94208,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CreateFileA',
                                                                                      'OLEAUT32.dll': 'VariantChangeType',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'LocalAlloc',
                                                                                            'lstrlenW',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapFree',
                                                                                            'RaiseException',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'HeapSize',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapReAlloc',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'CoInitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'VariantInit',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 89,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 7680,
                                                                                       '.rdata\x00\x00': 25600,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 87552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/cd46a7b9994d48386a8d0e813b2aa4288cf915c7ea99bb24a8616f993435efc1'},
 'cd4cb88a309e19a9f01d9b2772551050fcb047b30f849716bc76d03fb721993c': {'AddressOfEntryPoint': 8746,
                                                                      'DebugRVA': 12704,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'DecodePointer',
                                                                                      'MSVCR120.dll': '__getmainargs',
                                                                                      'libglib-2.0-0.dll': 'g_string_new',
                                                                                      'libwiretap.dll': 'wtap_encap_short_string',
                                                                                      'libwsutil.dll': 'get_os_version_info'},
                                                                      'ImportedFunctions': ['GlobalMemoryStatusEx',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'wtap_encap_string',
                                                                                            'wtap_init',
                                                                                            'wtap_file_type_subtype',
                                                                                            'wtap_file_encap',
                                                                                            'wtap_dump_can_open',
                                                                                            'wtap_file_type_subtype_string',
                                                                                            'wtap_file_type_subtype_short_string',
                                                                                            'wtap_short_string_to_file_type_subtype',
                                                                                            'wtap_strerror',
                                                                                            'wtap_get_num_file_types_subtypes',
                                                                                            'register_all_wiretap_modules',
                                                                                            'merge_string_to_idb_merge_mode',
                                                                                            'merge_idb_merge_mode_to_string',
                                                                                            'merge_files',
                                                                                            'wtap_encap_short_string',
                                                                                            'getopt_long',
                                                                                            'get_copyright_info',
                                                                                            'get_positive_int',
                                                                                            'cmdarg_err_init',
                                                                                            'ws_add_crash_info',
                                                                                            'init_progfile_dir',
                                                                                            'ws_stdio_open',
                                                                                            'create_app_running_mutex',
                                                                                            'init_process_policies',
                                                                                            'scan_plugins',
                                                                                            'init_report_err',
                                                                                            'arg_list_utf_16to8',
                                                                                            'optarg',
                                                                                            'optind',
                                                                                            'optopt',
                                                                                            'get_os_version_info',
                                                                                            'g_string_free',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_slist_foreach',
                                                                                            'g_slist_insert_sorted',
                                                                                            'g_strerror',
                                                                                            'g_slist_free',
                                                                                            'g_malloc_n',
                                                                                            'g_strfreev',
                                                                                            'g_strjoinv',
                                                                                            'g_strsplit',
                                                                                            'g_string_append_printf',
                                                                                            'g_string_append',
                                                                                            'g_free',
                                                                                            'g_string_new',
                                                                                            'setlocale',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '_close',
                                                                                            'exit',
                                                                                            '_errno',
                                                                                            'vfprintf',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'memset',
                                                                                            'strchr',
                                                                                            'printf',
                                                                                            '__getmainargs'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 289296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 289792,
                                                                                       '.text\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/cd4cb88a309e19a9f01d9b2772551050fcb047b30f849716bc76d03fb721993c'},
 'cd8e84c1f8d1ee3a7014343e3fb236329d2b67c1ec233ea4b208d99e3f95105b': {'AddressOfEntryPoint': 32570,
                                                                      'DebugRVA': 432480,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 372736,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExA',
                                                                                      'COMCTL32.dll': 'PropertySheetA',
                                                                                      'GDI32.dll': 'CreateFontA',
                                                                                      'KERNEL32.dll': 'HeapReAlloc',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'UpdateWindow',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'SetThreadPriority',
                                                                                            'SetFilePointer',
                                                                                            'ResumeThread',
                                                                                            'GetModuleHandleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTempPathA',
                                                                                            'GetCurrentThread',
                                                                                            'LoadLibraryA',
                                                                                            'DeleteFileA',
                                                                                            'SetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'GetFileSize',
                                                                                            'RemoveDirectoryA',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessA',
                                                                                            'FormatMessageA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'DecodePointer',
                                                                                            'CreateDirectoryA',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapSize',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointerEx',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileAttributesExW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetProcessHeap',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FindNextFileW',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileExW',
                                                                                            'FindFirstFileExA',
                                                                                            'FindClose',
                                                                                            'CreateThread',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'OutputDebugStringW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'LoadLibraryExA',
                                                                                            'GetStdHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetTempPathW',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileMappingA',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'UnmapViewOfFile',
                                                                                            'lstrlenA',
                                                                                            'SetFileTime',
                                                                                            'SetLastError',
                                                                                            'EncodePointer',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'RaiseException',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetStringTypeW',
                                                                                            'GetConsoleCP',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedFlushSList',
                                                                                            'RtlUnwind',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetFileType',
                                                                                            'PeekNamedPipe',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetACP',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'HeapReAlloc',
                                                                                            'ReleaseDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'DispatchMessageA',
                                                                                            'GetWindowRect',
                                                                                            'GetFocus',
                                                                                            'LoadCursorA',
                                                                                            'GetDC',
                                                                                            'PostMessageA',
                                                                                            'GetSystemMetrics',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxA',
                                                                                            'MoveWindow',
                                                                                            'RegisterClassA',
                                                                                            'DefWindowProcA',
                                                                                            'CreateWindowExA',
                                                                                            'TranslateMessage',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SendMessageA',
                                                                                            'SetCursor',
                                                                                            'GetDlgItem',
                                                                                            'PeekMessageA',
                                                                                            'GetParent',
                                                                                            'UpdateWindow',
                                                                                            'SelectObject',
                                                                                            'CreateDIBitmap',
                                                                                            'SetTextColor',
                                                                                            'TextOutA',
                                                                                            'SetBkMode',
                                                                                            'DeleteObject',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateFontA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'ShellExecuteA',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 173,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 4696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 68608,
                                                                                       '.reloc\x00\x00': 12288,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 367616},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/cd8e84c1f8d1ee3a7014343e3fb236329d2b67c1ec233ea4b208d99e3f95105b'},
 'cda941f4cf19f882b831289589abb575a3f1de72ef826c24da0e273490a99835': {'AddressOfEntryPoint': 39512,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 12392,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 12800,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37376,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/cda941f4cf19f882b831289589abb575a3f1de72ef826c24da0e273490a99835'},
 'cdd26305649864b79e4fd13ed46657028a881e7ad46b3e5e78842c21c0a2f184': {'AddressOfEntryPoint': 16700,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'OLEAUT32.dll': 'BSTR_UserUnmarshal',
                                                                                      'RPCRT4.dll': 'RpcRevertToSelf',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SeVA.DLL': 'InProcPerformAction',
                                                                                      'msvcrt.dll': '__dllonexit',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['ImpersonateLoggedOnUser',
                                                                                            'RevertToSelf',
                                                                                            'OpenThreadToken',
                                                                                            'GetCommandLineW',
                                                                                            'CreateTimerQueue',
                                                                                            'DeleteTimerQueueEx',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'GetCurrentThread',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'EnterCriticalSection',
                                                                                            'GlobalFree',
                                                                                            'LocalAlloc',
                                                                                            'CreateEventW',
                                                                                            'OpenEventW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '_onexit',
                                                                                            '_callnewh',
                                                                                            'memmove_s',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_CxxThrowException',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '_initterm',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            '__dllonexit',
                                                                                            'SysAllocString',
                                                                                            'BSTR_UserMarshal64',
                                                                                            'BSTR_UserUnmarshal64',
                                                                                            'BSTR_UserMarshal',
                                                                                            'BSTR_UserFree64',
                                                                                            'BSTR_UserSize64',
                                                                                            'BSTR_UserSize',
                                                                                            'BSTR_UserFree',
                                                                                            'SysFreeString',
                                                                                            'BSTR_UserUnmarshal',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CommandLineToArgvW',
                                                                                            'RpcServerRegisterIf',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcServerListen',
                                                                                            'NdrServerCallAll',
                                                                                            'NdrServerCall2',
                                                                                            'RpcMgmtWaitServerListen',
                                                                                            'RpcMgmtStopServerListening',
                                                                                            'NdrClientCall3',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcBindingFree',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcServerUseProtseqEpW',
                                                                                            'RpcRevertToSelf',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'InProcPerformAction'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 97,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 18944},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/cdd26305649864b79e4fd13ed46657028a881e7ad46b3e5e78842c21c0a2f184'},
 'cdf14d1021ab6e6f1f30759a35a0541a9f257e3efc26d9b4aac9a99ac68bb8a1': {'AddressOfEntryPoint': 9372,
                                                                      'DebugRVA': 4704,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CreateServiceA',
                                                                                      'KERNEL32.dll': 'RtlVirtualUnwind',
                                                                                      'SETUPAPI.dll': 'SetupDiCreateDeviceInfoList',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'newdev.dll': 'UpdateDriverForPlugAndPlayDevicesA'},
                                                                      'ImportedFunctions': ['OpenServiceA',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerA',
                                                                                            'CreateServiceA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FindFirstFileA',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'CopyFileA',
                                                                                            'FindClose',
                                                                                            'lstrlenA',
                                                                                            'LocalAlloc',
                                                                                            'MoveFileA',
                                                                                            'FormatMessageA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'LocalFree',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            '_commode',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            'strcat_s',
                                                                                            'sprintf',
                                                                                            'strcpy_s',
                                                                                            'printf',
                                                                                            '_fmode',
                                                                                            'memset',
                                                                                            'SetupDiGetINFClassA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiCreateDeviceInfoA',
                                                                                            'SetupDiInstallClassA',
                                                                                            'SetupCopyOEMInfA',
                                                                                            'SetupDiGetDeviceRegistryPropertyA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiSetDeviceRegistryPropertyA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'UpdateDriverForPlugAndPlayDevicesA',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 62,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 680,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/cdf14d1021ab6e6f1f30759a35a0541a9f257e3efc26d9b4aac9a99ac68bb8a1'},
 'ce29fab2de75fbb40a2da29c9ed547cbef758c58e0ebce461cd56e42194ea6b0': {'AddressOfEntryPoint': 47396,
                                                                      'DebugRVA': 54528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyExW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'GetProcAddress',
                                                                                      'MSVCP90.dll': '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                      'MSVCR90.dll': '__setusermatherr',
                                                                                      'PSAPI.DLL': 'GetModuleBaseNameA',
                                                                                      'SETUPAPI.dll': 'SetupDiSetClassInstallParamsW',
                                                                                      'USER32.dll': 'EnumDisplaySettingsW',
                                                                                      'glib-2.0.dll': 'g_log',
                                                                                      'vmtools.dll': 'ProcMgr_ExecSync'},
                                                                      'ImportedFunctions': ['RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'DuplicateTokenEx',
                                                                                            'OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'ChangeDisplaySettingsExW',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetSystemMetrics',
                                                                                            'ChangeDisplaySettingsW',
                                                                                            'GetThreadDesktop',
                                                                                            'OpenInputDesktop',
                                                                                            'CloseDesktop',
                                                                                            'SetThreadDesktop',
                                                                                            'EnumDisplayMonitors',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'CreateDCW',
                                                                                            'DeleteDC',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'swscanf',
                                                                                            'wcstombs_s',
                                                                                            '_wcsicmp',
                                                                                            '_snwprintf_s',
                                                                                            'wcsncmp',
                                                                                            'memset',
                                                                                            'strrchr',
                                                                                            'memcpy',
                                                                                            '_stricmp',
                                                                                            '_access',
                                                                                            'malloc',
                                                                                            '_beginthreadex',
                                                                                            'swscanf_s',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            'wcstombs',
                                                                                            'calloc',
                                                                                            'free',
                                                                                            '_exit',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '__setusermatherr',
                                                                                            'g_free',
                                                                                            'g_strdup_printf',
                                                                                            'g_key_file_free',
                                                                                            'g_key_file_get_string',
                                                                                            'g_log',
                                                                                            'VMTools_ChangeLogFilePath',
                                                                                            'Debug',
                                                                                            'VMTools_ConfigLogging',
                                                                                            'VMTools_LoadConfig',
                                                                                            'Log',
                                                                                            'Win32U_RegOpenKeyEx',
                                                                                            'GuestApp_GetInstallPath',
                                                                                            'Warning',
                                                                                            'Str_Wcscpy',
                                                                                            'Unicode_AllocWithLength',
                                                                                            'Win32U_GetModuleFileName',
                                                                                            'Str_Snprintf',
                                                                                            'Hostinfo_GetOSType',
                                                                                            'DynBuf_Init',
                                                                                            'DynBuf_Append',
                                                                                            'DynBuf_Destroy',
                                                                                            'Str_Snwprintf',
                                                                                            'ProcMgr_ExecSync',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '?allocate@?$allocator@D@std@@QEAAPEAD_K@Z',
                                                                                            '?deallocate@?$allocator@D@std@@QEAAXPEAD_K@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'EnumProcesses',
                                                                                            'GetModuleBaseNameA',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenProcess',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'lstrlenW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcessId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetTickCount',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 142,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 35328,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 46592},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ce29fab2de75fbb40a2da29c9ed547cbef758c58e0ebce461cd56e42194ea6b0'},
 'ce514285ff272426a4cf88200d402a58f66c9f77f536664efe0da6ffc12026ec': {'AddressOfEntryPoint': 8160,
                                                                      'DebugRVA': 12816,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'MSVCR90.dll': 'strchr',
                                                                                      'glib-2.0.dll': 'g_key_file_free',
                                                                                      'vmtools.dll': 'Str_Strcpy'},
                                                                      'ImportedFunctions': ['_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '_initterm',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            'printf',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'free',
                                                                                            'calloc',
                                                                                            'memcpy',
                                                                                            'strchr',
                                                                                            'g_key_file_free',
                                                                                            'RpcOut_stop',
                                                                                            'RpcOut_Construct',
                                                                                            'RpcOut_start',
                                                                                            'RpcOut_Destruct',
                                                                                            'Debug',
                                                                                            'RpcOut_send',
                                                                                            'Log',
                                                                                            'VMTools_LoadConfig',
                                                                                            'VMTools_ConfigLogging',
                                                                                            'VmCheck_IsVirtualWorld',
                                                                                            'Warning',
                                                                                            'Str_Strcpy',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1656,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ce514285ff272426a4cf88200d402a58f66c9f77f536664efe0da6ffc12026ec'},
 'ce802cc9f317b8dc3af92d7b11953dccd58ea17a3056e8a06c1c207ed9317421': {'AddressOfEntryPoint': 14594,
                                                                      'DebugRVA': 301968,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 266240,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'SetInformationJobObject',
                                                                                            'QueryInformationJobObject',
                                                                                            'SearchPathW',
                                                                                            'GetBinaryTypeW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetStdHandle',
                                                                                            'AssignProcessToJobObject',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateJobObjectW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetFileAttributesW',
                                                                                            'DuplicateHandle',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'FormatMessageW',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CloseHandle',
                                                                                            'ExitProcess',
                                                                                            'CreateProcessW',
                                                                                            'IsWow64Process',
                                                                                            'GetExitCodeProcess',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'MultiByteToWideChar',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetFilePointerEx',
                                                                                            'GetProcessHeap',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedFlushSList',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'GetFileType',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'ReadFile',
                                                                                            'ReadConsoleW',
                                                                                            'OutputDebugStringA',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateThread',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExA',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileA',
                                                                                            'FindNextFileW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'GetMessageW',
                                                                                            'PostMessageW',
                                                                                            'MessageBoxW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SHGetFolderPathW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 112,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 62704,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 42496,
                                                                                       '.reloc\x00\x00': 9216,
                                                                                       '.rsrc\x00\x00\x00': 62976,
                                                                                       '.text\x00\x00\x00': 262144},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ce802cc9f317b8dc3af92d7b11953dccd58ea17a3056e8a06c1c207ed9317421'},
 'ce97b0a60d64331fc43a3a4736643d2650b16dcc24624b02e830b347777342f3': {'AddressOfEntryPoint': 39716,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 302072,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 302080,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ce97b0a60d64331fc43a3a4736643d2650b16dcc24624b02e830b347777342f3'},
 'ced97ac768997b34fc37e4661e66ebf3d253cb068931bb4f2faf1ddded3016dc': {'AddressOfEntryPoint': 34048,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'msvcrt.dll': 'iswctype',
                                                                                      'ntdll.dll': 'RtlLengthSid'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegDeleteValueW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'IsTextUnicode',
                                                                                            'RegSetValueExW',
                                                                                            'CopyFileW',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'ReadFile',
                                                                                            'HeapAlloc',
                                                                                            'GetFileSize',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'CreateFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetLastError',
                                                                                            'VirtualAlloc',
                                                                                            'GetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'atoi',
                                                                                            '_vsnwprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_iob',
                                                                                            'tolower',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            'memmove',
                                                                                            '_wcsnicmp',
                                                                                            'strcpy_s',
                                                                                            'wcscpy_s',
                                                                                            '_stricmp',
                                                                                            '_isatty',
                                                                                            'memset',
                                                                                            '_fileno',
                                                                                            'vfprintf',
                                                                                            'wcstoul',
                                                                                            'iswctype',
                                                                                            'RtlCompareMemory',
                                                                                            'NtFlushKey',
                                                                                            'NtOpenKey',
                                                                                            'NtUnloadKey',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtLoadKey',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtClose',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlFormatCurrentUserKeyPath',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlGetAce',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlEqualSid',
                                                                                            'RtlCopySid',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlGetDaclSecurityDescriptor',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlLengthSid'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 98,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1752,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 31744},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ced97ac768997b34fc37e4661e66ebf3d253cb068931bb4f2faf1ddded3016dc'},
 'd00122c928c5818a24e6c11183f79c253cfb6576ad54dc92aeefc630abbde655': {'AddressOfEntryPoint': 20824,
                                                                      'DebugRVA': 74448,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'CRYPT32.dll': 'CertGetNameStringW',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathStripToRootW',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['CompareStringW',
                                                                                            'SetEndOfFile',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetDriveTypeW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryExW',
                                                                                            'TerminateProcess',
                                                                                            'GetExitCodeProcess',
                                                                                            'CopyFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'CreateProcessW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrcmpiW',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'SetStdHandle',
                                                                                            'Sleep',
                                                                                            'MoveFileExW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'GetStringTypeW',
                                                                                            'HeapReAlloc',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'RtlUnwind',
                                                                                            'SetFilePointer',
                                                                                            'LCMapStringW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'RaiseException',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStdHandle',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSize',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetProcessHeap',
                                                                                            'LoadStringA',
                                                                                            'wsprintfW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'SetServiceStatus',
                                                                                            'OpenSCManagerA',
                                                                                            'QueryServiceStatusEx',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'QueryServiceConfigW',
                                                                                            'CreateServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'DeleteService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'ControlService',
                                                                                            'QueryServiceObjectSecurity',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'CreateWellKnownSid',
                                                                                            'LookupAccountSidW',
                                                                                            'FreeSid',
                                                                                            'BuildExplicitAccessWithNameW',
                                                                                            'SetEntriesInAclW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetServiceObjectSecurity',
                                                                                            'ChangeServiceConfigW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'CloseServiceHandle',
                                                                                            'CreateProcessAsUserW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'WinVerifyTrust',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CryptMsgGetParam',
                                                                                            'CryptQueryObject',
                                                                                            'CryptMsgClose',
                                                                                            'CertCloseStore',
                                                                                            'CertGetNameStringW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'PathAppendW',
                                                                                            'PathUnquoteSpacesW',
                                                                                            'PathQuoteSpacesW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathStripToRootW',
                                                                                            'CoCreateGuid',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 25088,
                                                                                       '.reloc\x00\x00': 7168,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 66560},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d00122c928c5818a24e6c11183f79c253cfb6576ad54dc92aeefc630abbde655'},
 'd0298428e7cca8084c97872a9fd5d66bd802e871f88ec4044b843d5cd7e6a238': {'AddressOfEntryPoint': 19116,
                                                                      'DebugRVA': 53744,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceStatusEx',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHLWAPI.dll': 'PathQuoteSpacesW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetTempFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'VerSetConditionMask',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateDirectoryW',
                                                                                            'SizeofResource',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateFileW',
                                                                                            'lstrlenW',
                                                                                            'GetTempPathW',
                                                                                            'RaiseException',
                                                                                            'VerifyVersionInfoW',
                                                                                            'Process32FirstW',
                                                                                            'LockResource',
                                                                                            'RemoveDirectoryW',
                                                                                            'Process32NextW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'CloseHandle',
                                                                                            'DeleteFileW',
                                                                                            'LocalFree',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileMappingW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'PathQuoteSpacesW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatusEx',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'wvsprintfW',
                                                                                            'CharLowerBuffW',
                                                                                            'MessageBoxW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 104,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 84841024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.rdata\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 84841472,
                                                                                       '.text\x00\x00\x00': 48128},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d0298428e7cca8084c97872a9fd5d66bd802e871f88ec4044b843d5cd7e6a238'},
 'd075610247781845bf0bfcb648e804c333e4483a7339ac3a7a1f1dfb41509c4a': {'AddressOfEntryPoint': 120081,
                                                                      'DebugRVA': 214064,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 212992,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'GDI32.dll': 'DeleteDC',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'SetFilePointerEx',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'gdiplus.dll': 'GdipGetImagePaletteSize'},
                                                                      'ImportedFunctions': ['HeapReAlloc',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'InterlockedExchange',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'RaiseException',
                                                                                            'GetCurrentThreadId',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushInstructionCache',
                                                                                            'CreateEventA',
                                                                                            'HeapAlloc',
                                                                                            'DecodePointer',
                                                                                            'GetModuleHandleExW',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetLastError',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'EnumSystemLocalesW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'IsValidLocale',
                                                                                            'GetLocaleInfoW',
                                                                                            'LCMapStringW',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCPInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'GetTempPathW',
                                                                                            'GetTickCount',
                                                                                            'OutputDebugStringW',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateMutexW',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'RtlUnwind',
                                                                                            'GetCommandLineW',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'ExitProcess',
                                                                                            'FormatMessageA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateWaitableTimerA',
                                                                                            'GetSystemInfo',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'ResumeThread',
                                                                                            'SetWaitableTimer',
                                                                                            'ResetEvent',
                                                                                            'GetCurrentProcessId',
                                                                                            'ReleaseSemaphore',
                                                                                            'WaitForMultipleObjects',
                                                                                            'OpenEventA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'EncodePointer',
                                                                                            'GetStringTypeW',
                                                                                            'IsDebuggerPresent',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'InitializeSListHead',
                                                                                            'GetFileType',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindResourceW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetClientRect',
                                                                                            'GetParent',
                                                                                            'GetWindowRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'MapWindowPoints',
                                                                                            'GetWindow',
                                                                                            'PtInRect',
                                                                                            'EndPaint',
                                                                                            'PostMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowPos',
                                                                                            'MonitorFromWindow',
                                                                                            'LoadImageW',
                                                                                            'DefWindowProcW',
                                                                                            'GetWindowLongW',
                                                                                            'ShowWindow',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassExW',
                                                                                            'GetClassInfoExW',
                                                                                            'MessageBoxW',
                                                                                            'BeginPaint',
                                                                                            'CallWindowProcW',
                                                                                            'GetDlgItem',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMenuItemInfoW',
                                                                                            'RemoveMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'AppendMenuW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'DestroyMenu',
                                                                                            'CreatePopupMenu',
                                                                                            'InvalidateRect',
                                                                                            'MessageBeep',
                                                                                            'UnregisterClassW',
                                                                                            'LoadCursorW',
                                                                                            'SendMessageW',
                                                                                            'SetFocus',
                                                                                            'LoadStringA',
                                                                                            'LoadAcceleratorsW',
                                                                                            'LoadMenuW',
                                                                                            'LoadStringW',
                                                                                            'DispatchMessageW',
                                                                                            'CreateCompatibleDC',
                                                                                            'ExtTextOutW',
                                                                                            'SetBkColor',
                                                                                            'GetObjectW',
                                                                                            'SetDIBColorTable',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBSection',
                                                                                            'DeleteDC',
                                                                                            'PathFileExistsW',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipCloneImage',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdiplusStartup',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'ImmDisableIME'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 194,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 21933416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 61440,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 21933568,
                                                                                       '.text\x00\x00\x00': 206848,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d075610247781845bf0bfcb648e804c333e4483a7339ac3a7a1f1dfb41509c4a'},
 'd0dadb4665a45db2cdf58e80e7d9fe7e675c04bf6a627bdb491474dd800826e6': {'AddressOfEntryPoint': 4988,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/d0dadb4665a45db2cdf58e80e7d9fe7e675c04bf6a627bdb491474dd800826e6'},
 'd10f174fb0e16594ba79dee81ac293dd7bf34e37471a1607c78156365b58198f': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 19992,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 20480,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d10f174fb0e16594ba79dee81ac293dd7bf34e37471a1607c78156365b58198f'},
 'd17dbc3b807b62d77e2e67badc10f992140187b109987282a120f900f7813958': {'AddressOfEntryPoint': 20744,
                                                                      'DebugRVA': 4112,
                                                                      'DebugSize': 28,
                                                                      'Dll': 352,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntdll.dll': 'memset'},
                                                                      'ImportedFunctions': ['EtwEventEnabled',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwEventWrite',
                                                                                            'RtlSetHeapInformation',
                                                                                            'NtDrawText',
                                                                                            'NtQuerySystemTime',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'NtDisplayString',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlNormalizeProcessParams',
                                                                                            'iswspace',
                                                                                            'swprintf_s',
                                                                                            'NtCreateKey',
                                                                                            'NtClose',
                                                                                            'NtSetValueKey',
                                                                                            '_wcsicmp',
                                                                                            'LdrUnloadDll',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlInitAnsiString',
                                                                                            'LdrGetProcedureAddress',
                                                                                            'RtlValidSid',
                                                                                            'LdrLoadDll',
                                                                                            'RtlLengthSid',
                                                                                            'NtQueryKey',
                                                                                            'RtlSetControlSecurityDescriptor',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'NtQuerySecurityObject',
                                                                                            'RtlFreeSid',
                                                                                            'RtlGetControlSecurityDescriptor',
                                                                                            'NtSetSecurityObject',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlCreateUnicodeString',
                                                                                            'RtlDestroyEnvironment',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlGetVersion',
                                                                                            'RtlFindMessage',
                                                                                            'RtlCreateEnvironment',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            '_wcsnicmp',
                                                                                            'NtOpenFile',
                                                                                            'NtFlushKey',
                                                                                            'NtDeleteValueKey',
                                                                                            '_vsnprintf',
                                                                                            'NtFsControlFile',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'wcsncpy_s',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtWriteFile',
                                                                                            'NtQuerySystemInformation',
                                                                                            'NtQuerySystemEnvironmentValueEx',
                                                                                            'wcsrchr',
                                                                                            '_vsnwprintf',
                                                                                            'NtCreateFile',
                                                                                            'NtEnumerateValueKey',
                                                                                            'NtEnumerateKey',
                                                                                            'NtOpenKey',
                                                                                            'NtUnloadKey',
                                                                                            'NtLoadKey',
                                                                                            'RtlReAllocateHeap',
                                                                                            '_memicmp',
                                                                                            'NtQueryValueKey',
                                                                                            'NtDeleteKey',
                                                                                            'memmove',
                                                                                            'NtQueryAttributesFile',
                                                                                            '_wcsupr',
                                                                                            'wcscpy_s',
                                                                                            'LdrGetDllHandle',
                                                                                            '_vscwprintf',
                                                                                            'towupper',
                                                                                            'NtQueryObject',
                                                                                            'NtQueryDirectoryFile',
                                                                                            'NtWaitForSingleObject',
                                                                                            'memcpy',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 80,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 75264},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/d17dbc3b807b62d77e2e67badc10f992140187b109987282a120f900f7813958'},
 'd192199bfb64e0bf52e6df248718101fe12e33cbe20d9660fea037204e774278': {'AddressOfEntryPoint': 38496,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CheckTokenMembership',
                                                                                      'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'OLEAUT32.dll': 'RegisterTypeLib',
                                                                                      'RPCRT4.dll': 'I_RpcMapWin32Status',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SLC.dll': 'SLGetWindowsInformation',
                                                                                      'USER32.dll': 'RegisterClassW',
                                                                                      'WINBRAND.dll': 'BrandingLoadString',
                                                                                      'WTSAPI32.dll': 'WTSEnumerateSessionsW',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'WinSqmSetDWORD',
                                                                                      'ole32.dll': 'CoSuspendClassObjects'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcessHeap',
                                                                                            'GetProcAddress',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'VirtualQuery',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFileAttributesW',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RegisterApplicationRestart',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'CreateEventW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'SetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'DeleteCriticalSection',
                                                                                            'FileTimeToSystemTime',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'LocalAlloc',
                                                                                            'LoadLibraryExW',
                                                                                            'CheckElevationEnabled',
                                                                                            'GetCurrentProcess',
                                                                                            'GetUserDefaultLCID',
                                                                                            'CreateSemaphoreW',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateThread',
                                                                                            'WaitForMultipleObjects',
                                                                                            'SetLastError',
                                                                                            'GetProcessAffinityMask',
                                                                                            'GetThreadPriority',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateWindowExW',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'DestroyWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CallWindowProcW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'SetCursor',
                                                                                            'MessageBoxW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_vsnwprintf',
                                                                                            'memmove',
                                                                                            '_wcsicmp',
                                                                                            'swscanf_s',
                                                                                            '_onexit',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_lock',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_waccess_s',
                                                                                            'wcschr',
                                                                                            'wcsstr',
                                                                                            '_wtoi',
                                                                                            '_purecall',
                                                                                            'towupper',
                                                                                            'wcscmp',
                                                                                            'SLConsumeWindowsRight',
                                                                                            'SLGetWindowsInformation',
                                                                                            'BrandingLoadString',
                                                                                            'WinSqmSetDWORD',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CreateBindCtx',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'MkParseDisplayName',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoSuspendClassObjects',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'UnRegisterTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'I_RpcMapWin32Status',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSEnumerateSessionsW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 163,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 229496,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 229888,
                                                                                       '.text\x00\x00\x00': 97280},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/d192199bfb64e0bf52e6df248718101fe12e33cbe20d9660fea037204e774278'},
 'd1a684f3e0a46d02093473a07aac6003132a51dc6db91b8a3e53ba9342428da3': {'AddressOfEntryPoint': 9696,
                                                                      'DebugRVA': 5152,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2985984,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ExitProcess',
                                                                                      'USER32.dll': 'OpenDesktopA',
                                                                                      'msvcrt.dll': '__getmainargs',
                                                                                      'ntdll.dll': 'RtlUnwind'},
                                                                      'ImportedFunctions': ['GetCurrentProcessId',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'VirtualAlloc',
                                                                                            'GetLastError',
                                                                                            'OpenProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'OutputDebugStringA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetCommandLineA',
                                                                                            'FreeLibrary',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'isspace',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_errno',
                                                                                            'isdigit',
                                                                                            'fprintf',
                                                                                            'printf',
                                                                                            'tolower',
                                                                                            '_strupr',
                                                                                            'strchr',
                                                                                            'malloc',
                                                                                            '__iob_func',
                                                                                            '_strdup',
                                                                                            'strrchr',
                                                                                            'toupper',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__getmainargs',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlUnwind',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'SetProcessWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'CloseWindowStation',
                                                                                            'GetProcessWindowStation',
                                                                                            'EnumWindowStationsA',
                                                                                            'FindWindowExA',
                                                                                            'CloseDesktop',
                                                                                            'EnumWindows',
                                                                                            'GetWindowTextA',
                                                                                            'OpenWindowStationA',
                                                                                            'GetWindowLongA',
                                                                                            'EnumDesktopsA',
                                                                                            'SetThreadDesktop',
                                                                                            'PostMessageA',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindow',
                                                                                            'OpenDesktopA'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d1a684f3e0a46d02093473a07aac6003132a51dc6db91b8a3e53ba9342428da3'},
 'd1d69520a02a7dcaa9adfae55dc7fc974533b26797fb7efa55a02c01e46cd67c': {'AddressOfEntryPoint': 15776,
                                                                      'DebugRVA': 5136,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'EncodePointer',
                                                                                      'MSVCR120_CLR0400.dll': '_unlock',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'webengine4.dll': 'GetXSPHeap'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'FreeLibrary',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'lstrlenW',
                                                                                            'GetStdHandle',
                                                                                            'LocalAlloc',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DecodePointer',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetLastError',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'EncodePointer',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '_calloc_crt',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_except_handler4_common',
                                                                                            '_crt_debugger_hook',
                                                                                            '__crtUnhandledException',
                                                                                            '__crtTerminateProcess',
                                                                                            '_wcsicmp',
                                                                                            '_wtoi',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memcpy',
                                                                                            'wcstok_s',
                                                                                            '_vsnwprintf',
                                                                                            '_unlock',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CallManagedProtectedConfigAction',
                                                                                            'IIS7IsAspNetV4Installed',
                                                                                            'CheckIISState',
                                                                                            'AspnetLoadResourceDLL',
                                                                                            'UninstallAspNetLP',
                                                                                            'GrantAccessToUserAccountOnVista',
                                                                                            'PrintStringToStdOut',
                                                                                            'GrantAccessToUserAccount',
                                                                                            'DetectErrorAndGetLogfileName',
                                                                                            'IsRegisteredInProc',
                                                                                            'IsMatchingBitness',
                                                                                            'SetRemoteConfigDCOMRegKeys',
                                                                                            'RemoveClientScriptFiles',
                                                                                            'CopyClientScriptFiles',
                                                                                            'ListAspnetInstalledIISKeys',
                                                                                            'ListAspnetInstalledVersions',
                                                                                            'ValidateIISPath',
                                                                                            'RemoveAspnetFromIISKey',
                                                                                            'UnregisterAspNet',
                                                                                            'RegisterAspNetEx',
                                                                                            'IsWin8',
                                                                                            'IsVista',
                                                                                            'PrintResourceString',
                                                                                            'LoadResourceString',
                                                                                            'RunningOn64Bit',
                                                                                            'PrintResourceStringNoNewLine',
                                                                                            'GetXSPHeap'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1892,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 15360},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d1d69520a02a7dcaa9adfae55dc7fc974533b26797fb7efa55a02c01e46cd67c'},
 'd1d8a3b724bc9637e7602b5c6ed0df34378e6ff84e833182bc856e7ed531d388': {'AddressOfEntryPoint': 20288,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNELBASE.dll': 'SetFileApisToOEM',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'GetConsoleScreenBufferInfo',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileSize',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'CreateFileMappingA',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'IsDBCSLeadByte',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'MapViewOfFile',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'SetCurrentDirectoryA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenA',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'DbgPrint'},
                                                                      'ImportedFunctions': ['sprintf_s',
                                                                                            '_itoa',
                                                                                            '_except_handler4_common',
                                                                                            'swprintf_s',
                                                                                            '_controlfp',
                                                                                            '_stricmp',
                                                                                            'strchr',
                                                                                            '_splitpath_s',
                                                                                            'isalnum',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'strcat_s',
                                                                                            'strcpy_s',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'memmove',
                                                                                            'malloc',
                                                                                            'tolower',
                                                                                            'exit',
                                                                                            'strncpy_s',
                                                                                            'memcmp',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            'islower',
                                                                                            'strcspn',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'memcpy',
                                                                                            '_XcptFilter',
                                                                                            'isxdigit',
                                                                                            '__p__fmode',
                                                                                            '_strnicoll',
                                                                                            'fclose',
                                                                                            '_wsetlocale',
                                                                                            'isupper',
                                                                                            '_setmode',
                                                                                            '_iob',
                                                                                            '_fileno',
                                                                                            'isalpha',
                                                                                            '_ultoa',
                                                                                            'clock',
                                                                                            'fprintf',
                                                                                            '_isatty',
                                                                                            'fopen',
                                                                                            'fgets',
                                                                                            '_cexit',
                                                                                            'strcoll',
                                                                                            '_strncoll',
                                                                                            '_strupr',
                                                                                            'free',
                                                                                            '_strlwr',
                                                                                            'memset',
                                                                                            'RtlMultiByteToUnicodeN',
                                                                                            'RtlUnicodeToOemN',
                                                                                            'DbgPrint',
                                                                                            'WriteFile',
                                                                                            'GetFileAttributesA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'FormatMessageA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'Sleep',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetStdHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CreateFileMappingA',
                                                                                            'lstrlenA',
                                                                                            'SetFileApisToOEM',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 99,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 18944},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d1d8a3b724bc9637e7602b5c6ed0df34378e6ff84e833182bc856e7ed531d388'},
 'd23256310ff54a63ccf9f0b9a98acedffda64a5a43765225fdc6c07b09f68618': {'AddressOfEntryPoint': 541422,
                                                                      'DebugRVA': 636464,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 634880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': '_TrackMouseEvent',
                                                                                      'CRYPT32.dll': 'CertNameToStrW',
                                                                                      'DNSAPI.dll': 'DnsQuery_W',
                                                                                      'GDI32.dll': 'CreateSolidBrush',
                                                                                      'IPHLPAPI.DLL': 'IcmpCreateFile',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'SHGetMalloc',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CharNextA',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetCrackUrlW',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'gdiplus.dll': 'GdipFillRectangleI',
                                                                                      'ole32.dll': 'CreateStreamOnHGlobal',
                                                                                      'urlmon.dll': 'IsValidURL'},
                                                                      'ImportedFunctions': ['CertNameToStrW',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WinVerifyTrust',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'InternetGetCookieW',
                                                                                            'InternetOpenA',
                                                                                            'InternetConnectA',
                                                                                            'InternetWriteFile',
                                                                                            'InternetSetOptionA',
                                                                                            'HttpOpenRequestA',
                                                                                            'HttpAddRequestHeadersA',
                                                                                            'InternetOpenUrlW',
                                                                                            'HttpEndRequestA',
                                                                                            'HttpSendRequestExW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetReadFile',
                                                                                            'InternetSetStatusCallbackW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetConnectW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetGetConnectedState',
                                                                                            'HttpEndRequestW',
                                                                                            'HttpQueryInfoW',
                                                                                            'HttpSendRequestExA',
                                                                                            'InternetCrackUrlW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathAddBackslashW',
                                                                                            'StrTrimA',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFileExistsW',
                                                                                            'InitCommonControlsEx',
                                                                                            '_TrackMouseEvent',
                                                                                            'timeGetTime',
                                                                                            'AlphaBlend',
                                                                                            'DnsFree',
                                                                                            'DnsQuery_W',
                                                                                            'FindMimeFromData',
                                                                                            'IsValidURL',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'inet_addr',
                                                                                            'IcmpSendEcho2',
                                                                                            'GetAdaptersInfo',
                                                                                            'IcmpCreateFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'CopyFileW',
                                                                                            'MoveFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'FindResourceW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetVersionExW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WriteProcessMemory',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'K32EnumProcessModules',
                                                                                            'K32GetModuleBaseNameW',
                                                                                            'K32GetModuleInformation',
                                                                                            'DeleteFileA',
                                                                                            'FindClose',
                                                                                            'GetModuleFileNameA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExA',
                                                                                            'FindResourceExW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetGeoInfoW',
                                                                                            'GetUserGeoID',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetTempPathW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetLocalTime',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'LocalAlloc',
                                                                                            'RaiseException',
                                                                                            'ReleaseMutex',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTickCount',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenW',
                                                                                            'CreateMutexA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'FindResourceA',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetComputerNameW',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'IsDBCSLeadByte',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateThread',
                                                                                            'SetThreadPriority',
                                                                                            'TerminateThread',
                                                                                            'CreateEventA',
                                                                                            'GetFileSize',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileA',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'InterlockedCompareExchange',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'LockFileEx',
                                                                                            'UnlockFileEx',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'FormatMessageA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'LoadLibraryA',
                                                                                            'GetTempPathA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'AreFileApisANSI',
                                                                                            'ExitThread',
                                                                                            'HeapFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'RtlUnwind',
                                                                                            'GetCommandLineW',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'CreateDirectoryW',
                                                                                            'HeapReAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'HeapSize',
                                                                                            'GetStdHandle',
                                                                                            'GetProcessHeap',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetFileType',
                                                                                            'GetConsoleCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetStringTypeW',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'GetCurrentProcessId',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'SetWindowRgn',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowW',
                                                                                            'SendMessageW',
                                                                                            'PostMessageW',
                                                                                            'DestroyWindow',
                                                                                            'ShowWindow',
                                                                                            'DefWindowProcW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'EnableWindow',
                                                                                            'GetDC',
                                                                                            'UpdateWindow',
                                                                                            'InvalidateRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetGuiResources',
                                                                                            'GetWindowRect',
                                                                                            'MonitorFromPoint',
                                                                                            'PeekMessageW',
                                                                                            'MessageBoxW',
                                                                                            'SetWindowTextW',
                                                                                            'DrawTextW',
                                                                                            'LoadIconW',
                                                                                            'wsprintfA',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'LoadCursorW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowPos',
                                                                                            'DispatchMessageW',
                                                                                            'wsprintfW',
                                                                                            'CharNextA',
                                                                                            'SetBkColor',
                                                                                            'CreateRectRgn',
                                                                                            'DeleteDC',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'CombineRgn',
                                                                                            'GetPixel',
                                                                                            'CreateDCW',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'CreateFontW',
                                                                                            'BitBlt',
                                                                                            'CreateSolidBrush',
                                                                                            'RegEnumKeyA',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetEntriesInAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegSetValueExW',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'LookupAccountNameW',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'IsValidSid',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'ShellExecuteW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'CoCreateInstance',
                                                                                            'OleSetContainedObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdiplusStartup',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipFillRectangleI',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'GetUserNameExW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 344,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 330285,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 143360,
                                                                                       '.reloc\x00\x00': 33792,
                                                                                       '.rsrc\x00\x00\x00': 330752,
                                                                                       '.text\x00\x00\x00': 630784},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d23256310ff54a63ccf9f0b9a98acedffda64a5a43765225fdc6c07b09f68618'},
 'd23d755d3f87fc91d5faeb3e2b0d991b3910750f2eba434195a38453ed8c6ebc': {'AddressOfEntryPoint': 61361,
                                                                      'DebugRVA': 4112,
                                                                      'DebugSize': 28,
                                                                      'Dll': 320,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 516096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntdll.dll': 'RtlUnwind'},
                                                                      'ImportedFunctions': ['_wcsicmp',
                                                                                            'NtQuerySystemTime',
                                                                                            'NtOpenKey',
                                                                                            'NtWriteFile',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtSerializeBoot',
                                                                                            'NtFsControlFile',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'wcsstr',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtCreateFile',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'NtClose',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'LdrSetMUICacheType',
                                                                                            'NtQueryValueKey',
                                                                                            'NtOpenFile',
                                                                                            'NtTerminateProcess',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            '_aullshr',
                                                                                            'isspace',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeAnsiString',
                                                                                            'RtlNormalizeProcessParams',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            'wcstoul',
                                                                                            '_wcstoui64',
                                                                                            'NtReadFile',
                                                                                            'RtlRaiseStatus',
                                                                                            'memmove',
                                                                                            'RtlQueryRegistryValuesEx',
                                                                                            'NtSetThreadExecutionState',
                                                                                            'RtlRandomEx',
                                                                                            'NtQueryPerformanceCounter',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            'RtlMultiByteToUnicodeN',
                                                                                            'RtlOemToUnicodeN',
                                                                                            'RtlUnicodeToMultiByteN',
                                                                                            'RtlUnicodeToOemN',
                                                                                            'wcsspn',
                                                                                            '_wtol',
                                                                                            '_wtoi64',
                                                                                            '_wcsupr',
                                                                                            '_wcslwr',
                                                                                            'wcschr',
                                                                                            'NtDelayExecution',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlSizeHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'NtDisplayString',
                                                                                            'swprintf_s',
                                                                                            'NtCreateEvent',
                                                                                            'NtWaitForMultipleObjects',
                                                                                            'NtCancelIoFile',
                                                                                            'qsort',
                                                                                            'isprint',
                                                                                            'NtDrawText',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtShutdownSystem',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'RtlGetVersion',
                                                                                            'RtlTimeToTimeFields',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'wcsncmp',
                                                                                            'RtlFindMessage',
                                                                                            'RtlInitAnsiStringEx',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlFormatMessage',
                                                                                            'RtlWriteRegistryValue',
                                                                                            'RtlComputeCrc32',
                                                                                            'DbgPrint',
                                                                                            'RtlCrc64',
                                                                                            'RtlUpcaseUnicodeString',
                                                                                            'RtlSystemTimeToLocalTime',
                                                                                            'RtlLengthRequiredSid',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlLengthSid',
                                                                                            'RtlCopySid',
                                                                                            'RtlAddAce',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlQueryInformationAcl',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlSetGroupSecurityDescriptor',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlNewSecurityObject',
                                                                                            'RtlValidSecurityDescriptor',
                                                                                            'RtlLengthSecurityDescriptor',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlInitializeGenericTable',
                                                                                            'RtlInsertElementGenericTable',
                                                                                            'RtlInitializeBitMap',
                                                                                            'RtlSetBits',
                                                                                            'RtlLookupElementGenericTable',
                                                                                            'RtlClearBits',
                                                                                            'RtlFindSetBits',
                                                                                            'RtlDeleteElementGenericTable',
                                                                                            'RtlEnumerateGenericTableWithoutSplaying',
                                                                                            'RtlNumberOfSetBits',
                                                                                            'DbgPrintEx',
                                                                                            'NtFlushBuffersFile',
                                                                                            '_alldiv',
                                                                                            '_allmul',
                                                                                            '_allrem',
                                                                                            '_allshl',
                                                                                            '_aulldiv',
                                                                                            '_aulldvrm',
                                                                                            '_chkstk',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'RtlUnwind'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 125,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 271760,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 11776,
                                                                                       '.rsrc\x00\x00\x00': 271872,
                                                                                       '.text\x00\x00\x00': 493056},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d23d755d3f87fc91d5faeb3e2b0d991b3910750f2eba434195a38453ed8c6ebc'},
 'd29f831e97475d12e50ec3af556b0f04b6bce668796daf91337c9b408f72d44e': {'AddressOfEntryPoint': 448768,
                                                                      'DebugRVA': 5856,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 462848,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'CFGMGR32.dll': 'CM_Get_Parent',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetFileTitleW',
                                                                                      'CRYPT32.dll': 'CertGetCertificateChain',
                                                                                      'CRYPTUI.dll': 'CryptUIDlgViewCertificateW',
                                                                                      'GDI32.dll': 'BitBlt',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'GetStartupInfoA',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'SHLWAPI.dll': 'PathStripPathW',
                                                                                      'Secur32.dll': 'FreeContextBuffer',
                                                                                      'USER32.dll': 'SetCursor',
                                                                                      'WINHTTP.dll': 'WinHttpOpenRequest',
                                                                                      'WINMM.dll': 'timeKillEvent',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'credui.dll': 'CredUIParseUserNameW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'CreateWellKnownSid',
                                                                                            'CredWriteW',
                                                                                            'CredGetSessionTypes',
                                                                                            'CredReadW',
                                                                                            'IsTextUnicode',
                                                                                            'RegEnumValueW',
                                                                                            'EventActivityIdControl',
                                                                                            'CredUnmarshalCredentialW',
                                                                                            'CredIsMarshaledCredentialW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'CredFree',
                                                                                            'CredDeleteW',
                                                                                            'CredReadDomainCredentialsW',
                                                                                            'CredWriteDomainCredentialsW',
                                                                                            'RegQueryValueExW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateProcessW',
                                                                                            'GetVersionExA',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetTempPathW',
                                                                                            'SetFilePointer',
                                                                                            'GetACP',
                                                                                            'SetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'lstrcmpW',
                                                                                            'CompareStringW',
                                                                                            'GetFileAttributesW',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'CreateDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'LockResource',
                                                                                            'FindResourceW',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'TerminateThread',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetComputerNameW',
                                                                                            'WriteFile',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryExA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryW',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'CreateFileW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetLocalTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'DeleteFileW',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleExA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'FreeLibrary',
                                                                                            'SearchPathW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LocalFree',
                                                                                            'DebugBreak',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'SizeofResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'RaiseException',
                                                                                            'GetStartupInfoA',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'EqualRgn',
                                                                                            'SelectPalette',
                                                                                            'RealizePalette',
                                                                                            'GetObjectW',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'DeleteObject',
                                                                                            'StretchBlt',
                                                                                            'DeleteDC',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SetMapMode',
                                                                                            'TranslateCharsetInfo',
                                                                                            'CreateFontIndirectW',
                                                                                            'UpdateColors',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'FillRgn',
                                                                                            'GetDIBColorTable',
                                                                                            'CreatePalette',
                                                                                            'CreateRectRgn',
                                                                                            'BitBlt',
                                                                                            'SetFocus',
                                                                                            'SetDlgItemTextW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'IsChild',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'IsIconic',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowRect',
                                                                                            'SystemParametersInfoA',
                                                                                            'OffsetRect',
                                                                                            'EndDialog',
                                                                                            'TranslateAcceleratorW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'CharUpperW',
                                                                                            'CharNextW',
                                                                                            'IntersectRect',
                                                                                            'GetDesktopWindow',
                                                                                            'CopyRect',
                                                                                            'SetRect',
                                                                                            'RegisterWindowMessageW',
                                                                                            'IsWindow',
                                                                                            'PostQuitMessage',
                                                                                            'AppendMenuW',
                                                                                            'CheckDlgButton',
                                                                                            'SendMessageW',
                                                                                            'CreateMenu',
                                                                                            'PostMessageW',
                                                                                            'GetDlgItem',
                                                                                            'IsWindowVisible',
                                                                                            'IsDialogMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'DialogBoxParamW',
                                                                                            'CreateDialogParamW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassW',
                                                                                            'DefDlgProcW',
                                                                                            'GetClassInfoW',
                                                                                            'PtInRect',
                                                                                            'IsRectEmpty',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'LoadStringW',
                                                                                            'UnregisterClassA',
                                                                                            'InsertMenuW',
                                                                                            'DeleteMenu',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetSystemMenu',
                                                                                            'CharLowerW',
                                                                                            'FillRect',
                                                                                            'CheckRadioButton',
                                                                                            'DrawIconEx',
                                                                                            'GetWindowDC',
                                                                                            'GetWindow',
                                                                                            'MapDialogRect',
                                                                                            'ScreenToClient',
                                                                                            'GetFocus',
                                                                                            'DrawTextW',
                                                                                            'EnumDisplayMonitors',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetDlgItemTextW',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'EndPaint',
                                                                                            'DrawIcon',
                                                                                            'BeginPaint',
                                                                                            'MapWindowPoints',
                                                                                            'SendDlgItemMessageW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'IsWindowEnabled',
                                                                                            'RedrawWindow',
                                                                                            'SetTimer',
                                                                                            'GetMenu',
                                                                                            'KillTimer',
                                                                                            'LoadImageW',
                                                                                            'DestroyIcon',
                                                                                            'ShowWindowAsync',
                                                                                            'EnumDisplaySettingsExW',
                                                                                            'SetCursorPos',
                                                                                            'GetTitleBarInfo',
                                                                                            'GetCursorPos',
                                                                                            'SendInput',
                                                                                            'EqualRect',
                                                                                            'EnableWindow',
                                                                                            'ModifyMenuW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'LockWindowUpdate',
                                                                                            'UpdateWindow',
                                                                                            'InvalidateRect',
                                                                                            'SetWindowTextW',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'UnregisterClassW',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadIconW',
                                                                                            'ShowWindow',
                                                                                            'MoveWindow',
                                                                                            'GetClientRect',
                                                                                            'SetWindowPlacement',
                                                                                            'AdjustWindowRect',
                                                                                            'IsZoomed',
                                                                                            'SetWindowPos',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'wcstol',
                                                                                            'iswspace',
                                                                                            'toupper',
                                                                                            'wcsnlen',
                                                                                            '_wcslwr',
                                                                                            'towlower',
                                                                                            '_itow_s',
                                                                                            'iswdigit',
                                                                                            'towupper',
                                                                                            '_wtol',
                                                                                            'wcstok',
                                                                                            'wcstok_s',
                                                                                            'swscanf_s',
                                                                                            'wcsstr',
                                                                                            'memmove',
                                                                                            'wcsrchr',
                                                                                            'wcsncmp',
                                                                                            '_wcsicmp',
                                                                                            '_vsnwprintf',
                                                                                            '_purecall',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'wcschr',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'memcpy_s',
                                                                                            '_wtoi',
                                                                                            'memset',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnprintf',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcsncat_s',
                                                                                            'bsearch',
                                                                                            '_CIpow',
                                                                                            '_ftol2',
                                                                                            '_ftol2_sse',
                                                                                            'memcmp',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'wcsncpy_s',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memcpy',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoRegisterClassObject',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'CoRevokeClassObject',
                                                                                            'CreateItemMoniker',
                                                                                            'GetRunningObjectTable',
                                                                                            'CLSIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'SafeArrayCreate',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SysStringByteLen',
                                                                                            'SafeArrayGetVartype',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'ExtractIconW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHAddToRecentDocs',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_LoadImageW',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControlsEx',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'GetFileTitleW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'SHStrDupW',
                                                                                            'PathStripPathW',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertFreeCertificateChain',
                                                                                            'CertGetEnhancedKeyUsage',
                                                                                            'CryptBinaryToStringW',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertDuplicateCertificateChain',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CryptSignMessage',
                                                                                            'CryptVerifyDetachedMessageSignature',
                                                                                            'CertCloseStore',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptMsgOpenToDecode',
                                                                                            'CryptMsgUpdate',
                                                                                            'CertOpenStore',
                                                                                            'CryptMsgClose',
                                                                                            'CryptProtectData',
                                                                                            'CryptUnprotectData',
                                                                                            'CryptDecodeObject',
                                                                                            'CertFindExtension',
                                                                                            'CertGetCertificateChain',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpQueryOption',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpOpenRequest',
                                                                                            'CredUnPackAuthenticationBufferW',
                                                                                            'CredPackAuthenticationBufferW',
                                                                                            'CredUIPromptForWindowsCredentialsW',
                                                                                            'CredUIParseUserNameW',
                                                                                            'GetUserNameExW',
                                                                                            'LsaLookupAuthenticationPackage',
                                                                                            'LsaDeregisterLogonProcess',
                                                                                            'QuerySecurityPackageInfoW',
                                                                                            'LsaConnectUntrusted',
                                                                                            'FreeContextBuffer',
                                                                                            'CryptUIDlgViewCertificateW',
                                                                                            'RtlInitString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'CM_Get_Sibling',
                                                                                            'CM_Get_DevNode_Registry_PropertyW',
                                                                                            'CM_Get_Child',
                                                                                            'CM_Get_Parent',
                                                                                            'WSACleanup',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetAddrInfoW',
                                                                                            'WSAStartup',
                                                                                            'NetGetJoinInformation',
                                                                                            'NetApiBufferFree',
                                                                                            'RpcBindingFromStringBindingW',
                                                                                            'RpcStringBindingComposeW',
                                                                                            'RpcBindingSetAuthInfoExW',
                                                                                            'RpcBindingFree',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'NdrClientCall2',
                                                                                            'RpcStringFreeW',
                                                                                            'timeGetTime',
                                                                                            'timeSetEvent',
                                                                                            'timeKillEvent',
                                                                                            'GetAdaptersAddresses'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 23,
                                                                      'NumberOfImportFunctions': 437,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 587904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.idata\x00\x00': 12288,
                                                                                       '.reloc\x00\x00': 33792,
                                                                                       '.rsrc\x00\x00\x00': 588288,
                                                                                       '.text\x00\x00\x00': 448512},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d29f831e97475d12e50ec3af556b0f04b6bce668796daf91337c9b408f72d44e'},
 'd2ad9ce737c5b0eb73e2cd8c417031b4a1d01a2f1a73bde8a5f5fb3c36977c9a': {'AddressOfEntryPoint': 4101,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStringTypeW'},
                                                                      'ImportedFunctions': ['GetModuleHandleA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'ExitProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetVersionExA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'HeapFree',
                                                                                            'RtlUnwind',
                                                                                            'WriteFile',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'HeapAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 38,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 27732,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 16384},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d2ad9ce737c5b0eb73e2cd8c417031b4a1d01a2f1a73bde8a5f5fb3c36977c9a'},
 'd308ad776c10217853cadd89e6a5b8bfb9643b1b9c7c1da8c98b4bdcf0642133': {'AddressOfEntryPoint': 15474,
                                                                      'DebugRVA': 4816,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'USER32.dll': 'DrawIcon',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'msvcrt.dll': '_cexit'},
                                                                      'ImportedFunctions': ['GetModuleFileNameW',
                                                                                            'GetComputerNameW',
                                                                                            'lstrcmpiW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrlenW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'lstrcpyW',
                                                                                            'lstrcatW',
                                                                                            'HeapFree',
                                                                                            'GetTickCount',
                                                                                            'GetStartupInfoW',
                                                                                            'GetLastError',
                                                                                            '_c_exit',
                                                                                            'malloc',
                                                                                            '_exit',
                                                                                            'swprintf',
                                                                                            '__CxxFrameHandler',
                                                                                            '_XcptFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__wgetmainargs',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            'free',
                                                                                            'wcstoul',
                                                                                            '_cexit',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'SendMessageW',
                                                                                            'IsIconic',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'GetTabbedTextExtentW',
                                                                                            'ReleaseDC',
                                                                                            'MessageBeep',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'EnableWindow',
                                                                                            'LoadIconW',
                                                                                            'DrawIcon',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 67,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 9688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 9728,
                                                                                       '.text\x00\x00\x00': 14848},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d308ad776c10217853cadd89e6a5b8bfb9643b1b9c7c1da8c98b4bdcf0642133'},
 'd3347f25295818f51fba0b5b859b8c0c9ae8be104bb26b59bd4e9e7487d158e3': {'AddressOfEntryPoint': 625576,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'comdlg32.dll': 'GetOpenFileNameA',
                                                                                      'gdi32.dll': 'AddFontResourceA',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'mpr.dll': 'WNetCloseEnum',
                                                                                      'ole32.dll': 'CoDisconnectObject',
                                                                                      'oleaut32.dll': 'SysFreeString',
                                                                                      'shell32.dll': 'SHGetMalloc',
                                                                                      'user32.dll': 'AdjustWindowRectEx',
                                                                                      'version.dll': 'GetFileVersionInfoA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'GetUserNameA',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'lstrcmpA',
                                                                                            'WriteProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'TransactNamedPipe',
                                                                                            'TerminateThread',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'SetLastError',
                                                                                            'SetFileTime',
                                                                                            'SetFilePointer',
                                                                                            'SetFileAttributesA',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReleaseMutex',
                                                                                            'ReadFile',
                                                                                            'QueryPerformanceCounter',
                                                                                            'OpenProcess',
                                                                                            'OpenMutexA',
                                                                                            'MultiByteToWideChar',
                                                                                            'MulDiv',
                                                                                            'MoveFileExA',
                                                                                            'MoveFileA',
                                                                                            'LockResource',
                                                                                            'LocalFree',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryExA',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'IsBadWritePtr',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalHandle',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalAddAtomA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetShortPathNameA',
                                                                                            'GetProfileStringA',
                                                                                            'GetProcAddress',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetOverlappedResult',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLogicalDrives',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetComputerNameA',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'FreeResource',
                                                                                            'InterlockedExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageA',
                                                                                            'FlushFileBuffers',
                                                                                            'FindResourceA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindClose',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'DeviceIoControl',
                                                                                            'DeleteFileA',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'CreateNamedPipeA',
                                                                                            'CreateMutexA',
                                                                                            'CreateFileA',
                                                                                            'CreateEventA',
                                                                                            'CreateDirectoryA',
                                                                                            'CopyFileA',
                                                                                            'CompareStringA',
                                                                                            'CompareFileTime',
                                                                                            'CloseHandle',
                                                                                            'WNetOpenEnumA',
                                                                                            'WNetGetUniversalNameA',
                                                                                            'WNetGetConnectionA',
                                                                                            'WNetEnumResourceA',
                                                                                            'WNetCloseEnum',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'UnrealizeObject',
                                                                                            'TextOutA',
                                                                                            'StretchDIBits',
                                                                                            'StretchBlt',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetTextColor',
                                                                                            'SetStretchBltMode',
                                                                                            'SetROP2',
                                                                                            'SetPixel',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SelectPalette',
                                                                                            'SelectObject',
                                                                                            'SaveDC',
                                                                                            'RoundRect',
                                                                                            'RestoreDC',
                                                                                            'RemoveFontResourceA',
                                                                                            'Rectangle',
                                                                                            'RectVisible',
                                                                                            'RealizePalette',
                                                                                            'Polyline',
                                                                                            'Pie',
                                                                                            'PatBlt',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'LineDDA',
                                                                                            'IntersectClipRect',
                                                                                            'GetWindowOrgEx',
                                                                                            'GetTextMetricsA',
                                                                                            'GetTextExtentPointA',
                                                                                            'GetTextExtentPoint32A',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'GetStockObject',
                                                                                            'GetPixel',
                                                                                            'GetPaletteEntries',
                                                                                            'GetObjectA',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDIBits',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetClipBox',
                                                                                            'GetBitmapBits',
                                                                                            'ExtFloodFill',
                                                                                            'ExcludeClipRect',
                                                                                            'EnumFontsA',
                                                                                            'Ellipse',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePenIndirect',
                                                                                            'CreatePalette',
                                                                                            'CreateFontIndirectA',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateBitmap',
                                                                                            'Chord',
                                                                                            'BitBlt',
                                                                                            'Arc',
                                                                                            'AddFontResourceA',
                                                                                            'WindowFromPoint',
                                                                                            'WinHelpA',
                                                                                            'WaitMessage',
                                                                                            'WaitForInputIdle',
                                                                                            'UpdateWindow',
                                                                                            'UnregisterClassA',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'TranslateMessage',
                                                                                            'TranslateMDISysAccel',
                                                                                            'TrackPopupMenu',
                                                                                            'SystemParametersInfoA',
                                                                                            'ShowWindow',
                                                                                            'ShowOwnedPopups',
                                                                                            'ShowCursor',
                                                                                            'SetWindowRgn',
                                                                                            'SetWindowsHookExA',
                                                                                            'SetWindowTextA',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowPlacement',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowLongA',
                                                                                            'SetTimer',
                                                                                            'SetScrollPos',
                                                                                            'SetScrollInfo',
                                                                                            'SetRectEmpty',
                                                                                            'SetRect',
                                                                                            'SetPropA',
                                                                                            'SetMenu',
                                                                                            'SetForegroundWindow',
                                                                                            'SetFocus',
                                                                                            'SetCursor',
                                                                                            'SetCapture',
                                                                                            'SetActiveWindow',
                                                                                            'SendNotifyMessageA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'SendMessageW',
                                                                                            'SendMessageA',
                                                                                            'ScrollWindowEx',
                                                                                            'ScrollWindow',
                                                                                            'ScreenToClient',
                                                                                            'ReplyMessage',
                                                                                            'RemovePropA',
                                                                                            'RemoveMenu',
                                                                                            'ReleaseDC',
                                                                                            'ReleaseCapture',
                                                                                            'RegisterWindowMessageA',
                                                                                            'RegisterClassA',
                                                                                            'PtInRect',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageA',
                                                                                            'PeekMessageA',
                                                                                            'OffsetRect',
                                                                                            'OemToCharBuffA',
                                                                                            'OemToCharA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'MessageBeep',
                                                                                            'MapWindowPoints',
                                                                                            'MapVirtualKeyA',
                                                                                            'LoadStringA',
                                                                                            'LoadIconA',
                                                                                            'LoadCursorA',
                                                                                            'LoadBitmapA',
                                                                                            'KillTimer',
                                                                                            'IsZoomed',
                                                                                            'IsWindowVisible',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindow',
                                                                                            'IsRectEmpty',
                                                                                            'IsIconic',
                                                                                            'IsDialogMessageA',
                                                                                            'InvalidateRect',
                                                                                            'IntersectRect',
                                                                                            'InsertMenuItemA',
                                                                                            'InsertMenuA',
                                                                                            'InflateRect',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowTextA',
                                                                                            'GetWindowRgn',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowLongA',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSystemMenu',
                                                                                            'GetSysColor',
                                                                                            'GetSubMenu',
                                                                                            'GetScrollPos',
                                                                                            'GetPropA',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'GetMessagePos',
                                                                                            'GetMessageA',
                                                                                            'GetMenuStringA',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenu',
                                                                                            'GetLastActivePopup',
                                                                                            'GetKeyState',
                                                                                            'GetKeyNameTextA',
                                                                                            'GetIconInfo',
                                                                                            'GetForegroundWindow',
                                                                                            'GetFocus',
                                                                                            'GetDesktopWindow',
                                                                                            'GetDCEx',
                                                                                            'GetDC',
                                                                                            'GetCursorPos',
                                                                                            'GetCursor',
                                                                                            'GetClientRect',
                                                                                            'GetClassInfoW',
                                                                                            'GetClassInfoA',
                                                                                            'GetCapture',
                                                                                            'GetActiveWindow',
                                                                                            'FrameRect',
                                                                                            'FindWindowA',
                                                                                            'FillRect',
                                                                                            'ExitWindowsEx',
                                                                                            'EqualRect',
                                                                                            'EnumWindows',
                                                                                            'EnumThreadWindows',
                                                                                            'EndPaint',
                                                                                            'EnableWindow',
                                                                                            'EnableMenuItem',
                                                                                            'DrawTextW',
                                                                                            'DrawTextA',
                                                                                            'DrawMenuBar',
                                                                                            'DrawIconEx',
                                                                                            'DrawIcon',
                                                                                            'DrawFrameControl',
                                                                                            'DrawFocusRect',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'DestroyMenu',
                                                                                            'DestroyIcon',
                                                                                            'DestroyCursor',
                                                                                            'DeleteMenu',
                                                                                            'DefWindowProcA',
                                                                                            'DefMDIChildProcA',
                                                                                            'DefFrameProcA',
                                                                                            'CreateWindowExA',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateMenu',
                                                                                            'CreateIcon',
                                                                                            'ClientToScreen',
                                                                                            'CheckMenuItem',
                                                                                            'CallWindowProcW',
                                                                                            'CallWindowProcA',
                                                                                            'CallNextHookEx',
                                                                                            'BringWindowToTop',
                                                                                            'BeginPaint',
                                                                                            'AppendMenuA',
                                                                                            'CharPrevA',
                                                                                            'CharNextA',
                                                                                            'CharLowerBuffA',
                                                                                            'CharLowerA',
                                                                                            'CharUpperBuffA',
                                                                                            'CharToOemBuffA',
                                                                                            'AdjustWindowRectEx',
                                                                                            'InitCommonControls',
                                                                                            'ImageList_GetDragImage',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_SetDragCursorImage',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_SetBkColor',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControls',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoCreateInstance',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'IsEqualGUID',
                                                                                            'GetActiveObject',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysFreeString',
                                                                                            'ShellExecuteExA',
                                                                                            'ShellExecuteA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ExtractIconA',
                                                                                            'SHChangeNotify',
                                                                                            'SHBrowseForFolder',
                                                                                            'SHGetPathFromIDList',
                                                                                            'SHGetMalloc',
                                                                                            'GetSaveFileNameA',
                                                                                            'GetOpenFileNameA',
                                                                                            'CoDisconnectObject',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 423,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 64640,
                                                                      'SectionNames': {'.idata\x00\x00': 9728,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 65024,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 622080,
                                                                                       'DATA\x00\x00\x00\x00': 4608},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d3347f25295818f51fba0b5b859b8c0c9ae8be104bb26b59bd4e9e7487d158e3'},
 'd36d2f93f0581b3a8a5297f563ec8e37ac48115e145a8664eff14d4a3c10d03a': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d36d2f93f0581b3a8a5297f563ec8e37ac48115e145a8664eff14d4a3c10d03a'},
 'd3a5a774d6352a13c74bbfcad5f667bcfd754fd959946ffb4919dfdc11db6adf': {'AddressOfEntryPoint': 110688,
                                                                      'DebugRVA': 8112,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 548864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 21315,
                                                                      'ImportedDLL': {'CRYPT32.dll': 'CryptProtectData',
                                                                                      'CRYPTSP.dll': 'CryptDestroyHash',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoTaskMemFree',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CreateFileA',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'RaiseFailFastException',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetProcAddress',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualProtect',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCreateKeyExA',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'ReleaseMutex',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemDirectoryW',
                                                                                      'api-ms-win-core-toolhelp-l1-1-0.dll': 'Module32NextW',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'TraceMessage',
                                                                                      'api-ms-win-eventing-obsolete-l1-1-0.dll': 'RegisterTraceGuidsA',
                                                                                      'api-ms-win-shell-shellfolders-l1-1-0.dll': 'SHGetKnownFolderPath',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['?what@exception@@UBEPBDXZ',
                                                                                            '_CxxThrowException',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '_stricmp',
                                                                                            'memcpy',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            'memmove',
                                                                                            'wcscpy_s',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_snwprintf_s',
                                                                                            'memset',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'CreateMutexA',
                                                                                            'WaitForSingleObject',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'RaiseException',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'RaiseFailFastException',
                                                                                            'GetTraceEnableLevel',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableFlags',
                                                                                            'TraceMessage',
                                                                                            'HeapSetInformation',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemFree',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptProtectData',
                                                                                            'CreateFileW',
                                                                                            'GetVolumeInformationW',
                                                                                            'DeleteFileW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetDriveTypeW',
                                                                                            'CreateFileA',
                                                                                            'DeviceIoControl',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'RegisterTraceGuidsA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'Module32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'Module32NextW',
                                                                                            'CryptGenKey',
                                                                                            'CryptExportKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptContextAddRef',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGetDefaultProviderW',
                                                                                            'CryptGenRandom',
                                                                                            'CryptDeriveKey',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptDestroyHash',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WinVerifyTrust'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 25,
                                                                      'NumberOfImportFunctions': 113,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2232,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 12800,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 540160},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d3a5a774d6352a13c74bbfcad5f667bcfd754fd959946ffb4919dfdc11db6adf'},
 'd3cd35bb65f42806809e7bab170849f9a973fbefba997966322fd043e472f4a5': {'AddressOfEntryPoint': 91076,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 83968,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d3cd35bb65f42806809e7bab170849f9a973fbefba997966322fd043e472f4a5'},
 'd41e763d716affbfedfe2ea74efbf1f7acc14ec98038ff82c649b8b658a61058': {'AddressOfEntryPoint': 51760,
                                                                      'DebugRVA': 4416,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49216,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'AUTHZ.dll': 'AuthzInitializeContextFromSid',
                                                                                      'KERNEL32.dll': 'CreateActCtxW',
                                                                                      'OLEAUT32.dll': 'UnRegisterTypeLibForUser',
                                                                                      'RPCRT4.dll': 'UuidToStringW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminReleaseContext',
                                                                                      'msvcrt.dll': '?terminate@@YAXXZ',
                                                                                      'ntdll.dll': 'NtFreeVirtualMemory',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'urlmon.dll': 'Extract'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'CopySid',
                                                                                            'EqualSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'GetAce',
                                                                                            'SetEntriesInAclW',
                                                                                            'IsValidSid',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'GetLengthSid',
                                                                                            'CreateWellKnownSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityDescriptorSacl',
                                                                                            'AddMandatoryAce',
                                                                                            'RegOverridePredefKey',
                                                                                            'RegOpenCurrentUser',
                                                                                            'RegGetValueW',
                                                                                            'OpenProcessToken',
                                                                                            'MultiByteToWideChar',
                                                                                            'FindFirstFileA',
                                                                                            'RemoveDirectoryA',
                                                                                            'FindClose',
                                                                                            'LocalAlloc',
                                                                                            'FindNextFileA',
                                                                                            'GetFinalPathNameByHandleW',
                                                                                            'GetTempPathA',
                                                                                            'LocalFree',
                                                                                            'K32GetModuleBaseNameW',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'ResumeThread',
                                                                                            'GetVersionExA',
                                                                                            'lstrcmpiW',
                                                                                            'GetExitCodeThread',
                                                                                            'SetFileAttributesA',
                                                                                            'EnterCriticalSection',
                                                                                            'SuspendThread',
                                                                                            'VirtualProtect',
                                                                                            'FlushInstructionCache',
                                                                                            'VirtualFree',
                                                                                            'VirtualQuery',
                                                                                            'SetThreadContext',
                                                                                            'GetThreadContext',
                                                                                            'GetFileAttributesA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'SetProcessDEPPolicy',
                                                                                            'VirtualAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'OpenProcess',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateProcessW',
                                                                                            'CopyFileW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeLibrary',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'CreateDirectoryExA',
                                                                                            'lstrcmpA',
                                                                                            'SetLastError',
                                                                                            'CreateFileA',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'CreateThread',
                                                                                            'DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'ReleaseActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'PostQuitMessage',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            'rand_s',
                                                                                            'memcpy_s',
                                                                                            'memset',
                                                                                            'iswalpha',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcstok',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_wcsnicmp',
                                                                                            '_wtoi',
                                                                                            'iswascii',
                                                                                            'iscntrl',
                                                                                            '_vsnprintf',
                                                                                            'iswcntrl',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf',
                                                                                            'wcsrchr',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoRevertToSelf',
                                                                                            'CoTaskMemFree',
                                                                                            'CoImpersonateClient',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoGetCallContext',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'RegisterTypeLib',
                                                                                            'RegisterTypeLibForUser',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'UnRegisterTypeLibForUser',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'UuidToStringW',
                                                                                            'CompatFlagsFromClsid',
                                                                                            'CoInternetSetFeatureEnabled',
                                                                                            'CoInternetCreateSecurityManager',
                                                                                            'Extract',
                                                                                            'CryptCATAdminAcquireContext',
                                                                                            'CryptCATAdminAddCatalog',
                                                                                            'CryptCATAdminReleaseCatalogContext',
                                                                                            'CryptCATAdminReleaseContext',
                                                                                            'AuthzFreeContext',
                                                                                            'AuthzFreeResourceManager',
                                                                                            'AuthzAccessCheck',
                                                                                            'AuthzInitializeResourceManager',
                                                                                            'AuthzInitializeContextFromSid',
                                                                                            'NtFreeVirtualMemory'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 192,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 413904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 414208,
                                                                                       '.text\x00\x00\x00': 50176},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d41e763d716affbfedfe2ea74efbf1f7acc14ec98038ff82c649b8b658a61058'},
 'd47403bafb78760367624e5dc59576de3981c6987f36f2d59c5ef416656d2eaa': {'AddressOfEntryPoint': 12707,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'ExitProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalUnlock',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 180656,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 180736,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d47403bafb78760367624e5dc59576de3981c6987f36f2d59c5ef416656d2eaa'},
 'd4af506c47ab433de90ca6e9fe81eee8ff12997a601c5ea923cc10e3f992b087': {'AddressOfEntryPoint': 26576,
                                                                      'DebugRVA': 4336,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenCurrentUser',
                                                                                      'KERNEL32.dll': 'GetExitCodeThread',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'UpdatePerUserSystemParameters',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'OpenProcessToken',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenCurrentUser',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineW',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetSystemInfo',
                                                                                            'GetCurrentThreadId',
                                                                                            'lstrcpyW',
                                                                                            'Sleep',
                                                                                            'HeapDestroy',
                                                                                            'LocalFree',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'OutputDebugStringA',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetVersionExW',
                                                                                            'lstrcpynW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'InitializeCriticalSection',
                                                                                            'ProcessIdToSessionId',
                                                                                            'LocalAlloc',
                                                                                            'GetExitCodeThread',
                                                                                            'GetMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'UpdatePerUserSystemParameters',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcmp',
                                                                                            '_vsnwprintf',
                                                                                            'memcpy',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_vsnprintf',
                                                                                            'wcscpy_s',
                                                                                            'realloc',
                                                                                            'wcscat_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memset',
                                                                                            'CoUninitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'SysAllocString',
                                                                                            'VarUI4FromStr',
                                                                                            'LoadTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'SysStringLen',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 5120,
                                                                                       '.text\x00\x00\x00': 27136},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d4af506c47ab433de90ca6e9fe81eee8ff12997a601c5ea923cc10e3f992b087'},
 'd4b4bd2f8a3db7de1b5f0f88b5ede076fa9614d9de657e6dd6cf9305d0d86cff': {'AddressOfEntryPoint': 10032,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStartupInfoA',
                                                                                      'RPCRT4.dll': 'NdrCStdStubBuffer_Release',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': '__getmainargs',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'lstrcmpiA',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'DispatchMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageA',
                                                                                            'MessageBoxA',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'memset',
                                                                                            'strtok',
                                                                                            'sprintf_s',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_amsg_exit',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__getmainargs',
                                                                                            'HWND_UserSize',
                                                                                            'HWND_UserFree',
                                                                                            'ObjectStublessClient3',
                                                                                            'HWND_UserMarshal',
                                                                                            'HWND_UserUnmarshal',
                                                                                            'ObjectStublessClient4',
                                                                                            'CoRegisterPSClsid',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CStdStubBuffer_Connect',
                                                                                            'CStdStubBuffer_Invoke',
                                                                                            'CStdStubBuffer_IsIIDSupported',
                                                                                            'CStdStubBuffer_Disconnect',
                                                                                            'CStdStubBuffer_DebugServerRelease',
                                                                                            'IUnknown_AddRef_Proxy',
                                                                                            'CStdStubBuffer_QueryInterface',
                                                                                            'CStdStubBuffer_DebugServerQueryInterface',
                                                                                            'IUnknown_Release_Proxy',
                                                                                            'CStdStubBuffer_CountRefs',
                                                                                            'NdrOleAllocate',
                                                                                            'NdrOleFree',
                                                                                            'IUnknown_QueryInterface_Proxy',
                                                                                            'CStdStubBuffer_AddRef',
                                                                                            'NdrDllGetClassObject',
                                                                                            'NdrCStdStubBuffer_Release'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.orpc\x00\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d4b4bd2f8a3db7de1b5f0f88b5ede076fa9614d9de657e6dd6cf9305d0d86cff'},
 'd4c471316c61201b15da33fccc87601c639b358e40d29111753f34019c1f2033': {'AddressOfEntryPoint': 10144,
                                                                      'DebugRVA': 4272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetFullPathNameW',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCreateKeyExW',
                                                                                      'msvcrt.dll': 'free',
                                                                                      'ntdll.dll': 'EtwTraceMessage'},
                                                                      'ImportedFunctions': ['PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'GetMessageW',
                                                                                            'DestroyWindow',
                                                                                            'DispatchMessageW',
                                                                                            '_exit',
                                                                                            '_wcsicmp',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'memset',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_beginthreadex',
                                                                                            'free',
                                                                                            'EtwTraceMessage',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'DelayLoadFailureHook',
                                                                                            'CreateThread',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'OpenProcess',
                                                                                            'UnregisterWait',
                                                                                            'ExitProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'EnterCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetModuleHandleW',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCommandLineW',
                                                                                            'GetFullPathNameW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 67,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 8216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 8704,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d4c471316c61201b15da33fccc87601c639b358e40d29111753f34019c1f2033'},
 'd4d5d206dec551e88d5d342ae1eeedf302545a3342a27bb144f31f0856031e5e': {'AddressOfEntryPoint': 95188,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127784,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 131,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456200,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 89088,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d4d5d206dec551e88d5d342ae1eeedf302545a3342a27bb144f31f0856031e5e'},
 'd4f45dd80b621f653d575fb3039f207a4d217bcbbfe398ae0cec0e977a47785d': {'AddressOfEntryPoint': 1999126,
                                                                      'DebugRVA': 1999148,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1999140,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 566716,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 566784,
                                                                                       '.text\x00\x00\x00': 1991168},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d4f45dd80b621f653d575fb3039f207a4d217bcbbfe398ae0cec0e977a47785d'},
 'd4f991adfdd1949ae08a106dad8a7899fef0bf5e691ac74099137fc5ffd9386f': {'AddressOfEntryPoint': 23952,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventWrite',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'SetTermsrvAppInstallMode',
                                                                                      'SHELL32.dll': 'SHBindToParent',
                                                                                      'SHLWAPI.dll': 'PathFindFileNameW',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchAppend',
                                                                                      'msvcrt.dll': '_wcmdln',
                                                                                      'ntdll.dll': 'RtlNtStatusToDosError',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'StopTraceW',
                                                                                            'EnableTraceEx2',
                                                                                            'StartTraceW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'EventEnabled',
                                                                                            'RegGetValueW',
                                                                                            'EventWrite',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'DeleteFileW',
                                                                                            'OpenEventW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'SetPriorityClass',
                                                                                            'CreateThread',
                                                                                            'lstrlenW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateProcessW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'CompareStringOrdinal',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVersionExW',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'CreateIoCompletionPort',
                                                                                            'SetInformationJobObject',
                                                                                            'CreateJobObjectW',
                                                                                            'GetLastError',
                                                                                            'GetSystemDirectoryW',
                                                                                            'AssignProcessToJobObject',
                                                                                            'ResumeThread',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'GetProcessId',
                                                                                            'TerminateThread',
                                                                                            'SetTermsrvAppInstallMode',
                                                                                            'CreateSolidBrush',
                                                                                            'SetBkColor',
                                                                                            'GetTextExtentPointW',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteObject',
                                                                                            'ExtTextOutW',
                                                                                            'GetLayout',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'BitBlt',
                                                                                            'GetObjectW',
                                                                                            'GetWindowTextW',
                                                                                            'GetParent',
                                                                                            'MessageBoxW',
                                                                                            'ExitWindowsEx',
                                                                                            'PostMessageW',
                                                                                            'DrawTextW',
                                                                                            'LoadStringW',
                                                                                            'MessageBeep',
                                                                                            'DispatchMessageW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'GetSysColor',
                                                                                            'LoadBitmapW',
                                                                                            'PostQuitMessage',
                                                                                            'CharLowerW',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetMenuDefaultItem',
                                                                                            'DestroyMenu',
                                                                                            'SendMessageW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'GetSystemMetrics',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_vsnwprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_purecall',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_wcmdln',
                                                                                            'PathQuoteSpacesW',
                                                                                            'SHDeleteValueW',
                                                                                            'SHGetValueW',
                                                                                            'PathFindFileNameW',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoTaskMemFree',
                                                                                            'CoGetApartmentType',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'PathCchAddExtension',
                                                                                            'PathCchAppend',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'SHParseDisplayName',
                                                                                            'SHEvaluateSystemCommandTemplate',
                                                                                            'SHBindToParent'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 141,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3448,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 23040},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d4f991adfdd1949ae08a106dad8a7899fef0bf5e691ac74099137fc5ffd9386f'},
 'd50b8d784124bdcabcb0f3ce0e31da35fc697e88550b8a669596f9b26a6f8d42': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 376984,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 377344,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d50b8d784124bdcabcb0f3ce0e31da35fc697e88550b8a669596f9b26a6f8d42'},
 'd525340edc1af79472718dcd1c1ef8fc5306a6b2493692bfe9c0cb27faed4def': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 881500,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 805306368,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 52224,
                                                                                       '.reloc\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 808448,
                                                                                       '.xdata\x00\x00': 14336},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/d525340edc1af79472718dcd1c1ef8fc5306a6b2493692bfe9c0cb27faed4def'},
 'd53cb803ffaacd495a1938bcf3593e7a3baf833220be879e7ea2122b68f57212': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d53cb803ffaacd495a1938bcf3593e7a3baf833220be879e7ea2122b68f57212'},
 'd581db473caff2897d71bb42609485151d8437c9a93248d323efa36a48b28440': {'AddressOfEntryPoint': 19008,
                                                                      'DebugRVA': 7152,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2994176,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'GetProcessWindowStation',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'dbghelp.dll': 'EnumerateLoadedModules',
                                                                                      'msvcrt.dll': 'memcmp',
                                                                                      'ntdll.dll': 'NtQueryInformationProcess',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['ReadProcessMemory',
                                                                                            'SetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'LoadLibraryExW',
                                                                                            'OutputDebugStringW',
                                                                                            'IsDebuggerPresent',
                                                                                            'DebugBreak',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'FreeLibrary',
                                                                                            'CloseHandle',
                                                                                            'ExitProcess',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'OutputDebugStringA',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LoadLibraryExA',
                                                                                            'VirtualAlloc',
                                                                                            'GetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualFree',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_errno',
                                                                                            'atol',
                                                                                            '__iob_func',
                                                                                            'strstr',
                                                                                            'strrchr',
                                                                                            'toupper',
                                                                                            '_strdup',
                                                                                            '_vsnprintf',
                                                                                            'fprintf',
                                                                                            'printf',
                                                                                            'wprintf',
                                                                                            '_strupr',
                                                                                            'strchr',
                                                                                            'malloc',
                                                                                            'calloc',
                                                                                            'free',
                                                                                            '_strlwr',
                                                                                            '_stricmp',
                                                                                            'memcmp',
                                                                                            'RtlUnwind',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtOpenThread',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'NtQueryInformationThread',
                                                                                            'NtQueryInformationProcess',
                                                                                            'SymGetOptions',
                                                                                            'SymSetOptions',
                                                                                            'EnumerateLoadedModules',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'OpenSCManagerA',
                                                                                            'OpenProcessToken',
                                                                                            'CloseServiceHandle',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SetThreadDesktop',
                                                                                            'EnumDesktopsA',
                                                                                            'GetWindowLongA',
                                                                                            'OpenWindowStationA',
                                                                                            'GetWindowTextA',
                                                                                            'EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'FindWindowExA',
                                                                                            'EnumWindowStationsA',
                                                                                            'CloseWindowStation',
                                                                                            'GetThreadDesktop',
                                                                                            'OpenDesktopA',
                                                                                            'SetProcessWindowStation',
                                                                                            'CloseDesktop',
                                                                                            'GetWindow',
                                                                                            'GetProcessWindowStation',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 105,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 3176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 18944},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d581db473caff2897d71bb42609485151d8437c9a93248d323efa36a48b28440'},
 'd5d04e5bf7085da59675912547a858a0ac86138eec733136638ad5640cc1684f': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 83692,
                                                                      'DebugSize': 56,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 805306368,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1308,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9728,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 59904,
                                                                                       '.xdata\x00\x00': 5632},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/d5d04e5bf7085da59675912547a858a0ac86138eec733136638ad5640cc1684f'},
 'd5d90082f580daf8fdf16a13c00dc999bc5ff03b0fe8ea80c3de7261639c0405': {'AddressOfEntryPoint': 48720,
                                                                      'DebugRVA': 13776,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 163840,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetModuleHandleA',
                                                                                      'PSAPI.DLL': 'EnumProcesses',
                                                                                      'dbghelp.dll': 'SymUnloadModule64',
                                                                                      'msvcrt.dll': '_wcsicmp',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['memcpy',
                                                                                            '__iob_func',
                                                                                            'memset',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'iswdigit',
                                                                                            'wcstol',
                                                                                            '_wtoi',
                                                                                            'towlower',
                                                                                            'qsort',
                                                                                            '_vsnprintf',
                                                                                            'strcpy_s',
                                                                                            'wcsstr',
                                                                                            'sprintf_s',
                                                                                            'vfprintf',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            '_stricmp',
                                                                                            'strncpy_s',
                                                                                            'fclose',
                                                                                            '_strdup',
                                                                                            'fgets',
                                                                                            '_wfsopen',
                                                                                            'strstr',
                                                                                            'malloc',
                                                                                            '_wcsnicmp',
                                                                                            'calloc',
                                                                                            'free',
                                                                                            '_strnicmp',
                                                                                            'sscanf_s',
                                                                                            '_wcsicmp',
                                                                                            'SymLoadModule64',
                                                                                            'SymGetTypeFromNameW',
                                                                                            'SymInitialize',
                                                                                            'SymGetModuleInfo64',
                                                                                            'SymGetLineFromAddr64',
                                                                                            'SymFindFileInPath',
                                                                                            'SymSetOptions',
                                                                                            'SymGetSymFromAddr64',
                                                                                            'SymLoadModuleEx',
                                                                                            'SymGetTypeInfo',
                                                                                            'SymRegisterCallback64',
                                                                                            'SymGetOptions',
                                                                                            'SymCleanup',
                                                                                            'SymUnloadModule64',
                                                                                            'NtSuspendThread',
                                                                                            'RtlCreateQueryDebugBuffer',
                                                                                            'NtQueryVirtualMemory',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtReadVirtualMemory',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'NtClose',
                                                                                            'LdrQueryProcessModuleInformation',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtOpenThread',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlDestroyQueryDebugBuffer',
                                                                                            'NtResumeThread',
                                                                                            'VerSetConditionMask',
                                                                                            'LdrGetProcedureAddress',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'RtlQueryHeapInformation',
                                                                                            'NtGetNextThread',
                                                                                            'NtQuerySystemInformation',
                                                                                            'GetProcessImageFileNameW',
                                                                                            'GetModuleInformation',
                                                                                            'GetModuleFileNameExA',
                                                                                            'EnumProcessModules',
                                                                                            'EnumProcesses',
                                                                                            'GetComputerNameExW',
                                                                                            'SetErrorMode',
                                                                                            'GetSystemInfo',
                                                                                            'GetThreadContext',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'ReadProcessMemory',
                                                                                            'OpenProcess',
                                                                                            'VirtualQueryEx',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapFree',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetLocalTime',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersionExA',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 115,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 62976,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 47104},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d5d90082f580daf8fdf16a13c00dc999bc5ff03b0fe8ea80c3de7261639c0405'},
 'd5f8bb09fef606ad16cdd831d573c4e6304e4d66c6ee4a66f7d3976e832a9aff': {'AddressOfEntryPoint': 12944,
                                                                      'DebugRVA': 4400,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'lstrcpyA',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'msvcrt.dll': 'printf'},
                                                                      'ImportedFunctions': ['__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_controlfp',
                                                                                            '__initenv',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'exit',
                                                                                            'vprintf',
                                                                                            '__getmainargs',
                                                                                            '_except_handler3',
                                                                                            'puts',
                                                                                            'printf',
                                                                                            'SetFilePointer',
                                                                                            'lstrlenA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetShortPathNameA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'VerLanguageNameA',
                                                                                            'lstrcatA',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalHandle',
                                                                                            'CloseHandle',
                                                                                            'UnmapViewOfFile',
                                                                                            'LoadResource',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'FindResourceA',
                                                                                            'MapViewOfFileEx',
                                                                                            'CreateFileMappingA',
                                                                                            'CreateFileA',
                                                                                            'FileTimeToSystemTime',
                                                                                            'ReadFile',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetNumberFormatA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'lstrcpyA',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'CharLowerA',
                                                                                            'wsprintfA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 11264},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d5f8bb09fef606ad16cdd831d573c4e6304e4d66c6ee4a66f7d3976e832a9aff'},
 'd64115f7574ef972342fa4be84241a11723c5f555b1ad795c29ceab28dfcf9ca': {'AddressOfEntryPoint': 62396,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 94972,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 70568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 70656,
                                                                                       '.text\x00\x00\x00': 57344,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d64115f7574ef972342fa4be84241a11723c5f555b1ad795c29ceab28dfcf9ca'},
 'd66fa5f31c046b4c2ae01a2ce046a99f505dc16a565df448827adcbd5e34c709': {'AddressOfEntryPoint': 9992,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'movetree.dll': 'MtAlloc',
                                                                                      'msvcrt.dll': '__p__commode',
                                                                                      'ntdll.dll': '_wcsicmp'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'ReadConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'wcscpy',
                                                                                            'wcsncpy',
                                                                                            'wcslen',
                                                                                            'wcschr',
                                                                                            'sprintf',
                                                                                            '_wcsicmp',
                                                                                            'MtCreateLogFiles',
                                                                                            'MtSetupSession',
                                                                                            'MoveTreeCheck',
                                                                                            'MoveTreeStart',
                                                                                            'MoveTreeContinue',
                                                                                            'MtDisconnect',
                                                                                            'MtFree',
                                                                                            'MtDupString',
                                                                                            'MtAlloc',
                                                                                            '_XcptFilter',
                                                                                            '_controlfp',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            'printf',
                                                                                            'putchar',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'setlocale',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__winitenv',
                                                                                            '__wgetmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 47,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d66fa5f31c046b4c2ae01a2ce046a99f505dc16a565df448827adcbd5e34c709'},
 'd676d4f5f949fed314d4a06b1df0d47d492c052d83ecbf3e07d8fa9ff34c1dc3': {'AddressOfEntryPoint': 21328,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'USER32.dll': 'GetSystemMetrics',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'SetFilePointer',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'SetEnvironmentVariableW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'EqualSid',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'msvcrt.dll': '__wargv',
                                                                                      'ntdll.dll': 'RtlLengthSid'},
                                                                      'ImportedFunctions': ['GetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetThreadToken',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentThread',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleA',
                                                                                            'CompareFileTime',
                                                                                            'GetFileAttributesExW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetLocalTime',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenCurrentUser',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'CompareStringW',
                                                                                            'HeapSetInformation',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'UpdatePerUserSystemParameters',
                                                                                            'GetSystemMetrics',
                                                                                            '_except_handler4_common',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_itow',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_vsnwprintf',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__argc',
                                                                                            '__wargv',
                                                                                            'RtlCopySid',
                                                                                            'RtlLengthSid',
                                                                                            'OutputDebugStringW',
                                                                                            'GetTokenInformation',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'EqualSid',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'QueryPerformanceCounter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 19968},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d676d4f5f949fed314d4a06b1df0d47d492c052d83ecbf3e07d8fa9ff34c1dc3'},
 'd68f77159ad421f171cc6be65200780d776ddb256d07b5ed1ad73fa761bb7ed6': {'AddressOfEntryPoint': 82144,
                                                                      'DebugRVA': 5168,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 89024,
                                                                      'ExportSize': 4076,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetLengthSid',
                                                                                      'KERNEL32.dll': 'GetLogicalDriveStringsW',
                                                                                      'OLEAUT32.dll': 'SystemTimeToVariantTime',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'StrCmpW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetLengthSid',
                                                                                            'HeapSize',
                                                                                            'DeviceIoControl',
                                                                                            'GetVolumeInformationW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetVersionExA',
                                                                                            'DuplicateHandle',
                                                                                            'GetShortPathNameW',
                                                                                            'OpenEventW',
                                                                                            'GetFileType',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalFree',
                                                                                            'GetComputerNameExW',
                                                                                            'VirtualAlloc',
                                                                                            'GlobalUnlock',
                                                                                            'GetOverlappedResult',
                                                                                            'CreateProcessA',
                                                                                            'HeapValidate',
                                                                                            'GetExitCodeProcess',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetVersionExW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GlobalAlloc',
                                                                                            'OpenProcess',
                                                                                            'SetFileTime',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'VirtualFree',
                                                                                            'GetLogicalDrives',
                                                                                            'GlobalLock',
                                                                                            'GlobalSize',
                                                                                            'LocalFree',
                                                                                            'lstrcmpiW',
                                                                                            'GetLastError',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetCommandLineW',
                                                                                            'HeapWalk',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalAlloc',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'ExitProcess',
                                                                                            'GetTempFileNameW',
                                                                                            'HeapReAlloc',
                                                                                            'GetFileSize',
                                                                                            'TlsGetValue',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'VirtualQuery',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'FormatMessageW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileAttributesW',
                                                                                            'GetTempPathW',
                                                                                            'RaiseException',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'GetLocalTime',
                                                                                            'CreateFileMappingW',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'TlsFree',
                                                                                            'CreateDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'DebugBreak',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'CreateMutexW',
                                                                                            'SetFilePointer',
                                                                                            'FreeLibrary',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentThread',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'CreateFileMappingA',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryExA',
                                                                                            'CreateMutexA',
                                                                                            'ReleaseMutex',
                                                                                            'GetVersion',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'LoadLibraryExW',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'ResetEvent',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'FlushFileBuffers',
                                                                                            'FindFirstFileW',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindNextFileW',
                                                                                            'GetFileSizeEx',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringA',
                                                                                            'GetFullPathNameW',
                                                                                            'GlobalMemoryStatus',
                                                                                            'HeapCompact',
                                                                                            'CopyFileExW',
                                                                                            'GetDriveTypeW',
                                                                                            'SetEndOfFile',
                                                                                            'SetErrorMode',
                                                                                            'CreateProcessW',
                                                                                            'MoveFileExW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'wcsrchr',
                                                                                            '_vsnprintf',
                                                                                            '_lock',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'free',
                                                                                            'wcschr',
                                                                                            'memcpy',
                                                                                            'iswctype',
                                                                                            'feof',
                                                                                            '_wfopen',
                                                                                            'fgetws',
                                                                                            'swscanf_s',
                                                                                            'wcstok_s',
                                                                                            'fclose',
                                                                                            'rand_s',
                                                                                            'iswalpha',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_purecall',
                                                                                            '_wtoi',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcsncmp',
                                                                                            '_itow_s',
                                                                                            '_wcsnicmp',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'iswspace',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_vsnwprintf',
                                                                                            'memset',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'StrChrW',
                                                                                            'StrCmpW',
                                                                                            'LoadStringW',
                                                                                            'UnregisterClassA',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 208,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2344,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 89088},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d68f77159ad421f171cc6be65200780d776ddb256d07b5ed1ad73fa761bb7ed6'},
 'd6dc48daabf02cbdc4b95aa8405b4d22133e6baac06002747b634a1617997158': {'AddressOfEntryPoint': 12991,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpynA',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 30244,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 30720,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d6dc48daabf02cbdc4b95aa8405b4d22133e6baac06002747b634a1617997158'},
 'd7161581baaa04fc2e515bf724cc2cc17c25250a3574717d53a8f9d638e3d30f': {'AddressOfEntryPoint': 48080,
                                                                      'DebugRVA': 113116,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 20300,
                                                                      'ExportSize': 9136,
                                                                      'IATRVA': 118784,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoCreateInstance',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'SetConsoleCtrlHandler',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'CreateDirectoryW',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetSystemDefaultLangID',
                                                                                      'api-ms-win-core-localization-obsolete-l1-2-0.dll': 'GetSystemDefaultUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenProcessToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumValueW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharNextW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'CreateMutexW',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetVersionExA',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'GetTraceEnableLevel',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'FreeSid',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'loadperf.dll': 'LoadPerfCounterTextStringsW',
                                                                                      'msvcrt.dll': 'wcsstr',
                                                                                      'ntdll.dll': 'RtlValidRelativeSecurityDescriptor',
                                                                                      'wbemcomn.dll': '?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z'},
                                                                      'ImportedFunctions': ['__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'wcschr',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            '_wtol',
                                                                                            'realloc',
                                                                                            'memset',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcslen',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'strlen',
                                                                                            'memmove_s',
                                                                                            'wcsrchr',
                                                                                            'memcpy',
                                                                                            'atol',
                                                                                            'wcscoll',
                                                                                            'memmove',
                                                                                            'wcsspn',
                                                                                            'iswdigit',
                                                                                            'wcspbrk',
                                                                                            '_wcsupr',
                                                                                            '_wcslwr',
                                                                                            '_wcsrev',
                                                                                            'wcscspn',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'towupper',
                                                                                            'iswspace',
                                                                                            '_vsnwprintf',
                                                                                            'wcstoul',
                                                                                            'iswxdigit',
                                                                                            'wcsstr',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'TraceMessage',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateThread',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetStartupInfoW',
                                                                                            'OpenProcessToken',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'LoadStringW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeLibrary',
                                                                                            'CloseHandle',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'OpenEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'ReleaseSemaphore',
                                                                                            'ResetEvent',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'CreateSemaphoreExW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexW',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenCurrentUser',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'MakeAbsoluteSD',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'FreeSid',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExW',
                                                                                            'GetVersionExA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpW',
                                                                                            '?Throttle@@YGJKKKKK@Z',
                                                                                            '??0CStaticCritSec@@QAE@XZ',
                                                                                            '??1CStaticCritSec@@QAE@XZ',
                                                                                            '?anyFailure@CStaticCritSec@@SGHXZ',
                                                                                            '??YWString@@QAEAAV0@ABV0@@Z',
                                                                                            '??YWString@@QAEAAV0@PBG@Z',
                                                                                            '??4WString@@QAEAAV0@PBG@Z',
                                                                                            '??0WString@@QAE@PAGH@Z',
                                                                                            '??0CInsertionString@@QAE@VCHex@@@Z',
                                                                                            '?GetMemLogObject@@YGPAVCMemoryLog@@XZ',
                                                                                            '?Write@CMemoryLog@@QAEXJ@Z',
                                                                                            '??0WString@@QAE@PBG@Z',
                                                                                            '??0WString@@QAE@XZ',
                                                                                            '?Close@CEventLog@@QAEHXZ',
                                                                                            '?Report@CEventLog@@QAEHGABU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z',
                                                                                            '?Open@CEventLog@@QAEHXZ',
                                                                                            '??1CEventLog@@QAE@XZ',
                                                                                            '??0CEventLog@@QAE@PBGABU_GUID@@K@Z',
                                                                                            '?DeleteString@WString@@AAEXPAG@Z',
                                                                                            '??4WString@@QAEAAV0@ABV0@@Z',
                                                                                            '?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z',
                                                                                            '?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z',
                                                                                            'RtlValidRelativeSecurityDescriptor',
                                                                                            'GetLocaleInfoW',
                                                                                            'FormatMessageW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'MoveFileExW',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'WriteFile',
                                                                                            'CreateDirectoryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringW',
                                                                                            'CharNextW',
                                                                                            'OutputDebugStringA',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'UnloadPerfCounterTextStringsW',
                                                                                            'LoadPerfCounterTextStringsW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 30,
                                                                      'NumberOfImportFunctions': 177,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2184,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 109568},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d7161581baaa04fc2e515bf724cc2cc17c25250a3574717d53a8f9d638e3d30f'},
 'd72c15d9d553257168ba21581412ebd7bd99ba6519baf379175040c6d845d399': {'AddressOfEntryPoint': 6288,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': 'exit'},
                                                                      'ImportedFunctions': ['SetThreadUILanguage',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_amsg_exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcscpy_s',
                                                                                            'setlocale',
                                                                                            'wcscat_s',
                                                                                            '_wsystem',
                                                                                            '_ultow',
                                                                                            'malloc',
                                                                                            '_wcsnicmp',
                                                                                            'free',
                                                                                            'exit'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 44,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d72c15d9d553257168ba21581412ebd7bd99ba6519baf379175040c6d845d399'},
 'd7466a0e732a179041b43f76bfde6468e9fe75a3cc3595771d19f01cd7bf6902': {'AddressOfEntryPoint': 19936,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'NTMARTA.dll': 'AccTreeResetNamedSecurityInfo',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'FindClose',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrlenW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetKernelObjectSecurity',
                                                                                      'api-ms-win-security-lsalookup-l2-1-1.dll': 'LookupAccountNameW',
                                                                                      'api-ms-win-security-provider-l1-1-0.dll': 'SetNamedSecurityInfoW',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlFreeHeap'},
                                                                      'ImportedFunctions': ['_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_wsetlocale',
                                                                                            '_vsnwprintf_s',
                                                                                            'wcscat_s',
                                                                                            'ferror',
                                                                                            '_iob',
                                                                                            'fprintf',
                                                                                            'printf',
                                                                                            'fgetws',
                                                                                            'wprintf',
                                                                                            'vswprintf_s',
                                                                                            'fwprintf_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'fwprintf',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'memcpy',
                                                                                            'NtOpenFile',
                                                                                            'RtlReleaseRelativeName',
                                                                                            'NtClose',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlDosPathNameToRelativeNtPathName_U',
                                                                                            'NtQueryInformationFile',
                                                                                            'RtlFreeHeap',
                                                                                            'AccTreeResetNamedSecurityInfo',
                                                                                            'LookupAccountSidW',
                                                                                            'LookupAccountNameW',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'AddAce',
                                                                                            'GetLengthSid',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'GetFileSecurityW',
                                                                                            'InitializeAcl',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityAccessMask',
                                                                                            'EqualSid',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'QuerySecurityAccessMask',
                                                                                            'SetKernelObjectSecurity',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'ConvertSecurityDescriptorToStringSecurityDescriptorW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CloseHandle',
                                                                                            'FindNextFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'CompareStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'HeapSetInformation',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'SetNamedSecurityInfoW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 95,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2024,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 17920},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d7466a0e732a179041b43f76bfde6468e9fe75a3cc3595771d19f01cd7bf6902'},
 'd77a8bc1d60998364926ea1ab6eb3afff573035bacaa9f4860be80f3ca18e222': {'AddressOfEntryPoint': 12707,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'ExitProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalUnlock',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 178560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 178688,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d77a8bc1d60998364926ea1ab6eb3afff573035bacaa9f4860be80f3ca18e222'},
 'd77c699ff8d890753ce6c572626e93ca909fcb7cc65cfbf160efadd994a2b81b': {'AddressOfEntryPoint': 56070,
                                                                      'DebugRVA': 4928,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetSidSubAuthority',
                                                                                      'KERNEL32.dll': 'LoadLibraryA'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetThreadToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'CreateRestrictedToken',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'IsValidSid',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegisterEventSourceW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'GetKernelObjectSecurity',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'PrivilegeCheck',
                                                                                            'LookupAccountSidW',
                                                                                            'DuplicateToken',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'IsValidSecurityDescriptor',
                                                                                            'AccessCheck',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'GetLengthSid',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'ContinueDebugEvent',
                                                                                            'GetFileInformationByHandle',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'OpenThread',
                                                                                            'GetThreadContext',
                                                                                            'OpenProcess',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'InterlockedExchange',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'GetExitCodeThread',
                                                                                            'GetCurrentProcess',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetTickCount',
                                                                                            'Sleep',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetCurrentProcessId',
                                                                                            'FlushInstructionCache',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'OpenEventW',
                                                                                            'SetErrorMode',
                                                                                            'HeapSetInformation',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'GetCommandLineW',
                                                                                            'GetExitCodeProcess',
                                                                                            'DuplicateHandle',
                                                                                            'OpenFileMappingW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'FreeLibrary',
                                                                                            'lstrcmpiW',
                                                                                            'MultiByteToWideChar',
                                                                                            'FindResourceW',
                                                                                            'GetThreadLocale',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetVersion',
                                                                                            'SuspendThread',
                                                                                            'WaitForDebugEvent',
                                                                                            'DebugActiveProcessStop',
                                                                                            'DebugSetProcessKillOnExit',
                                                                                            'CreateProcessW',
                                                                                            'GetFileAttributesW',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateFileW',
                                                                                            'SearchPathW',
                                                                                            'UnmapViewOfFile',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ResumeThread',
                                                                                            'WriteProcessMemory',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateEventW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'lstrlenW',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetCurrentThread',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeW',
                                                                                            'RtlUnwind',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'LCMapStringW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetProcessHeap',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'FormatMessageW',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'ReleaseMutex',
                                                                                            'OpenMutexW',
                                                                                            'LocalAlloc',
                                                                                            'LoadLibraryA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 176,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 76136,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 13824,
                                                                                       '.rsrc\x00\x00\x00': 76288,
                                                                                       '.text\x00\x00\x00': 167424},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d77c699ff8d890753ce6c572626e93ca909fcb7cc65cfbf160efadd994a2b81b'},
 'd7812d0109291bcb5268913498e66f817009e8262050f546ad16b5fac47f8cca': {'AddressOfEntryPoint': 29806,
                                                                      'DebugRVA': 29612,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1136,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d7812d0109291bcb5268913498e66f817009e8262050f546ad16b5fac47f8cca'},
 'd801e9eb2b0a16bc6b79b3106e28808980347c6c7f384112de8f74c04b293c05': {'AddressOfEntryPoint': 258427,
                                                                      'DebugRVA': 382528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 380928,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'GDI32.dll': 'RoundRect',
                                                                                      'KERNEL32.dll': 'CompareFileTime',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'NETAPI32.dll': 'Netbios',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'WaitMessage',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW',
                                                                                      'WININET.dll': 'InternetOpenUrlA',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'gdiplus.dll': 'GdipDrawLineI',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GetTickCount',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetModuleFileNameW',
                                                                                            'MoveFileExW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'LoadLibraryExW',
                                                                                            'ExitProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'lstrcmpW',
                                                                                            'DebugBreak',
                                                                                            'OutputDebugStringW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'QueueUserWorkItem',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'GetModuleHandleExA',
                                                                                            'InterlockedExchange',
                                                                                            'CreateIoCompletionPort',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'SetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'GetFileTime',
                                                                                            'GetLocalTime',
                                                                                            'lstrlenA',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetStringTypeA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'SetHandleCount',
                                                                                            'SetStdHandle',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'HeapCreate',
                                                                                            'HeapSize',
                                                                                            'CompareStringW',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringA',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringW',
                                                                                            'RtlUnwind',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'ExitThread',
                                                                                            'GetFileAttributesW',
                                                                                            'HeapReAlloc',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'LoadLibraryA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'InterlockedCompareExchange',
                                                                                            'ReadFile',
                                                                                            'FreeResource',
                                                                                            'SizeofResource',
                                                                                            'WriteFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcpyW',
                                                                                            'CreateDirectoryW',
                                                                                            'InterlockedIncrement',
                                                                                            'SetFileAttributesW',
                                                                                            'lstrlenW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'InterlockedDecrement',
                                                                                            'GetVersionExW',
                                                                                            'SetLastError',
                                                                                            'RaiseException',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'CreateProcessW',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlushInstructionCache',
                                                                                            'GetCurrentProcess',
                                                                                            'CompareFileTime',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowPos',
                                                                                            'SetFocus',
                                                                                            'IsWindow',
                                                                                            'PostMessageW',
                                                                                            'DestroyWindow',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'DrawIcon',
                                                                                            'DrawIconEx',
                                                                                            'DrawTextW',
                                                                                            'GetFocus',
                                                                                            'wvsprintfW',
                                                                                            'GetKeyState',
                                                                                            'UpdateWindow',
                                                                                            'EnableWindow',
                                                                                            'ShowWindow',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'UnregisterClassW',
                                                                                            'UnregisterClassA',
                                                                                            'GetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'GetClientRect',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'GetWindowRect',
                                                                                            'SendMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'ScreenToClient',
                                                                                            'IsZoomed',
                                                                                            'IsWindowEnabled',
                                                                                            'IsIconic',
                                                                                            'RegisterClassExW',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'CreateWindowExW',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'PeekMessageW',
                                                                                            'GetDC',
                                                                                            'SetForegroundWindow',
                                                                                            'MapWindowPoints',
                                                                                            'GetParent',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetWindow',
                                                                                            'GetMessagePos',
                                                                                            'InvalidateRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetClassLongW',
                                                                                            'LoadImageW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetWindowRgn',
                                                                                            'OffsetRect',
                                                                                            'ReleaseDC',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'AttachThreadInput',
                                                                                            'LoadStringW',
                                                                                            'FillRect',
                                                                                            'CopyRect',
                                                                                            'CharNextW',
                                                                                            'GetQueueStatus',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'FindWindowW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'TrackMouseEvent',
                                                                                            'WaitMessage',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'SetTextColor',
                                                                                            'GetObjectA',
                                                                                            'Rectangle',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteObject',
                                                                                            'CreatePen',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateRoundRectRgn',
                                                                                            'CreateRectRgn',
                                                                                            'CombineRgn',
                                                                                            'StretchBlt',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'CreateFontW',
                                                                                            'SetBkMode',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'RoundRect',
                                                                                            'GetLengthSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'DuplicateTokenEx',
                                                                                            'SetTokenInformation',
                                                                                            'CreateProcessAsUserW',
                                                                                            'OpenProcessToken',
                                                                                            'RegDeleteValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'FreeSid',
                                                                                            'ShellExecuteA',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'VariantClear',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'PathIsDirectoryA',
                                                                                            'PathFindFileNameA',
                                                                                            'PathCombineA',
                                                                                            'PathAppendA',
                                                                                            'PathRemoveFileSpecA',
                                                                                            'PathFileExistsA',
                                                                                            'PathIsRootW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathFileExistsW',
                                                                                            'InitCommonControlsEx',
                                                                                            'TransparentBlt',
                                                                                            'AlphaBlend',
                                                                                            'GdipAddPathLineI',
                                                                                            'GdipAddPathArcI',
                                                                                            'GdipClonePath',
                                                                                            'GdipCreatePath',
                                                                                            'GdipDeletePath',
                                                                                            'GdipDrawPath',
                                                                                            'GdipFillPath',
                                                                                            'GdipReleaseDC',
                                                                                            'GdipDrawRectangleI',
                                                                                            'GdipDrawString',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipSetStringFormatTrimming',
                                                                                            'GdipSetStringFormatFlags',
                                                                                            'GdipSetStringFormatLineAlign',
                                                                                            'GdipSetStringFormatAlign',
                                                                                            'GdipDeleteStringFormat',
                                                                                            'GdipCreateStringFormat',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipCreateFontFromLogfontA',
                                                                                            'GdipCreateFontFromDC',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipTranslateTextureTransform',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateTexture2I',
                                                                                            'GdipSetImageAttributesColorKeys',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipDrawImageRectRectI',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipDisposeImageAttributes',
                                                                                            'GdipCreateImageAttributes',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdipAlloc',
                                                                                            'GdipFree',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDrawLineI',
                                                                                            'Netbios',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetReadFile',
                                                                                            'InternetOpenA',
                                                                                            'InternetConnectW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpSendRequestA',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetOpenUrlA',
                                                                                            'timeGetTime'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 337,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 156856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 18432,
                                                                                       '.rdata\x00\x00': 105472,
                                                                                       '.reloc\x00\x00': 37888,
                                                                                       '.rsrc\x00\x00\x00': 157184,
                                                                                       '.text\x00\x00\x00': 373248},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d801e9eb2b0a16bc6b79b3106e28808980347c6c7f384112de8f74c04b293c05'},
 'd84149976bc94a21b21aa0bc99fcbdee9d1ad4f3387d8b62b90f805ac300ba05': {'AddressOfEntryPoint': 135530,
                                                                      'DebugRVA': 5632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'CRYPT32.dll': 'CryptQueryObject',
                                                                                      'GDI32.dll': 'CreateCompatibleDC',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SETUPAPI.dll': 'CM_Query_And_Remove_SubTreeW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'EndDialog',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminCalcHashFromFileHandle',
                                                                                      'ntdll.dll': 'NtClose',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'FreeSid',
                                                                                            'EqualSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'IsTextUnicode',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'SetEntriesInAclW',
                                                                                            'DeleteService',
                                                                                            'StartServiceW',
                                                                                            'ControlService',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'CheckTokenMembership',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'ReleaseMutex',
                                                                                            'SetFilePointer',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'CreateMutexW',
                                                                                            'FreeConsole',
                                                                                            'SetConsoleMode',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'FreeLibrary',
                                                                                            'FillConsoleOutputCharacterW',
                                                                                            'ReadConsoleOutputW',
                                                                                            'GetConsoleMode',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'WriteConsoleW',
                                                                                            'IsValidLocale',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpW',
                                                                                            'CompareStringW',
                                                                                            'GetTempFileNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'CopyFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'FormatMessageW',
                                                                                            'RaiseException',
                                                                                            'GetFileSize',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'WriteConsoleOutputW',
                                                                                            'UnmapViewOfFile',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'CreateThread',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'InterlockedCompareExchange',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'GetExitCodeProcess',
                                                                                            'DeviceIoControl',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'MoveFileExW',
                                                                                            'SearchPathW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateFileA',
                                                                                            'SetEndOfFile',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleA',
                                                                                            'GetLocaleInfoW',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'GetConsoleCP',
                                                                                            'GetLocaleInfoA',
                                                                                            'Sleep',
                                                                                            'LoadLibraryExA',
                                                                                            'ReadFile',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'GetThreadLocale',
                                                                                            'SetThreadLocale',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetVersionExW',
                                                                                            'GetLocalTime',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'OutputDebugStringA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'VirtualFree',
                                                                                            'HeapCreate',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'GetStartupInfoA',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameA',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'GetStartupInfoW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'lstrcmpiW',
                                                                                            'WideCharToMultiByte',
                                                                                            'InterlockedExchange',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetVersionExA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'GlobalFree',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'LocalReAlloc',
                                                                                            'EnterCriticalSection',
                                                                                            'SetLayout',
                                                                                            'DeleteDC',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBitmap',
                                                                                            'SelectObject',
                                                                                            'StartPage',
                                                                                            'EndPage',
                                                                                            'StartDocW',
                                                                                            'EndDoc',
                                                                                            'GetTextMetricsW',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'GetIconInfo',
                                                                                            'DrawIconEx',
                                                                                            'CreateIconIndirect',
                                                                                            'LoadIconW',
                                                                                            'LoadBitmapW',
                                                                                            'DrawTextExW',
                                                                                            'LoadImageW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSysColor',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'InvalidateRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SetWindowLongW',
                                                                                            'SetWindowTextW',
                                                                                            'GetParent',
                                                                                            'PostMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckDlgButton',
                                                                                            'SetFocus',
                                                                                            'CallWindowProcW',
                                                                                            'DestroyIcon',
                                                                                            'DialogBoxParamW',
                                                                                            'SetDlgItemTextW',
                                                                                            'CharLowerW',
                                                                                            'GetDlgItem',
                                                                                            'SendMessageW',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'ShowWindow',
                                                                                            'UnregisterClassA',
                                                                                            'EndDialog',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenProcessToken',
                                                                                            'RtlUnwind',
                                                                                            'NtClose',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SetupDiClassNameFromGuidW',
                                                                                            'SetupDiOpenClassRegKey',
                                                                                            'SetupInstallFilesFromInfSectionW',
                                                                                            'SetupPromptReboot',
                                                                                            'SetupInstallFromInfSectionW',
                                                                                            'SetupInstallServicesFromInfSectionW',
                                                                                            'SetupDiGetActualSectionToInstallW',
                                                                                            'SetupFindNextLine',
                                                                                            'SetupFindNextMatchLineW',
                                                                                            'SetupOpenInfFileW',
                                                                                            'SetupGetLineCountW',
                                                                                            'SetupCloseInfFile',
                                                                                            'SetupFindFirstLineW',
                                                                                            'SetupGetStringFieldW',
                                                                                            'pSetupSetGlobalFlags',
                                                                                            'pSetupGetGlobalFlags',
                                                                                            'SetupGetFieldCount',
                                                                                            'SetupGetIntField',
                                                                                            'SetupOpenAppendInfFileW',
                                                                                            'SetupDiSetClassInstallParamsW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiGetSelectedDriverW',
                                                                                            'SetupDiGetDriverInfoDetailW',
                                                                                            'CM_Enumerate_Classes',
                                                                                            'CM_Get_DevNode_Status',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiSetDeviceRegistryPropertyW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiSetSelectedDevice',
                                                                                            'SetupDiGetDeviceInstallParamsW',
                                                                                            'SetupDiSetDeviceInstallParamsW',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupGetTargetPathW',
                                                                                            'SetupQueueCopyIndirectW',
                                                                                            'SetupQueueCopyW',
                                                                                            'SetupOpenFileQueue',
                                                                                            'SetupInitDefaultQueueCallbackEx',
                                                                                            'SetupDefaultQueueCallbackW',
                                                                                            'SetupCommitFileQueueW',
                                                                                            'SetupTermDefaultQueueCallback',
                                                                                            'SetupCloseFileQueue',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'CM_Locate_DevNodeW',
                                                                                            'CM_Get_Device_ID_List_SizeW',
                                                                                            'CM_Get_Device_ID_ListW',
                                                                                            'CM_Get_Device_IDW',
                                                                                            'CM_Setup_DevNode',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'CMP_WaitNoPendingInstallEvents',
                                                                                            'CM_Query_And_Remove_SubTreeW',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_SetBkColor',
                                                                                            'PropertySheetW',
                                                                                            'ImageList_Create',
                                                                                            'PrintDlgExW',
                                                                                            'GetSaveFileNameW',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertFreeCTLContext',
                                                                                            'CertGetCTLContextProperty',
                                                                                            'CryptQueryObject',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 324,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 481644,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.reloc\x00\x00': 24576,
                                                                                       '.rsrc\x00\x00\x00': 481792,
                                                                                       '.text\x00\x00\x00': 401408},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d84149976bc94a21b21aa0bc99fcbdee9d1ad4f3387d8b62b90f805ac300ba05'},
 'd86c3538f9f6197ef6d5496ce5755bec87ed6880b93d62003869d9906cb0aee4': {'AddressOfEntryPoint': 18112,
                                                                      'DebugRVA': 5584,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 24000,
                                                                      'ExportSize': 819,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptReleaseContext',
                                                                                      'KERNEL32.dll': 'LoadLibraryExA',
                                                                                      'MSVCR120_CLR0400.dll': '__crtTerminateProcess',
                                                                                      'webengine4.dll': 'LoadLibraryUsingFullPath'},
                                                                      'ImportedFunctions': ['SetThreadToken',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'CryptReleaseContext',
                                                                                            'GetOverlappedResult',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventW',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'RaiseException',
                                                                                            'GetProcessAffinityMask',
                                                                                            'GetSystemInfo',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'SwitchToThread',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'DecodePointer',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'EncodePointer',
                                                                                            'GetLastError',
                                                                                            'GetHandleInformation',
                                                                                            'CloseHandle',
                                                                                            'DebugBreak',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'SetProcessAffinityMask',
                                                                                            'LoadLibraryExA',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_itow_s',
                                                                                            'wcstoul',
                                                                                            '_wtoi',
                                                                                            'printf',
                                                                                            '_vsnwprintf',
                                                                                            '_beginthread',
                                                                                            'memcmp',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_initterm_e',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '__crtTerminateProcess',
                                                                                            'EtwTraceAspNetUnregister',
                                                                                            'EtwTraceAspNetRegister',
                                                                                            'XspLogEvent',
                                                                                            'PerfCounterInitialize',
                                                                                            'UnInitializeManagedCode',
                                                                                            'InitializeManagedCode',
                                                                                            'DisposeAppDomainsIndirect',
                                                                                            'GetConfigurationFromNativeCode',
                                                                                            'GetGlobalConfigFullPathW',
                                                                                            'IsConfigFileName',
                                                                                            'DrainThreadPool',
                                                                                            'InitializeLibrary',
                                                                                            'TraceEnabled',
                                                                                            'TraceRaiseEvent',
                                                                                            'GetProcessMemoryInformation',
                                                                                            'PerfDecrementGlobalCounter',
                                                                                            'PerfIncrementGlobalCounter',
                                                                                            'GetAppDomainIndirect',
                                                                                            'IsManagedDebuggerConnectedIndirect',
                                                                                            'ReleaseWmiEventManager',
                                                                                            'MonitorGlobalConfigFile',
                                                                                            'GetXSPHeap',
                                                                                            'ClrQueueUserWorkItem',
                                                                                            'AttachHandleToThreadPool',
                                                                                            'LoadLibraryUsingFullPath'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 115,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1864,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 20992},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d86c3538f9f6197ef6d5496ce5755bec87ed6880b93d62003869d9906cb0aee4'},
 'd899f2c9377a5c335fb8d2e78d381b1e7d5922a84246dcb4a7af6d5a776ff824': {'AddressOfEntryPoint': 121527,
                                                                      'DebugRVA': 321824,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 249856,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SystemFunction036',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameA',
                                                                                      'KERNEL32.dll': 'RaiseException',
                                                                                      'USER32.dll': 'SendMessageA'},
                                                                      'ImportedFunctions': ['AllocateAndInitializeSid',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'SystemFunction036',
                                                                                            'GetOpenFileNameA',
                                                                                            'GetSaveFileNameA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'LoadIconA',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetDesktopWindow',
                                                                                            'GetWindowLongA',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowTextLengthA',
                                                                                            'GetWindowTextA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetActiveWindow',
                                                                                            'AppendMenuA',
                                                                                            'EnableMenuItem',
                                                                                            'CreateMenu',
                                                                                            'SetMenu',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemInt',
                                                                                            'SetDlgItemInt',
                                                                                            'EndDialog',
                                                                                            'DialogBoxParamA',
                                                                                            'MoveWindow',
                                                                                            'ShowWindow',
                                                                                            'PostMessageA',
                                                                                            'GetMessageTime',
                                                                                            'GetCursorPos',
                                                                                            'GetForegroundWindow',
                                                                                            'GetCapture',
                                                                                            'GetQueueStatus',
                                                                                            'GetClipboardOwner',
                                                                                            'WinHelpA',
                                                                                            'MapDialogRect',
                                                                                            'SetWindowLongA',
                                                                                            'MessageBeep',
                                                                                            'MessageBoxA',
                                                                                            'GetClientRect',
                                                                                            'SendDlgItemMessageA',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckRadioButton',
                                                                                            'GetDlgItemTextA',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowPos',
                                                                                            'CreateWindowExA',
                                                                                            'SendMessageA',
                                                                                            'SetEndOfFile',
                                                                                            'HeapSize',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CreateFileW',
                                                                                            'DecodePointer',
                                                                                            'GetProcessHeap',
                                                                                            'SetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FindFirstFileExA',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleCP',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetStringTypeW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'OutputDebugStringW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetACP',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'GetSystemDirectoryA',
                                                                                            'FormatMessageA',
                                                                                            'LoadLibraryA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetProcessTimes',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadTimes',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAdjustment',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalMemoryStatus',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'OpenProcess',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'CreateFileA',
                                                                                            'DeleteFileA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetLocalTime',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'CompareStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryExW',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'RaiseException'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 147,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 7608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 78336,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 7680,
                                                                                       '.text\x00\x00\x00': 242688},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d899f2c9377a5c335fb8d2e78d381b1e7d5922a84246dcb4a7af6d5a776ff824'},
 'd89ab72ad8a071593be0f48c5fc0fc40802c1bdea05e39aebbf26fabe2fefece': {'AddressOfEntryPoint': 61536,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'HeapValidate',
                                                                                      'MPR.dll': 'WNetGetLastErrorW',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHLWAPI.dll': 'StrStrIW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'EnumWindowStationsW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WS2_32.dll': 'GetNameInfoW',
                                                                                      'dbghelp.dll': 'EnumerateLoadedModulesW64',
                                                                                      'framedynos.dll': '??4CHString@@QAEABV0@PBG@Z',
                                                                                      'msvcrt.dll': 'wcstoul',
                                                                                      'ntdll.dll': 'RtlVerifyVersionInfo',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegCloseKey',
                                                                                            'LookupAccountSidW',
                                                                                            'OpenSCManagerW',
                                                                                            'EnumServicesStatusExW',
                                                                                            'CloseServiceHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'GetNumberFormatW',
                                                                                            'OpenProcess',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentThreadId',
                                                                                            'WriteConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'GetLocaleInfoW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'ReadFile',
                                                                                            'SetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenA',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'WideCharToMultiByte',
                                                                                            'VerSetConditionMask',
                                                                                            'SetThreadUILanguage',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'SetLastError',
                                                                                            'FreeLibrary',
                                                                                            'HeapValidate',
                                                                                            'wcstok',
                                                                                            'wcsstr',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'fflush',
                                                                                            'fprintf',
                                                                                            '_get_osfhandle',
                                                                                            '_fileno',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wtoi64',
                                                                                            '_wcsicmp',
                                                                                            '_wcsdup',
                                                                                            'wcscpy_s',
                                                                                            'free',
                                                                                            'wcsrchr',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '__iob_func',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            'OpenDesktopW',
                                                                                            'CharUpperW',
                                                                                            'LoadStringW',
                                                                                            'SetThreadDesktop',
                                                                                            'CloseDesktop',
                                                                                            'GetThreadDesktop',
                                                                                            'EnumDesktopsW',
                                                                                            'CloseWindowStation',
                                                                                            'SetProcessWindowStation',
                                                                                            'OpenWindowStationW',
                                                                                            'wsprintfW',
                                                                                            'GetWindowTextW',
                                                                                            'IsHungAppWindow',
                                                                                            'GetWindow',
                                                                                            'GetProcessWindowStation',
                                                                                            'EnumWindows',
                                                                                            'FindWindowExW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowLongW',
                                                                                            'EnumWindowStationsW',
                                                                                            'RtlTimeToElapsedTimeFields',
                                                                                            'RtlLargeIntegerToChar',
                                                                                            'RtlQueryPackageIdentity',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetGetLastErrorW',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'GetUserNameExW',
                                                                                            'FreeAddrInfoW',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSAGetLastError',
                                                                                            'GetAddrInfoW',
                                                                                            'GetNameInfoW',
                                                                                            '?Format@CHString@@QAAXPBGZZ',
                                                                                            '?Empty@CHString@@QAEXXZ',
                                                                                            '??YCHString@@QAEABV0@ABV0@@Z',
                                                                                            '??YCHString@@QAEABV0@PBG@Z',
                                                                                            '?Find@CHString@@QBEHPBG@Z',
                                                                                            '?Left@CHString@@QBE?AV1@H@Z',
                                                                                            '??4CHString@@QAEABV0@PBD@Z',
                                                                                            '?Compare@CHString@@QBEHPBG@Z',
                                                                                            '?FindOneOf@CHString@@QBEHPBG@Z',
                                                                                            '?Find@CHString@@QBEHG@Z',
                                                                                            '?ReleaseBuffer@CHString@@QAEXH@Z',
                                                                                            '?Mid@CHString@@QBE?AV1@HH@Z',
                                                                                            '?GetData@CHString@@IBEPAUCHStringData@@XZ',
                                                                                            '?GetBuffer@CHString@@QAEPAGH@Z',
                                                                                            '?Mid@CHString@@QBE?AV1@H@Z',
                                                                                            '?GetBufferSetLength@CHString@@QAEPAGH@Z',
                                                                                            '??1CHString@@QAE@XZ',
                                                                                            '??0CHString@@QAE@XZ',
                                                                                            '??4CHString@@QAEABV0@ABV0@@Z',
                                                                                            '??4CHString@@QAEABV0@PBG@Z',
                                                                                            'NetServerGetInfo',
                                                                                            'NetApiBufferFree',
                                                                                            'EnumerateLoadedModulesW64',
                                                                                            'StrStrW',
                                                                                            'StrChrIW',
                                                                                            'StrChrW',
                                                                                            'StrStrIW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 184,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 67072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d89ab72ad8a071593be0f48c5fc0fc40802c1bdea05e39aebbf26fabe2fefece'},
 'd935670b38c64de5076c5530fcba6599922519629c9e647369d5b8d848434a7d': {'AddressOfEntryPoint': 10832,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LsaQueryInformationPolicy',
                                                                                      'CRYPT32.dll': 'CertGetNameStringW',
                                                                                      'KERNEL32.dll': 'GetCurrentDirectoryW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'credui.dll': 'CredUICmdLinePromptForCredentialsW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'netutils.dll': 'NetApiBufferAllocate',
                                                                                      'ntdll.dll': 'RtlCompareMemoryUlong'},
                                                                      'ImportedFunctions': ['CredFree',
                                                                                            'CredUnmarshalCredentialW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'SaferCloseLevel',
                                                                                            'SaferCreateLevel',
                                                                                            'CredGetSessionTypes',
                                                                                            'CreateProcessAsUserW',
                                                                                            'SaferGetLevelInformation',
                                                                                            'CredMarshalCredentialW',
                                                                                            'CredWriteW',
                                                                                            'SaferGetPolicyInformation',
                                                                                            'SaferComputeTokenFromLevel',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaClose',
                                                                                            'LsaFreeMemory',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetLastError',
                                                                                            'WriteConsoleW',
                                                                                            'SetLastError',
                                                                                            'GetExitCodeThread',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetExitCodeProcess',
                                                                                            'FormatMessageW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetComputerNameExW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrlenW',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            'wcstoul',
                                                                                            'wcschr',
                                                                                            '_resetstkoflw',
                                                                                            '_cexit',
                                                                                            'memset',
                                                                                            'SspiIsPromptingNeeded',
                                                                                            'CredUICmdLinePromptForCredentialsW',
                                                                                            'LoadStringW',
                                                                                            'CommandLineToArgvW',
                                                                                            'GetUserNameExW',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertOpenSystemStoreW',
                                                                                            'CertCloseStore',
                                                                                            'CertGetNameStringW',
                                                                                            'NetApiBufferFree',
                                                                                            'NetApiBufferAllocate',
                                                                                            'RtlCompareMemoryUlong'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 84,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 10240},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d935670b38c64de5076c5530fcba6599922519629c9e647369d5b8d848434a7d'},
 'd9c0f17a6812eab0c5ebb7cdafd718d325dce81cddc991b20067e998f98187a9': {'AddressOfEntryPoint': 105759,
                                                                      'DebugRVA': 111152,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'MSCOREE.DLL': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 46388,
                                                                      'SectionNames': {'.rdata\x00\x00': 100864,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 46592,
                                                                                       '.text\x00\x00\x00': 104448},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d9c0f17a6812eab0c5ebb7cdafd718d325dce81cddc991b20067e998f98187a9'},
 'd9de84565a9cd6898065ce18909b388dacecbb79e62f3373c967cd9817ea1600': {'AddressOfEntryPoint': 58192,
                                                                      'DebugRVA': 4512,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'GDI32.dll': 'GetObjectW',
                                                                                      'KERNEL32.dll': 'WriteFile',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'USER32.dll': 'GetSubMenu',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoCreateInstance',
                                                                                      'wer.dll': 'WerReportSetParameter'},
                                                                      'ImportedFunctions': ['EventWrite',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'IsValidSid',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'RegOpenKeyExW',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'FreeLibrary',
                                                                                            'CreateFileW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetTempPathW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersionExW',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetProcAddress',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetObjectW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'EndDialog',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'MessageBoxW',
                                                                                            'SetDlgItemTextW',
                                                                                            'PostMessageW',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'GetDlgItemTextW',
                                                                                            'SendMessageW',
                                                                                            'LoadImageW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'GetCursor',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'MapDialogRect',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassExW',
                                                                                            'UnregisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'DefWindowProcW',
                                                                                            'GetMessageW',
                                                                                            'IsDialogMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetCursorPos',
                                                                                            'SetForegroundWindow',
                                                                                            'TrackPopupMenuEx',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SetProcessDPIAware',
                                                                                            'GetKeyState',
                                                                                            'LoadMenuIndirectW',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'DrawEdge',
                                                                                            'DrawStateW',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'MapWindowPoints',
                                                                                            'GetWindowRect',
                                                                                            'GetClientRect',
                                                                                            'EnumWindows',
                                                                                            'GetClassNameW',
                                                                                            'GetLastActivePopup',
                                                                                            'DestroyIcon',
                                                                                            'ShowWindow',
                                                                                            'DestroyMenu',
                                                                                            'GetSubMenu',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'wcschr',
                                                                                            '_wcstoi64',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_wtoi',
                                                                                            'wcsncpy_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            'wcsncat_s',
                                                                                            'wcsnlen',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'memcpy_s',
                                                                                            'free',
                                                                                            'memset',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetFolderPathW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'WerReportCreate',
                                                                                            'WerReportSubmit',
                                                                                            'WerReportCloseHandle',
                                                                                            'WerReportAddFile',
                                                                                            'WerReportSetParameter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 164,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 104576,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 104960,
                                                                                       '.text\x00\x00\x00': 65536},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d9de84565a9cd6898065ce18909b388dacecbb79e62f3373c967cd9817ea1600'},
 'd9e3b8faf069e7c8f97640930d90b89107578ea900b347d1fb32c99b3f309f26': {'AddressOfEntryPoint': 417184,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'ExitProcess',
                                                                                      'advapi32.dll': 'RegCloseKey',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'gdi32.dll': 'BitBlt',
                                                                                      'ole32.dll': 'CoInitialize',
                                                                                      'oleaut32.dll': 'LoadTypeLib',
                                                                                      'shell32.dll': 'ShellExecuteA',
                                                                                      'user32.dll': 'GetDC',
                                                                                      'version.dll': 'VerQueryValueA'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'RegCloseKey',
                                                                                            'InitCommonControls',
                                                                                            'BitBlt',
                                                                                            'CoInitialize',
                                                                                            'LoadTypeLib',
                                                                                            'ShellExecuteA',
                                                                                            'GetDC',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 11,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 8744,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 9728,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 135168},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/d9e3b8faf069e7c8f97640930d90b89107578ea900b347d1fb32c99b3f309f26'},
 'd9ea07fa377f97eaf12a28af9fc32d88c8b65f65e7f2bd446df246e881c0596c': {'AddressOfEntryPoint': 9232,
                                                                      'DebugRVA': 4272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetProcAddress',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects',
                                                                                      'msvcrt.dll': '__set_app_type',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'GetLastError',
                                                                                            'SetEvent',
                                                                                            'GetTickCount',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcAddress',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            '_except_handler4_common',
                                                                                            '__setusermatherr',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'RoGetAgileReference',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoRegisterSurrogate',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d9ea07fa377f97eaf12a28af9fc32d88c8b65f65e7f2bd446df246e881c0596c'},
 'd9ede3f6b898a023015db015a47bd44534a2ec587f03917924c82960a7e91f95': {'AddressOfEntryPoint': 19653,
                                                                      'DebugRVA': 4464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertSidToStringSidA',
                                                                                      'KERNEL32.dll': 'LocalAlloc',
                                                                                      'NTDSAPI.dll': 'DsCrackNamesA',
                                                                                      'msvcrt.dll': 'mbstowcs',
                                                                                      'ntdll.dll': 'RtlConvertSidToUnicodeString'},
                                                                      'ImportedFunctions': ['QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'GetCurrentProcess',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalAlloc',
                                                                                            'strncpy',
                                                                                            'exit',
                                                                                            'printf',
                                                                                            '__getmainargs',
                                                                                            'atol',
                                                                                            'atoi',
                                                                                            '_resetstkoflw',
                                                                                            '__initenv',
                                                                                            '_except_handler3',
                                                                                            'strchr',
                                                                                            '_wcsicmp',
                                                                                            'free',
                                                                                            '_controlfp',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            'sprintf',
                                                                                            '_initterm',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_strnicmp',
                                                                                            'malloc',
                                                                                            '_stricmp',
                                                                                            'mbstowcs',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'LookupAccountSidA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'GetAce',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'RtlFreeUnicodeString',
                                                                                            '_alloca_probe',
                                                                                            'RtlEqualSid',
                                                                                            'RtlMapGenericMask',
                                                                                            'RtlValidSid',
                                                                                            'RtlLengthSid',
                                                                                            'RtlConvertSidToUnicodeString',
                                                                                            'DsBindWithCredA',
                                                                                            'DsFreeNameResultA',
                                                                                            'DsReplicaGetInfoW',
                                                                                            'DsReplicaFreeInfo',
                                                                                            'DsMapSchemaGuidsA',
                                                                                            'DsFreeSchemaGuidMapA',
                                                                                            'DsUnBindA',
                                                                                            'DsCrackNamesA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 71,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 968,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d9ede3f6b898a023015db015a47bd44534a2ec587f03917924c82960a7e91f95'},
 'd9fedcacbed1184c3d492063bec05e3293bfbdcabfd097f711b01275bf2720b1': {'AddressOfEntryPoint': 18688,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterTraceGuidsW',
                                                                                      'KERNEL32.dll': 'LocalReAlloc',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'USER32.dll': 'DestroyIcon',
                                                                                      'USERENV.dll': 'UnregisterGPNotification',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegQueryValueExW',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetAce',
                                                                                            'GetSecurityInfo',
                                                                                            'UnregisterTraceGuids',
                                                                                            'SetSecurityInfo',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegCloseKey',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'GetCurrentProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'FindCloseChangeNotification',
                                                                                            'SetEvent',
                                                                                            'CompareStringOrdinal',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'CompareStringW',
                                                                                            'ExitThread',
                                                                                            'FindFirstFileW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'FindClose',
                                                                                            'LocalAlloc',
                                                                                            'CreateEventW',
                                                                                            'FindNextChangeNotification',
                                                                                            'WaitForMultipleObjects',
                                                                                            'HeapSetInformation',
                                                                                            'FindNextFileW',
                                                                                            'OpenEventW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'ResumeThread',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'GetTickCount64',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'SetThreadPriority',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LocalReAlloc',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowLongW',
                                                                                            'LoadIconW',
                                                                                            'TranslateMessage',
                                                                                            'GetClientRect',
                                                                                            'ShutdownBlockReasonCreate',
                                                                                            'GetParent',
                                                                                            'DialogBoxParamW',
                                                                                            'SetForegroundWindow',
                                                                                            'KillTimer',
                                                                                            'PostMessageW',
                                                                                            'LoadImageW',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'GetWindowRect',
                                                                                            'SetTimer',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDesktopWindow',
                                                                                            'SetWindowPos',
                                                                                            'ShutdownBlockReasonDestroy',
                                                                                            'CheckDlgButton',
                                                                                            'LoadStringW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CreateWindowExW',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassW',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextW',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyIcon',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'memset',
                                                                                            'SHGetFileInfoW',
                                                                                            'Shell_NotifyIconW',
                                                                                            'CoInitialize',
                                                                                            'RegisterGPNotification',
                                                                                            'UnregisterGPNotification'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 111,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 5760,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 6144,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/d9fedcacbed1184c3d492063bec05e3293bfbdcabfd097f711b01275bf2720b1'},
 'da4e7041c7b78b845ce44349e5f8f3cb10906519a5be33e5d76c6fa6ad78f6d4': {'AddressOfEntryPoint': 5344,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49516,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'libvlc.dll': 'libvlc_release',
                                                                                      'msvcrt.dll': '_putenv'},
                                                                      'ImportedFunctions': ['libvlc_new',
                                                                                            'libvlc_release',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetErrorMode',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            '__argv',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__mb_cur_max',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'puts',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'strchr',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'atoi',
                                                                                            'vfprintf',
                                                                                            'wcslen',
                                                                                            '_putenv'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 68,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 75520,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 75776,
                                                                                       '.text\x00\x00\x00': 31744,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '/4\x00\x00\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/da4e7041c7b78b845ce44349e5f8f3cb10906519a5be33e5d76c6fa6ad78f6d4'},
 'da5e0acb7ef7d6dcb11507da9c8fe224ef76a57a27caf84afa679fb9e1408ec8': {'AddressOfEntryPoint': 18448,
                                                                      'DebugRVA': 4464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 20624,
                                                                      'ExportSize': 162,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSection',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoInitializeSecurity',
                                                                                      'vdsutil.dll': '?VdsTraceEx@@YAXKKPEADZZ'},
                                                                      'ImportedFunctions': ['AllocateAndInitializeSid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'FreeSid',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetLastError',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'CloseHandle',
                                                                                            'GetStartupInfoW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'DispatchMessageW',
                                                                                            'GetMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_wcsicmp',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_initterm',
                                                                                            '__set_app_type',
                                                                                            'memset',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoUninitialize',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoInitializeSecurity',
                                                                                            '?IsLocalComputer@@YAJPEAG@Z',
                                                                                            'VdsDisableCOMFatalExceptionHandling',
                                                                                            '??1CVdsCallTracer@@QEAA@XZ',
                                                                                            '??0CVdsCallTracer@@QEAA@KPEBD@Z',
                                                                                            '?VdsTraceEx@@YAXKKPEADZZ'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 69,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2536,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 16896},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/da5e0acb7ef7d6dcb11507da9c8fe224ef76a57a27caf84afa679fb9e1408ec8'},
 'da739399f10955b9a133c303fbea666bd3a901593e36f9e0f924e850c8f4a1b4': {'AddressOfEntryPoint': 1127559,
                                                                      'DebugRVA': 1994896,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 4400400,
                                                                      'ExportSize': 77,
                                                                      'IATRVA': 1990656,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptReleaseContext',
                                                                                      'COMDLG32.dll': 'CommDlgExtendedError',
                                                                                      'CRYPT32.dll': 'CryptQueryObject',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'MSVCP90.dll': '?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z',
                                                                                      'MSVCR90.dll': '__CxxFrameHandler3',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderPathA',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'DialogBoxParamW',
                                                                                      'WINHTTP.dll': 'WinHttpAddRequestHeaders',
                                                                                      'WS2_32.dll': 'listen',
                                                                                      'WSOCK32.dll': 'ord1141',
                                                                                      'WinSCard.dll': 'SCardFreeMemory',
                                                                                      'credui.dll': 'CredUIPromptForWindowsCredentialsW',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['sprintf',
                                                                                            '_ecvt_s',
                                                                                            '_fcvt_s',
                                                                                            'islower',
                                                                                            '_strupr',
                                                                                            'strncat',
                                                                                            'frexp',
                                                                                            'localeconv',
                                                                                            'wcrtomb',
                                                                                            'abort',
                                                                                            'wcscspn',
                                                                                            'wcschr',
                                                                                            'towupper',
                                                                                            'wcsspn',
                                                                                            '_snprintf',
                                                                                            '_getpid',
                                                                                            '_wgetenv',
                                                                                            '_wunlink',
                                                                                            '_wrename',
                                                                                            '_wfopen',
                                                                                            '_wopen',
                                                                                            'strcspn',
                                                                                            'wcsrchr',
                                                                                            'memchr',
                                                                                            '_strdup',
                                                                                            '_get_osfhandle',
                                                                                            'strncpy',
                                                                                            'fputs',
                                                                                            '_fileno',
                                                                                            'qsort',
                                                                                            '_stricmp',
                                                                                            '_strlwr',
                                                                                            'strtok_s',
                                                                                            'strerror',
                                                                                            'realloc',
                                                                                            'malloc',
                                                                                            '_errno',
                                                                                            '_wfullpath',
                                                                                            'strrchr',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            'sscanf',
                                                                                            '_vsnwprintf_s',
                                                                                            'wcsstr',
                                                                                            'wcsncpy_s',
                                                                                            'wcscat_s',
                                                                                            'strstr',
                                                                                            'strncpy_s',
                                                                                            'strcat_s',
                                                                                            'wcsncmp',
                                                                                            'getenv_s',
                                                                                            '_recalloc',
                                                                                            'calloc',
                                                                                            'wcstok_s',
                                                                                            'getenv',
                                                                                            'rand',
                                                                                            'memmove',
                                                                                            '_beginthreadex',
                                                                                            'strcpy_s',
                                                                                            'swprintf_s',
                                                                                            'strtoul',
                                                                                            'strftime',
                                                                                            'floor',
                                                                                            'isxdigit',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_purecall',
                                                                                            '??0exception@std@@QAE@XZ',
                                                                                            '_invalid_parameter_noinfo',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'memmove_s',
                                                                                            '??0bad_cast@std@@QAE@PBD@Z',
                                                                                            '??1bad_cast@std@@UAE@XZ',
                                                                                            '??0bad_cast@std@@QAE@ABV01@@Z',
                                                                                            '??8type_info@@QBE_NABV0@@Z',
                                                                                            '??0exception@std@@QAE@ABQBDH@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'memcpy_s',
                                                                                            '_wspawnl',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'strtod',
                                                                                            '_strtoui64',
                                                                                            '_fstat64i32',
                                                                                            'fflush',
                                                                                            'fgetc',
                                                                                            'printf',
                                                                                            'fgets',
                                                                                            'scanf',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            'ceil',
                                                                                            'strncmp',
                                                                                            '__iob_func',
                                                                                            'fclose',
                                                                                            'freopen_s',
                                                                                            '__RTDynamicCast',
                                                                                            'isalnum',
                                                                                            '_wdupenv_s',
                                                                                            'free',
                                                                                            'strtol',
                                                                                            '_gmtime64',
                                                                                            'exit',
                                                                                            '_time64',
                                                                                            '_localtime64',
                                                                                            'tolower',
                                                                                            'isdigit',
                                                                                            'isspace',
                                                                                            'wcsnlen',
                                                                                            'vswprintf_s',
                                                                                            '_vscwprintf',
                                                                                            'feof',
                                                                                            'getc',
                                                                                            'fread',
                                                                                            'rewind',
                                                                                            'fprintf',
                                                                                            '_lseek',
                                                                                            '_write',
                                                                                            '_close',
                                                                                            'ispunct',
                                                                                            'memcmp',
                                                                                            'strcat',
                                                                                            'wcslen',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strlen',
                                                                                            '_itoa_s',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'wcscpy_s',
                                                                                            'atoi',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z',
                                                                                            '?setf@ios_base@std@@QAEHH@Z',
                                                                                            '?fail@ios_base@std@@QBE_NXZ',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z',
                                                                                            '?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z',
                                                                                            '??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z',
                                                                                            '??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?bad@ios_base@std@@QBE_NXZ',
                                                                                            '??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '??Bios_base@std@@QBEPAXXZ',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ',
                                                                                            '??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z',
                                                                                            '?_Id_cnt@id@locale@std@@0HA',
                                                                                            '?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?_Init@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z',
                                                                                            '?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z',
                                                                                            '?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z',
                                                                                            '?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@00@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@PBD1@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z',
                                                                                            '?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z',
                                                                                            '??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z',
                                                                                            '?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?allocate@?$allocator@D@std@@QAEPADI@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z',
                                                                                            '??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z',
                                                                                            '??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z',
                                                                                            '??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z',
                                                                                            '?_Getcat@?$numpunct@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?id@?$numpunct@D@std@@2V0locale@2@A',
                                                                                            '?thousands_sep@?$numpunct@D@std@@QBEDXZ',
                                                                                            '?grouping@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??9locale@std@@QBE_NABV01@@Z',
                                                                                            '?classic@locale@std@@SAABV12@XZ',
                                                                                            '?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z',
                                                                                            '??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ',
                                                                                            '?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z',
                                                                                            '?tolower@?$ctype@D@std@@QBEDD@Z',
                                                                                            '?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z',
                                                                                            '?setw@std@@YA?AU?$_Smanip@H@1@H@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z',
                                                                                            '?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W0@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z',
                                                                                            '?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z',
                                                                                            '?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z',
                                                                                            '??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ',
                                                                                            '?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z',
                                                                                            '?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z',
                                                                                            '?toupper@?$ctype@D@std@@QBEDD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z',
                                                                                            '??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z',
                                                                                            '?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z',
                                                                                            '?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$reverse_iterator@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ',
                                                                                            '?rend@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$reverse_iterator@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z',
                                                                                            '?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z',
                                                                                            '??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@',
                                                                                            '??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z',
                                                                                            '?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z',
                                                                                            '?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z',
                                                                                            '?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z',
                                                                                            '?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z',
                                                                                            '?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z',
                                                                                            '?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z',
                                                                                            '??0_Locimp@locale@std@@AAE@ABV012@@Z',
                                                                                            '??1_Locimp@locale@std@@MAE@XZ',
                                                                                            '?destroy@?$allocator@D@std@@QAEXPAD@Z',
                                                                                            '?construct@?$allocator@D@std@@QAEXPADABD@Z',
                                                                                            '??1facet@locale@std@@UAE@XZ',
                                                                                            '??0facet@locale@std@@IAE@I@Z',
                                                                                            '?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A',
                                                                                            '?decimal_point@?$numpunct@D@std@@QBEDXZ',
                                                                                            '?getloc@ios_base@std@@QBE?AVlocale@2@XZ',
                                                                                            '?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z',
                                                                                            '??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z',
                                                                                            '?_Xran@_String_base@std@@SAXXZ',
                                                                                            '??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z',
                                                                                            '??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z',
                                                                                            '?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?id@?$ctype@_W@std@@2V0locale@2@A',
                                                                                            '?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ',
                                                                                            '?is@?$ctype@_W@std@@QBE_NF_W@Z',
                                                                                            '?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z',
                                                                                            '?allocate@?$allocator@_W@std@@QAEPA_WI@Z',
                                                                                            '?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z',
                                                                                            '??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z',
                                                                                            '?toupper@?$ctype@_W@std@@QBE_W_W@Z',
                                                                                            '?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '?eof@ios_base@std@@QBE_NXZ',
                                                                                            '?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z',
                                                                                            '??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z',
                                                                                            '??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z',
                                                                                            '?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z',
                                                                                            '?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ',
                                                                                            '?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z',
                                                                                            '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z',
                                                                                            '?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB',
                                                                                            '??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z',
                                                                                            '?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0locale@std@@QAE@XZ',
                                                                                            '?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '?precision@ios_base@std@@QAEHH@Z',
                                                                                            '?flags@ios_base@std@@QAEHH@Z',
                                                                                            '?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?exceptions@ios_base@std@@QAEXH@Z',
                                                                                            '?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z',
                                                                                            '??1locale@std@@QAE@XZ',
                                                                                            '??4locale@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?widen@?$ctype@D@std@@QBEDD@Z',
                                                                                            '?length@?$char_traits@D@std@@SAIPBD@Z',
                                                                                            '?width@ios_base@std@@QBEHXZ',
                                                                                            '?flags@ios_base@std@@QBEHXZ',
                                                                                            '?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z',
                                                                                            '?width@ios_base@std@@QAEHH@Z',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?good@ios_base@std@@QBE_NXZ',
                                                                                            '?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '?id@?$ctype@D@std@@2V0locale@2@A',
                                                                                            '??Bid@locale@std@@QAEIXZ',
                                                                                            '?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z',
                                                                                            '?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ',
                                                                                            '?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z',
                                                                                            '?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z',
                                                                                            '?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z',
                                                                                            '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z',
                                                                                            '?narrow@?$ctype@D@std@@QBEDDD@Z',
                                                                                            '?is@?$ctype@D@std@@QBE_NFD@Z',
                                                                                            '?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z',
                                                                                            '??0locale@std@@QAE@ABV01@@Z',
                                                                                            '?max@?$numeric_limits@H@std@@SAHXZ',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '?max@?$numeric_limits@I@std@@SAIXZ',
                                                                                            '?allocate@?$allocator@D@std@@QAEPADIPBX@Z',
                                                                                            '?copy@?$char_traits@D@std@@SAPADPADPBDI@Z',
                                                                                            '?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z',
                                                                                            '?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z',
                                                                                            '?to_char_type@?$char_traits@D@std@@SADABH@Z',
                                                                                            '?eq@?$char_traits@D@std@@SA_NABD0@Z',
                                                                                            '?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z',
                                                                                            '?not_eof@?$char_traits@D@std@@SAHABH@Z',
                                                                                            '?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?eof@?$char_traits@D@std@@SAHXZ',
                                                                                            '?to_int_type@?$char_traits@D@std@@SAHABD@Z',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z',
                                                                                            '?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '??0?$allocator@D@std@@QAE@XZ',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?deallocate@?$allocator@D@std@@QAEXPADI@Z',
                                                                                            '?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z',
                                                                                            '?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z',
                                                                                            '?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ',
                                                                                            '?capacity@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ',
                                                                                            '?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ',
                                                                                            '?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ',
                                                                                            '??1strstreambuf@std@@UAE@XZ',
                                                                                            '??0strstreambuf@std@@QAE@H@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z',
                                                                                            '??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@D@Z',
                                                                                            '??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z',
                                                                                            '??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z',
                                                                                            '??0?$codecvt@_WDH@std@@QAE@I@Z',
                                                                                            '?do_length@?$codecvt@_WDH@std@@MBEHABHPBD1I@Z',
                                                                                            '??1?$codecvt@_WDH@std@@MAE@XZ',
                                                                                            '?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z',
                                                                                            '?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z',
                                                                                            '?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z',
                                                                                            '?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?id@?$codecvt@_WDH@std@@2V0locale@2@A',
                                                                                            '??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z',
                                                                                            '??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z',
                                                                                            '??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z',
                                                                                            '??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z',
                                                                                            '?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z',
                                                                                            '?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z',
                                                                                            '?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z',
                                                                                            '?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z',
                                                                                            '?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z',
                                                                                            '?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z',
                                                                                            '?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z',
                                                                                            '?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z',
                                                                                            '?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'HeapDestroy',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetStringTypeExA',
                                                                                            'LCMapStringA',
                                                                                            'AreFileApisANSI',
                                                                                            'OpenEventA',
                                                                                            'ResumeThread',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CreateWaitableTimerA',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetLocaleInfoA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetThreadLocale',
                                                                                            'GetFileAttributesA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetACP',
                                                                                            'VirtualQuery',
                                                                                            'OpenThread',
                                                                                            'GetExitCodeThread',
                                                                                            'DeviceIoControl',
                                                                                            'LoadLibraryW',
                                                                                            'GetTempPathW',
                                                                                            'CopyFileW',
                                                                                            'OutputDebugStringA',
                                                                                            'LoadLibraryExW',
                                                                                            'GetComputerNameExW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'LoadLibraryA',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'FreeLibrary',
                                                                                            'lstrcmpiA',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersionExA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'ResetEvent',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVolumeInformationW',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileAttributesExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetCurrentThread',
                                                                                            'CreateFileW',
                                                                                            'GetFileTime',
                                                                                            'MoveFileExW',
                                                                                            'OpenProcess',
                                                                                            'LocalAlloc',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'lstrlenA',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateWaitableTimerW',
                                                                                            'CreateEventW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'SleepEx',
                                                                                            'AllocConsole',
                                                                                            'FreeConsole',
                                                                                            'GetConsoleWindow',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'WaitForMultipleObjects',
                                                                                            'TerminateThread',
                                                                                            'QueueUserAPC',
                                                                                            'CreateIoCompletionPort',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'TlsAlloc',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'SetWaitableTimer',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedExchange',
                                                                                            'ReleaseSemaphore',
                                                                                            'GetFileAttributesW',
                                                                                            'GetBinaryTypeW',
                                                                                            'DuplicateHandle',
                                                                                            'CreateSemaphoreA',
                                                                                            'GetModuleFileNameW',
                                                                                            'FormatMessageW',
                                                                                            'IsBadReadPtr',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'CreateProcessW',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'Sleep',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreatePipe',
                                                                                            'SetHandleInformation',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'lstrlenW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'SetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushInstructionCache',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'HeapAlloc',
                                                                                            'CloseHandle',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'RegSetValueExA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'CreateProcessWithLogonW',
                                                                                            'RegQueryValueExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'RevertToSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'LogonUserW',
                                                                                            'AccessCheck',
                                                                                            'MapGenericMask',
                                                                                            'GetFileSecurityW',
                                                                                            'ImpersonateSelf',
                                                                                            'OpenThreadToken',
                                                                                            'GetUserNameW',
                                                                                            'CryptAcquireContextW',
                                                                                            'GetLengthSid',
                                                                                            'GetTokenInformation',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'EqualSid',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetSecurityDescriptorControl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'CryptGenRandom',
                                                                                            'CryptReleaseContext',
                                                                                            'bind',
                                                                                            'WSAGetLastError',
                                                                                            'htons',
                                                                                            'ntohs',
                                                                                            'htonl',
                                                                                            'ntohl',
                                                                                            'freeaddrinfo',
                                                                                            'WSASetLastError',
                                                                                            'WSACleanup',
                                                                                            'setsockopt',
                                                                                            'WSAStartup',
                                                                                            'getsockopt',
                                                                                            'getpeername',
                                                                                            'InetPtonW',
                                                                                            'WSARecv',
                                                                                            'closesocket',
                                                                                            'ioctlsocket',
                                                                                            'getaddrinfo',
                                                                                            'WSAAddressToStringA',
                                                                                            'WSASocketW',
                                                                                            'WSASend',
                                                                                            'listen',
                                                                                            'ord1142',
                                                                                            'ord1141',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHGetSpecialFolderPathA',
                                                                                            'GetWindowRect',
                                                                                            'SetTimer',
                                                                                            'PostMessageW',
                                                                                            'SetWindowLongW',
                                                                                            'LoadIconW',
                                                                                            'SendMessageW',
                                                                                            'GetWindowLongW',
                                                                                            'GetParent',
                                                                                            'CheckDlgButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'EndDialog',
                                                                                            'ShowWindow',
                                                                                            'GetActiveWindow',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindow',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetClientRect',
                                                                                            'MapWindowPoints',
                                                                                            'SetWindowPos',
                                                                                            'MessageBoxW',
                                                                                            'UnregisterClassA',
                                                                                            'LoadStringA',
                                                                                            'GetWindowTextW',
                                                                                            'DialogBoxParamW',
                                                                                            'CertCompareCertificate',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertCloseStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertAddCertificateContextToStore',
                                                                                            'CertDeleteCertificateFromStore',
                                                                                            'CertOpenStore',
                                                                                            'CertSetCertificateContextProperty',
                                                                                            'CryptQueryObject',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpQueryDataAvailable',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpSetOption',
                                                                                            'WinHttpAddRequestHeaders',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'CommDlgExtendedError',
                                                                                            'LsaConnectUntrusted',
                                                                                            'LsaLookupAuthenticationPackage',
                                                                                            'LsaDeregisterLogonProcess',
                                                                                            'AcquireCredentialsHandleW',
                                                                                            'QueryCredentialsAttributesW',
                                                                                            'FreeContextBuffer',
                                                                                            'InitializeSecurityContextW',
                                                                                            'FreeCredentialsHandle',
                                                                                            'DeleteSecurityContext',
                                                                                            'GetUserNameExW',
                                                                                            'SCardListCardsW',
                                                                                            'SCardFreeMemory',
                                                                                            'CredUnPackAuthenticationBufferW',
                                                                                            'CredUIPromptForWindowsCredentialsW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 735,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2656,
                                                                      'SectionNames': {'.data\x00\x00\x00': 129536,
                                                                                       '.rdata\x00\x00': 2409984,
                                                                                       '.reloc\x00\x00': 229888,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 1983488,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/da739399f10955b9a133c303fbea666bd3a901593e36f9e0f924e850c8f4a1b4'},
 'da76b2792d3919ac5669ce9a2ae686676eab9e67be995f941a0f2168cd29305f': {'AddressOfEntryPoint': 322864,
                                                                      'DebugRVA': 2138192,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 2300976,
                                                                      'ExportSize': 18008,
                                                                      'IATRVA': 1773568,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOverridePredefKey',
                                                                                      'CRYPT32.dll': 'CryptBinaryToStringW',
                                                                                      'GDI32.dll': 'CreateCompatibleDC',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersInfo',
                                                                                      'KERNEL32.dll': 'VirtualFree',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'SHLoadNonloadedIconOverlayIdentifiers',
                                                                                      'SHLWAPI.dll': 'PathGetDriveNumberA',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINHTTP.dll': 'WinHttpConnect',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINTRUST.dll': 'WTHelperProvDataFromStateData',
                                                                                      'WSOCK32.dll': 'send',
                                                                                      'gdiplus.dll': 'GdipGetImageHeight',
                                                                                      'ntdll.dll': 'VerSetConditionMask',
                                                                                      'ole32.dll': 'CreateBindCtx',
                                                                                      'wer.dll': 'WerReportSubmit'},
                                                                      'ImportedFunctions': ['WinHttpOpen',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'WinHttpQueryDataAvailable',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpConnect',
                                                                                            'RtlUnwind',
                                                                                            'VerSetConditionMask',
                                                                                            'WerReportCloseHandle',
                                                                                            'WerReportCreate',
                                                                                            'WerReportSetParameter',
                                                                                            'WerReportSubmit',
                                                                                            'WinVerifyTrustEx',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'Process32NextW',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'TerminateProcess',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'IsWow64Process',
                                                                                            'GetUserDefaultLocaleName',
                                                                                            'OpenProcess',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFileSize',
                                                                                            'CompareStringW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'MoveFileExW',
                                                                                            'CopyFileW',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemTime',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'GetTempPathW',
                                                                                            'SetFileTime',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'Process32FirstW',
                                                                                            'GetLocalTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'CompareFileTime',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'DecodePointer',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FlushInstructionCache',
                                                                                            'LoadLibraryExA',
                                                                                            'VirtualQuery',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'MoveFileW',
                                                                                            'GetVersionExW',
                                                                                            'GetProcAddress',
                                                                                            'WerRegisterFile',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateDirectoryW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLongPathNameW',
                                                                                            'GetComputerNameW',
                                                                                            'LoadLibraryW',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleHandleW',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetComputerNameExW',
                                                                                            'GetTickCount64',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ReleaseMutex',
                                                                                            'CreateProcessW',
                                                                                            'SetFileAttributesW',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'CompareStringA',
                                                                                            'GetTempFileNameA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetShortPathNameW',
                                                                                            'CreateDirectoryA',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'InitOnceExecuteOnce',
                                                                                            'InitializeCriticalSection',
                                                                                            'AreFileApisANSI',
                                                                                            'HeapCreate',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'LockFile',
                                                                                            'SetFilePointer',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileAttributesW',
                                                                                            'HeapValidate',
                                                                                            'GetModuleFileNameW',
                                                                                            'ReadFile',
                                                                                            'GetFileSizeEx',
                                                                                            'UnlockFileEx',
                                                                                            'LockFileEx',
                                                                                            'VerifyVersionInfoW',
                                                                                            'HeapDestroy',
                                                                                            'UnmapViewOfFile',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'TlsAlloc',
                                                                                            'GetTempPathA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesExW',
                                                                                            'FlushViewOfFile',
                                                                                            'CreateFileA',
                                                                                            'LoadLibraryA',
                                                                                            'DeleteFileA',
                                                                                            'GetSystemInfo',
                                                                                            'HeapCompact',
                                                                                            'UnlockFile',
                                                                                            'CreateFileMappingA',
                                                                                            'FormatMessageA',
                                                                                            'GetSystemPowerStatus',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'UnregisterWaitEx',
                                                                                            'QueryDepthSList',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'ReleaseSemaphore',
                                                                                            'DeviceIoControl',
                                                                                            'WerUnregisterFile',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateEventW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'GetStringTypeW',
                                                                                            'FormatMessageW',
                                                                                            'TryEnterCriticalSection',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThread',
                                                                                            'GetExitCodeThread',
                                                                                            'GetNativeSystemInfo',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'EncodePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFinalPathNameByHandleW',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetTickCount',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCPInfo',
                                                                                            'LoadLibraryExW',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedFlushSList',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetStdHandle',
                                                                                            'GetACP',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleCP',
                                                                                            'OutputDebugStringA',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'FindFirstFileExW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetStdHandle',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FlushFileBuffers',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'CreateTimerQueue',
                                                                                            'SignalObjectAndWait',
                                                                                            'SwitchToThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetThreadPriority',
                                                                                            'GetLogicalProcessorInformation',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'ChangeTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetNumaHighestNodeNumber',
                                                                                            'GetProcessAffinityMask',
                                                                                            'SetThreadAffinityMask',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'UnregisterWait',
                                                                                            'GetThreadTimes',
                                                                                            'GetModuleHandleA',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'SetWindowLongW',
                                                                                            'PostMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'GetShellWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SendMessageW',
                                                                                            'AttachThreadInput',
                                                                                            'PostQuitMessage',
                                                                                            'IsWindow',
                                                                                            'DestroyWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'IsWindowVisible',
                                                                                            'BringWindowToTop',
                                                                                            'CreateDialogParamW',
                                                                                            'DialogBoxParamW',
                                                                                            'GetDlgItem',
                                                                                            'SetActiveWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetClientRect',
                                                                                            'GetWindowRect',
                                                                                            'MapWindowPoints',
                                                                                            'GetWindowLongW',
                                                                                            'GetClassNameW',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'LoadIconW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'UnregisterClassW',
                                                                                            'GetSystemMetrics',
                                                                                            'EnumWindows',
                                                                                            'GetMessageW',
                                                                                            'CredReadW',
                                                                                            'AccessCheck',
                                                                                            'MapGenericMask',
                                                                                            'DuplicateToken',
                                                                                            'OpenThreadToken',
                                                                                            'IsValidAcl',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'InitializeSid',
                                                                                            'InitializeAcl',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidLengthRequired',
                                                                                            'AddAce',
                                                                                            'FreeSid',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'SetEntriesInAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CredFree',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptSetHashParam',
                                                                                            'CryptImportKey',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventWriteTransfer',
                                                                                            'EventWrite',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'DuplicateTokenEx',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegEnumValueW',
                                                                                            'CopySid',
                                                                                            'GetLengthSid',
                                                                                            'IsValidSid',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegGetValueW',
                                                                                            'RegSetKeyValueW',
                                                                                            'GetUserNameW',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'CreateProcessWithTokenW',
                                                                                            'CredWriteW',
                                                                                            'CredDeleteW',
                                                                                            'CredEnumerateW',
                                                                                            'RegOverridePredefKey',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'SHGetFolderPathA',
                                                                                            'SHGetFolderPathAndSubDirW',
                                                                                            'SHCreateItemFromParsingName',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHSetKnownFolderPath',
                                                                                            'SHParseDisplayName',
                                                                                            'SHFileOperationW',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteExW',
                                                                                            'SHLoadNonloadedIconOverlayIdentifiers',
                                                                                            'CoCreateGuid',
                                                                                            'CoGetObject',
                                                                                            'CLSIDFromString',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemAlloc',
                                                                                            'PropVariantClear',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CreateBindCtx',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VarBstrCat',
                                                                                            'VariantInit',
                                                                                            'VariantChangeType',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'CryptStringToBinaryW',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CryptBinaryToStringW',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'GetUserNameExW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathFileExistsA',
                                                                                            'SHDeleteValueW',
                                                                                            'SHDeleteKeyW',
                                                                                            'SHRegGetPathW',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'SHCreateStreamOnFileA',
                                                                                            'PathStripPathW',
                                                                                            'PathStripToRootW',
                                                                                            'SHGetValueW',
                                                                                            'StrStrIW',
                                                                                            'PathFindFileNameA',
                                                                                            'SHSetValueW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsDirectoryA',
                                                                                            'PathGetDriveNumberA',
                                                                                            'HttpSendRequestA',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetReadFile',
                                                                                            'InternetConnectA',
                                                                                            'InternetOpenA',
                                                                                            'HttpQueryInfoA',
                                                                                            'InternetGetConnectedState',
                                                                                            'HttpAddRequestHeadersA',
                                                                                            'HttpOpenRequestA',
                                                                                            'InternetSetStatusCallbackA',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'accept',
                                                                                            'gethostbyname',
                                                                                            'WSAStartup',
                                                                                            'WSACleanup',
                                                                                            'WSAGetLastError',
                                                                                            'socket',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'bind',
                                                                                            'setsockopt',
                                                                                            'listen',
                                                                                            'closesocket',
                                                                                            'inet_addr',
                                                                                            'send',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdiplusStartup',
                                                                                            'GdipFree',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipAlloc',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipGetImageHeight',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'CreateDIBSection',
                                                                                            'SetDIBColorTable',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'GetAdaptersInfo',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 450,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 22333312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 80384,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 556544,
                                                                                       '.reloc\x00\x00': 98816,
                                                                                       '.rsrc\x00\x00\x00': 22333440,
                                                                                       '.text\x00\x00\x00': 1769472},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/da76b2792d3919ac5669ce9a2ae686676eab9e67be995f941a0f2168cd29305f'},
 'da961798b7edb88766c552df1b6789bc8ee12b6dddafc3adde616ea50c04749b': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/da961798b7edb88766c552df1b6789bc8ee12b6dddafc3adde616ea50c04749b'},
 'dabbb9fd97db00d5b683b6ee45e9a1e1ff097bea8d2f22541bd7f0b77d01e4c4': {'AddressOfEntryPoint': 397068,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 430080,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 21315,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'CRYPT32.dll': 'CertVerifyCertificateChainPolicy',
                                                                                      'KERNEL32.dll': 'GetVersionExW',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SLC.dll': 'SLGetSLIDList',
                                                                                      'SLWGA.dll': 'SLIsGenuineLocal',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminReleaseContext',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoSetProxyBlanket',
                                                                                      'sppc.dll': 'SLIsGenuineLocalEx',
                                                                                      'wevtapi.dll': 'EvtExportLog'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'LsaClose',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaQueryInformationPolicy',
                                                                                            'LookupAccountNameW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'LsaFreeMemory',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptImportKey',
                                                                                            'CryptVerifySignatureW',
                                                                                            'QueryServiceConfigW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetVersionExA',
                                                                                            'LocalAlloc',
                                                                                            'CloseHandle',
                                                                                            'CreateFileA',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesW',
                                                                                            'CopyFileW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteFile',
                                                                                            'HeapSetInformation',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'VirtualQuery',
                                                                                            'GetCommandLineW',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapFree',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'GetTempPathW',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetComputerNameW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetFileMUIPath',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'FreeLibrary',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LoadLibraryExW',
                                                                                            'IsWow64Process',
                                                                                            'EncodePointer',
                                                                                            'VirtualFree',
                                                                                            'SetLastError',
                                                                                            'RaiseFailFastException',
                                                                                            'VirtualAlloc',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'GetProcAddress',
                                                                                            'GetProcessHeap',
                                                                                            'DecodePointer',
                                                                                            'GetModuleHandleExW',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'HeapAlloc',
                                                                                            'GetVersionExW',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_controlfp',
                                                                                            '_purecall',
                                                                                            '_except_handler4_common',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'memmove',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'wcsrchr',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '_sopen_s',
                                                                                            'free',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wcsnicmp',
                                                                                            '_tempnam',
                                                                                            'remove',
                                                                                            '_lseek',
                                                                                            '_close',
                                                                                            '_write',
                                                                                            '_read',
                                                                                            '_errno',
                                                                                            '_open',
                                                                                            'wprintf',
                                                                                            '_vsnwprintf',
                                                                                            'wcsstr',
                                                                                            'memset',
                                                                                            'MessageBoxW',
                                                                                            'CommandLineToArgvW',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'CryptCATAdminReleaseCatalogContext',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATCatalogInfoFromContext',
                                                                                            'CryptCATAdminEnumCatalogFromHash',
                                                                                            'CryptCATAdminAcquireContext',
                                                                                            'CryptCATAdminReleaseContext',
                                                                                            'SLOpen',
                                                                                            'SLGetLicensingStatusInformation',
                                                                                            'SLGenerateOfflineInstallationId',
                                                                                            'SLGetServiceInformation',
                                                                                            'SLGetPKeyInformation',
                                                                                            'SLGetProductSkuInformation',
                                                                                            'SLClose',
                                                                                            'SLGetWindowsInformationDWORD',
                                                                                            'SLGetGenuineInformation',
                                                                                            'SLGetSLIDList',
                                                                                            'SLIsGenuineLocalEx',
                                                                                            'SLIsGenuineLocal',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'EvtExportLog'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 175,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 29608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 421376},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/dabbb9fd97db00d5b683b6ee45e9a1e1ff097bea8d2f22541bd7f0b77d01e4c4'},
 'dabec132d46a5b4376f5bd727df7de6c337016b1b77ede1a883ae4540d55a8d3': {'AddressOfEntryPoint': 42489,
                                                                      'DebugRVA': 115312,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'ole32.dll': 'CoCreateInstance',
                                                                                      'urlmon.dll': 'URLDownloadToFileW'},
                                                                      'ImportedFunctions': ['FreeLibrary',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateDirectoryW',
                                                                                            'WriteFile',
                                                                                            'SetFileTime',
                                                                                            'FreeResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiW',
                                                                                            'LeaveCriticalSection',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'DecodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'LCMapStringW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeleteFileW',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'MoveFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetLastError',
                                                                                            'GetTempPathW',
                                                                                            'lstrlenW',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'VerSetConditionMask',
                                                                                            'GetStringTypeW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'VerifyVersionInfoW',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetStartupInfoW',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'RtlUnwind',
                                                                                            'GetProcessHeap',
                                                                                            'MessageBoxW',
                                                                                            'DestroyWindow',
                                                                                            'LoadStringW',
                                                                                            'ExitWindowsEx',
                                                                                            'GetActiveWindow',
                                                                                            'wsprintfW',
                                                                                            'CharNextW',
                                                                                            'GetUserNameW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'GetTokenInformation',
                                                                                            'RegCloseKey',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'VariantInit',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'URLDownloadToFileW',
                                                                                            'InitCommonControlsEx'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 123,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 60990080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 42496,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 60990464,
                                                                                       '.text\x00\x00\x00': 107008},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/dabec132d46a5b4376f5bd727df7de6c337016b1b77ede1a883ae4540d55a8d3'},
 'daf266508c54b89056ddb95affce438ed8e933a33aa78924234b3996006f47c9': {'AddressOfEntryPoint': 713240,
                                                                      'DebugRVA': 785072,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 782336,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'MSVCP100.dll': '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                      'MSVCR100.dll': '??3@YAXPEAX@Z',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'USER32.dll': 'PeekMessageW',
                                                                                      'VBoxDDU.dll': 'VDSetParentUuid',
                                                                                      'VBoxRT.dll': 'RTCritSectLeave',
                                                                                      'ole32.dll': 'StringFromIID'},
                                                                      'ImportedFunctions': ['__crt_debugger_hook',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'wcsstr',
                                                                                            'malloc',
                                                                                            'memmove_s',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            '_CxxThrowException',
                                                                                            'wcsncpy_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            'signal',
                                                                                            '_recalloc',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            'strncmp',
                                                                                            'strstr',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memchr',
                                                                                            'strrchr',
                                                                                            '_purecall',
                                                                                            'strpbrk',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'strchr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '?_Orphan_all@_Container_base0@std@@QEAAXXZ',
                                                                                            '?_Xout_of_range@std@@YAXPEBD@Z',
                                                                                            '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                            'CharNextW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'StringFromIID',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayGetIID',
                                                                                            'SafeArrayCreateEx',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayCreate',
                                                                                            'SysAllocString',
                                                                                            'VarUI4FromStr',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SetErrorInfo',
                                                                                            'GetErrorInfo',
                                                                                            'SysAllocStringLen',
                                                                                            'VDCloseAll',
                                                                                            'VDSetUuid',
                                                                                            'VDOpen',
                                                                                            'VDCreate',
                                                                                            'VDGetFormat',
                                                                                            'VDDumpImages',
                                                                                            'VDCreateBase',
                                                                                            'VDCopy',
                                                                                            'VDRead',
                                                                                            'VDGetSize',
                                                                                            'VDRepair',
                                                                                            'VDClose',
                                                                                            'VDWrite',
                                                                                            'VDSetParentUuid',
                                                                                            '??4RTCString@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '??MRTCString@@QEBA_NAEBV0@@Z',
                                                                                            '??0RTCString@@QEAA@AEBV0@@Z',
                                                                                            'RTStrNICmp',
                                                                                            '?compare@RTCString@@QEBAHAEBV1@W4CaseSensitivity@1@@Z',
                                                                                            '?append@RTCString@@QEAAAEAV1@AEBV1@@Z',
                                                                                            'RTPathGetCurrent',
                                                                                            'RTPathStartsWithRoot',
                                                                                            '?toInt@RTCString@@QEBAHAEAI@Z',
                                                                                            '??8RTCString@@QEBA_NPEBD@Z',
                                                                                            'RTPathAbsDup',
                                                                                            'RTStrDupTag',
                                                                                            '?startsWith@RTCString@@QEBA_NAEBV1@W4CaseSensitivity@1@@Z',
                                                                                            '?isEmpty@RTCString@@QEBA_NXZ',
                                                                                            'RTFileReadAllFree',
                                                                                            'RTFileReadAll',
                                                                                            '?length@RTCString@@QEBA_KXZ',
                                                                                            'RTStrICmp',
                                                                                            'RTUuidFromUtf16',
                                                                                            'RTStrToInt32',
                                                                                            'RTStrToUInt32',
                                                                                            'RTStrToUInt16',
                                                                                            'RTStrStrip',
                                                                                            'RTStrToUInt8Ex',
                                                                                            'RTPathAbs',
                                                                                            'RTUtf16Len',
                                                                                            'RTFileRead',
                                                                                            'RTStrToUInt64',
                                                                                            'RTFileFromNative',
                                                                                            '?compare@RTCString@@QEBAHPEBDW4CaseSensitivity@1@@Z',
                                                                                            'RTPathHasExt',
                                                                                            'RTPathExt',
                                                                                            'RTStrAPrintfVTag',
                                                                                            'RTUtf16LocaleICmp',
                                                                                            'RTUtf16Cmp',
                                                                                            'RTStrmWriteEx',
                                                                                            '?jolt@RTCString@@QEAAXXZ',
                                                                                            'RTPathStripFilename',
                                                                                            'RTPathFilename',
                                                                                            'RTDirExists',
                                                                                            'RTFileExists',
                                                                                            'RTTimeMilliTS',
                                                                                            'RTPathJoin',
                                                                                            'RTStrCurrentCPToUtf8Tag',
                                                                                            'RTThreadYield',
                                                                                            'RTStrmSetMode',
                                                                                            'RTGetOptArgvFree',
                                                                                            'RTGetOptArgvFromString',
                                                                                            'RTDirCreateFullPath',
                                                                                            'RTDirClose',
                                                                                            'RTPathStripTrailingSlash',
                                                                                            'RTPathJoinA',
                                                                                            'RTStrSimplePatternMatch',
                                                                                            'RTDirRead',
                                                                                            'RTDirOpen',
                                                                                            'RTStrToInt64Ex',
                                                                                            'RTStrCopy',
                                                                                            'RTProcSelf',
                                                                                            'RTThreadSleep',
                                                                                            'RTUuidCompare',
                                                                                            'RTMsgWarning',
                                                                                            'RTStrToUInt32Full',
                                                                                            'RTBldCfgRevision',
                                                                                            'RTTimeExplode',
                                                                                            '?count@RTCString@@QEBA_KD@Z',
                                                                                            '??YRTCString@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '??YRTCString@@QEAAAEAV0@PEBD@Z',
                                                                                            '?toUInt32@RTCString@@QEBAIXZ',
                                                                                            '?substr@RTCString@@QEBA?AV1@_K0@Z',
                                                                                            '?npos@RTCString@@2_KB',
                                                                                            '?find@RTCString@@QEBA_KPEBD_K@Z',
                                                                                            'RTTimeSpecToString',
                                                                                            'RTStrFormatNumber',
                                                                                            'RTTimeNow',
                                                                                            'RTStrAPrintf2VTag',
                                                                                            'RTUuidToUtf16',
                                                                                            'RTStrStr',
                                                                                            'RTStrNCmp',
                                                                                            'RTStrCmp',
                                                                                            'RTPathReal',
                                                                                            'RTGetOptFetchValue',
                                                                                            'RTStrPrintf',
                                                                                            'RTUuidCreate',
                                                                                            'RTUuidFromStr',
                                                                                            'SUPR3Install',
                                                                                            'SUPR3Uninstall',
                                                                                            'RTMemReallocTag',
                                                                                            'RTFileReadAt',
                                                                                            'RTPrintfV',
                                                                                            'RTMsgErrorV',
                                                                                            'RTUuidIsNull',
                                                                                            'RTUuidToStr',
                                                                                            '??_7RTCString@@6B@',
                                                                                            '?printfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z',
                                                                                            'RTR3InitExe',
                                                                                            'RTMsgError',
                                                                                            'g_pStdOut',
                                                                                            'g_pStdErr',
                                                                                            'RTStrmPrintf',
                                                                                            'RTStrmFlush',
                                                                                            'RTUuidClear',
                                                                                            '?c_str@RTCString@@QEBAPEBDXZ',
                                                                                            'RTStrmOpen',
                                                                                            'RTMsgErrorExit',
                                                                                            'g_pStdIn',
                                                                                            'RTStrmReadEx',
                                                                                            'RTStrmClose',
                                                                                            'ASMAtomicXchgU8',
                                                                                            '??1RTCString@@UEAA@XZ',
                                                                                            '??4RTCString@@QEAAAEAV0@PEBD@Z',
                                                                                            '??0RTCString@@QEAA@PEBD@Z',
                                                                                            'RTStrStripL',
                                                                                            'RTSha256',
                                                                                            'RTSha256ToString',
                                                                                            'RTGetOptInit',
                                                                                            'RTGetOpt',
                                                                                            '?append@RTCString@@QEAAAEAV1@D@Z',
                                                                                            '?append@RTCString@@QEAAAEAV1@PEBD@Z',
                                                                                            'RTStrFree',
                                                                                            'RTFileDelete',
                                                                                            'RTFileWrite',
                                                                                            'RTFileToNative',
                                                                                            'RTErrConvertFromWin32',
                                                                                            'RTFileGetSize',
                                                                                            'RTPathAppend',
                                                                                            'RTStrToUInt32Ex',
                                                                                            'RTCritSectRwEnterShared',
                                                                                            'RTCritSectRwLeaveShared',
                                                                                            'RTCritSectRwGetWriteRecursion',
                                                                                            'RTCritSectInitEx',
                                                                                            'RTCritSectDelete',
                                                                                            'RTMemAllocTag',
                                                                                            'RTFileClose',
                                                                                            'RTMemFree',
                                                                                            'RTFileOpen',
                                                                                            '?cleanup@RTCString@@IEAAXXZ',
                                                                                            'RTPrintf',
                                                                                            'RTCritSectRwLeaveExcl',
                                                                                            'RTCritSectRwEnterExcl',
                                                                                            'RTCritSectRwIsWriteOwner',
                                                                                            'RTCritSectEnter',
                                                                                            'RTStrSimplePatternMultiMatch',
                                                                                            '??0RTCString@@QEAA@XZ',
                                                                                            'RTStrToUInt64Ex',
                                                                                            'RTStrToUtf16ExTag',
                                                                                            'RTStrNLen',
                                                                                            'RTLogLoggerEx',
                                                                                            'RTLogRelDefaultInstance',
                                                                                            'RTStrCalcUtf16LenEx',
                                                                                            'RTPathStripExt',
                                                                                            'RTUtf16ToUtf8ExTag',
                                                                                            'RTStrAllocTag',
                                                                                            '??H@YA?BVRTCString@@AEBV0@PEBD@Z',
                                                                                            'RTThreadSelf',
                                                                                            'RTPathUserHome',
                                                                                            'RTEnvGetEx',
                                                                                            'RTProcGetExecutablePath',
                                                                                            'RTSystemQueryAvailableRam',
                                                                                            'RTSystemQueryTotalRam',
                                                                                            'RTSystemQueryDmiString',
                                                                                            'RTSystemQueryOSInfo',
                                                                                            'RTBldCfgTargetDotArch',
                                                                                            'RTLogSetBuffering',
                                                                                            'RTLogRelSetDefaultInstance',
                                                                                            'RTLogFlush',
                                                                                            'RTLogSetGroupLimit',
                                                                                            'RTLogCreateEx',
                                                                                            'RTThreadNativeSelf',
                                                                                            'RTCritSectRwInitEx',
                                                                                            'RTCritSectRwDelete',
                                                                                            'RTCritSectLeave',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'DeviceIoControl',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'lstrcmpiW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThread',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'lstrlenW',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 320,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 15360,
                                                                                       '.pdata\x00\x00': 32768,
                                                                                       '.rdata\x00\x00': 356864,
                                                                                       '.reloc\x00\x00': 7168,
                                                                                       '.text\x00\x00\x00': 778240},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/daf266508c54b89056ddb95affce438ed8e933a33aa78924234b3996006f47c9'},
 'daf40d9a2ec0f85748aa446e41c11cf7188fdfa0f00d84652a38699c5e04863a': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 24596,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12624,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/clean/daf40d9a2ec0f85748aa446e41c11cf7188fdfa0f00d84652a38699c5e04863a'},
 'daf43d1b5b5f8fe14570ce8378beb82761787621562b4464557853ee20e76359': {'AddressOfEntryPoint': 40000,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 306920,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 307200,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/daf43d1b5b5f8fe14570ce8378beb82761787621562b4464557853ee20e76359'},
 'db69c3556c1408ae37cbdedca474de336e02deb2e2dbfa6f5cc54c82761f4557': {'AddressOfEntryPoint': 148704,
                                                                      'DebugRVA': 5200,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 167936,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EventActivityIdControl',
                                                                                      'KERNEL32.dll': 'GetSystemInfo',
                                                                                      'USER32.dll': 'OpenInputDesktop',
                                                                                      'WINSTA.dll': 'WinStationIsSessionRemoteable',
                                                                                      'WTSAPI32.dll': 'WTSUnRegisterSessionNotification',
                                                                                      'msvcrt.dll': '_onexit',
                                                                                      'ntdll.dll': 'RtlMultiByteToUnicodeN'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'StartServiceW',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'EventActivityIdControl',
                                                                                            'GetCommandLineW',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateWaitableTimerW',
                                                                                            'SetWaitableTimer',
                                                                                            'SetLastError',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetOverlappedResult',
                                                                                            'WriteFile',
                                                                                            'CancelIo',
                                                                                            'ProcessIdToSessionId',
                                                                                            'ReadFileEx',
                                                                                            'QueueUserAPC',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'SwitchToThread',
                                                                                            'CreateThread',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'DeleteCriticalSection',
                                                                                            'WaitForMultipleObjects',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'CloseHandle',
                                                                                            'CreateMutexW',
                                                                                            'GetModuleHandleExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'OpenEventW',
                                                                                            'LocalFree',
                                                                                            'TlsGetValue',
                                                                                            'GetModuleHandleExW',
                                                                                            'WaitForSingleObject',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsSetValue',
                                                                                            'LeaveCriticalSection',
                                                                                            'ReleaseSemaphore',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'EnterCriticalSection',
                                                                                            'ResetEvent',
                                                                                            'OpenThread',
                                                                                            'CreateSemaphoreW',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'SetThreadDesktop',
                                                                                            'OpenDesktopW',
                                                                                            'DestroyWindow',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'PostMessageW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'CreateWindowExW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetClassInfoExW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'PostQuitMessage',
                                                                                            'GetSystemMetrics',
                                                                                            'ScreenToClient',
                                                                                            'SystemParametersInfoW',
                                                                                            'CloseDesktop',
                                                                                            'OpenInputDesktop',
                                                                                            'memcpy_s',
                                                                                            '_vsnwprintf',
                                                                                            'memcpy',
                                                                                            '_ismbblead',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_purecall',
                                                                                            '_wtoi64',
                                                                                            '_wtoi',
                                                                                            'wcsstr',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'memset',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_acmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlMultiByteToUnicodeN',
                                                                                            'WinStationVirtualOpenEx',
                                                                                            'WinStationIsSessionRemoteable',
                                                                                            'WTSVirtualChannelClose',
                                                                                            'WTSVirtualChannelOpen',
                                                                                            'WTSVirtualChannelQuery',
                                                                                            'WTSFreeMemory',
                                                                                            'WTSRegisterSessionNotification',
                                                                                            'WTSUnRegisterSessionNotification'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 136,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2384,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 150016},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/db69c3556c1408ae37cbdedca474de336e02deb2e2dbfa6f5cc54c82761f4557'},
 'db798bd9b01279cf23d34f0543fbef7da01f1368d39e8ebea89ec724b027e13b': {'AddressOfEntryPoint': 10782,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1168,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/db798bd9b01279cf23d34f0543fbef7da01f1368d39e8ebea89ec724b027e13b'},
 'dbd6048833df804524633ead2b73f216e717ad74d082ff436349f69200ad11fa': {'AddressOfEntryPoint': 133680,
                                                                      'DebugRVA': 5264,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 135392,
                                                                      'ExportSize': 7982,
                                                                      'IATRVA': 151552,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptExportKey',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'HTTPAPI.dll': 'HttpDeleteServiceConfiguration',
                                                                                      'KERNEL32.dll': 'VerifyVersionInfoW',
                                                                                      'NETAPI32.dll': 'NetLocalGroupDelMembers',
                                                                                      'OLEAUT32.dll': 'SafeArrayCreate',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WS2_32.dll': 'WSACleanup',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlGetNtProductType',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['InitializeSecurityDescriptor',
                                                                                            'CreateWellKnownSid',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'MakeSelfRelativeSD',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegCloseKey',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'CloseServiceHandle',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptGetUserKey',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptGenKey',
                                                                                            'CryptReleaseContext',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegQueryValueExW',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorLength',
                                                                                            'BuildTrusteeWithSidW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'LookupAccountNameW',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaAddAccountRights',
                                                                                            'LsaClose',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'RegGetValueW',
                                                                                            'EnumDependentServicesW',
                                                                                            'ControlService',
                                                                                            'StartServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'CryptSetProvParam',
                                                                                            'GetExplicitEntriesFromAclW',
                                                                                            'EqualSid',
                                                                                            'GetAce',
                                                                                            'GetAclInformation',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'CryptGetProvParam',
                                                                                            'RegDeleteValueW',
                                                                                            'CheckTokenMembership',
                                                                                            'CryptExportKey',
                                                                                            'CreateFileW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'WideCharToMultiByte',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FormatMessageA',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GlobalFree',
                                                                                            'GetStdHandle',
                                                                                            'GlobalAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'SetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLocalTime',
                                                                                            'GetComputerNameW',
                                                                                            'VerSetConditionMask',
                                                                                            'WriteFile',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'CloseHandle',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCommandLineW',
                                                                                            'CreateDirectoryW',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteFileW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalAlloc',
                                                                                            'GetVersionExW',
                                                                                            'VerifyVersionInfoW',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__p__fmode',
                                                                                            '__wgetmainargs',
                                                                                            '_except_handler4_common',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wtoi',
                                                                                            'wcsnlen',
                                                                                            '_purecall',
                                                                                            'wcsrchr',
                                                                                            'wprintf',
                                                                                            '_wcsicmp',
                                                                                            'memcpy',
                                                                                            '_wcsupr',
                                                                                            '_controlfp',
                                                                                            'wcsstr',
                                                                                            'strcpy_s',
                                                                                            'sprintf_s',
                                                                                            'strcat_s',
                                                                                            'strrchr',
                                                                                            '_vsnprintf_s',
                                                                                            'strnlen',
                                                                                            '_vsnwprintf_s',
                                                                                            '_snprintf_s',
                                                                                            'wcschr',
                                                                                            'iswxdigit',
                                                                                            'memmove',
                                                                                            'iswalnum',
                                                                                            '_vscwprintf',
                                                                                            '_stricmp',
                                                                                            'strchr',
                                                                                            'isxdigit',
                                                                                            'wcstok',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            'memset',
                                                                                            'LoadStringA',
                                                                                            'LoadStringW',
                                                                                            'CoCreateInstance',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoQueryProxyBlanket',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayPutElement',
                                                                                            'VariantClear',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreate',
                                                                                            'NetLocalGroupDelMembers',
                                                                                            'WSAStartup',
                                                                                            'WSAStringToAddressW',
                                                                                            'WSAGetLastError',
                                                                                            'WSACleanup',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertDeleteCertificateFromStore',
                                                                                            'CertFindCertificateInStore',
                                                                                            'CertCloseStore',
                                                                                            'CertAddCertificateContextToStore',
                                                                                            'CertOpenStore',
                                                                                            'CertSetCertificateContextProperty',
                                                                                            'CertCreateSelfSignCertificate',
                                                                                            'CryptEncodeObjectEx',
                                                                                            'CertStrToNameW',
                                                                                            'CertFreeCertificateContext',
                                                                                            'HttpSetServiceConfiguration',
                                                                                            'HttpInitialize',
                                                                                            'HttpTerminate',
                                                                                            'HttpDeleteServiceConfiguration',
                                                                                            'RtlGetNtProductType'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 193,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 139776},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/dbd6048833df804524633ead2b73f216e717ad74d082ff436349f69200ad11fa'},
 'dc0dde1b7feed4184a181c2ce437a1b2f1b67da052105392e852654710da2132': {'AddressOfEntryPoint': 69456,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ProcessTrace',
                                                                                      'GDI32.dll': 'GetCurrentDpiInfo',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'SETUPAPI.dll': 'SetupDiOpenDeviceInterfaceW',
                                                                                      'USER32.dll': 'GetMonitorInfoW',
                                                                                      'WMI.dll': 'WmiDevInstToInstanceNameW',
                                                                                      'api-ms-win-shcore-scaling-l1-1-1.dll': 'SetProcessDpiAwareness',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegGetValueW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorA',
                                                                                            'StartTraceA',
                                                                                            'ControlTraceA',
                                                                                            'OpenTraceA',
                                                                                            'EnableTraceEx2',
                                                                                            'ProcessTrace',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemInfo',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'CreateFileW',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'CreateDirectoryA',
                                                                                            'LoadLibraryW',
                                                                                            'CloseHandle',
                                                                                            'GetLocalTime',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFree',
                                                                                            'Beep',
                                                                                            'OutputDebugStringA',
                                                                                            'SetLastError',
                                                                                            'CreateThread',
                                                                                            'OutputDebugStringW',
                                                                                            'WriteConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'ReadConsoleInputA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'WriteFile',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            'memcpy_s',
                                                                                            '_CxxThrowException',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'free',
                                                                                            'isspace',
                                                                                            'strtoul',
                                                                                            'isxdigit',
                                                                                            'tolower',
                                                                                            'iswprint',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_commode',
                                                                                            'memcpy',
                                                                                            'atoi',
                                                                                            '_strnicmp',
                                                                                            '_resetstkoflw',
                                                                                            '_fmode',
                                                                                            '_callnewh',
                                                                                            '__C_specific_handler',
                                                                                            'strcpy_s',
                                                                                            '_wcsnicmp',
                                                                                            'printf',
                                                                                            '_vsnprintf',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memset',
                                                                                            'EnumDisplayMonitors',
                                                                                            'EnumDisplaySettingsExW',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowDC',
                                                                                            'GetAutoRotationState',
                                                                                            'GetSystemMetrics',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetCurrentDpiInfo',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDriverInfoList',
                                                                                            'SetupDiOpenDevRegKey',
                                                                                            'SetupDiGetDriverInfoDetailA',
                                                                                            'SetupDiEnumDriverInfoA',
                                                                                            'SetupDiBuildDriverInfoList',
                                                                                            'SetupDiSetDeviceInstallParamsA',
                                                                                            'SetupDiGetClassDevsA',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiEnumDeviceInterfaces',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiGetDeviceInterfaceDetailW',
                                                                                            'SetupDiOpenDeviceInterfaceW',
                                                                                            'WmiExecuteMethodW',
                                                                                            'WmiQuerySingleInstanceW',
                                                                                            'WmiCloseBlock',
                                                                                            'WmiOpenBlock',
                                                                                            'WmiDevInstToInstanceNameW',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetDpiForMonitor',
                                                                                            'SetProcessDpiAwareness'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 128,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1768,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 74752},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/dc0dde1b7feed4184a181c2ce437a1b2f1b67da052105392e852654710da2132'},
 'dc18bf3b06f1ade38e8ef24c8071b2cc6c6893cc2e62e1d6c6d847ec521976a0': {'AddressOfEntryPoint': 12879,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_AddMasked',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileAttributesA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GlobalFree',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'MulDiv',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'ScreenToClient',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetForegroundWindow',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassA',
                                                                                            'EndDialog',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'SendMessageTimeoutA',
                                                                                            'GetDC',
                                                                                            'LoadImageA',
                                                                                            'GetDlgItem',
                                                                                            'FindWindowExA',
                                                                                            'IsWindow',
                                                                                            'SetClipboardData',
                                                                                            'SetWindowLongA',
                                                                                            'EmptyClipboard',
                                                                                            'SetTimer',
                                                                                            'CreateDialogParamA',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteValueA',
                                                                                            'SetFileSecurityA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_AddMasked',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 5360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/dc18bf3b06f1ade38e8ef24c8071b2cc6c6893cc2e62e1d6c6d847ec521976a0'},
 'dc239067c33bd9767a8deea1db78a0303f6dc639498609437d904bd3292ed54b': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 75496,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 75776,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/dc239067c33bd9767a8deea1db78a0303f6dc639498609437d904bd3292ed54b'},
 'dcb9eecd222843185ab8e6722660894813efa76fa6d4503ac54fcb0a5685936f': {'AddressOfEntryPoint': 7648,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'MSWSOCK.dll': 'GetSocketErrorMessageW',
                                                                                      'WS2_32.dll': 'GetAddrInfoW',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleMode',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileType',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetEnvironmentVariableW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'msvcrt.dll': 'fflush',
                                                                                      'ntdll.dll': 'WinSqmSetDWORD'},
                                                                      'ImportedFunctions': ['_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_iob',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_vscwprintf',
                                                                                            'fwprintf',
                                                                                            'wcsrchr',
                                                                                            'vswprintf_s',
                                                                                            '_fileno',
                                                                                            '_setmode',
                                                                                            '_get_osfhandle',
                                                                                            '_write',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'wprintf',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'fgetpos',
                                                                                            '_XcptFilter',
                                                                                            'fflush',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmSetDWORD',
                                                                                            'recv',
                                                                                            'WSAGetLastError',
                                                                                            'socket',
                                                                                            'closesocket',
                                                                                            'WSASetLastError',
                                                                                            'send',
                                                                                            'GetHostNameW',
                                                                                            'WSAStartup',
                                                                                            'connect',
                                                                                            'FreeAddrInfoW',
                                                                                            'GetAddrInfoW',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'HeapSetInformation',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetSocketErrorMessageW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'GetFileType',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 17,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 5632},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/dcb9eecd222843185ab8e6722660894813efa76fa6d4503ac54fcb0a5685936f'},
 'dd068b44a27674478b0711346693f017af4c8d9c58a85840593cb0535734367d': {'AddressOfEntryPoint': 14047,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MulDiv',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'RegisterClassA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'wvsprintfA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'EmptyClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'SetForegroundWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 157,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 26160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 26624,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/dd068b44a27674478b0711346693f017af4c8d9c58a85840593cb0535734367d'},
 'dd0f60e96fac68fbd5b86382e541408c613bd0f871d0e0a1ef9ab6e7b26e545c': {'AddressOfEntryPoint': 61808,
                                                                      'DebugRVA': 4832,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'CRYPTBASE.dll': 'SystemFunction036',
                                                                                      'MSWSOCK.dll': 'AcceptEx',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'RaiseException',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'ReadFile',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'BindIoCompletionCallback',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadResource',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'VirtualAlloc',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'CreateThread',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumValueW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlCaptureContext',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-string-l2-1-0.dll': 'CharPrevW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcpynW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'WaitForSingleObject',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetVersionExW',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'DeleteTimerQueueTimer',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['_unlock',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_initterm',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__C_specific_handler',
                                                                                            '_wcmdln',
                                                                                            '_XcptFilter',
                                                                                            '_fmode',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '_commode',
                                                                                            '_onexit',
                                                                                            'isdigit',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'memmove',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '_wcsicmp',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'realloc',
                                                                                            'wcscat_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '_exit',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'SetEvent',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'EnterCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'SizeofResource',
                                                                                            'GetProcAddress',
                                                                                            'LoadResource',
                                                                                            'CharNextW',
                                                                                            'CharPrevW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RaiseException',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetVersionExW',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'MultiByteToWideChar',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'HeapFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcessId',
                                                                                            'CreateThread',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'CreateTimerQueue',
                                                                                            'DeleteTimerQueueEx',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'WaitForMultipleObjects',
                                                                                            'BindIoCompletionCallback',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcpynW',
                                                                                            'SystemFunction036',
                                                                                            'GetAcceptExSockaddrs',
                                                                                            'AcceptEx',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 112,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 8144,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 76288},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/dd0f60e96fac68fbd5b86382e541408c613bd0f871d0e0a1ef9ab6e7b26e545c'},
 'dd63c365aeda14c6bf602898207cf73df58f7b91176858ad0e27dfdf3fd4746e': {'AddressOfEntryPoint': 12491,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2112,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 23040},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/dd63c365aeda14c6bf602898207cf73df58f7b91176858ad0e27dfdf3fd4746e'},
 'dd9fbf8c32bb3a29f7062baba23b84fb9f7395a4ab3fb7001071154cde92f7d5': {'AddressOfEntryPoint': 10656,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'PostQuitMessage',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'GetFileAttributesW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LocalAlloc',
                                                                                            'IsDBCSLeadByte',
                                                                                            'RegisterApplicationRestart',
                                                                                            'HeapAlloc',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetStockObject',
                                                                                            'DefWindowProcW',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'LoadStringW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'PostQuitMessage',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_ismbblead',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_acmdln',
                                                                                            '__setusermatherr',
                                                                                            '__getmainargs',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            '_initterm',
                                                                                            'memset',
                                                                                            'CommandLineToArgvW',
                                                                                            'StrCmpNIW',
                                                                                            'PathAppendW',
                                                                                            'StrCmpIW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFindExtensionW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 65,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 499888,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 500224,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/dd9fbf8c32bb3a29f7062baba23b84fb9f7395a4ab3fb7001071154cde92f7d5'},
 'de20efd8944a05a52f63ba16d5ef9e58c0f9d658e5ab743fd3ff839cf817be1b': {'AddressOfEntryPoint': 81524,
                                                                      'DebugRVA': 4464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'DNSAPI.dll': 'DnsQuery_A',
                                                                                      'KERNEL32.dll': 'GetCurrentProcess',
                                                                                      'RPCRT4.dll': 'RpcStringFreeA',
                                                                                      'WININET.dll': 'InternetReadFile',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'msvcrt.dll': 'exit'},
                                                                      'ImportedFunctions': ['_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '_controlfp',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            'system',
                                                                                            'fgetc',
                                                                                            'fscanf',
                                                                                            'time',
                                                                                            'localtime',
                                                                                            'asctime',
                                                                                            'fopen',
                                                                                            '_getche',
                                                                                            'toupper',
                                                                                            'fclose',
                                                                                            'tolower',
                                                                                            'fprintf',
                                                                                            'isdigit',
                                                                                            'atoi',
                                                                                            'isalpha',
                                                                                            'printf',
                                                                                            'exit',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcess',
                                                                                            'DnsRecordListFree',
                                                                                            'DnsQuery_A',
                                                                                            'InternetAttemptConnect',
                                                                                            'InternetOpenA',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenUrlA',
                                                                                            'InternetReadFile',
                                                                                            'WSAStartup',
                                                                                            'htons',
                                                                                            'getservbyport',
                                                                                            'socket',
                                                                                            'WSAGetLastError',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'WSACleanup',
                                                                                            'setsockopt',
                                                                                            'recv',
                                                                                            'inet_ntoa',
                                                                                            'inet_addr',
                                                                                            'UuidToStringA',
                                                                                            'RpcStringFreeA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 62,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 79872},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/de20efd8944a05a52f63ba16d5ef9e58c0f9d658e5ab743fd3ff839cf817be1b'},
 'de72dcb5e14f7d6a4b3e55b273a10a16c6de77dbb7a6f8575ea14e52aa58583c': {'AddressOfEntryPoint': 197936,
                                                                      'DebugRVA': 614896,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49600,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 671744,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'COMCTL32.dll': 'ImageList_CoCreateInstance',
                                                                                      'DUI70.dll': '?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z',
                                                                                      'DUser.dll': 'ForwardGadgetMessage',
                                                                                      'GDI32.dll': 'Rectangle',
                                                                                      'KERNEL32.dll': 'SetProcessWorkingSetSize',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'AssocQueryStringW',
                                                                                      'USER32.dll': 'TranslateMessage',
                                                                                      'UxTheme.dll': 'OpenThemeData',
                                                                                      'VDMDBG.dll': 'VDMEnumTaskWOWEx',
                                                                                      'api-ms-win-core-appcompat-l1-1-1.dll': 'BaseFreeAppCompatDataForProcess',
                                                                                      'api-ms-win-core-datetime-l1-1-1.dll': 'GetDateFormatEx',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'DebugBreak',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'ResolveDelayLoadedAPI',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetErrorMode',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'QueryDosDeviceW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'DuplicateHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapReAlloc',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'CancelSynchronousIo',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetComputerNameW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetLocaleInfoW',
                                                                                      'api-ms-win-core-localization-l2-1-0.dll': 'GetNumberFormatEx',
                                                                                      'api-ms-win-core-localization-obsolete-l1-2-0.dll': 'GetNumberFormatW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'ReadProcessMemory',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchAppend',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-psapi-l1-1-0.dll': 'QueryFullProcessImageNameW',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegNotifyChangeKeyValue',
                                                                                      'api-ms-win-core-shlwapi-legacy-l1-1-0.dll': 'PathStripPathW',
                                                                                      'api-ms-win-core-shlwapi-obsolete-l1-1-0.dll': 'QISearch',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringEx',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetNativeSystemInfo',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'QueueUserWorkItem',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'SystemTimeToFileTime',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'GetFileVersionInfoExW',
                                                                                      'api-ms-win-core-wow64-l1-1-0.dll': 'IsWow64Process',
                                                                                      'api-ms-win-devices-config-l1-1-1.dll': 'CM_Open_Class_KeyW',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'TraceMessage',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventUnregister',
                                                                                      'api-ms-win-power-setting-l1-1-0.dll': 'PowerSettingRegisterNotification',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'IsWellKnownSid',
                                                                                      'credui.dll': 'CredUIPromptForCredentialsW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlNumberOfSetBitsUlongPtr',
                                                                                      'pcwum.dll': 'PcwAddQueryItem'},
                                                                      'ImportedFunctions': ['GetDeviceCaps',
                                                                                            'CreateDIBSection',
                                                                                            'DeleteObject',
                                                                                            'SelectObject',
                                                                                            'GetTextExtentPointW',
                                                                                            'CreatePen',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'Rectangle',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'IsWindowVisible',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'EndDialog',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemInfoW',
                                                                                            'CreateDialogParamW',
                                                                                            'SetGestureConfig',
                                                                                            'GetGestureInfo',
                                                                                            'CloseGestureInfoHandle',
                                                                                            'CreateWindowExW',
                                                                                            'SendMessageW',
                                                                                            'PostMessageW',
                                                                                            'GetCursorPos',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowLongW',
                                                                                            'IsIconic',
                                                                                            'IsZoomed',
                                                                                            'SetWindowLongW',
                                                                                            'MonitorFromPoint',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'HungWindowFromGhostWindow',
                                                                                            'CreateWindowInBand',
                                                                                            'GetWindowBand',
                                                                                            'GetWindowCompositionAttribute',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetClientRect',
                                                                                            'RedrawWindow',
                                                                                            'KillTimer',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'GetSubMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemCount',
                                                                                            'RemoveMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'DestroyMenu',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SwitchToThisWindow',
                                                                                            'MessageBeep',
                                                                                            'GetDoubleClickTime',
                                                                                            'GetCurrentInputMessageSource',
                                                                                            'SetMenuDefaultItem',
                                                                                            'RegisterWindowMessageW',
                                                                                            'UnregisterClassW',
                                                                                            'ShowWindowAsync',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetKeyState',
                                                                                            'EqualRect',
                                                                                            'CopyRect',
                                                                                            'InternalGetWindowText',
                                                                                            'GetSystemMetrics',
                                                                                            'SetFocus',
                                                                                            'GetLastActivePopup',
                                                                                            'SetTimer',
                                                                                            'GetPropW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetParent',
                                                                                            'DialogBoxParamW',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxW',
                                                                                            'MapWindowPoints',
                                                                                            'PtInRect',
                                                                                            'GetClassNameW',
                                                                                            'GetClassLongW',
                                                                                            'CopyIcon',
                                                                                            'TrackPopupMenu',
                                                                                            'GetScrollPos',
                                                                                            'DeleteMenu',
                                                                                            'GetMessagePos',
                                                                                            'OpenClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'AppendMenuW',
                                                                                            'CloseClipboard',
                                                                                            'GetFocus',
                                                                                            'InvalidateRect',
                                                                                            'CreatePopupMenu',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'DestroyIcon',
                                                                                            'IsWindowEnabled',
                                                                                            'LoadImageW',
                                                                                            'OpenIcon',
                                                                                            'CharUpperBuffW',
                                                                                            'IsWindow',
                                                                                            'DefWindowProcW',
                                                                                            'LoadIconW',
                                                                                            'UpdateWindow',
                                                                                            'GetWindow',
                                                                                            'LoadMenuW',
                                                                                            'IsHungAppWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'OpenDesktopW',
                                                                                            'SetMenu',
                                                                                            'GetMenu',
                                                                                            'GetThreadDesktop',
                                                                                            'SetThreadDesktop',
                                                                                            'EnumDesktopWindows',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'SetForegroundWindow',
                                                                                            'CloseDesktop',
                                                                                            'EnumDesktopsW',
                                                                                            'GetProcessWindowStation',
                                                                                            'RegisterClassExW',
                                                                                            'GetMenuItemID',
                                                                                            'TranslateAcceleratorW',
                                                                                            'GetMessageW',
                                                                                            'LoadAcceleratorsW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'FindWindowW',
                                                                                            'GetGuiResources',
                                                                                            'CharLowerW',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowTextW',
                                                                                            'DestroyWindow',
                                                                                            'TranslateMessage',
                                                                                            '_ui64tow_s',
                                                                                            'wcstok_s',
                                                                                            'iswspace',
                                                                                            '_stricmp',
                                                                                            '_itow_s',
                                                                                            '_strnicmp',
                                                                                            'bsearch',
                                                                                            '_wtol',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'memmove',
                                                                                            '_XcptFilter',
                                                                                            'iswdigit',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            'memcpy_s',
                                                                                            'wcschr',
                                                                                            'iswalpha',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_wcsicmp',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            'wcsstr',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_lock',
                                                                                            'wcsrchr',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'swscanf_s',
                                                                                            '_wcsnicmp',
                                                                                            '_purecall',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'floor',
                                                                                            'ceil',
                                                                                            '_i64tow_s',
                                                                                            '_ftol2_sse',
                                                                                            '_wtoi',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_ftol2',
                                                                                            '_CIsqrt',
                                                                                            '_vsnwprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_wcmdln',
                                                                                            'towupper',
                                                                                            'wcstod',
                                                                                            'memset',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayPutElement',
                                                                                            'VariantClear',
                                                                                            'GetSystemInfo',
                                                                                            'GetComputerNameExW',
                                                                                            'GetSystemFirmwareTable',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetLocalTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetPhysicallyInstalledSystemMemory',
                                                                                            'GetTickCount64',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetSystemTime',
                                                                                            'GetVersionExW',
                                                                                            'GetLogicalProcessorInformationEx',
                                                                                            'GetNativeSystemInfo',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcessToken',
                                                                                            'SetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'ProcessIdToSessionId',
                                                                                            'SetPriorityClass',
                                                                                            'GetPriorityClass',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'OpenProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcessTimes',
                                                                                            'GetThreadPriority',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateProcessW',
                                                                                            'TerminateProcess',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetErrorMode',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeLibrary',
                                                                                            'OutputDebugStringA',
                                                                                            'OutputDebugStringW',
                                                                                            'DebugBreak',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapSetInformation',
                                                                                            'HeapReAlloc',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'GetThreadPreferredUILanguages',
                                                                                            'FormatMessageW',
                                                                                            'GetLocaleInfoEx',
                                                                                            'GetThreadUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'GetLengthSid',
                                                                                            'CreateWellKnownSid',
                                                                                            'EqualSid',
                                                                                            'CopySid',
                                                                                            'GetTokenInformation',
                                                                                            'SetTokenInformation',
                                                                                            'IsWellKnownSid',
                                                                                            'CloseHandle',
                                                                                            'DuplicateHandle',
                                                                                            'InitializeCriticalSection',
                                                                                            'InitOnceExecuteOnce',
                                                                                            'OpenEventW',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TryEnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'CompareStringOrdinal',
                                                                                            'CompareStringEx',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatEx',
                                                                                            'DeviceIoControl',
                                                                                            'CancelSynchronousIo',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VirtualUnlock',
                                                                                            'ReadProcessMemory',
                                                                                            'GetFileType',
                                                                                            'GetDriveTypeW',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'FindVolumeClose',
                                                                                            'FindNextVolumeW',
                                                                                            'CreateFileW',
                                                                                            'FindFirstVolumeW',
                                                                                            'GetTempPathW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'FindNextChangeNotification',
                                                                                            'GetLongPathNameW',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'CompareFileTime',
                                                                                            'FindClose',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'GetFileAttributesExW',
                                                                                            'QueryDosDeviceW',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'PathCchCanonicalize',
                                                                                            'PathCchCombine',
                                                                                            'PathCchAppend',
                                                                                            'CM_Open_Class_KeyW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'PowerSettingUnregisterNotification',
                                                                                            'PowerSettingRegisterNotification',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LoadLibraryA',
                                                                                            'MulDiv',
                                                                                            'LoadLibraryW',
                                                                                            'GetDurationFormatEx',
                                                                                            'GetComputerNameW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathRemoveBlanksW',
                                                                                            'PathRemoveBackslashW',
                                                                                            'PathIsRelativeW',
                                                                                            'PathIsPrefixW',
                                                                                            'SHExpandEnvironmentStringsW',
                                                                                            'PathFileExistsW',
                                                                                            'PathGetArgsW',
                                                                                            'PathStripPathW',
                                                                                            'QueueUserWorkItem',
                                                                                            'GetNumberFormatW',
                                                                                            'StrRChrIW',
                                                                                            'SHLoadIndirectString',
                                                                                            'StrStrIW',
                                                                                            'StrStrW',
                                                                                            'StrTrimW',
                                                                                            'StrToIntExW',
                                                                                            'QISearch',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'PcwCreateQuery',
                                                                                            'PcwCollectData',
                                                                                            'PcwAddQueryItem',
                                                                                            'IsWow64Process',
                                                                                            'GetNumberFormatEx',
                                                                                            'ImageList_CoCreateInstance',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlIpv4AddressToStringExW',
                                                                                            'RtlIpv6AddressToStringExW',
                                                                                            'WinSqmAddToStream',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'WinSqmSetDWORD',
                                                                                            'NtQueryTimerResolution',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtQueryInformationThread',
                                                                                            'NtQuerySystemInformationEx',
                                                                                            'NtQueryInformationProcess',
                                                                                            'LdrQueryProcessModuleInformation',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlTimeToElapsedTimeFields',
                                                                                            'NtQueryObject',
                                                                                            'NtQueryInformationFile',
                                                                                            'RtlSecondsSince1970ToTime',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlNtStatusToDosErrorNoTeb',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenFile',
                                                                                            'RtlCheckPortableOperatingSystem',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlNumberOfSetBitsUlongPtr',
                                                                                            'CloseThemeData',
                                                                                            'EndPanningFeedback',
                                                                                            'BeginPanningFeedback',
                                                                                            'UpdatePanningFeedback',
                                                                                            'SetWindowTheme',
                                                                                            'GetThemeInt',
                                                                                            'GetThemeColor',
                                                                                            'OpenThemeData',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'SHCreateStreamOnFileW',
                                                                                            'PathRemoveArgsW',
                                                                                            'PathIsNetworkPathW',
                                                                                            'StrRetToBufW',
                                                                                            'AssocQueryStringW',
                                                                                            'SHGetKnownFolderIDList',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHOpenFolderAndSelectItems',
                                                                                            'Shell_NotifyIconW',
                                                                                            'SHGetPropertyStoreForWindow',
                                                                                            'SHEvaluateSystemCommandTemplate',
                                                                                            'DuplicateIcon',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'Shell_GetCachedImageIndexW',
                                                                                            'SHBindToParent',
                                                                                            'SHParseDisplayName',
                                                                                            'ShellExecuteExW',
                                                                                            'CredUIPromptForCredentialsW',
                                                                                            'GetGadgetRect',
                                                                                            'SetGadgetStyle',
                                                                                            'ForwardGadgetMessage',
                                                                                            '?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ',
                                                                                            '??1CritSecLock@DirectUI@@QAE@XZ',
                                                                                            '??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '?Register@HWNDElement@DirectUI@@SGJXZ',
                                                                                            '?SetAccDesc@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '??0HWNDElement@DirectUI@@QAE@XZ',
                                                                                            '??1HWNDElement@DirectUI@@UAE@XZ',
                                                                                            '?Destroy@NativeHWNDHost@DirectUI@@QAEXXZ',
                                                                                            '?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            '?GetRoot@Element@DirectUI@@QAEPAV12@XZ',
                                                                                            'StrToID',
                                                                                            '?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ',
                                                                                            '?StartDefer@Element@DirectUI@@QAEXPAK@Z',
                                                                                            '?EndDefer@Element@DirectUI@@QAEXK@Z',
                                                                                            '?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QAEJH@Z',
                                                                                            '?Release@Value@DirectUI@@QAEXXZ',
                                                                                            '?GetExtent@Element@DirectUI@@QAEPBUtagSIZE@@PAPAVValue@2@@Z',
                                                                                            '?Click@Button@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?GetID@Element@DirectUI@@QAEGXZ',
                                                                                            '?KeyboardNavigate@Element@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?OnDestroy@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?Create@NativeHWNDHost@DirectUI@@SGJPBGPAUHWND__@@PAUHICON__@@HHHHHHIPAPAV12@@Z',
                                                                                            '?GetHWND@NativeHWNDHost@DirectUI@@QAEPAUHWND__@@XZ',
                                                                                            '?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z',
                                                                                            '?SetAccessible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetAccRole@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetVisible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z',
                                                                                            '?ShowWindow@NativeHWNDHost@DirectUI@@QAEXH@Z',
                                                                                            '?Destroy@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z',
                                                                                            '?UpdateSheets@DUIXmlParser@DirectUI@@QAEJPAVElement@2@@Z',
                                                                                            '?GetEnabled@Element@DirectUI@@QAE_NXZ',
                                                                                            '?GetDPI@Element@DirectUI@@QAEHXZ',
                                                                                            '??0ScrollViewer@DirectUI@@QAE@XZ',
                                                                                            '??1ScrollViewer@DirectUI@@UAE@XZ',
                                                                                            '?OnPropertyChanging@BaseScrollViewer@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@ScrollViewer@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnInput@BaseScrollViewer@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnEvent@BaseScrollViewer@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?Add@BaseScrollViewer@DirectUI@@UAEJPAPAVElement@2@I@Z',
                                                                                            '?CreateScrollBars@ScrollViewer@DirectUI@@MAEJXZ',
                                                                                            '?AddChildren@ScrollViewer@DirectUI@@MAEJXZ',
                                                                                            '?OnListenerAttach@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?OnListenerDetach@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?OnListenedPropertyChanging@BaseScrollViewer@DirectUI@@UAE_NPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z',
                                                                                            '?OnListenedPropertyChanged@ScrollViewer@DirectUI@@UAEXPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z',
                                                                                            '?OnListenedInput@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@PAUInputEvent@2@@Z',
                                                                                            '?OnListenedEvent@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@PAUEvent@2@@Z',
                                                                                            '?GetClassInfoPtr@Expando@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?GetClassInfoPtr@ScrollViewer@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?Initialize@BaseScrollViewer@DirectUI@@QAEJPAVElement@2@PAK@Z',
                                                                                            '?_PostEvent@Element@DirectUI@@AAEXPAUEvent@2@H@Z',
                                                                                            '?Register@ScrollViewer@DirectUI@@SGJXZ',
                                                                                            '?GetHScroll@ScrollViewer@DirectUI@@MAEPAVBaseScrollBar@2@XZ',
                                                                                            '?GetVScroll@ScrollViewer@DirectUI@@MAEPAVBaseScrollBar@2@XZ',
                                                                                            '?SetPadding@Element@DirectUI@@QAEJHHHH@Z',
                                                                                            '?SetXOffset@BaseScrollViewer@DirectUI@@QAEJH@Z',
                                                                                            '?XOffsetProp@BaseScrollViewer@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?SetHeight@Element@DirectUI@@QAEJH@Z',
                                                                                            '?GetDesiredSize@Element@DirectUI@@QAEPBUtagSIZE@@XZ',
                                                                                            '??1DCSurface@DirectUI@@UAE@XZ',
                                                                                            '??0DCSurface@DirectUI@@QAE@PAUHDC__@@@Z',
                                                                                            '?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z',
                                                                                            '?Init@NavReference@DirectUI@@QAEXPAVElement@2@PAUtagRECT@@@Z',
                                                                                            '?Remove@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            '?ExpandCollapse_ExpandCollapseState_Property@Schema@DirectUI@@2HA',
                                                                                            '?GetIndex@Element@DirectUI@@QAEHXZ',
                                                                                            '??0IProvider@DirectUI@@QAE@XZ',
                                                                                            '?AdviseEventRemoved@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z',
                                                                                            '?AdviseEventAdded@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z',
                                                                                            '?get_FragmentRoot@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderFragmentRoot@@@Z',
                                                                                            '?SetFocus@ElementProvider@DirectUI@@UAGJXZ',
                                                                                            '?GetEmbeddedFragmentRoots@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z',
                                                                                            '?get_BoundingRectangle@ElementProvider@DirectUI@@UAGJPAUUiaRect@@@Z',
                                                                                            '?GetRuntimeId@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z',
                                                                                            '?Navigate@ElementProvider@DirectUI@@UAGJW4NavigateDirection@@PAPAUIRawElementProviderFragment@@@Z',
                                                                                            '?get_HostRawElementProvider@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderSimple@@@Z',
                                                                                            '?GetPropertyValue@ElementProvider@DirectUI@@UAGJHPAUtagVARIANT@@@Z',
                                                                                            '?get_ProviderOptions@ElementProvider@DirectUI@@UAGJPAW4ProviderOptions@@@Z',
                                                                                            '?TossElement@ElementProvider@DirectUI@@UAEXXZ',
                                                                                            '?QueryInterface@ElementProvider@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?Create@ElementProvider@DirectUI@@SGJPAVElement@2@PAVInvokeHelper@2@PAPAV12@@Z',
                                                                                            '?Create@HWNDElementProvider@DirectUI@@SGJPAVHWNDElement@2@PAVInvokeHelper@2@PAPAV12@@Z',
                                                                                            '?Find@ElementProviderManager@DirectUI@@SGPAVElementProvider@2@PAVElement@2@@Z',
                                                                                            '??0ElementProxy@DirectUI@@QAE@XZ',
                                                                                            '??0ProviderProxy@DirectUI@@IAE@XZ',
                                                                                            '??1ElementProvider@DirectUI@@UAE@XZ',
                                                                                            '??0RefcountBase@DirectUI@@QAE@XZ',
                                                                                            '??0ElementProvider@DirectUI@@QAE@XZ',
                                                                                            '?GetInvokeHelper@InvokeManager@DirectUI@@SGJPAPAVInvokeHelper@2@@Z',
                                                                                            '?IsPatternSupported@ElementProxy@DirectUI@@IAEJW4Pattern@Schema@2@PA_N@Z',
                                                                                            '?CreatePatternProvider@Schema@DirectUI@@SGJW4Pattern@12@PAVElementProvider@2@PAPAUIUnknown@@@Z',
                                                                                            '?Init@ProviderProxy@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '??1AutoLock@DirectUI@@QAE@XZ',
                                                                                            '??0AutoLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '?DoInvoke@ElementProvider@DirectUI@@IAAJHZZ',
                                                                                            '?PatternFromPatternId@Schema@DirectUI@@SG?AW4Pattern@12@H@Z',
                                                                                            '?Init@ElementProvider@DirectUI@@MAEJPAVElement@2@PAVInvokeHelper@2@@Z',
                                                                                            '?Release@ElementProvider@DirectUI@@UAGKXZ',
                                                                                            '?GetProperty@ElementProxy@DirectUI@@IAEJPAUtagVARIANT@@H@Z',
                                                                                            '?DoMethod@ElementProxy@DirectUI@@UAEJHPAD@Z',
                                                                                            '?Init@ElementProxy@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?DoInvokeArgs@ElementProvider@DirectUI@@QAEJHP6GPAVProviderProxy@2@PAVElement@2@@ZPAD@Z',
                                                                                            '?GetElement@ElementProvider@DirectUI@@UAEPDVElement@2@XZ',
                                                                                            '?TossPatternProvider@ElementProvider@DirectUI@@QAEXW4Pattern@Schema@2@@Z',
                                                                                            '??1RefcountBase@DirectUI@@UAE@XZ',
                                                                                            '?AddRef@ElementProvider@DirectUI@@UAGKXZ',
                                                                                            '?Release@RefcountBase@DirectUI@@QAEJXZ',
                                                                                            '?AddRef@RefcountBase@DirectUI@@QAEJXZ',
                                                                                            '?DataGridControlType@Schema@DirectUI@@2HA',
                                                                                            '?SelectionPattern@Schema@DirectUI@@2HA',
                                                                                            '?TablePattern@Schema@DirectUI@@2HA',
                                                                                            '?InvokePattern@Schema@DirectUI@@2HA',
                                                                                            '?TableItemPattern@Schema@DirectUI@@2HA',
                                                                                            '?IsControlElementProperty@Schema@DirectUI@@2HA',
                                                                                            '?IsContentElementProperty@Schema@DirectUI@@2HA',
                                                                                            '?TreeItemControlType@Schema@DirectUI@@2HA',
                                                                                            '?ListItemControlType@Schema@DirectUI@@2HA',
                                                                                            '?ControlTypeProperty@Schema@DirectUI@@2HA',
                                                                                            '?GridPattern@Schema@DirectUI@@2HA',
                                                                                            '?SelectionItemPattern@Schema@DirectUI@@2HA',
                                                                                            '?ExpandCollapsePattern@Schema@DirectUI@@2HA',
                                                                                            '?GridItemPattern@Schema@DirectUI@@2HA',
                                                                                            '?GetExpanded@Expandable@DirectUI@@QAE_NXZ',
                                                                                            '?UiaRaiseAutomationPropertyChangedEvent@Schema@DirectUI@@2P6GJPAUIRawElementProviderSimple@@HUtagVARIANT@@1@ZA',
                                                                                            '?GetAccessible@Element@DirectUI@@QAE_NXZ',
                                                                                            '?WantPropertyEvent@EventManager@DirectUI@@SG_NH@Z',
                                                                                            '?FWantAnyEvent@EventManager@DirectUI@@SG_NPAVElement@2@@Z',
                                                                                            '?OnReceivedDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z',
                                                                                            '?OnLostDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z',
                                                                                            '?DefaultAction@Button@DirectUI@@UAEJXZ',
                                                                                            '?OnInput@Button@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '??1Button@DirectUI@@UAE@XZ',
                                                                                            '??0Button@DirectUI@@QAE@XZ',
                                                                                            '?GetClassInfoPtr@Button@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?Register@Button@DirectUI@@SGJXZ',
                                                                                            '?Register@Element@DirectUI@@SGJXZ',
                                                                                            '?OnDestroy@Element@DirectUI@@UAEXXZ',
                                                                                            '?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?KeyFocusedProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?OnPropertyChanged@Button@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?GetVisible@Element@DirectUI@@QAE_NXZ',
                                                                                            '?GetBackgroundColor@Element@DirectUI@@QAEPBUFill@2@PAPAVValue@2@@Z',
                                                                                            '?Initialize@Button@DirectUI@@QAEJIPAVElement@2@PAK@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?GetClass@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z',
                                                                                            '?GetSelected@Element@DirectUI@@QAE_NXZ',
                                                                                            '?GetBool@Value@DirectUI@@QAE_NXZ',
                                                                                            '?GetValue@Element@DirectUI@@QAEPAVValue@2@PBUPropertyInfo@2@HPAUUpdateCache@2@@Z',
                                                                                            '?SetValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@HPAVValue@2@@Z',
                                                                                            '?SetExpanded@Expandable@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetPressed@Button@DirectUI@@QAEJ_N@Z',
                                                                                            '?GetBoolFalse@Value@DirectUI@@SGPAV12@XZ',
                                                                                            '?SetBackgroundColor@Element@DirectUI@@QAEJK@Z',
                                                                                            '?SetBorderThickness@Element@DirectUI@@QAEJHHHH@Z',
                                                                                            '?SetAccValue@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetAccItemStatus@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?CreateBool@Value@DirectUI@@SGPAV12@_N@Z',
                                                                                            '?SetAnimation@Element@DirectUI@@QAEJH@Z',
                                                                                            '?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z',
                                                                                            '?HeightProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?SortChildren@Element@DirectUI@@QAEJP6AHPBX0@Z@Z',
                                                                                            '?LayoutPosProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?RemoveLocalValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZ@Z',
                                                                                            '?CreateInt@Value@DirectUI@@SGPAV12@HW4DynamicScaleValue@@@Z',
                                                                                            '?HasPadding@Element@DirectUI@@QAE_NXZ',
                                                                                            '?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z',
                                                                                            '??1Element@DirectUI@@UAE@XZ',
                                                                                            '??0Element@DirectUI@@QAE@XZ',
                                                                                            '?SetBorderColor@Element@DirectUI@@QAEJK@Z',
                                                                                            '?HasBorder@Element@DirectUI@@QAE_NXZ',
                                                                                            '?GetInt@Value@DirectUI@@QAEHXZ',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z',
                                                                                            '?GetType@Value@DirectUI@@QBEHXZ',
                                                                                            '?CustomProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z',
                                                                                            '?KeyWithinProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?MouseWithinProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?SetEnabled@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetActive@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z',
                                                                                            '?Create@GridLayout@DirectUI@@SGJHHPAPAVLayout@2@@Z',
                                                                                            '?HasChildren@Element@DirectUI@@QAE_NXZ',
                                                                                            '?SetClass@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?GetKeyWithin@Element@DirectUI@@QAE_NXZ',
                                                                                            '?GetMouseWithin@Element@DirectUI@@QAE_NXZ',
                                                                                            '?Insert@Element@DirectUI@@QAEJPAV12@I@Z',
                                                                                            '?SetID@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetMinSize@Element@DirectUI@@QAEJHH@Z',
                                                                                            '?IsDescendent@Element@DirectUI@@QAE_NPAV12@@Z',
                                                                                            '?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z',
                                                                                            '?Add@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            '?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z',
                                                                                            '?SetTooltip@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetSelected@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetXScrollable@BaseScrollViewer@DirectUI@@QAEJ_N@Z',
                                                                                            '?GetWidth@Element@DirectUI@@QAEHXZ',
                                                                                            '?SetWidth@Element@DirectUI@@QAEJH@Z',
                                                                                            '?GetSize@Value@DirectUI@@QAEPBUtagSIZE@@XZ',
                                                                                            '?ExtentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ',
                                                                                            'UnInitProcessPriv',
                                                                                            'UnInitThread',
                                                                                            'InitThread',
                                                                                            'InitProcessPriv',
                                                                                            '?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?IsDestroyed@Element@DirectUI@@QAE_NXZ',
                                                                                            '?GetLocation@Element@DirectUI@@QAEPBUtagPOINT@@PAPAVValue@2@@Z',
                                                                                            '?GetParent@Element@DirectUI@@QAEPAV12@XZ',
                                                                                            '?SetX@Element@DirectUI@@QAEJH@Z',
                                                                                            '?GetPadding@Element@DirectUI@@QAEPBUtagRECT@@PAPAVValue@2@@Z',
                                                                                            '?GetBorderThickness@Element@DirectUI@@QAEPBUtagRECT@@PAPAVValue@2@@Z',
                                                                                            '?SetContentAlign@Element@DirectUI@@QAEJH@Z',
                                                                                            '?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z',
                                                                                            '?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z',
                                                                                            '?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHICON__@@_N11@Z',
                                                                                            '?OnNotify@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QAEXXZ',
                                                                                            '?OnPropertyChanged@HWNDHost@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?GetClassInfoPtr@HWNDHost@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?Register@HWNDHost@DirectUI@@SGJXZ',
                                                                                            '?OnInput@HWNDHost@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?SetAccName@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetContentString@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?Release@Element@DirectUI@@QAGKXZ',
                                                                                            '?Initialize@HWNDHost@DirectUI@@QAEJIIPAVElement@2@PAK@Z',
                                                                                            '??1HWNDHost@DirectUI@@UAE@XZ',
                                                                                            '??0HWNDHost@DirectUI@@QAE@XZ',
                                                                                            '??1CCListView@DirectUI@@UAE@XZ',
                                                                                            '?PostCreate@CCBase@DirectUI@@MAEXPAUHWND__@@@Z',
                                                                                            '?OnReceivedDialogFocus@CCBase@DirectUI@@UAE_NPAUIDialogElement@2@@Z',
                                                                                            '?OnLostDialogFocus@CCBase@DirectUI@@UAE_NPAUIDialogElement@2@@Z',
                                                                                            '?OnCustomDraw@CCBase@DirectUI@@UAE_NPAUtagNMCUSTOMDRAWINFO@@PAJ@Z',
                                                                                            '?EraseBkgnd@HWNDHost@DirectUI@@MAE_NPAUHDC__@@PAJ@Z',
                                                                                            '?SetWindowDirection@HWNDHost@DirectUI@@UAEXPAUHWND__@@@Z',
                                                                                            '?OnWindowStyleChanged@HWNDHost@DirectUI@@UAEXIPBUtagSTYLESTRUCT@@@Z',
                                                                                            '?OnCtrlThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?OnSinkThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?OnSysChar@HWNDHost@DirectUI@@UAE_NG@Z',
                                                                                            '?DefaultAction@CCBase@DirectUI@@UAEJXZ',
                                                                                            '?GetAccessibleImpl@HWNDHost@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?GetKeyFocused@HWNDHost@DirectUI@@UAE_NXZ',
                                                                                            '?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z',
                                                                                            '?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?GetContentSize@CCListView@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Paint@HWNDHost@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?OnEvent@HWNDHost@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?OnDestroy@HWNDHost@DirectUI@@UAEXXZ',
                                                                                            '?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnPropertyChanged@CCBase@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?GetClassInfoPtr@CCListView@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?Register@CCListView@DirectUI@@SGJXZ',
                                                                                            '?OnInput@CCBase@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?GetDisplayNode@Element@DirectUI@@QAEPAUHGADGET__@@XZ',
                                                                                            '?SetKeyFocus@HWNDHost@DirectUI@@UAEXXZ',
                                                                                            '?OnNotify@CCBase@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?OnMessage@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?GetRootRelativeBounds@Element@DirectUI@@QAEJPAUtagRECT@@@Z',
                                                                                            '?OnAdjustWindowSize@HWNDHost@DirectUI@@UAEHHHI@Z',
                                                                                            '?GetHWND@HWNDHost@DirectUI@@UAEPAUHWND__@@XZ',
                                                                                            '?SetWinStyle@CCBase@DirectUI@@QAEJH@Z',
                                                                                            '?Initialize@CCListView@DirectUI@@QAEJIPAVElement@2@PAK@Z',
                                                                                            '?CreateHWND@CCBase@DirectUI@@UAEPAUHWND__@@PAU3@@Z',
                                                                                            '??0CCListView@DirectUI@@QAE@XZ',
                                                                                            '?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ',
                                                                                            '?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ',
                                                                                            '?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?AddChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ',
                                                                                            '?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ',
                                                                                            '?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z',
                                                                                            '?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z',
                                                                                            '?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ',
                                                                                            '?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?Release@ClassInfoBase@DirectUI@@UAEHXZ',
                                                                                            '?AddRef@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z',
                                                                                            '?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z',
                                                                                            '?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            'DisableAnimations',
                                                                                            '?StartNavigate@Browser@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N1@Z',
                                                                                            '?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z',
                                                                                            'EnableAnimations',
                                                                                            '?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z',
                                                                                            '?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UAEJXZ',
                                                                                            '?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?GetKeyFocused@Element@DirectUI@@UAE_NXZ',
                                                                                            '?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z',
                                                                                            '?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?SetKeyFocus@Element@DirectUI@@UAEXXZ',
                                                                                            '?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z',
                                                                                            '?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z',
                                                                                            '?GetLayoutPos@Element@DirectUI@@QAEHXZ',
                                                                                            '?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z',
                                                                                            '?Add@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?IsContentProtected@Element@DirectUI@@UAE_NXZ',
                                                                                            '?IsRTL@Element@DirectUI@@QAE_NXZ',
                                                                                            '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                            '??1ClassInfoBase@DirectUI@@UAE@XZ',
                                                                                            '??0ClassInfoBase@DirectUI@@QAE@XZ',
                                                                                            '?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z',
                                                                                            '?Register@ClassInfoBase@DirectUI@@QAEJXZ',
                                                                                            '?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z',
                                                                                            'VDMTerminateTaskWOW',
                                                                                            'VDMEnumProcessWOW',
                                                                                            'VDMEnumTaskWOWEx',
                                                                                            'BaseReadAppCompatDataForProcess',
                                                                                            'BaseFreeAppCompatDataForProcess',
                                                                                            'GetProcessorSystemCycleTime',
                                                                                            'RegisterApplicationRestart',
                                                                                            'PackageFamilyNameFromFullName',
                                                                                            'GetPackageFullName',
                                                                                            'GetActiveProcessorGroupCount',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'RaiseException',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'TraceMessage',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 51,
                                                                      'NumberOfImportFunctions': 806,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 349744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 41984,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 37376,
                                                                                       '.imrsiv\x00': 0,
                                                                                       '.reloc\x00\x00': 43008,
                                                                                       '.rsrc\x00\x00\x00': 350208,
                                                                                       '.text\x00\x00\x00': 611328},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/de72dcb5e14f7d6a4b3e55b273a10a16c6de77dbb7a6f8575ea14e52aa58583c'},
 'de822afb73c9429aa46af2803c9a71552bd5436d355cc373d93d114d47a59018': {'AddressOfEntryPoint': 38763,
                                                                      'DebugRVA': 4592,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ChangeServiceConfigW',
                                                                                      'KERNEL32.dll': 'WaitForSingleObjectEx',
                                                                                      'NETAPI32.dll': 'NetApiBufferAllocate',
                                                                                      'msvcrt.dll': '__initenv',
                                                                                      'ntdll.dll': 'RtlUpcaseUnicodeStringToOemString'},
                                                                      'ImportedFunctions': ['Netbios',
                                                                                            'I_BrowserQueryEmulatedDomains',
                                                                                            'I_BrowserQueryOtherDomains',
                                                                                            'I_NetNameValidate',
                                                                                            'NetApiBufferFree',
                                                                                            'RxNetServerEnum',
                                                                                            'NetServerGetInfo',
                                                                                            'I_BrowserSetNetlogonState',
                                                                                            'NetServerEnum',
                                                                                            'I_NetServerSetServiceBitsEx',
                                                                                            'NetWkstaGetInfo',
                                                                                            'I_BrowserServerEnum',
                                                                                            'I_BrowserResetStatistics',
                                                                                            'I_BrowserQueryStatistics',
                                                                                            'I_BrowserDebugCall',
                                                                                            'NetApiBufferAllocate',
                                                                                            '_ultoa',
                                                                                            '_strnicmp',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'RtlCreateUnicodeString',
                                                                                            '_wcsicmp',
                                                                                            'wcscmp',
                                                                                            'RtlRandom',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'atol',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtOpenFile',
                                                                                            'wcsncmp',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlUnicodeStringToOemString',
                                                                                            '_stricmp',
                                                                                            'sprintf',
                                                                                            '_strupr',
                                                                                            'NtClose',
                                                                                            'strtoul',
                                                                                            '_chkstk',
                                                                                            'RtlInitString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'wcslen',
                                                                                            'wcscat',
                                                                                            'wcscpy',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlxOemStringToUnicodeSize',
                                                                                            'NlsMbOemCodePageTag',
                                                                                            '_itoa',
                                                                                            'RtlOemStringToUnicodeString',
                                                                                            'swprintf',
                                                                                            'qsort',
                                                                                            'RtlUpcaseUnicodeStringToOemString',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'ChangeServiceConfigW',
                                                                                            '_controlfp',
                                                                                            '_except_handler3',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            'printf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'exit',
                                                                                            '_strrev',
                                                                                            'getchar',
                                                                                            'time',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            '__initenv',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpA',
                                                                                            'lstrcpynA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'CreateEventW',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetComputerNameA',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'DeviceIoControl',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryExW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObjectEx'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 114,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 38400},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/de822afb73c9429aa46af2803c9a71552bd5436d355cc373d93d114d47a59018'},
 'de8a942908aae36a494f6d3a5a3ef60b1845bfd5aa20aa101b1532536abaf497': {'AddressOfEntryPoint': 13333,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'FindWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 28656,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 26624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/de8a942908aae36a494f6d3a5a3ef60b1845bfd5aa20aa101b1532536abaf497'},
 'df202ba127f1c5ae7789172a0891206632d1119d28bb18d9cdc153c540bd990c': {'AddressOfEntryPoint': 12843,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'PostQuitMessage',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['Sleep',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'CopyFileA',
                                                                                            'GetFullPathNameA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'lstrlenA',
                                                                                            'lstrcpynA',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'EnableMenuItem',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetDlgItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'LoadImageA',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'PostQuitMessage',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 159,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 43472,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 43520,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/df202ba127f1c5ae7789172a0891206632d1119d28bb18d9cdc153c540bd990c'},
 'df2e72f49ca58ffaebf87fd9800132d27d647825f2aafb1fa4d4114b6579540c': {'AddressOfEntryPoint': 7056,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'GetMonitorInfoW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtQueryInformationToken',
                                                                                      'ole32.dll': 'CoAllowSetForegroundWindow'},
                                                                      'ImportedFunctions': ['GetTokenInformation',
                                                                                            'DuplicateToken',
                                                                                            'CheckTokenMembership',
                                                                                            'CreateWellKnownSid',
                                                                                            'OpenProcessToken',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryW',
                                                                                            'CompareStringOrdinal',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'DelayLoadFailureHook',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'GetTickCount',
                                                                                            'GetCursorPos',
                                                                                            'SetWindowPos',
                                                                                            'DestroyWindow',
                                                                                            'MonitorFromPoint',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadStringW',
                                                                                            'GetMonitorInfoW',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '__p__fmode',
                                                                                            'memset',
                                                                                            'CommandLineToArgvW',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoGetObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoAllowSetForegroundWindow',
                                                                                            'NtQueryInformationToken'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 57,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 207976,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 208384,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/df2e72f49ca58ffaebf87fd9800132d27d647825f2aafb1fa4d4114b6579540c'},
 'df338dacbaa9d5c3cbee0263de5ab11115945a872c5e1cbb57588576e191ddcb': {'AddressOfEntryPoint': 9072,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'SHELL32.dll': 'SHGetFolderPathEx',
                                                                                      'SHLWAPI.dll': 'StrToIntW',
                                                                                      'USER32.dll': 'LoadCursorW',
                                                                                      'msvcrt.dll': '?terminate@@YAXXZ',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['RegEnumValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'lstrlenW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'SetErrorMode',
                                                                                            'HeapSetInformation',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'GetCommandLineW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'lstrcmpW',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'lstrcmpiW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetThreadLocale',
                                                                                            'GetTickCount',
                                                                                            'LoadStringW',
                                                                                            'CharNextW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__p__fmode',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'memmove',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'ImmDisableIME',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathGetDriveNumberW',
                                                                                            'PathIsUNCW',
                                                                                            'PathAppendW',
                                                                                            'PathFileExistsW',
                                                                                            'PathGetArgsW',
                                                                                            'PathUnquoteSpacesW',
                                                                                            'StrToIntW',
                                                                                            'SHChangeNotify',
                                                                                            'SHAddToRecentDocs',
                                                                                            'SHGetFolderPathEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 71,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3840,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/df338dacbaa9d5c3cbee0263de5ab11115945a872c5e1cbb57588576e191ddcb'},
 'df47e713409dfdc7c34b9009f00c31a32b82de32c4260c8bb6c91ca1bd827508': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 11264,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 11264,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/df47e713409dfdc7c34b9009f00c31a32b82de32c4260c8bb6c91ca1bd827508'},
 'df4b35dc5c0d2dbdcb9335cca97d95bea5bb1c1e78d9249e6abbe3f6bc57e81e': {'AddressOfEntryPoint': 9696,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'credui.dll': 'CredUICmdLinePromptForCredentialsW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['CredIsMarshaledCredentialW',
                                                                                            'CredFree',
                                                                                            'CredUnmarshalCredentialW',
                                                                                            'CredGetSessionTypes',
                                                                                            'RegQueryValueExW',
                                                                                            'CredDeleteW',
                                                                                            'CredWriteW',
                                                                                            'CredEnumerateW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetCommandLineW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'Sleep',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_resetstkoflw',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wcsicmp',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'CredUICmdLinePromptForCredentialsW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/df4b35dc5c0d2dbdcb9335cca97d95bea5bb1c1e78d9249e6abbe3f6bc57e81e'},
 'dfa180160e8d58fb471ac0c4602619852ffd74d6426464e0eb6c61c06afe065b': {'AddressOfEntryPoint': 5296,
                                                                      'DebugRVA': 10600,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': '_initterm',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'ulib.dll': '?ValidateVersion@PROGRAM@@UBEXKK@Z'},
                                                                      'ImportedFunctions': ['CompareStringW',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            'exit',
                                                                                            '_initterm',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z',
                                                                                            '?SetConsoleConversions@WSTRING@@SGXXZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBGK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '??0PROGRAM@@IAE@XZ',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '?Usage@PROGRAM@@UBEXXZ',
                                                                                            '?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?Fatal@PROGRAM@@UBEXXZ',
                                                                                            '?Fatal@PROGRAM@@UBAXKKPADZZ',
                                                                                            '??0CLASS_DESCRIPTOR@@QAE@XZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ',
                                                                                            '??1PROGRAM@@UAE@XZ',
                                                                                            '?Initialize@PROGRAM@@QAEEKKK@Z',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??1MULTIPLE_PATH_ARGUMENT@@UAE@XZ',
                                                                                            '??0MULTIPLE_PATH_ARGUMENT@@QAE@XZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '??1STREAM_MESSAGE@@UAE@XZ',
                                                                                            '??0STREAM_MESSAGE@@QAE@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z',
                                                                                            '?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z',
                                                                                            '?IsCorrectVersion@SYSTEM@@SGEXZ',
                                                                                            '?Strupr@WSTRING@@QAEPAV1@XZ',
                                                                                            '?Initialize@WSTRING@@QAEEXZ',
                                                                                            '?IsDrive@PATH@@QBEEXZ',
                                                                                            '?Initialize@MULTIPLE_PATH_ARGUMENT@@QAEEPADEE@Z',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?Initialize@CLASS_DESCRIPTOR@@QAEEXZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z',
                                                                                            '?ValidateVersion@PROGRAM@@UBEXKK@Z',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 6656},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/dfa180160e8d58fb471ac0c4602619852ffd74d6426464e0eb6c61c06afe065b'},
 'dff9bb9e1792c24432db6d3b3272e8f480432711955cea3385d8943ac1cd558f': {'AddressOfEntryPoint': 9792,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'REGAPI.dll': 'RegFreeUtilityCommandList',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegQueryUtilityCommandList',
                                                                                            'RegFreeUtilityCommandList',
                                                                                            'LoadStringW',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'HeapSetInformation',
                                                                                            'SearchPathW',
                                                                                            'FreeLibrary',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'CloseHandle',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'Sleep',
                                                                                            '_ultoa',
                                                                                            '_iob',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'memmove',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            'malloc',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'free',
                                                                                            'fwprintf',
                                                                                            'vfwprintf',
                                                                                            'wcschr',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            '_wcsnicmp',
                                                                                            'swprintf_s',
                                                                                            '__setusermatherr',
                                                                                            'vswprintf_s',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 64,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/dff9bb9e1792c24432db6d3b3272e8f480432711955cea3385d8943ac1cd558f'},
 'dffd95e075813e27b3dc261485f0437882d6c7ce0c52607ba1d067ec25c28195': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 113828,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 114176,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/dffd95e075813e27b3dc261485f0437882d6c7ce0c52607ba1d067ec25c28195'},
 'e04bfb63f79bb4e28926ec82afa3601ee06704af0ebcb66858b9e014635dcc63': {'AddressOfEntryPoint': 9440,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'FindVolumeClose',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'DeviceIoControl',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'FindFirstVolumeMountPointW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'FormatMessageW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation'},
                                                                      'ImportedFunctions': ['_amsg_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_exit',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_vsnwprintf',
                                                                                            'exit',
                                                                                            'memcpy',
                                                                                            'DeleteVolumeMountPointW',
                                                                                            'QueryDosDeviceW',
                                                                                            'RemoveDirectoryW',
                                                                                            'DefineDosDeviceW',
                                                                                            'WriteFile',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'CreateFileW',
                                                                                            'FindFirstVolumeW',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'FindNextVolumeW',
                                                                                            'FindVolumeClose',
                                                                                            'SetErrorMode',
                                                                                            'SetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'DeviceIoControl',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'lstrcmpW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'SetVolumeMountPointW',
                                                                                            'FindVolumeMountPointClose',
                                                                                            'FindNextVolumeMountPointW',
                                                                                            'FindFirstVolumeMountPointW',
                                                                                            'NtQuerySystemInformation'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 58,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2040,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e04bfb63f79bb4e28926ec82afa3601ee06704af0ebcb66858b9e014635dcc63'},
 'e05736304339b95938f623f5e5ab295942ccb728cf0782e429ff56c7f98c4ace': {'AddressOfEntryPoint': 324750,
                                                                      'DebugRVA': 324524,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 17392,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 17408,
                                                                                       '.text\x00\x00\x00': 316928},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e05736304339b95938f623f5e5ab295942ccb728cf0782e429ff56c7f98c4ace'},
 'e0725e75fabbb5734dcc33b69d1016d5907f77803ae6c9d53bc42fc23ed0a9d9': {'AddressOfEntryPoint': 29048,
                                                                      'DebugRVA': 5264,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32832,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'SETUPAPI.dll': 'CM_Get_Child',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'msvcrt.dll': 'strncmp'},
                                                                      'ImportedFunctions': ['GetTokenInformation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'OpenProcessToken',
                                                                                            'HeapReAlloc',
                                                                                            'CreateFileA',
                                                                                            'SetInformationJobObject',
                                                                                            'AllocConsole',
                                                                                            'CreateProcessW',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetProcessHeap',
                                                                                            'IsProcessInJob',
                                                                                            'ReadConsoleInputA',
                                                                                            'AssignProcessToJobObject',
                                                                                            'FreeConsole',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'QueryInformationJobObject',
                                                                                            'MultiByteToWideChar',
                                                                                            'CreateJobObjectA',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'AttachConsole',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'GetFileInformationByHandle',
                                                                                            'ResumeThread',
                                                                                            'CreateThread',
                                                                                            'GlobalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'GlobalFree',
                                                                                            'GetFileType',
                                                                                            'DeviceIoControl',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'CreateEventA',
                                                                                            'ReadFile',
                                                                                            'GetOverlappedResult',
                                                                                            'FlushFileBuffers',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'OutputDebugStringA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'exit',
                                                                                            '__getmainargs',
                                                                                            '__C_specific_handler',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_initterm',
                                                                                            '_amsg_exit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            'memset',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'mbtowc',
                                                                                            '__mb_cur_max',
                                                                                            'isleadbyte',
                                                                                            '_snprintf',
                                                                                            '_itoa',
                                                                                            'ferror',
                                                                                            '__badioinfo',
                                                                                            '__pioinfo',
                                                                                            '_lseeki64',
                                                                                            '_write',
                                                                                            '_isatty',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            'isdigit',
                                                                                            'strcspn',
                                                                                            'strchr',
                                                                                            'perror',
                                                                                            'wcsncmp',
                                                                                            '_setmode',
                                                                                            '_fileno',
                                                                                            'wprintf',
                                                                                            'fflush',
                                                                                            '_stricmp',
                                                                                            'getchar',
                                                                                            'atol',
                                                                                            'freopen',
                                                                                            'strrchr',
                                                                                            '_iob',
                                                                                            '_strdup',
                                                                                            'fprintf',
                                                                                            'printf',
                                                                                            'fgets',
                                                                                            'atoi',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'strncmp',
                                                                                            'SetupDiGetClassDevsExA',
                                                                                            'SetupDiGetDeviceInfoListDetailA',
                                                                                            'SetupDiGetDeviceInstallParamsA',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'CM_Get_Device_ID_ExA',
                                                                                            'SetupDiCallClassInstaller',
                                                                                            'CM_Get_DevNode_Registry_PropertyA',
                                                                                            'SetupDiSetClassInstallParamsA',
                                                                                            'CM_Get_DevNode_Registry_PropertyW',
                                                                                            'CM_Locate_DevNodeA',
                                                                                            'CM_Get_Parent',
                                                                                            'CM_Get_Sibling',
                                                                                            'CM_Get_Child',
                                                                                            'ShellExecuteExW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 134,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 696,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 36352},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e0725e75fabbb5734dcc33b69d1016d5907f77803ae6c9d53bc42fc23ed0a9d9'},
 'e07ebecb666e6818e34f83bb4ffba126486b64be78506f4736cf9a2346d93979': {'AddressOfEntryPoint': 4720,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'msvcrt.dll': 'vsprintf'},
                                                                      'ImportedFunctions': ['_strdup',
                                                                                            '__getmainargs',
                                                                                            '__mb_cur_max',
                                                                                            '__p__environ',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_cexit',
                                                                                            '_flsbuf',
                                                                                            '_iob',
                                                                                            '_isctype',
                                                                                            '_onexit',
                                                                                            '_pctype',
                                                                                            '_setmode',
                                                                                            'atexit',
                                                                                            'atof',
                                                                                            'atoi',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'fgetc',
                                                                                            'fopen',
                                                                                            'fputc',
                                                                                            'fread',
                                                                                            'free',
                                                                                            'freopen',
                                                                                            'fseek',
                                                                                            'ftell',
                                                                                            'fwrite',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'modf',
                                                                                            'printf',
                                                                                            'putchar',
                                                                                            'puts',
                                                                                            'qsort',
                                                                                            'realloc',
                                                                                            'remove',
                                                                                            'signal',
                                                                                            'sprintf',
                                                                                            'strcat',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strlen',
                                                                                            'strstr',
                                                                                            'tolower',
                                                                                            'toupper',
                                                                                            'vfprintf',
                                                                                            'vprintf',
                                                                                            'vsprintf',
                                                                                            'ExitProcess',
                                                                                            'SetUnhandledExceptionFilter'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 53,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 19456,
                                                                                       '.text\x00\x00\x00': 56320},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/e07ebecb666e6818e34f83bb4ffba126486b64be78506f4736cf9a2346d93979'},
 'e0b09ec52e8733fb6be9688478d2640ecaa5b091fca4b2f8cb0fd383f738d112': {'AddressOfEntryPoint': 11168,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'USER32.dll': 'ExitWindowsEx',
                                                                                      'ifsutil.dll': '?Initialize@DP_DRIVE@@QAEEPBVWSTRING@@PAVMESSAGE@@EEG@Z',
                                                                                      'msvcrt.dll': '__setusermatherr',
                                                                                      'ntdll.dll': 'RtlAllocateHeap',
                                                                                      'ulib.dll': '?Usage@PROGRAM@@UBEXXZ'},
                                                                      'ImportedFunctions': ['LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'OpenProcessToken',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersionExW',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            'exit',
                                                                                            '__setusermatherr',
                                                                                            '?Fatal@PROGRAM@@UBEXXZ',
                                                                                            '?Fatal@PROGRAM@@UBAXKKPADZZ',
                                                                                            '?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z',
                                                                                            '?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ',
                                                                                            '??1PROGRAM@@UAE@XZ',
                                                                                            '?Initialize@PROGRAM@@QAEEKKK@Z',
                                                                                            '?ValidateVersion@PROGRAM@@UBEXKK@Z',
                                                                                            '??1MULTIPLE_PATH_ARGUMENT@@UAE@XZ',
                                                                                            '??0MULTIPLE_PATH_ARGUMENT@@QAE@XZ',
                                                                                            '?Put@ARRAY@@UAEEPAVOBJECT@@@Z',
                                                                                            '?Initialize@ARRAY@@QAEEKK@Z',
                                                                                            '??1ARRAY@@UAE@XZ',
                                                                                            '??0ARRAY@@QAE@XZ',
                                                                                            '?Initialize@STRING_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??1STRING_ARGUMENT@@UAE@XZ',
                                                                                            '??0STRING_ARGUMENT@@QAE@XZ',
                                                                                            '?QueryDriveType@SYSTEM@@SG?AW4DRIVE_TYPE@@PBVWSTRING@@@Z',
                                                                                            '??8WSTRING@@QBEEABV0@@Z',
                                                                                            '?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '??0PROGRAM@@IAE@XZ',
                                                                                            '?GetLexeme@ARGUMENT@@QAEPAVWSTRING@@XZ',
                                                                                            '?IsValueSet@ARGUMENT@@QAEEXZ',
                                                                                            '?Initialize@WSTRING@@QAEEPBDK@Z',
                                                                                            '?Initialize@WSTRING@@QAEEPBV1@KK@Z',
                                                                                            '?QueryString@WSTRING@@QBEPAV1@KK@Z',
                                                                                            '?Strcat@WSTRING@@QAEEPBV1@@Z',
                                                                                            '??0LONG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@LONG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0FLAG_ARGUMENT@@QAE@XZ',
                                                                                            '?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z',
                                                                                            '??0DSTRING@@QAE@XZ',
                                                                                            '??1DSTRING@@UAE@XZ',
                                                                                            '??0PATH@@QAE@XZ',
                                                                                            '??1PATH@@UAE@XZ',
                                                                                            '?AnalyzePath@PATH@@QAE?AW4PATH_ANALYZE_CODE@@PAVWSTRING@@PAV1@0@Z',
                                                                                            '??1OBJECT@@UAE@XZ',
                                                                                            '?Compare@OBJECT@@UBEJPBV1@@Z',
                                                                                            '?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ',
                                                                                            '??0CLASS_DESCRIPTOR@@QAE@XZ',
                                                                                            '?Initialize@CLASS_DESCRIPTOR@@QAEEXZ',
                                                                                            '??0ARGUMENT_LEXEMIZER@@QAE@XZ',
                                                                                            '??1ARGUMENT_LEXEMIZER@@UAE@XZ',
                                                                                            '?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z',
                                                                                            '?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z',
                                                                                            '?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z',
                                                                                            '?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z',
                                                                                            '?Initialize@MULTIPLE_PATH_ARGUMENT@@QAEEPADEE@Z',
                                                                                            '?Usage@PROGRAM@@UBEXXZ',
                                                                                            '??0DP_DRIVE@@QAE@XZ',
                                                                                            '?SetAutochkTimeOut@VOL_LIODPDRV@@SGEK@Z',
                                                                                            '?QueryAutochkTimeOut@VOL_LIODPDRV@@SGEPAK@Z',
                                                                                            '?Initialize@MOUNT_POINT_MAP@@QAEEXZ',
                                                                                            '??1MOUNT_POINT_MAP@@UAE@XZ',
                                                                                            '??0MOUNT_POINT_MAP@@QAE@XZ',
                                                                                            '??0MOUNT_POINT_TUPLE@@QAE@XZ',
                                                                                            '??1DP_DRIVE@@UAE@XZ',
                                                                                            '?DeleteEntry@AUTOREG@@SGEPBVWSTRING@@E@Z',
                                                                                            '?DeleteEntry@AUTOREG@@SGEPBVWSTRING@@0@Z',
                                                                                            '?PushEntry@AUTOREG@@SGEPBVWSTRING@@@Z',
                                                                                            '?AddEntry@AUTOREG@@SGEPBVWSTRING@@@Z',
                                                                                            '?IsVolumeDirty@IFS_SYSTEM@@SGEPAVWSTRING@@PAE1PAJ@Z',
                                                                                            '?DosDriveNameToNtDriveName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@@Z',
                                                                                            '?QueryFileSystemName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@PAJ1@Z',
                                                                                            '?IsFrontEndPresent@AUTOREG@@SGEPBVWSTRING@@0@Z',
                                                                                            '?Initialize@DP_DRIVE@@QAEEPBVWSTRING@@PAVMESSAGE@@EEG@Z',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlAllocateHeap',
                                                                                            'ExitWindowsEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 103,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 9216},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e0b09ec52e8733fb6be9688478d2640ecaa5b091fca4b2f8cb0fd383f738d112'},
 'e0bd33640579a0cae30b09cad725d1271cd8596a58c1428a57a8890f8f8696a8': {'AddressOfEntryPoint': 3571550,
                                                                      'DebugRVA': 3571152,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 71624,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 71680,
                                                                                       '.text\x00\x00\x00': 3563520},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e0bd33640579a0cae30b09cad725d1271cd8596a58c1428a57a8890f8f8696a8'},
 'e11a41cc09ecedc8b0204dcb92486b7519ee3934d463105004101da402f78187': {'AddressOfEntryPoint': 12941,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 73728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetEndOfFile',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'StrCpyNW'},
                                                                      'ImportedFunctions': ['GetCommandLineW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetStringTypeW',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineA',
                                                                                            'ReadFile',
                                                                                            'CreateDirectoryW',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetProcessHeap',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'HeapSize',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleFileNameA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetModuleHandleW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleCP',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointerEx',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'OutputDebugStringW',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringW',
                                                                                            'SetEndOfFile',
                                                                                            'ShellExecuteExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'PathFileExistsW',
                                                                                            'StrChrW',
                                                                                            'StrCpyNW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456264,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 27136,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 69120},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e11a41cc09ecedc8b0204dcb92486b7519ee3934d463105004101da402f78187'},
 'e12f5a5804519a4c8f4eda5b27b3477d89aa4b80e5d9bfa359c1d6794d947965': {'AddressOfEntryPoint': 49472,
                                                                      'DebugRVA': 4288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 61440,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetVolumePathNameW',
                                                                                      'SXSHARED.dll': 'SxTracerGetThreadContextRetail',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoDisconnectObject',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlVirtualUnwind',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlAllocateHeap'},
                                                                      'ImportedFunctions': ['ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegCreateKeyExW',
                                                                                            'TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegCloseKey',
                                                                                            'EnableTraceEx2',
                                                                                            'StartTraceW',
                                                                                            'ControlTraceW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'FreeLibrary',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'InitializeSListHead',
                                                                                            'GetVolumePathNamesForVolumeNameW',
                                                                                            'LoadLibraryExW',
                                                                                            'LocalAlloc',
                                                                                            'GetSystemDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetLastError',
                                                                                            'GetVolumeInformationW',
                                                                                            'MoveFileExW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FormatMessageW',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'CreateThread',
                                                                                            'WaitForMultipleObjects',
                                                                                            'ResetEvent',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetEvent',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetLastError',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleW',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'DuplicateHandle',
                                                                                            'OpenProcess',
                                                                                            'CreateFileW',
                                                                                            'GetVersionExW',
                                                                                            'LocalFree',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVolumePathNameW',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'mbtowc',
                                                                                            'localeconv',
                                                                                            '_wsetlocale',
                                                                                            '_vsnwprintf',
                                                                                            'swscanf_s',
                                                                                            'wprintf',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'wcschr',
                                                                                            'memmove',
                                                                                            '_vscwprintf',
                                                                                            'iswspace',
                                                                                            '__dllonexit',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__wgetmainargs',
                                                                                            'memcpy',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoDisconnectObject',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlFreeHeap',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlSetThreadErrorMode',
                                                                                            'RtlGetLastNtStatus',
                                                                                            'RtlAllocateHeap',
                                                                                            'SxTracerShouldTrackFailure',
                                                                                            'SxTracerDebuggerBreak',
                                                                                            'SxTracerGetThreadContextRetail',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 119,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 126584,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 126976,
                                                                                       '.text\x00\x00\x00': 49152},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e12f5a5804519a4c8f4eda5b27b3477d89aa4b80e5d9bfa359c1d6794d947965'},
 'e154f9e0546b513a810b5bd5165db65826a6495e80cdc1d26b76a00353460f13': {'AddressOfEntryPoint': 84740,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'ExitThread',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'SetWindowTextA'},
                                                                      'ImportedFunctions': ['VariantClear',
                                                                                            'SysAllocString',
                                                                                            'SendMessageA',
                                                                                            'SetTimer',
                                                                                            'DialogBoxParamW',
                                                                                            'DialogBoxParamA',
                                                                                            'SetWindowLongA',
                                                                                            'GetWindowLongA',
                                                                                            'SetWindowTextW',
                                                                                            'LoadIconA',
                                                                                            'LoadStringW',
                                                                                            'LoadStringA',
                                                                                            'CharUpperW',
                                                                                            'CharUpperA',
                                                                                            'DestroyWindow',
                                                                                            'EndDialog',
                                                                                            'PostMessageA',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxW',
                                                                                            'GetDlgItem',
                                                                                            'KillTimer',
                                                                                            'SetWindowTextA',
                                                                                            'ShellExecuteExA',
                                                                                            'GetStringTypeW',
                                                                                            'GetStringTypeA',
                                                                                            'LCMapStringW',
                                                                                            'LCMapStringA',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetProcAddress',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'IsBadCodePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSize',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'IsBadWritePtr',
                                                                                            'HeapCreate',
                                                                                            'HeapDestroy',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TlsAlloc',
                                                                                            'ExitProcess',
                                                                                            'GetVersion',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetModuleHandleA',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'CreateProcessA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersionExA',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'LoadLibraryA',
                                                                                            'AreFileApisANSI',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'FormatMessageW',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'CreateFileW',
                                                                                            'SetLastError',
                                                                                            'SetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'SetFileAttributesW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'DeleteFileA',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetTempFileNameA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileA',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetStdHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'Sleep',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'CreateEventA',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'InitializeCriticalSection',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'ExitThread'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 541520,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12800,
                                                                                       '.rdata\x00\x00': 17920,
                                                                                       '.rsrc\x00\x00\x00': 541696,
                                                                                       '.sxdata\x00': 512,
                                                                                       '.text\x00\x00\x00': 104960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e154f9e0546b513a810b5bd5165db65826a6495e80cdc1d26b76a00353460f13'},
 'e187bc3df3b1240e34f0635d0ffe98e65e84bb0fbbe330f1b4c83abd77b71a2a': {'AddressOfEntryPoint': 13166,
                                                                      'DebugRVA': 12768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 101632,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 101888,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e187bc3df3b1240e34f0635d0ffe98e65e84bb0fbbe330f1b4c83abd77b71a2a'},
 'e1997829e5a0d5ec1327b68f194b803c5ea30ad9b42ba42d54387e16d3ae53f5': {'AddressOfEntryPoint': 72544,
                                                                      'DebugRVA': 5824,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 74400,
                                                                      'ExportSize': 27038,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'LoadStringA',
                                                                                      'appobj.dll': 'CreateCommandProcessor',
                                                                                      'msvcrt.dll': '_stricmp',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCurrentThreadId',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetThreadUILanguage',
                                                                                            'HeapSetInformation',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleHandleExW',
                                                                                            'EncodePointer',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'DecodePointer',
                                                                                            'Sleep',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'MultiByteToWideChar',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'FormatMessageA',
                                                                                            'WideCharToMultiByte',
                                                                                            'ReleaseSemaphore',
                                                                                            'OutputDebugStringA',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'CreateSemaphoreExW',
                                                                                            'DebugBreak',
                                                                                            'GetSystemInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_ftol2_sse',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '_CxxThrowException',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'fclose',
                                                                                            'fread',
                                                                                            'fwrite',
                                                                                            'ferror',
                                                                                            'feof',
                                                                                            'wcsstr',
                                                                                            '_wcsupr',
                                                                                            'clock',
                                                                                            'swprintf_s',
                                                                                            '_wsetlocale',
                                                                                            '__iob_func',
                                                                                            'fwprintf',
                                                                                            '_vsnwprintf',
                                                                                            'strnlen',
                                                                                            'wcsnlen',
                                                                                            '_wcsicmp',
                                                                                            'sprintf_s',
                                                                                            'strchr',
                                                                                            'isxdigit',
                                                                                            'memmove',
                                                                                            'strcat_s',
                                                                                            'wcschr',
                                                                                            'iswxdigit',
                                                                                            'iswalnum',
                                                                                            '_vsnwprintf_s',
                                                                                            '_vscwprintf',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_stricmp',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'CreateCommandProcessor',
                                                                                            'LoadStringA'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 104,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 97792},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e1997829e5a0d5ec1327b68f194b803c5ea30ad9b42ba42d54387e16d3ae53f5'},
 'e1ba82881f5b6591888866e5e09199c8a2f5db9e6034d17c68ad0dbaa62914ad': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e1ba82881f5b6591888866e5e09199c8a2f5db9e6034d17c68ad0dbaa62914ad'},
 'e226da8c5deab6b51c0cd90d0aa87ad25651edb6b2d6996e07de00978a35dcf5': {'AddressOfEntryPoint': 15920,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'IPHLPAPI.DLL': 'ConvertInterfacePhysicalAddressToLuid',
                                                                                      'KERNEL32.dll': 'DeleteCriticalSection',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlFreeHeap'},
                                                                      'ImportedFunctions': ['RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegSetValueExA',
                                                                                            'GetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'FormatMessageA',
                                                                                            'MultiByteToWideChar',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'FreeLibrary',
                                                                                            'GetFullPathNameW',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memmove',
                                                                                            'free',
                                                                                            '_vsnprintf',
                                                                                            'malloc',
                                                                                            '_vsnwprintf',
                                                                                            'memcpy',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            'wcsrchr',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'memset',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'ConvertStringToInterfacePhysicalAddress',
                                                                                            'ConvertInterfaceAliasToLuid',
                                                                                            'ConvertInterfaceNameToLuidW',
                                                                                            'ConvertInterfaceLuidToGuid',
                                                                                            'ConvertInterfacePhysicalAddressToLuid'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 73,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e226da8c5deab6b51c0cd90d0aa87ad25651edb6b2d6996e07de00978a35dcf5'},
 'e239b5c4c26c48d574c9d99e8203b93b36fb8b33fa165b2145f449888a6891cb': {'AddressOfEntryPoint': 101450,
                                                                      'DebugRVA': 112416,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 160248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR100.dll': '_mkdir'},
                                                                      'ImportedFunctions': ['strcmp',
                                                                                            'strchr',
                                                                                            'remove',
                                                                                            'fclose',
                                                                                            'exit',
                                                                                            'fopen',
                                                                                            '_time64',
                                                                                            'strcat',
                                                                                            'strncat',
                                                                                            'fflush',
                                                                                            'qsort',
                                                                                            '_snprintf',
                                                                                            'atoi',
                                                                                            'strcpy',
                                                                                            'abort',
                                                                                            '_gmtime64',
                                                                                            'fwrite',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            'strncmp',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            'getenv',
                                                                                            'strtok',
                                                                                            'fprintf',
                                                                                            'strrchr',
                                                                                            'fread',
                                                                                            '__iob_func',
                                                                                            '_errno',
                                                                                            'sprintf',
                                                                                            'strlen',
                                                                                            'memcmp',
                                                                                            'realloc',
                                                                                            'memchr',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            '_cexit',
                                                                                            'memcpy',
                                                                                            '_strdup',
                                                                                            '_fileno',
                                                                                            '_mkdir',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 75,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1552,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 37376,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 102912},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e239b5c4c26c48d574c9d99e8203b93b36fb8b33fa165b2145f449888a6891cb'},
 'e24ed8f78ef41c1bc17386ae4bbce0dc892c5b89b12c03fc9fb61d359b13f1b4': {'AddressOfEntryPoint': 9632,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetLengthSid',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'WS2_32.dll': 'htons',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['StartServiceCtrlDispatcherA',
                                                                                            'RegisterServiceCtrlHandlerA',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeAcl',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetServiceStatus',
                                                                                            'AddAccessAllowedAce',
                                                                                            'FreeSid',
                                                                                            'GetLengthSid',
                                                                                            'GetCommandLineW',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'ConnectNamedPipe',
                                                                                            'GetTickCount',
                                                                                            'WriteFile',
                                                                                            'RegisterApplicationRestart',
                                                                                            'InitializeCriticalSection',
                                                                                            'GlobalAlloc',
                                                                                            'CreateEventA',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetOverlappedResult',
                                                                                            'DisconnectNamedPipe',
                                                                                            'GetLastError',
                                                                                            'CreateNamedPipeA',
                                                                                            'EnterCriticalSection',
                                                                                            'GlobalFree',
                                                                                            'ResetEvent',
                                                                                            'HeapSetInformation',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_beginthreadex',
                                                                                            '_exit',
                                                                                            'memset',
                                                                                            'recvfrom',
                                                                                            'ioctlsocket',
                                                                                            'WSAStartup',
                                                                                            'getaddrinfo',
                                                                                            'select',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            '__WSAFDIsSet',
                                                                                            'freeaddrinfo',
                                                                                            'socket',
                                                                                            'bind',
                                                                                            'WSACleanup',
                                                                                            'htons'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 72,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2008,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 7680},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e24ed8f78ef41c1bc17386ae4bbce0dc892c5b89b12c03fc9fb61d359b13f1b4'},
 'e27631103951f60e02404955ce70910e2e5a31afbd526cba9154d6a3a42b2cd2': {'AddressOfEntryPoint': 12906,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'SHELL32.dll': 'SHFileOperationW',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'MoveFileW',
                                                                                            'SetFileAttributesW',
                                                                                            'GetCurrentProcess',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrlenW',
                                                                                            'WaitForSingleObject',
                                                                                            'CopyFileW',
                                                                                            'CompareFileTime',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'lstrcpyW',
                                                                                            'MoveFileExW',
                                                                                            'lstrcatW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetShortPathNameW',
                                                                                            'SearchPathW',
                                                                                            'lstrcmpiW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'lstrcmpW',
                                                                                            'GlobalUnlock',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableMenuItem',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongW',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapW',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'wsprintfW',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharPrevW',
                                                                                            'CharNextA',
                                                                                            'wsprintfA',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'EndDialog',
                                                                                            'RegisterClassW',
                                                                                            'SystemParametersInfoW',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoW',
                                                                                            'DialogBoxParamW',
                                                                                            'CharNextW',
                                                                                            'ExitWindowsEx',
                                                                                            'DestroyWindow',
                                                                                            'LoadImageW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'IsWindow',
                                                                                            'SetWindowLongW',
                                                                                            'FindWindowExW',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'CreateDialogParamW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'SetForegroundWindow',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'RegDeleteKeyW',
                                                                                            'SetFileSecurityW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumKeyW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 73088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 73216,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e27631103951f60e02404955ce70910e2e5a31afbd526cba9154d6a3a42b2cd2'},
 'e29534ff881e8a2be373a9f7decbdb158b678b61221a6566aaeb58047c87d896': {'AddressOfEntryPoint': 39716,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 275720,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 275968,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37888,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e29534ff881e8a2be373a9f7decbdb158b678b61221a6566aaeb58047c87d896'},
 'e29558ea9df1a9c22f60bc2ebcc18c054b6b54160175cb76f183c95754f1a8b3': {'AddressOfEntryPoint': 229980,
                                                                      'DebugRVA': 6592,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 438800,
                                                                      'ExportSize': 112,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'DeregisterEventSource',
                                                                                      'KERNEL32.dll': 'GetModuleHandleA',
                                                                                      'MPR.dll': 'WNetGetUniversalNameW',
                                                                                      'MSVCR100.dll': '_swprintf_c',
                                                                                      'OLEAUT32.dll': 'UnRegisterTypeLib',
                                                                                      'USER32.dll': 'CharNextW',
                                                                                      'instapi110.dll': 'GetCOMPath',
                                                                                      'ole32.dll': 'CoTaskMemFree',
                                                                                      'sqlncli11.dll': 'bcp_exec'},
                                                                      'ImportedFunctions': ['GetUserNameW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'RegOpenKeyW',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'DeregisterEventSource',
                                                                                            'HeapSetInformation',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetTickCount',
                                                                                            'GetQueuedCompletionStatus',
                                                                                            'PostQueuedCompletionStatus',
                                                                                            'GetComputerNameW',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetHandleInformation',
                                                                                            'ReadProcessMemory',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'GetFileAttributesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'DebugBreak',
                                                                                            'VirtualQuery',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CompareStringW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'CreateIoCompletionPort',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RaiseException',
                                                                                            'GetCurrentThreadId',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'lstrlenW',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateFileMappingA',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetSystemInfo',
                                                                                            'ReadFile',
                                                                                            'GetUserDefaultLCID',
                                                                                            'OutputDebugStringW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CreateMutexW',
                                                                                            'GetSystemTime',
                                                                                            'SetFilePointer',
                                                                                            'ReleaseMutex',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'CreateFileW',
                                                                                            'GetLocalTime',
                                                                                            'GetFileSize',
                                                                                            'SetLastError',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetCommandLineW',
                                                                                            'CreateEventW',
                                                                                            'SetErrorMode',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'AllocConsole',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersionExW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'WriteFile',
                                                                                            'CloseHandle',
                                                                                            'CreateEventA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'memcpy_s',
                                                                                            'strncpy_s',
                                                                                            'wcscpy_s',
                                                                                            'wcsstr',
                                                                                            '_vsnwprintf_l',
                                                                                            '_purecall',
                                                                                            '_strnicmp',
                                                                                            'wcsncpy_s',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '_swscanf_s_l',
                                                                                            'malloc',
                                                                                            '__iob_func',
                                                                                            '_resetstkoflw',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'fclose',
                                                                                            '_create_locale',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'free',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_snwprintf_s',
                                                                                            '_wcsdup',
                                                                                            '_CxxThrowException',
                                                                                            '_endthreadex',
                                                                                            '_strrev',
                                                                                            '_wtol',
                                                                                            'memcpy',
                                                                                            '_localtime64',
                                                                                            '_time64',
                                                                                            'wcsftime',
                                                                                            '_waccess',
                                                                                            '_local_unwind',
                                                                                            'strcpy_s',
                                                                                            'strcat_s',
                                                                                            'sprintf_s',
                                                                                            'iswalpha',
                                                                                            'wcsrchr',
                                                                                            '_wcsnicmp',
                                                                                            'swprintf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            '_wtoi',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcmp',
                                                                                            '_wcsicmp_l',
                                                                                            'memmove',
                                                                                            'freopen',
                                                                                            'printf',
                                                                                            'wcsncat_s',
                                                                                            '__C_specific_handler',
                                                                                            'iswxdigit',
                                                                                            'iswspace',
                                                                                            '_wmakepath_s',
                                                                                            'memset',
                                                                                            '_beginthreadex',
                                                                                            '_getch',
                                                                                            'swscanf_s',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            '_wsplitpath_s',
                                                                                            '_wsystem',
                                                                                            '_wcslwr',
                                                                                            '_wcsicmp',
                                                                                            'wcsncmp',
                                                                                            'wcschr',
                                                                                            'wcscat_s',
                                                                                            '_swprintf_c',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoGetMalloc',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoTaskMemFree',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'GetErrorInfo',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'bcp_colfmt',
                                                                                            'bcp_columns',
                                                                                            'bcp_control',
                                                                                            'bcp_initW',
                                                                                            'bcp_exec',
                                                                                            'GetCOMPath',
                                                                                            'WNetGetUniversalNameA',
                                                                                            'WNetGetUniversalNameW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 237,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7220,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 14848,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 7680,
                                                                                       '.text\x00\x00\x00': 435200},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e29558ea9df1a9c22f60bc2ebcc18c054b6b54160175cb76f183c95754f1a8b3'},
 'e2a3fb8b606e55e843958b93ee6a5fdce6fb4aaa6befd2f030baa91ed4b5b013': {'AddressOfEntryPoint': 10432,
                                                                      'DebugRVA': 81640,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'FindClose',
                                                                                      'MSVCR120_CLR0400.dll': 'memset',
                                                                                      'OLEAUT32.dll': 'SysStringLen',
                                                                                      'USER32.dll': 'PeekMessageW',
                                                                                      'mscoree.dll': 'GetRequestedRuntimeInfo',
                                                                                      'ole32.dll': 'CoMarshalInterface'},
                                                                      'ImportedFunctions': ['RegQueryInfoKeyW',
                                                                                            'SetTokenInformation',
                                                                                            'DuplicateTokenEx',
                                                                                            'RegCloseKey',
                                                                                            'EventWrite',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'IsDebuggerPresent',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'DebugBreak',
                                                                                            'CreateThread',
                                                                                            'TlsFree',
                                                                                            'TlsAlloc',
                                                                                            'ReleaseMutex',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualProtect',
                                                                                            'CreateSemaphoreW',
                                                                                            'ResetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'ReleaseSemaphore',
                                                                                            'HeapValidate',
                                                                                            'HeapCreate',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapDestroy',
                                                                                            'TlsSetValue',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SleepEx',
                                                                                            'VirtualQuery',
                                                                                            'TlsGetValue',
                                                                                            'CreateMutexW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'CreateEventW',
                                                                                            'CreateFileW',
                                                                                            'WaitForSingleObject',
                                                                                            'FindFirstFileW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetACP',
                                                                                            'FormatMessageW',
                                                                                            'GetCPInfo',
                                                                                            'RaiseException',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetFileType',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStdHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleFileNameW',
                                                                                            'TerminateProcess',
                                                                                            'GetFileAttributesW',
                                                                                            'GetVersionExW',
                                                                                            'WerSetFlags',
                                                                                            'WriteFile',
                                                                                            'OutputDebugStringW',
                                                                                            'SetEvent',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'FindClose',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__crtGetShowWindowMode',
                                                                                            '_XcptFilter',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'iswspace',
                                                                                            'wcsncmp',
                                                                                            'strcpy_s',
                                                                                            '_vsnprintf_s',
                                                                                            'strncmp',
                                                                                            'wcscat_s',
                                                                                            '_errno',
                                                                                            'wcscpy_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'freopen',
                                                                                            '_purecall',
                                                                                            'fflush',
                                                                                            '__iob_func',
                                                                                            '_wcsnicmp',
                                                                                            'fwprintf',
                                                                                            'wcstoul',
                                                                                            'memmove',
                                                                                            'wcsncpy_s',
                                                                                            '_wcsicmp',
                                                                                            'memset',
                                                                                            'GetRequestedRuntimeInfo',
                                                                                            'CoTaskMemFree',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoMarshalInterface',
                                                                                            'SysAllocString',
                                                                                            'SetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'DispatchMessageW',
                                                                                            'LoadStringW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PeekMessageW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 147,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1900,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 77824},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e2a3fb8b606e55e843958b93ee6a5fdce6fb4aaa6befd2f030baa91ed4b5b013'},
 'e2d6eb8764dd4ec3bf840f30a5e911fbae832d54f3c2a6939addd07787c08bf6': {'AddressOfEntryPoint': 230944,
                                                                      'DebugRVA': 5520,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 249856,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegNotifyChangeKeyValue',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'DUI70.dll': '?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z',
                                                                                      'GDI32.dll': 'CombineRgn',
                                                                                      'KERNEL32.dll': 'SetEvent',
                                                                                      'MAGNIFICATION.dll': 'MagUninitialize',
                                                                                      'OLEACC.dll': 'AccessibleObjectFromWindow',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'UIAutomationCore.DLL': 'UiaReturnRawElementProvider',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'dwmapi.dll': 'DwmIsCompositionEnabled',
                                                                                      'gdiplus.dll': 'GdipDrawLine',
                                                                                      'msvcrt.dll': '_wcsicmp',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'RegGetValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalAddAtomW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetLocaleInfoW',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetTickCount64',
                                                                                            'GetTickCount',
                                                                                            'ReleaseMutex',
                                                                                            'RegisterApplicationRestart',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'CreateMutexW',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'CloseHandle',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenMutexW',
                                                                                            'CompareStringW',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'TerminateProcess',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetModuleHandleA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'OpenJobObjectW',
                                                                                            'CreateEventW',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'IsProcessInJob',
                                                                                            'SetEvent',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'GetStockObject',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'CreateSolidBrush',
                                                                                            'StretchBlt',
                                                                                            'SetStretchBltMode',
                                                                                            'CreateRectRgn',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteDC',
                                                                                            'SelectObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateBitmap',
                                                                                            'DeleteObject',
                                                                                            'CombineRgn',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetKeyState',
                                                                                            'SendInput',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'CloseDesktop',
                                                                                            'GetAsyncKeyState',
                                                                                            'FindWindowW',
                                                                                            'PostMessageW',
                                                                                            'DeferWindowPos',
                                                                                            'LoadStringW',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowsHookExW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetSystemMetrics',
                                                                                            'RegisterClassW',
                                                                                            'FillRect',
                                                                                            'SetCursor',
                                                                                            'PostQuitMessage',
                                                                                            'GetMessagePos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'WindowFromPhysicalPoint',
                                                                                            'CallNextHookEx',
                                                                                            'GetWindowLongW',
                                                                                            'GetAncestor',
                                                                                            'PtInRect',
                                                                                            'RemovePropW',
                                                                                            'SetPropW',
                                                                                            'SetWindowPlacement',
                                                                                            'TrackPopupMenu',
                                                                                            'CheckMenuRadioItem',
                                                                                            'InsertMenuItemW',
                                                                                            'CreatePopupMenu',
                                                                                            'RealGetWindowClassW',
                                                                                            'GetDoubleClickTime',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetClassNameW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgCtrlID',
                                                                                            'EnableWindow',
                                                                                            'MonitorFromWindow',
                                                                                            'SetFocus',
                                                                                            'CheckDlgButton',
                                                                                            'SendDlgItemMessageW',
                                                                                            'LoadImageW',
                                                                                            'CreateDialogParamW',
                                                                                            'GetDlgItem',
                                                                                            'GetCursorPos',
                                                                                            'UpdateLayeredWindow',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'IsWindowEnabled',
                                                                                            'GetForegroundWindow',
                                                                                            'GetCapture',
                                                                                            'IsIconic',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'IsDialogMessageW',
                                                                                            'GetMessageW',
                                                                                            'RegisterHotKey',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'UnregisterHotKey',
                                                                                            'SetRectEmpty',
                                                                                            'GetWindow',
                                                                                            'AdjustWindowRectEx',
                                                                                            'IsWindowVisible',
                                                                                            'SendMessageW',
                                                                                            'LoadIconW',
                                                                                            'SetPhysicalCursorPos',
                                                                                            'EnumDisplayMonitors',
                                                                                            'MapWindowPoints',
                                                                                            'GetPointerFrameInfoHistory',
                                                                                            'GetPointerInfo',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'InvalidateRect',
                                                                                            'SetWindowRgn',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetClientRect',
                                                                                            'SetWinEventHook',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'LoadCursorW',
                                                                                            'SetActiveWindow',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetPointerDeviceRects',
                                                                                            'GetParent',
                                                                                            'UnhookWinEvent',
                                                                                            'SetWindowLongW',
                                                                                            'IntersectRect',
                                                                                            'InflateRect',
                                                                                            'SetRect',
                                                                                            'GetGUIThreadInfo',
                                                                                            'DefWindowProcW',
                                                                                            'MonitorFromRect',
                                                                                            'UpdateWindow',
                                                                                            'RegisterClassExW',
                                                                                            'UnionRect',
                                                                                            'RegisterPointerDeviceNotifications',
                                                                                            'CreateWindowExW',
                                                                                            'GetPhysicalCursorPos',
                                                                                            'DestroyWindow',
                                                                                            'IsWindow',
                                                                                            'ClipCursor',
                                                                                            'KillTimer',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetTimer',
                                                                                            'ShowWindow',
                                                                                            'GetPointerDevices',
                                                                                            'CopyRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'OffsetRect',
                                                                                            'IsRectEmpty',
                                                                                            'GetWindowRect',
                                                                                            'GetDesktopWindow',
                                                                                            'EqualRect',
                                                                                            'UnregisterClassA',
                                                                                            '_except_handler4_common',
                                                                                            'floor',
                                                                                            '_ftol2_sse',
                                                                                            '_ftol2',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_CIsqrt',
                                                                                            '_CIsin',
                                                                                            '_CIpow',
                                                                                            '_CIfmod',
                                                                                            '_CIcos',
                                                                                            '_CIatan2',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'wcschr',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            'wcsspn',
                                                                                            'wcscspn',
                                                                                            'memmove',
                                                                                            '_isnan',
                                                                                            '_finite',
                                                                                            'free',
                                                                                            'realloc',
                                                                                            'memset',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            'memcpy',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_vsnwprintf',
                                                                                            '_hypot',
                                                                                            'ceil',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcstok',
                                                                                            '_wcsicmp',
                                                                                            'CoTaskMemFree',
                                                                                            'CoGetInterfaceAndReleaseStream',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoMarshalInterThreadInterfaceInStream',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoInitialize',
                                                                                            'AccessibleObjectFromEvent',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'InitCommonControlsEx',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipStringFormatGetGenericTypographic',
                                                                                            'GdipDrawString',
                                                                                            'GdipSetTextRenderingHint',
                                                                                            'GdipDeleteFont',
                                                                                            'GdipCreateFont',
                                                                                            'GdipDeleteFontFamily',
                                                                                            'GdipCreateFontFamilyFromName',
                                                                                            'GdipDeletePen',
                                                                                            'GdipCreatePen1',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipSetSmoothingMode',
                                                                                            'GdipFillRectangle',
                                                                                            'GdipFree',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipAlloc',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDrawLine',
                                                                                            'SHAppBarMessage',
                                                                                            'ShellExecuteW',
                                                                                            'WinSqmSetDWORD',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'DwmSetWindowAttribute',
                                                                                            'DwmIsCompositionEnabled',
                                                                                            'InitProcessPriv',
                                                                                            'InitThread',
                                                                                            'UnInitProcessPriv',
                                                                                            'UnInitThread',
                                                                                            '??0NativeHWNDHost@DirectUI@@QAE@XZ',
                                                                                            '??1NativeHWNDHost@DirectUI@@UAE@XZ',
                                                                                            '?Initialize@NativeHWNDHost@DirectUI@@QAEJPBG0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@I@Z',
                                                                                            '?EndDefer@Element@DirectUI@@QAEXK@Z',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            'StrToID',
                                                                                            '?SetContentString@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ',
                                                                                            '?CreateHostWindow@NativeHWNDHost@DirectUI@@UAEPAUHWND__@@KPBG0KHHHHPAU3@PAUHMENU__@@PAUHINSTANCE__@@PAX@Z',
                                                                                            '?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z',
                                                                                            '?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z',
                                                                                            '?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z',
                                                                                            '?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ',
                                                                                            '?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z',
                                                                                            '?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z',
                                                                                            '?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z',
                                                                                            '?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z',
                                                                                            '?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UAEJXZ',
                                                                                            '?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?GetClassInfoW@HWNDElement@DirectUI@@UAEPAUIClassInfo@2@XZ',
                                                                                            '?GetKeyFocused@Element@DirectUI@@UAE_NXZ',
                                                                                            '?GetClassInfoPtr@CCPushButton@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ',
                                                                                            '?GetLocation@Element@DirectUI@@QAEPBUtagPOINT@@PAPAVValue@2@@Z',
                                                                                            '?Click@Button@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?SetEnabled@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QAEJH@Z',
                                                                                            '??0HWNDElement@DirectUI@@QAE@XZ',
                                                                                            '?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?ThemeChange@HWNDElement@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QAEXXZ',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z',
                                                                                            '?GetExtent@Element@DirectUI@@QAEPBUtagSIZE@@PAPAVValue@2@@Z',
                                                                                            '?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z',
                                                                                            '?SetBackgroundStdColor@Element@DirectUI@@QAEJH@Z',
                                                                                            '?BackgroundProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHBITMAP__@@EI_N11@Z',
                                                                                            '?Add@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            '?LoadFromResource@DUIFactory@DirectUI@@QAEJPAUHINSTANCE__@@PBG1PAVElement@2@PAKPAPAV42@1@Z',
                                                                                            '?Destroy@Layout@DirectUI@@QAEXXZ',
                                                                                            '?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z',
                                                                                            '?Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z',
                                                                                            '?DoubleBuffered@Element@DirectUI@@QAEX_N@Z',
                                                                                            '?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z',
                                                                                            '?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?SetActive@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z',
                                                                                            '?Release@Value@DirectUI@@QAEXXZ',
                                                                                            '?SetVisible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z',
                                                                                            '?Register@HWNDElement@DirectUI@@SGJXZ',
                                                                                            '?Destroy@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '??1DUIFactory@DirectUI@@QAE@XZ',
                                                                                            '??1HWNDElement@DirectUI@@UAE@XZ',
                                                                                            '?SetAccessible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                            '?IsContentProtected@Element@DirectUI@@UAE_NXZ',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnDestroy@HWNDElement@DirectUI@@UAEXXZ',
                                                                                            '?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Add@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z',
                                                                                            '?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z',
                                                                                            '?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z',
                                                                                            '?SetKeyFocus@Element@DirectUI@@UAEXXZ',
                                                                                            '?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?OnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z',
                                                                                            '?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z',
                                                                                            'MagSetFullscreenColorEffect',
                                                                                            'MagSetInputTransform',
                                                                                            'MagSetWindowTransform',
                                                                                            'MagSetWindowSource',
                                                                                            'MagShowSystemCursor',
                                                                                            'MagSetFullscreenTransform',
                                                                                            'MagInitialize',
                                                                                            'MagUninitialize',
                                                                                            'UiaRaiseStructureChangedEvent',
                                                                                            'UiaRaiseAutomationEvent',
                                                                                            'UiaClientsAreListening',
                                                                                            'UiaHostProviderFromHwnd',
                                                                                            'UiaReturnRawElementProvider'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 424,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 510792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 15872,
                                                                                       '.reloc\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 510976,
                                                                                       '.text\x00\x00\x00': 239104},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e2d6eb8764dd4ec3bf840f30a5e911fbae832d54f3c2a6939addd07787c08bf6'},
 'e30953278af244cbf40991a1002f82783add42ec13a583c51864c0d8cabd8005': {'AddressOfEntryPoint': 24864,
                                                                      'DebugRVA': 79804,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 110592,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'BitBlt',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'SetProcessWorkingSetSize',
                                                                                      'USER32.dll': 'GetWindow',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'IsDebuggerPresent',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalAlloc',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'LoadLibraryW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadStringW',
                                                                                      'api-ms-win-core-localization-obsolete-l1-2-0.dll': 'CompareStringA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'ResumeThread',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-psapi-l1-1-0.dll': 'QueryFullProcessImageNameW',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlCaptureStackBackTrace',
                                                                                      'api-ms-win-core-shlwapi-legacy-l1-1-0.dll': 'PathFindFileNameW',
                                                                                      'api-ms-win-core-string-obsolete-l1-1-0.dll': 'lstrcmpiW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'EnterCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemInfo',
                                                                                      'api-ms-win-core-threadpool-legacy-l1-1-0.dll': 'QueueUserWorkItem',
                                                                                      'api-ms-win-core-wow64-l1-1-0.dll': 'IsWow64Process',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventWrite',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'CheckTokenMembership',
                                                                                      'dwmcore.dll': 'MilResource_SendCommand',
                                                                                      'dwmredir.dll': 'DwmRenderDesktopForDDA',
                                                                                      'msvcrt.dll': 'sqrt',
                                                                                      'ntdll.dll': 'PssNtFreeSnapshot'},
                                                                      'ImportedFunctions': ['?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memmove',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '_onexit',
                                                                                            '__C_specific_handler',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wtof',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsupr_s',
                                                                                            'wcschr',
                                                                                            'wcsncpy_s',
                                                                                            'wcsrchr',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_wcsicmp',
                                                                                            '_purecall',
                                                                                            '_vsnwprintf',
                                                                                            'sqrt',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'InitializeSRWLock',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'CreateMutexW',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSection',
                                                                                            'ReleaseMutex',
                                                                                            'AcquireSRWLockShared',
                                                                                            'SetEvent',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'EnterCriticalSection',
                                                                                            'GetTickCount64',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemInfo',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetExitCodeThread',
                                                                                            'GetStartupInfoW',
                                                                                            'GetThreadId',
                                                                                            'SetPriorityClass',
                                                                                            'SetThreadPriority',
                                                                                            'TerminateThread',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateThread',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'ExitProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'ResumeThread',
                                                                                            'CheckTokenMembership',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LoadStringW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegGetValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'IsDebuggerPresent',
                                                                                            'ZwQueryWnfStateNameInformation',
                                                                                            'ZwUpdateWnfStateData',
                                                                                            'EtwEventWriteNoRegistration',
                                                                                            'NtOpenEvent',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtAlpcConnectPort',
                                                                                            'NtAlpcSendWaitReceivePort',
                                                                                            'RtlQueryResourcePolicy',
                                                                                            'NtOpenProcess',
                                                                                            'PssNtCaptureSnapshot',
                                                                                            'NtClose',
                                                                                            'RtlUpcaseUnicodeChar',
                                                                                            'NtRequestWaitReplyPort',
                                                                                            'NtConnectPort',
                                                                                            'NtRequestPort',
                                                                                            'NtReplyWaitReceivePort',
                                                                                            'NtCompleteConnectPort',
                                                                                            'NtAcceptConnectPort',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'DbgPrompt',
                                                                                            'NtQuerySystemInformation',
                                                                                            'DbgPrintEx',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'NtReplyPort',
                                                                                            'NtCreateWaitablePort',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtQueryInformationProcess',
                                                                                            'RtlInsertElementGenericTable',
                                                                                            'RtlIsGenericTableEmpty',
                                                                                            'RtlLookupElementGenericTable',
                                                                                            'RtlInitializeGenericTable',
                                                                                            'NtSetInformationProcess',
                                                                                            'RtlFreeSid',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'EtwEventEnabled',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventUnregister',
                                                                                            'RtlEnumerateGenericTableWithoutSplaying',
                                                                                            'RtlDeleteElementGenericTable',
                                                                                            'WinSqmIncrementDWORD',
                                                                                            'WinSqmAddToStream',
                                                                                            'EtwEventWrite',
                                                                                            'PssNtFreeSnapshot',
                                                                                            'CompareStringA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'QueueUserWorkItem',
                                                                                            'LoadLibraryW',
                                                                                            'WerSetFlags',
                                                                                            'SetProcessWorkingSetSize',
                                                                                            'FillRect',
                                                                                            'IsIconic',
                                                                                            'SetTimer',
                                                                                            'GetUpdateRgn',
                                                                                            'CreateWindowInBand',
                                                                                            'InternalGetWindowText',
                                                                                            'ClientToScreen',
                                                                                            'EndPaint',
                                                                                            'RegisterGhostWindow',
                                                                                            'SetThreadDesktop',
                                                                                            'GetAncestor',
                                                                                            'IsDialogMessageW',
                                                                                            'OpenDesktopW',
                                                                                            'EndTask',
                                                                                            'GetCaretBlinkTime',
                                                                                            'IsWindow',
                                                                                            'GetWindowLongW',
                                                                                            'FlashWindowEx',
                                                                                            'EnumWindows',
                                                                                            'LogicalToPhysicalPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'MonitorFromWindow',
                                                                                            'GetClassNameW',
                                                                                            'SetClassLongPtrW',
                                                                                            'OffsetRect',
                                                                                            'GetWindowRect',
                                                                                            'RegisterFrostWindow',
                                                                                            'GhostWindowFromHungWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetThreadDesktop',
                                                                                            'SetWindowTextW',
                                                                                            'UpdateWindow',
                                                                                            'InternalGetWindowIcon',
                                                                                            'SendMessageW',
                                                                                            'GetUserObjectInformationW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetPropW',
                                                                                            'CloseDesktop',
                                                                                            'OpenThreadDesktop',
                                                                                            'GetGuiResources',
                                                                                            'UnregisterSessionPort',
                                                                                            'RegisterSessionPort',
                                                                                            'CheckProcessSession',
                                                                                            'RegisterWindowMessageW',
                                                                                            'DwmStopRedirection',
                                                                                            'DwmStartRedirection',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'IsWindowVisible',
                                                                                            'SetWindowLongPtrW',
                                                                                            'PostThreadMessageW',
                                                                                            'CreateDialogParamW',
                                                                                            'GetSysColorBrush',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetDCEx',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowBand',
                                                                                            'InvalidateRect',
                                                                                            'HungWindowFromGhostWindow',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowInfo',
                                                                                            'IsHungAppWindow',
                                                                                            'GetTitleBarInfo',
                                                                                            'RegisterErrorReportingDialog',
                                                                                            'MonitorFromPoint',
                                                                                            'SetForegroundWindow',
                                                                                            'MessageBeep',
                                                                                            'IsWindowEnabled',
                                                                                            'PeekMessageW',
                                                                                            'RegisterPowerSettingNotification',
                                                                                            'GetSystemMetrics',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'DestroyWindow',
                                                                                            'UnregisterPowerSettingNotification',
                                                                                            'DefWindowProcW',
                                                                                            'IsZoomed',
                                                                                            'DestroyIcon',
                                                                                            'KillTimer',
                                                                                            'EnumDisplayDevicesW',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PostMessageW',
                                                                                            'RegisterClassExW',
                                                                                            'CreateWindowExW',
                                                                                            'ChangeWindowMessageFilterEx',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindow',
                                                                                            'CombineRgn',
                                                                                            'D3DKMTSetProcessSchedulingPriorityClass',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'DeleteObject',
                                                                                            'GetDIBits',
                                                                                            'CreateDIBSection',
                                                                                            'GetRandomRgn',
                                                                                            'GetStockObject',
                                                                                            'CreateRectRgn',
                                                                                            'GdiAlphaBlend',
                                                                                            'OffsetRgn',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectClipRgn',
                                                                                            'SelectObject',
                                                                                            'GetRgnBox',
                                                                                            'DeleteDC',
                                                                                            'BitBlt',
                                                                                            'ImmDisableIME',
                                                                                            'DwmRedirectionManagerShouldRemainOnHibernate',
                                                                                            'DwmRedirectionManagerShutdown',
                                                                                            'DwmShutdownTransport',
                                                                                            'DwmInitializeTransport',
                                                                                            'DwmRedirectionManagerEnableMMCSS',
                                                                                            'DwmVersionCheck',
                                                                                            'DwmRedirectionManagerLockMemoryAllocations',
                                                                                            'DwmRedirectionManagerWaitForMultipleObjects',
                                                                                            'DwmRedirectionManagerFailMessage',
                                                                                            'DwmRedirectionManagerDispatchMessage',
                                                                                            'DwmRenderDesktopForDDA',
                                                                                            'MilComposition_WaitForNextMessage',
                                                                                            'MilChannel_CommitChannel',
                                                                                            'MilCompositionEngine_UpdateSchedulerSettings',
                                                                                            'MilConnection_DestroyChannel',
                                                                                            'MilConnection_CreateChannel',
                                                                                            'MilChannel_GetMarshalType',
                                                                                            'MilComposition_PeekNextMessage',
                                                                                            'MilResource_SendCommand',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'EventWrite',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'lstrcmpiW',
                                                                                            'PathFindFileNameW',
                                                                                            'IsWow64Process',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 30,
                                                                      'NumberOfImportFunctions': 285,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 12800,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 80384},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e30953278af244cbf40991a1002f82783add42ec13a583c51864c0d8cabd8005'},
 'e3314f17a6cd291ff1f912a35635c5f0abb610b2f188be72d4040b700adf8f87': {'AddressOfEntryPoint': 137244,
                                                                      'DebugRVA': 242576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 241664,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'HeapFree',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'PSAPI.DLL': 'GetProcessImageFileNameW',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'SetWindowTextW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetOpenUrlW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminCalcHashFromFileHandle',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'urlmon.dll': 'URLDownloadToFileW'},
                                                                      'ImportedFunctions': ['WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetFileAttributesW',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'GetTickCount',
                                                                                            'SetFileAttributesW',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetFileSizeEx',
                                                                                            'SetFilePointerEx',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'DeleteFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'MoveFileW',
                                                                                            'GetExitCodeThread',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'CopyFileW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetVersionExW',
                                                                                            'GetFileSize',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTempPathW',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'InterlockedIncrement',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCommandLineW',
                                                                                            'LoadLibraryExW',
                                                                                            'TlsAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'OpenProcess',
                                                                                            'InterlockedCompareExchange',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CompareStringW',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'GetStringTypeW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoW',
                                                                                            'InterlockedExchange',
                                                                                            'WriteConsoleW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetFileType',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStdHandle',
                                                                                            'GlobalAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalFree',
                                                                                            'SetHandleCount',
                                                                                            'Sleep',
                                                                                            'InterlockedDecrement',
                                                                                            'SetLastError',
                                                                                            'TlsFree',
                                                                                            'HeapCreate',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'GetCommandLineA',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'HeapFree',
                                                                                            'GetClientRect',
                                                                                            'SetWindowPos',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringW',
                                                                                            'GetWindowLongW',
                                                                                            'CloseDesktop',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetWindowRect',
                                                                                            'DispatchMessageW',
                                                                                            'CreateDialogParamW',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'SendMessageW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'PostQuitMessage',
                                                                                            'DialogBoxParamW',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassExW',
                                                                                            'EndDialog',
                                                                                            'MessageBoxW',
                                                                                            'EnableWindow',
                                                                                            'CreateWindowExW',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowTextW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'CoGetClassObject',
                                                                                            'OleInitialize',
                                                                                            'OleSetContainedObject',
                                                                                            'CoInitializeEx',
                                                                                            'VariantClear',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'PathFileExistsW',
                                                                                            'URLDownloadToFileW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetGetConnectedState',
                                                                                            'InternetOpenW',
                                                                                            'InternetOpenUrlW',
                                                                                            'GetProcessImageFileNameW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 168,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 373444,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 45568,
                                                                                       '.reloc\x00\x00': 14848,
                                                                                       '.rsrc\x00\x00\x00': 373760,
                                                                                       '.text\x00\x00\x00': 237056},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e3314f17a6cd291ff1f912a35635c5f0abb610b2f188be72d4040b700adf8f87'},
 'e3512955bc4d590f01f6a4fd515dc13ed78de89f026fc93b700fb3641ebe0cc7': {'AddressOfEntryPoint': 575104,
                                                                      'DebugRVA': 7632,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 684032,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTickCount64',
                                                                                      'OLEAUT32.dll': 'LoadTypeLib',
                                                                                      'SHELL32.dll': 'SHBindToFolderIDListParent',
                                                                                      'SHLWAPI.dll': 'PathRemoveBackslashW',
                                                                                      'USER32.dll': 'GetFocus',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchAppend',
                                                                                      'dpx.dll': 'DpxNewJob',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlGetUILanguageInfo',
                                                                                      'ole32.dll': 'CoWaitForMultipleHandles'},
                                                                      'ImportedFunctions': ['EventWrite',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'InitiateShutdownW',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'CreateWellKnownSid',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegGetValueW',
                                                                                            'RegEnumValueW',
                                                                                            'RegDeleteTreeW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'PrivilegeCheck',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'QueryFullProcessImageNameW',
                                                                                            'GetExitCodeProcess',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'CreateThread',
                                                                                            'GetLocaleInfoEx',
                                                                                            'GetVersionExW',
                                                                                            'LocalFree',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'GetLocalTime',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentThreadId',
                                                                                            'FreeLibrary',
                                                                                            'ExitProcess',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryW',
                                                                                            'RaiseException',
                                                                                            'GetCommandLineW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenProcess',
                                                                                            'GetFileAttributesExW',
                                                                                            'CloseHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetProductInfo',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'SearchPathW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetFileMUIPath',
                                                                                            'LocaleNameToLCID',
                                                                                            'EnumUILanguagesW',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'SetProcessPreferredUILanguages',
                                                                                            'NotifyUILanguageChange',
                                                                                            'GetExitCodeThread',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'HeapAlloc',
                                                                                            'GetTempPathW',
                                                                                            'CreateProcessW',
                                                                                            'CreateDirectoryW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'FindClose',
                                                                                            'GetSystemPreferredUILanguages',
                                                                                            'GetThreadPreferredUILanguages',
                                                                                            'GetCurrentProcess',
                                                                                            'GetUILanguageInfo',
                                                                                            'IsValidLocaleName',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'K32EnumProcesses',
                                                                                            'GetFileAttributesW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExA',
                                                                                            'VirtualProtect',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'VirtualQuery',
                                                                                            'GetModuleHandleExW',
                                                                                            'LocalAlloc',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'OutputDebugStringA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'TerminateThread',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'MulDiv',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetTickCount64',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'CreateRectRgn',
                                                                                            'SelectObject',
                                                                                            'InvalidateRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'GetSystemMetrics',
                                                                                            'LoadImageW',
                                                                                            'DestroyIcon',
                                                                                            'GetWindowLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CreateWindowExW',
                                                                                            'MapWindowPoints',
                                                                                            'TranslateMessage',
                                                                                            'SetCursor',
                                                                                            'ExitWindowsEx',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'GetClientRect',
                                                                                            'SetWindowRgn',
                                                                                            'GetSysColor',
                                                                                            'SendMessageW',
                                                                                            'GetParent',
                                                                                            'LoadStringW',
                                                                                            'FindWindowW',
                                                                                            'SendNotifyMessageW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SetTimer',
                                                                                            'UnregisterClassA',
                                                                                            'KillTimer',
                                                                                            'LoadCursorW',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperW',
                                                                                            'SetDlgItemTextW',
                                                                                            'DefWindowProcW',
                                                                                            'SetForegroundWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'GetDlgItemTextW',
                                                                                            'BeginPaint',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetWindowLongW',
                                                                                            'SystemParametersInfoW',
                                                                                            'MessageBoxW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'CharNextW',
                                                                                            'UnregisterClassW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'RegisterClassExW',
                                                                                            'PostMessageW',
                                                                                            'LoadIconW',
                                                                                            'SetActiveWindow',
                                                                                            'GetAncestor',
                                                                                            'ShowWindow',
                                                                                            'GetWindowLongW',
                                                                                            'GetFocus',
                                                                                            '_isctype',
                                                                                            'towupper',
                                                                                            'iswspace',
                                                                                            'toupper',
                                                                                            'iswctype',
                                                                                            'strchr',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'ceil',
                                                                                            '__dllonexit',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'abort',
                                                                                            '__crtGetStringTypeW',
                                                                                            '__crtLCMapStringW',
                                                                                            'memcpy',
                                                                                            '___mb_cur_max_func',
                                                                                            '__mb_cur_max',
                                                                                            '___lc_codepage_func',
                                                                                            '___lc_handle_func',
                                                                                            '__pctype_func',
                                                                                            '_errno',
                                                                                            'setlocale',
                                                                                            '__uncaught_exception',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'rand',
                                                                                            'towlower',
                                                                                            'tolower',
                                                                                            'memmove',
                                                                                            '_wgetenv',
                                                                                            '_ltow_s',
                                                                                            'wcsncmp',
                                                                                            'wcschr',
                                                                                            'malloc',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            'wcsncpy_s',
                                                                                            '_wgetcwd',
                                                                                            '_wsetlocale',
                                                                                            'free',
                                                                                            'memchr',
                                                                                            'localeconv',
                                                                                            'sprintf_s',
                                                                                            '_wcsicoll',
                                                                                            'fclose',
                                                                                            '_wcsnicmp',
                                                                                            'fgetws',
                                                                                            '_wfopen',
                                                                                            '_vsnwprintf',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '_wcsicmp',
                                                                                            'wcsstr',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'memcpy_s',
                                                                                            '_purecall',
                                                                                            'strcspn',
                                                                                            'wcscmp',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlGetNtProductType',
                                                                                            'NtGetMUIRegistryInfo',
                                                                                            'NtIsUILanguageComitted',
                                                                                            'RtlpSetPreferredUILanguages',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlGetUILanguageInfo',
                                                                                            'PathCchCanonicalize',
                                                                                            'PathCchCombine',
                                                                                            'PathCchAppend',
                                                                                            'SHGetIDListFromObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetDataFromIDListW',
                                                                                            'SHCreateItemInKnownFolder',
                                                                                            'SHBindToFolderIDListParent',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Destroy',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'PropertySheetW',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemFree',
                                                                                            'CoGetObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoGetCallContext',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'SysStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysFreeString',
                                                                                            'RegisterTypeLib',
                                                                                            'SysAllocString',
                                                                                            'LoadTypeLib',
                                                                                            'DpxNewJob',
                                                                                            'StrRetToStrW',
                                                                                            'PathFindExtensionW',
                                                                                            'StrStrNW',
                                                                                            'StrStrIW',
                                                                                            'StrCmpIW',
                                                                                            'PathFileExistsW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathMatchSpecExW',
                                                                                            'PathIsDirectoryW',
                                                                                            'PathRemoveBackslashW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 321,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 113904,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.idata\x00\x00': 11776,
                                                                                       '.pdata\x00\x00': 17408,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 114176,
                                                                                       '.text\x00\x00\x00': 633856},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e3512955bc4d590f01f6a4fd515dc13ed78de89f026fc93b700fb3641ebe0cc7'},
 'e362670f93cdd952335b1a41e5529f184f2022ea4d41817a9781b150b062511c': {'AddressOfEntryPoint': 26935,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueA',
                                                                                      'COMCTL32.dll': 'PropertySheetA',
                                                                                      'GDI32.dll': 'TextOutA',
                                                                                      'KERNEL32.dll': 'UnmapViewOfFile',
                                                                                      'MSVCR80.dll': '_tempnam',
                                                                                      'USER32.dll': 'SetDlgItemTextA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CreatePropertySheetPageA',
                                                                                            'PropertySheetA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetModuleHandleA',
                                                                                            'ResumeThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateProcessA',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeleteFileA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'SetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'CreateFileA',
                                                                                            'CreateFileMappingA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoA',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'CloseHandle',
                                                                                            'SetFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetLastError',
                                                                                            'FormatMessageA',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'lstrlenA',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MessageBoxA',
                                                                                            'GetFocus',
                                                                                            'wsprintfA',
                                                                                            'SetCursor',
                                                                                            'GetDlgItem',
                                                                                            'SendDlgItemMessageA',
                                                                                            'GetParent',
                                                                                            'PostMessageA',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'LoadCursorA',
                                                                                            'RegisterClassA',
                                                                                            'CreateWindowExA',
                                                                                            'ShowWindow',
                                                                                            'UpdateWindow',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetSystemMetrics',
                                                                                            'EndPaint',
                                                                                            'PeekMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'SendMessageA',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'CreateDIBitmap',
                                                                                            'SelectObject',
                                                                                            'CreateFontA',
                                                                                            'CreateSolidBrush',
                                                                                            'TextOutA',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryValueA',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            '_close',
                                                                                            '_read',
                                                                                            '_open',
                                                                                            '_strdup',
                                                                                            '_crt_debugger_hook',
                                                                                            '__set_app_type',
                                                                                            '_encode_pointer',
                                                                                            'strchr',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'strncat',
                                                                                            'strcat',
                                                                                            'strlen',
                                                                                            'strcpy',
                                                                                            '_localtime64',
                                                                                            '_time64',
                                                                                            'strtol',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_putenv',
                                                                                            '_fstat64i32',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            'remove',
                                                                                            'fread',
                                                                                            'ftell',
                                                                                            'fseek',
                                                                                            'fopen',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'freopen',
                                                                                            '_snprintf',
                                                                                            'strncpy',
                                                                                            'strcmp',
                                                                                            'strrchr',
                                                                                            '_vsnprintf',
                                                                                            'sscanf',
                                                                                            'fwrite',
                                                                                            'strftime',
                                                                                            'sprintf',
                                                                                            'isspace',
                                                                                            'qsort',
                                                                                            'realloc',
                                                                                            'fgets',
                                                                                            'strncmp',
                                                                                            '__argv',
                                                                                            '__argc',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_ismbblead',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '_tempnam'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 5096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 20480,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e362670f93cdd952335b1a41e5529f184f2022ea4d41817a9781b150b062511c'},
 'e38b3e1b6dcc39df44e0fd20ecf91b60549bda698ed2958cff9ddadb87525992': {'AddressOfEntryPoint': 13744,
                                                                      'DebugRVA': 4208,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 69632,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'MultiByteToWideChar',
                                                                                      'SHELL32.dll': 'SHCreateItemFromIDList',
                                                                                      'SHLWAPI.dll': 'StrCmpNW',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegSetKeyValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CloseHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'VirtualQuery',
                                                                                            'GetLastError',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'VirtualProtect',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStartupInfoW',
                                                                                            'SetHandleCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'OutputDebugStringA',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapFree',
                                                                                            'Sleep',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapAlloc',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetFilePointer',
                                                                                            'MultiByteToWideChar',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'ShellExecuteExW',
                                                                                            'SHSetLocalizedName',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'SHCreateItemFromIDList',
                                                                                            'StrCmpNW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 37032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 37376,
                                                                                       '.text\x00\x00\x00': 43520},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e38b3e1b6dcc39df44e0fd20ecf91b60549bda698ed2958cff9ddadb87525992'},
 'e3beaa87dc6097e24169d159e403063cbdc52497f5f80c4c4d5bfb2d75a54b7c': {'AddressOfEntryPoint': 13615,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MulDiv',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'RegisterClassA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'wvsprintfA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'EmptyClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'SetForegroundWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 157,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 20376,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 20480,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e3beaa87dc6097e24169d159e403063cbdc52497f5f80c4c4d5bfb2d75a54b7c'},
 'e410347ff0234a42a3f3599bd85c93acef197ee538868ab53349d0fa616e07c1': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 16880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 16896,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e410347ff0234a42a3f3599bd85c93acef197ee538868ab53349d0fa616e07c1'},
 'e4365d0cc3e364026e0322854b8e555c87e7379013ed8489199205f0e5d59d9a': {'AddressOfEntryPoint': 266176,
                                                                      'DebugRVA': 6576,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 339968,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetNamedSecurityInfoW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'WaitForInputIdle',
                                                                                      'api-ms-win-appmodel-runtime-l1-1-1.dll': 'GetPackageFullName',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoReleaseServerProcess',
                                                                                      'api-ms-win-core-debug-l1-1-1.dll': 'OutputDebugStringA',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileAttributesW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'LoadResource',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'UnmapViewOfFile',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenProcessToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegQueryValueExW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlVirtualUnwind',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'OpenEventW',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount64',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'SystemTimeToFileTime',
                                                                                      'api-ms-win-eventing-provider-l1-1-0.dll': 'EventRegister',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'api-ms-win-security-sddl-l1-1-0.dll': 'ConvertSidToStringSidW',
                                                                                      'api-ms-win-security-trustee-l1-1-1.dll': 'BuildExplicitAccessWithNameW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'WinSqmSetDWORD'},
                                                                      'ImportedFunctions': ['PostQuitMessage',
                                                                                            'GetMessageW',
                                                                                            'CharNextW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'WaitForInputIdle',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'memcpy_s',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            'tolower',
                                                                                            'wcsnlen',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'wcsncat_s',
                                                                                            'wcsrchr',
                                                                                            'wcsncpy_s',
                                                                                            '_purecall',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            'vswprintf_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'memmove',
                                                                                            '_wcsnicmp',
                                                                                            '_wtoi',
                                                                                            '__set_app_type',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memmove_s',
                                                                                            '_CxxThrowException',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_callnewh',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'logf',
                                                                                            'expf',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoReleaseServerProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'OpenMutexW',
                                                                                            'CreateEventW',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventW',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetModuleHandleW',
                                                                                            'LockResource',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'FindResourceExW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'HeapSetInformation',
                                                                                            'GetProcessHeap',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetErrorMode',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'ResumeThread',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'SetPriorityClass',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'OpenProcessToken',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'EventRegister',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTime',
                                                                                            'GetTickCount',
                                                                                            'GetTickCount64',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetSidSubAuthority',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetTokenInformation',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'DeleteFileW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'FlushViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'OpenFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'SystemTimeToFileTime',
                                                                                            'CompareStringW',
                                                                                            'OutputDebugStringA',
                                                                                            'LocalFree',
                                                                                            'SetEntriesInAclW',
                                                                                            'RegSetKeyValueW',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'WinSqmSetDWORD',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'PathFileExistsW',
                                                                                            'GetPackageFullName',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'BuildExplicitAccessWithNameW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 31,
                                                                      'NumberOfImportFunctions': 172,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3280,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 8192,
                                                                                       '.pdata\x00\x00': 12288,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 314880},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e4365d0cc3e364026e0322854b8e555c87e7379013ed8489199205f0e5d59d9a'},
 'e4414327c8bfe5eff6abc3c6b6296ff66f792169fc02693bef126b6edb6d2eae': {'AddressOfEntryPoint': 165164,
                                                                      'DebugRVA': 242976,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 241664,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetSecurityDescriptorOwner',
                                                                                      'CRYPT32.dll': 'CryptHashPublicKeyInfo',
                                                                                      'GDI32.dll': 'CreateDCW',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'CreateWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetConnectW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminCalcHashFromFileHandle',
                                                                                      'gdiplus.dll': 'GdipAlloc',
                                                                                      'ole32.dll': 'CLSIDFromProgID'},
                                                                      'ImportedFunctions': ['GdiplusShutdown',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipFree',
                                                                                            'GdipCloneImage',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipCreateBitmapFromResource',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipAlloc',
                                                                                            'QueryServiceConfigW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetUserNameW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'CreateWellKnownSid',
                                                                                            'InitializeAcl',
                                                                                            'SetEntriesInAclW',
                                                                                            'DecryptFileW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'ControlService',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTokenInformation',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'LookupAccountNameW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetMessageW',
                                                                                            'PeekMessageW',
                                                                                            'PostMessageW',
                                                                                            'IsWindow',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'IsDialogMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'WaitForInputIdle',
                                                                                            'LoadCursorW',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetCursorPos',
                                                                                            'MonitorFromPoint',
                                                                                            'GetMonitorInfoW',
                                                                                            'ReleaseDC',
                                                                                            'MessageBoxW',
                                                                                            'PostThreadMessageW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateDCW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromProgID',
                                                                                            'GetCurrentProcess',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsGetValue',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'ReleaseMutex',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetProcessId',
                                                                                            'WriteFile',
                                                                                            'ConnectNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'LocalFree',
                                                                                            'CreateNamedPipeW',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenProcess',
                                                                                            'lstrlenA',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetComputerNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetVolumePathNameW',
                                                                                            'HeapAlloc',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetDateFormatW',
                                                                                            'GetSystemTime',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetStringTypeW',
                                                                                            'SetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateProcessW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetThreadExecutionState',
                                                                                            'CopyFileExW',
                                                                                            'HeapSetInformation',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateMutexW',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'DeleteFileW',
                                                                                            'GetThreadLocale',
                                                                                            'GetTimeZoneInformation',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'SetLastError',
                                                                                            'EncodePointer',
                                                                                            'GetFileType',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GlobalFree',
                                                                                            'MoveFileExW',
                                                                                            'CopyFileW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetModuleHandleA',
                                                                                            'RaiseException',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'RtlUnwind',
                                                                                            'SetFilePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocalTime',
                                                                                            'UnmapViewOfFile',
                                                                                            'IsDebuggerPresent',
                                                                                            'DuplicateHandle',
                                                                                            'HeapFree',
                                                                                            'FormatMessageW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CompareStringA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetStdHandle',
                                                                                            'DecodePointer',
                                                                                            'ExitProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetProcessHeap',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CryptHashPublicKeyInfo',
                                                                                            'UuidCreate',
                                                                                            'InternetCloseHandle',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetErrorDlg',
                                                                                            'InternetReadFile',
                                                                                            'HttpSendRequestW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetOpenW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetConnectW',
                                                                                            'WinVerifyTrust',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 15,
                                                                      'NumberOfImportFunctions': 263,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 254700,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 107008,
                                                                                       '.reloc\x00\x00': 17920,
                                                                                       '.rsrc\x00\x00\x00': 254976,
                                                                                       '.text\x00\x00\x00': 234496,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.wixburn': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e4414327c8bfe5eff6abc3c6b6296ff66f792169fc02693bef126b6edb6d2eae'},
 'e45961a8602ebf4bfd718b2390ea37a823e0fe201f1873889454a838fbd29f21': {'AddressOfEntryPoint': 41296,
                                                                      'DebugRVA': 4624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegGetValueW',
                                                                                      'DUI70.dll': '?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                      'DUser.dll': 'InvalidateGadget',
                                                                                      'KERNEL32.dll': 'GetThreadUILanguage',
                                                                                      'OLEACC.dll': 'GetProcessHandleFromHwnd',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'GetKeyState',
                                                                                      'msvcrt.dll': '??_U@YAPAXI@Z',
                                                                                      'ntdll.dll': 'WinSqmAddToStream',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'EventRegister',
                                                                                            'EventWrite',
                                                                                            'RegEnumValueW',
                                                                                            'EventUnregister',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'TraceMessage',
                                                                                            'RegLoadMUIStringW',
                                                                                            'RegGetValueW',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'RaiseException',
                                                                                            'CloseHandle',
                                                                                            'OpenEventW',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetCurrentProcessId',
                                                                                            'VirtualAllocEx',
                                                                                            'GetThreadPreferredUILanguages',
                                                                                            'MulDiv',
                                                                                            'GetLocaleInfoEx',
                                                                                            'ReadProcessMemory',
                                                                                            'CompareStringOrdinal',
                                                                                            'VirtualFreeEx',
                                                                                            'OpenJobObjectW',
                                                                                            'IsProcessInJob',
                                                                                            'K32GetModuleBaseNameW',
                                                                                            'K32EnumProcessModules',
                                                                                            'K32EnumProcesses',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'DeleteFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'HeapFree',
                                                                                            'DeleteProcThreadAttributeList',
                                                                                            'CreateProcessW',
                                                                                            'UpdateProcThreadAttribute',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'InitializeProcThreadAttributeList',
                                                                                            'OpenProcess',
                                                                                            'GetLastError',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapSetInformation',
                                                                                            'Sleep',
                                                                                            'OpenMutexW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'GetThreadUILanguage',
                                                                                            'GetAncestor',
                                                                                            'SetWindowPos',
                                                                                            'GetSystemMetrics',
                                                                                            'SendMessageW',
                                                                                            'IsProcessDPIAware',
                                                                                            'GetThreadDesktop',
                                                                                            'GetUserObjectInformationW',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetShellWindow',
                                                                                            'FindWindowW',
                                                                                            'LoadCursorW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'SetCursor',
                                                                                            'SendInput',
                                                                                            'SendMessageTimeoutW',
                                                                                            'UnregisterClassA',
                                                                                            'GetKeyState',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_wtoi',
                                                                                            'wcsrchr',
                                                                                            '_ltow_s',
                                                                                            'wcsspn',
                                                                                            'wcscspn',
                                                                                            'memcpy_s',
                                                                                            'memmove_s',
                                                                                            '__p__fmode',
                                                                                            '_wcsicmp',
                                                                                            '_wcslwr_s',
                                                                                            'calloc',
                                                                                            'wcschr',
                                                                                            'wcsstr',
                                                                                            '_purecall',
                                                                                            'memset',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_vsnwprintf',
                                                                                            '__CxxFrameHandler3',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'WinSqmIsOptedIn',
                                                                                            'WinSqmAddToStream',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'GetProcessHandleFromHwnd',
                                                                                            'ShellExecuteW',
                                                                                            'InvalidateGadget',
                                                                                            '?GetUnset@Value@DirectUI@@SGPAV12@XZ',
                                                                                            '?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z',
                                                                                            '?CustomProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z',
                                                                                            '??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '??1CritSecLock@DirectUI@@QAE@XZ',
                                                                                            '?Release@Value@DirectUI@@QAEXXZ',
                                                                                            '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                            '?IsContentProtected@Element@DirectUI@@UAE_NXZ',
                                                                                            '?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z',
                                                                                            '?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?GetKeyFocused@Element@DirectUI@@UAE_NXZ',
                                                                                            '?SetVisible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetActive@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetAccessible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            'RegisterPVLBehaviorFactory',
                                                                                            'StrToID',
                                                                                            '?GetClassInfoPtr@TouchSwitch@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?SetToggleValue@TouchSwitch@DirectUI@@QAEXH@Z',
                                                                                            '?GetToggleValue@TouchSwitch@DirectUI@@QAEHXZ',
                                                                                            'InitProcessPriv',
                                                                                            'StartMessagePump',
                                                                                            '?ThemeChange@HWNDElement@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            'UnInitProcessPriv',
                                                                                            '?Destroy@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '??0Element@DirectUI@@QAE@XZ',
                                                                                            '??1Element@DirectUI@@UAE@XZ',
                                                                                            '?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z',
                                                                                            '?Click@TouchButton@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ',
                                                                                            '?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ',
                                                                                            '?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?AddChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ',
                                                                                            '?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ',
                                                                                            '?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z',
                                                                                            '?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z',
                                                                                            '?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ',
                                                                                            '?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?Release@ClassInfoBase@DirectUI@@UAEHXZ',
                                                                                            '?AddRef@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z',
                                                                                            '?Register@ClassInfoBase@DirectUI@@QAEJXZ',
                                                                                            '?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z',
                                                                                            '??1ClassInfoBase@DirectUI@@UAE@XZ',
                                                                                            '??0ClassInfoBase@DirectUI@@QAE@XZ',
                                                                                            '?SliderUpdated@TouchSlider@DirectUI@@SG?AVUID@@XZ',
                                                                                            'InitThread',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z',
                                                                                            '?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QAEXXZ',
                                                                                            '?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z',
                                                                                            'UnInitThread',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UAEJXZ',
                                                                                            '?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?Register@Element@DirectUI@@SGJXZ',
                                                                                            '?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ',
                                                                                            '?GetRoot@Element@DirectUI@@QAEPAV12@XZ',
                                                                                            '?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?OnHosted@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z',
                                                                                            '?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z',
                                                                                            '?SetKeyFocus@Element@DirectUI@@UAEXXZ',
                                                                                            '?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z',
                                                                                            '?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z',
                                                                                            '?IsDescendent@Element@DirectUI@@QAE_NPAV12@@Z',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            '?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z',
                                                                                            '?Add@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?OnDestroy@Element@DirectUI@@UAEXXZ',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 248,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 6240,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 10752,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 6656,
                                                                                       '.text\x00\x00\x00': 47104},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e45961a8602ebf4bfd718b2390ea37a823e0fe201f1873889454a838fbd29f21'},
 'e46853caaf6adf679f3bdb116761aa7ef199f148641cff7ec9d76fd67ef5305f': {'AddressOfEntryPoint': 4096,
                                                                      'DebugRVA': 340736,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 339968,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'KERNEL32.dll': 'GetSystemInfo',
                                                                                      'SHLWAPI.dll': 'PathQuoteSpacesW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapValidate',
                                                                                            'IsBadReadPtr',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'HeapFree',
                                                                                            'VirtualFree',
                                                                                            'WriteFile',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'IsValidCodePage',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'FatalAppExitA',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'FreeLibrary',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryA',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleFileNameW',
                                                                                            'HeapAlloc',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'RtlUnwind',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocaleInfoA',
                                                                                            'DebugBreak',
                                                                                            'OutputDebugStringA',
                                                                                            'WriteConsoleW',
                                                                                            'OutputDebugStringW',
                                                                                            'LoadLibraryW',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesA',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'RaiseException',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'lstrlenA',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'GetProcessHeap',
                                                                                            'VirtualQuery',
                                                                                            'FlushFileBuffers',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'OpenFileMappingA',
                                                                                            'CreateFileMappingA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'SetFilePointerEx',
                                                                                            'SizeofResource',
                                                                                            'CreateFileW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'lstrlenW',
                                                                                            'FindResourceExW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetStartupInfoW',
                                                                                            'ReadFile',
                                                                                            'SetEvent',
                                                                                            'OpenEventA',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemInfo',
                                                                                            'PathQuoteSpacesW',
                                                                                            'RevertToSelf',
                                                                                            'SetThreadToken',
                                                                                            'OpenThreadToken',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'wvsprintfW',
                                                                                            'CharLowerBuffW',
                                                                                            'MessageBoxW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1401552,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 69632,
                                                                                       '.reloc\x00\x00': 15872,
                                                                                       '.rsrc\x00\x00\x00': 1401856,
                                                                                       '.text\x00\x00\x00': 333312},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e46853caaf6adf679f3bdb116761aa7ef199f148641cff7ec9d76fd67ef5305f'},
 'e46c156d2116416c1c27eb47b46e891ec7bc12522b73f646d576477b71aa69ba': {'AddressOfEntryPoint': 14496,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINSTA.dll': 'WinStationOpenServerExW',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['WinStationGetAllSessionsW',
                                                                                            'LogonIdFromWinStationNameW',
                                                                                            'WinStationNameFromLogonIdW',
                                                                                            'WinStationDisconnect',
                                                                                            'WinStationFreeMemory',
                                                                                            'WinStationOpenServerW',
                                                                                            'WinStationOpenServerExW',
                                                                                            'LoadStringW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'Sleep',
                                                                                            'wcschr',
                                                                                            'vfwprintf',
                                                                                            'fwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcstol',
                                                                                            'memmove',
                                                                                            '_wcslwr',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_wsetlocale',
                                                                                            'setlocale',
                                                                                            '_iob',
                                                                                            'fgetwc',
                                                                                            'wcstoul',
                                                                                            'swprintf_s',
                                                                                            'memcpy',
                                                                                            'iswctype',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e46c156d2116416c1c27eb47b46e891ec7bc12522b73f646d576477b71aa69ba'},
 'e4783b194a052ecb4aaf60b3e977688c47174a2027907be8abc731b02208831b': {'AddressOfEntryPoint': 12797,
                                                                      'DebugRVA': 4464,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CryptGenRandom',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'msvcrt.dll': 'strncpy',
                                                                                      'ntdll.dll': 'NtClose'},
                                                                      'ImportedFunctions': ['strchr',
                                                                                            'sprintf',
                                                                                            'strstr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'OpenProcessToken',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'CryptAcquireContextA',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'GetLengthSid',
                                                                                            'GetTokenInformation',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'GetVersionExA',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'HeapFree',
                                                                                            'CloseHandle',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetLastError',
                                                                                            'DeleteFileA',
                                                                                            'MoveFileExA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'CreateFileA',
                                                                                            'WriteFile',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'FlushFileBuffers',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CreateThread',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateDirectoryA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetDriveTypeA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'SendMessageA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'ShowWindow',
                                                                                            'NtShutdownSystem',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2120,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 322560,
                                                                                       '.text\x00\x00\x00': 22016},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e4783b194a052ecb4aaf60b3e977688c47174a2027907be8abc731b02208831b'},
 'e4a49f9335de8284ba58131c68d86a30c594ab757ca7ae317ea71e6b58a6a42e': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e4a49f9335de8284ba58131c68d86a30c594ab757ca7ae317ea71e6b58a6a42e'},
 'e4b8ae527cd61b724633d6408743a3ca45203ca11faebb7c0411d8bb30c19a87': {'AddressOfEntryPoint': 4564,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LockResource',
                                                                                      'SETUPAPI.dll': 'SetupIterateCabinetW',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['SetupIterateCabinetW',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'ShellExecuteExW',
                                                                                            'ShellExecuteW',
                                                                                            'wsprintfW',
                                                                                            'MessageBoxW',
                                                                                            'WriteFile',
                                                                                            'VerSetConditionMask',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateFileW',
                                                                                            'GetLastError',
                                                                                            'DeleteFileW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadResource',
                                                                                            'CloseHandle',
                                                                                            'lstrcpyW',
                                                                                            'ExitProcess',
                                                                                            'SizeofResource',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'LoadLibraryA',
                                                                                            'GetTempPathW',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'FindResourceW',
                                                                                            'FreeLibrary',
                                                                                            'LockResource'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 883076,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 883200,
                                                                                       '.text\x00\x00\x00': 2048},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e4b8ae527cd61b724633d6408743a3ca45203ca11faebb7c0411d8bb30c19a87'},
 'e4b9f694cb1762aa33fe0a4725b12e570eae796bfde6d0d649533ebbc30a66de': {'AddressOfEntryPoint': 6912,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'SendMessageW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['EventWrite',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SendMessageW',
                                                                                            '_XcptFilter',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'exit',
                                                                                            'memset',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'ShellExecuteW',
                                                                                            'CompareStringOrdinal',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 39,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 208312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 208384,
                                                                                       '.text\x00\x00\x00': 5120},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e4b9f694cb1762aa33fe0a4725b12e570eae796bfde6d0d649533ebbc30a66de'},
 'e4d44531d5af5f61711f377ad6cb72ebef1113a677748086f370eb71d1b6dec3': {'AddressOfEntryPoint': 12707,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'ExitProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalUnlock',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 178560,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 178688,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e4d44531d5af5f61711f377ad6cb72ebef1113a677748086f370eb71d1b6dec3'},
 'e5112f7522636e5263399ffbf7f52b1dfc7b5eac6efa81d1a5ee441acafb10b2': {'AddressOfEntryPoint': 14240,
                                                                      'DebugRVA': 7536,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'OleRun'},
                                                                      'ImportedFunctions': ['RegEnumValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            '_except_handler4_common',
                                                                                            '_CxxThrowException',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__set_app_type',
                                                                                            '_controlfp',
                                                                                            '__wgetmainargs',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'tolower',
                                                                                            'wprintf',
                                                                                            '_wcsnicmp',
                                                                                            '_wcsicmp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memset',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'OleRun',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 56,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e5112f7522636e5263399ffbf7f52b1dfc7b5eac6efa81d1a5ee441acafb10b2'},
 'e5892202db9c37f741ba345d2baae658893e10f11ff67dd481db6693fa3861d3': {'AddressOfEntryPoint': 170928,
                                                                      'DebugRVA': 4656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 270336,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'PeekMessageW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'msvcrt.dll': 'ungetc',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['LookupAccountSidW',
                                                                                            'GetSidSubAuthority',
                                                                                            'OpenThreadToken',
                                                                                            'LogonUserW',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetTokenInformation',
                                                                                            'CopySid',
                                                                                            'ImpersonateSelf',
                                                                                            'ImpersonateLoggedOnUser',
                                                                                            'RevertToSelf',
                                                                                            'GetLengthSid',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegEnumValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'CreateServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'DeleteService',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'StartServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'ChangeServiceConfigW',
                                                                                            'QueryServiceStatusEx',
                                                                                            'ControlService',
                                                                                            'QueryServiceConfigW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetThreadLocale',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'DuplicateHandle',
                                                                                            'CloseHandle',
                                                                                            'GetDateFormatW',
                                                                                            'GetNumberOfConsoleInputEvents',
                                                                                            'LoadLibraryExW',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetModuleHandleW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'WriteFile',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetConsoleMode',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetTimeFormatW',
                                                                                            'SetConsoleMode',
                                                                                            'SetConsoleCursorPosition',
                                                                                            'WriteConsoleW',
                                                                                            'TerminateProcess',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetStdHandle',
                                                                                            'FillConsoleOutputCharacterW',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'GetProcAddress',
                                                                                            'QueueUserAPC',
                                                                                            'EnterCriticalSection',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'LocalAlloc',
                                                                                            'GetFileType',
                                                                                            'FillConsoleOutputAttribute',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'LocalFree',
                                                                                            'SleepEx',
                                                                                            'GetCurrentThreadId',
                                                                                            'ReadConsoleInputW',
                                                                                            'FreeLibrary',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'OpenMutexA',
                                                                                            'ReleaseMutex',
                                                                                            'VerSetConditionMask',
                                                                                            'CreateDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetFileAttributesW',
                                                                                            'CompareStringW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'CompareStringA',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryW',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '_stricmp',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'floor',
                                                                                            '_ftol2',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'swprintf_s',
                                                                                            '_wcsicmp',
                                                                                            'feof',
                                                                                            'swscanf',
                                                                                            '_finite',
                                                                                            'wcsstr',
                                                                                            'free',
                                                                                            'iswxdigit',
                                                                                            'wcstol',
                                                                                            'malloc',
                                                                                            'wcstoul',
                                                                                            'wcschr',
                                                                                            'exit',
                                                                                            'getc',
                                                                                            '_wsetlocale',
                                                                                            'wcstok',
                                                                                            '_vsnwprintf',
                                                                                            '__dllonexit',
                                                                                            '_wfopen',
                                                                                            '__doserrno',
                                                                                            'ungetc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromString',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemAlloc',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'PostThreadMessageW',
                                                                                            'SetTimer',
                                                                                            'LoadStringW',
                                                                                            'DispatchMessageW',
                                                                                            'KillTimer',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'SHGetFolderPathW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 165,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 8704,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 178688},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e5892202db9c37f741ba345d2baae658893e10f11ff67dd481db6693fa3861d3'},
 'e5c6eb60211ec6b21425f7cd63d597109dfd4c867b5645b52d05684be59097fd': {'AddressOfEntryPoint': 39952,
                                                                      'DebugRVA': 5040,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter',
                                                                                      'MSVCR100.dll': '_lock',
                                                                                      'NETAPI32.dll': 'NetGetAnyDCName',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'StartServiceW',
                                                                                            'RegSetValueExW',
                                                                                            'QueryServiceConfigW',
                                                                                            'RegOpenKeyW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'CompareStringW',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'lstrlenW',
                                                                                            'GetModuleHandleW',
                                                                                            'VirtualQuery',
                                                                                            'GetVersionExW',
                                                                                            'GetComputerNameW',
                                                                                            'SetLastError',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'RaiseException',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryA',
                                                                                            'LocalAlloc',
                                                                                            'GetFileAttributesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetModuleFileNameW',
                                                                                            'DebugBreak',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'memcpy',
                                                                                            '_swscanf_s_l',
                                                                                            '__crt_debugger_hook',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'div',
                                                                                            'wcscpy_s',
                                                                                            'wcschr',
                                                                                            'wcscat_s',
                                                                                            '_itow_s',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memset',
                                                                                            '_wcsicmp',
                                                                                            'wcsncpy_s',
                                                                                            'wcsncat_s',
                                                                                            '_wtoi',
                                                                                            '_ultow',
                                                                                            '_lock',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'GetErrorInfo',
                                                                                            'VariantClear',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'NetApiBufferFree',
                                                                                            'NetGetAnyDCName'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 104,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1708,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.pdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 52224},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e5c6eb60211ec6b21425f7cd63d597109dfd4c867b5645b52d05684be59097fd'},
 'e5e8c07f5745db40174b6f1493f930c10078dee4a0c7c233c7cec7fd94f9f1d2': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 127928,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 128000,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e5e8c07f5745db40174b6f1493f930c10078dee4a0c7c233c7cec7fd94f9f1d2'},
 'e614bb23131efe77b8ef6cfe08a28ceec7a9adccc03d183b7a287ac6c822de1f': {'AddressOfEntryPoint': 48308,
                                                                      'DebugRVA': 5808,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 144608,
                                                                      'ExportSize': 112,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'MSVCR100.dll': 'memset',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'instapi110.dll': 'GetSQLVerSpecificRegString',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['ReleaseMutex',
                                                                                            'ReadProcessMemory',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'GetFileAttributesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'DebugBreak',
                                                                                            'VirtualQuery',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CompareStringW',
                                                                                            'SetErrorMode',
                                                                                            'SetHandleInformation',
                                                                                            'lstrlenW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'AllocConsole',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SetConsoleScreenBufferSize',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateEventA',
                                                                                            'CloseHandle',
                                                                                            'WriteFile',
                                                                                            'CreateMutexW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'GetStartupInfoW',
                                                                                            'SetThreadPriority',
                                                                                            'GetThreadPriority',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'FreeLibrary',
                                                                                            'GetStdHandle',
                                                                                            'WaitForMultipleObjects',
                                                                                            'WaitForSingleObject',
                                                                                            'ResetEvent',
                                                                                            'SetEvent',
                                                                                            'GetSystemInfo',
                                                                                            'Module32NextW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'RaiseException',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetProcAddress',
                                                                                            'Sleep',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'ExitProcess',
                                                                                            'FormatMessageA',
                                                                                            'FormatMessageW',
                                                                                            'LoadLibraryW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'SetLastError',
                                                                                            'LocalFree',
                                                                                            '_purecall',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__initenv',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '_strnicmp',
                                                                                            '_localtime64',
                                                                                            '_time64',
                                                                                            'wcsftime',
                                                                                            '_waccess',
                                                                                            '_local_unwind',
                                                                                            'strcpy_s',
                                                                                            'strcat_s',
                                                                                            'wcschr',
                                                                                            'wcscpy_s',
                                                                                            'sprintf_s',
                                                                                            '_swprintf_c',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            'swscanf_s',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'wcsncmp',
                                                                                            '_vsnwprintf_l',
                                                                                            'wcsncpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '__iob_func',
                                                                                            '_resetstkoflw',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '__crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'fclose',
                                                                                            'freopen',
                                                                                            '_wmakepath_s',
                                                                                            'memcpy',
                                                                                            '_wsplitpath_s',
                                                                                            '_wcsicmp_l',
                                                                                            '_vsnwprintf',
                                                                                            'wprintf',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '_swscanf_s_l',
                                                                                            '_CxxThrowException',
                                                                                            'printf',
                                                                                            'wcsncat_s',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoCreateInstance',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'UnRegisterTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'SysStringByteLen',
                                                                                            'VariantChangeType',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegOpenKeyW',
                                                                                            'GetCOMPath',
                                                                                            'GetSQLVerSpecificRegString'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 175,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 8128,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.pdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 8192,
                                                                                       '.text\x00\x00\x00': 140800},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e614bb23131efe77b8ef6cfe08a28ceec7a9adccc03d183b7a287ac6c822de1f'},
 'e661aca2f9fcb9b3ee9403c2233606993bb45c6fc28cd29e4ec6b280f9a888eb': {'AddressOfEntryPoint': 8416,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'WDSCORE.dll': 'WdsSetupLogMessageW',
                                                                                      'msvcrt.dll': '?terminate@@YAXXZ'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '__p__fmode',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'CurrentIP',
                                                                                            'ConstructPartialMsgVW',
                                                                                            'WdsSetupLogMessageW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 37,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 6144},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e661aca2f9fcb9b3ee9403c2233606993bb45c6fc28cd29e4ec6b280f9a888eb'},
 'e67472d9838e4b12454d3764200c1e9719fa754fe6a816680e4588cd572438c3': {'AddressOfEntryPoint': 2817772,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2890672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'advapi32.dll': 'InitializeSecurityDescriptor',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'gdi32.dll': 'AbortDoc',
                                                                                      'kernel32.dll': 'MulDiv',
                                                                                      'msimg32.dll': 'AlphaBlend',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ole32.dll': 'IsEqualGUID',
                                                                                      'oleacc.dll': 'LresultFromObject',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'shell32.dll': 'Shell_NotifyIconW',
                                                                                      'user32.dll': 'MonitorFromWindow',
                                                                                      'version.dll': 'GetFileVersionInfoW',
                                                                                      'winmm.dll': 'sndPlaySoundW',
                                                                                      'winspool.drv': 'GetDefaultPrinterW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'LoadStringW',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'VirtualQuery',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemInfo',
                                                                                            'GetVersion',
                                                                                            'CompareStringW',
                                                                                            'IsValidLocale',
                                                                                            'SetThreadLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetACP',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'ExitProcess',
                                                                                            'ExitThread',
                                                                                            'SwitchToThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'GetProcAddress',
                                                                                            'RaiseException',
                                                                                            'LoadLibraryA',
                                                                                            'GetLastError',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'SetClassLongW',
                                                                                            'GetClassLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'CreateWindowExW',
                                                                                            'WindowFromPoint',
                                                                                            'WaitMessage',
                                                                                            'ValidateRect',
                                                                                            'UpdateWindow',
                                                                                            'UnregisterClassW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'TranslateMessage',
                                                                                            'TranslateMDISysAccel',
                                                                                            'TrackPopupMenu',
                                                                                            'SystemParametersInfoW',
                                                                                            'ShowWindow',
                                                                                            'ShowScrollBar',
                                                                                            'ShowOwnedPopups',
                                                                                            'ShowCaret',
                                                                                            'SetWindowRgn',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowPlacement',
                                                                                            'SetTimer',
                                                                                            'SetScrollRange',
                                                                                            'SetScrollPos',
                                                                                            'SetScrollInfo',
                                                                                            'SetRect',
                                                                                            'SetPropW',
                                                                                            'SetParent',
                                                                                            'SetMenuItemInfoW',
                                                                                            'SetMenu',
                                                                                            'SetKeyboardState',
                                                                                            'SetForegroundWindow',
                                                                                            'SetFocus',
                                                                                            'SetCursorPos',
                                                                                            'SetCursor',
                                                                                            'SetClipboardData',
                                                                                            'SetCaretPos',
                                                                                            'SetCapture',
                                                                                            'SetActiveWindow',
                                                                                            'SendMessageA',
                                                                                            'SendMessageW',
                                                                                            'ScrollWindowEx',
                                                                                            'ScrollWindow',
                                                                                            'ScreenToClient',
                                                                                            'RemovePropW',
                                                                                            'RemoveMenu',
                                                                                            'ReleaseDC',
                                                                                            'ReleaseCapture',
                                                                                            'RegisterWindowMessageW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'RegisterClassW',
                                                                                            'RedrawWindow',
                                                                                            'PtInRect',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageW',
                                                                                            'PeekMessageA',
                                                                                            'PeekMessageW',
                                                                                            'OpenClipboard',
                                                                                            'OffsetRect',
                                                                                            'NotifyWinEvent',
                                                                                            'MsgWaitForMultipleObjectsEx',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'MessageBeep',
                                                                                            'MapWindowPoints',
                                                                                            'MapVirtualKeyW',
                                                                                            'LoadStringW',
                                                                                            'LoadKeyboardLayoutW',
                                                                                            'LoadIconW',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'KillTimer',
                                                                                            'IsZoomed',
                                                                                            'IsWindowVisible',
                                                                                            'IsWindowUnicode',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindow',
                                                                                            'IsIconic',
                                                                                            'IsDialogMessageA',
                                                                                            'IsDialogMessageW',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'IsChild',
                                                                                            'IsCharAlphaNumericW',
                                                                                            'IsCharAlphaW',
                                                                                            'InvalidateRect',
                                                                                            'InsertMenuItemW',
                                                                                            'InsertMenuW',
                                                                                            'InflateRect',
                                                                                            'HideCaret',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindowDC',
                                                                                            'GetTopWindow',
                                                                                            'GetSystemMetrics',
                                                                                            'GetSystemMenu',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'GetSubMenu',
                                                                                            'GetScrollRange',
                                                                                            'GetScrollPos',
                                                                                            'GetScrollInfo',
                                                                                            'GetScrollBarInfo',
                                                                                            'GetPropW',
                                                                                            'GetParent',
                                                                                            'GetWindow',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'GetMessageExtraInfo',
                                                                                            'GetMenuStringW',
                                                                                            'GetMenuState',
                                                                                            'GetMenuItemInfoW',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenu',
                                                                                            'GetLastActivePopup',
                                                                                            'GetKeyboardState',
                                                                                            'GetKeyboardLayoutNameW',
                                                                                            'GetKeyboardLayoutList',
                                                                                            'GetKeyboardLayout',
                                                                                            'GetKeyState',
                                                                                            'GetKeyNameTextW',
                                                                                            'GetIconInfo',
                                                                                            'GetForegroundWindow',
                                                                                            'GetFocus',
                                                                                            'GetDoubleClickTime',
                                                                                            'GetDlgItem',
                                                                                            'GetDlgCtrlID',
                                                                                            'GetDesktopWindow',
                                                                                            'GetDCEx',
                                                                                            'GetDC',
                                                                                            'GetCursorPos',
                                                                                            'GetCursor',
                                                                                            'GetClipboardData',
                                                                                            'GetClientRect',
                                                                                            'GetClassNameW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'GetCaretPos',
                                                                                            'GetCapture',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetActiveWindow',
                                                                                            'FrameRect',
                                                                                            'FindWindowExW',
                                                                                            'FindWindowW',
                                                                                            'FillRect',
                                                                                            'EnumWindows',
                                                                                            'EnumThreadWindows',
                                                                                            'EnumClipboardFormats',
                                                                                            'EnumChildWindows',
                                                                                            'EndPaint',
                                                                                            'EndMenu',
                                                                                            'EnableWindow',
                                                                                            'EnableScrollBar',
                                                                                            'EnableMenuItem',
                                                                                            'EmptyClipboard',
                                                                                            'DrawTextExW',
                                                                                            'DrawTextW',
                                                                                            'DrawStateW',
                                                                                            'DrawMenuBar',
                                                                                            'DrawIconEx',
                                                                                            'DrawIcon',
                                                                                            'DrawFrameControl',
                                                                                            'DrawFocusRect',
                                                                                            'DrawEdge',
                                                                                            'DispatchMessageA',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'DestroyMenu',
                                                                                            'DestroyIcon',
                                                                                            'DestroyCursor',
                                                                                            'DestroyCaret',
                                                                                            'DeleteMenu',
                                                                                            'DefWindowProcW',
                                                                                            'DefMDIChildProcW',
                                                                                            'DefFrameProcW',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateMenu',
                                                                                            'CreateIcon',
                                                                                            'CreateCaret',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'CountClipboardFormats',
                                                                                            'CopyImage',
                                                                                            'CopyIcon',
                                                                                            'CloseClipboard',
                                                                                            'ClientToScreen',
                                                                                            'ChildWindowFromPoint',
                                                                                            'CheckMenuItem',
                                                                                            'CharUpperBuffW',
                                                                                            'CharUpperW',
                                                                                            'CharNextW',
                                                                                            'CharLowerBuffW',
                                                                                            'CharLowerW',
                                                                                            'CallWindowProcW',
                                                                                            'CallNextHookEx',
                                                                                            'BringWindowToTop',
                                                                                            'BeginPaint',
                                                                                            'AdjustWindowRectEx',
                                                                                            'ActivateKeyboardLayout',
                                                                                            'GradientFill',
                                                                                            'AlphaBlend',
                                                                                            'UnrealizeObject',
                                                                                            'StretchDIBits',
                                                                                            'StretchBlt',
                                                                                            'StartPage',
                                                                                            'StartDocW',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetWinMetaFileBits',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'SetTextColor',
                                                                                            'SetStretchBltMode',
                                                                                            'SetROP2',
                                                                                            'SetPixel',
                                                                                            'SetMapMode',
                                                                                            'SetEnhMetaFileBits',
                                                                                            'SetDIBits',
                                                                                            'SetDIBColorTable',
                                                                                            'SetDCPenColor',
                                                                                            'SetBrushOrgEx',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SetAbortProc',
                                                                                            'SelectPalette',
                                                                                            'SelectObject',
                                                                                            'SelectClipRgn',
                                                                                            'SaveDC',
                                                                                            'RoundRect',
                                                                                            'RestoreDC',
                                                                                            'Rectangle',
                                                                                            'RectVisible',
                                                                                            'RealizePalette',
                                                                                            'Polyline',
                                                                                            'Polygon',
                                                                                            'PolyPolyline',
                                                                                            'PolyBezierTo',
                                                                                            'PolyBezier',
                                                                                            'PlayEnhMetaFile',
                                                                                            'Pie',
                                                                                            'PatBlt',
                                                                                            'MoveToEx',
                                                                                            'MaskBlt',
                                                                                            'LineTo',
                                                                                            'IntersectClipRect',
                                                                                            'GetWindowOrgEx',
                                                                                            'GetWinMetaFileBits',
                                                                                            'GetTextMetricsW',
                                                                                            'GetTextExtentPointW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'GetStockObject',
                                                                                            'GetRgnBox',
                                                                                            'GetPixel',
                                                                                            'GetPaletteEntries',
                                                                                            'GetObjectW',
                                                                                            'GetEnhMetaFilePaletteEntries',
                                                                                            'GetEnhMetaFileHeader',
                                                                                            'GetEnhMetaFileDescriptionW',
                                                                                            'GetEnhMetaFileBits',
                                                                                            'GetDeviceCaps',
                                                                                            'GetDIBits',
                                                                                            'GetDIBColorTable',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetClipBox',
                                                                                            'GetBrushOrgEx',
                                                                                            'GetBitmapBits',
                                                                                            'GdiFlush',
                                                                                            'FrameRgn',
                                                                                            'ExtTextOutW',
                                                                                            'ExtFloodFill',
                                                                                            'ExtCreatePen',
                                                                                            'ExcludeClipRect',
                                                                                            'EnumFontsW',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'EndPage',
                                                                                            'EndDoc',
                                                                                            'Ellipse',
                                                                                            'DeleteObject',
                                                                                            'DeleteEnhMetaFile',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePenIndirect',
                                                                                            'CreatePalette',
                                                                                            'CreateICW',
                                                                                            'CreateHalftonePalette',
                                                                                            'CreateFontIndirectW',
                                                                                            'CreateDIBitmap',
                                                                                            'CreateDIBSection',
                                                                                            'CreateDCW',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateBitmap',
                                                                                            'CopyEnhMetaFileW',
                                                                                            'Chord',
                                                                                            'BitBlt',
                                                                                            'ArcTo',
                                                                                            'Arc',
                                                                                            'AngleArc',
                                                                                            'AbortDoc',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'lstrcmpW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'VirtualQueryEx',
                                                                                            'VirtualQuery',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'UnmapViewOfFile',
                                                                                            'TryEnterCriticalSection',
                                                                                            'SwitchToThread',
                                                                                            'SuspendThread',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetThreadPriority',
                                                                                            'SetThreadLocale',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'SetCommState',
                                                                                            'ResumeThread',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReleaseMutex',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryDosDeviceW',
                                                                                            'IsDebuggerPresent',
                                                                                            'OpenMutexW',
                                                                                            'OpenFileMappingW',
                                                                                            'OpenEventW',
                                                                                            'MulDiv',
                                                                                            'MapViewOfFile',
                                                                                            'LockResource',
                                                                                            'LocalFree',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'IsValidLocale',
                                                                                            'InitializeCriticalSection',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalFree',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetTickCount',
                                                                                            'GetThreadPriority',
                                                                                            'GetThreadLocale',
                                                                                            'GetTempPathW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetOverlappedResult',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeThread',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommState',
                                                                                            'GetCPInfoExW',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'FreeResource',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'EnumSystemLocalesW',
                                                                                            'EnumResourceNamesW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateThread',
                                                                                            'CreateMutexW',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegSaveKeyW',
                                                                                            'RegRestoreKeyW',
                                                                                            'RegReplaceKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegLoadKeyW',
                                                                                            'RegFlushKey',
                                                                                            'RegEnumValueW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegCloseKey',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'Sleep',
                                                                                            'CoCreateGuid',
                                                                                            'CreateErrorInfo',
                                                                                            'GetErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'IsEqualGUID',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopyInd',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'InitializeFlatSB',
                                                                                            'FlatSB_SetScrollProp',
                                                                                            'FlatSB_SetScrollPos',
                                                                                            'FlatSB_SetScrollInfo',
                                                                                            'FlatSB_GetScrollPos',
                                                                                            'FlatSB_GetScrollInfo',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_GetImageInfo',
                                                                                            'ImageList_SetIconSize',
                                                                                            'ImageList_GetIconSize',
                                                                                            'ImageList_Write',
                                                                                            'ImageList_Read',
                                                                                            'ImageList_GetDragImage',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_EndDrag',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_Copy',
                                                                                            'ImageList_LoadImageW',
                                                                                            'ImageList_GetIcon',
                                                                                            'ImageList_Remove',
                                                                                            'ImageList_DrawEx',
                                                                                            'ImageList_Replace',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_SetOverlayImage',
                                                                                            'ImageList_GetBkColor',
                                                                                            'ImageList_SetBkColor',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Add',
                                                                                            'ImageList_SetImageCount',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'InitCommonControls',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromPoint',
                                                                                            'MonitorFromRect',
                                                                                            'MonitorFromWindow',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'Shell_NotifyIconW',
                                                                                            'GetOpenFileNameW',
                                                                                            'OpenPrinterW',
                                                                                            'EnumPrintersW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'GetDefaultPrinterW',
                                                                                            'LresultFromObject',
                                                                                            'sndPlaySoundW',
                                                                                            'MulDiv'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 26,
                                                                      'NumberOfImportFunctions': 587,
                                                                      'NumberOfSections': 10,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 239616,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 37376,
                                                                                       '.didata\x00': 2560,
                                                                                       '.idata\x00\x00': 16384,
                                                                                       '.itext\x00\x00': 8704,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 240640,
                                                                                       '.rsrc\x00\x00\x00': 239616,
                                                                                       '.text\x00\x00\x00': 2802176,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e67472d9838e4b12454d3764200c1e9719fa754fe6a816680e4588cd572438c3'},
 'e6b0d2dcfeb00674d7e6fe4f2afe139069457ed5c1ab723f7c3682d89d960c34': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 30160,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 30208,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e6b0d2dcfeb00674d7e6fe4f2afe139069457ed5c1ab723f7c3682d89d960c34'},
 'e6ca1a566c6af3098e404e3b8804aa0c9e4e265df56158103e3c9a4441aedc1f': {'AddressOfEntryPoint': 112352,
                                                                      'DebugRVA': 4704,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 8,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'FreeSid',
                                                                                      'KERNEL32.dll': 'GetThreadLocale',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FindResourceExW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'lstrlenW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleWindow',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapSetInformation',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'DeleteFileW',
                                                                                            'Sleep',
                                                                                            'CopyFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetCommandLineA',
                                                                                            'HeapFree',
                                                                                            'GetVersionExA',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'RtlUnwind',
                                                                                            'HeapReAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'HeapSize',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileA',
                                                                                            'GetThreadLocale',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'VarBstrCmp',
                                                                                            'GetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'VarBstrCat',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantInit',
                                                                                            'ShowWindow',
                                                                                            'UnregisterClassA',
                                                                                            'SHGetFolderPathW',
                                                                                            'PathFileExistsW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 114,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 173056},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e6ca1a566c6af3098e404e3b8804aa0c9e4e265df56158103e3c9a4441aedc1f'},
 'e6d75b3f87c9c8d924ff412b6d6ebfe1b23d6c40d6365c111d82bbd470a7a6aa': {'AddressOfEntryPoint': 46816,
                                                                      'DebugRVA': 4560,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 126976,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceSetInformation',
                                                                                      'KERNEL32.dll': 'MultiByteToWideChar',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyW',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['SetThreadToken',
                                                                                            'RevertToSelf',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'SetEntriesInAclW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'SetServiceStatus',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'StartServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'CreateServiceW',
                                                                                            'QueryServiceConfig2W',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'DeleteService',
                                                                                            'ControlService',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventWrite',
                                                                                            'OpenThreadToken',
                                                                                            'StartTraceW',
                                                                                            'ControlTraceW',
                                                                                            'EnableTraceEx2',
                                                                                            'TraceSetInformation',
                                                                                            'GetCurrentThreadId',
                                                                                            'UnregisterWaitEx',
                                                                                            'OpenProcess',
                                                                                            'GetLastError',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'CreateThread',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'WaitForSingleObject',
                                                                                            'CloseHandle',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetEvent',
                                                                                            'CreateEventW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetComputerNameExW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetCurrentThread',
                                                                                            'GetVersionExW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'SetFilePointer',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FlushFileBuffers',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'SetThreadStackGuarantee',
                                                                                            'LCMapStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'RaiseException',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'RtlPcToFileHeader',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'SetLastError',
                                                                                            'FlsAlloc',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'SetHandleCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetCommandLineW',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'OutputDebugStringA',
                                                                                            'RtlUnwindEx',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'CoRevertToSelf',
                                                                                            'CoImpersonateClient',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoInitializeSecurity',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'SHDeleteKeyW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 142,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6144,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 95232},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e6d75b3f87c9c8d924ff412b6d6ebfe1b23d6c40d6365c111d82bbd470a7a6aa'},
 'e6e93bfc7bd098fa9d38e51dd1ae4106a73ed56251f725c0dfc2b4ced1af2dd6': {'AddressOfEntryPoint': 16728,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterServiceCtrlHandlerExA',
                                                                                      'Framework.dll': '?throwSelf@InvalidHandleException@Caf@@UEAAXXZ',
                                                                                      'KERNEL32.dll': 'GetLastError',
                                                                                      'MSVCP90.dll': '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                      'MSVCR90.dll': '_CxxThrowException',
                                                                                      'glib-2.0.dll': 'g_atomic_int_inc'},
                                                                      'ImportedFunctions': ['g_error_free',
                                                                                            'g_atomic_int_dec_and_test',
                                                                                            'g_atomic_int_inc',
                                                                                            '?signal@CThreadSignal@Caf@@QEAAXXZ',
                                                                                            '?logMessage@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDH1@Z',
                                                                                            '??1CAutoMutex@Caf@@QEAA@XZ',
                                                                                            '??0CAutoMutex@Caf@@QEAA@XZ',
                                                                                            '??1CIntegrationAppContext@Caf@@UEAA@XZ',
                                                                                            '??0CIntegrationAppContext@Caf@@QEAA@XZ',
                                                                                            '?getIntegrationObject@CIntegrationAppContext@Caf@@UEBAXAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?getIntegrationObject@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@UIIntegrationObject@Caf@@U12@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?getIntegrationObjects@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@V?$deque@V?$TCafSmartPtr@UICafObject@@U1@@@V?$allocator@V?$TCafSmartPtr@UICafObject@@U1@@@@std@@@std@@V?$TCafObject@V?$deque@V?$TCafSmartPtr@UICafObject@@U1@@@V?$allocator@V?$TCafSmartPtr@UICafObject@@U1@@@@std@@@std@@@@@@AEBU_GUID@@@Z',
                                                                                            '?getBean@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@UIBean@Caf@@U12@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?resolveChannelName@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@UIMessageChannel@Caf@@U12@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?resolveChannelNameToObject@CIntegrationAppContext@Caf@@UEBA?AV?$TCafSmartPtr@UIIntegrationObject@Caf@@U12@@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?populate@CCafException@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@J00@Z',
                                                                                            '??0CCafException@Caf@@QEAA@XZ',
                                                                                            '?sleep@CThreadUtils@Caf@@SAXI@Z',
                                                                                            '?terminate@CIntegrationAppContext@Caf@@QEAAXI@Z',
                                                                                            '?log@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDHPEBVCCafException@2@@Z',
                                                                                            '?waitOrTimeout@CThreadSignal@Caf@@QEAA_NAEAV?$TCafSmartPtr@VCAutoMutex@Caf@@V?$TCafObject@VCAutoMutex@Caf@@@@@@I@Z',
                                                                                            '??1CAutoMutexLockUnlock@Caf@@QEAA@XZ',
                                                                                            '?wait@CThreadSignal@Caf@@QEAAXAEAV?$TCafSmartPtr@VCAutoMutex@Caf@@V?$TCafObject@VCAutoMutex@Caf@@@@@@I@Z',
                                                                                            '??0CAutoMutexLockUnlock@Caf@@QEAA@AEAV?$TCafSmartPtr@VCAutoMutex@Caf@@V?$TCafObject@VCAutoMutex@Caf@@@@@@PEBD1H@Z',
                                                                                            '?initialize@CIntegrationAppContext@Caf@@QEAAXIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?getRequiredString@AppConfigUtils@Caf@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@0@Z',
                                                                                            '?setStartupConfigFile@CLoggingUtils@Caf@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?_sAppConfigGlobalParamLogConfigFile@Caf@@3PEBDEB',
                                                                                            '?_sAppConfigGlobalParamLogDir@Caf@@3PEBDEB',
                                                                                            '?getOptionalUint32@AppConfigUtils@Caf@@YAIAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z',
                                                                                            '?doesFileExist@FileSystemUtils@Caf@@SA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?buildPath@FileSystemUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@0@Z',
                                                                                            '?getRequiredString@AppConfigUtils@Caf@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@@Z',
                                                                                            '?AddRef@CCafException@Caf@@UEAAXXZ',
                                                                                            '?Release@CCafException@Caf@@UEAAXXZ',
                                                                                            '?QueryInterface@CCafException@Caf@@UEAAXAEBU_GUID@@PEAPEAX@Z',
                                                                                            '?throwSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '?throwAddRefedSelf@CCafException@Caf@@UEAAXXZ',
                                                                                            '?getMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?getFullMsg@CCafException@Caf@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '??1CCafException@Caf@@UEAA@XZ',
                                                                                            '??1CLogger@Caf@@UEAA@XZ',
                                                                                            '??1CThreadSignal@Caf@@UEAA@XZ',
                                                                                            '?initialize@CThreadSignal@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?initialize@CAutoMutex@Caf@@QEAAXXZ',
                                                                                            '??0CLogger@Caf@@QEAA@PEBD@Z',
                                                                                            '??0CThreadSignal@Caf@@QEAA@XZ',
                                                                                            '??1CWinServiceState@Caf@@UEAA@XZ',
                                                                                            '??0CWinServiceState@Caf@@QEAA@XZ',
                                                                                            '??1CWinServiceInstance@Caf@@UEAA@XZ',
                                                                                            '??0CWinServiceInstance@Caf@@QEAA@XZ',
                                                                                            '?signalServiceStop@CWinServiceState@Caf@@QEAAXXZ',
                                                                                            '?runWorkerThread@CWinServiceInstance@Caf@@QEAAXXZ',
                                                                                            '?putCurrentServiceState@CWinServiceState@Caf@@QEAAXK@Z',
                                                                                            '?setStatus@CWinServiceState@Caf@@QEAAXXZ',
                                                                                            '?logVA@CLogger@Caf@@QEBAXW4PriorityLevel@Priority@log4cpp@@PEBDH1ZZ',
                                                                                            '?initialized@CValidate@Caf@@SAX_NPEBD1@Z',
                                                                                            '?populateVA@CCafException@Caf@@QEAAXJAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PEBDZZ',
                                                                                            '?GetApiErrorMessage@PlatformApi@BasePlatform@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z',
                                                                                            '?initialize@CWinServiceInstance@Caf@@QEAAXAEBV?$TCafSmartPtr@VCWinServiceState@Caf@@V?$TCafObject@VCWinServiceState@Caf@@@@@@@Z',
                                                                                            '?initialize@CWinServiceState@Caf@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00AEBV?$TCafSmartPtr@UIWork@Caf@@U12@@@@Z',
                                                                                            '?notNullPtr@CValidate@Caf@@SAXPEBXPEBD11@Z',
                                                                                            '?notInitialized@CValidate@Caf@@SAX_NPEBD1@Z',
                                                                                            '?term@CafInitialize@Caf@@SAJXZ',
                                                                                            '?close@CWinServiceState@Caf@@QEAAXXZ',
                                                                                            '?runService@CWinServiceInstance@Caf@@QEAAXXZ',
                                                                                            '?putServiceHandle@CWinServiceState@Caf@@QEAAXQEAUSERVICE_STATUS_HANDLE__@@@Z',
                                                                                            '?getIsService@CWinServiceState@Caf@@QEBA_NXZ',
                                                                                            '?getServiceName@CWinServiceState@Caf@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?init@CafInitialize@Caf@@SAJXZ',
                                                                                            '?putIsService@CWinServiceState@Caf@@QEAAX_N@Z',
                                                                                            '?install@CWinServiceInstance@Caf@@QEBAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?getCurrentFile@FileSystemUtils@Caf@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ',
                                                                                            '?uninstall@CWinServiceInstance@Caf@@QEBAXXZ',
                                                                                            '??0InvalidHandleException@Caf@@QEAA@XZ',
                                                                                            '?processCommandLine@CWinServiceInstance@Caf@@QEBA?AUSCommandLineParams@12@HPEAPEAD@Z',
                                                                                            '?serviceConfig@CafInitialize@Caf@@SAJXZ',
                                                                                            '?throwAddRefedSelf@InvalidHandleException@Caf@@UEAAXXZ',
                                                                                            '??1InvalidHandleException@Caf@@UEAA@XZ',
                                                                                            '?getAppConfig@Caf@@YA?AV?$TCafSmartPtr@UIAppConfig@Caf@@U12@@@XZ',
                                                                                            '?getAppConfig@Caf@@YA?AV?$TCafSmartPtr@UIAppConfig@Caf@@U12@@@AEBV?$deque@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z',
                                                                                            '?readEnvironmentVar@CEnvironmentUtils@Caf@@SAXPEBDAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z',
                                                                                            '?throwSelf@InvalidHandleException@Caf@@UEAAXXZ',
                                                                                            'StartServiceCtrlDispatcherA',
                                                                                            'RegisterServiceCtrlHandlerExA',
                                                                                            '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z',
                                                                                            '??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@AEBV10@0@Z',
                                                                                            '??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ',
                                                                                            '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z',
                                                                                            'memset',
                                                                                            'strnlen',
                                                                                            'fprintf',
                                                                                            '__iob_func',
                                                                                            '__C_specific_handler',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_encode_pointer',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            'memmove_s',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '??0exception@std@@QEAA@XZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '_beginthreadex',
                                                                                            '_purecall',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '__initenv',
                                                                                            '_CxxThrowException',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetLastError'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 148,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.rdata\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e6e93bfc7bd098fa9d38e51dd1ae4106a73ed56251f725c0dfc2b4ced1af2dd6'},
 'e7188e280f93f24f88e779fa4288e22e40e7ed43921fcf9b5c69189d662630d7': {'AddressOfEntryPoint': 13920,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetStartupInfoW',
                                                                                      'USER32.dll': 'DispatchMessageW',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoRevokeClassObject',
                                                                                      'msvcrt.dll': '_lock',
                                                                                      'ntdll.dll': 'RtlReportException'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'SetErrorMode',
                                                                                            'GetErrorMode',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'ExitProcess',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'OpenWindowStationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'SetProcessWindowStation',
                                                                                            'CloseWindowStation',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_XcptFilter',
                                                                                            '__C_specific_handler',
                                                                                            'memset',
                                                                                            '_purecall',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_wcmdln',
                                                                                            '_commode',
                                                                                            '_amsg_exit',
                                                                                            '_fmode',
                                                                                            '_lock',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventUnregister',
                                                                                            'RtlReportException',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoCreateInstance',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 83,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 57080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 57344,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e7188e280f93f24f88e779fa4288e22e40e7ed43921fcf9b5c69189d662630d7'},
 'e739650377bd910fe37759f5a8f44f2deb92056795778f7d3d4bf679268f1337': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 49692,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 6891409244160,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1164,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 29696,
                                                                                       '.xdata\x00\x00': 1024},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/e739650377bd910fe37759f5a8f44f2deb92056795778f7d3d4bf679268f1337'},
 'e7a6de3e4f548a67cf743714a3954a5e9cf8bbaac4bb92506d3f357a01b78352': {'AddressOfEntryPoint': 7986,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 53248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetProcessHeap',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'OpenProcessToken',
                                                                                            'RegCloseKey',
                                                                                            'CommandLineToArgvW',
                                                                                            'ExitWindowsEx',
                                                                                            'MessageBoxW',
                                                                                            'CreateFileA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetTempPathW',
                                                                                            'GetTempFileNameW',
                                                                                            'Sleep',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateSemaphoreW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileExW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExA',
                                                                                            'GetCommandLineW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleW',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'RtlUnwind',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'MultiByteToWideChar',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapSize',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LoadLibraryA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4608,
                                                                                       '.rdata\x00\x00': 11776,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 47616},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/e7a6de3e4f548a67cf743714a3954a5e9cf8bbaac4bb92506d3f357a01b78352'},
 'e7efc2e9acfe7d9765337df8935e1db4c537c20ab99036cd474533f33de3b183': {'AddressOfEntryPoint': 57488,
                                                                      'DebugRVA': 4704,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'GDI32.dll': 'CreateFontIndirectW',
                                                                                      'IMM32.dll': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'GetModuleHandleW',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'IsValidSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'OpenProcessToken',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetVersionExW',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceExW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'Sleep',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateMutexW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'CreateFileW',
                                                                                            'CreateProcessW',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'SetPixel',
                                                                                            'GetDeviceCaps',
                                                                                            'LineDDA',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'CreatePen',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'GetLayout',
                                                                                            'ExtTextOutW',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetWindowTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetDlgItem',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'GetParent',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'CreatePopupMenu',
                                                                                            'GetWindowTextW',
                                                                                            'InsertMenuW',
                                                                                            'ClientToScreen',
                                                                                            'TrackPopupMenu',
                                                                                            'DestroyMenu',
                                                                                            'GetWindowRect',
                                                                                            'GetSystemMetrics',
                                                                                            'IsWindowEnabled',
                                                                                            'SetCapture',
                                                                                            'SetFocus',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'PtInRect',
                                                                                            'EndDialog',
                                                                                            'LoadCursorW',
                                                                                            'ReleaseCapture',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetClientRect',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'MessageBoxW',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'CharLowerW',
                                                                                            'GetMessagePos',
                                                                                            'FillRect',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'SetCursor',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'ScreenToClient',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'PostMessageW',
                                                                                            'GetDlgCtrlID',
                                                                                            'LoadImageW',
                                                                                            'FindWindowExW',
                                                                                            'SetDlgItemTextW',
                                                                                            'IsWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'GetLastActivePopup',
                                                                                            'FindWindowW',
                                                                                            'DispatchMessageW',
                                                                                            'GetDC',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_wtoi',
                                                                                            'wcsstr',
                                                                                            'strstr',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'wcsnlen',
                                                                                            '_purecall',
                                                                                            'wcsncpy_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'wcsncat_s',
                                                                                            'memset',
                                                                                            'ImmDisableIME',
                                                                                            'ShellExecuteW',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetOpenFileNameW',
                                                                                            'ImageList_Draw',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_BeginDrag',
                                                                                            'ImageList_DragEnter',
                                                                                            'ImageList_DragLeave',
                                                                                            'ImageList_DragShowNolock',
                                                                                            'ImageList_GetImageInfo',
                                                                                            'ImageList_DragMove',
                                                                                            'ImageList_EndDrag',
                                                                                            'PropertySheetW',
                                                                                            'SysFreeString',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'IIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 184,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 334152,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17408,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 334336,
                                                                                       '.text\x00\x00\x00': 59392},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e7efc2e9acfe7d9765337df8935e1db4c537c20ab99036cd474533f33de3b183'},
 'e7f87849d3271e3ae7433b5a5e3a79b2a9649d1ddaf7142f56788c932bc1d0f9': {'AddressOfEntryPoint': 19632,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'DeleteFileW',
                                                                                      'SHELL32.dll': 'SHSetLocalizedName',
                                                                                      'SHLWAPI.dll': 'StrCmpNW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '??2@YAPAXI@Z'},
                                                                      'ImportedFunctions': ['LocalAlloc',
                                                                                            'VirtualAlloc',
                                                                                            'DecodePointer',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'MoveFileW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetVersionExA',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpW',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'Sleep',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'DeleteFileW',
                                                                                            '_vsnwprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            'iswalpha',
                                                                                            'wcschr',
                                                                                            'rand_s',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFileExistsW',
                                                                                            'StrStrW',
                                                                                            'StrCmpNW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'LoadStringW',
                                                                                            'SHGetFolderPathAndSubDirW',
                                                                                            'SHSetLocalizedName'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 62,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 17920},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/e7f87849d3271e3ae7433b5a5e3a79b2a9649d1ddaf7142f56788c932bc1d0f9'},
 'e83370777ce17e7d00c5200a8ef6fcf5e9fafa222858c4415a19c965f5f506c0': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 189800,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 189952,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e83370777ce17e7d00c5200a8ef6fcf5e9fafa222858c4415a19c965f5f506c0'},
 'e87bde4257e33f4f185dc872e0d7fc0a378741233ea3dd6a2665bfcf44bad1d4': {'AddressOfEntryPoint': 73374,
                                                                      'DebugRVA': 73176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 11496,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 11776,
                                                                                       '.text\x00\x00\x00': 65536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e87bde4257e33f4f185dc872e0d7fc0a378741233ea3dd6a2665bfcf44bad1d4'},
 'e8d2f5cc9fcf1c3080897d9d6c4228216da8dc98f17232af2519e2b18e6a0122': {'AddressOfEntryPoint': 24720,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'OLEAUT32.dll': 'SysAllocString',
                                                                                      'RPCRT4.dll': 'RpcMgmtStopServerListening',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'LeaveCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-threadpool-l1-2-0.dll': 'CloseThreadpoolTimer',
                                                                                      'api-ms-win-eventing-classicprovider-l1-1-0.dll': 'TraceMessage',
                                                                                      'api-ms-win-eventing-consumer-l1-1-0.dll': 'CloseTrace',
                                                                                      'api-ms-win-eventing-controller-l1-1-0.dll': 'ControlTraceW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AllocateAndInitializeSid',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'ZwAlpcSendWaitReceivePort'},
                                                                      'ImportedFunctions': ['??1type_info@@UEAA@XZ',
                                                                                            '_commode',
                                                                                            'swscanf_s',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '_callnewh',
                                                                                            '_lock',
                                                                                            'memmove',
                                                                                            '_unlock',
                                                                                            '_cexit',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            'memcpy',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_fmode',
                                                                                            'memset',
                                                                                            'ZwAlpcConnectPort',
                                                                                            'RtlWaitOnAddress',
                                                                                            'TpAllocAlpcCompletion',
                                                                                            'RtlInitUnicodeString',
                                                                                            'AlpcGetMessageAttribute',
                                                                                            'RtlWakeAddressAll',
                                                                                            'TpWaitForAlpcCompletion',
                                                                                            'ZwAlpcDisconnectPort',
                                                                                            'ZwClose',
                                                                                            'TpReleaseAlpcCompletion',
                                                                                            'ZwAlpcQueryInformation',
                                                                                            'AlpcInitializeMessageAttribute',
                                                                                            'vDbgPrintEx',
                                                                                            'ZwAlpcCancelMessage',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlIpv6AddressToStringW',
                                                                                            'RtlIpv4AddressToStringW',
                                                                                            'ZwAlpcSendWaitReceivePort',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'TraceMessage',
                                                                                            'HeapSetInformation',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'RpcServerInqBindings',
                                                                                            'RpcServerRegisterIfEx',
                                                                                            'RpcServerRegisterAuthInfoW',
                                                                                            'RpcServerInqDefaultPrincNameW',
                                                                                            'RpcServerUseProtseqW',
                                                                                            'RpcEpRegisterW',
                                                                                            'Ndr64AsyncServerCallAll',
                                                                                            'NdrServerCallAll',
                                                                                            'RpcServerListen',
                                                                                            'NdrServerCall2',
                                                                                            'RpcEpUnregister',
                                                                                            'RpcBindingVectorFree',
                                                                                            'RpcServerUnregisterIf',
                                                                                            'RpcStringFreeW',
                                                                                            'RpcBindingInqAuthClientW',
                                                                                            'RpcServerSubscribeForNotification',
                                                                                            'RpcAsyncCompleteCall',
                                                                                            'RpcServerUnsubscribeForNotification',
                                                                                            'I_RpcServerInqRemoteConnAddress',
                                                                                            'RpcRevertToSelfEx',
                                                                                            'NdrAsyncServerCall',
                                                                                            'RpcImpersonateClient',
                                                                                            'RpcMgmtStopServerListening',
                                                                                            'AcquireSRWLockShared',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'Sleep',
                                                                                            'InitializeSRWLock',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'OpenTraceW',
                                                                                            'ProcessTrace',
                                                                                            'CloseTrace',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EnableTraceEx2',
                                                                                            'StartTraceW',
                                                                                            'ControlTraceW',
                                                                                            'SetThreadpoolTimer',
                                                                                            'WaitForThreadpoolTimerCallbacks',
                                                                                            'CreateThreadpoolTimer',
                                                                                            'CloseThreadpoolTimer',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentThread',
                                                                                            'TerminateProcess',
                                                                                            'CloseHandle',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 126,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1744,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 26112,
                                                                                       'PAGE\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e8d2f5cc9fcf1c3080897d9d6c4228216da8dc98f17232af2519e2b18e6a0122'},
 'e916317e9fef21437bacb65f9c6245ba4cc2c2ca415846197aed677c23b8a0df': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 135480,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 135680,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/e916317e9fef21437bacb65f9c6245ba4cc2c2ca415846197aed677c23b8a0df'},
 'e95e069b08fdaf9e8da3f9b99110d8ce9670cac71ad5268a2de6b6df64b531eb': {'AddressOfEntryPoint': 741324,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1114112,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExA',
                                                                                      'CRYPT32.dll': 'CryptProtectData',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'IPHLPAPI.DLL': 'ParseNetworkString',
                                                                                      'KERNEL32.dll': 'ActivateActCtx',
                                                                                      'MPR.dll': 'WNetAddConnection2W',
                                                                                      'NETAPI32.dll': 'NetApiBufferFree',
                                                                                      'OLEACC.dll': 'LresultFromObject',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'SHLWAPI.dll': 'PathIsUNCW',
                                                                                      'USER32.dll': 'CreateDialogParamW',
                                                                                      'WS2_32.dll': 'WSAGetLastError',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'memcpy_s',
                                                                                      'ntdll.dll': 'RtlAllocateAndInitializeSid',
                                                                                      'ole32.dll': 'CoInitializeEx'},
                                                                      'ImportedFunctions': ['IsTextUnicode',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegConnectRegistryW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'EnumServicesStatusW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'OpenServiceW',
                                                                                            'ControlService',
                                                                                            'DeleteService',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'SetServiceStatus',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateToken',
                                                                                            'CheckTokenMembership',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'EventEnabled',
                                                                                            'EventWrite',
                                                                                            'TraceMessage',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThread',
                                                                                            'LoadLibraryExA',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersionExW',
                                                                                            'OpenEventW',
                                                                                            'GetCurrentThreadId',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'CreateEventW',
                                                                                            'MulDiv',
                                                                                            'LocalFree',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LocalAlloc',
                                                                                            'RaiseException',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetTempFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateThread',
                                                                                            'FormatMessageW',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetThreadPreferredUILanguages',
                                                                                            'GetFileAttributesW',
                                                                                            'DeleteFileW',
                                                                                            'WriteFile',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'SetFilePointer',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetFileAttributesExW',
                                                                                            'TlsAlloc',
                                                                                            'MoveFileW',
                                                                                            'SetFilePointerEx',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'TlsFree',
                                                                                            'lstrlenA',
                                                                                            'OutputDebugStringW',
                                                                                            'SetLastError',
                                                                                            'DeactivateActCtx',
                                                                                            'LoadLibraryW',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetFileSize',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileTime',
                                                                                            'CreateFileW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryActCtxW',
                                                                                            'GetModuleHandleExW',
                                                                                            'CreateActCtxW',
                                                                                            'FindActCtxSectionStringW',
                                                                                            'ActivateActCtx',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'BitBlt',
                                                                                            'DeleteDC',
                                                                                            'GetCurrentObject',
                                                                                            'Polyline',
                                                                                            'LineTo',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'GetTextExtentExPointW',
                                                                                            'TextOutW',
                                                                                            'Rectangle',
                                                                                            'CreatePen',
                                                                                            'SelectObject',
                                                                                            'GetTextMetricsW',
                                                                                            'CreateFontIndirectW',
                                                                                            'MoveToEx',
                                                                                            'CreateFontW',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetParent',
                                                                                            'SetWindowPos',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'GetNextDlgTabItem',
                                                                                            'UpdateWindow',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'GetFocus',
                                                                                            'GetDlgCtrlID',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'LoadIconW',
                                                                                            'MessageBoxW',
                                                                                            'CharNextW',
                                                                                            'InflateRect',
                                                                                            'FillRect',
                                                                                            'InvalidateRect',
                                                                                            'ScrollWindow',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollPos',
                                                                                            'SetScrollInfo',
                                                                                            'DefWindowProcW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'SetClassLongPtrW',
                                                                                            'GetDoubleClickTime',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetKeyState',
                                                                                            'GetWindowInfo',
                                                                                            'CallWindowProcW',
                                                                                            'MapWindowPoints',
                                                                                            'WinHelpW',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetWindowTextW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'AttachThreadInput',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetForegroundWindow',
                                                                                            'SetFocus',
                                                                                            'SetDlgItemTextW',
                                                                                            'PostMessageW',
                                                                                            'LoadBitmapW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetWindowLongW',
                                                                                            'GetWindowDC',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSysColor',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetClassNameW',
                                                                                            'FrameRect',
                                                                                            'EndDialog',
                                                                                            'EnableWindow',
                                                                                            'DrawFocusRect',
                                                                                            'DialogBoxParamW',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'ShowWindow',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'MoveWindow',
                                                                                            'GetWindowRect',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'FindWindowW',
                                                                                            'PostThreadMessageW',
                                                                                            'LoadStringW',
                                                                                            'UnregisterClassA',
                                                                                            'GetDesktopWindow',
                                                                                            'CheckDlgButton',
                                                                                            'CreateDialogParamW',
                                                                                            'iswdigit',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '_callnewh',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_vsnwprintf',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            'wcsstr',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_errno',
                                                                                            'realloc',
                                                                                            'memcmp',
                                                                                            '__RTDynamicCast',
                                                                                            'wcsncpy_s',
                                                                                            'memcpy',
                                                                                            '_wtoi',
                                                                                            '_itow_s',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '_initterm',
                                                                                            '_itow',
                                                                                            'wprintf',
                                                                                            '_wcslwr',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_wtol',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_wcsicmp',
                                                                                            'tolower',
                                                                                            '_purecall',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'memmove_s',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'memcpy_s',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlFreeSid',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'NetServerGetInfo',
                                                                                            'NetApiBufferFree',
                                                                                            'CryptUnprotectData',
                                                                                            'CryptProtectData',
                                                                                            'CoInitialize',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstanceEx',
                                                                                            'StringFromCLSID',
                                                                                            'ReleaseStgMedium',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoInitializeEx',
                                                                                            'LoadRegTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'UnRegisterTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'VarBstrCat',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringByteLen',
                                                                                            'VariantInit',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteW',
                                                                                            'WSAStringToAddressW',
                                                                                            'WSAStartup',
                                                                                            'ntohl',
                                                                                            'htonl',
                                                                                            'WSAAddressToStringW',
                                                                                            'WSAGetLastError',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'LresultFromObject',
                                                                                            'PathIsRelativeW',
                                                                                            'PathIsUNCW',
                                                                                            'WNetCancelConnection2W',
                                                                                            'WNetAddConnection2W',
                                                                                            'ParseNetworkString',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidToStringW',
                                                                                            'UuidCompare',
                                                                                            'UuidFromStringW',
                                                                                            'UuidCreate',
                                                                                            'GetLocalTime',
                                                                                            'GetComputerNameExW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 329,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 902104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.idata\x00\x00': 11776,
                                                                                       '.pdata\x00\x00': 24064,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 902144,
                                                                                       '.text\x00\x00\x00': 1064448},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/e95e069b08fdaf9e8da3f9b99110d8ce9670cac71ad5268a2de6b6df64b531eb'},
 'ea45bfbe5aace1f1bf9184ee4053ababb82538449df7f9b1b73f62eb1a5741b2': {'AddressOfEntryPoint': 87360,
                                                                      'DebugRVA': 4368,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 106496,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'ConvertSidToStringSidW',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHLWAPI.dll': 'StrFormatByteSizeEx',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'VSSAPI.DLL': 'CreateVssBackupComponentsInternal',
                                                                                      'api-ms-win-security-lsalookup-l1-1-1.dll': 'LookupAccountSidLocalW',
                                                                                      'msvcrt.dll': '_vsnwprintf',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetTokenInformation',
                                                                                            'RegisterEventSourceW',
                                                                                            'OpenThreadToken',
                                                                                            'DeregisterEventSource',
                                                                                            'ReportEventW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'FindNextVolumeW',
                                                                                            'RaiseException',
                                                                                            'FindVolumeClose',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetModuleHandleW',
                                                                                            'FormatMessageW',
                                                                                            'GetFileType',
                                                                                            'GetConsoleMode',
                                                                                            'CompareStringW',
                                                                                            'WriteConsoleW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteFile',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetDriveTypeW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetThreadLocale',
                                                                                            'GetTimeFormatW',
                                                                                            'SetConsoleMode',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'ReadConsoleW',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'LocalFree',
                                                                                            'GetCommandLineW',
                                                                                            'GetTickCount',
                                                                                            'GetLastError',
                                                                                            'GetStdHandle',
                                                                                            'SetThreadUILanguage',
                                                                                            'FindFirstVolumeW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThread',
                                                                                            'LoadLibraryExW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSetInformation',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'wcsncmp',
                                                                                            'memcpy_s',
                                                                                            '_ftol2',
                                                                                            '_vsnprintf',
                                                                                            'memmove_s',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '__p__commode',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'swscanf',
                                                                                            'iswdigit',
                                                                                            'towupper',
                                                                                            'iswalpha',
                                                                                            'wprintf',
                                                                                            'rand',
                                                                                            'srand',
                                                                                            '_purecall',
                                                                                            'free',
                                                                                            'realloc',
                                                                                            '_vsnwprintf',
                                                                                            'LookupAccountSidLocalW',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoUninitialize',
                                                                                            'CLSIDFromString',
                                                                                            'CoCreateInstance',
                                                                                            'LoadStringW',
                                                                                            'GetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'VssFreeSnapshotPropertiesInternal',
                                                                                            'GetProviderMgmtInterfaceInternal',
                                                                                            'ShouldBlockRevertInternal',
                                                                                            'CreateVssBackupComponentsInternal',
                                                                                            'StrFormatByteSizeEx'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 127,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2168,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 5632,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 97792},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ea45bfbe5aace1f1bf9184ee4053ababb82538449df7f9b1b73f62eb1a5741b2'},
 'eab9da1b4aaddb0c2179ee74475fe1fed70e2d90686153369cdd132ac9ce4928': {'AddressOfEntryPoint': 13984,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'SetForegroundWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'MulDiv',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetAsyncKeyState',
                                                                                            'IsDlgButtonChecked',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'RegisterClassA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'wvsprintfA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'ShowWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'EmptyClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'SetForegroundWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 157,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 31616,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 31744,
                                                                                       '.text\x00\x00\x00': 25088},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/eab9da1b4aaddb0c2179ee74475fe1fed70e2d90686153369cdd132ac9ce4928'},
 'eac59a86a3b0c97c7b16a0fe6320b1364898a87ee3b3355fc50a71f2c57571ca': {'AddressOfEntryPoint': 88240,
                                                                      'DebugRVA': 4752,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 131072,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'TraceMessage',
                                                                                      'KERNEL32.dll': 'GetCommandLineW',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'WinSCard.dll': 'SCardListCardsW',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchRemoveFileSpec',
                                                                                      'bcrypt.dll': 'BCryptOpenAlgorithmProvider',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlCaptureContext',
                                                                                      'ole32.dll': 'StringFromGUID2'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CreateWellKnownSid',
                                                                                            'TraceMessage',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'HeapReAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'RaiseFailFastException',
                                                                                            'RaiseException',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'GetTickCount64',
                                                                                            'LocalFree',
                                                                                            'CreateDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'FreeLibrary',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetCommandLineW',
                                                                                            'GetSystemMetrics',
                                                                                            'UnregisterClassA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'CharNextW',
                                                                                            'CharUpperW',
                                                                                            'GetMessageW',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'memmove',
                                                                                            'wcscat_s',
                                                                                            'free',
                                                                                            'wcsncpy_s',
                                                                                            '_purecall',
                                                                                            'wcscpy_s',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_wcmdln',
                                                                                            'malloc',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '_vsnwprintf',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            'memset',
                                                                                            '__C_specific_handler',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '__CxxFrameHandler3',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'memcpy',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'CoCreateInstance',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'RegisterTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'LoadTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysFreeString',
                                                                                            'BCryptGenerateSymmetricKey',
                                                                                            'BCryptDestroyKey',
                                                                                            'BCryptCloseAlgorithmProvider',
                                                                                            'BCryptEncrypt',
                                                                                            'BCryptGetProperty',
                                                                                            'BCryptOpenAlgorithmProvider',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidCreate',
                                                                                            'SetupGetInfDriverStoreLocationW',
                                                                                            'SetupDiSetDevicePropertyW',
                                                                                            'SetupDiOpenDeviceInfoW',
                                                                                            'SetupDiCreateDeviceInfoList',
                                                                                            'SetupDiGetDevicePropertyW',
                                                                                            'SetupDiDestroyDeviceInfoList',
                                                                                            'SCardEndTransaction',
                                                                                            'SCardGetCardTypeProviderNameW',
                                                                                            'SCardDisconnect',
                                                                                            'SCardConnectW',
                                                                                            'SCardGetStatusChangeW',
                                                                                            'SCardBeginTransaction',
                                                                                            'SCardListReadersWithDeviceInstanceIdW',
                                                                                            'SCardAccessStartedEvent',
                                                                                            'SCardFreeMemory',
                                                                                            'SCardListReadersW',
                                                                                            'SCardEstablishContext',
                                                                                            'SCardReleaseContext',
                                                                                            'SCardReleaseStartedEvent',
                                                                                            'SCardReconnect',
                                                                                            'SCardListCardsW',
                                                                                            'PathCchAppend',
                                                                                            'PathCchRemoveFileSpec'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 144,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2096,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.idata\x00\x00': 6144,
                                                                                       '.pdata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 107008},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/eac59a86a3b0c97c7b16a0fe6320b1364898a87ee3b3355fc50a71f2c57571ca'},
 'eae7fe329c2552cb7a8dab7b9a1124553ab3a25f4deb059c3b73c084ab6c5239': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 7012,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 7168,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/eae7fe329c2552cb7a8dab7b9a1124553ab3a25f4deb059c3b73c084ab6c5239'},
 'eb2b029003e4b600a4204fc72d896195835b3337d32eabcaece481722cb5379a': {'AddressOfEntryPoint': 37476,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharNextA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'CharNextA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 89,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 9788,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 35328,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/eb2b029003e4b600a4204fc72d896195835b3337d32eabcaece481722cb5379a'},
 'eba198d9905be26ed1c6dfc621f480c69e8890f7e5e0f9c48494a423e4163c69': {'AddressOfEntryPoint': 91256,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 123728,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'VariantInit',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLocalTime',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDateFormatW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 135,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 82944,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/eba198d9905be26ed1c6dfc621f480c69e8890f7e5e0f9c48494a423e4163c69'},
 'ebcc8af65b21e7d736797a03b1fbf2fc7f929955cf57f6488c3f52e902d0f7dc': {'AddressOfEntryPoint': 10385,
                                                                      'DebugRVA': 4624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyA',
                                                                                      'GDI32.dll': 'GetDeviceCaps',
                                                                                      'KERNEL32.dll': 'GetDiskFreeSpaceA',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeA'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'EqualSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'FreeSid',
                                                                                            'RegDeleteValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'LocalAlloc',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'LoadLibraryA',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetFileAttributesA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetPrivateProfileIntA',
                                                                                            'lstrlenA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcatA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'RemoveDirectoryA',
                                                                                            'lstrcpyA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'lstrcmpA',
                                                                                            'FindFirstFileA',
                                                                                            '_lclose',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'FindClose',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'IsDBCSLeadByte',
                                                                                            'ExitProcess',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'LoadResource',
                                                                                            'FindResourceA',
                                                                                            'CreateMutexA',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'TerminateThread',
                                                                                            'GetVersionExA',
                                                                                            'FreeLibrary',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetTempPathA',
                                                                                            'FreeResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'CreateFileA',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetTempFileNameA',
                                                                                            'GetSystemInfo',
                                                                                            'GetDriveTypeA',
                                                                                            'lstrcpynA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'CreateDirectoryA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FormatMessageA',
                                                                                            'EnumResourceLanguagesA',
                                                                                            'MulDiv',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetDeviceCaps',
                                                                                            'ExitWindowsEx',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'CharPrevA',
                                                                                            'SetWindowLongA',
                                                                                            'wsprintfA',
                                                                                            'GetWindowLongA',
                                                                                            'CallWindowProcA',
                                                                                            'GetDlgItem',
                                                                                            'SetForegroundWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SendDlgItemMessageA',
                                                                                            'EnableWindow',
                                                                                            'GetDesktopWindow',
                                                                                            'EndDialog',
                                                                                            'DispatchMessageA',
                                                                                            'LoadStringA',
                                                                                            'PeekMessageA',
                                                                                            'MessageBoxA',
                                                                                            'SetWindowPos',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'GetWindowRect',
                                                                                            'ShowWindow',
                                                                                            'DialogBoxIndirectParamA',
                                                                                            'SetDlgItemTextA',
                                                                                            'MessageBeep',
                                                                                            'SendMessageA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetSystemMetrics',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA',
                                                                                            'GetFileVersionInfoSizeA'],
                                                                      'LinkerVersion': 5,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 125,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 111321468,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 111321600,
                                                                                       '.text\x00\x00\x00': 34816},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ebcc8af65b21e7d736797a03b1fbf2fc7f929955cf57f6488c3f52e902d0f7dc'},
 'ebd6ae773b02624efa745b5b86cdf006c193a07753549d706c973fa4d70e579f': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ebd6ae773b02624efa745b5b86cdf006c193a07753549d706c973fa4d70e579f'},
 'ebf09c166c54927f3263ac71d0ec424faff8b0dde3fd5ba561392f25a06916ea': {'AddressOfEntryPoint': 81758,
                                                                      'DebugRVA': 4944,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 268435456,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenThreadToken',
                                                                                      'CRYPT32.dll': 'CertCloseStore',
                                                                                      'KERNEL32.dll': 'VirtualFree',
                                                                                      'MSVCR100.dll': 'wcschr',
                                                                                      'OLEAUT32.dll': 'SetErrorInfo',
                                                                                      'USER32.dll': 'EmptyClipboard',
                                                                                      'mscoree.dll': 'GetMetaDataInternalInterface',
                                                                                      'ole32.dll': 'CoCreateGuid'},
                                                                      'ImportedFunctions': ['?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            '_initterm',
                                                                                            '__winitenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_vsnprintf',
                                                                                            '_vsnprintf_s',
                                                                                            '_errno',
                                                                                            'strcpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_purecall',
                                                                                            '_CxxThrowException',
                                                                                            'wcscat_s',
                                                                                            '_snprintf_s',
                                                                                            'wcsncpy_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            'strncmp',
                                                                                            '_stricmp',
                                                                                            '_itow_s',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'wcsrchr',
                                                                                            'wcstoul',
                                                                                            'wcscpy_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'memset',
                                                                                            'memcpy_s',
                                                                                            'sprintf_s',
                                                                                            '_snwprintf_s',
                                                                                            '_wtoi',
                                                                                            'wcsncmp',
                                                                                            'towupper',
                                                                                            'strlen',
                                                                                            'memcmp',
                                                                                            'iswxdigit',
                                                                                            'iswdigit',
                                                                                            'iswupper',
                                                                                            'wcschr',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'LookupAccountSidW',
                                                                                            'CryptAcquireContextA',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'TraceEvent',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'CryptGetUserKey',
                                                                                            'CryptExportKey',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptImportKey',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptReleaseContext',
                                                                                            'RegCloseKey',
                                                                                            'OpenThreadToken',
                                                                                            'GetCurrentThread',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'LCMapStringW',
                                                                                            'LocalFree',
                                                                                            'HeapValidate',
                                                                                            'HeapDestroy',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'InterlockedExchange',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'HeapCreate',
                                                                                            'FlushViewOfFile',
                                                                                            'SetFilePointer',
                                                                                            'GetLocaleInfoW',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetFileSize',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetStdHandle',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'MultiByteToWideChar',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersion',
                                                                                            'TlsGetValue',
                                                                                            'InterlockedCompareExchange',
                                                                                            'LoadLibraryExW',
                                                                                            'lstrlenW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetSystemInfo',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'RaiseException',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'CreateSemaphoreW',
                                                                                            'ReleaseSemaphore',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateMutexW',
                                                                                            'ReleaseMutex',
                                                                                            'SleepEx',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'GetRequestedRuntimeInfo',
                                                                                            'GetMetaDataInternalInterface',
                                                                                            'CertSetCertificateContextProperty',
                                                                                            'PFXImportCertStore',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CryptQueryObject',
                                                                                            'CertCloseStore',
                                                                                            'OpenClipboard',
                                                                                            'LoadStringW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateGuid',
                                                                                            'SetErrorInfo'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 190,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1776,
                                                                      'SectionNames': {'.data\x00\x00\x00': 16896,
                                                                                       '.reloc\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 127488},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ebf09c166c54927f3263ac71d0ec424faff8b0dde3fd5ba561392f25a06916ea'},
 'ebf6ee7b73c1b467c58f9a2bd668206ea48dd5cdde2f0236b7709c1164f4f093': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 43984,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12720,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 36864},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/clean/ebf6ee7b73c1b467c58f9a2bd668206ea48dd5cdde2f0236b7709c1164f4f093'},
 'ec99308a220f3a719750ee0703afcd150f80bf7666a665f889c48b39adcaa981': {'AddressOfEntryPoint': 96244,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127792,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456320,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 89600,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ec99308a220f3a719750ee0703afcd150f80bf7666a665f889c48b39adcaa981'},
 'ecb4c25e4d9bd87e3b7a5ae9ecf011707a7ab8ed1c9d92bdab72fad3e70dedca': {'AddressOfEntryPoint': 4096,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 1024,
                                                                      'ExportRVA': 8736,
                                                                      'ExportSize': 53,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetModuleFileNameA',
                                                                                      'USER32.dll': 'wsprintfA'},
                                                                      'ImportedFunctions': ['DeleteFileA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetCommandLineA',
                                                                                            'CloseHandle',
                                                                                            'UnmapViewOfFile',
                                                                                            'WriteFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'CreateFileA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetModuleFileNameA',
                                                                                            'wsprintfA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 16,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1518537,
                                                                      'SectionNames': {'.rdata\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 1518592,
                                                                                       '.text\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ecb4c25e4d9bd87e3b7a5ae9ecf011707a7ab8ed1c9d92bdab72fad3e70dedca'},
 'eceb7132b6075b371194e3aaf6c05dc484549354c0e7f2cb2e628cf33b95acd6': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 4228332,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 6891409244160,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 527360,
                                                                                       '.reloc\x00\x00': 64512,
                                                                                       '.text\x00\x00\x00': 3631104,
                                                                                       '.xdata\x00\x00': 63488},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/eceb7132b6075b371194e3aaf6c05dc484549354c0e7f2cb2e628cf33b95acd6'},
 'ed0b243f223839e41743c40ed813c8e44c07a668c4bb7b269ce4a327c92c72b8': {'AddressOfEntryPoint': 116720,
                                                                      'DebugRVA': 4656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 167936,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'LocalFree',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'USER32.dll': 'GetDlgItem',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoUninitialize',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'LCMapStringW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlLookupFunctionEntry',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'SetEvent',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AdjustTokenPrivileges',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoInitializeSecurity',
                                                                                      'wbemcomn.dll': '?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z'},
                                                                      'ImportedFunctions': ['IsDlgButtonChecked',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'EndDialog',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetDesktopWindow',
                                                                                            'GetClientRect',
                                                                                            'GetWindowRect',
                                                                                            'MoveWindow',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'PostMessageW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgCtrlID',
                                                                                            'FindWindowExW',
                                                                                            'IsWindow',
                                                                                            'IsDialogMessageW',
                                                                                            'PeekMessageW',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'EnumWindows',
                                                                                            'CheckRadioButton',
                                                                                            'LoadStringW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetWindowTextW',
                                                                                            'SetWindowTextW',
                                                                                            'EnableWindow',
                                                                                            'SendMessageW',
                                                                                            'SetFocus',
                                                                                            'DialogBoxParamW',
                                                                                            'GetFocus',
                                                                                            'ShowWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetDlgItemTextW',
                                                                                            'PostQuitMessage',
                                                                                            'GetDlgItem',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_acmdln',
                                                                                            '_fmode',
                                                                                            '_wtoi',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_finite',
                                                                                            '_onexit',
                                                                                            '__getmainargs',
                                                                                            'iswspace',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wtol',
                                                                                            'wcsstr',
                                                                                            'qsort',
                                                                                            'wcscspn',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf',
                                                                                            'strstr',
                                                                                            'mbstowcs',
                                                                                            'setlocale',
                                                                                            'swscanf_s',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'sscanf',
                                                                                            'atol',
                                                                                            '_vsnprintf',
                                                                                            'memset',
                                                                                            'GetModuleHandleW',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'GetErrorInfo',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'FormatMessageW',
                                                                                            'LCMapStringW',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'GetStringTypeExW',
                                                                                            'CompareStringW',
                                                                                            'HeapSetInformation',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'SwitchToThread',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTokenInformation',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'CloseHandle',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'RegisterApplicationRestart',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'SetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'GetVersionExW',
                                                                                            'LocalFree',
                                                                                            'CoWaitForMultipleHandles',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            '??0WString@@QEAA@PEAGH@Z',
                                                                                            '?InsertAt@CFlexArray@@QEAAHHPEAX@Z',
                                                                                            '??0CFlexArray@@QEAA@HH@Z',
                                                                                            '??1CFlexArray@@QEAA@XZ',
                                                                                            '??ACFlexArray@@QEAAAEAPEAXH@Z',
                                                                                            '??YWString@@QEAAAEAV0@PEBG@Z',
                                                                                            '??YWString@@QEAAAEAV0@G@Z',
                                                                                            '?UnbindPtr@WString@@QEAAPEAGXZ',
                                                                                            '?RemoveAt@CFlexArray@@QEAAHH@Z',
                                                                                            '?SetAt@CFlexArray@@QEAAXHPEAX@Z',
                                                                                            '??1CVar@@QEAA@XZ',
                                                                                            '?FillVariant@CVar@@QEAAXPEAUtagVARIANT@@H@Z',
                                                                                            '?SetVarVector@CVar@@QEAAXPEAVCVarVector@@H@Z',
                                                                                            '?SetUnknown@CVar@@QEAAXPEAUIUnknown@@@Z',
                                                                                            '?GetNewVariant@CVar@@QEAAPEAUtagVARIANT@@XZ',
                                                                                            '?Empty@CVar@@QEAAXXZ',
                                                                                            '??4CVar@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '?Size@CVarVector@@QEAAHXZ',
                                                                                            '?FillCVarAt@CVarVector@@QEAAXHAEAVCVar@@@Z',
                                                                                            '?RemoveAt@CVarVector@@QEAAHH@Z',
                                                                                            '?Add@CVarVector@@QEAAHAEAVCVar@@@Z',
                                                                                            '??0CVarVector@@QEAA@HHH@Z',
                                                                                            '?SetBSTR@CVar@@QEAAHPEAG@Z',
                                                                                            '??1CVarVector@@QEAA@XZ',
                                                                                            '??0CVarVector@@QEAA@XZ',
                                                                                            '??YWString@@QEAAAEAV0@AEBV0@@Z',
                                                                                            '??4CVarVector@@QEAAAEAV0@AEAV0@@Z',
                                                                                            '??4WString@@QEAAAEAV0@PEBG@Z',
                                                                                            '?GetAt@CFlexArray@@QEBAPEAXH@Z',
                                                                                            '??0WString@@QEAA@XZ',
                                                                                            '?DeleteString@WString@@AEAAXPEAG@Z',
                                                                                            '?SetVariant@CVar@@QEAAHPEAUtagVARIANT@@H@Z',
                                                                                            '?Init@CVar@@AEAAXXZ',
                                                                                            '?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z',
                                                                                            '?GetOleType@CVar@@QEAAHXZ',
                                                                                            '?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 172,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 64688,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 65024,
                                                                                       '.text\x00\x00\x00': 135680},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ed0b243f223839e41743c40ed813c8e44c07a668c4bb7b269ce4a327c92c72b8'},
 'ed168045d0402e26305699442fc2b019b9967ca401e084748a763e8f08a5651c': {'AddressOfEntryPoint': 5088,
                                                                      'DebugRVA': 51660,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'RPCRT4.dll': 'UuidEqual',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'WriteConsoleW',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'WriteFile',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetSecurityDescriptorControl',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlCreateServiceSid'},
                                                                      'ImportedFunctions': ['_wtol',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            'wcsncmp',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            'wcschr',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            'isupper',
                                                                                            '_vsnwprintf',
                                                                                            '_cexit',
                                                                                            '_ultow',
                                                                                            '_wcsnicmp',
                                                                                            '_tolower',
                                                                                            '_getche',
                                                                                            '_wcsicmp',
                                                                                            '_exit',
                                                                                            'memcpy',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'UuidFromStringW',
                                                                                            'NdrClientCall2',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcBindingFree',
                                                                                            'UuidEqual',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetFileType',
                                                                                            'WriteFile',
                                                                                            'GetSecurityDescriptorControl',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleMode',
                                                                                            'WriteConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlCreateServiceSid',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 66,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 48128},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ed168045d0402e26305699442fc2b019b9967ca401e084748a763e8f08a5651c'},
 'ed1f857082e575e1d2426adb2416de6172bc993174dcc95801fc3516c451d96d': {'AddressOfEntryPoint': 12592,
                                                                      'DebugRVA': 4192,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExA',
                                                                                      'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'SAMLIB.dll': 'SamOpenDomain',
                                                                                      'USER32.dll': 'GetWindowLongW',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlInitUnicodeString'},
                                                                      'ImportedFunctions': ['LsaQueryInformationPolicy',
                                                                                            'LsaOpenPolicy',
                                                                                            'LsaClose',
                                                                                            'SystemFunction036',
                                                                                            'LsaFreeMemory',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteKeyExA',
                                                                                            'RegFlushKey',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegSetValueExA',
                                                                                            'MoveFileW',
                                                                                            'DeleteFileW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'FormatMessageW',
                                                                                            'WriteFile',
                                                                                            'GetModuleHandleW',
                                                                                            'SetErrorMode',
                                                                                            'CreateFileA',
                                                                                            'ExitProcess',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'IsDlgButtonChecked',
                                                                                            'LoadStringW',
                                                                                            'CheckDlgButton',
                                                                                            'EndDialog',
                                                                                            'SetWindowLongW',
                                                                                            'GetDlgItem',
                                                                                            'MessageBoxW',
                                                                                            'SetFocus',
                                                                                            'LoadCursorW',
                                                                                            'DialogBoxParamW',
                                                                                            'LoadImageW',
                                                                                            'SetCursor',
                                                                                            'GetDlgItemTextW',
                                                                                            'EnableWindow',
                                                                                            'SetDlgItemTextW',
                                                                                            'SendMessageW',
                                                                                            'GetWindowLongW',
                                                                                            'memcpy',
                                                                                            '_vsnwprintf',
                                                                                            'fprintf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_iob',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'towupper',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            'SamConnect',
                                                                                            'SamCloseHandle',
                                                                                            'SamiSetBootKeyInformation',
                                                                                            'SamOpenDomain',
                                                                                            'RtlLengthSid',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlInitUnicodeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 11288,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 11776,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ed1f857082e575e1d2426adb2416de6172bc993174dcc95801fc3516c451d96d'},
 'ed4218505bfed8a2e23962789f4d96c562e21fc7ea63c24dd03c9e876a1c54d5': {'AddressOfEntryPoint': 39512,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 298980,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 299008,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37376,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ed4218505bfed8a2e23962789f4d96c562e21fc7ea63c24dd03c9e876a1c54d5'},
 'ed489ad86c444ae01e6ec8db33c7126877083f39d61e33161418471a3273c8c1': {'AddressOfEntryPoint': 12708,
                                                                      'DebugRVA': 16784,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetVersionExW',
                                                                                      'MSVCR100.dll': '_initterm_e',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW'},
                                                                      'ImportedFunctions': ['RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'wsprintfW',
                                                                                            'exit',
                                                                                            'strcpy_s',
                                                                                            'vsprintf_s',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            'wcscpy_s',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            'wcstok_s',
                                                                                            'wcscat_s',
                                                                                            'wcsstr',
                                                                                            '_wcslwr_s',
                                                                                            'wcslen',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_dupenv_s',
                                                                                            'printf',
                                                                                            'perror',
                                                                                            'strcat_s',
                                                                                            'free',
                                                                                            'fopen_s',
                                                                                            'fprintf',
                                                                                            'fclose',
                                                                                            'remove',
                                                                                            '_errno',
                                                                                            'rename',
                                                                                            'strstr',
                                                                                            'feof',
                                                                                            'fgets',
                                                                                            '_stricmp',
                                                                                            'fputs',
                                                                                            'strtok_s',
                                                                                            'memset',
                                                                                            '_initterm_e',
                                                                                            'VirtualQuery',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'RaiseException',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCurrentProcessId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetVersionExW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 87,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2272,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 12288},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/ed489ad86c444ae01e6ec8db33c7126877083f39d61e33161418471a3273c8c1'},
 'ed95b1141f32e8d2180b47426a1cbe89085764e744938e9bca98c5be411a52a6': {'AddressOfEntryPoint': 14203,
                                                                      'DebugRVA': 4752,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 40912,
                                                                      'ExportSize': 172,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'DTEParse.dll': '?ValidateDependencies@CParser@@QAEHXZ',
                                                                                      'DTEPkg.dll': 'PkgCreateAndExecute',
                                                                                      'KERNEL32.dll': 'VirtualFree',
                                                                                      'MSVCP100.dll': '??0_Lockit@std@@QAE@H@Z',
                                                                                      'MSVCR100.dll': '_fileno',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoW'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'FindFirstFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'FindClose',
                                                                                            'SetLastError',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'GetCurrentThread',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'InterlockedDecrement',
                                                                                            'ReadProcessMemory',
                                                                                            'HeapCreate',
                                                                                            'VirtualQuery',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemInfo',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetTimeFormatW',
                                                                                            'CreateMutexW',
                                                                                            'SetHandleInformation',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'SwitchToThread',
                                                                                            'GetDateFormatW',
                                                                                            'IsWow64Process',
                                                                                            'GetVersionExW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'WriteFile',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'WideCharToMultiByte',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleA',
                                                                                            'FormatMessageW',
                                                                                            'GetLocalTime',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'LeaveCriticalSection',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LocalFree',
                                                                                            'LockResource',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'HeapDestroy',
                                                                                            'InterlockedExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedCompareExchange',
                                                                                            'EncodePointer',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'DecodePointer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'VirtualFree',
                                                                                            '_resetstkoflw',
                                                                                            '_vsnwprintf_l',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            'fputs',
                                                                                            'wmemcpy_s',
                                                                                            'memcpy_s',
                                                                                            '_vsnwprintf',
                                                                                            'swprintf_s',
                                                                                            '_getwch',
                                                                                            '_kbhit',
                                                                                            '_eof',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memset',
                                                                                            'wprintf',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '_except_handler4_common',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'free',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_CxxThrowException',
                                                                                            '__iob_func',
                                                                                            '_fileno',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            '?SetDisplayToConsoleOn@CParser@@QAEXXZ',
                                                                                            '?SetPasswordCallback@CParser@@QAEXP6AXHPAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PAX@Z1@Z',
                                                                                            '?Parse@CParser@@QAEHHQAPAG@Z',
                                                                                            '?Parse@CParser@@QAEHPAU_iobuf@@@Z',
                                                                                            '??1CParser@@QAE@XZ',
                                                                                            '??0CParser@@QAE@XZ',
                                                                                            '?ParserConsolePasswordPrompt@@YAXHPAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PAX@Z',
                                                                                            '??ACParser@@QAE?AUOPTARGINFO@@PBG@Z',
                                                                                            '?ValidateDependencies@CParser@@QAEHXZ',
                                                                                            'PkgCreateAndExecute',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            'EnumProcessModules',
                                                                                            'GetModuleFileNameExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 144,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2476,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ed95b1141f32e8d2180b47426a1cbe89085764e744938e9bca98c5be411a52a6'},
 'ed9fb40c3cb5ba0a9ac3ade80b503f5d7128016c75852e612a6c838f04401ea3': {'AddressOfEntryPoint': 29416,
                                                                      'DebugRVA': 34832,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'StartServiceCtrlDispatcherW',
                                                                                      'KERNEL32.dll': 'CloseHandle',
                                                                                      'MSVCR90.dll': '__wgetmainargs',
                                                                                      'USER32.dll': 'DestroyWindow',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'glib-2.0.dll': 'g_mutex_unlock',
                                                                                      'gmodule-2.0.dll': 'g_module_close',
                                                                                      'gobject-2.0.dll': 'g_value_peek_pointer',
                                                                                      'intl.dll': 'libintl_gettext',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'vmtools.dll': 'Hostinfo_GetOSType'},
                                                                      'ImportedFunctions': ['FreeSid',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetEntriesInAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'DeleteService',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'SetServiceStatus',
                                                                                            'DeregisterEventSource',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyW',
                                                                                            'CreateServiceW',
                                                                                            'RegisterServiceCtrlHandlerExW',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'CoUninitialize',
                                                                                            'UnregisterClassW',
                                                                                            'UnregisterDeviceNotification',
                                                                                            'RegisterDeviceNotificationW',
                                                                                            'MessageBoxW',
                                                                                            'RegisterClassW',
                                                                                            'GetDesktopWindow',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'DefWindowProcW',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_encode_pointer',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_decode_pointer',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_amsg_exit',
                                                                                            '_purecall',
                                                                                            'wprintf',
                                                                                            '_wcsicmp',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memset',
                                                                                            'setlocale',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'exit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '__C_specific_handler',
                                                                                            '__wgetmainargs',
                                                                                            'libintl_gettext',
                                                                                            'g_str_has_suffix',
                                                                                            'g_dir_read_name_utf8',
                                                                                            'g_ptr_array_new',
                                                                                            'g_dir_open_utf8',
                                                                                            'g_malloc0',
                                                                                            'g_array_new',
                                                                                            'g_ptr_array_remove_index',
                                                                                            'g_array_free',
                                                                                            'g_thread_join',
                                                                                            'g_strdup_printf',
                                                                                            'g_queue_remove',
                                                                                            'g_mutex_lock',
                                                                                            'g_idle_add_full',
                                                                                            'g_ptr_array_remove',
                                                                                            'g_queue_pop_tail',
                                                                                            'g_free',
                                                                                            'g_queue_push_head',
                                                                                            'g_queue_delete_link',
                                                                                            'g_queue_find_custom',
                                                                                            'g_thread_create',
                                                                                            'g_queue_new',
                                                                                            'g_mutex_new',
                                                                                            'g_thread_pool_set_max_unused_threads',
                                                                                            'g_thread_pool_set_max_idle_time',
                                                                                            'g_thread_pool_new',
                                                                                            'g_file_test_utf8',
                                                                                            'g_mutex_free',
                                                                                            'g_strdup',
                                                                                            'g_thread_pool_free',
                                                                                            'g_print',
                                                                                            'g_printerr',
                                                                                            'g_win32_error_message',
                                                                                            'g_option_context_free',
                                                                                            'g_option_context_parse',
                                                                                            'g_option_group_set_error_hook',
                                                                                            'g_option_context_get_main_group',
                                                                                            'g_option_context_add_main_entries',
                                                                                            'g_option_context_set_summary',
                                                                                            'g_option_context_new',
                                                                                            'g_key_file_get_boolean',
                                                                                            'g_malloc',
                                                                                            'g_ptr_array_free',
                                                                                            'g_thread_pool_push',
                                                                                            'g_array_append_vals',
                                                                                            'g_return_if_fail_warning',
                                                                                            'g_clear_error',
                                                                                            'g_main_loop_run',
                                                                                            'g_source_remove',
                                                                                            'g_timeout_add',
                                                                                            'g_main_context_default',
                                                                                            'g_main_loop_new',
                                                                                            'g_main_context_unref',
                                                                                            'g_key_file_new',
                                                                                            'g_key_file_free',
                                                                                            'g_ptr_array_add',
                                                                                            'g_dir_close',
                                                                                            'g_queue_free',
                                                                                            'g_ptr_array_sort',
                                                                                            'g_idle_add',
                                                                                            'g_source_set_callback',
                                                                                            'g_main_loop_get_context',
                                                                                            'g_source_attach',
                                                                                            'g_source_unref',
                                                                                            'g_str_has_prefix',
                                                                                            'g_main_loop_is_running',
                                                                                            'g_main_loop_quit',
                                                                                            'g_log',
                                                                                            'g_logv',
                                                                                            'g_key_file_get_integer',
                                                                                            'g_main_loop_unref',
                                                                                            'g_mutex_unlock',
                                                                                            'g_module_symbol',
                                                                                            'g_module_open_utf8',
                                                                                            'g_module_error',
                                                                                            'g_module_make_resident',
                                                                                            'g_module_close',
                                                                                            'g_signal_emit_by_name',
                                                                                            'g_object_unref',
                                                                                            'g_object_set',
                                                                                            'g_object_new',
                                                                                            'g_type_init',
                                                                                            'g_signal_connect_data',
                                                                                            'g_signal_lookup',
                                                                                            'g_signal_parse_name',
                                                                                            'g_value_set_boolean',
                                                                                            'g_value_get_boolean',
                                                                                            'g_value_set_pointer',
                                                                                            'g_value_get_pointer',
                                                                                            'g_value_set_uint',
                                                                                            'g_value_get_uint',
                                                                                            'g_object_notify',
                                                                                            'g_type_check_instance_cast',
                                                                                            'g_type_register_static',
                                                                                            'g_type_check_class_cast',
                                                                                            'g_cclosure_marshal_VOID__POINTER',
                                                                                            'g_signal_new',
                                                                                            'g_type_class_peek_parent',
                                                                                            'g_object_class_install_property',
                                                                                            'g_param_spec_pointer',
                                                                                            'g_value_peek_pointer',
                                                                                            'Str_Snwprintf',
                                                                                            'Str_Wcscpy',
                                                                                            'RpcChannel_Setup',
                                                                                            'RpcChannel_New',
                                                                                            'GuestApp_GetConfPath',
                                                                                            'StrUtil_GetNextToken',
                                                                                            'RpcChannel_SetRetVals',
                                                                                            'RpcChannel_Send',
                                                                                            'Str_SafeAsprintf',
                                                                                            'RpcChannel_SendOne',
                                                                                            'VMTools_GetString',
                                                                                            'GuestApp_GetInstallPath',
                                                                                            'RpcChannel_RegisterCallback',
                                                                                            'RpcChannel_Start',
                                                                                            'Str_Vaswprintf',
                                                                                            'VMTools_ResumeLogIO',
                                                                                            'VmCheck_IsVirtualWorld',
                                                                                            'VMTools_LoadConfig',
                                                                                            'VMTools_NewHandleSource',
                                                                                            'Unicode_InitW',
                                                                                            'VMTools_ConfigLogging',
                                                                                            'VMTools_BindTextDomain',
                                                                                            'VMTools_AttachConsole',
                                                                                            'CodeSet_Utf8ToUtf16le',
                                                                                            'RpcChannel_Stop',
                                                                                            'RpcChannel_Destroy',
                                                                                            'Str_SafeVaswprintf',
                                                                                            'Str_Aswprintf',
                                                                                            'vm_free',
                                                                                            'Str_Vasprintf',
                                                                                            'VMTools_SuspendLogIO',
                                                                                            'Panic',
                                                                                            'Hostinfo_GetOSType',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'LocalAlloc',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'OutputDebugStringA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetModuleFileNameW',
                                                                                            'OpenEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateEventW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetCurrentProcess',
                                                                                            'SetPriorityClass',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'LocalFree',
                                                                                            'SetErrorMode',
                                                                                            'SetEvent',
                                                                                            'CloseHandle'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 240,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 12940,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.pdata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 20480,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 13312,
                                                                                       '.text\x00\x00\x00': 28672},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ed9fb40c3cb5ba0a9ac3ade80b503f5d7128016c75852e612a6c838f04401ea3'},
 'eda005ffd7ef503281fbab123d754fd35dbe82a2e799aea242a6ff7edb473ff0': {'AddressOfEntryPoint': 96244,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127792,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456320,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 89600,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/eda005ffd7ef503281fbab123d754fd35dbe82a2e799aea242a6ff7edb473ff0'},
 'eda6cd1bda685a38bb8d754c47710cb0bc2885990f174bdbf57028ad5a86dd22': {'AddressOfEntryPoint': 51120,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'DNSAPI.dll': 'DnsFreeConfigStructure',
                                                                                      'MSWSOCK.dll': 's_perror',
                                                                                      'WS2_32.dll': 'WSAStartup',
                                                                                      'api-ms-win-core-apiquery-l1-1-0.dll': 'ApiSetQueryApiSetPresence',
                                                                                      'api-ms-win-core-delayload-l1-1-1.dll': 'DelayLoadFailureHook',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetLastError',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'ExpandEnvironmentStringsA',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCloseKey',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwTraceMessage'},
                                                                      'ImportedFunctions': ['fclose',
                                                                                            'getenv',
                                                                                            'ferror',
                                                                                            'strcat_s',
                                                                                            'fputc',
                                                                                            'fwrite',
                                                                                            'realloc',
                                                                                            'getc',
                                                                                            'gmtime',
                                                                                            'putc',
                                                                                            'fputs',
                                                                                            'perror',
                                                                                            'sprintf_s',
                                                                                            'putchar',
                                                                                            '_iob',
                                                                                            '_vsnprintf_s',
                                                                                            'fread',
                                                                                            'system',
                                                                                            '_write',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            'strcpy_s',
                                                                                            'fprintf',
                                                                                            'fopen',
                                                                                            '_amsg_exit',
                                                                                            'printf',
                                                                                            'fgets',
                                                                                            'fflush',
                                                                                            'strchr',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'malloc',
                                                                                            'strncpy_s',
                                                                                            '_except_handler4_common',
                                                                                            'free',
                                                                                            'isspace',
                                                                                            'strncmp',
                                                                                            'sscanf',
                                                                                            '_strnicmp',
                                                                                            '_controlfp',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'FormatMessageA',
                                                                                            'SetThreadUILanguage',
                                                                                            'WSAGetLastError',
                                                                                            'ntohs',
                                                                                            'htons',
                                                                                            'getservbyport',
                                                                                            'inet_ntoa',
                                                                                            'getprotobynumber',
                                                                                            'send',
                                                                                            'closesocket',
                                                                                            'getaddrinfo',
                                                                                            'socket',
                                                                                            'htonl',
                                                                                            'gethostname',
                                                                                            'freeaddrinfo',
                                                                                            'select',
                                                                                            'connect',
                                                                                            'recv',
                                                                                            'WSAStartup',
                                                                                            'DnsQueryConfigAllocEx',
                                                                                            'DnsFreeConfigStructure',
                                                                                            'HeapSetInformation',
                                                                                            's_perror',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'RegCloseKey',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'ApiSetQueryApiSetPresence',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'RtlIpv4StringToAddressA',
                                                                                            'RtlIpv6AddressToStringA',
                                                                                            'RtlIpv4AddressToStringExA',
                                                                                            'RtlIpv6AddressToStringExA',
                                                                                            'RtlIpv6StringToAddressExA',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'NtOpenKey',
                                                                                            'RtlFreeHeap',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'RtlInitString',
                                                                                            'RtlAllocateHeap',
                                                                                            'NtQueryValueKey',
                                                                                            'EtwTraceMessage'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 107,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3336,
                                                                      'SectionNames': {'.data\x00\x00\x00': 14848,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 49664},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/eda6cd1bda685a38bb8d754c47710cb0bc2885990f174bdbf57028ad5a86dd22'},
 'ee1f8297de41428e669755f3a0e1062e5ca47c9a00440b76fc8d2125606cba8b': {'AddressOfEntryPoint': 96244,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 127792,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 133,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 456320,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 456704,
                                                                                       '.text\x00\x00\x00': 89600,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ee1f8297de41428e669755f3a0e1062e5ca47c9a00440b76fc8d2125606cba8b'},
 'ee395a82baf3dd2a844d0f6c48a8c19bec4202e459eb753f9af70e8beb925c70': {'AddressOfEntryPoint': 20480400,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 19002704,
                                                                      'ExportSize': 6490,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CopySid',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'GDI32.dll': 'BitBlt',
                                                                                      'IMM32.dll': 'ImmNotifyIME',
                                                                                      'KERNEL32.DLL': 'ExitProcess',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'EnumFormsW',
                                                                                      'WS2_32.dll': 'select',
                                                                                      'ole32.dll': 'DoDragDrop'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'ExitProcess',
                                                                                            'CopySid',
                                                                                            'GetOpenFileNameW',
                                                                                            'CertFreeCertificateContext',
                                                                                            'BitBlt',
                                                                                            'ImmNotifyIME',
                                                                                            'DoDragDrop',
                                                                                            'SysAllocString',
                                                                                            'ShellExecuteW',
                                                                                            'GetDC',
                                                                                            'PlaySoundW',
                                                                                            'EnumFormsW',
                                                                                            'select'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 13,
                                                                      'NumberOfImportFunctions': 18,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 3876,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 5120,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 7115776},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ee395a82baf3dd2a844d0f6c48a8c19bec4202e459eb753f9af70e8beb925c70'},
 'ee64c2009fb28c2306761c6d938e07d07a843d0f7663f1e85a1f1a9ddf6771a0': {'AddressOfEntryPoint': 21104,
                                                                      'DebugRVA': 5888,
                                                                      'DebugSize': 84,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 25840,
                                                                      'ExportSize': 356,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'GetProcessAffinityMask',
                                                                                      'MSVCR120_CLR0400.dll': '_exit',
                                                                                      'MSWSOCK.dll': 'AcceptEx',
                                                                                      'WS2_32.dll': 'htonl',
                                                                                      'mscoree.dll': 'ClrCreateManagedInstance',
                                                                                      'ole32.dll': 'CoInitializeEx',
                                                                                      'webengine4.dll': 'GetXSPHeap'},
                                                                      'ImportedFunctions': ['RegisterServiceCtrlHandlerW',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'HeapFree',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetSystemInfo',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'SetWaitableTimer',
                                                                                            'Sleep',
                                                                                            'CreateThread',
                                                                                            'FormatMessageW',
                                                                                            'CreateWaitableTimerW',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetLastError',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'SwitchToThread',
                                                                                            'LoadLibraryW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'lstrlenW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapDestroy',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapReAlloc',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'HeapAlloc',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapCreate',
                                                                                            'GetProcessAffinityMask',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '_calloc_crt',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__crtUnhandledException',
                                                                                            '__crtTerminateProcess',
                                                                                            '_purecall',
                                                                                            'strncmp',
                                                                                            '__winitenv',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            'memset',
                                                                                            '_itoa_s',
                                                                                            'wcsncpy_s',
                                                                                            'wcscpy_s',
                                                                                            '_vsnwprintf',
                                                                                            'memcpy',
                                                                                            'strtol',
                                                                                            'strstr',
                                                                                            'strchr',
                                                                                            '_initterm_e',
                                                                                            '_exit',
                                                                                            'GetAcceptExSockaddrs',
                                                                                            'AcceptEx',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'select',
                                                                                            'setsockopt',
                                                                                            'recv',
                                                                                            'bind',
                                                                                            'WSAAddressToStringA',
                                                                                            'WSASend',
                                                                                            'WSARecv',
                                                                                            'WSAGetOverlappedResult',
                                                                                            'ntohs',
                                                                                            'inet_ntoa',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'WSASocketW',
                                                                                            'WSAGetLastError',
                                                                                            'closesocket',
                                                                                            'listen',
                                                                                            'htons',
                                                                                            'htonl',
                                                                                            'ClrCreateManagedInstance',
                                                                                            'XspLogEvent',
                                                                                            'InitializeLibrary',
                                                                                            'AspnetLoadResourceDLL',
                                                                                            'PerfCounterInitialize',
                                                                                            'LoadLibraryUsingFullPath',
                                                                                            'PrintResourceString',
                                                                                            'AttachHandleToThreadPool',
                                                                                            'GetXSPHeap'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 117,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1916,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 22528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ee64c2009fb28c2306761c6d938e07d07a843d0f7663f1e85a1f1a9ddf6771a0'},
 'ee7afac9e0c2d1a31035fab8f175ce07f95fe6edd29d19532dd09bb1e353f4f8': {'AddressOfEntryPoint': 12510,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 18728,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 18944,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ee7afac9e0c2d1a31035fab8f175ce07f95fe6edd29d19532dd09bb1e353f4f8'},
 'ee80b1d1c0e4f3d8946beb84893bfa6c9f5c964eb4423cc6682cb327ad163e92': {'AddressOfEntryPoint': 499335,
                                                                      'DebugRVA': 599552,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 598016,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'DNSAPI.dll': 'DnsRecordListFree',
                                                                                      'GDI32.dll': 'CreateFontW',
                                                                                      'KERNEL32.dll': 'SetEndOfFile',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'SHELL32.dll': 'Shell_NotifyIconW',
                                                                                      'SHLWAPI.dll': 'PathRemoveExtensionW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'GetMessageW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetCloseHandle',
                                                                                      'WINMM.dll': 'timeGetTime',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'gdiplus.dll': 'GdipDisposeImage',
                                                                                      'iphlpapi.dll': 'IcmpCreateFile',
                                                                                      'ole32.dll': 'CoTaskMemRealloc',
                                                                                      'urlmon.dll': 'IsValidURL'},
                                                                      'ImportedFunctions': ['HttpAddRequestHeadersA',
                                                                                            'InternetSetStatusCallbackW',
                                                                                            'HttpSendRequestExA',
                                                                                            'HttpOpenRequestA',
                                                                                            'InternetConnectA',
                                                                                            'InternetOpenA',
                                                                                            'InternetGetCookieW',
                                                                                            'InternetConnectW',
                                                                                            'InternetOpenW',
                                                                                            'InternetSetOptionA',
                                                                                            'InternetSetOptionW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetReadFile',
                                                                                            'HttpEndRequestW',
                                                                                            'HttpSendRequestExW',
                                                                                            'InternetGetConnectedState',
                                                                                            'InternetOpenUrlW',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'HttpEndRequestA',
                                                                                            'InternetCrackUrlW',
                                                                                            'InternetWriteFile',
                                                                                            'InternetCloseHandle',
                                                                                            'PathFindFileNameW',
                                                                                            'PathAppendW',
                                                                                            'PathAddBackslashW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'StrTrimA',
                                                                                            'PathFileExistsW',
                                                                                            'PathRemoveExtensionW',
                                                                                            '_TrackMouseEvent',
                                                                                            'InitCommonControlsEx',
                                                                                            'timeGetTime',
                                                                                            'AlphaBlend',
                                                                                            'DnsQuery_W',
                                                                                            'DnsRecordListFree',
                                                                                            'FindMimeFromData',
                                                                                            'IsValidURL',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'inet_addr',
                                                                                            'GetAdaptersInfo',
                                                                                            'IcmpSendEcho2',
                                                                                            'IcmpCreateFile',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetLastError',
                                                                                            'ResetEvent',
                                                                                            'GetFileSizeEx',
                                                                                            'CreateFileW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'CopyFileW',
                                                                                            'MoveFileW',
                                                                                            'DeleteFileW',
                                                                                            'WriteFile',
                                                                                            'SetFilePointerEx',
                                                                                            'lstrlenA',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GlobalAlloc',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CreateFileMappingW',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetGeoInfoW',
                                                                                            'GetUserGeoID',
                                                                                            'OutputDebugStringW',
                                                                                            'GetVersionExA',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindResourceExW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetLocalTime',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'FreeLibrary',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalFree',
                                                                                            'FormatMessageW',
                                                                                            'GetTempPathW',
                                                                                            'GetTickCount',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'LoadLibraryA',
                                                                                            'GetCurrentThreadId',
                                                                                            'OutputDebugStringA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'WideCharToMultiByte',
                                                                                            'RaiseException',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedExchangeAdd',
                                                                                            'ReleaseMutex',
                                                                                            'CreateMutexA',
                                                                                            'SetFileAttributesW',
                                                                                            'EnterCriticalSection',
                                                                                            'GetPrivateProfileSectionNamesW',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'lstrlenW',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrcmpiA',
                                                                                            'MoveFileExW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'FindResourceA',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LocalAlloc',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetComputerNameW',
                                                                                            'WritePrivateProfileSectionW',
                                                                                            'CreateEventA',
                                                                                            'TerminateThread',
                                                                                            'SetThreadPriority',
                                                                                            'CreateThread',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'InterlockedCompareExchange',
                                                                                            'AreFileApisANSI',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'LockFileEx',
                                                                                            'UnlockFileEx',
                                                                                            'GetSystemTime',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FormatMessageA',
                                                                                            'GetACP',
                                                                                            'FlushFileBuffers',
                                                                                            'GetTempPathA',
                                                                                            'GetFileAttributesA',
                                                                                            'DeleteFileA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetSystemInfo',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingA',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateDirectoryW',
                                                                                            'VirtualProtect',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'HeapReAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'SetLastError',
                                                                                            'HeapSize',
                                                                                            'ExitProcess',
                                                                                            'GetStdHandle',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'InitializeCriticalSection',
                                                                                            'ExitThread',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'RtlUnwind',
                                                                                            'GetThreadLocale',
                                                                                            'GetLocaleInfoA',
                                                                                            'SetStdHandle',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'LoadLibraryExA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'SetEndOfFile',
                                                                                            'SetWindowRgn',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetClientRect',
                                                                                            'UnregisterClassA',
                                                                                            'ShowWindow',
                                                                                            'GetWindowRect',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetSystemMetrics',
                                                                                            'FillRect',
                                                                                            'SendMessageW',
                                                                                            'EnableWindow',
                                                                                            'PostMessageW',
                                                                                            'GetDC',
                                                                                            'InvalidateRect',
                                                                                            'UpdateWindow',
                                                                                            'CreateWindowExW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'PostQuitMessage',
                                                                                            'wsprintfW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'FindWindowW',
                                                                                            'GetMonitorInfoW',
                                                                                            'LoadIconW',
                                                                                            'PeekMessageW',
                                                                                            'MessageBoxW',
                                                                                            'DrawTextW',
                                                                                            'TranslateMessage',
                                                                                            'wsprintfA',
                                                                                            'CharNextA',
                                                                                            'DefWindowProcW',
                                                                                            'GetMessageW',
                                                                                            'CreateRectRgn',
                                                                                            'GetObjectW',
                                                                                            'GetPixel',
                                                                                            'CombineRgn',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteDC',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'BitBlt',
                                                                                            'GetStockObject',
                                                                                            'CreateDCW',
                                                                                            'CreateFontW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'IsValidSid',
                                                                                            'LookupAccountNameW',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'SetEntriesInAclW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'RegQueryValueExA',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetMalloc',
                                                                                            'Shell_NotifyIconW',
                                                                                            'CoUninitialize',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleSetContainedObject',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateGuid',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitialize',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'VariantClear',
                                                                                            'VarUI4FromStr',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'GdipFillRectangleI',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipCreateSolidFill',
                                                                                            'GdipCreateHBITMAPFromBitmap',
                                                                                            'GdipCloneBrush',
                                                                                            'GdipDeleteBrush',
                                                                                            'GdipCloneImage',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdiplusStartup',
                                                                                            'GdipDisposeImage',
                                                                                            'UuidToStringW',
                                                                                            'RpcStringFreeW',
                                                                                            'GetUserNameExW'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 20,
                                                                      'NumberOfImportFunctions': 339,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 290236,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 118784,
                                                                                       '.rsrc\x00\x00\x00': 290816,
                                                                                       '.text\x00\x00\x00': 593920},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ee80b1d1c0e4f3d8946beb84893bfa6c9f5c964eb4423cc6682cb327ad163e92'},
 'ee893a021af6c97c9e933fd83f15068da55dff8803ab13c72835eca4a6b2a902': {'AddressOfEntryPoint': 39196,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 10240,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 10240,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 37376,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ee893a021af6c97c9e933fd83f15068da55dff8803ab13c72835eca4a6b2a902'},
 'eee84f44922405aada909b6e268441ce1b32c1961cc606a44e03903c658359ae': {'AddressOfEntryPoint': 36102,
                                                                      'DebugRVA': 35708,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 48,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1480,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 28160},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/eee84f44922405aada909b6e268441ce1b32c1961cc606a44e03903c658359ae'},
 'eeed420cf9e178fcb6ec76a2395598a0bea8711c1cb85cfb0266105bdce7c59e': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 306296,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 306688,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/eeed420cf9e178fcb6ec76a2395598a0bea8711c1cb85cfb0266105bdce7c59e'},
 'ef12c1f39f55c6e53902f0fe92f5107dd2e2a495e8ed9bd85ea08479fad64487': {'AddressOfEntryPoint': 287662,
                                                                      'DebugRVA': 287452,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 11472,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 11776,
                                                                                       '.text\x00\x00\x00': 279552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ef12c1f39f55c6e53902f0fe92f5107dd2e2a495e8ed9bd85ea08479fad64487'},
 'ef1d64faad0952a453e3e3ab55b878170e777f926b636550d6c617827ef7e858': {'AddressOfEntryPoint': 5262142,
                                                                      'DebugRVA': 9103792,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 9056256,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryInfoKeyW',
                                                                                      'AttackerCOM.dll': '?SetModuleRunnerFactory@@YAXP6APAUIModuleRunner@@XZ@Z',
                                                                                      'CRYPT32.dll': 'CertEnumCertificatesInStore',
                                                                                      'GDI32.dll': 'TextOutA',
                                                                                      'KERNEL32.dll': 'EnterCriticalSection',
                                                                                      'MSVCP100.dll': '?_Init@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                      'MSVCR100.dll': 'getenv',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'PSAPI.DLL': 'EnumProcesses',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'USER32.dll': 'PostQuitMessage',
                                                                                      'USERENV.dll': 'GetUserProfileDirectoryW',
                                                                                      'WINHTTP.dll': 'WinHttpOpenRequest',
                                                                                      'WS2_32.dll': 'WSASetLastError',
                                                                                      'WSOCK32.dll': 'setsockopt',
                                                                                      'mscoree.dll': '_CorExeMain',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['GetExitCodeProcess',
                                                                                            'CreateEventW',
                                                                                            'GetProcessTimes',
                                                                                            'GetSystemTimes',
                                                                                            'GetSystemWow64DirectoryA',
                                                                                            'Process32Next',
                                                                                            'Process32First',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'ReleaseMutex',
                                                                                            'ConvertFiberToThread',
                                                                                            'CreateMutexA',
                                                                                            'SetPriorityClass',
                                                                                            'DeleteFiber',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'ConvertThreadToFiber',
                                                                                            'CreateFiber',
                                                                                            'MoveFileW',
                                                                                            'GetTickCount64',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreA',
                                                                                            'FindClose',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'FindFirstFileW',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExA',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetFileTime',
                                                                                            'ResetEvent',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualQuery',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'AttachConsole',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFree',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'GetProcessId',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'GlobalMemoryStatus',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetVersion',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'DecodePointer',
                                                                                            'GetComputerNameExA',
                                                                                            'LocalFree',
                                                                                            'SwitchToFiber',
                                                                                            'SetThreadPriority',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'OutputDebugStringA',
                                                                                            'CopyFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateProcessW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LoadLibraryA',
                                                                                            'ReadProcessMemory',
                                                                                            'CreateProcessA',
                                                                                            'TerminateThread',
                                                                                            'ResumeThread',
                                                                                            'CreateDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetLastError',
                                                                                            'SetEvent',
                                                                                            'CreateEventA',
                                                                                            'CreateThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'FlushInstructionCache',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'LoadLibraryExA',
                                                                                            'FindResourceA',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'FormatMessageA',
                                                                                            'LocalAlloc',
                                                                                            'lstrcmpiA',
                                                                                            'lstrlenA',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleHandleA',
                                                                                            'GetProcAddress',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'EncodePointer',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetSystemDirectoryA',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'lstrlenW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetFileAttributesW',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadStringA',
                                                                                            'SetWindowLongA',
                                                                                            'CharNextA',
                                                                                            'CharUpperA',
                                                                                            'GetClassInfoExA',
                                                                                            'LoadCursorA',
                                                                                            'CharNextW',
                                                                                            'SendMessageA',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'RegisterClassA',
                                                                                            'FillRect',
                                                                                            'PostMessageA',
                                                                                            'GetDesktopWindow',
                                                                                            'PostThreadMessageA',
                                                                                            'CallWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'GetMessageA',
                                                                                            'GetDC',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowLongA',
                                                                                            'CreateWindowExA',
                                                                                            'RegisterClassExA',
                                                                                            'MessageBoxA',
                                                                                            'UnregisterClassA',
                                                                                            'GetUserObjectInformationW',
                                                                                            'GetProcessWindowStation',
                                                                                            'WaitForInputIdle',
                                                                                            'DefWindowProcA',
                                                                                            'PostQuitMessage',
                                                                                            'CreateFontIndirectW',
                                                                                            'BitBlt',
                                                                                            'LineTo',
                                                                                            'MoveToEx',
                                                                                            'TextOutW',
                                                                                            'GetTextExtentPointW',
                                                                                            'CreateFontIndirectA',
                                                                                            'Rectangle',
                                                                                            'CreateSolidBrush',
                                                                                            'CreatePen',
                                                                                            'GetTextExtentPointA',
                                                                                            'GetCurrentObject',
                                                                                            'SetDIBits',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateDIBSection',
                                                                                            'GetObjectA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'DeleteDC',
                                                                                            'GetStockObject',
                                                                                            'SetPixel',
                                                                                            'GetPixel',
                                                                                            'DeleteObject',
                                                                                            'TextOutA',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'ReportEventA',
                                                                                            'DeregisterEventSource',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'GetNamedSecurityInfoW',
                                                                                            'SetEntriesInAclA',
                                                                                            'RegisterEventSourceA',
                                                                                            'RegOpenKeyExW',
                                                                                            'CryptSetProvParam',
                                                                                            'CryptReleaseContext',
                                                                                            'OpenProcessToken',
                                                                                            'GetUserNameA',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateGuid',
                                                                                            'ProgIDFromCLSID',
                                                                                            'OleRun',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CreateFileMoniker',
                                                                                            'GetRunningObjectTable',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoTaskMemAlloc',
                                                                                            'VarBstrCat',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SysAllocString',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'VariantCopy',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetVartype',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayPutElement',
                                                                                            'VarBstrFromDate',
                                                                                            'VariantChangeType',
                                                                                            'VarBstrCmp',
                                                                                            'RevokeActiveObject',
                                                                                            'RegisterTypeLib',
                                                                                            'UnRegisterTypeLib',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'SafeArrayCreateVector',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayLock',
                                                                                            'GetErrorInfo',
                                                                                            '?bad@ios_base@std@@QBE_NXZ',
                                                                                            '?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?max@?$numeric_limits@I@std@@SAIXZ',
                                                                                            '?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ',
                                                                                            '?eof@ios_base@std@@QBE_NXZ',
                                                                                            '?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z',
                                                                                            '??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z',
                                                                                            '?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z',
                                                                                            '?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z',
                                                                                            '?fail@ios_base@std@@QBE_NXZ',
                                                                                            '??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z',
                                                                                            '?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z',
                                                                                            '?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z',
                                                                                            '?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ',
                                                                                            '?id@?$codecvt@DDH@std@@2V0locale@2@A',
                                                                                            '?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z',
                                                                                            '?id@?$collate@D@std@@2V0locale@2@A',
                                                                                            '??0_Locinfo@std@@QAE@PBD@Z',
                                                                                            '??1_Locinfo@std@@QAE@XZ',
                                                                                            '?c_str@?$_Yarn@D@std@@QBEPBDXZ',
                                                                                            '?max@?$numeric_limits@D@std@@SADXZ',
                                                                                            '?is@?$ctype@D@std@@QBE_NFD@Z',
                                                                                            '?tolower@?$ctype@D@std@@QBEDD@Z',
                                                                                            '_Strxfrm',
                                                                                            '_Strcoll',
                                                                                            '??0facet@locale@std@@IAE@I@Z',
                                                                                            '??1facet@locale@std@@UAE@XZ',
                                                                                            '?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ',
                                                                                            '?_Xmem@tr1@std@@YAXXZ',
                                                                                            '?_Xbad@tr1@std@@YAXW4error_type@regex_constants@12@@Z',
                                                                                            '?id@?$ctype@D@std@@2V0locale@2@A',
                                                                                            '?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?_Xout_of_range@std@@YAXPBD@Z',
                                                                                            '?_Xlength_error@std@@YAXPBD@Z',
                                                                                            '?_Orphan_all@_Container_base0@std@@QAEXXZ',
                                                                                            '??1_Container_base12@std@@QAE@XZ',
                                                                                            '??0_Container_base12@std@@QAE@XZ',
                                                                                            '?_Orphan_all@_Container_base12@std@@QAEXXZ',
                                                                                            '?_Xfunc@tr1@std@@YAXXZ',
                                                                                            '?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ',
                                                                                            '?always_noconv@codecvt_base@std@@QBE_NXZ',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '?_Incref@facet@locale@std@@QAEXXZ',
                                                                                            '?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '??Bid@locale@std@@QAEIXZ',
                                                                                            '?id@?$ctype@_W@std@@2V0locale@2@A',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            '??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ',
                                                                                            '?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z',
                                                                                            '?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ',
                                                                                            '?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z',
                                                                                            '?id@?$codecvt@_WDH@std@@2V0locale@2@A',
                                                                                            '?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ',
                                                                                            '?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ',
                                                                                            '?good@ios_base@std@@QBE_NXZ',
                                                                                            '?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ',
                                                                                            '?uncaught_exception@std@@YA_NXZ',
                                                                                            '?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ',
                                                                                            '?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ',
                                                                                            '?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ',
                                                                                            '?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ',
                                                                                            '?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z',
                                                                                            '?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?width@ios_base@std@@QAE_J_J@Z',
                                                                                            '?widen@?$ctype@_W@std@@QBE_WD@Z',
                                                                                            '?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z',
                                                                                            '?flags@ios_base@std@@QBEHXZ',
                                                                                            '?getloc@ios_base@std@@QBE?AVlocale@2@XZ',
                                                                                            '?width@ios_base@std@@QBE_JXZ',
                                                                                            '?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z',
                                                                                            '?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z',
                                                                                            '?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z',
                                                                                            '?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z',
                                                                                            '?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z',
                                                                                            '?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z',
                                                                                            '?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z',
                                                                                            '?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ',
                                                                                            '?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ',
                                                                                            '?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z',
                                                                                            '?_BADOFF@std@@3_JB',
                                                                                            '??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z',
                                                                                            '?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z',
                                                                                            '??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z',
                                                                                            '??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ',
                                                                                            '?max@?$numeric_limits@_W@std@@SA_WXZ',
                                                                                            '?min@?$numeric_limits@_W@std@@SA_WXZ',
                                                                                            '?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z',
                                                                                            '?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z',
                                                                                            '?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ',
                                                                                            '?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ',
                                                                                            '??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ',
                                                                                            '?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ',
                                                                                            '?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z',
                                                                                            '?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z',
                                                                                            '?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z',
                                                                                            '?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ',
                                                                                            '?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z',
                                                                                            '?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z',
                                                                                            '?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z',
                                                                                            '?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ',
                                                                                            '??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ',
                                                                                            '?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ',
                                                                                            '?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ',
                                                                                            '?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z',
                                                                                            '?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ',
                                                                                            '?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z',
                                                                                            '?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z',
                                                                                            '?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z',
                                                                                            '??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ',
                                                                                            '??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z',
                                                                                            '??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ',
                                                                                            '??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z',
                                                                                            '?max@?$numeric_limits@K@std@@SAKXZ',
                                                                                            '?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z',
                                                                                            '??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z',
                                                                                            '?max@?$numeric_limits@H@std@@SAHXZ',
                                                                                            '?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ',
                                                                                            '??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ',
                                                                                            '??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z',
                                                                                            '?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z',
                                                                                            '?_Init@locale@std@@CAPAV_Locimp@12@XZ',
                                                                                            '_vsnprintf',
                                                                                            'strncpy',
                                                                                            'qsort',
                                                                                            'raise',
                                                                                            'sscanf',
                                                                                            'strerror',
                                                                                            'strcmp',
                                                                                            '_gmtime64',
                                                                                            '_errno',
                                                                                            'fopen',
                                                                                            '_setmode',
                                                                                            '_fileno',
                                                                                            '__FrameUnwindFilter',
                                                                                            '__CxxQueryExceptionSize',
                                                                                            '__CxxExceptionFilter',
                                                                                            '__CxxRegisterExceptionObject',
                                                                                            '__CxxDetectRethrow',
                                                                                            '__CxxUnregisterExceptionObject',
                                                                                            '_ismbcdigit',
                                                                                            '_CIpow',
                                                                                            '_i64toa_s',
                                                                                            '_stat64i32',
                                                                                            '_ftelli64',
                                                                                            '_wfsopen',
                                                                                            '_getch',
                                                                                            'signal',
                                                                                            'fputs',
                                                                                            'fgets',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '_mbsnbcpy_s',
                                                                                            '_mbsstr',
                                                                                            '_mbscmp',
                                                                                            '_mbsnbcmp',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            '_CxxThrowException',
                                                                                            'memmove_s',
                                                                                            'strcpy_s',
                                                                                            'memset',
                                                                                            'toupper',
                                                                                            'isdigit',
                                                                                            '__CxxFrameHandler3',
                                                                                            'fprintf',
                                                                                            'fread',
                                                                                            '_wfopen_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'strnlen',
                                                                                            'wcsnlen',
                                                                                            'memcpy',
                                                                                            'vsprintf_s',
                                                                                            'vswprintf_s',
                                                                                            '_vscprintf',
                                                                                            'iscntrl',
                                                                                            '_resetstkoflw',
                                                                                            '_purecall',
                                                                                            '_recalloc',
                                                                                            'calloc',
                                                                                            '_mbsinc',
                                                                                            '_ismbcspace',
                                                                                            '_itoa_s',
                                                                                            'sprintf_s',
                                                                                            'memmove',
                                                                                            'atof',
                                                                                            'strncmp',
                                                                                            'fclose',
                                                                                            '_findclose',
                                                                                            '_wfindfirst64i32',
                                                                                            '_mbsicmp',
                                                                                            '??1exception@std@@UAE@XZ',
                                                                                            '??0exception@std@@QAE@ABQBD@Z',
                                                                                            '?what@exception@std@@UBEPBDXZ',
                                                                                            '??0exception@std@@QAE@ABV01@@Z',
                                                                                            'wcsncmp',
                                                                                            'wcsstr',
                                                                                            '_mbsnbicmp',
                                                                                            'wcsncpy_s',
                                                                                            'strcat_s',
                                                                                            '_cprintf',
                                                                                            '_time64',
                                                                                            'wmemcpy_s',
                                                                                            '_mbsupr_s',
                                                                                            '_wfindfirst64',
                                                                                            'isupper',
                                                                                            'fwrite',
                                                                                            '_wcsicmp',
                                                                                            '_vscwprintf',
                                                                                            '_beginthreadex',
                                                                                            'fopen_s',
                                                                                            '_wsplitpath_s',
                                                                                            'wcscpy_s',
                                                                                            'wcscat_s',
                                                                                            'vfprintf',
                                                                                            '_wfullpath',
                                                                                            '_fpclass',
                                                                                            'atoi',
                                                                                            'atol',
                                                                                            '_atoi64',
                                                                                            'strstr',
                                                                                            '_mbslwr_s',
                                                                                            '_wcslwr_s',
                                                                                            '_CIcos',
                                                                                            '_CIsin',
                                                                                            '_CIsqrt',
                                                                                            'rand',
                                                                                            '_wcsnicmp',
                                                                                            'ldexp',
                                                                                            '_mbschr',
                                                                                            '_nextafter',
                                                                                            '_wfindnext64i32',
                                                                                            '_wtoi',
                                                                                            'modf',
                                                                                            'wcsrchr',
                                                                                            '_CIexp',
                                                                                            '_CIlog',
                                                                                            '_CIatan',
                                                                                            '_wtol',
                                                                                            'wcstombs_s',
                                                                                            'ceil',
                                                                                            'floor',
                                                                                            '_gmtime64_s',
                                                                                            '_localtime64_s',
                                                                                            '_mktime64',
                                                                                            '??0bad_cast@std@@QAE@PBD@Z',
                                                                                            '??1bad_cast@std@@UAE@XZ',
                                                                                            '??0bad_cast@std@@QAE@ABV01@@Z',
                                                                                            '_lock_file',
                                                                                            '_unlock_file',
                                                                                            'fgetwc',
                                                                                            'fputwc',
                                                                                            'ungetwc',
                                                                                            'setvbuf',
                                                                                            'fflush',
                                                                                            'ungetc',
                                                                                            'fgetc',
                                                                                            'fgetpos',
                                                                                            '_fseeki64',
                                                                                            'fsetpos',
                                                                                            'ftell',
                                                                                            'fseek',
                                                                                            'printf',
                                                                                            'sprintf',
                                                                                            '??0exception@std@@QAE@XZ',
                                                                                            'iswspace',
                                                                                            'iswdigit',
                                                                                            'towlower',
                                                                                            '_setjmp3',
                                                                                            '__CxxLongjmpUnwind',
                                                                                            '_mbsrchr',
                                                                                            '_mbsspn',
                                                                                            '_mbscspn',
                                                                                            '_mbsncmp',
                                                                                            '_mbspbrk',
                                                                                            '_stricmp',
                                                                                            '_mbsnicmp',
                                                                                            '_strnicmp',
                                                                                            '_ltoa_s',
                                                                                            'isalpha',
                                                                                            'sscanf_s',
                                                                                            '_wassert',
                                                                                            'strtol',
                                                                                            'strchr',
                                                                                            'realloc',
                                                                                            'strtoul',
                                                                                            'memchr',
                                                                                            'isspace',
                                                                                            'isxdigit',
                                                                                            '__RTDynamicCast',
                                                                                            '_itoa',
                                                                                            '_mbsicoll',
                                                                                            'fputc',
                                                                                            'wcschr',
                                                                                            '_wcsicoll',
                                                                                            'swscanf_s',
                                                                                            '_ftime64_s',
                                                                                            '_ismbcalnum',
                                                                                            'swprintf_s',
                                                                                            'strrchr',
                                                                                            '_waccess',
                                                                                            'tolower',
                                                                                            '__iob_func',
                                                                                            'longjmp',
                                                                                            '_wfopen',
                                                                                            'feof',
                                                                                            'wcsncpy',
                                                                                            'srand',
                                                                                            '_wmakepath',
                                                                                            '_wsplitpath',
                                                                                            '_wcsdup',
                                                                                            'ferror',
                                                                                            '_mbsrev',
                                                                                            '_controlfp_s',
                                                                                            'abort',
                                                                                            '_vswprintf_c_l',
                                                                                            'wcstol',
                                                                                            'iswxdigit',
                                                                                            'iswpunct',
                                                                                            'iswalpha',
                                                                                            'iswlower',
                                                                                            'iswupper',
                                                                                            'iswcntrl',
                                                                                            'iswprint',
                                                                                            'wcsxfrm',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_ismbblead',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '_invoke_watson',
                                                                                            'getenv',
                                                                                            'gethostbyname',
                                                                                            'select',
                                                                                            'closesocket',
                                                                                            'shutdown',
                                                                                            'ntohl',
                                                                                            'send',
                                                                                            'recv',
                                                                                            'connect',
                                                                                            'htonl',
                                                                                            'htons',
                                                                                            'WSAGetLastError',
                                                                                            'ioctlsocket',
                                                                                            '__WSAFDIsSet',
                                                                                            'socket',
                                                                                            'setsockopt',
                                                                                            'CertOpenSystemStoreA',
                                                                                            'CertFindCertificateInStore',
                                                                                            'PFXIsPFXBlob',
                                                                                            'PFXVerifyPassword',
                                                                                            'PFXImportCertStore',
                                                                                            'CryptStringToBinaryA',
                                                                                            'CryptAcquireCertificatePrivateKey',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            'CertCloseStore',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CryptBinaryToStringA',
                                                                                            'CertEnumCertificatesInStore',
                                                                                            'EnumProcessModules',
                                                                                            'GetProcessImageFileNameA',
                                                                                            'GetProcessMemoryInfo',
                                                                                            'EnumProcesses',
                                                                                            'GetUserProfileDirectoryW',
                                                                                            'WSASetLastError',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpQueryAuthSchemes',
                                                                                            'WinHttpGetIEProxyConfigForCurrentUser',
                                                                                            'WinHttpGetProxyForUrl',
                                                                                            'WinHttpSetCredentials',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpSetOption',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpQueryDataAvailable',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpSetTimeouts',
                                                                                            'WinHttpAddRequestHeaders',
                                                                                            'WinHttpWriteData',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpOpenRequest',
                                                                                            '?SetModuleRunnerFactory@@YAXP6APAUIModuleRunner@@XZ@Z',
                                                                                            'UuidToStringA',
                                                                                            'RpcStringFreeA',
                                                                                            'UuidCreate',
                                                                                            '_CorExeMain'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 726,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 511508,
                                                                      'SectionNames': {'.data\x00\x00\x00': 810496,
                                                                                       '.rdata\x00\x00': 3614208,
                                                                                       '.reloc\x00\x00': 2283008,
                                                                                       '.rsrc\x00\x00\x00': 512000,
                                                                                       '.text\x00\x00\x00': 9051136,
                                                                                       '.tls\x00\x00\x00\x00': 19456},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ef1d64faad0952a453e3e3ab55b878170e777f926b636550d6c617827ef7e858'},
 'ef1e50f0cc9fa1751838b6e0ecd533cbd446bf90733938509fe255cbcb4c4309': {'AddressOfEntryPoint': 31632,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'api-ms-win-core-console-l1-1-0.dll': 'ReadConsoleW',
                                                                                      'api-ms-win-core-console-l2-1-0.dll': 'SetConsoleTextAttribute',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'GetLastError',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'FindFirstFileW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapFree',
                                                                                      'api-ms-win-core-heap-obsolete-l1-1-0.dll': 'LocalFree',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetComputerNameW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'FreeLibrary',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentProcessId',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegOpenKeyExW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'MultiByteToWideChar',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeCriticalSection',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetLocalTime',
                                                                                      'api-ms-win-core-timezone-l1-1-0.dll': 'SystemTimeToFileTime',
                                                                                      'api-ms-win-core-version-l1-1-0.dll': 'VerQueryValueW',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'AllocateAndInitializeSid',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'pdh.dll': 'PdhAddCounterW'},
                                                                      'ImportedFunctions': ['__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '_controlfp',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'fwprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_wtoi',
                                                                                            '_exit',
                                                                                            '_wcslwr',
                                                                                            'wcschr',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            'wprintf',
                                                                                            '_getmbcp',
                                                                                            'wcsncmp',
                                                                                            '_wcsnicmp',
                                                                                            'wcstod',
                                                                                            'exit',
                                                                                            'wcsstr',
                                                                                            '_wfopen',
                                                                                            '_except_handler4_common',
                                                                                            '_vsnwprintf',
                                                                                            'fclose',
                                                                                            'wcstok',
                                                                                            '_wcsicmp',
                                                                                            'fgetws',
                                                                                            '_cexit',
                                                                                            'memcpy',
                                                                                            '_ftol2',
                                                                                            'memset',
                                                                                            'DeleteCriticalSection',
                                                                                            'CreateMutexW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'ReleaseMutex',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapValidate',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'CloseHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'TerminateThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'WriteConsoleW',
                                                                                            'SetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'GetLocaleInfoW',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadUILanguage',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'GetFileType',
                                                                                            'ReadFile',
                                                                                            'FindFirstFileW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadStringW',
                                                                                            'FreeLibrary',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'VerQueryValueW',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetVersionExW',
                                                                                            'GetLocalTime',
                                                                                            'FreeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'QueryPerformanceCounter',
                                                                                            'LoadLibraryW',
                                                                                            'GetComputerNameW',
                                                                                            'LocalFree',
                                                                                            'PdhOpenLogW',
                                                                                            'PdhUpdateLogW',
                                                                                            'PdhCloseLog',
                                                                                            'PdhCollectQueryData',
                                                                                            'PdhGetFormattedCounterArrayW',
                                                                                            'PdhExpandWildCardPathW',
                                                                                            'PdhEnumObjectsW',
                                                                                            'PdhEnumObjectItemsW',
                                                                                            'PdhCloseQuery',
                                                                                            'PdhOpenQueryW',
                                                                                            'PdhAddCounterW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 117,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2088,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 29696},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ef1e50f0cc9fa1751838b6e0ecd533cbd446bf90733938509fe255cbcb4c4309'},
 'ef261231934b46b50c5045687e9ee65a8dde980de231f197d6d7edecbefb39b8': {'AddressOfEntryPoint': 68640,
                                                                      'DebugRVA': 4752,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 86016,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'OLEAUT32.dll': 'VarBstrFromDate',
                                                                                      'SHLWAPI.dll': 'PathIsNetworkPathW',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CharToOemW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'msvcrt.dll': 'wcschr',
                                                                                      'ntdll.dll': 'NtOpenThreadToken',
                                                                                      'ole32.dll': 'CoInitializeSecurity'},
                                                                      'ImportedFunctions': ['OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'GetTokenInformation',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'SetFilePointerEx',
                                                                                            'HeapFree',
                                                                                            'GlobalLock',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'GlobalAlloc',
                                                                                            'GetConsoleMode',
                                                                                            'SizeofResource',
                                                                                            'SetConsoleMode',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GlobalUnlock',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GlobalFree',
                                                                                            'GetFileType',
                                                                                            'LockResource',
                                                                                            'HeapSetInformation',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'GetVersionExW',
                                                                                            'LoadLibraryExW',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'SetThreadUILanguage',
                                                                                            'DecodePointer',
                                                                                            'GetProcAddress',
                                                                                            'EncodePointer',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetModuleFileNameW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'WriteFile',
                                                                                            'WriteConsoleW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'SystemTimeToFileTime',
                                                                                            'HeapAlloc',
                                                                                            'LoadResource',
                                                                                            'GetTickCount',
                                                                                            'FindResourceW',
                                                                                            'FreeResource',
                                                                                            'GetFullPathNameW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_getmbcp',
                                                                                            'fclose',
                                                                                            'wcstok',
                                                                                            'fseek',
                                                                                            'ferror',
                                                                                            '_vsnwprintf',
                                                                                            'wcsstr',
                                                                                            'wcsrchr',
                                                                                            'fgetws',
                                                                                            'wprintf',
                                                                                            '_errno',
                                                                                            '_wsplitpath_s',
                                                                                            '_wmakepath_s',
                                                                                            'iswspace',
                                                                                            '_wcsnicmp',
                                                                                            'wcsncmp',
                                                                                            'bsearch',
                                                                                            '_wfopen',
                                                                                            'qsort',
                                                                                            'isspace',
                                                                                            '_wtoi',
                                                                                            'towlower',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'LoadStringW',
                                                                                            'CharToOemW',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'SafeArrayCreateVector',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayDestroy',
                                                                                            'VariantInit',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SysFreeString',
                                                                                            'VariantChangeType',
                                                                                            'VarDateFromStr',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VarBstrFromDate',
                                                                                            'PathIsNetworkPathW',
                                                                                            'GetUserNameExW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'NtClose',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtOpenProcessToken',
                                                                                            'NtOpenThreadToken'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 153,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2048,
                                                                      'SectionNames': {'.data\x00\x00\x00': 7168,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 6144,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 66560},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ef261231934b46b50c5045687e9ee65a8dde980de231f197d6d7edecbefb39b8'},
 'ef4c002224f4c919d0ce6e5c04ae68b0c26a8a84bd0ec280390c2a3a15a43575': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 57908,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'WideCharToMultiByte',
                                                                                      'Qt5Core.dll': '_ZN7QString18toLocal8Bit_helperEPK5QChari',
                                                                                      'Qt5WebKit.dll': '_ZN6WebKit16WebProcessMainQtEP15QGuiApplication',
                                                                                      'Qt5WebKitWidgets.dll': '_ZN6WebKit23initializeWebKitWidgetsEv',
                                                                                      'Qt5Widgets.dll': '_ZN12QApplicationC1ERiPPci',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'libgcc_s_dw2-1.dll': '__umoddi3',
                                                                                      'libstdc++-6.dll': '_Znwj',
                                                                                      'msvcrt.dll': 'wcslen'},
                                                                      'ImportedFunctions': ['__deregister_frame_info',
                                                                                            '__register_frame_info',
                                                                                            '__udivdi3',
                                                                                            '__umoddi3',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLastError',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeCriticalSection',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsGetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__mb_cur_max',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_cexit',
                                                                                            '_errno',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_unlock',
                                                                                            'abort',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'exit',
                                                                                            'fprintf',
                                                                                            'fputc',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'localeconv',
                                                                                            'malloc',
                                                                                            'memcpy',
                                                                                            'setlocale',
                                                                                            'signal',
                                                                                            'strchr',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncmp',
                                                                                            'vfprintf',
                                                                                            'wcslen',
                                                                                            'CommandLineToArgvW',
                                                                                            '_ZdaPv',
                                                                                            '_Znaj',
                                                                                            '_Znwj',
                                                                                            '_Z22qInstallMessageHandlerPFv9QtMsgTypeRK18QMessageLogContextRK7QStringE',
                                                                                            '_Z7qgetenvPKc',
                                                                                            '_Z7qstrcmpRK10QByteArrayPKc',
                                                                                            '_ZN10QArrayData10deallocateEPS_jj',
                                                                                            '_ZN7QString18toLocal8Bit_helperEPK5QChari',
                                                                                            '_ZN12QApplicationC1ERiPPci',
                                                                                            '_ZN6WebKit16WebProcessMainQtEP15QGuiApplication',
                                                                                            '_ZN6WebKit23initializeWebKitWidgetsEv'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.eh_fram': 5632,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 27136,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/ef4c002224f4c919d0ce6e5c04ae68b0c26a8a84bd0ec280390c2a3a15a43575'},
 'ef70d74a14af53162bbc8fe02430e46a3af6b615956c3e9379be939afbf6f81d': {'AddressOfEntryPoint': 2137233,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 2650112,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CryptBinaryToStringA',
                                                                                      'GDI32.dll': 'CreatePolygonRgn',
                                                                                      'IMM32.dll': 'ImmGetOpenStatus',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersInfo',
                                                                                      'KERNEL32.dll': 'IsValidLocale',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEACC.dll': 'CreateStdAccessibleObject',
                                                                                      'OLEAUT32.dll': 'SafeArrayRedim',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'SHLWAPI.dll': 'PathFileExistsW',
                                                                                      'USER32.dll': 'GetMonitorInfoW',
                                                                                      'UxTheme.dll': 'DrawThemeText',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINHTTP.dll': 'WinHttpOpen',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'GetJobW',
                                                                                      'gdiplus.dll': 'GdipCreateBitmapFromHBITMAP',
                                                                                      'ole32.dll': 'CoLockObjectExternal',
                                                                                      'oledlg.dll': 'OleUIBusyW',
                                                                                      'urlmon.dll': 'URLDownloadToFileW'},
                                                                      'ImportedFunctions': ['GetModuleHandleW',
                                                                                            'OutputDebugStringW',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetEvent',
                                                                                            'ResetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'OpenEventW',
                                                                                            'GetTempPathW',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'CreateThread',
                                                                                            'InterlockedIncrement',
                                                                                            'TerminateThread',
                                                                                            'GetExitCodeThread',
                                                                                            'PulseEvent',
                                                                                            'GetFileSize',
                                                                                            'WriteFile',
                                                                                            'CreateDirectoryW',
                                                                                            'LocalFree',
                                                                                            'SetErrorMode',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetFullPathNameA',
                                                                                            'GetVolumeInformationA',
                                                                                            'GetComputerNameW',
                                                                                            'FindFirstVolumeA',
                                                                                            'lstrlenW',
                                                                                            'FindVolumeClose',
                                                                                            'GetVolumeNameForVolumeMountPointA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'DecodePointer',
                                                                                            'LockResource',
                                                                                            'FreeLibrary',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalHandle',
                                                                                            'WaitForMultipleObjectsEx',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'WriteConsoleW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetProcessAffinityMask',
                                                                                            'Sleep',
                                                                                            'UnregisterWaitEx',
                                                                                            'InitializeSListHead',
                                                                                            'ReleaseSemaphore',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'GetThreadTimes',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadConsoleW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceExW',
                                                                                            'Process32NextW',
                                                                                            'Process32FirstW',
                                                                                            'FindNextVolumeA',
                                                                                            'lstrlenA',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GetVersionExW',
                                                                                            'CreateFileA',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'IsValidCodePage',
                                                                                            'EnumSystemLocalesW',
                                                                                            'CreateProcessW',
                                                                                            'SetFilePointer',
                                                                                            'TerminateProcess',
                                                                                            'OpenProcess',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'GetCommandLineW',
                                                                                            'CopyFileW',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'OpenMutexW',
                                                                                            'CreateMutexW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'MulDiv',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'DeleteCriticalSection',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'SetLastError',
                                                                                            'DebugBreak',
                                                                                            'GetProcAddress',
                                                                                            'VirtualFree',
                                                                                            'GetSystemDirectoryW',
                                                                                            'RaiseException',
                                                                                            'FlushInstructionCache',
                                                                                            'GlobalFree',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalSize',
                                                                                            'OutputDebugStringA',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryW',
                                                                                            'InitializeCriticalSection',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GlobalReAlloc',
                                                                                            'LocalAlloc',
                                                                                            'LocalReAlloc',
                                                                                            'lstrcmpA',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'GetAtomNameW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetThreadLocale',
                                                                                            'SetThreadPriority',
                                                                                            'SuspendThread',
                                                                                            'ResumeThread',
                                                                                            'GlobalAddAtomW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFullPathNameW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetVolumeInformationW',
                                                                                            'LockFile',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'UnlockFile',
                                                                                            'DuplicateHandle',
                                                                                            'LoadLibraryA',
                                                                                            'MoveFileW',
                                                                                            'GetStringTypeExW',
                                                                                            'EncodePointer',
                                                                                            'InterlockedDecrement',
                                                                                            'CompareStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GlobalFlags',
                                                                                            'FreeResource',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalFindAtomW',
                                                                                            'GetCurrentThread',
                                                                                            'CompareStringA',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileTime',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'lstrcpyW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetProfileIntW',
                                                                                            'SearchPathW',
                                                                                            'VirtualProtect',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'ReplaceFileW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'LocalLock',
                                                                                            'LocalUnlock',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetStringTypeW',
                                                                                            'RtlUnwind',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualQuery',
                                                                                            'ExitThread',
                                                                                            'HeapQueryInformation',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'AreFileApisANSI',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'TryEnterCriticalSection',
                                                                                            'CreateTimerQueue',
                                                                                            'InterlockedPopEntrySList',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'InterlockedFlushSList',
                                                                                            'QueryDepthSList',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'SignalObjectAndWait',
                                                                                            'SwitchToThread',
                                                                                            'GetThreadPriority',
                                                                                            'GetLogicalProcessorInformation',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'ChangeTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'GetNumaHighestNodeNumber',
                                                                                            'GetProcessAffinityMask',
                                                                                            'SetThreadAffinityMask',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'UnregisterWait',
                                                                                            'FatalAppExitA',
                                                                                            'GetCPInfo',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'CreateSemaphoreW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'LCMapStringW',
                                                                                            'IsValidLocale',
                                                                                            'SetWindowPlacement',
                                                                                            'BeginDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'GetCapture',
                                                                                            'GetMenu',
                                                                                            'SetMenu',
                                                                                            'TrackPopupMenu',
                                                                                            'TrackPopupMenuEx',
                                                                                            'UpdateWindow',
                                                                                            'SetActiveWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'ScrollWindow',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollRange',
                                                                                            'ShowScrollBar',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'CopyRect',
                                                                                            'EqualRect',
                                                                                            'GetClassLongW',
                                                                                            'GetTopWindow',
                                                                                            'LoadIconW',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'WinHelpW',
                                                                                            'PostQuitMessage',
                                                                                            'IsIconic',
                                                                                            'DrawTextW',
                                                                                            'DrawTextExW',
                                                                                            'GrayStringW',
                                                                                            'TabbedTextOutW',
                                                                                            'GetWindowDC',
                                                                                            'DestroyMenu',
                                                                                            'GetMenuItemInfoW',
                                                                                            'InflateRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'CopyImage',
                                                                                            'SendDlgItemMessageA',
                                                                                            'ShowOwnedPopups',
                                                                                            'SetCursor',
                                                                                            'DeleteMenu',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'GetNextDlgTabItem',
                                                                                            'IntersectRect',
                                                                                            'GetDialogBaseUnits',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'WindowFromPoint',
                                                                                            'DrawFocusRect',
                                                                                            'SetRectEmpty',
                                                                                            'OffsetRect',
                                                                                            'IsRectEmpty',
                                                                                            'LoadImageW',
                                                                                            'DrawIconEx',
                                                                                            'GetIconInfo',
                                                                                            'MessageBeep',
                                                                                            'GetAsyncKeyState',
                                                                                            'EnableScrollBar',
                                                                                            'HideCaret',
                                                                                            'InvertRect',
                                                                                            'NotifyWinEvent',
                                                                                            'CreatePopupMenu',
                                                                                            'GetMenuDefaultItem',
                                                                                            'MapVirtualKeyW',
                                                                                            'LoadMenuW',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'EnumDisplayMonitors',
                                                                                            'OpenClipboard',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'DrawStateW',
                                                                                            'DrawEdge',
                                                                                            'DrawFrameControl',
                                                                                            'SetWindowRgn',
                                                                                            'UnionRect',
                                                                                            'IsMenu',
                                                                                            'UpdateLayeredWindow',
                                                                                            'MonitorFromPoint',
                                                                                            'BringWindowToTop',
                                                                                            'LoadAcceleratorsW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'InsertMenuItemW',
                                                                                            'GetMenuBarInfo',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'GetKeyNameTextW',
                                                                                            'TrackMouseEvent',
                                                                                            'GetComboBoxInfo',
                                                                                            'IsZoomed',
                                                                                            'GetSystemMenu',
                                                                                            'PostThreadMessageW',
                                                                                            'WaitMessage',
                                                                                            'GetKeyboardLayout',
                                                                                            'IsCharLowerW',
                                                                                            'MapVirtualKeyExW',
                                                                                            'ToUnicodeEx',
                                                                                            'GetKeyboardState',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'SetCursorPos',
                                                                                            'SetRect',
                                                                                            'SetParent',
                                                                                            'LockWindowUpdate',
                                                                                            'SetClassLongW',
                                                                                            'GetDoubleClickTime',
                                                                                            'CopyIcon',
                                                                                            'SetMenuDefaultItem',
                                                                                            'ModifyMenuW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'CharUpperBuffW',
                                                                                            'FrameRect',
                                                                                            'EnumChildWindows',
                                                                                            'DrawMenuBar',
                                                                                            'DefFrameProcW',
                                                                                            'DefMDIChildProcW',
                                                                                            'TranslateMDISysAccel',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetUpdateRect',
                                                                                            'SubtractRect',
                                                                                            'SendNotifyMessageW',
                                                                                            'InSendMessage',
                                                                                            'CreateMenu',
                                                                                            'GetDCEx',
                                                                                            'DestroyCursor',
                                                                                            'GetWindowRgn',
                                                                                            'DrawIcon',
                                                                                            'WindowFromDC',
                                                                                            'GetTabbedTextExtentW',
                                                                                            'GetWindowPlacement',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'IsDialogMessageW',
                                                                                            'ScrollWindowEx',
                                                                                            'SendDlgItemMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckRadioButton',
                                                                                            'CheckDlgButton',
                                                                                            'GetDlgItemTextW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemInt',
                                                                                            'SetDlgItemInt',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollPos',
                                                                                            'RealChildWindowFromPoint',
                                                                                            'PtInRect',
                                                                                            'GetDlgCtrlID',
                                                                                            'CharUpperW',
                                                                                            'DestroyIcon',
                                                                                            'CallNextHookEx',
                                                                                            'SetWindowsHookExW',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'GetKeyState',
                                                                                            'IsWindowVisible',
                                                                                            'PeekMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetSysColorBrush',
                                                                                            'GetSystemMetrics',
                                                                                            'GetLastActivePopup',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'MessageBoxW',
                                                                                            'IsWindowEnabled',
                                                                                            'EnableWindow',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'RemoveMenu',
                                                                                            'AppendMenuW',
                                                                                            'InsertMenuW',
                                                                                            'GetMenuItemCount',
                                                                                            'GetMenuItemID',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuState',
                                                                                            'PostMessageW',
                                                                                            'MoveWindow',
                                                                                            'CharNextW',
                                                                                            'GetWindowRect',
                                                                                            'LoadStringW',
                                                                                            'wsprintfA',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendMessageW',
                                                                                            'GetMenuStringW',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'UnregisterClassW',
                                                                                            'RegisterClassExW',
                                                                                            'GetClassInfoExW',
                                                                                            'CreateWindowExW',
                                                                                            'IsWindow',
                                                                                            'IsChild',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxIndirectParamW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'SetFocus',
                                                                                            'GetActiveWindow',
                                                                                            'GetFocus',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'InvalidateRect',
                                                                                            'InvalidateRgn',
                                                                                            'RedrawWindow',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetClientRect',
                                                                                            'SetWindowContextHelpId',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'GetSysColor',
                                                                                            'FillRect',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetDesktopWindow',
                                                                                            'GetParent',
                                                                                            'GetClassNameW',
                                                                                            'GetWindow',
                                                                                            'LoadCursorW',
                                                                                            'MapDialogRect',
                                                                                            'ShowWindow',
                                                                                            'MapWindowPoints',
                                                                                            'MonitorFromWindow',
                                                                                            'GetMonitorInfoW',
                                                                                            'SetStretchBltMode',
                                                                                            'SetTextCharacterExtra',
                                                                                            'SetTextAlign',
                                                                                            'SetTextJustification',
                                                                                            'PlayMetaFileRecord',
                                                                                            'EnumMetaFile',
                                                                                            'SetWorldTransform',
                                                                                            'ModifyWorldTransform',
                                                                                            'SetColorAdjustment',
                                                                                            'StartDocW',
                                                                                            'ArcTo',
                                                                                            'PolyDraw',
                                                                                            'SelectClipPath',
                                                                                            'SetArcDirection',
                                                                                            'ExtCreatePen',
                                                                                            'MoveToEx',
                                                                                            'TextOutW',
                                                                                            'ExtTextOutW',
                                                                                            'PolyBezierTo',
                                                                                            'PolylineTo',
                                                                                            'SetViewportExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetROP2',
                                                                                            'SetWindowOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetLayout',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CombineRgn',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'GetMapMode',
                                                                                            'PatBlt',
                                                                                            'SetRectRgn',
                                                                                            'DPtoLP',
                                                                                            'GetTextMetricsW',
                                                                                            'CreatePalette',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'GetPaletteEntries',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'RealizePalette',
                                                                                            'GetBkColor',
                                                                                            'CreateDIBitmap',
                                                                                            'EnumFontFamiliesW',
                                                                                            'SetPolyFillMode',
                                                                                            'SetWindowExtEx',
                                                                                            'GetLayout',
                                                                                            'GetTextCharsetInfo',
                                                                                            'GetDIBits',
                                                                                            'SetPixel',
                                                                                            'SetGraphicsMode',
                                                                                            'CreateDIBSection',
                                                                                            'SetDIBColorTable',
                                                                                            'CreateEllipticRgn',
                                                                                            'Ellipse',
                                                                                            'GetTextColor',
                                                                                            'CopyMetaFileW',
                                                                                            'Polygon',
                                                                                            'Polyline',
                                                                                            'Rectangle',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetMapMode',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'GetRgnBox',
                                                                                            'OffsetRgn',
                                                                                            'CreateRoundRectRgn',
                                                                                            'GetCurrentObject',
                                                                                            'CreateFontW',
                                                                                            'GetCharWidthW',
                                                                                            'StretchDIBits',
                                                                                            'RoundRect',
                                                                                            'FrameRgn',
                                                                                            'PtInRegion',
                                                                                            'SetPixelV',
                                                                                            'ExtFloodFill',
                                                                                            'SetPaletteEntries',
                                                                                            'FillRgn',
                                                                                            'GetBoundsRect',
                                                                                            'GetWindowOrgEx',
                                                                                            'LPtoDP',
                                                                                            'GetViewportOrgEx',
                                                                                            'EndDoc',
                                                                                            'StartPage',
                                                                                            'EndPage',
                                                                                            'AbortDoc',
                                                                                            'SetAbortProc',
                                                                                            'GetROP2',
                                                                                            'GetBkMode',
                                                                                            'GetNearestColor',
                                                                                            'GetPolyFillMode',
                                                                                            'GetStretchBltMode',
                                                                                            'GetTextAlign',
                                                                                            'GetTextFaceW',
                                                                                            'CloseMetaFile',
                                                                                            'CreateMetaFileW',
                                                                                            'DeleteMetaFile',
                                                                                            'SetMapperFlags',
                                                                                            'SetBkMode',
                                                                                            'SelectPalette',
                                                                                            'ExtSelectClipRgn',
                                                                                            'SelectClipRgn',
                                                                                            'SaveDC',
                                                                                            'RestoreDC',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'PlayMetaFile',
                                                                                            'OffsetClipRgn',
                                                                                            'LineTo',
                                                                                            'IntersectClipRect',
                                                                                            'BitBlt',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateSolidBrush',
                                                                                            'DeleteDC',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetStockObject',
                                                                                            'SelectObject',
                                                                                            'GetObjectW',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'GetPixel',
                                                                                            'GetObjectType',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetClipRgn',
                                                                                            'GetClipBox',
                                                                                            'ExcludeClipRect',
                                                                                            'Escape',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePatternBrush',
                                                                                            'CreatePen',
                                                                                            'CreateHatchBrush',
                                                                                            'CreateDIBPatternBrushPt',
                                                                                            'SetTextColor',
                                                                                            'SetBkColor',
                                                                                            'CreateBitmap',
                                                                                            'CreateDCW',
                                                                                            'StretchBlt',
                                                                                            'CreatePolygonRgn',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCreateKeyW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'ConvertSidToStringSidA',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptAcquireContextW',
                                                                                            'GetUserNameW',
                                                                                            'IsValidSid',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegEnumKeyW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumValueW',
                                                                                            'GetFileSecurityW',
                                                                                            'SetFileSecurityW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyA',
                                                                                            'RegSetValueExA',
                                                                                            'RegSetValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'StgCreateDocfile',
                                                                                            'StgOpenStorage',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'StgIsStorageFile',
                                                                                            'CreateFileMoniker',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'OleCreateMenuDescriptor',
                                                                                            'OleDestroyMenuDescriptor',
                                                                                            'OleTranslateAccelerator',
                                                                                            'IsAccelerator',
                                                                                            'OleGetClipboard',
                                                                                            'DoDragDrop',
                                                                                            'RegisterDragDrop',
                                                                                            'RevokeDragDrop',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'CreateGenericComposite',
                                                                                            'CreateItemMoniker',
                                                                                            'WriteClassStm',
                                                                                            'OleCreate',
                                                                                            'OleCreateFromData',
                                                                                            'OleCreateLinkFromData',
                                                                                            'OleCreateStaticFromData',
                                                                                            'OleCreateLinkToFile',
                                                                                            'OleCreateFromFile',
                                                                                            'OleLoad',
                                                                                            'OleSave',
                                                                                            'OleSaveToStream',
                                                                                            'OleSetContainedObject',
                                                                                            'OleGetIconOfClass',
                                                                                            'GetHGlobalFromILockBytes',
                                                                                            'OleRun',
                                                                                            'PropVariantCopy',
                                                                                            'OleRegGetMiscStatus',
                                                                                            'OleRegEnumVerbs',
                                                                                            'OleQueryLinkFromData',
                                                                                            'OleQueryCreateFromData',
                                                                                            'OleIsRunning',
                                                                                            'CoGetMalloc',
                                                                                            'GetRunningObjectTable',
                                                                                            'CreateDataAdviseHolder',
                                                                                            'CreateOleAdviseHolder',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'OleFlushClipboard',
                                                                                            'OleSetClipboard',
                                                                                            'CoDisconnectObject',
                                                                                            'SetConvertStg',
                                                                                            'OleRegGetUserType',
                                                                                            'ReleaseStgMedium',
                                                                                            'OleDuplicateData',
                                                                                            'ReadFmtUserTypeStg',
                                                                                            'WriteFmtUserTypeStg',
                                                                                            'WriteClassStg',
                                                                                            'ReadClassStg',
                                                                                            'CreateBindCtx',
                                                                                            'CoTreatAsClass',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateGuid',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoGetClassObject',
                                                                                            'CLSIDFromString',
                                                                                            'CLSIDFromProgID',
                                                                                            'StringFromGUID2',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'OleLockRunning',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoLockObjectExternal',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'CreateErrorInfo',
                                                                                            'SetErrorInfo',
                                                                                            'GetErrorInfo',
                                                                                            'VarDecFromStr',
                                                                                            'VarBstrFromDec',
                                                                                            'SysReAllocStringLen',
                                                                                            'RegisterTypeLib',
                                                                                            'SafeArrayAllocDescriptor',
                                                                                            'VarBstrFromDate',
                                                                                            'VarBstrFromCy',
                                                                                            'VarCyFromStr',
                                                                                            'VarDateFromStr',
                                                                                            'VariantChangeType',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SafeArrayGetElemsize',
                                                                                            'DispCallFunc',
                                                                                            'VariantCopy',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringByteLen',
                                                                                            'OleCreateFontIndirect',
                                                                                            'LoadRegTypeLib',
                                                                                            'LoadTypeLib',
                                                                                            'VarUI4FromStr',
                                                                                            'VariantInit',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayRedim',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpQueryDataAvailable',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpCloseHandle',
                                                                                            'WinHttpOpen',
                                                                                            'PathFindExtensionW',
                                                                                            'PathStripToRootW',
                                                                                            'PathIsUNCW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathIsRelativeA',
                                                                                            'StrFormatKBSizeW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathFileExistsW',
                                                                                            'URLDownloadToFileW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'TransparentBlt',
                                                                                            'AlphaBlend',
                                                                                            'InitCommonControlsEx',
                                                                                            'DrawThemeBackground',
                                                                                            'GetThemeColor',
                                                                                            'GetCurrentThemeName',
                                                                                            'IsAppThemed',
                                                                                            'IsThemeBackgroundPartiallyTransparent',
                                                                                            'GetThemeSysColor',
                                                                                            'GetWindowTheme',
                                                                                            'GetThemePartSize',
                                                                                            'CloseThemeData',
                                                                                            'OpenThemeData',
                                                                                            'DrawThemeParentBackground',
                                                                                            'DrawThemeText',
                                                                                            'GetAdaptersInfo',
                                                                                            'CryptStringToBinaryA',
                                                                                            'CryptBinaryToStringA',
                                                                                            'LresultFromObject',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipCreateBitmapFromFileICM',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdiplusStartup',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdiplusShutdown',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'ImmReleaseContext',
                                                                                            'ImmGetContext',
                                                                                            'ImmGetOpenStatus',
                                                                                            'PlaySoundW',
                                                                                            'OleUIBusyW',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesW',
                                                                                            'OpenPrinterW',
                                                                                            'GetJobW',
                                                                                            'SHAppBarMessage',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHAddToRecentDocs',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetDesktopFolder',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'SHGetMalloc',
                                                                                            'ShellExecuteExW',
                                                                                            'ExtractIconW',
                                                                                            'SHBrowseForFolderW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 864,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 298920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 51712,
                                                                                       '.rdata\x00\x00': 628736,
                                                                                       '.reloc\x00\x00': 204800,
                                                                                       '.rsrc\x00\x00\x00': 299008,
                                                                                       '.text\x00\x00\x00': 2645504},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ef70d74a14af53162bbc8fe02430e46a3af6b615956c3e9379be939afbf6f81d'},
 'efa6d85029b3850ae0d5352c933bc4b45b57b9f2733a19c09c0d75ad90e73cf4': {'AddressOfEntryPoint': 59011,
                                                                      'DebugRVA': 123712,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 122880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'HeapDestroy',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'StrRChrA',
                                                                                      'USER32.dll': 'PeekMessageW',
                                                                                      'USERENV.dll': 'CreateEnvironmentBlock',
                                                                                      'VERSION.dll': 'GetFileVersionInfoA',
                                                                                      'imagehlp.dll': 'ImageGetCertificateHeader',
                                                                                      'ole32.dll': 'CoTaskMemFree'},
                                                                      'ImportedFunctions': ['ImageEnumerateCertificates',
                                                                                            'ImageGetCertificateData',
                                                                                            'ImageGetCertificateHeader',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'ProcessIdToSessionId',
                                                                                            'OpenProcess',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleFileNameW',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'GlobalMemoryStatus',
                                                                                            'Module32First',
                                                                                            'Module32Next',
                                                                                            'IsBadReadPtr',
                                                                                            'GetCurrentThread',
                                                                                            'DeleteFileW',
                                                                                            'SetErrorMode',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetModuleFileNameA',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'WideCharToMultiByte',
                                                                                            'ReleaseMutex',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenA',
                                                                                            'ReadFile',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateMutexW',
                                                                                            'GetTickCount',
                                                                                            'Process32NextW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'CreateProcessW',
                                                                                            'Sleep',
                                                                                            'GetExitCodeProcess',
                                                                                            'TerminateProcess',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'FindCloseChangeNotification',
                                                                                            'GetCommandLineW',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'CreateFileA',
                                                                                            'HeapCreate',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'SetHandleCount',
                                                                                            'RtlUnwind',
                                                                                            'GetStringTypeW',
                                                                                            'LCMapStringW',
                                                                                            'SetLastError',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'SetFilePointer',
                                                                                            'WriteFile',
                                                                                            'GetLastError',
                                                                                            'CreateFileW',
                                                                                            'SetEndOfFile',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetLocalTime',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'lstrlenW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'FindResourceExW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteConsoleW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'ExitProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapDestroy',
                                                                                            'TranslateMessage',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'GetUserNameW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'DeleteService',
                                                                                            'OpenServiceW',
                                                                                            'CloseServiceHandle',
                                                                                            'ChangeServiceConfig2W',
                                                                                            'CreateServiceW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenSCManagerW',
                                                                                            'ControlService',
                                                                                            'QueryServiceStatus',
                                                                                            'StartServiceW',
                                                                                            'SetServiceStatus',
                                                                                            'CreateProcessAsUserW',
                                                                                            'SetTokenInformation',
                                                                                            'DuplicateTokenEx',
                                                                                            'DeregisterEventSource',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'LookupAccountSidW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoTaskMemFree',
                                                                                            'PathAppendW',
                                                                                            'PathFindFileNameW',
                                                                                            'StrRChrA',
                                                                                            'DestroyEnvironmentBlock',
                                                                                            'CreateEnvironmentBlock'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 176,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5444,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 37376,
                                                                                       '.reloc\x00\x00': 10240,
                                                                                       '.rsrc\x00\x00\x00': 5632,
                                                                                       '.text\x00\x00\x00': 115712},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/efa6d85029b3850ae0d5352c933bc4b45b57b9f2733a19c09c0d75ad90e73cf4'},
 'eff7333ee6bbb6d3b234bccd25acd04a1ae54a78ff372502fefe3a27ede61687': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 143240,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 143360,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/eff7333ee6bbb6d3b234bccd25acd04a1ae54a78ff372502fefe3a27ede61687'},
 'effc54b816c924aa647d4909d667c59764c806928adc12aaccefe798536da3ec': {'AddressOfEntryPoint': 3346494,
                                                                      'DebugRVA': 3346272,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1616,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 3338752},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/effc54b816c924aa647d4909d667c59764c806928adc12aaccefe798536da3ec'},
 'f01003819ec28450755844629b050fe1f2326db3edfb128e06209da2b8f781db': {'AddressOfEntryPoint': 23109,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'GetTokenInformation',
                                                                                      'KERNEL32.dll': 'GetVersionExA',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'SetParent',
                                                                                      'msvcrt.dll': '_snprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['CreateFileA',
                                                                                            'GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'DeviceIoControl',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetSystemDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'ReadFile',
                                                                                            'FindClose',
                                                                                            'GetVersionExA',
                                                                                            'sprintf',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_vsnprintf',
                                                                                            '_snprintf',
                                                                                            'OpenProcessToken',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'GetTokenInformation',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 107,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2440,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 143872,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f01003819ec28450755844629b050fe1f2326db3edfb128e06209da2b8f781db'},
 'f07e7d10a2782c99dfb3efd8a94bf5de5fde01f1d77bc9f3aaa43426556dbac5': {'AddressOfEntryPoint': 5312,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 5156864,
                                                                      'ExportSize': 5695,
                                                                      'IATRVA': 5172344,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 1,
                                                                      'ImportedDLL': {'GDI32.dll': 'SwapBuffers',
                                                                                      'IMM32.DLL': 'ImmDisableIME',
                                                                                      'KERNEL32.dll': 'lstrcpynW',
                                                                                      'NoxCommon.dll': 'write_socket',
                                                                                      'OPENGL32.DLL': 'wglShareLists',
                                                                                      'PSAPI.DLL': 'GetModuleFileNameExA',
                                                                                      'Qt5Core.dll': '_ZrsR11QDataStreamR7QString',
                                                                                      'Qt5Gui.dll': '_ZThn8_NK7QWindow6formatEv',
                                                                                      'Qt5Multimedia.dll': '_ZNK19QCameraImageCapture22supportedBufferFormatsEv',
                                                                                      'Qt5MultimediaWidgets.dll': '_ZN12QVideoWidgetC1EP7QWidget',
                                                                                      'Qt5Network.dll': '_ZNK9QHostInfo9addressesEv',
                                                                                      'Qt5Qml.dll': '_ZN11QQmlPrivate30qdeclarativeelement_destructorEP7QObject',
                                                                                      'Qt5Quick.dll': '_ZNK12QQuickWindow14accessibleRootEv',
                                                                                      'Qt5WebKit.dll': '_ZN12QWebSettings17clearMemoryCachesEv',
                                                                                      'Qt5WebKitWidgets.dll': '_ZNK8QWebView8settingsEv',
                                                                                      'Qt5Widgets.dll': '_ZThn8_NK7QWidget7devTypeEv',
                                                                                      'Qt5Xml.dll': '_ZNK8QDomNode9toElementEv',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'UnregisterHotKey',
                                                                                      'WS2_32.dll': 'socket',
                                                                                      'firewall_mgr.dll': 'firewall_mgr_getprofile',
                                                                                      'glut32.dll': 'glutDestroyWindow',
                                                                                      'hlog4qt1.dll': '_ZNK6Log4Qt6Logger9forcedLogENS_5LevelERK7QString',
                                                                                      'libgcc_s_dw2-1.dll': '__umoddi3',
                                                                                      'libstdc++-6.dll': '__gxx_personality_v0',
                                                                                      'msvcr100.dll': 'wcscmp',
                                                                                      'msvcrt.dll': 'wcslen'},
                                                                      'ImportedFunctions': ['_Z4endlR11QTextStream',
                                                                                            '_Z5qrandv',
                                                                                            '_Z6qsrandj',
                                                                                            '_Z7qstrcmpRK10QByteArrayPKc',
                                                                                            '_Z9qBadAllocv',
                                                                                            '_ZN10QArrayData10deallocateEPS_jj',
                                                                                            '_ZN10QArrayData11shared_nullE',
                                                                                            '_ZN10QByteArray10fromBase64ERKS_',
                                                                                            '_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE',
                                                                                            '_ZN10QByteArray5clearEv',
                                                                                            '_ZN10QByteArray6appendEPKc',
                                                                                            '_ZN10QByteArray6appendERKS_',
                                                                                            '_ZN10QByteArray6appendEc',
                                                                                            '_ZN10QByteArray6resizeEi',
                                                                                            '_ZN10QByteArrayC1EPKci',
                                                                                            '_ZN10QByteArrayaSEPKc',
                                                                                            '_ZN10QByteArrayaSERKS_',
                                                                                            '_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE',
                                                                                            '_ZN10QEventLoopC1EP7QObject',
                                                                                            '_ZN10QEventLoopD1Ev',
                                                                                            '_ZN10QJsonArray6appendERK10QJsonValue',
                                                                                            '_ZN10QJsonArrayC1ERKS_',
                                                                                            '_ZN10QJsonArrayC1Ev',
                                                                                            '_ZN10QJsonArrayD1Ev',
                                                                                            '_ZN10QJsonValue27stringDataFromQStringHelperERK7QString',
                                                                                            '_ZN10QJsonValueC1ENS_4TypeE',
                                                                                            '_ZN10QJsonValueC1ERK10QJsonArray',
                                                                                            '_ZN10QJsonValueC1ERK11QJsonObject',
                                                                                            '_ZN10QJsonValueC1ERK7QString',
                                                                                            '_ZN10QJsonValueC1Eb',
                                                                                            '_ZN10QJsonValueC1Ei',
                                                                                            '_ZN10QJsonValueD1Ev',
                                                                                            '_ZN10QJsonValueaSERKS_',
                                                                                            '_ZN10QTextCodec12codecForNameERK10QByteArray',
                                                                                            '_ZN11QDataStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN11QDataStreamC1EP9QIODevice',
                                                                                            '_ZN11QDataStreamD1Ev',
                                                                                            '_ZN11QDataStreamlsEi',
                                                                                            '_ZN11QDataStreamrsERi',
                                                                                            '_ZN11QFileDevice5closeEv',
                                                                                            '_ZN11QFileDevice5flushEv',
                                                                                            '_ZN11QJsonObject4takeERK7QString',
                                                                                            '_ZN11QJsonObject6detachEj',
                                                                                            '_ZN11QJsonObject6insertERK7QStringRK10QJsonValue',
                                                                                            '_ZN11QJsonObject6removeERK7QString',
                                                                                            '_ZN11QJsonObjectC1ERKS_',
                                                                                            '_ZN11QJsonObjectC1Ev',
                                                                                            '_ZN11QJsonObjectD1Ev',
                                                                                            '_ZN11QJsonObjectaSERKS_',
                                                                                            '_ZN11QJsonObjectixERK7QString',
                                                                                            '_ZN11QMetaObject10ConnectionD1Ev',
                                                                                            '_ZN11QMetaObject14normalizedTypeEPKc',
                                                                                            '_ZN11QMetaObject18connectSlotsByNameEP7QObject',
                                                                                            '_ZN11QMetaObject8activateEP7QObjectPKS_iPPv',
                                                                                            '_ZN11QTextStream4seekEx',
                                                                                            '_ZN11QTextStream5flushEv',
                                                                                            '_ZN11QTextStream7readAllEv',
                                                                                            '_ZN11QTextStream8readLineEx',
                                                                                            '_ZN11QTextStream8setCodecEP10QTextCodec',
                                                                                            '_ZN11QTextStream8setCodecEPKc',
                                                                                            '_ZN11QTextStreamC1EP9QIODevice',
                                                                                            '_ZN11QTextStreamD1Ev',
                                                                                            '_ZN11QTextStreamlsEPKc',
                                                                                            '_ZN11QTextStreamlsERK10QByteArray',
                                                                                            '_ZN11QTextStreamlsERK7QString',
                                                                                            '_ZN11QTextStreamlsEc',
                                                                                            '_ZN11QTextStreamlsEi',
                                                                                            '_ZN11QTextStreamlsEx',
                                                                                            '_ZN11QTranslator4loadERK7QStringS2_S2_S2_',
                                                                                            '_ZN11QTranslatorC1EP7QObject',
                                                                                            '_ZN12QMapDataBase10createDataEv',
                                                                                            '_ZN12QMapDataBase10createNodeEiiP12QMapNodeBaseb',
                                                                                            '_ZN12QMapDataBase11shared_nullE',
                                                                                            '_ZN12QMapDataBase18recalcMostLeftNodeEv',
                                                                                            '_ZN12QMapDataBase20freeNodeAndRebalanceEP12QMapNodeBase',
                                                                                            '_ZN12QMapDataBase8freeDataEPS_',
                                                                                            '_ZN12QMapDataBase8freeTreeEP12QMapNodeBasei',
                                                                                            '_ZN13QJsonDocument11fromVariantERK8QVariant',
                                                                                            '_ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError',
                                                                                            '_ZN13QJsonDocument9setObjectERK11QJsonObject',
                                                                                            '_ZN13QJsonDocumentC1ERK11QJsonObject',
                                                                                            '_ZN13QJsonDocumentC1Ev',
                                                                                            '_ZN13QJsonDocumentD1Ev',
                                                                                            '_ZN13QJsonValueRefaSERK10QJsonValue',
                                                                                            '_ZN13QSharedMemory4dataEv',
                                                                                            '_ZN13QSharedMemory4lockEv',
                                                                                            '_ZN13QSharedMemory6attachENS_10AccessModeE',
                                                                                            '_ZN13QSharedMemory6createEiNS_10AccessModeE',
                                                                                            '_ZN13QSharedMemory6detachEv',
                                                                                            '_ZN13QSharedMemory6setKeyERK7QString',
                                                                                            '_ZN13QSharedMemory6unlockEv',
                                                                                            '_ZN13QSharedMemoryC1EP7QObject',
                                                                                            '_ZN13QSharedMemoryC1ERK7QStringP7QObject',
                                                                                            '_ZN13QSharedMemoryD1Ev',
                                                                                            '_ZN14QStandardPaths16writableLocationENS_16StandardLocationE',
                                                                                            '_ZN16QCoreApplication12setAttributeEN2Qt20ApplicationAttributeEb',
                                                                                            '_ZN16QCoreApplication13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE',
                                                                                            '_ZN16QCoreApplication14notifyInternalEP7QObjectP6QEvent',
                                                                                            '_ZN16QCoreApplication15applicationNameEv',
                                                                                            '_ZN16QCoreApplication17installTranslatorEP11QTranslator',
                                                                                            '_ZN16QCoreApplication18applicationDirPathEv',
                                                                                            '_ZN16QCoreApplication19applicationFilePathEv',
                                                                                            '_ZN16QCoreApplication24installNativeEventFilterEP26QAbstractNativeEventFilter',
                                                                                            '_ZN16QCoreApplication4exitEi',
                                                                                            '_ZN16QCoreApplication4selfE',
                                                                                            '_ZN16QCoreApplication9argumentsEv',
                                                                                            '_ZN16QCoreApplication9translateEPKcS1_S1_i',
                                                                                            '_ZN16QStringListModel10insertRowsEiiRK11QModelIndex',
                                                                                            '_ZN16QStringListModel10removeRowsEiiRK11QModelIndex',
                                                                                            '_ZN16QStringListModel11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN16QStringListModel11qt_metacastEPKc',
                                                                                            '_ZN16QStringListModel13setStringListERK11QStringList',
                                                                                            '_ZN16QStringListModel16staticMetaObjectE',
                                                                                            '_ZN16QStringListModel4sortEiN2Qt9SortOrderE',
                                                                                            '_ZN16QStringListModel7setDataERK11QModelIndexRK8QVarianti',
                                                                                            '_ZN16QStringListModelC2EP7QObject',
                                                                                            '_ZN16QXmlStreamReader15readElementTextENS_24ReadElementTextBehaviourE',
                                                                                            '_ZN16QXmlStreamReader18skipCurrentElementEv',
                                                                                            '_ZN16QXmlStreamReader8readNextEv',
                                                                                            '_ZN16QXmlStreamReader9setDeviceEP9QIODevice',
                                                                                            '_ZN16QXmlStreamReaderC1EP9QIODevice',
                                                                                            '_ZN16QXmlStreamReaderC2Ev',
                                                                                            '_ZN16QXmlStreamReaderD1Ev',
                                                                                            '_ZN16QXmlStreamReaderD2Ev',
                                                                                            '_ZN17QVariantAnimation11setDurationEi',
                                                                                            '_ZN17QVariantAnimation11setEndValueERK8QVariant',
                                                                                            '_ZN17QVariantAnimation13setStartValueERK8QVariant',
                                                                                            '_ZN18QAbstractAnimation5startENS_14DeletionPolicyE',
                                                                                            '_ZN18QAbstractItemModel11dataChangedERK11QModelIndexS2_RK7QVectorIiE',
                                                                                            '_ZN18QAbstractItemModel11moveColumnsERK11QModelIndexiiS2_i',
                                                                                            '_ZN18QAbstractItemModel11setItemDataERK11QModelIndexRK4QMapIi8QVariantE',
                                                                                            '_ZN18QAbstractItemModel13insertColumnsEiiRK11QModelIndex',
                                                                                            '_ZN18QAbstractItemModel13removeColumnsEiiRK11QModelIndex',
                                                                                            '_ZN18QAbstractItemModel13setHeaderDataEiN2Qt11OrientationERK8QVarianti',
                                                                                            '_ZN18QAbstractItemModel6revertEv',
                                                                                            '_ZN18QAbstractItemModel6submitEv',
                                                                                            '_ZN18QAbstractItemModel8moveRowsERK11QModelIndexiiS2_i',
                                                                                            '_ZN18QAbstractItemModel9fetchMoreERK11QModelIndex',
                                                                                            '_ZN18QAbstractListModel12dropMimeDataEPK9QMimeDataN2Qt10DropActionEiiRK11QModelIndex',
                                                                                            '_ZN18QAbstractListModelD2Ev',
                                                                                            '_ZN18QCryptographicHash7addDataERK10QByteArray',
                                                                                            '_ZN18QCryptographicHashC1ENS_9AlgorithmE',
                                                                                            '_ZN18QCryptographicHashD1Ev',
                                                                                            '_ZN18QPropertyAnimationC1EP7QObjectRK10QByteArrayS1_',
                                                                                            '_ZN19QXmlStreamAttributeD1Ev',
                                                                                            '_ZN26QAbstractNativeEventFilterC2Ev',
                                                                                            '_ZN26QAbstractNativeEventFilterD2Ev',
                                                                                            '_ZN4QDir11currentPathEv',
                                                                                            '_ZN4QDir14setNameFiltersERK11QStringList',
                                                                                            '_ZN4QDir17removeRecursivelyEv',
                                                                                            '_ZN4QDir18toNativeSeparatorsERK7QString',
                                                                                            '_ZN4QDir6drivesEv',
                                                                                            '_ZN4QDir6removeERK7QString',
                                                                                            '_ZN4QDir9cleanPathERK7QString',
                                                                                            '_ZN4QDir9setFilterE6QFlagsINS_6FilterEE',
                                                                                            '_ZN4QDirC1ERK7QString',
                                                                                            '_ZN4QDirD1Ev',
                                                                                            '_ZN4QUrlC1ERK7QStringNS_11ParsingModeE',
                                                                                            '_ZN4QUrlC1ERKS_',
                                                                                            '_ZN4QUrlC1Ev',
                                                                                            '_ZN4QUrlD1Ev',
                                                                                            '_ZN5QChar7toUpperEj',
                                                                                            '_ZN5QFile14setPermissionsERK7QString6QFlagsIN11QFileDevice10PermissionEE',
                                                                                            '_ZN5QFile4copyERK7QString',
                                                                                            '_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN5QFile6existsERK7QString',
                                                                                            '_ZN5QFile6removeERK7QString',
                                                                                            '_ZN5QFile6removeEv',
                                                                                            '_ZN5QFile6renameERK7QStringS2_',
                                                                                            '_ZN5QFileC1ERK7QString',
                                                                                            '_ZN5QFileD1Ev',
                                                                                            '_ZN5QTime11currentTimeEv',
                                                                                            '_ZN5QTime5startEv',
                                                                                            '_ZN5QTime7restartEv',
                                                                                            '_ZN5QTimeC1Eiiii',
                                                                                            '_ZN5QUuid10createUuidEv',
                                                                                            '_ZN6QDebugD1Ev',
                                                                                            '_ZN6QMutex4lockEv',
                                                                                            '_ZN6QMutex6unlockEv',
                                                                                            '_ZN6QMutexC1ENS_13RecursionModeE',
                                                                                            '_ZN6QMutexD1Ev',
                                                                                            '_ZN6QTimer10singleShotEiPK7QObjectPKc',
                                                                                            '_ZN6QTimer11setIntervalEi',
                                                                                            '_ZN6QTimer4stopEv',
                                                                                            '_ZN6QTimer5startEi',
                                                                                            '_ZN6QTimer5startEv',
                                                                                            '_ZN6QTimerC1EP7QObject',
                                                                                            '_ZN7QBuffer4openE6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN7QBuffer7setDataERK10QByteArray',
                                                                                            '_ZN7QBufferC1EP7QObject',
                                                                                            '_ZN7QBufferD1Ev',
                                                                                            '_ZN7QLocale6systemEv',
                                                                                            '_ZN7QLocaleD1Ev',
                                                                                            '_ZN7QObject10childEventEP11QChildEvent',
                                                                                            '_ZN7QObject10disconnectEPKS_PKcS1_S3_',
                                                                                            '_ZN7QObject10timerEventEP11QTimerEvent',
                                                                                            '_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject',
                                                                                            '_ZN7QObject11customEventEP6QEvent',
                                                                                            '_ZN7QObject11deleteLaterEv',
                                                                                            '_ZN7QObject11eventFilterEPS_P6QEvent',
                                                                                            '_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QObject11qt_metacastEPKc',
                                                                                            '_ZN7QObject11setPropertyEPKcRK8QVariant',
                                                                                            '_ZN7QObject12moveToThreadEP7QThread',
                                                                                            '_ZN7QObject13connectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QObject13setObjectNameERK7QString',
                                                                                            '_ZN7QObject16disconnectNotifyERK11QMetaMethod',
                                                                                            '_ZN7QObject16staticMetaObjectE',
                                                                                            '_ZN7QObject18installEventFilterEPS_',
                                                                                            '_ZN7QObject5eventEP6QEvent',
                                                                                            '_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE',
                                                                                            '_ZN7QObjectC2EPS_',
                                                                                            '_ZN7QObjectD2Ev',
                                                                                            '_ZN7QRegExpC1ERK7QStringN2Qt15CaseSensitivityENS_13PatternSyntaxE',
                                                                                            '_ZN7QRegExpD1Ev',
                                                                                            '_ZN7QString11reallocDataEjb',
                                                                                            '_ZN7QString14compare_helperEPK5QChariPKciN2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString15fromUtf8_helperEPKci',
                                                                                            '_ZN7QString16fromAscii_helperEPKci',
                                                                                            '_ZN7QString17fromLatin1_helperEPKci',
                                                                                            '_ZN7QString6appendERKS_',
                                                                                            '_ZN7QString6insertEiPK5QChari',
                                                                                            '_ZN7QString6numberEdci',
                                                                                            '_ZN7QString6numberEii',
                                                                                            '_ZN7QString6numberEji',
                                                                                            '_ZN7QString6numberEli',
                                                                                            '_ZN7QString6numberEmi',
                                                                                            '_ZN7QString6removeE5QCharN2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString6removeERKS_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString6removeEii',
                                                                                            '_ZN7QString7replaceE5QCharS0_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString7replaceERKS_S1_N2Qt15CaseSensitivityE',
                                                                                            '_ZN7QString7sprintfEPKcz',
                                                                                            '_ZN7QString9fromUtf16EPKti',
                                                                                            '_ZN7QStringC1E5QChar',
                                                                                            '_ZN7QStringaSERKS_',
                                                                                            '_ZN7QThread11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QThread11qt_metacastEPKc',
                                                                                            '_ZN7QThread11setPriorityENS_8PriorityE',
                                                                                            '_ZN7QThread16staticMetaObjectE',
                                                                                            '_ZN7QThread3runEv',
                                                                                            '_ZN7QThread4execEv',
                                                                                            '_ZN7QThread4waitEm',
                                                                                            '_ZN7QThread5eventEP6QEvent',
                                                                                            '_ZN7QThread5sleepEm',
                                                                                            '_ZN7QThread5startENS_8PriorityE',
                                                                                            '_ZN7QThread6msleepEm',
                                                                                            '_ZN7QThread6usleepEm',
                                                                                            '_ZN7QThread8finishedENS_14QPrivateSignalE',
                                                                                            '_ZN7QThread9terminateEv',
                                                                                            '_ZN7QThreadC1EP7QObject',
                                                                                            '_ZN7QThreadC2EP7QObject',
                                                                                            '_ZN7QThreadD2Ev',
                                                                                            '_ZN8QLibrary4loadEv',
                                                                                            '_ZN8QLibrary7resolveEPKc',
                                                                                            '_ZN8QLibraryC1ERK7QStringP7QObject',
                                                                                            '_ZN8QLibraryD1Ev',
                                                                                            '_ZN8QProcess13startDetachedERK7QString',
                                                                                            '_ZN8QProcess13startDetachedERK7QStringRK11QStringList',
                                                                                            '_ZN8QProcess15waitForFinishedEi',
                                                                                            '_ZN8QProcess21readAllStandardOutputEv',
                                                                                            '_ZN8QProcess5startERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN8QProcess9terminateEv',
                                                                                            '_ZN8QProcessC1EP7QObject',
                                                                                            '_ZN8QProcessD1Ev',
                                                                                            '_ZN8QSysInfo14windowsVersionEv',
                                                                                            '_ZN8QVariantC1EPKc',
                                                                                            '_ZN8QVariantC1ERK11QStringList',
                                                                                            '_ZN8QVariantC1ERK4QMapI7QStringS_E',
                                                                                            '_ZN8QVariantC1ERK7QString',
                                                                                            '_ZN8QVariantC1ERKS_',
                                                                                            '_ZN8QVariantC1Eb',
                                                                                            '_ZN8QVariantC1Ed',
                                                                                            '_ZN8QVariantC1Ei',
                                                                                            '_ZN8QVariantC1Ex',
                                                                                            '_ZN8QVariantD1Ev',
                                                                                            '_ZN8QVariantaSERKS_',
                                                                                            '_ZN9QDateTime10fromTime_tEj',
                                                                                            '_ZN9QDateTime15currentDateTimeEv',
                                                                                            '_ZN9QDateTimeC1Ev',
                                                                                            '_ZN9QDateTimeD1Ev',
                                                                                            '_ZN9QDateTimeaSERKS_',
                                                                                            '_ZN9QFileInfoC1ERK7QString',
                                                                                            '_ZN9QFileInfoC1ERKS_',
                                                                                            '_ZN9QFileInfoD1Ev',
                                                                                            '_ZN9QHashData11free_helperEPFvPNS_4NodeEE',
                                                                                            '_ZN9QHashData11shared_nullE',
                                                                                            '_ZN9QHashData12allocateNodeEi',
                                                                                            '_ZN9QHashData13detach_helperEPFvPNS_4NodeEPvEPFvS1_Eii',
                                                                                            '_ZN9QHashData6rehashEi',
                                                                                            '_ZN9QIODevice11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN9QIODevice11qt_metacastEPKc',
                                                                                            '_ZN9QIODevice12readLineDataEPcx',
                                                                                            '_ZN9QIODevice16staticMetaObjectE',
                                                                                            '_ZN9QIODevice16waitForReadyReadEi',
                                                                                            '_ZN9QIODevice19waitForBytesWrittenEi',
                                                                                            '_ZN9QIODevice4openE6QFlagsINS_12OpenModeFlagEE',
                                                                                            '_ZN9QIODevice4readEPcx',
                                                                                            '_ZN9QIODevice4seekEx',
                                                                                            '_ZN9QIODevice5closeEv',
                                                                                            '_ZN9QIODevice5resetEv',
                                                                                            '_ZN9QIODevice5writeEPKcx',
                                                                                            '_ZN9QIODevice7readAllEv',
                                                                                            '_ZN9QIODeviceC2EP7QObject',
                                                                                            '_ZN9QIODeviceD2Ev',
                                                                                            '_ZN9QListData11detach_growEPii',
                                                                                            '_ZN9QListData11shared_nullE',
                                                                                            '_ZN9QListData5eraseEPPv',
                                                                                            '_ZN9QListData6appendEv',
                                                                                            '_ZN9QListData6detachEi',
                                                                                            '_ZN9QListData6insertEi',
                                                                                            '_ZN9QListData6removeEi',
                                                                                            '_ZN9QListData7disposeEPNS_4DataE',
                                                                                            '_ZN9QListData7reallocEi',
                                                                                            '_ZN9QMetaType22registerNormalizedTypeERK10QByteArrayPFvPvEPFS3_PKvES5_PFS3_S3_S7_Ei6QFlagsINS_8TypeFlagEEPK11QMetaObject',
                                                                                            '_ZN9QMetaType25registerNormalizedTypedefERK10QByteArrayi',
                                                                                            '_ZN9QMimeData7setDataERK7QStringRK10QByteArray',
                                                                                            '_ZN9QMimeDataC1Ev',
                                                                                            '_ZN9QResource16registerResourceERK7QStringS2_',
                                                                                            '_ZN9QResource18unregisterResourceERK7QStringS2_',
                                                                                            '_ZN9QSettings11setIniCodecEPKc',
                                                                                            '_ZN9QSettings6removeERK7QString',
                                                                                            '_ZN9QSettings8setValueERK7QStringRK8QVariant',
                                                                                            '_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject',
                                                                                            '_ZN9QTimeZoneC1Ei',
                                                                                            '_ZN9QTimeZoneD1Ev',
                                                                                            '_ZN9QtPrivate16QStringList_joinEPK11QStringListPK5QChari',
                                                                                            '_ZN9QtPrivate18QStringList_filterEPK11QStringListRK7QStringN2Qt15CaseSensitivityE',
                                                                                            '_ZN9QtPrivate20QStringList_containsEPK11QStringListRK7QStringN2Qt15CaseSensitivityE',
                                                                                            '_ZNK10QByteArray17toPercentEncodingERKS_S1_c',
                                                                                            '_ZNK10QByteArray3midEii',
                                                                                            '_ZNK10QByteArray5toHexEv',
                                                                                            '_ZNK10QByteArray7trimmedEv',
                                                                                            '_ZNK10QByteArray8toBase64Ev',
                                                                                            '_ZNK10QJsonArray2atEi',
                                                                                            '_ZNK10QJsonArray4sizeEv',
                                                                                            '_ZNK10QJsonValue4typeEv',
                                                                                            '_ZNK10QJsonValue5toIntEi',
                                                                                            '_ZNK10QJsonValue6toBoolEb',
                                                                                            '_ZNK10QJsonValue7toArrayEv',
                                                                                            '_ZNK10QJsonValue8toObjectEv',
                                                                                            '_ZNK10QJsonValue8toStringERK7QString',
                                                                                            '_ZNK10QJsonValue9toVariantEv',
                                                                                            '_ZNK10QJsonValueeqERKS_',
                                                                                            '_ZNK10QStringRef5toIntEPbi',
                                                                                            '_ZNK10QStringRef8toStringEv',
                                                                                            '_ZNK10QTextCodec11fromUnicodeERK7QString',
                                                                                            '_ZNK11QJsonObject4keysEv',
                                                                                            '_ZNK11QJsonObject4sizeEv',
                                                                                            '_ZNK11QJsonObject5keyAtEi',
                                                                                            '_ZNK11QJsonObject5valueERK7QString',
                                                                                            '_ZNK11QJsonObject8containsERK7QString',
                                                                                            '_ZNK11QMetaObject2trEPKcS1_i',
                                                                                            '_ZNK11QMetaObject9classNameEv',
                                                                                            '_ZNK11QObjectData17dynamicMetaObjectEv',
                                                                                            '_ZNK11QTextStream5atEndEv',
                                                                                            '_ZNK12QMapNodeBase8nextNodeEv',
                                                                                            '_ZNK13QJsonDocument6objectEv',
                                                                                            '_ZNK13QJsonDocument6toJsonENS_10JsonFormatE',
                                                                                            '_ZNK13QJsonDocument6toJsonEv',
                                                                                            '_ZNK13QJsonDocument7isEmptyEv',
                                                                                            '_ZNK13QJsonDocument8isObjectEv',
                                                                                            '_ZNK13QJsonValueRef7toValueEv',
                                                                                            '_ZNK13QJsonValueRef8toObjectEv',
                                                                                            '_ZNK13QSharedMemory10isAttachedEv',
                                                                                            '_ZNK13QSharedMemory4sizeEv',
                                                                                            '_ZNK13QSharedMemory9constDataEv',
                                                                                            '_ZNK14QMessageLogger8criticalEPKcz',
                                                                                            '_ZNK14QMessageLogger8criticalEv',
                                                                                            '_ZNK16QStringListModel10stringListEv',
                                                                                            '_ZNK16QStringListModel20supportedDropActionsEv',
                                                                                            '_ZNK16QStringListModel4dataERK11QModelIndexi',
                                                                                            '_ZNK16QStringListModel5flagsERK11QModelIndex',
                                                                                            '_ZNK16QStringListModel7siblingEiiRK11QModelIndex',
                                                                                            '_ZNK16QStringListModel8rowCountERK11QModelIndex',
                                                                                            '_ZNK16QXmlStreamReader10attributesEv',
                                                                                            '_ZNK16QXmlStreamReader4nameEv',
                                                                                            '_ZNK16QXmlStreamReader5atEndEv',
                                                                                            '_ZNK16QXmlStreamReader9tokenTypeEv',
                                                                                            '_ZNK18QAbstractItemModel10headerDataEiN2Qt11OrientationEi',
                                                                                            '_ZNK18QAbstractItemModel12canFetchMoreERK11QModelIndex',
                                                                                            '_ZNK18QAbstractItemModel15canDropMimeDataEPK9QMimeDataN2Qt10DropActionEiiRK11QModelIndex',
                                                                                            '_ZNK18QAbstractItemModel20supportedDragActionsEv',
                                                                                            '_ZNK18QAbstractItemModel4spanERK11QModelIndex',
                                                                                            '_ZNK18QAbstractItemModel5buddyERK11QModelIndex',
                                                                                            '_ZNK18QAbstractItemModel5matchERK11QModelIndexiRK8QVarianti6QFlagsIN2Qt9MatchFlagEE',
                                                                                            '_ZNK18QAbstractItemModel8itemDataERK11QModelIndex',
                                                                                            '_ZNK18QAbstractItemModel8mimeDataERK5QListI11QModelIndexE',
                                                                                            '_ZNK18QAbstractItemModel9mimeTypesEv',
                                                                                            '_ZNK18QAbstractItemModel9roleNamesEv',
                                                                                            '_ZNK18QAbstractListModel11columnCountERK11QModelIndex',
                                                                                            '_ZNK18QAbstractListModel11hasChildrenERK11QModelIndex',
                                                                                            '_ZNK18QAbstractListModel5indexEiiRK11QModelIndex',
                                                                                            '_ZNK18QAbstractListModel6parentERK11QModelIndex',
                                                                                            '_ZNK18QCryptographicHash6resultEv',
                                                                                            '_ZNK20QXmlStreamAttributes5valueERK7QString',
                                                                                            '_ZNK4QDir13entryInfoListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE',
                                                                                            '_ZNK4QDir13entryInfoListERK11QStringList6QFlagsINS_6FilterEES3_INS_8SortFlagEE',
                                                                                            '_ZNK4QDir5mkdirERK7QString',
                                                                                            '_ZNK4QDir6existsERK7QString',
                                                                                            '_ZNK4QDir6existsEv',
                                                                                            '_ZNK4QDir6mkpathERK7QString',
                                                                                            '_ZNK4QUrl11toLocalFileEv',
                                                                                            '_ZNK4QUrl4pathE6QFlagsINS_25ComponentFormattingOptionEE',
                                                                                            '_ZNK5QFile6existsEv',
                                                                                            '_ZNK5QRect8containsERK6QPointb',
                                                                                            '_ZNK5QRect8containsERKS_b',
                                                                                            '_ZNK5QTime4msecEv',
                                                                                            '_ZNK5QTime6secondEv',
                                                                                            '_ZNK5QTime7elapsedEv',
                                                                                            '_ZNK5QTime7msecsToERKS_',
                                                                                            '_ZNK5QUuid8toStringEv',
                                                                                            '_ZNK6QTimer13remainingTimeEv',
                                                                                            '_ZNK7QBuffer4dataEv',
                                                                                            '_ZNK7QBuffer4sizeEv',
                                                                                            '_ZNK7QLocale4nameEv',
                                                                                            '_ZNK7QLocale8languageEv',
                                                                                            '_ZNK7QObject10metaObjectEv',
                                                                                            '_ZNK7QObject10objectNameEv',
                                                                                            '_ZNK7QObject6senderEv',
                                                                                            '_ZNK7QRegExp10exactMatchERK7QString',
                                                                                            '_ZNK7QString10startsWithERKS_N2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString10toLongLongEPbi',
                                                                                            '_ZNK7QString11lastIndexOfERKS_iN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString11toLocal8BitEv',
                                                                                            '_ZNK7QString3argERKS_i5QChar',
                                                                                            '_ZNK7QString3argEdici5QChar',
                                                                                            '_ZNK7QString3argExii5QChar',
                                                                                            '_ZNK7QString3argEyii5QChar',
                                                                                            '_ZNK7QString3midEii',
                                                                                            '_ZNK7QString4leftEi',
                                                                                            '_ZNK7QString5rightEi',
                                                                                            '_ZNK7QString5splitE5QCharNS_13SplitBehaviorEN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString5toIntEPbi',
                                                                                            '_ZNK7QString5utf16Ev',
                                                                                            '_ZNK7QString6toLongEPbi',
                                                                                            '_ZNK7QString6toUIntEPbi',
                                                                                            '_ZNK7QString6toUtf8Ev',
                                                                                            '_ZNK7QString7compareERKS_N2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString7toFloatEPb',
                                                                                            '_ZNK7QString7toLowerEv',
                                                                                            '_ZNK7QString7trimmedEv',
                                                                                            '_ZNK7QString8endsWithE5QCharN2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString8endsWithERKS_N2Qt15CaseSensitivityE',
                                                                                            '_ZNK7QString8multiArgEiPPKS_',
                                                                                            '_ZNK7QString8toDoubleEPb',
                                                                                            '_ZNK7QString8toLatin1Ev',
                                                                                            '_ZNK8QProcess5errorEv',
                                                                                            '_ZNK8QProcess8exitCodeEv',
                                                                                            '_ZNK8QVariant10toLongLongEPb',
                                                                                            '_ZNK8QVariant12toStringListEv',
                                                                                            '_ZNK8QVariant3cmpERKS_',
                                                                                            '_ZNK8QVariant5toIntEPb',
                                                                                            '_ZNK8QVariant6isNullEv',
                                                                                            '_ZNK8QVariant6toBoolEv',
                                                                                            '_ZNK8QVariant8toDoubleEPb',
                                                                                            '_ZNK8QVariant8toStringEv',
                                                                                            '_ZNK9QDateTime13offsetFromUtcEv',
                                                                                            '_ZNK9QDateTime7isValidEv',
                                                                                            '_ZNK9QDateTime7msecsToERKS_',
                                                                                            '_ZNK9QDateTime8toStringERK7QString',
                                                                                            '_ZNK9QDateTime8toTime_tEv',
                                                                                            '_ZNK9QFileInfo12absolutePathEv',
                                                                                            '_ZNK9QFileInfo3dirEv',
                                                                                            '_ZNK9QFileInfo4sizeEv',
                                                                                            '_ZNK9QFileInfo5isDirEv',
                                                                                            '_ZNK9QFileInfo6isFileEv',
                                                                                            '_ZNK9QFileInfo8fileNameEv',
                                                                                            '_ZNK9QFileInfo8filePathEv',
                                                                                            '_ZNK9QIODevice11canReadLineEv',
                                                                                            '_ZNK9QIODevice12bytesToWriteEv',
                                                                                            '_ZNK9QIODevice12isSequentialEv',
                                                                                            '_ZNK9QIODevice14bytesAvailableEv',
                                                                                            '_ZNK9QIODevice3posEv',
                                                                                            '_ZNK9QIODevice4sizeEv',
                                                                                            '_ZNK9QIODevice5atEndEv',
                                                                                            '_ZNK9QIODevice6isOpenEv',
                                                                                            '_ZNK9QMimeData4dataERK7QString',
                                                                                            '_ZNK9QMimeData4urlsEv',
                                                                                            '_ZNK9QMimeData7hasUrlsEv',
                                                                                            '_ZNK9QSettings5valueERK7QStringRK8QVariant',
                                                                                            '_ZNK9QSettings8containsERK7QString',
                                                                                            '_ZNK9QTimeZone7commentEv',
                                                                                            '_ZTV16QStringListModel',
                                                                                            '_ZeqRK7QStringRK10QStringRef',
                                                                                            '_ZeqRK7QStringS1_',
                                                                                            '_ZlsR11QDataStreamRK7QString',
                                                                                            '_ZltRK7QStringS1_',
                                                                                            '_ZrsR11QDataStreamR7QString',
                                                                                            '_ZN10QClipboard7setTextERK7QStringNS_4ModeE',
                                                                                            '_ZN10QDropEvent13setDropActionEN2Qt10DropActionE',
                                                                                            '_ZN11QMouseEventC1EN6QEvent4TypeERK7QPointFN2Qt11MouseButtonE6QFlagsIS6_ES7_INS5_16KeyboardModifierEE',
                                                                                            '_ZN11QMouseEventD1Ev',
                                                                                            '_ZN11QTextCursor11setPositionEiNS_8MoveModeE',
                                                                                            '_ZN11QTextCursorD1Ev',
                                                                                            '_ZN11QTouchEvent10TouchPointC1ERKS0_',
                                                                                            '_ZN11QTouchEvent10TouchPointD1Ev',
                                                                                            '_ZN12QFontMetricsC1ERK5QFont',
                                                                                            '_ZN12QFontMetricsD1Ev',
                                                                                            '_ZN12QPainterPath7addTextERK7QPointFRK5QFontRK7QString',
                                                                                            '_ZN12QPainterPathC1Ev',
                                                                                            '_ZN12QPainterPathD1Ev',
                                                                                            '_ZN13QStandardItemC1ERK7QString',
                                                                                            '_ZN13QTextDocument18setUndoRedoEnabledEb',
                                                                                            '_ZN15QGuiApplication13primaryScreenEv',
                                                                                            '_ZN15QGuiApplication25setQuitOnLastWindowClosedEb',
                                                                                            '_ZN15QGuiApplication9clipboardEv',
                                                                                            '_ZN16QDesktopServices7openUrlERK4QUrl',
                                                                                            '_ZN18QStandardItemModel14setColumnCountEi',
                                                                                            '_ZN18QStandardItemModel7setItemEiiP13QStandardItem',
                                                                                            '_ZN18QStandardItemModelC1EP7QObject',
                                                                                            '_ZN18QStandardItemModelD1Ev',
                                                                                            '_ZN4QPen8setWidthEi',
                                                                                            '_ZN4QPenC1ERK6QColor',
                                                                                            '_ZN4QPenD1Ev',
                                                                                            '_ZN5QDrag10setHotSpotERK6QPoint',
                                                                                            '_ZN5QDrag11setMimeDataEP9QMimeData',
                                                                                            '_ZN5QDrag4execE6QFlagsIN2Qt10DropActionEES2_',
                                                                                            '_ZN5QDrag9setPixmapERK7QPixmap',
                                                                                            '_ZN5QDragC1EP7QObject',
                                                                                            '_ZN5QFont12setPixelSizeEi',
                                                                                            '_ZN5QFont12setPointSizeEi',
                                                                                            '_ZN5QFont12setUnderlineEb',
                                                                                            '_ZN5QFont8setStyleENS_5StyleE',
                                                                                            '_ZN5QFont9setFamilyERK7QString',
                                                                                            '_ZN5QFont9setWeightEi',
                                                                                            '_ZN5QFontC1ERK7QStringiib',
                                                                                            '_ZN5QFontC1ERKS_',
                                                                                            '_ZN5QFontC1Ev',
                                                                                            '_ZN5QFontD1Ev',
                                                                                            '_ZN5QFontaSERKS_',
                                                                                            '_ZN5QIcon7addFileERK7QStringRK5QSizeNS_4ModeENS_5StateE',
                                                                                            '_ZN5QIconC1ERK7QPixmap',
                                                                                            '_ZN5QIconC1ERK7QString',
                                                                                            '_ZN5QIconC1Ev',
                                                                                            '_ZN5QIconD1Ev',
                                                                                            '_ZN6QBrushC1EN2Qt10BrushStyleE',
                                                                                            '_ZN6QBrushC1ERK6QColorN2Qt10BrushStyleE',
                                                                                            '_ZN6QBrushD1Ev',
                                                                                            '_ZN6QColor13setNamedColorERK7QString',
                                                                                            '_ZN6QColor6setRgbEiiii',
                                                                                            '_ZN6QColorC1EN2Qt11GlobalColorE',
                                                                                            '_ZN6QColoraSERKS_',
                                                                                            '_ZN6QImage4bitsEv',
                                                                                            '_ZN6QImageC1EPhiiNS_6FormatEPFvPvES2_',
                                                                                            '_ZN6QImageC1ERKS_',
                                                                                            '_ZN6QImageC1Ev',
                                                                                            '_ZN6QImageD1Ev',
                                                                                            '_ZN6QImageaSERKS_',
                                                                                            '_ZN6QMovie5startEv',
                                                                                            '_ZN6QMovieC1ERK7QStringRK10QByteArrayP7QObject',
                                                                                            '_ZN7QBitmapD1Ev',
                                                                                            '_ZN7QCursor3posEv',
                                                                                            '_ZN7QCursor6setPosEii',
                                                                                            '_ZN7QCursorC1EN2Qt11CursorShapeE',
                                                                                            '_ZN7QCursorC1ERK7QPixmapii',
                                                                                            '_ZN7QCursorC1Ev',
                                                                                            '_ZN7QCursorD1Ev',
                                                                                            '_ZN7QMatrix6rotateEd',
                                                                                            '_ZN7QMatrixC1Ev',
                                                                                            '_ZN7QPixmap10grabWindowEjiiii',
                                                                                            '_ZN7QPixmap4loadERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE',
                                                                                            '_ZN7QPixmap9fromImageERK6QImage6QFlagsIN2Qt19ImageConversionFlagEE',
                                                                                            '_ZN7QPixmapC1ERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE',
                                                                                            '_ZN7QPixmapC1ERKS_',
                                                                                            '_ZN7QPixmapC1Ev',
                                                                                            '_ZN7QPixmapD1Ev',
                                                                                            '_ZN7QWindow10touchEventEP11QTouchEvent',
                                                                                            '_ZN7QWindow11nativeEventERK10QByteArrayPvPl',
                                                                                            '_ZN7QWindow11setGeometryEiiii',
                                                                                            '_ZN7QWindow11setModalityEN2Qt14WindowModalityE',
                                                                                            '_ZN7QWindow11tabletEventEP12QTabletEvent',
                                                                                            '_ZN7QWindow4showEv',
                                                                                            '_ZN7QWindow8setFlagsE6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWindow9moveEventEP10QMoveEvent',
                                                                                            '_ZN7QWindow9setCursorERK7QCursor',
                                                                                            '_ZN8QPainter10drawPixmapERK6QRectFRK7QPixmapS2_',
                                                                                            '_ZN8QPainter10strokePathERK12QPainterPathRK4QPen',
                                                                                            '_ZN8QPainter13setRenderHintENS_10RenderHintEb',
                                                                                            '_ZN8QPainter4saveEv',
                                                                                            '_ZN8QPainter6setPenERK4QPen',
                                                                                            '_ZN8QPainter6setPenERK6QColor',
                                                                                            '_ZN8QPainter7restoreEv',
                                                                                            '_ZN8QPainter7setFontERK5QFont',
                                                                                            '_ZN8QPainter8drawPathERK12QPainterPath',
                                                                                            '_ZN8QPainter8drawTextERK6QRectFiRK7QStringPS0_',
                                                                                            '_ZN8QPainter8fillPathERK12QPainterPathRK6QBrush',
                                                                                            '_ZN8QPainter8fillRectERK5QRectRK6QColor',
                                                                                            '_ZN8QPainter8fillRectERK6QRectFRK6QBrush',
                                                                                            '_ZN8QPainter8fillRectERK6QRectFRK6QColor',
                                                                                            '_ZN8QPainter8setBrushERK6QBrush',
                                                                                            '_ZN8QPainter9drawLinesEPK5QLinei',
                                                                                            '_ZN8QPainter9drawRectsEPK5QRecti',
                                                                                            '_ZN8QPainterC1EP12QPaintDevice',
                                                                                            '_ZN8QPainterD1Ev',
                                                                                            '_ZN8QPalette8setBrushENS_10ColorGroupENS_9ColorRoleERK6QBrush',
                                                                                            '_ZN8QPaletteC1Ev',
                                                                                            '_ZN8QPaletteD1Ev',
                                                                                            '_ZN9QKeyEventC1EN6QEvent4TypeEi6QFlagsIN2Qt16KeyboardModifierEERK7QStringbt',
                                                                                            '_ZN9QKeyEventC1EN6QEvent4TypeEi6QFlagsIN2Qt16KeyboardModifierEEjjjRK7QStringbt',
                                                                                            '_ZN9QKeyEventD1Ev',
                                                                                            '_ZNK10QClipboard4textENS_4ModeE',
                                                                                            '_ZNK10QDropEvent6sourceEv',
                                                                                            '_ZNK11QMouseEvent6sourceEv',
                                                                                            '_ZNK11QTextCursor8positionEv',
                                                                                            '_ZNK11QTouchEvent10TouchPoint2idEv',
                                                                                            '_ZNK11QTouchEvent10TouchPoint3posEv',
                                                                                            '_ZNK11QTouchEvent10TouchPoint5stateEv',
                                                                                            '_ZNK12QFontMetrics5widthERK7QStringi',
                                                                                            '_ZNK12QFontMetrics6ascentEv',
                                                                                            '_ZNK12QFontMetrics6heightEv',
                                                                                            '_ZNK5QFont9pointSizeEv',
                                                                                            '_ZNK6QImage11transformedERK7QMatrixN2Qt18TransformationModeE',
                                                                                            '_ZNK6QImage15convertToFormatENS_6FormatE6QFlagsIN2Qt19ImageConversionFlagEE',
                                                                                            '_ZNK6QImage4copyERK5QRect',
                                                                                            '_ZNK6QImage4rectEv',
                                                                                            '_ZNK6QImage5widthEv',
                                                                                            '_ZNK6QImage6heightEv',
                                                                                            '_ZNK6QImage6scaledERK5QSizeN2Qt15AspectRatioModeENS3_18TransformationModeE',
                                                                                            '_ZNK6QImage8mirroredEbb',
                                                                                            '_ZNK6QImage9byteCountEv',
                                                                                            '_ZNK7QPixmap4maskEv',
                                                                                            '_ZNK7QPixmap4saveERK7QStringPKci',
                                                                                            '_ZNK7QPixmap4sizeEv',
                                                                                            '_ZNK7QPixmap5widthEv',
                                                                                            '_ZNK7QPixmap6heightEv',
                                                                                            '_ZNK7QPixmap6scaledERK5QSizeN2Qt15AspectRatioModeENS3_18TransformationModeE',
                                                                                            '_ZNK7QScreen18logicalDotsPerInchEv',
                                                                                            '_ZNK7QScreen19logicalDotsPerInchXEv',
                                                                                            '_ZNK7QScreen19logicalDotsPerInchYEv',
                                                                                            '_ZNK7QScreen4sizeEv',
                                                                                            '_ZNK7QWindow11mapToGlobalERK6QPoint',
                                                                                            '_ZNK7QWindow11surfaceTypeEv',
                                                                                            '_ZNK7QWindow13surfaceHandleEv',
                                                                                            '_ZNK7QWindow6formatEv',
                                                                                            '_ZNK7QWindow6screenEv',
                                                                                            '_ZNK7QWindow8geometryEv',
                                                                                            '_ZNK9QKeyEvent7matchesEN12QKeySequence11StandardKeyE',
                                                                                            '_ZNK9QKeyEvent9modifiersEv',
                                                                                            '_ZThn8_NK7QWindow11surfaceTypeEv',
                                                                                            '_ZThn8_NK7QWindow13surfaceHandleEv',
                                                                                            '_ZThn8_NK7QWindow6formatEv',
                                                                                            '_ZN11QAudioInput13setBufferSizeEi',
                                                                                            '_ZN11QAudioInput4stopEv',
                                                                                            '_ZN11QAudioInput5startEP9QIODevice',
                                                                                            '_ZN11QAudioInput5startEv',
                                                                                            '_ZN11QAudioInput9setVolumeEd',
                                                                                            '_ZN11QAudioInputC1ERK12QAudioFormatP7QObject',
                                                                                            '_ZN11QAudioInputC1ERK16QAudioDeviceInfoRK12QAudioFormatP7QObject',
                                                                                            '_ZN11QAudioInputD1Ev',
                                                                                            '_ZN11QAudioProbe9setSourceEP14QMediaRecorder',
                                                                                            '_ZN11QAudioProbeC1EP7QObject',
                                                                                            '_ZN11QCameraInfo16availableCamerasEN7QCamera8PositionE',
                                                                                            '_ZN11QCameraInfoC1ERKS_',
                                                                                            '_ZN11QCameraInfoD1Ev',
                                                                                            '_ZN12QAudioFormat12setByteOrderENS_6EndianE',
                                                                                            '_ZN12QAudioFormat13setSampleRateEi',
                                                                                            '_ZN12QAudioFormat13setSampleSizeEi',
                                                                                            '_ZN12QAudioFormat13setSampleTypeENS_10SampleTypeE',
                                                                                            '_ZN12QAudioFormat15setChannelCountEi',
                                                                                            '_ZN12QAudioFormat8setCodecERK7QString',
                                                                                            '_ZN12QAudioFormatC1ERKS_',
                                                                                            '_ZN12QAudioFormatC1Ev',
                                                                                            '_ZN12QAudioFormatD1Ev',
                                                                                            '_ZN12QAudioFormataSERKS_',
                                                                                            '_ZN12QAudioOutput5startEv',
                                                                                            '_ZN12QAudioOutputC1ERK12QAudioFormatP7QObject',
                                                                                            '_ZN14QAudioRecorder13setAudioInputERK7QString',
                                                                                            '_ZN14QAudioRecorderC1EP7QObject',
                                                                                            '_ZN14QMediaRecorder19setEncodingSettingsERK21QAudioEncoderSettingsRK21QVideoEncoderSettingsRK7QString',
                                                                                            '_ZN14QMediaRecorder4stopEv',
                                                                                            '_ZN14QMediaRecorder6recordEv',
                                                                                            '_ZN16QAudioDeviceInfo18defaultInputDeviceEv',
                                                                                            '_ZN16QAudioDeviceInfo19defaultOutputDeviceEv',
                                                                                            '_ZN16QAudioDeviceInfoD1Ev',
                                                                                            '_ZN19QCameraImageCapture15setBufferFormatEN11QVideoFrame11PixelFormatE',
                                                                                            '_ZN19QCameraImageCapture7captureERK7QString',
                                                                                            '_ZN19QCameraImageCaptureC1EP12QMediaObjectP7QObject',
                                                                                            '_ZN21QAudioEncoderSettings10setBitRateEi',
                                                                                            '_ZN21QAudioEncoderSettings10setQualityEN11QMultimedia15EncodingQualityE',
                                                                                            '_ZN21QAudioEncoderSettings13setSampleRateEi',
                                                                                            '_ZN21QAudioEncoderSettings15setChannelCountEi',
                                                                                            '_ZN21QAudioEncoderSettings8setCodecERK7QString',
                                                                                            '_ZN21QAudioEncoderSettingsC1Ev',
                                                                                            '_ZN21QAudioEncoderSettingsD1Ev',
                                                                                            '_ZN21QImageEncoderSettingsC1Ev',
                                                                                            '_ZN21QImageEncoderSettingsD1Ev',
                                                                                            '_ZN21QVideoEncoderSettingsC1Ev',
                                                                                            '_ZN21QVideoEncoderSettingsD1Ev',
                                                                                            '_ZN7QCamera13setViewfinderEP12QVideoWidget',
                                                                                            '_ZN7QCamera16availableDevicesEv',
                                                                                            '_ZN7QCamera4stopEv',
                                                                                            '_ZN7QCamera5startEv',
                                                                                            '_ZN7QCameraC1EP7QObject',
                                                                                            '_ZN7QCameraC1ERK10QByteArrayP7QObject',
                                                                                            '_ZNK11QAudioInput10bytesReadyEv',
                                                                                            '_ZNK11QCameraInfo11descriptionEv',
                                                                                            '_ZNK12QAudioFormat10sampleRateEv',
                                                                                            '_ZNK12QAudioFormat10sampleSizeEv',
                                                                                            '_ZNK12QAudioFormat12channelCountEv',
                                                                                            '_ZNK12QAudioOutput10periodSizeEv',
                                                                                            '_ZNK12QAudioOutput5stateEv',
                                                                                            '_ZNK12QAudioOutput9bytesFreeEv',
                                                                                            '_ZNK14QAudioRecorder11audioInputsEv',
                                                                                            '_ZNK14QAudioRecorder17defaultAudioInputEv',
                                                                                            '_ZNK14QMediaRecorder5stateEv',
                                                                                            '_ZNK16QAudioDeviceInfo13nearestFormatERK12QAudioFormat',
                                                                                            '_ZNK16QAudioDeviceInfo15preferredFormatEv',
                                                                                            '_ZNK16QAudioDeviceInfo17isFormatSupportedERK12QAudioFormat',
                                                                                            '_ZNK19QCameraImageCapture22supportedBufferFormatsEv',
                                                                                            '_ZN12QVideoWidgetC1EP7QWidget',
                                                                                            '_ZN10QTcpSocketC1EP7QObject',
                                                                                            '_ZN10QUdpSocket12readDatagramEPcxP12QHostAddressPt',
                                                                                            '_ZN10QUdpSocket13writeDatagramEPKcxRK12QHostAddresst',
                                                                                            '_ZN10QUdpSocketC1EP7QObject',
                                                                                            '_ZN12QHostAddressC1ERK7QString',
                                                                                            '_ZN12QHostAddressC1ERKS_',
                                                                                            '_ZN12QHostAddressC1Ev',
                                                                                            '_ZN12QHostAddressD1Ev',
                                                                                            '_ZN12QLocalServer12removeServerERK7QString',
                                                                                            '_ZN12QLocalServer6listenERK7QString',
                                                                                            '_ZN12QLocalServerC1EP7QObject',
                                                                                            '_ZN12QLocalSocket15connectToServerERK7QString6QFlagsIN9QIODevice12OpenModeFlagEE',
                                                                                            '_ZN12QLocalSocket16waitForConnectedEi',
                                                                                            '_ZN12QLocalSocket19waitForBytesWrittenEi',
                                                                                            '_ZN12QLocalSocket20disconnectFromServerEv',
                                                                                            '_ZN12QLocalSocket5closeEv',
                                                                                            '_ZN12QLocalSocketC1EP7QObject',
                                                                                            '_ZN12QLocalSocketD1Ev',
                                                                                            '_ZN13QNetworkReply16staticMetaObjectE',
                                                                                            '_ZN15QAbstractSocket5abortEv',
                                                                                            '_ZN15QNetworkRequest9setHeaderENS_12KnownHeadersERK8QVariant',
                                                                                            '_ZN15QNetworkRequestC1ERK4QUrl',
                                                                                            '_ZN15QNetworkRequestD1Ev',
                                                                                            '_ZN21QNetworkAccessManager3getERK15QNetworkRequest',
                                                                                            '_ZN21QNetworkAccessManager4postERK15QNetworkRequestRK10QByteArray',
                                                                                            '_ZN21QNetworkAccessManagerC1EP7QObject',
                                                                                            '_ZN9QHostInfoC1ERKS_',
                                                                                            '_ZN9QHostInfoC1Ei',
                                                                                            '_ZN9QHostInfoD1Ev',
                                                                                            '_ZNK10QUdpSocket19hasPendingDatagramsEv',
                                                                                            '_ZNK10QUdpSocket19pendingDatagramSizeEv',
                                                                                            '_ZNK13QNetworkReply5errorEv',
                                                                                            '_ZNK13QNetworkReply9attributeEN15QNetworkRequest9AttributeE',
                                                                                            '_ZNK9QHostInfo5errorEv',
                                                                                            '_ZNK9QHostInfo9addressesEv',
                                                                                            '_ZN10QQmlEngine13addImportPathERK7QString',
                                                                                            '_ZN11QQmlContext18setContextPropertyERK7QStringP7QObject',
                                                                                            '_ZN11QQmlPrivate11qmlregisterENS_16RegistrationTypeEPv',
                                                                                            '_ZN11QQmlPrivate30qdeclarativeelement_destructorEP7QObject',
                                                                                            '_ZN10QQuickView10timerEventEP11QTimerEvent',
                                                                                            '_ZN10QQuickView11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN10QQuickView11qt_metacastEPKc',
                                                                                            '_ZN10QQuickView11resizeEventEP12QResizeEvent',
                                                                                            '_ZN10QQuickView13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN10QQuickView13setResizeModeENS_10ResizeModeE',
                                                                                            '_ZN10QQuickView14mouseMoveEventEP11QMouseEvent',
                                                                                            '_ZN10QQuickView15keyReleaseEventEP9QKeyEvent',
                                                                                            '_ZN10QQuickView15mousePressEventEP11QMouseEvent',
                                                                                            '_ZN10QQuickView16staticMetaObjectE',
                                                                                            '_ZN10QQuickView17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN10QQuickView9setSourceERK4QUrl',
                                                                                            '_ZN10QQuickViewC2EP7QWindow',
                                                                                            '_ZN10QQuickViewD2Ev',
                                                                                            '_ZN12QQuickWindow10wheelEventEP11QWheelEvent',
                                                                                            '_ZN12QQuickWindow11exposeEventEP12QExposeEvent',
                                                                                            '_ZN12QQuickWindow12focusInEventEP11QFocusEvent',
                                                                                            '_ZN12QQuickWindow13focusOutEventEP11QFocusEvent',
                                                                                            '_ZN12QQuickWindow21mouseDoubleClickEventEP11QMouseEvent',
                                                                                            '_ZN12QQuickWindow5eventEP6QEvent',
                                                                                            '_ZN12QQuickWindow8setColorERK6QColor',
                                                                                            '_ZN12QQuickWindow9hideEventEP10QHideEvent',
                                                                                            '_ZN12QQuickWindow9showEventEP10QShowEvent',
                                                                                            '_ZNK10QQuickView11rootContextEv',
                                                                                            '_ZNK10QQuickView6engineEv',
                                                                                            '_ZNK12QQuickWindow11focusObjectEv',
                                                                                            '_ZNK12QQuickWindow14accessibleRootEv',
                                                                                            '_ZN12QWebSettings12setAttributeENS_12WebAttributeEb',
                                                                                            '_ZN12QWebSettings14globalSettingsEv',
                                                                                            '_ZN12QWebSettings17clearIconDatabaseEv',
                                                                                            '_ZN12QWebSettings17clearMemoryCachesEv',
                                                                                            '_ZN8QWebPage23setLinkDelegationPolicyENS_20LinkDelegationPolicyE',
                                                                                            '_ZN8QWebView4loadERK4QUrl',
                                                                                            '_ZN8QWebView6setUrlERK4QUrl',
                                                                                            '_ZN8QWebView7setHtmlERK7QStringRK4QUrl',
                                                                                            '_ZN8QWebViewC1EP7QWidget',
                                                                                            '_ZN9QWebFrame18evaluateJavaScriptERK7QString',
                                                                                            '_ZN9QWebFrame27addToJavaScriptWindowObjectERK7QStringP7QObjectNS_14ValueOwnershipE',
                                                                                            '_ZNK8QWebPage9mainFrameEv',
                                                                                            '_ZNK8QWebView4pageEv',
                                                                                            '_ZNK8QWebView8settingsEv',
                                                                                            '_ZN10QBoxLayout10addSpacingEi',
                                                                                            '_ZN10QBoxLayout10addStretchEi',
                                                                                            '_ZN10QBoxLayout10setSpacingEi',
                                                                                            '_ZN10QBoxLayout10setStretchEii',
                                                                                            '_ZN10QBoxLayout9addLayoutEP7QLayouti',
                                                                                            '_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN10QLCDNumber13setDigitCountEi',
                                                                                            '_ZN10QLCDNumber15setSegmentStyleENS_12SegmentStyleE',
                                                                                            '_ZN10QLCDNumber20setSmallDecimalPointEb',
                                                                                            '_ZN10QLCDNumber7displayEi',
                                                                                            '_ZN10QLCDNumberC1EP7QWidget',
                                                                                            '_ZN10QTableView12setRowHeightEii',
                                                                                            '_ZN10QTableView14setColumnWidthEii',
                                                                                            '_ZN10QTableViewC1EP7QWidget',
                                                                                            '_ZN11QFileDialog15getOpenFileNameEP7QWidgetRK7QStringS4_S4_PS2_6QFlagsINS_6OptionEE',
                                                                                            '_ZN11QGridLayout10setSpacingEi',
                                                                                            '_ZN11QGridLayout9addWidgetEP7QWidgetii6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN11QGridLayoutC1Ev',
                                                                                            '_ZN11QHBoxLayoutC1EP7QWidget',
                                                                                            '_ZN11QHBoxLayoutC1Ev',
                                                                                            '_ZN11QLayoutItem12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN11QLayoutItemD2Ev',
                                                                                            '_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN11QMainWindow11qt_metacastEPKc',
                                                                                            '_ZN11QMainWindow15createPopupMenuEv',
                                                                                            '_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN11QMainWindow16setCentralWidgetEP7QWidget',
                                                                                            '_ZN11QMainWindow16staticMetaObjectE',
                                                                                            '_ZN11QMainWindow5eventEP6QEvent',
                                                                                            '_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN11QMainWindowD2Ev',
                                                                                            '_ZN11QMessageBoxC1ENS_4IconERK7QStringS3_6QFlagsINS_14StandardButtonEEP7QWidgetS4_IN2Qt10WindowTypeEE',
                                                                                            '_ZN11QMessageBoxD1Ev',
                                                                                            '_ZN11QPushButton10paintEventEP11QPaintEvent',
                                                                                            '_ZN11QPushButton10setDefaultEb',
                                                                                            '_ZN11QPushButton11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN11QPushButton11qt_metacastEPKc',
                                                                                            '_ZN11QPushButton12focusInEventEP11QFocusEvent',
                                                                                            '_ZN11QPushButton13focusOutEventEP11QFocusEvent',
                                                                                            '_ZN11QPushButton13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN11QPushButton16staticMetaObjectE',
                                                                                            '_ZN11QPushButton5eventEP6QEvent',
                                                                                            '_ZN11QPushButton7setFlatEb',
                                                                                            '_ZN11QPushButtonC1EP7QWidget',
                                                                                            '_ZN11QPushButtonC2EP7QWidget',
                                                                                            '_ZN11QPushButtonD2Ev',
                                                                                            '_ZN11QSizePolicy14setControlTypeENS_11ControlTypeE',
                                                                                            '_ZN11QSpacerItem10changeSizeEiiN11QSizePolicy6PolicyES1_',
                                                                                            '_ZN11QToolButton12setAutoRaiseEb',
                                                                                            '_ZN11QToolButton12setPopupModeENS_19ToolButtonPopupModeE',
                                                                                            '_ZN11QToolButton7setMenuEP5QMenu',
                                                                                            '_ZN11QToolButtonC1EP7QWidget',
                                                                                            '_ZN11QVBoxLayoutC1EP7QWidget',
                                                                                            '_ZN11QVBoxLayoutC1Ev',
                                                                                            '_ZN12QApplication11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN12QApplication11qt_metacastEPKc',
                                                                                            '_ZN12QApplication13compressEventEP6QEventP7QObjectP14QPostEventList',
                                                                                            '_ZN12QApplication16staticMetaObjectE',
                                                                                            '_ZN12QApplication4execEv',
                                                                                            '_ZN12QApplication4fontEv',
                                                                                            '_ZN12QApplication5eventEP6QEvent',
                                                                                            '_ZN12QApplication6notifyEP7QObjectP6QEvent',
                                                                                            '_ZN12QApplication7desktopEv',
                                                                                            '_ZN12QApplicationC2ERiPPci',
                                                                                            '_ZN12QApplicationD2Ev',
                                                                                            '_ZN12QProgressBar12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN12QProgressBar14setOrientationEN2Qt11OrientationE',
                                                                                            '_ZN12QProgressBar14setTextVisibleEb',
                                                                                            '_ZN12QProgressBar21setInvertedAppearanceEb',
                                                                                            '_ZN12QProgressBar8setRangeEii',
                                                                                            '_ZN12QProgressBar8setValueEi',
                                                                                            '_ZN12QProgressBarC1EP7QWidget',
                                                                                            '_ZN12QRadioButtonC1EP7QWidget',
                                                                                            '_ZN12QTextBrowser20setOpenExternalLinksEb',
                                                                                            '_ZN12QTextBrowserC1EP7QWidget',
                                                                                            '_ZN14QStackedWidget12insertWidgetEiP7QWidget',
                                                                                            '_ZN14QStackedWidget15setCurrentIndexEi',
                                                                                            '_ZN14QStackedWidget9addWidgetEP7QWidget',
                                                                                            '_ZN14QStackedWidgetC1EP7QWidget',
                                                                                            '_ZN15QAbstractButton10setCheckedEb',
                                                                                            '_ZN15QAbstractButton10timerEventEP11QTimerEvent',
                                                                                            '_ZN15QAbstractButton11changeEventEP6QEvent',
                                                                                            '_ZN15QAbstractButton11setIconSizeERK5QSize',
                                                                                            '_ZN15QAbstractButton13checkStateSetEv',
                                                                                            '_ZN15QAbstractButton14nextCheckStateEv',
                                                                                            '_ZN15QAbstractButton15keyReleaseEventEP9QKeyEvent',
                                                                                            '_ZN15QAbstractButton15mousePressEventEP11QMouseEvent',
                                                                                            '_ZN15QAbstractButton17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN15QAbstractButton7setDownEb',
                                                                                            '_ZN15QAbstractButton7setIconERK5QIcon',
                                                                                            '_ZN15QAbstractButton7setTextERK7QString',
                                                                                            '_ZN15QAbstractSlider10setMaximumEi',
                                                                                            '_ZN15QAbstractSlider10setMinimumEi',
                                                                                            '_ZN15QAbstractSlider14setOrientationEN2Qt11OrientationE',
                                                                                            '_ZN15QAbstractSlider8setValueEi',
                                                                                            '_ZN15QSystemTrayIcon10setToolTipERK7QString',
                                                                                            '_ZN15QSystemTrayIcon10setVisibleEb',
                                                                                            '_ZN15QSystemTrayIcon11showMessageERK7QStringS2_NS_11MessageIconEi',
                                                                                            '_ZN15QSystemTrayIcon14setContextMenuEP5QMenu',
                                                                                            '_ZN15QSystemTrayIcon7setIconERK5QIcon',
                                                                                            '_ZN15QSystemTrayIconC1EP7QObject',
                                                                                            '_ZN17QAbstractItemView15setEditTriggersE6QFlagsINS_11EditTriggerEE',
                                                                                            '_ZN17QAbstractItemView20setSelectionBehaviorENS_17SelectionBehaviorE',
                                                                                            '_ZN19QAbstractScrollArea26setVerticalScrollBarPolicyEN2Qt15ScrollBarPolicyE',
                                                                                            '_ZN19QAbstractScrollArea28setHorizontalScrollBarPolicyEN2Qt15ScrollBarPolicyE',
                                                                                            '_ZN25QGraphicsDropShadowEffect13setBlurRadiusEd',
                                                                                            '_ZN25QGraphicsDropShadowEffect8setColorERK6QColor',
                                                                                            '_ZN25QGraphicsDropShadowEffect9setOffsetERK7QPointF',
                                                                                            '_ZN25QGraphicsDropShadowEffectC1EP7QObject',
                                                                                            '_ZN5QDial11setWrappingEb',
                                                                                            '_ZN5QDial17setNotchesVisibleEb',
                                                                                            '_ZN5QDialC1EP7QWidget',
                                                                                            '_ZN5QMenuC1EP7QWidget',
                                                                                            '_ZN6QFrame12setLineWidthEi',
                                                                                            '_ZN6QFrame13setFrameShapeENS_5ShapeE',
                                                                                            '_ZN6QFrame14setFrameShadowENS_6ShadowE',
                                                                                            '_ZN6QFrameC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN6QLabel10paintEventEP11QPaintEvent',
                                                                                            '_ZN6QLabel11changeEventEP6QEvent',
                                                                                            '_ZN6QLabel11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN6QLabel11qt_metacastEPKc',
                                                                                            '_ZN6QLabel11setWordWrapEb',
                                                                                            '_ZN6QLabel12focusInEventEP11QFocusEvent',
                                                                                            '_ZN6QLabel12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN6QLabel13focusOutEventEP11QFocusEvent',
                                                                                            '_ZN6QLabel13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN6QLabel13setTextFormatEN2Qt10TextFormatE',
                                                                                            '_ZN6QLabel14mouseMoveEventEP11QMouseEvent',
                                                                                            '_ZN6QLabel15mousePressEventEP11QMouseEvent',
                                                                                            '_ZN6QLabel16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN6QLabel16staticMetaObjectE',
                                                                                            '_ZN6QLabel17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN6QLabel17setScaledContentsEb',
                                                                                            '_ZN6QLabel18focusNextPrevChildEb',
                                                                                            '_ZN6QLabel20setOpenExternalLinksEb',
                                                                                            '_ZN6QLabel5eventEP6QEvent',
                                                                                            '_ZN6QLabel7setTextERK7QString',
                                                                                            '_ZN6QLabel8setMovieEP6QMovie',
                                                                                            '_ZN6QLabel9setIndentEi',
                                                                                            '_ZN6QLabel9setPixmapERK7QPixmap',
                                                                                            '_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN6QLabelC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN6QLabelD2Ev',
                                                                                            '_ZN7QAction10setVisibleEb',
                                                                                            '_ZN7QAction7setIconERK5QIcon',
                                                                                            '_ZN7QAction7setTextERK7QString',
                                                                                            '_ZN7QActionC1ERK7QStringP7QObject',
                                                                                            '_ZN7QDialog10closeEventEP11QCloseEvent',
                                                                                            '_ZN7QDialog10setVisibleEb',
                                                                                            '_ZN7QDialog11eventFilterEP7QObjectP6QEvent',
                                                                                            '_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QDialog11qt_metacastEPKc',
                                                                                            '_ZN7QDialog11resizeEventEP12QResizeEvent',
                                                                                            '_ZN7QDialog13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN7QDialog16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN7QDialog16staticMetaObjectE',
                                                                                            '_ZN7QDialog4doneEi',
                                                                                            '_ZN7QDialog4execEv',
                                                                                            '_ZN7QDialog4openEv',
                                                                                            '_ZN7QDialog6acceptEv',
                                                                                            '_ZN7QDialog6rejectEv',
                                                                                            '_ZN7QDialog8setModalEb',
                                                                                            '_ZN7QDialog9showEventEP10QShowEvent',
                                                                                            '_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QDialogD2Ev',
                                                                                            '_ZN7QLayout17setSizeConstraintENS_14SizeConstraintE',
                                                                                            '_ZN7QLayout18setContentsMarginsEiiii',
                                                                                            '_ZN7QLayout9setMarginEi',
                                                                                            '_ZN7QSlider15setTickPositionENS_12TickPositionE',
                                                                                            '_ZN7QSliderC1EP7QWidget',
                                                                                            '_ZN7QWidget10adjustSizeEv',
                                                                                            '_ZN7QWidget10closeEventEP11QCloseEvent',
                                                                                            '_ZN7QWidget10enterEventEP6QEvent',
                                                                                            '_ZN7QWidget10leaveEventEP6QEvent',
                                                                                            '_ZN7QWidget10paintEventEP11QPaintEvent',
                                                                                            '_ZN7QWidget10setEnabledEb',
                                                                                            '_ZN7QWidget10setPaletteERK8QPalette',
                                                                                            '_ZN7QWidget10setToolTipERK7QString',
                                                                                            '_ZN7QWidget10setVisibleEb',
                                                                                            '_ZN7QWidget10showNormalEv',
                                                                                            '_ZN7QWidget10wheelEventEP11QWheelEvent',
                                                                                            '_ZN7QWidget11actionEventEP12QActionEvent',
                                                                                            '_ZN7QWidget11changeEventEP6QEvent',
                                                                                            '_ZN7QWidget11nativeEventERK10QByteArrayPvPl',
                                                                                            '_ZN7QWidget11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN7QWidget11qt_metacastEPKc',
                                                                                            '_ZN7QWidget11resizeEventEP12QResizeEvent',
                                                                                            '_ZN7QWidget11setGeometryERK5QRect',
                                                                                            '_ZN7QWidget11tabletEventEP12QTabletEvent',
                                                                                            '_ZN7QWidget12focusInEventEP11QFocusEvent',
                                                                                            '_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb',
                                                                                            '_ZN7QWidget12setFixedSizeERK5QSize',
                                                                                            '_ZN7QWidget12setFixedSizeEii',
                                                                                            '_ZN7QWidget13dragMoveEventEP14QDragMoveEvent',
                                                                                            '_ZN7QWidget13focusOutEventEP11QFocusEvent',
                                                                                            '_ZN7QWidget13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN7QWidget13setFixedWidthEi',
                                                                                            '_ZN7QWidget13setSizePolicyE11QSizePolicy',
                                                                                            '_ZN7QWidget13setStyleSheetERK7QString',
                                                                                            '_ZN7QWidget13setWindowIconERK5QIcon',
                                                                                            '_ZN7QWidget13showMinimizedEv',
                                                                                            '_ZN7QWidget14activateWindowEv',
                                                                                            '_ZN7QWidget14dragEnterEventEP15QDragEnterEvent',
                                                                                            '_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent',
                                                                                            '_ZN7QWidget14mouseMoveEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget14setAcceptDropsEb',
                                                                                            '_ZN7QWidget14setFixedHeightEi',
                                                                                            '_ZN7QWidget14setFocusPolicyEN2Qt11FocusPolicyE',
                                                                                            '_ZN7QWidget14setMaximumSizeEii',
                                                                                            '_ZN7QWidget14setMinimumSizeEii',
                                                                                            '_ZN7QWidget14setWindowFlagsE6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidget14setWindowStateE6QFlagsIN2Qt11WindowStateEE',
                                                                                            '_ZN7QWidget14setWindowTitleERK7QString',
                                                                                            '_ZN7QWidget14showFullScreenEv',
                                                                                            '_ZN7QWidget15keyReleaseEventEP9QKeyEvent',
                                                                                            '_ZN7QWidget15mousePressEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN7QWidget16inputMethodEventEP17QInputMethodEvent',
                                                                                            '_ZN7QWidget16setWindowOpacityEd',
                                                                                            '_ZN7QWidget16staticMetaObjectE',
                                                                                            '_ZN7QWidget17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget17setGraphicsEffectEP15QGraphicsEffect',
                                                                                            '_ZN7QWidget18focusNextPrevChildEb',
                                                                                            '_ZN7QWidget18setLayoutDirectionEN2Qt15LayoutDirectionE',
                                                                                            '_ZN7QWidget20setContextMenuPolicyEN2Qt17ContextMenuPolicyE',
                                                                                            '_ZN7QWidget21createWindowContainerEP7QWindowPS_6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent',
                                                                                            '_ZN7QWidget21setAutoFillBackgroundEb',
                                                                                            '_ZN7QWidget4hideEv',
                                                                                            '_ZN7QWidget4moveERK6QPoint',
                                                                                            '_ZN7QWidget4showEv',
                                                                                            '_ZN7QWidget5closeEv',
                                                                                            '_ZN7QWidget5eventEP6QEvent',
                                                                                            '_ZN7QWidget5lowerEv',
                                                                                            '_ZN7QWidget5raiseEv',
                                                                                            '_ZN7QWidget6resizeERK5QSize',
                                                                                            '_ZN7QWidget6updateEv',
                                                                                            '_ZN7QWidget7repaintEv',
                                                                                            '_ZN7QWidget7setFontERK5QFont',
                                                                                            '_ZN7QWidget7setMaskERK7QBitmap',
                                                                                            '_ZN7QWidget8setFocusEN2Qt11FocusReasonE',
                                                                                            '_ZN7QWidget9addActionEP7QAction',
                                                                                            '_ZN7QWidget9dropEventEP10QDropEvent',
                                                                                            '_ZN7QWidget9hideEventEP10QHideEvent',
                                                                                            '_ZN7QWidget9moveEventEP10QMoveEvent',
                                                                                            '_ZN7QWidget9setCursorERK7QCursor',
                                                                                            '_ZN7QWidget9setLayoutEP7QLayout',
                                                                                            '_ZN7QWidget9setParentEPS_',
                                                                                            '_ZN7QWidget9showEventEP10QShowEvent',
                                                                                            '_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidgetC2EPS_6QFlagsIN2Qt10WindowTypeEE',
                                                                                            '_ZN7QWidgetD2Ev',
                                                                                            '_ZN8QToolTip8showTextERK6QPointRK7QStringP7QWidgetRK5QRecti',
                                                                                            '_ZN9QCheckBoxC1EP7QWidget',
                                                                                            '_ZN9QComboBox11insertItemsEiRK11QStringList',
                                                                                            '_ZN9QComboBox11setEditableEb',
                                                                                            '_ZN9QComboBox14setCurrentTextERK7QString',
                                                                                            '_ZN9QComboBox7setViewEP17QAbstractItemView',
                                                                                            '_ZN9QComboBoxC1EP7QWidget',
                                                                                            '_ZN9QLineEdit10paintEventEP11QPaintEvent',
                                                                                            '_ZN9QLineEdit11changeEventEP6QEvent',
                                                                                            '_ZN9QLineEdit11qt_metacallEN11QMetaObject4CallEiPPv',
                                                                                            '_ZN9QLineEdit11qt_metacastEPKc',
                                                                                            '_ZN9QLineEdit11setReadOnlyEb',
                                                                                            '_ZN9QLineEdit12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN9QLineEdit12setMaxLengthEi',
                                                                                            '_ZN9QLineEdit13dragMoveEventEP14QDragMoveEvent',
                                                                                            '_ZN9QLineEdit13keyPressEventEP9QKeyEvent',
                                                                                            '_ZN9QLineEdit14dragEnterEventEP15QDragEnterEvent',
                                                                                            '_ZN9QLineEdit14dragLeaveEventEP15QDragLeaveEvent',
                                                                                            '_ZN9QLineEdit14mouseMoveEventEP11QMouseEvent',
                                                                                            '_ZN9QLineEdit15mousePressEventEP11QMouseEvent',
                                                                                            '_ZN9QLineEdit16contextMenuEventEP17QContextMenuEvent',
                                                                                            '_ZN9QLineEdit16inputMethodEventEP17QInputMethodEvent',
                                                                                            '_ZN9QLineEdit16staticMetaObjectE',
                                                                                            '_ZN9QLineEdit17mouseReleaseEventEP11QMouseEvent',
                                                                                            '_ZN9QLineEdit18setPlaceholderTextERK7QString',
                                                                                            '_ZN9QLineEdit21mouseDoubleClickEventEP11QMouseEvent',
                                                                                            '_ZN9QLineEdit5eventEP6QEvent',
                                                                                            '_ZN9QLineEdit7setTextERK7QString',
                                                                                            '_ZN9QLineEdit9dropEventEP10QDropEvent',
                                                                                            '_ZN9QLineEditC1EP7QWidget',
                                                                                            '_ZN9QLineEditC2EP7QWidget',
                                                                                            '_ZN9QLineEditD2Ev',
                                                                                            '_ZN9QListViewC1EP7QWidget',
                                                                                            '_ZN9QTextEdit11setReadOnlyEb',
                                                                                            '_ZN9QTextEdit12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE',
                                                                                            '_ZN9QTextEdit13setTextCursorERK11QTextCursor',
                                                                                            '_ZN9QTextEdit7setTextERK7QString',
                                                                                            '_ZN9QTextEditC1EP7QWidget',
                                                                                            '_ZNK10QTableView14verticalHeaderEv',
                                                                                            '_ZNK10QTableView16horizontalHeaderEv',
                                                                                            '_ZNK11QMainWindow13centralWidgetEv',
                                                                                            '_ZNK11QPushButton15minimumSizeHintEv',
                                                                                            '_ZNK11QPushButton8sizeHintEv',
                                                                                            '_ZNK14QDesktopWidget12screenNumberEPK7QWidget',
                                                                                            '_ZNK14QDesktopWidget12screenNumberERK6QPoint',
                                                                                            '_ZNK14QDesktopWidget14screenGeometryEPK7QWidget',
                                                                                            '_ZNK14QDesktopWidget14screenGeometryEi',
                                                                                            '_ZNK14QDesktopWidget17availableGeometryEPK7QWidget',
                                                                                            '_ZNK14QDesktopWidget17availableGeometryEi',
                                                                                            '_ZNK15QAbstractButton9hitButtonERK6QPoint',
                                                                                            '_ZNK15QAbstractButton9isCheckedEv',
                                                                                            '_ZNK6QLabel10metaObjectEv',
                                                                                            '_ZNK6QLabel14heightForWidthEi',
                                                                                            '_ZNK6QLabel15minimumSizeHintEv',
                                                                                            '_ZNK6QLabel8sizeHintEv',
                                                                                            '_ZNK7QDialog15minimumSizeHintEv',
                                                                                            '_ZNK7QDialog8sizeHintEv',
                                                                                            '_ZNK7QWidget10metaObjectEv',
                                                                                            '_ZNK7QWidget10redirectedEP6QPoint',
                                                                                            '_ZNK7QWidget10sizePolicyEv',
                                                                                            '_ZNK7QWidget11initPainterEP8QPainter',
                                                                                            '_ZNK7QWidget11isMinimizedEv',
                                                                                            '_ZNK7QWidget11mapToGlobalERK6QPoint',
                                                                                            '_ZNK7QWidget11mapToParentERK6QPoint',
                                                                                            '_ZNK7QWidget11paintEngineEv',
                                                                                            '_ZNK7QWidget11windowStateEv',
                                                                                            '_ZNK7QWidget11windowTitleEv',
                                                                                            '_ZNK7QWidget13frameGeometryEv',
                                                                                            '_ZNK7QWidget13mapFromGlobalERK6QPoint',
                                                                                            '_ZNK7QWidget13sharedPainterEv',
                                                                                            '_ZNK7QWidget14heightForWidthEi',
                                                                                            '_ZNK7QWidget14isActiveWindowEv',
                                                                                            '_ZNK7QWidget15minimumSizeHintEv',
                                                                                            '_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE',
                                                                                            '_ZNK7QWidget17hasHeightForWidthEv',
                                                                                            '_ZNK7QWidget1xEv',
                                                                                            '_ZNK7QWidget1yEv',
                                                                                            '_ZNK7QWidget3posEv',
                                                                                            '_ZNK7QWidget5mapToEPKS_RK6QPoint',
                                                                                            '_ZNK7QWidget5winIdEv',
                                                                                            '_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE',
                                                                                            '_ZNK7QWidget7childAtERK6QPoint',
                                                                                            '_ZNK7QWidget7devTypeEv',
                                                                                            '_ZNK7QWidget8sizeHintEv',
                                                                                            '_ZNK9QComboBox11currentTextEv',
                                                                                            '_ZNK9QComboBox5countEv',
                                                                                            '_ZNK9QLineEdit14cursorPositionEv',
                                                                                            '_ZNK9QLineEdit15minimumSizeHintEv',
                                                                                            '_ZNK9QLineEdit16inputMethodQueryEN2Qt16InputMethodQueryE',
                                                                                            '_ZNK9QLineEdit4textEv',
                                                                                            '_ZNK9QLineEdit8sizeHintEv',
                                                                                            '_ZNK9QTextEdit10textCursorEv',
                                                                                            '_ZNK9QTextEdit11toPlainTextEv',
                                                                                            '_ZNK9QTextEdit8documentEv',
                                                                                            '_ZTV11QSpacerItem',
                                                                                            '_ZThn8_NK7QWidget10redirectedEP6QPoint',
                                                                                            '_ZThn8_NK7QWidget11initPainterEP8QPainter',
                                                                                            '_ZThn8_NK7QWidget11paintEngineEv',
                                                                                            '_ZThn8_NK7QWidget13sharedPainterEv',
                                                                                            '_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE',
                                                                                            '_ZThn8_NK7QWidget7devTypeEv',
                                                                                            '_ZN11QDomElement12setAttributeERK7QStringS2_',
                                                                                            '_ZN11QDomElement16setAttributeNodeERK8QDomAttr',
                                                                                            '_ZN12QDomDocument10setContentEP9QIODeviceP7QStringPiS4_',
                                                                                            '_ZN12QDomDocument13createElementERK7QString',
                                                                                            '_ZN12QDomDocument14createTextNodeERK7QString',
                                                                                            '_ZN12QDomDocument15createAttributeERK7QString',
                                                                                            '_ZN12QDomDocument27createProcessingInstructionERK7QStringS2_',
                                                                                            '_ZN12QDomDocumentC1Ev',
                                                                                            '_ZN12QDomDocumentD1Ev',
                                                                                            '_ZN12QDomNodeListD1Ev',
                                                                                            '_ZN25QDomProcessingInstructionC1Ev',
                                                                                            '_ZN25QDomProcessingInstructionaSERKS_',
                                                                                            '_ZN8QDomAttr8setValueERK7QString',
                                                                                            '_ZN8QDomNode11appendChildERKS_',
                                                                                            '_ZN8QDomNode11removeChildERKS_',
                                                                                            '_ZN8QDomNodeD1Ev',
                                                                                            '_ZN8QDomNodeD2Ev',
                                                                                            '_ZN8QDomTextC1Ev',
                                                                                            '_ZN8QDomTextaSERKS_',
                                                                                            '_ZNK11QDomElement9attributeERK7QStringS2_',
                                                                                            '_ZNK12QDomDocument15documentElementEv',
                                                                                            '_ZNK12QDomDocument17elementsByTagNameERK7QString',
                                                                                            '_ZNK12QDomNodeList4itemEi',
                                                                                            '_ZNK12QDomNodeList6lengthEv',
                                                                                            '_ZNK8QDomNode4saveER11QTextStreamiNS_14EncodingPolicyE',
                                                                                            '_ZNK8QDomNode9toElementEv',
                                                                                            '_Unwind_Resume',
                                                                                            '__deregister_frame_info',
                                                                                            '__divdi3',
                                                                                            '__moddi3',
                                                                                            '__register_frame_info',
                                                                                            '__udivdi3',
                                                                                            '__umoddi3',
                                                                                            'ChoosePixelFormat',
                                                                                            'DeleteDC',
                                                                                            'DescribePixelFormat',
                                                                                            'GetObjectA',
                                                                                            'SetPixelFormat',
                                                                                            'SwapBuffers',
                                                                                            'ImmDisableIME',
                                                                                            'CloseHandle',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateEventA',
                                                                                            'CreateFileA',
                                                                                            'CreateMutexA',
                                                                                            'CreateNamedPipeA',
                                                                                            'CreateProcessA',
                                                                                            'CreateSemaphoreA',
                                                                                            'CreateThread',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetExitCodeThread',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleHandleW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'GetProcAddress',
                                                                                            'GetStartupInfoA',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetVersionExW',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GlobalLock',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GlobalUnlock',
                                                                                            'InitializeCriticalSection',
                                                                                            'IsBadCodePtr',
                                                                                            'IsBadReadPtr',
                                                                                            'IsDBCSLeadByteEx',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'LoadLibraryW',
                                                                                            'LocalFree',
                                                                                            'Module32FirstW',
                                                                                            'Module32NextW',
                                                                                            'MultiByteToWideChar',
                                                                                            'OpenProcess',
                                                                                            'Process32FirstW',
                                                                                            'Process32NextW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'ReadFile',
                                                                                            'ReleaseMutex',
                                                                                            'ReleaseSemaphore',
                                                                                            'SetDllDirectoryW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SignalObjectAndWait',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'WaitForSingleObject',
                                                                                            'WaitNamedPipeA',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'lstrcpynW',
                                                                                            '__dllonexit',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '__lconv_init',
                                                                                            '__set_app_type',
                                                                                            '__setusermatherr',
                                                                                            '_acmdln',
                                                                                            '_amsg_exit',
                                                                                            '_assert',
                                                                                            '_cexit',
                                                                                            '_close',
                                                                                            '_errno',
                                                                                            '_fmode',
                                                                                            '_getpid',
                                                                                            '_initterm',
                                                                                            '_iob',
                                                                                            '_itoa',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_pipe',
                                                                                            '_read',
                                                                                            '_set_invalid_parameter_handler',
                                                                                            '_setjmp3',
                                                                                            '_snprintf',
                                                                                            '_strdup',
                                                                                            '_time32',
                                                                                            '_unlock',
                                                                                            '_write',
                                                                                            'abort',
                                                                                            'atof',
                                                                                            'atoi',
                                                                                            'calloc',
                                                                                            'ceil',
                                                                                            'cos',
                                                                                            'exit',
                                                                                            'fclose',
                                                                                            'fflush',
                                                                                            'fgetc',
                                                                                            'fgets',
                                                                                            'floor',
                                                                                            'fopen',
                                                                                            'fprintf',
                                                                                            'free',
                                                                                            'fwrite',
                                                                                            'getenv',
                                                                                            'isalnum',
                                                                                            'isalpha',
                                                                                            'isspace',
                                                                                            'longjmp',
                                                                                            'malloc',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            'memset',
                                                                                            'perror',
                                                                                            'printf',
                                                                                            'puts',
                                                                                            'rand',
                                                                                            'realloc',
                                                                                            'signal',
                                                                                            'sin',
                                                                                            'sprintf',
                                                                                            'sqrt',
                                                                                            'strcat',
                                                                                            'strchr',
                                                                                            'strcmp',
                                                                                            'strcpy',
                                                                                            'strcpy_s',
                                                                                            'strerror',
                                                                                            'strlen',
                                                                                            'strncat',
                                                                                            'strncmp',
                                                                                            'strncpy',
                                                                                            'strpbrk',
                                                                                            'strstr',
                                                                                            'strtol',
                                                                                            'strtoul',
                                                                                            'tolower',
                                                                                            'vfprintf',
                                                                                            'wcscmp',
                                                                                            '__mb_cur_max',
                                                                                            '_exit',
                                                                                            '_snwprintf',
                                                                                            '_vsnprintf',
                                                                                            'fputc',
                                                                                            'fwprintf',
                                                                                            'getc',
                                                                                            'islower',
                                                                                            'isupper',
                                                                                            'isxdigit',
                                                                                            'localeconv',
                                                                                            'raise',
                                                                                            'setlocale',
                                                                                            'ungetc',
                                                                                            'wcscpy',
                                                                                            'wcslen',
                                                                                            'wglCreateContext',
                                                                                            'wglDeleteContext',
                                                                                            'wglGetProcAddress',
                                                                                            'wglMakeCurrent',
                                                                                            'wglShareLists',
                                                                                            'GetModuleFileNameExA',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'ShellExecuteW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'AttachThreadInput',
                                                                                            'ChangeDisplaySettingsW',
                                                                                            'ClientToScreen',
                                                                                            'CloseClipboard',
                                                                                            'CreateWindowExA',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'DispatchMessageA',
                                                                                            'EmptyClipboard',
                                                                                            'EnumDisplayMonitors',
                                                                                            'EnumDisplaySettingsW',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'GetFocus',
                                                                                            'GetForegroundWindow',
                                                                                            'GetMessageA',
                                                                                            'GetMonitorInfoA',
                                                                                            'GetWindowLongA',
                                                                                            'GetWindowRect',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'IsWindow',
                                                                                            'LoadCursorA',
                                                                                            'MapVirtualKeyA',
                                                                                            'MapVirtualKeyW',
                                                                                            'MessageBoxW',
                                                                                            'MoveWindow',
                                                                                            'OpenClipboard',
                                                                                            'PostMessageA',
                                                                                            'RegisterClassA',
                                                                                            'RegisterClassExA',
                                                                                            'RegisterHotKey',
                                                                                            'ReleaseDC',
                                                                                            'SendMessageW',
                                                                                            'SetClipboardData',
                                                                                            'SetCursorPos',
                                                                                            'SetWindowLongA',
                                                                                            'SetWindowPos',
                                                                                            'ShowWindow',
                                                                                            'TranslateMessage',
                                                                                            'UnregisterClassA',
                                                                                            'UnregisterHotKey',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'accept',
                                                                                            'bind',
                                                                                            'closesocket',
                                                                                            'connect',
                                                                                            'gethostbyname',
                                                                                            'getsockname',
                                                                                            'htonl',
                                                                                            'htons',
                                                                                            'listen',
                                                                                            'ntohs',
                                                                                            'recv',
                                                                                            'recvfrom',
                                                                                            'select',
                                                                                            'send',
                                                                                            'sendto',
                                                                                            'setsockopt',
                                                                                            'socket',
                                                                                            '_ZNKSs13find_first_ofEPKcjj',
                                                                                            '_ZNKSs17find_first_not_ofEPKcjj',
                                                                                            '_ZNKSs4findEPKcjj',
                                                                                            '_ZNKSs4findEcj',
                                                                                            '_ZNKSs5c_strEv',
                                                                                            '_ZNKSs5rfindEcj',
                                                                                            '_ZNKSs7compareEPKc',
                                                                                            '_ZNKSs7compareERKSs',
                                                                                            '_ZNKSs7compareEjjRKSs',
                                                                                            '_ZNSaIcEC1Ev',
                                                                                            '_ZNSaIcED1Ev',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE12_M_leak_hardEv',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE12_S_constructEjwRKS1_',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE4_Rep10_M_destroyERKS1_',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE4_Rep10_M_disposeERKS1_',
                                                                                            '_ZNSbIwSt11char_traitsIwESaIwEE6resizeEjw',
                                                                                            '_ZNSdD2Ev',
                                                                                            '_ZNSi4readEPci',
                                                                                            '_ZNSi5seekgExSt12_Ios_Seekdir',
                                                                                            '_ZNSi5tellgEv',
                                                                                            '_ZNSo5writeEPKci',
                                                                                            '_ZNSo9_M_insertImEERSoT_',
                                                                                            '_ZNSolsEi',
                                                                                            '_ZNSs12_M_leak_hardEv',
                                                                                            '_ZNSs12_S_constructEjcRKSaIcE',
                                                                                            '_ZNSs15_M_replace_safeEjjPKcj',
                                                                                            '_ZNSs4_Rep10_M_destroyERKSaIcE',
                                                                                            '_ZNSs4_Rep10_M_disposeERKSaIcE',
                                                                                            '_ZNSs4_Rep9_S_createEjjRKSaIcE',
                                                                                            '_ZNSs5clearEv',
                                                                                            '_ZNSs6appendEPKc',
                                                                                            '_ZNSs6appendEPKcj',
                                                                                            '_ZNSs6appendERKSs',
                                                                                            '_ZNSs6appendERKSsjj',
                                                                                            '_ZNSs6appendEjc',
                                                                                            '_ZNSs6assignEPKcj',
                                                                                            '_ZNSs6assignERKSs',
                                                                                            '_ZNSs6resizeEjc',
                                                                                            '_ZNSs7replaceEjjPKcj',
                                                                                            '_ZNSs7reserveEj',
                                                                                            '_ZNSs9_M_mutateEjjj',
                                                                                            '_ZNSsC1EPKcRKSaIcE',
                                                                                            '_ZNSsC1EPKcjRKSaIcE',
                                                                                            '_ZNSsC1ERKSs',
                                                                                            '_ZNSsC1ERKSsjj',
                                                                                            '_ZNSsC1EjcRKSaIcE',
                                                                                            '_ZNSsC1Ev',
                                                                                            '_ZNSsD1Ev',
                                                                                            '_ZNSsaSEPKc',
                                                                                            '_ZNSspLEPKc',
                                                                                            '_ZNSspLERKSs',
                                                                                            '_ZNSt12__basic_fileIcED1Ev',
                                                                                            '_ZNSt13basic_filebufIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode',
                                                                                            '_ZNSt13basic_filebufIcSt11char_traitsIcEE5closeEv',
                                                                                            '_ZNSt13basic_filebufIcSt11char_traitsIcEEC1Ev',
                                                                                            '_ZNSt13basic_filebufIcSt11char_traitsIcEED1Ev',
                                                                                            '_ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev',
                                                                                            '_ZNSt18basic_stringstreamIcSt11char_traitsIcESaIcEED1Ev',
                                                                                            '_ZNSt19basic_ostringstreamIcSt11char_traitsIcESaIcEED1Ev',
                                                                                            '_ZNSt3tr18__detail12__prime_listE',
                                                                                            '_ZNSt6localeC1Ev',
                                                                                            '_ZNSt6localeD1Ev',
                                                                                            '_ZNSt8__detail15_List_node_base11_M_transferEPS0_S1_',
                                                                                            '_ZNSt8__detail15_List_node_base4swapERS0_S1_',
                                                                                            '_ZNSt8__detail15_List_node_base7_M_hookEPS0_',
                                                                                            '_ZNSt8__detail15_List_node_base9_M_unhookEv',
                                                                                            '_ZNSt8ios_base4InitC1Ev',
                                                                                            '_ZNSt8ios_base4InitD1Ev',
                                                                                            '_ZNSt8ios_baseC2Ev',
                                                                                            '_ZNSt8ios_baseD2Ev',
                                                                                            '_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E',
                                                                                            '_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate',
                                                                                            '_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_i',
                                                                                            '_ZSt17__throw_bad_allocv',
                                                                                            '_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base',
                                                                                            '_ZSt18_Rb_tree_incrementPKSt18_Rb_tree_node_base',
                                                                                            '_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base',
                                                                                            '_ZSt19__throw_logic_errorPKc',
                                                                                            '_ZSt20__throw_length_errorPKc',
                                                                                            '_ZSt20__throw_out_of_rangePKc',
                                                                                            '_ZSt24__throw_out_of_range_fmtPKcz',
                                                                                            '_ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_',
                                                                                            '_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_',
                                                                                            '_ZSt4cerr',
                                                                                            '_ZTTSt14basic_ifstreamIcSt11char_traitsIcEE',
                                                                                            '_ZTTSt18basic_stringstreamIcSt11char_traitsIcESaIcEE',
                                                                                            '_ZTTSt19basic_ostringstreamIcSt11char_traitsIcESaIcEE',
                                                                                            '_ZTVN10__cxxabiv117__class_type_infoE',
                                                                                            '_ZTVN10__cxxabiv120__si_class_type_infoE',
                                                                                            '_ZTVN10__cxxabiv121__vmi_class_type_infoE',
                                                                                            '_ZTVSt13basic_filebufIcSt11char_traitsIcEE',
                                                                                            '_ZTVSt14basic_ifstreamIcSt11char_traitsIcEE',
                                                                                            '_ZTVSt15basic_streambufIcSt11char_traitsIcEE',
                                                                                            '_ZTVSt15basic_stringbufIcSt11char_traitsIcESaIcEE',
                                                                                            '_ZTVSt18basic_stringstreamIcSt11char_traitsIcESaIcEE',
                                                                                            '_ZTVSt19basic_ostringstreamIcSt11char_traitsIcESaIcEE',
                                                                                            '_ZTVSt9basic_iosIcSt11char_traitsIcEE',
                                                                                            '_ZdaPv',
                                                                                            '_ZdlPv',
                                                                                            '_Znaj',
                                                                                            '_Znwj',
                                                                                            '__cxa_begin_catch',
                                                                                            '__cxa_end_catch',
                                                                                            '__cxa_guard_abort',
                                                                                            '__cxa_guard_acquire',
                                                                                            '__cxa_guard_release',
                                                                                            '__cxa_pure_virtual',
                                                                                            '__cxa_rethrow',
                                                                                            '__dynamic_cast',
                                                                                            '__gxx_personality_v0',
                                                                                            'firewall_mgr_getprofile',
                                                                                            'glutCreateWindow',
                                                                                            'glutDestroyWindow',
                                                                                            '_ZN6common11CommonUtils12get_instanceEv',
                                                                                            '_ZN6common11CommonUtils14check_file_md5E7QStringS1_',
                                                                                            '_ZN6common11CommonUtils16is_shortcuts_hitE7QStringS1_',
                                                                                            '_ZN6common11CommonUtils18restart_nox_playerE7QString',
                                                                                            '_ZN6common11CommonUtils6crc_32EPKcim',
                                                                                            '_ZN6common11CommonUtils8copy_dirE7QStringS1_b',
                                                                                            '_ZN6common11CommonUtils9copy_fileE7QStringS1_',
                                                                                            '_ZN6common13ExecuteThread16staticMetaObjectE',
                                                                                            '_ZN6common13ExecuteThreadC1EPFmPvES1_',
                                                                                            '_ZN6common13PlatformUtils12get_instanceEv',
                                                                                            '_ZN6common13PlatformUtils12get_platformEv',
                                                                                            '_ZN6common13PlatformUtils13kill_win_taskENS_11WinTaskTypeEi',
                                                                                            '_ZN6common13PlatformUtils14is_exe_runningE7QString',
                                                                                            '_ZN6common13PlatformUtils14win32_kill_exeE7QString',
                                                                                            '_ZN6common13PlatformUtils15create_shortcutERSbIwSt11char_traitsIwESaIwEES5_S5_S5_',
                                                                                            '_ZN6common13PlatformUtils17win32_kill_by_pidEi',
                                                                                            '_ZN6common13PlatformUtils18get_local_cpu_infoEv',
                                                                                            '_ZN6common13PlatformUtils19get_local_disk_infoEv',
                                                                                            '_ZN6common13PlatformUtils19get_local_disk_sizeEv',
                                                                                            '_ZN6common13PlatformUtils20get_nox_running_taskEv',
                                                                                            '_ZN6common13PlatformUtils20run_cmd_with_timeoutE7QStringiPiPN8QProcess12ProcessErrorE',
                                                                                            '_ZN6common13PlatformUtils21empty_exe_working_setE7QStringb',
                                                                                            '_ZN6common13PlatformUtils21get_display_card_infoER11QStringList',
                                                                                            '_ZN6common13PlatformUtils21get_local_mac_addressEv',
                                                                                            '_ZN6common13PlatformUtils21get_local_memory_infoEv',
                                                                                            '_ZN6common13PlatformUtils21get_running_task_pidsE7QString',
                                                                                            '_ZN6common13PlatformUtils22execute_with_privilegeEPwS1_b',
                                                                                            '_ZN6common13PlatformUtils23is_usb_driver_installedEv',
                                                                                            '_ZN6common13PlatformUtils28is_run_with_independent_cardE7QStringS1_',
                                                                                            '_ZN6common13PlatformUtils6is_x64ERb',
                                                                                            '_ZN6common14CommonConstant13NOX_VM_MANAGEE',
                                                                                            '_ZN6common14CommonConstant15APP_MESSAGE_RUNE',
                                                                                            '_ZN6common14CommonConstant15DEFAULT_VM_NAMEE',
                                                                                            '_ZN6common14CommonConstant16APP_MESSAGE_QUITE',
                                                                                            '_ZN6common14CommonConstant19APP_MESSAGE_INSTALLE',
                                                                                            '_ZN6common14CommonConstant21APP_MESSAGE_BOSS_COMEE',
                                                                                            '_ZN6common14CommonConstant21APP_MESSAGE_UNINSTALLE',
                                                                                            '_ZN6common14CommonConstant21DEFAULT_VM_NAME_ALIASE',
                                                                                            '_ZN6common14CommonConstant23APP_MESSAGE_APP_CONTROLE',
                                                                                            '_ZN6common14CommonConstant24APP_MESSAGE_CHECK_STATUSE',
                                                                                            '_ZN6common14CommonConstant26APP_MESSAGE_KEYBIND_IMPORTE',
                                                                                            '_ZN6common14CommonConstant28APP_MESSAGE_CREATE_SNAP_SHOTE',
                                                                                            '_ZN6common14CommonConstant34APP_MESSAGE_INSTALL_PACKAGE_BIGNOXE',
                                                                                            '_ZN6common14CommonConstant40APP_MESSAGE_RUN_PACKAGE_WITHOUT_ACTIVITYE',
                                                                                            '_ZN6common14CommonConstant7NOX_EXEE',
                                                                                            '_ZN6common8VMClient10restore_vmE7QStringRS1_',
                                                                                            '_ZN6common8VMClient10set_vm_memE7QStringi',
                                                                                            '_ZN6common8VMClient11repair_vboxE7QString',
                                                                                            '_ZN6common8VMClient11shutdown_vmE7QString',
                                                                                            '_ZN6common8VMClient11stop_vm_allEv',
                                                                                            '_ZN6common8VMClient12check_vm_vdiE7QStringS1_S1_S1_S1_S1_Ri',
                                                                                            '_ZN6common8VMClient12clear_vm_envE7QString',
                                                                                            '_ZN6common8VMClient12get_instanceEv',
                                                                                            '_ZN6common8VMClient12get_vm_stateE7QStringR16VB_MACHINE_STATE',
                                                                                            '_ZN6common8VMClient12setup_vm_supEv',
                                                                                            '_ZN6common8VMClient13attach_vm_usbE7QStringPKw',
                                                                                            '_ZN6common8VMClient13detach_vm_usbE7QStringPKw',
                                                                                            '_ZN6common8VMClient13update_vm_cfgE7QStringS1_',
                                                                                            '_ZN6common8VMClient14set_vm_use_cmdEb',
                                                                                            '_ZN6common8VMClient15delete_vm_filesE7QStringS1_',
                                                                                            '_ZN6common8VMClient15get_running_vmsER11QStringList',
                                                                                            '_ZN6common8VMClient15get_vm_propertyE7QStringRS1_',
                                                                                            '_ZN6common8VMClient15repair_vbox_comE7QString',
                                                                                            '_ZN6common8VMClient16delete_snap_shotE7QString',
                                                                                            '_ZN6common8VMClient16preimport_vm_vdiE7QStringS1_S1_S1_S1_',
                                                                                            '_ZN6common8VMClient17compress_data_vdiE7QStringS1_',
                                                                                            '_ZN6common8VMClient17get_app_run_adminE7QString',
                                                                                            '_ZN6common8VMClient17get_usb_host_listEPP13USBDeviceItemPi',
                                                                                            '_ZN6common8VMClient17set_app_run_adminE7QString',
                                                                                            '_ZN6common8VMClient17set_vm_audio_cardE7QStringb',
                                                                                            '_ZN6common8VMClient17set_vm_cpu_numberE7QStringi',
                                                                                            '_ZN6common8VMClient17set_vm_extra_dataE7QStringS1_S1_',
                                                                                            '_ZN6common8VMClient17set_vm_resolutionE7QStringS1_S1_',
                                                                                            '_ZN6common8VMClient17start_vm_headlessE7QStringRi',
                                                                                            '_ZN6common8VMClient18free_usb_host_listEP13USBDeviceItem',
                                                                                            '_ZN6common8VMClient19add_forwarding_portE7QStringS1_S1_S1_S1_',
                                                                                            '_ZN6common8VMClient20is_valid_nox_vm_nameE7QString',
                                                                                            '_ZN6common8VMClient21add_local_sharefolderE7QStringS1_S1_',
                                                                                            '_ZN6common8VMClient21set_vm_geust_propertyE7QStringS1_S1_',
                                                                                            '_ZN6common8VMClient21set_vm_graphic_memoryE7QStringi',
                                                                                            '_ZN6common8VMClient22check_snap_shot_enableE7QString',
                                                                                            '_ZN6common8VMClient22delete_forwarding_portE7QStringS1_',
                                                                                            '_ZN6common8VMClient22get_compress_file_nameE7QStringRl',
                                                                                            '_ZN6common8VMClient23get_forwarding_port_mapE7QStringR4QMapIS1_S1_E',
                                                                                            '_ZN6common8VMClient4initE7QStringS1_Ri',
                                                                                            '_ZN6common8VMClient7find_vmE7QStringRbS1_',
                                                                                            '_ZN6common8VMClient7stop_vmE7QString',
                                                                                            '_ZN6common8VMClient8check_vtEv',
                                                                                            '_ZN6common8VMClient9backup_vmE7QStringRS1_',
                                                                                            '_ZN6common8VMClient9remove_vmE7QStringS1_',
                                                                                            '_ZN6common8VMClientD1Ev',
                                                                                            '_ZNK6common11CommonUtils15get_uuid_stringEv',
                                                                                            'create_host_socket_server',
                                                                                            'open_socket',
                                                                                            'open_socket_client',
                                                                                            'open_socket_for_udp',
                                                                                            'open_socket_timeout',
                                                                                            'wait_for_data_timeout',
                                                                                            'write_socket',
                                                                                            '_ZN6Log4Qt20PropertyConfigurator9configureERK7QString',
                                                                                            '_ZN6Log4Qt6Logger10rootLoggerEv',
                                                                                            '_ZN6Log4Qt6Logger6loggerEPKc',
                                                                                            '_ZNK6Log4Qt6Logger12isEnabledForENS_5LevelE',
                                                                                            '_ZNK6Log4Qt6Logger9forcedLogENS_5LevelERK7QString'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 27,
                                                                      'NumberOfImportFunctions': 1642,
                                                                      'NumberOfSections': 12,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 155036,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 11264,
                                                                                       '.edata\x00\x00': 6144,
                                                                                       '.eh_fram': 563200,
                                                                                       '.idata\x00\x00': 79360,
                                                                                       '.rdata\x00\x00': 410112,
                                                                                       '.reloc\x00\x00': 164352,
                                                                                       '.rsrc\x00\x00\x00': 155136,
                                                                                       '.text\x00\x00\x00': 4136448,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.vmp0\x00\x00\x00': 514048},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/f07e7d10a2782c99dfb3efd8a94bf5de5fde01f1d77bc9f3aaa43426556dbac5'},
 'f0af778eb77be0cdc4d480fa8b4fa095e725d26efac9bb6660be788a64dac605': {'AddressOfEntryPoint': 4988,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2644,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/f0af778eb77be0cdc4d480fa8b4fa095e725d26efac9bb6660be788a64dac605'},
 'f0c1fc7453ceb39969d88f537adf2d6dc048124568c42637062b4f148b7c17f1': {'AddressOfEntryPoint': 10721,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'GetACP',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects'},
                                                                      'ImportedFunctions': ['_lclose',
                                                                                            'GetModuleFileNameA',
                                                                                            '_lread',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            '_lwrite',
                                                                                            '_lcreat',
                                                                                            'CreateDirectoryA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'lstrcatA',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetFileAttributesA',
                                                                                            'RemoveDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'lstrlenA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetLastError',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'MoveFileExA',
                                                                                            'Sleep',
                                                                                            'GetStringTypeW',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'HeapSize',
                                                                                            'lstrcpyA',
                                                                                            'GetTempPathA',
                                                                                            'CompareStringA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetCommandLineA',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'HeapCreate',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'wsprintfA',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'MessageBoxA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'ShellExecuteExA'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 90,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 185076,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 12288,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 185344,
                                                                                       '.text\x00\x00\x00': 22528},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f0c1fc7453ceb39969d88f537adf2d6dc048124568c42637062b4f148b7c17f1'},
 'f0e46c0f9b2991fa6d187c6b2bed28139c67804cc58cc45c77f06a6f217cb21a': {'AddressOfEntryPoint': 163358,
                                                                      'DebugRVA': 238832,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 237568,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'QueryServiceConfigW',
                                                                                      'CRYPT32.dll': 'CertGetCertificateContextProperty',
                                                                                      'GDI32.dll': 'StretchBlt',
                                                                                      'KERNEL32.dll': 'CopyFileW',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'CreateWindowExW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WININET.dll': 'InternetOpenW',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetUserNameW',
                                                                                            'InitiateSystemShutdownExW',
                                                                                            'CreateWellKnownSid',
                                                                                            'InitializeAcl',
                                                                                            'SetEntriesInAclW',
                                                                                            'DecryptFileW',
                                                                                            'ChangeServiceConfigW',
                                                                                            'ControlService',
                                                                                            'CloseServiceHandle',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptCreateHash',
                                                                                            'CryptHashData',
                                                                                            'CryptGetHashParam',
                                                                                            'CryptDestroyHash',
                                                                                            'CryptReleaseContext',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegSetValueExW',
                                                                                            'SetEntriesInAclA',
                                                                                            'SetSecurityDescriptorGroup',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetTokenInformation',
                                                                                            'CheckTokenMembership',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'FreeSid',
                                                                                            'LookupAccountNameW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'QueryServiceConfigW',
                                                                                            'GetMessageW',
                                                                                            'PeekMessageW',
                                                                                            'PostMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'SetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'UnregisterClassW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMonitorInfoW',
                                                                                            'IsDialogMessageW',
                                                                                            'MessageBoxW',
                                                                                            'GetWindowLongW',
                                                                                            'RegisterClassW',
                                                                                            'IsWindow',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'WaitForInputIdle',
                                                                                            'LoadCursorW',
                                                                                            'LoadBitmapW',
                                                                                            'GetCursorPos',
                                                                                            'MonitorFromPoint',
                                                                                            'CreateWindowExW',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'DeleteObject',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleDC',
                                                                                            'SelectObject',
                                                                                            'DeleteDC',
                                                                                            'StretchBlt',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CommandLineToArgvW',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'ReadFile',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetProcessId',
                                                                                            'WriteFile',
                                                                                            'ConnectNamedPipe',
                                                                                            'SetNamedPipeHandleState',
                                                                                            'lstrlenW',
                                                                                            'CompareStringW',
                                                                                            'LocalFree',
                                                                                            'CreateNamedPipeW',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenProcess',
                                                                                            'lstrlenA',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetComputerNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'RtlUnwind',
                                                                                            'GetDateFormatW',
                                                                                            'GetSystemTime',
                                                                                            'InterlockedExchange',
                                                                                            'LoadLibraryW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'ProcessIdToSessionId',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'GetStringTypeW',
                                                                                            'GetModuleHandleW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'CreateProcessW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetExitCodeProcess',
                                                                                            'DuplicateHandle',
                                                                                            'SetThreadExecutionState',
                                                                                            'CopyFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'CreateMutexW',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'CreateFileA',
                                                                                            'CompareStringA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'DeleteFileW',
                                                                                            'GetThreadLocale',
                                                                                            'GetVersionExW',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'ReleaseMutex',
                                                                                            'GetLastError',
                                                                                            'Sleep',
                                                                                            'TlsGetValue',
                                                                                            'CloseHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetACP',
                                                                                            'GetCPInfo',
                                                                                            'RaiseException',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'SetFilePointer',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'TlsFree',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapSetInformation',
                                                                                            'GetOEMCP',
                                                                                            'SetFileAttributesW',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringW',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetStdHandle',
                                                                                            'WriteConsoleW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocalTime',
                                                                                            'FormatMessageW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleA',
                                                                                            'GetFileSizeEx',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'HeapCreate',
                                                                                            'SetLastError',
                                                                                            'EncodePointer',
                                                                                            'GetFileType',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'SetHandleCount',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'MoveFileExW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetStdHandle',
                                                                                            'DecodePointer',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'ExitProcess',
                                                                                            'CopyFileW',
                                                                                            'CryptHashPublicKeyInfo',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'UuidCreate',
                                                                                            'InternetCrackUrlW',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetCloseHandle',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetErrorDlg',
                                                                                            'InternetReadFile',
                                                                                            'HttpSendRequestW',
                                                                                            'InternetSetOptionW',
                                                                                            'InternetConnectW',
                                                                                            'InternetOpenW',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WinVerifyTrust',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 252,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 14308,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 105472,
                                                                                       '.reloc\x00\x00': 17408,
                                                                                       '.rsrc\x00\x00\x00': 14336,
                                                                                       '.text\x00\x00\x00': 232448,
                                                                                       '.tls\x00\x00\x00\x00': 512,
                                                                                       '.wixburn': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f0e46c0f9b2991fa6d187c6b2bed28139c67804cc58cc45c77f06a6f217cb21a'},
 'f0e86fe049a980b9683cbdbbc48cb2eac8d749fac0f0246cddcaf3b7946da81d': {'AddressOfEntryPoint': 111171,
                                                                      'DebugRVA': 4128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 151552,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueExW',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'CRYPT32.dll': 'CertVerifyCertificateChainPolicy',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'SizeofResource',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'SHLWAPI.dll': 'StrChrW',
                                                                                      'USER32.dll': 'GetDlgCtrlID',
                                                                                      'UxTheme.dll': 'IsThemeActive',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteValueW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegEnumValueW',
                                                                                            'CloseServiceHandle',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'RegCreateKeyExW',
                                                                                            'QueryServiceStatusEx',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'OpenProcessToken',
                                                                                            'DuplicateTokenEx',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegSetValueExW',
                                                                                            'EnumUILanguagesW',
                                                                                            'GetProcAddress',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'CreateThread',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetTickCount64',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetLocaleInfoEx',
                                                                                            'MoveFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'FindFirstFileW',
                                                                                            'FindResourceExW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'CreateDirectoryW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetVersionExW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSection',
                                                                                            'Sleep',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetExitCodeThread',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'LocalFree',
                                                                                            'OpenProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'MoveFileExW',
                                                                                            'CopyFileW',
                                                                                            'GetTempPathW',
                                                                                            'SetProcessShutdownParameters',
                                                                                            'SetFileAttributesW',
                                                                                            'EnumResourceNamesW',
                                                                                            'LCIDToLocaleName',
                                                                                            'LoadResource',
                                                                                            'WriteFile',
                                                                                            'GetLocaleInfoW',
                                                                                            'LeaveCriticalSection',
                                                                                            'CreateFileW',
                                                                                            'LockResource',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'MulDiv',
                                                                                            'RaiseException',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetSystemInfo',
                                                                                            'GetLastError',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetModuleFileNameW',
                                                                                            'TerminateProcess',
                                                                                            'FormatMessageW',
                                                                                            'GetCommandLineW',
                                                                                            'GetStartupInfoA',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'LocalAlloc',
                                                                                            'lstrcmpiA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'MapViewOfFile',
                                                                                            'IsWow64Process',
                                                                                            'CreateFileMappingW',
                                                                                            'ResumeThread',
                                                                                            'SetFilePointer',
                                                                                            'FlushFileBuffers',
                                                                                            'GetLocalTime',
                                                                                            'CreateMutexW',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryW',
                                                                                            'GetModuleHandleW',
                                                                                            'OutputDebugStringW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetCurrentProcess',
                                                                                            'FreeLibrary',
                                                                                            'SizeofResource',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'SetTextColor',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'ExitWindowsEx',
                                                                                            'GetWindowRect',
                                                                                            'SetForegroundWindow',
                                                                                            'OffsetRect',
                                                                                            'BringWindowToTop',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetDesktopWindow',
                                                                                            'SetWindowPos',
                                                                                            'CopyRect',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'DestroyWindow',
                                                                                            'SetTimer',
                                                                                            'GetMessageW',
                                                                                            'PostQuitMessage',
                                                                                            'LoadImageW',
                                                                                            'PostMessageW',
                                                                                            'KillTimer',
                                                                                            'TranslateMessage',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadIconW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'SendDlgItemMessageW',
                                                                                            'ShowWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'CreateDialogParamW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SendMessageW',
                                                                                            'UpdateWindow',
                                                                                            'DispatchMessageW',
                                                                                            'CharNextW',
                                                                                            'FindWindowW',
                                                                                            'LoadStringW',
                                                                                            'GetDlgCtrlID',
                                                                                            'swprintf_s',
                                                                                            'iswalpha',
                                                                                            '_except_handler4_common',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_itow_s',
                                                                                            'swscanf_s',
                                                                                            'wcschr',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '_wcsicmp',
                                                                                            'iswdigit',
                                                                                            '_wtol',
                                                                                            'memset',
                                                                                            'InitCommonControlsEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysReAllocString',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'SHGetFolderPathW',
                                                                                            'SHCreateDirectoryExW',
                                                                                            'CommandLineToArgvW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathIsFileSpecW',
                                                                                            'StrCmpNIW',
                                                                                            'PathStripPathW',
                                                                                            'SHRegGetUSValueW',
                                                                                            'SHDeleteKeyW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathFileExistsW',
                                                                                            'PathIsDirectoryW',
                                                                                            'SHGetValueW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'PathIsRelativeW',
                                                                                            'SHRegSetUSValueW',
                                                                                            'StrChrW',
                                                                                            'IsThemeActive',
                                                                                            'CertVerifyCertificateChainPolicy',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WinVerifyTrust'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 224,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 29578492,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 6656,
                                                                                       '.reloc\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 29578752,
                                                                                       '.text\x00\x00\x00': 110080},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f0e86fe049a980b9683cbdbbc48cb2eac8d749fac0f0246cddcaf3b7946da81d'},
 'f0f1e00ebb34ae2ff99f50fd6e71413bb3ca771adffc0aa0018663d98925512f': {'AddressOfEntryPoint': 18368,
                                                                      'DebugRVA': 4400,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 22848,
                                                                      'ExportSize': 8744,
                                                                      'IATRVA': 36864,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'UnregisterTraceGuids',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'DefWindowProcW',
                                                                                      'WsmSvc.DLL': '?Free@WSManMemory@@SGXPAXH@Z',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoRegisterClassObject'},
                                                                      'ImportedFunctions': ['DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'UnregisterClassW',
                                                                                            'DestroyWindow',
                                                                                            'DeleteMenu',
                                                                                            'GetSystemMenu',
                                                                                            'UpdateWindow',
                                                                                            'ShowWindow',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'PostMessageW',
                                                                                            'LoadCursorW',
                                                                                            'LoadIconW',
                                                                                            'DefWindowProcW',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            'memmove_s',
                                                                                            '_except_handler4_common',
                                                                                            'memset',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'TerminateProcess',
                                                                                            'GetLastError',
                                                                                            'GetVersionExW',
                                                                                            'HeapSetInformation',
                                                                                            'InitializeCriticalSection',
                                                                                            'CreateEventW',
                                                                                            'DeleteCriticalSection',
                                                                                            'SetEvent',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'OutputDebugStringA',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'CreateProvHost',
                                                                                            '??1CWSManCriticalSection@@QAE@XZ',
                                                                                            '?WSManError@@YGXPBGK0KPAVIRequestContext@@@Z',
                                                                                            '?Alloc@WSManMemory@@SGPAXIHW4_NitsFaultMode@@@Z',
                                                                                            '?Free@WSManMemory@@SGXPAXH@Z'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 80,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1792,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 27648},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f0f1e00ebb34ae2ff99f50fd6e71413bb3ca771adffc0aa0018663d98925512f'},
 'f0f509144a750e12bc0e663ccabd72fbe6eddef68258825dfadb96da5c656e46': {'AddressOfEntryPoint': 12991,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpynA',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 97256,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 97280,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f0f509144a750e12bc0e663ccabd72fbe6eddef68258825dfadb96da5c656e46'},
 'f0f52edc9bac6ced10a096e357a12424cabcf1ad9afd370ca699b8725f8ecc8f': {'AddressOfEntryPoint': 27702,
                                                                      'DebugRVA': 565744,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 565248,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentDirectoryW',
                                                                                      'RPCRT4.dll': 'UuidCreate'},
                                                                      'ImportedFunctions': ['GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetVersion',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'GetLastError',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'WideCharToMultiByte',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetProcessHeap',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleFileNameW',
                                                                                            'WriteFile',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'RtlUnwind',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetStringTypeW',
                                                                                            'CloseHandle',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'Sleep',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'HeapAlloc',
                                                                                            'RaiseException',
                                                                                            'OutputDebugStringW',
                                                                                            'CreateFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'HeapReAlloc',
                                                                                            'ReadFile',
                                                                                            'ReadConsoleW',
                                                                                            'LCMapStringW',
                                                                                            'GetLocaleInfoW',
                                                                                            'IsValidLocale',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesW',
                                                                                            'SetStdHandle',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointerEx',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetFileAttributesW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'DeleteFileW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileMappingW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetDriveTypeW',
                                                                                            'SetFilePointer',
                                                                                            'MapViewOfFileEx',
                                                                                            'FlushViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetSystemInfo',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'UuidCreate'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 87,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1832,
                                                                      'SectionNames': {'.data\x00\x00\x00': 11264,
                                                                                       '.rdata\x00\x00': 93696,
                                                                                       '.reloc\x00\x00': 31744,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 558080},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f0f52edc9bac6ced10a096e357a12424cabcf1ad9afd370ca699b8725f8ecc8f'},
 'f0facfa3e10d4cfbec558fcd943ac41e386b34b9fc16082a2dea1a88e794ecfa': {'AddressOfEntryPoint': 12860,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetWindowsDirectoryA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'SetFileTime',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 304528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 304640,
                                                                                       '.text\x00\x00\x00': 23552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f0facfa3e10d4cfbec558fcd943ac41e386b34b9fc16082a2dea1a88e794ecfa'},
 'f13bd7ae3ef9cad75f1a3de497d762f2096f10d4d3620bda9a838fef578ba53d': {'AddressOfEntryPoint': 24208,
                                                                      'DebugRVA': 11056,
                                                                      'DebugSize': 56,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'RPCRT4.dll': 'RpcStringBindingComposeA',
                                                                                      'msvcrt.dll': 'strtoul',
                                                                                      'ntdll.dll': 'RtlIntegerToUnicodeString'},
                                                                      'ImportedFunctions': ['HeapSetInformation',
                                                                                            'UnmapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'MapViewOfFileEx',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'strncmp',
                                                                                            '__iob_func',
                                                                                            'strchr',
                                                                                            'atoi',
                                                                                            '_strcmpi',
                                                                                            'printf',
                                                                                            'vfprintf',
                                                                                            'memcpy',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_callnewh',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'exit',
                                                                                            'strtoul',
                                                                                            'NdrClientCall2',
                                                                                            'RpcBindingSetAuthInfoA',
                                                                                            'RpcStringFreeA',
                                                                                            'I_RpcExceptionFilter',
                                                                                            'RpcBindingFromStringBindingA',
                                                                                            'RpcBindingFree',
                                                                                            'RpcStringBindingComposeA',
                                                                                            'NtOpenSection',
                                                                                            'RtlInitUnicodeString',
                                                                                            'DbgPrint',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlIntegerToUnicodeString'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 55,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 10,
                                                                      'ResSize': 2928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 22528},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f13bd7ae3ef9cad75f1a3de497d762f2096f10d4d3620bda9a838fef578ba53d'},
 'f170ae5b215e5b241b1b021d1a52278e3e50312ab5ee3e0fc019abaaa37956f1': {'AddressOfEntryPoint': 42488,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'CloseHandle',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CharPrevA'},
                                                                      'ImportedFunctions': ['DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'WideCharToMultiByte',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineA',
                                                                                            'WriteFile',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'RtlUnwind',
                                                                                            'ReadFile',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'GetFileSize',
                                                                                            'GetSystemTime',
                                                                                            'GetFileType',
                                                                                            'ExitProcess',
                                                                                            'CreateFileA',
                                                                                            'CloseHandle',
                                                                                            'MessageBoxA',
                                                                                            'VariantChangeTypeEx',
                                                                                            'VariantCopyInd',
                                                                                            'VariantClear',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'WriteFile',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'Sleep',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryA',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetVersionExA',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineA',
                                                                                            'GetACP',
                                                                                            'InterlockedExchange',
                                                                                            'FormatMessageA',
                                                                                            'FindResourceA',
                                                                                            'DeleteFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CloseHandle',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxA',
                                                                                            'LoadStringA',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateWindowExA',
                                                                                            'CallWindowProcA',
                                                                                            'CharPrevA',
                                                                                            'InitCommonControls',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 96,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 1,
                                                                      'ResSize': 54668,
                                                                      'SectionNames': {'.idata\x00\x00': 2560,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 0,
                                                                                       '.rsrc\x00\x00\x00': 54784,
                                                                                       '.tls\x00\x00\x00\x00': 0,
                                                                                       'BSS\x00\x00\x00\x00\x00': 0,
                                                                                       'CODE\x00\x00\x00\x00': 40448,
                                                                                       'DATA\x00\x00\x00\x00': 1024},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f170ae5b215e5b241b1b021d1a52278e3e50312ab5ee3e0fc019abaaa37956f1'},
 'f18d3fcc556b58a9370f33b94cb64c8980e49d0376eddf4a3a52a30a92ff7fdf': {'AddressOfEntryPoint': 1173632,
                                                                      'DebugRVA': 4256,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1191936,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'AEPIC.dll': 'PicFreeFileInfo',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoInitializeEx',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileAttributesW',
                                                                                      'api-ms-win-core-file-l2-1-1.dll': 'MoveFileExW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapReAlloc',
                                                                                      'api-ms-win-core-kernel32-legacy-l1-1-1.dll': 'GetSystemWow64DirectoryW',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleW',
                                                                                      'api-ms-win-core-memory-l1-1-2.dll': 'MapViewOfFile',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchCombine',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegEnumKeyExW',
                                                                                      'api-ms-win-core-rtlsupport-l1-2-0.dll': 'RtlVirtualUnwind',
                                                                                      'api-ms-win-core-shlwapi-legacy-l1-1-0.dll': 'PathStripPathW',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'WideCharToMultiByte',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-core-winrt-l1-1-0.dll': 'RoActivateInstance',
                                                                                      'api-ms-win-core-winrt-string-l1-1-0.dll': 'WindowsCreateStringReference',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'SetSecurityDescriptorDacl',
                                                                                      'api-ms-win-security-provider-l1-1-0.dll': 'SetEntriesInAclW',
                                                                                      'apphelp.dll': 'ApphelpDebugPrintf',
                                                                                      'mscoree.dll': 'CLRCreateInstance',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlGUIDFromString'},
                                                                      'ImportedFunctions': ['_strdup',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            'wcschr',
                                                                                            '_itow_s',
                                                                                            '_wsplitpath_s',
                                                                                            'towlower',
                                                                                            'wcstoul',
                                                                                            '_wcsicmp',
                                                                                            '__C_specific_handler',
                                                                                            'free',
                                                                                            'bsearch_s',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            'swscanf_s',
                                                                                            'wcstombs_s',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_ui64toa_s',
                                                                                            'strncpy_s',
                                                                                            'strrchr',
                                                                                            '_cexit',
                                                                                            '_strrev',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_wcslwr',
                                                                                            'memcpy',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_vsnprintf',
                                                                                            'qsort_s',
                                                                                            '_wcsnicmp',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            'wcsncmp',
                                                                                            '_wcsrev',
                                                                                            '_vsnwprintf',
                                                                                            '_XcptFilter',
                                                                                            '_stricmp',
                                                                                            '_wfullpath',
                                                                                            'strchr',
                                                                                            'memset',
                                                                                            'SysStringLen',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantClear',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CreateMutexW',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'Sleep',
                                                                                            'HeapSetInformation',
                                                                                            'HeapReAlloc',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetTickCount',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetLastError',
                                                                                            'RaiseException',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlValidateHeap',
                                                                                            'RtlSizeHeap',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlFreeSid',
                                                                                            'RtlCheckTokenMembership',
                                                                                            'EtwTraceMessage',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'RtlCharToInteger',
                                                                                            'RtlGetNativeSystemInformation',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'EtwEventWriteNoRegistration',
                                                                                            'RtlGUIDFromString',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'RoUninitialize',
                                                                                            'RoInitialize',
                                                                                            'RoActivateInstance',
                                                                                            'WindowsCreateString',
                                                                                            'WindowsDeleteString',
                                                                                            'WindowsGetStringRawBuffer',
                                                                                            'WindowsCreateStringReference',
                                                                                            'CreateFileW',
                                                                                            'GetFileAttributesExW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FindClose',
                                                                                            'GetFileSizeEx',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'GetFileAttributesW',
                                                                                            'PathCchCombine',
                                                                                            'UnmapViewOfFile',
                                                                                            'VirtualQuery',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'CloseHandle',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'PathFindExtensionW',
                                                                                            'PathRemoveBackslashW',
                                                                                            'PathFindExtensionA',
                                                                                            'PathStripPathW',
                                                                                            'LocalFree',
                                                                                            'CLRCreateInstance',
                                                                                            'PicRetrieveFileInfo',
                                                                                            'PicRetrieveFileInfoAppx',
                                                                                            'PicFreeFileInfo',
                                                                                            'ApphelpDebugPrintf',
                                                                                            'RegLoadKeyW',
                                                                                            'RegSetKeySecurity',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegUnLoadKeyW',
                                                                                            'RegLoadAppKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'MoveFileExW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetEntriesInAclW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 29,
                                                                      'NumberOfImportFunctions': 140,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2152,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 15360,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 1177600},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/f18d3fcc556b58a9370f33b94cb64c8980e49d0376eddf4a3a52a30a92ff7fdf'},
 'f1c3b48b2579225f3cba19a3d8d26e71038647771981801348c9bed3348f4542': {'AddressOfEntryPoint': 93360,
                                                                      'DebugRVA': 5584,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 118784,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'COMDLG32.dll': 'CommDlgExtendedError',
                                                                                      'CRYPT32.dll': 'CertFreeCertificateContext',
                                                                                      'KERNEL32.dll': 'DeviceIoControl',
                                                                                      'SHELL32.dll': 'ShellAboutW',
                                                                                      'USER32.dll': 'GetSysColorBrush',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WINTRUST.dll': 'CryptCATAdminEnumCatalogFromHash',
                                                                                      'imagehlp.dll': 'ImageUnload',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtSetSystemInformation'},
                                                                      'ImportedFunctions': ['__RTDynamicCast',
                                                                                            '_ftol2_sse',
                                                                                            'memcmp',
                                                                                            'memcpy',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wprintf',
                                                                                            'fputws',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            '_putws',
                                                                                            '_purecall',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            'printf',
                                                                                            'puts',
                                                                                            'fclose',
                                                                                            '_wfopen',
                                                                                            '_wtoi',
                                                                                            '_wcsicmp',
                                                                                            'exit',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '_vsnwprintf',
                                                                                            '_wsetlocale',
                                                                                            '__argc',
                                                                                            '__wargv',
                                                                                            '__iob_func',
                                                                                            'fflush',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_wcsdup',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memset',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtSetSystemInformation',
                                                                                            'GetClientRect',
                                                                                            'SendMessageW',
                                                                                            'GetSysColor',
                                                                                            'SetTimer',
                                                                                            'RedrawWindow',
                                                                                            'EnableWindow',
                                                                                            'PeekMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadStringW',
                                                                                            'CharToOemW',
                                                                                            'LoadIconW',
                                                                                            'PostMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'DrawIcon',
                                                                                            'GetSystemMetrics',
                                                                                            'IsIconic',
                                                                                            'AppendMenuW',
                                                                                            'GetSystemMenu',
                                                                                            'OffsetRect',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'GetSysColorBrush',
                                                                                            'ShellAboutW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'CommDlgExtendedError',
                                                                                            'CryptCATAdminCalcHashFromFileHandle',
                                                                                            'CryptCATAdminAcquireContext',
                                                                                            'WinVerifyTrust',
                                                                                            'CryptCATCatalogInfoFromContext',
                                                                                            'CryptCATAdminEnumCatalogFromHash',
                                                                                            'CertFreeCertificateContext',
                                                                                            'ImageDirectoryEntryToDataEx',
                                                                                            'ImageLoad',
                                                                                            'ImageUnload',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCreateKeyExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrcmpiA',
                                                                                            'GetLastError',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetLocalTime',
                                                                                            'CreateFileW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetModuleHandleW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CreateThread',
                                                                                            'ResetEvent',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'FreeConsole',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetConsoleOutputCP',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'SetEvent',
                                                                                            'DeviceIoControl'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 134,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3672,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 5632,
                                                                                       '.reloc\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 105984},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f1c3b48b2579225f3cba19a3d8d26e71038647771981801348c9bed3348f4542'},
 'f1cbde5e9b8b08a42789eb454ffbeea497774cfc1c807211cb501dded8e84698': {'AddressOfEntryPoint': 15952,
                                                                      'DebugRVA': 4304,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'EqualSid',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'SHELL32.dll': 'SHGetKnownFolderPath',
                                                                                      'USER32.dll': 'PostQuitMessage',
                                                                                      'api-ms-win-core-path-l1-1-0.dll': 'PathCchCombine',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'EtwEventRegister',
                                                                                      'ole32.dll': 'CoRevertToSelf'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'OpenProcessToken',
                                                                                            'OpenThreadToken',
                                                                                            'GetTokenInformation',
                                                                                            'CreateWellKnownSid',
                                                                                            'SetSecurityInfo',
                                                                                            'AddAce',
                                                                                            'GetAce',
                                                                                            'AddAccessDeniedAce',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'GetSecurityInfo',
                                                                                            'EqualSid',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcessId',
                                                                                            'ProcessIdToSessionId',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'InitializeSRWLock',
                                                                                            'CloseHandle',
                                                                                            'GetCurrentProcess',
                                                                                            'GetModuleHandleExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'PostQuitMessage',
                                                                                            '_cexit',
                                                                                            '_initterm',
                                                                                            '__p__fmode',
                                                                                            '_exit',
                                                                                            '__setusermatherr',
                                                                                            '_wcmdln',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'memset',
                                                                                            'EtwEventUnregister',
                                                                                            'EtwEventRegister',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoImpersonateClient',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoTaskMemFree',
                                                                                            'CoInitializeEx',
                                                                                            'CoRevertToSelf',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetKnownFolderPath',
                                                                                            'PathCchCombine'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 9,
                                                                      'NumberOfImportFunctions': 85,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2264,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 13824},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f1cbde5e9b8b08a42789eb454ffbeea497774cfc1c807211cb501dded8e84698'},
 'f1e9efc23bc9932d633c77fd91619406384537254d4fff9fb53d490abaec2db3': {'AddressOfEntryPoint': 137014,
                                                                      'DebugRVA': 141712,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 139264,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'KERNEL32.dll': 'GlobalMemoryStatusEx',
                                                                                      'MSVCR120.dll': '_fileno',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'WSOCK32.dll': 'WSAStartup',
                                                                                      'libglib-2.0-0.dll': 'g_slist_insert_sorted',
                                                                                      'libgmodule-2.0-0.dll': 'g_module_symbol',
                                                                                      'libwireshark.dll': 'read_prefs_file',
                                                                                      'libwiretap.dll': 'wtap_file_type_subtype',
                                                                                      'libwsutil.dll': 'cmdarg_err'},
                                                                      'ImportedFunctions': ['PeekNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'TerminateProcess',
                                                                                            'ReadFile',
                                                                                            'CreatePipe',
                                                                                            'ConnectNamedPipe',
                                                                                            'DisconnectNamedPipe',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GetExitCodeProcess',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'GetOverlappedResult',
                                                                                            'DecodePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'EncodePointer',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'IsDebuggerPresent',
                                                                                            'WideCharToMultiByte',
                                                                                            'VerifyVersionInfoW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'VerSetConditionMask',
                                                                                            'GetCurrentProcessId',
                                                                                            'Sleep',
                                                                                            'GetStdHandle',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'ex_opt_count',
                                                                                            'ex_opt_get_next',
                                                                                            'get_export_pdu_tap_list',
                                                                                            'read_keytab_file',
                                                                                            'prefs',
                                                                                            'gbl_resolv_flags',
                                                                                            'wmem_file_scope',
                                                                                            'proto_get_id_by_filter_name',
                                                                                            'p_get_proto_data',
                                                                                            'prefs_is_capture_device_hidden',
                                                                                            'ex_opt_get_nth',
                                                                                            'proto_get_protocol_name',
                                                                                            'dtbl_entry_get_handle',
                                                                                            'dtbl_entry_get_initial_handle',
                                                                                            'dissector_all_tables_foreach_changed',
                                                                                            'dissector_table_foreach_handle',
                                                                                            'dissector_all_tables_foreach_table',
                                                                                            'find_dissector_table',
                                                                                            'get_dissector_table_selector_type',
                                                                                            'dissector_change_uint',
                                                                                            'dissector_reset_uint',
                                                                                            'dissector_change_string',
                                                                                            'dissector_reset_string',
                                                                                            'dissector_table_get_dissector_handles',
                                                                                            'dissector_table_get_type',
                                                                                            'dissector_handle_get_short_name',
                                                                                            'dissector_handle_get_protocol_index',
                                                                                            'start_requested_stats',
                                                                                            'decode_dcerpc_reset_all',
                                                                                            'tvb_memcpy',
                                                                                            'epan_get_user_comment',
                                                                                            'remove_tap_listener',
                                                                                            'list_stat_cmd_args',
                                                                                            'process_stat_cmd_arg',
                                                                                            'new_stat_tap_iterate_tables',
                                                                                            'hostlist_table_set_gui_info',
                                                                                            'conversation_table_set_gui_info',
                                                                                            'union_of_tap_listener_flags',
                                                                                            'have_filtering_tap_listeners',
                                                                                            'tap_listeners_require_dissection',
                                                                                            'draw_tap_listeners',
                                                                                            'register_all_plugin_tap_listeners',
                                                                                            'get_addrinfo_list',
                                                                                            'add_hosts_file',
                                                                                            'add_ipv6_name',
                                                                                            'add_ipv4_name',
                                                                                            'host_name_lookup_process',
                                                                                            'disable_name_resolution',
                                                                                            'get_conversation_address',
                                                                                            'column_dump_column_formats',
                                                                                            'build_column_format_array',
                                                                                            'get_column_visible',
                                                                                            'prefs_set_pref',
                                                                                            'write_prefs',
                                                                                            'read_prefs',
                                                                                            'prefs_apply_all',
                                                                                            'string_to_name_resolve',
                                                                                            'proto_enable_heuristic_by_name',
                                                                                            'set_disabled_heur_dissector_list',
                                                                                            'get_hostlist_packet_func',
                                                                                            'read_disabled_heur_dissector_list',
                                                                                            'proto_disable_proto_by_name',
                                                                                            'set_disabled_protos_list',
                                                                                            'read_disabled_protos_list',
                                                                                            'wslua_plugins_dump_all',
                                                                                            'timestamp_set_seconds_type',
                                                                                            'timestamp_set_precision',
                                                                                            'timestamp_set_type',
                                                                                            'ex_opt_add',
                                                                                            'write_fields_proto_tree',
                                                                                            'write_fields_preamble',
                                                                                            'write_psml_finale',
                                                                                            'write_psml_columns',
                                                                                            'write_psml_preamble',
                                                                                            'write_ek_proto_tree',
                                                                                            'write_json_finale',
                                                                                            'write_json_proto_tree',
                                                                                            'wmem_free',
                                                                                            'val_to_str_wmem',
                                                                                            'write_json_preamble',
                                                                                            'register_tap_listener',
                                                                                            'time_stat_update',
                                                                                            'write_pdml_finale',
                                                                                            'write_pdml_proto_tree',
                                                                                            'get_average',
                                                                                            'register_stat_tap_ui',
                                                                                            'camelSRTtype_naming',
                                                                                            'gcamel_StatSRT',
                                                                                            'gtcap_StatSRT',
                                                                                            'in_cksum',
                                                                                            'time_stat_init',
                                                                                            'ftype_name',
                                                                                            'fvalue_to_string_repr',
                                                                                            'fvalue_type_ftenum',
                                                                                            'address_to_str',
                                                                                            'expert_group_vals',
                                                                                            'find_protocol_by_id',
                                                                                            'proto_get_protocol_short_name',
                                                                                            'proto_get_protocol_filter_name',
                                                                                            'get_conversation_proto_id',
                                                                                            'write_pdml_preamble',
                                                                                            'print_hex_data',
                                                                                            'proto_tree_print',
                                                                                            'output_fields_has_cols',
                                                                                            'output_fields_list_options',
                                                                                            'output_fields_set_option',
                                                                                            'output_fields_num_fields',
                                                                                            'output_fields_valid',
                                                                                            'output_fields_add',
                                                                                            'output_fields_free',
                                                                                            'output_fields_new',
                                                                                            'find_and_mark_frame_depended_upon',
                                                                                            'free_frame_data_sequence',
                                                                                            'frame_data_sequence_find',
                                                                                            'frame_data_sequence_add',
                                                                                            'new_frame_data_sequence',
                                                                                            'dfilter_apply_edt',
                                                                                            'dfilter_free',
                                                                                            'dfilter_compile',
                                                                                            'print_finale',
                                                                                            'print_line',
                                                                                            'print_preamble',
                                                                                            'print_stream_ps_stdio_new',
                                                                                            'print_stream_text_stdio_new',
                                                                                            'dissector_dump_heur_decodes',
                                                                                            'dissector_dump_decodes',
                                                                                            'postseq_cleanup_all_protocols',
                                                                                            'dissector_dump_dissector_tables',
                                                                                            'have_custom_cols',
                                                                                            'col_custom_prime_edt',
                                                                                            'proto_registrar_dump_ftypes',
                                                                                            'proto_registrar_dump_fields',
                                                                                            'proto_registrar_dump_fieldcount',
                                                                                            'proto_registrar_dump_values',
                                                                                            'proto_registrar_dump_protocols',
                                                                                            'proto_initialize_all_prefixes',
                                                                                            'epan_get_runtime_version_info',
                                                                                            'epan_get_compiled_version_info',
                                                                                            'rtd_table_iterate_tables',
                                                                                            'write_fields_finale',
                                                                                            'srt_table_iterate_tables',
                                                                                            'epan_dissect_free',
                                                                                            'epan_dissect_fill_in_columns',
                                                                                            'epan_dissect_prime_dfilter',
                                                                                            'epan_dissect_run_with_taps',
                                                                                            'epan_dissect_run',
                                                                                            'epan_dissect_reset',
                                                                                            'epan_dissect_new',
                                                                                            'epan_free',
                                                                                            'epan_new',
                                                                                            'epan_cleanup',
                                                                                            'epan_init',
                                                                                            'epan_register_plugin_types',
                                                                                            'register_all_protocol_handoffs',
                                                                                            'register_all_protocols',
                                                                                            'wmem_strsplit',
                                                                                            'wmem_epan_scope',
                                                                                            'frame_data_set_after_dissect',
                                                                                            'frame_data_set_before_dissect',
                                                                                            'frame_data_init',
                                                                                            'frame_data_destroy',
                                                                                            'except_free',
                                                                                            'except_rethrow',
                                                                                            'except_pop',
                                                                                            'except_setup_try',
                                                                                            'prefs_register_string_preference',
                                                                                            'prefs_find_preference',
                                                                                            'prefs_find_module',
                                                                                            'tvb_new',
                                                                                            'tvb_ws_mempbrk_pattern_guint8',
                                                                                            'wsp_vals_status_ext',
                                                                                            'wsp_vals_pdu_type_ext',
                                                                                            'try_val_to_str_ext',
                                                                                            'stats_tree_format_as_str',
                                                                                            'stats_tree_is_default_sort_DESC',
                                                                                            'stats_tree_get_default_sort_col',
                                                                                            'stats_tree_get_cfg_by_abbr',
                                                                                            'stats_tree_get_abbr',
                                                                                            'stats_tree_reset',
                                                                                            'stats_tree_packet',
                                                                                            'stats_tree_new',
                                                                                            'stats_tree_presentation',
                                                                                            'srt_table_get_tap_string',
                                                                                            'srt_table_dissector_init',
                                                                                            'srt_table_get_filter',
                                                                                            'free_srt_table',
                                                                                            'get_srt_packet_func',
                                                                                            'get_srt_tap_listener_name',
                                                                                            'get_srt_proto_id',
                                                                                            'sid_name_snooping',
                                                                                            'sid_name_table',
                                                                                            'new_stat_tap_get_field_data',
                                                                                            'new_stat_tap_get_filter',
                                                                                            'tvb_get_guint8',
                                                                                            'wmem_memdup',
                                                                                            'rtsp_status_code_vals',
                                                                                            'rtp_payload_type_vals_ext',
                                                                                            'address_to_display',
                                                                                            'val_to_str_ext_wmem',
                                                                                            'wmem_strdup_printf',
                                                                                            'wmem_strdup',
                                                                                            'rtd_table_get_tap_string',
                                                                                            'rtd_table_dissector_init',
                                                                                            'rtd_table_get_filter',
                                                                                            'free_rtd_table',
                                                                                            'get_rtd_value_string',
                                                                                            'get_rtd_packet_func',
                                                                                            'get_rtd_tap_listener_name',
                                                                                            'get_rtd_proto_id',
                                                                                            'rpc_prog_name',
                                                                                            'col_append_fstr',
                                                                                            'col_get_writable',
                                                                                            'proto_construct_match_selected_string',
                                                                                            'get_conversation_packet_func',
                                                                                            'wmem_strconcat',
                                                                                            'timestamp_get_type',
                                                                                            'proto_get_finfo_ptr_array',
                                                                                            'proto_registrar_get_ftype',
                                                                                            'proto_registrar_get_byname',
                                                                                            'fvalue_get_floating',
                                                                                            'fvalue_get_sinteger64',
                                                                                            'fvalue_get_uinteger64',
                                                                                            'fvalue_get_sinteger',
                                                                                            'fvalue_get_uinteger',
                                                                                            'fvalue_get',
                                                                                            'get_ipv6_hash_table',
                                                                                            'get_ipv4_hash_table',
                                                                                            'wmem_map_foreach',
                                                                                            'gsm_a_pd_str',
                                                                                            'gsm_a_rr_short_pd_msg_strings',
                                                                                            'gsm_a_dtap_msg_tp_strings',
                                                                                            'gsm_a_dtap_msg_ss_strings',
                                                                                            'gsm_a_dtap_msg_sm_strings',
                                                                                            'gsm_a_dtap_msg_sms_strings',
                                                                                            'gsm_a_dtap_msg_gmm_strings',
                                                                                            'gsm_a_dtap_msg_cc_strings',
                                                                                            'gsm_a_dtap_msg_rr_strings',
                                                                                            'gsm_a_dtap_msg_mm_strings',
                                                                                            'gsm_a_bssmap_msg_strings',
                                                                                            'funnel_set_funnel_ops',
                                                                                            'follow_info_free',
                                                                                            'follow_get_stat_tap_string',
                                                                                            'follow_iterate_followers',
                                                                                            'get_follow_tap_handler',
                                                                                            'get_follow_address_func',
                                                                                            'get_follow_index_func',
                                                                                            'get_follow_tap_string',
                                                                                            'get_follow_proto_id',
                                                                                            'EBCDIC_to_ASCII',
                                                                                            'get_host_ipaddr6',
                                                                                            'get_host_ipaddr',
                                                                                            'address_to_str_buf',
                                                                                            'get_conversation_port',
                                                                                            'read_prefs_file',
                                                                                            'wtap_dump',
                                                                                            'wtap_wtap_encap_to_pcap_encap',
                                                                                            'wtap_dump_fdopen_ng',
                                                                                            'wtap_block_add_string_option',
                                                                                            'wtap_block_add_uint8_option',
                                                                                            'wtap_block_get_mandatory_data',
                                                                                            'wtap_block_create',
                                                                                            'open_routines',
                                                                                            'open_info_name_to_type',
                                                                                            'register_all_wiretap_modules',
                                                                                            'wtap_get_num_file_types_subtypes',
                                                                                            'wtap_strerror',
                                                                                            'wtap_short_string_to_file_type_subtype',
                                                                                            'wtap_file_type_subtype_short_string',
                                                                                            'wtap_file_type_subtype_string',
                                                                                            'wtap_dump_close',
                                                                                            'wtap_dump_set_addrinfo_list',
                                                                                            'wtap_dump_open_stdout_ng',
                                                                                            'wtap_dump_open_stdout',
                                                                                            'wtap_dump_open_ng',
                                                                                            'wtap_dump_open',
                                                                                            'wtap_dump_can_open',
                                                                                            'wtap_close',
                                                                                            'wtap_sequential_close',
                                                                                            'wtap_file_get_nrb_for_new_file',
                                                                                            'wtap_file_get_shb_for_new_file',
                                                                                            'wtap_file_encap',
                                                                                            'wtap_snapshot_length',
                                                                                            'wtap_buf_ptr',
                                                                                            'wtap_phdr',
                                                                                            'wtap_read',
                                                                                            'wtap_set_cb_new_ipv6',
                                                                                            'wtap_set_cb_new_ipv4',
                                                                                            'wtap_cleareof',
                                                                                            'wtap_open_offline',
                                                                                            'wtap_init',
                                                                                            'wtap_block_add_string_option_format',
                                                                                            'wtap_block_array_free',
                                                                                            'wtap_phdr_cleanup',
                                                                                            'wtap_phdr_init',
                                                                                            'wtap_seek_read',
                                                                                            'wtap_file_get_idb_info',
                                                                                            'wtap_block_get_string_option_value',
                                                                                            'wtap_file_type_subtype',
                                                                                            'ws_module_open',
                                                                                            'win32strexception',
                                                                                            'win32strerror',
                                                                                            'ws_inet_pton6',
                                                                                            'ws_inet_pton4',
                                                                                            'create_persconffile_dir',
                                                                                            'optopt',
                                                                                            'opterr',
                                                                                            'optind',
                                                                                            'optarg',
                                                                                            'plugins_dump_all',
                                                                                            'scan_plugins',
                                                                                            'arg_list_utf_16to8',
                                                                                            'get_windows_major_version',
                                                                                            'init_report_err',
                                                                                            'get_cur_groupname',
                                                                                            'get_cur_username',
                                                                                            'relinquish_special_privs_perm',
                                                                                            'running_with_special_privs',
                                                                                            'started_with_special_privs',
                                                                                            'init_process_policies',
                                                                                            'create_app_running_mutex',
                                                                                            'ws_init_dll_search_path',
                                                                                            'ws_stdio_open',
                                                                                            'file_open_error_message',
                                                                                            'profile_exists',
                                                                                            'set_profile_name',
                                                                                            'init_progfile_dir',
                                                                                            'ws_add_crash_info',
                                                                                            'cmdarg_err_cont',
                                                                                            'cmdarg_err_init',
                                                                                            'getopt_long',
                                                                                            'protect_arg',
                                                                                            'get_progfile_dir',
                                                                                            'utf_8to16',
                                                                                            'file_exists',
                                                                                            'get_extcap_dir',
                                                                                            'get_os_version_info',
                                                                                            'get_copyright_info',
                                                                                            'ws_buffer_free',
                                                                                            'ws_buffer_init',
                                                                                            'report_failure',
                                                                                            'nstime_cmp',
                                                                                            'nstime_sum',
                                                                                            'nstime_delta',
                                                                                            'nstime_is_unset',
                                                                                            'nstime_set_unset',
                                                                                            'nstime_set_zero',
                                                                                            'nstime_to_sec',
                                                                                            'nstime_to_msec',
                                                                                            'get_persconffile_path',
                                                                                            'get_datafile_path',
                                                                                            'ws_stdio_fopen',
                                                                                            'ws_stdio_remove',
                                                                                            'ws_stdio_unlink',
                                                                                            'ws_stdio_rename',
                                                                                            'ws_stdio_stat64',
                                                                                            'get_positive_int',
                                                                                            'get_natural_int',
                                                                                            'cmdarg_err',
                                                                                            'g_module_close',
                                                                                            'g_module_symbol',
                                                                                            'WSAStartup',
                                                                                            'g_hash_table_lookup',
                                                                                            'g_hash_table_remove_all',
                                                                                            'g_hash_table_insert',
                                                                                            'g_hash_table_destroy',
                                                                                            'g_hash_table_new_full',
                                                                                            'g_hash_table_new',
                                                                                            'g_array_free',
                                                                                            'g_string_free',
                                                                                            'g_malloc_n',
                                                                                            'g_strdup_printf',
                                                                                            'g_list_length',
                                                                                            'g_list_last',
                                                                                            'g_list_remove_link',
                                                                                            'g_list_append',
                                                                                            'g_realloc',
                                                                                            'g_malloc',
                                                                                            'g_ascii_table',
                                                                                            'g_assertion_message_expr',
                                                                                            'g_strdup',
                                                                                            'g_ascii_strncasecmp',
                                                                                            'g_ascii_strcasecmp',
                                                                                            'g_spawn_close_pid',
                                                                                            'g_strfreev',
                                                                                            'g_slist_foreach',
                                                                                            'g_slist_free',
                                                                                            'g_hash_table_unref',
                                                                                            'g_hash_table_ref',
                                                                                            'g_list_nth_data',
                                                                                            'g_list_foreach',
                                                                                            'g_list_first',
                                                                                            'g_list_free',
                                                                                            'g_free',
                                                                                            'g_array_remove_index',
                                                                                            'g_array_append_vals',
                                                                                            'g_array_new',
                                                                                            'g_hash_table_foreach',
                                                                                            'g_string_new',
                                                                                            'g_array_sized_new',
                                                                                            'g_array_set_size',
                                                                                            'g_string_chunk_new',
                                                                                            'g_string_chunk_free',
                                                                                            'g_string_chunk_insert_const',
                                                                                            'g_malloc0_n',
                                                                                            'g_snprintf',
                                                                                            'g_ptr_array_new',
                                                                                            'g_ptr_array_remove_index',
                                                                                            'g_ptr_array_add',
                                                                                            'g_string_prepend',
                                                                                            'g_str_equal',
                                                                                            'g_str_hash',
                                                                                            'g_int_equal',
                                                                                            'g_int_hash',
                                                                                            'g_try_malloc',
                                                                                            'g_slist_prepend',
                                                                                            'g_slist_sort',
                                                                                            'g_slist_nth_data',
                                                                                            'g_strlcpy',
                                                                                            'g_strstr_len',
                                                                                            'g_strrstr',
                                                                                            'g_strchug',
                                                                                            'g_strchomp',
                                                                                            'g_strndup',
                                                                                            'g_strconcat',
                                                                                            'g_string_append_printf',
                                                                                            'g_strjoinv',
                                                                                            'g_array_insert_vals',
                                                                                            'g_ptr_array_free',
                                                                                            'g_ptr_array_foreach',
                                                                                            'g_dir_close',
                                                                                            'g_dir_open_utf8',
                                                                                            'g_dir_read_name_utf8',
                                                                                            'g_path_get_basename',
                                                                                            'g_malloc0',
                                                                                            'g_list_delete_link',
                                                                                            'g_list_sort',
                                                                                            'g_string_append',
                                                                                            'g_strsplit',
                                                                                            'g_timeout_add',
                                                                                            'g_log_set_handler',
                                                                                            'g_log_default_handler',
                                                                                            'g_strerror',
                                                                                            'g_strlcat',
                                                                                            'g_strv_length',
                                                                                            'g_list_nth',
                                                                                            'g_slist_nth',
                                                                                            'g_get_current_time',
                                                                                            'g_list_prepend',
                                                                                            'g_hash_table_foreach_remove',
                                                                                            'g_hash_table_size',
                                                                                            'g_hash_table_get_keys',
                                                                                            'g_source_remove',
                                                                                            'g_child_watch_add',
                                                                                            'g_string_printf',
                                                                                            'g_regex_new',
                                                                                            'g_regex_unref',
                                                                                            'g_regex_replace',
                                                                                            'g_ascii_strdown',
                                                                                            'g_strcmp0',
                                                                                            'g_list_find_custom',
                                                                                            'g_regex_match_simple',
                                                                                            'g_regex_match',
                                                                                            'g_regex_match_full',
                                                                                            'g_match_info_free',
                                                                                            'g_match_info_next',
                                                                                            'g_match_info_matches',
                                                                                            'g_match_info_fetch',
                                                                                            'g_strtod',
                                                                                            'g_ascii_strtoull',
                                                                                            'g_ascii_strtoll',
                                                                                            'g_getenv_utf8',
                                                                                            'g_setenv_utf8',
                                                                                            'g_utf8_to_utf16',
                                                                                            'g_string_sized_new',
                                                                                            'g_string_insert_c',
                                                                                            'g_strescape',
                                                                                            'g_mutex_init',
                                                                                            'g_mutex_lock',
                                                                                            'g_mutex_unlock',
                                                                                            'g_slist_append',
                                                                                            'g_log',
                                                                                            'g_slist_insert_sorted',
                                                                                            'vfprintf',
                                                                                            'fflush',
                                                                                            '_open_osfhandle',
                                                                                            '_get_osfhandle',
                                                                                            '_time64',
                                                                                            'strftime',
                                                                                            '_write',
                                                                                            'memchr',
                                                                                            'setlocale',
                                                                                            'memcpy',
                                                                                            '_localtime64',
                                                                                            '_gmtime64',
                                                                                            '_libm_sse2_sqrt_precise',
                                                                                            'strstr',
                                                                                            'fputs',
                                                                                            'putchar',
                                                                                            'atoi',
                                                                                            '_CIfmod',
                                                                                            'sscanf',
                                                                                            'memset',
                                                                                            'strncmp',
                                                                                            'exit',
                                                                                            '__iob_func',
                                                                                            'ungetc',
                                                                                            'putc',
                                                                                            'getc',
                                                                                            'fprintf',
                                                                                            'ferror',
                                                                                            'fclose',
                                                                                            'strchr',
                                                                                            'strtol',
                                                                                            '_errno',
                                                                                            'printf',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_calloc_crt',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '__crtSetUnhandledExceptionFilter',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__crtTerminateProcess',
                                                                                            '__crtUnhandledException',
                                                                                            '_crt_debugger_hook',
                                                                                            '_except1',
                                                                                            '_cwait',
                                                                                            '_read',
                                                                                            '_close',
                                                                                            'strtoul',
                                                                                            'getenv',
                                                                                            'strrchr',
                                                                                            'fwrite',
                                                                                            '_setjmp3',
                                                                                            '_isatty',
                                                                                            'strtok',
                                                                                            '_fileno',
                                                                                            'GetSystemMetrics',
                                                                                            'OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'QueryServiceStatus',
                                                                                            'CloseServiceHandle'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 592,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 290912,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 69120,
                                                                                       '.reloc\x00\x00': 12288,
                                                                                       '.rsrc\x00\x00\x00': 291328,
                                                                                       '.text\x00\x00\x00': 134656},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f1e9efc23bc9932d633c77fd91619406384537254d4fff9fb53d490abaec2db3'},
 'f1f67830fc3531dfbdaf5315f59422438ab9f243d89491ac75d1818e7ed98b5d': {'AddressOfEntryPoint': 29424,
                                                                      'DebugRVA': 23136,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 90112,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'CreateFileW',
                                                                                      'SHELL32.dll': 'SHGetFolderPathW',
                                                                                      'SHLWAPI.dll': 'PathRemoveFileSpecW',
                                                                                      'USER32.dll': 'CharLowerBuffW'},
                                                                      'ImportedFunctions': ['RegOpenKeyExW',
                                                                                            'SizeofResource',
                                                                                            'HeapFree',
                                                                                            'GetCommandLineW',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSize',
                                                                                            'GetLastError',
                                                                                            'GetFileAttributesExW',
                                                                                            'LockResource',
                                                                                            'HeapReAlloc',
                                                                                            'RaiseException',
                                                                                            'FindResourceExW',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'HeapAlloc',
                                                                                            'DecodePointer',
                                                                                            'HeapDestroy',
                                                                                            'GetProcAddress',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcessHeap',
                                                                                            'GetModuleHandleW',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'WriteConsoleW',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'FlushFileBuffers',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'IsDebuggerPresent',
                                                                                            'OutputDebugStringW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetStartupInfoW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'SetLastError',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'RtlUnwind',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetACP',
                                                                                            'LCMapStringW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExW',
                                                                                            'FindNextFileW',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetFileType',
                                                                                            'CreateFileW',
                                                                                            'SHGetFolderPathW',
                                                                                            'CharLowerBuffW',
                                                                                            'SHQueryValueExW',
                                                                                            'PathAppendW',
                                                                                            'PathRemoveFileSpecW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 58016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2048,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 58368,
                                                                                       '.text\x00\x00\x00': 74240},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f1f67830fc3531dfbdaf5315f59422438ab9f243d89491ac75d1818e7ed98b5d'},
 'f2abe33d96fa7b8aa0cd9183c57bb7da98d0d1a40375344ca1a13d8f61a9b2bd': {'AddressOfEntryPoint': 22898,
                                                                      'DebugRVA': 8656,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'ReadFile',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListA',
                                                                                      'USER32.dll': 'MessageBoxA',
                                                                                      'msvcrt.dll': 'sprintf',
                                                                                      'ntdll.dll': 'NtOpenProcessToken'},
                                                                      'ImportedFunctions': ['GetDriveTypeA',
                                                                                            'HeapFree',
                                                                                            'FormatMessageA',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteFileA',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'SetEvent',
                                                                                            'Sleep',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'WideCharToMultiByte',
                                                                                            'HeapAlloc',
                                                                                            'SetLastError',
                                                                                            'WriteFile',
                                                                                            'MoveFileA',
                                                                                            'ExitProcess',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'GetVersionExA',
                                                                                            'WaitForSingleObject',
                                                                                            'OpenEventA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'CreateFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'CopyFileA',
                                                                                            'SetFileAttributesA',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'QueryDosDeviceA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'SetEndOfFile',
                                                                                            'SetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GetFileSize',
                                                                                            'CreateThread',
                                                                                            'CreateEventA',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'SetErrorMode',
                                                                                            'GetTickCount',
                                                                                            'CreateDirectoryA',
                                                                                            'GetLastError',
                                                                                            'RemoveDirectoryA',
                                                                                            'MoveFileExA',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'ReadFile',
                                                                                            'strchr',
                                                                                            '_strnicmp',
                                                                                            '_stricmp',
                                                                                            'strrchr',
                                                                                            '_strlwr',
                                                                                            'strncpy',
                                                                                            'strstr',
                                                                                            '_snprintf',
                                                                                            'sprintf',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'GetTokenInformation',
                                                                                            'GetLengthSid',
                                                                                            'InitiateSystemShutdownA',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptGenRandom',
                                                                                            'CryptAcquireContextA',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'AddAccessAllowedAce',
                                                                                            'InitializeAcl',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'OpenProcessToken',
                                                                                            'ShowWindow',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SendMessageA',
                                                                                            'DialogBoxParamA',
                                                                                            'LoadStringA',
                                                                                            'EndDialog',
                                                                                            'SetParent',
                                                                                            'MessageBoxA',
                                                                                            'NtShutdownSystem',
                                                                                            'NtAdjustPrivilegesToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetPathFromIDListA'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 106,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 5176,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 25863680,
                                                                                       '.text\x00\x00\x00': 31232},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f2abe33d96fa7b8aa0cd9183c57bb7da98d0d1a40375344ca1a13d8f61a9b2bd'},
 'f2b6ac8d8ac0a105d5942da6c9bcecdf1866cec55a6f69eb30137adcc8f9b089': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 55508,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 55808,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f2b6ac8d8ac0a105d5942da6c9bcecdf1866cec55a6f69eb30137adcc8f9b089'},
 'f2e7594a948d89e4cf89bd195fdf329c3d9955f110c10f68772b5ead83d23ced': {'AddressOfEntryPoint': 27064,
                                                                      'DebugRVA': 33344,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'EncodePointer',
                                                                                      'MSVCR100.dll': '_controlfp_s',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'USER32.dll': 'wsprintfW',
                                                                                      'ole32.dll': 'CoTaskMemAlloc'},
                                                                      'ImportedFunctions': ['RaiseException',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'lstrlenW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'InterlockedIncrement',
                                                                                            'InterlockedDecrement',
                                                                                            'lstrcmpiW',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryW',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'GetVersionExW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetCurrentProcess',
                                                                                            'GetNativeSystemInfo',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateProcessW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'FormatMessageW',
                                                                                            'GetLongPathNameW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetLocalTime',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'LoadLibraryA',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'CharNextW',
                                                                                            'wsprintfW',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'CoTaskMemAlloc',
                                                                                            'VarUI4FromStr',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysStringLen',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy_s',
                                                                                            'memset',
                                                                                            'wcsstr',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            '_CxxThrowException',
                                                                                            'wcsncpy_s',
                                                                                            '_recalloc',
                                                                                            '??_U@YAPAXI@Z',
                                                                                            '__argc',
                                                                                            '__wargv',
                                                                                            '_wstat64i32',
                                                                                            'swprintf_s',
                                                                                            '_wtoi',
                                                                                            'wcscpy_s',
                                                                                            'fclose',
                                                                                            '_wsplitpath_s',
                                                                                            'wcscat_s',
                                                                                            '_wfopen_s',
                                                                                            '_wdupenv_s',
                                                                                            'fwprintf_s',
                                                                                            '_wputenv',
                                                                                            '_localtime64',
                                                                                            '_snwprintf_s',
                                                                                            'wcsftime',
                                                                                            '_ftime64_s',
                                                                                            '_vsnwprintf_s',
                                                                                            'memcpy',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_except_handler4_common',
                                                                                            '_crt_debugger_hook',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 126,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 13824,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 26112},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f2e7594a948d89e4cf89bd195fdf329c3d9955f110c10f68772b5ead83d23ced'},
 'f2e81ab35f0e9f78a75b2a3a92c92f5a53b8138a686f672f5196bc5115da4fab': {'AddressOfEntryPoint': 38421,
                                                                      'DebugRVA': 4144,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'OpenProcessToken',
                                                                                      'KERNEL32.dll': 'InitializeCriticalSectionAndSpinCount',
                                                                                      'NETAPI32.dll': 'DsRoleFreeMemory',
                                                                                      'NTDSAPI.dll': 'DsFreeNameResultW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SCECLI.dll': 'SceDcPromoCreateGPOsInSysvol',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '__CxxFrameHandler3',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegQueryValueExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'SetNamedSecurityInfoW',
                                                                                            'DuplicateTokenEx',
                                                                                            'GetSecurityDescriptorOwner',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'SetThreadToken',
                                                                                            'GetSecurityDescriptorSacl',
                                                                                            'CheckTokenMembership',
                                                                                            'RegEnumKeyExW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegCloseKey',
                                                                                            'GetSecurityDescriptorGroup',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'OpenThreadToken',
                                                                                            'RegOpenKeyExW',
                                                                                            'GetAce',
                                                                                            'GetLengthSid',
                                                                                            'InitializeAcl',
                                                                                            'RegDeleteKeyExW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'CopySid',
                                                                                            'AddAccessAllowedObjectAce',
                                                                                            'AddAccessAllowedAceEx',
                                                                                            'AddAccessDeniedObjectAce',
                                                                                            'AddAccessDeniedAceEx',
                                                                                            'AddAuditAccessObjectAce',
                                                                                            'AddAuditAccessAceEx',
                                                                                            'OpenProcessToken',
                                                                                            'DeleteFileW',
                                                                                            'LocalFree',
                                                                                            'SetFileAttributesW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'FindNextFileW',
                                                                                            'HeapSetInformation',
                                                                                            'RemoveDirectoryW',
                                                                                            'LocalAlloc',
                                                                                            'GetConsoleScreenBufferInfo',
                                                                                            'FindClose',
                                                                                            'GetLastError',
                                                                                            'GetStdHandle',
                                                                                            'GetConsoleOutputCP',
                                                                                            'RaiseException',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'CompareStringW',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'WriteConsoleW',
                                                                                            'FormatMessageW',
                                                                                            'WriteFile',
                                                                                            'Sleep',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetCurrentThread',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetConsoleTextAttribute',
                                                                                            'SetEndOfFile',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileSize',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            '_exit',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'iswdigit',
                                                                                            'fclose',
                                                                                            '_wsetlocale',
                                                                                            '_iob',
                                                                                            'fgetwc',
                                                                                            '_vsnwprintf',
                                                                                            '_ultow',
                                                                                            '_wfopen',
                                                                                            'wprintf_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            'MessageBeep',
                                                                                            'LoadStringW',
                                                                                            'NetApiBufferFree',
                                                                                            'DsRoleGetPrimaryDomainInformation',
                                                                                            'NetShareGetInfo',
                                                                                            'DsGetDcNameW',
                                                                                            'DsRoleFreeMemory',
                                                                                            'VariantChangeType',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysAllocString',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'DsCrackNamesW',
                                                                                            'DsFreeNameResultW',
                                                                                            'SceWriteSecurityProfileInfo',
                                                                                            'SceGetSecurityProfileInfo',
                                                                                            'SceOpenProfile',
                                                                                            'SceFreeProfileMemory',
                                                                                            'SceCloseProfile',
                                                                                            'SceDcPromoCreateGPOsInSysvol'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 137,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2152,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f2e81ab35f0e9f78a75b2a3a92c92f5a53b8138a686f672f5196bc5115da4fab'},
 'f30717aa77a2f53d2b8275688e885bf170571285309be57b2a91b52f06d300c3': {'AddressOfEntryPoint': 26238,
                                                                      'DebugRVA': 25988,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12608,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f30717aa77a2f53d2b8275688e885bf170571285309be57b2a91b52f06d300c3'},
 'f4960d8f2c08c82781f4af2cb284bfa44d4018676d3cc1c34bed81f484a68768': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 422984,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 2,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 12640,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 16384,
                                                                                       '.text\x00\x00\x00': 417792},
                                                                      'StackReserveSize': 4194304,
                                                                      'filename': './data/clean/f4960d8f2c08c82781f4af2cb284bfa44d4018676d3cc1c34bed81f484a68768'},
 'f4aa3127eb98a1267843fbd05f9dcf94cb5cc8a5de1f3e76836a213c5e58e29f': {'AddressOfEntryPoint': 30325,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'KERNEL32.dll': 'OutputDebugStringW',
                                                                                      'MSVCP60.dll': '?nothrow@std@@3Unothrow_t@1@B',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHLWAPI.dll': 'StrChrIW',
                                                                                      'WS2_32.dll': 'inet_addr',
                                                                                      'iassvcs.dll': 'IASInitialize',
                                                                                      'msvcrt.dll': '_callnewh',
                                                                                      'ole32.dll': 'CoCreateInstance',
                                                                                      'rtutils.dll': 'TraceDeregisterW'},
                                                                      'ImportedFunctions': ['FormatMessageW',
                                                                                            'lstrcpyW',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetLastError',
                                                                                            'ConnectNamedPipe',
                                                                                            'CreateNamedPipeW',
                                                                                            'GetStdHandle',
                                                                                            'CreateDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetSystemWow64DirectoryW',
                                                                                            'CompareStringW',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapCreate',
                                                                                            'LocalFree',
                                                                                            'lstrcpynW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'lstrcatW',
                                                                                            'HeapDestroy',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'OutputDebugStringW',
                                                                                            'wcstombs',
                                                                                            'malloc',
                                                                                            '_except_handler3',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '_controlfp',
                                                                                            'wprintf',
                                                                                            '_wtol',
                                                                                            '__set_app_type',
                                                                                            '__p__fmode',
                                                                                            '__p__commode',
                                                                                            '_adjust_fdiv',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '__initenv',
                                                                                            '_cexit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_vsnwprintf',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??2@YAPAXI@Z',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_wfopen',
                                                                                            'fgetws',
                                                                                            'fclose',
                                                                                            '__CxxFrameHandler',
                                                                                            'exit',
                                                                                            'mbstowcs',
                                                                                            '_callnewh',
                                                                                            'GetErrorInfo',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'inet_addr',
                                                                                            'StrChrIW',
                                                                                            'IASUninitialize',
                                                                                            'IASInitialize',
                                                                                            '?nothrow@std@@3Unothrow_t@1@B',
                                                                                            'RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'TraceRegisterExW',
                                                                                            'TraceVprintfExW',
                                                                                            'TraceDeregisterW'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 86,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1080,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 34304},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f4aa3127eb98a1267843fbd05f9dcf94cb5cc8a5de1f3e76836a213c5e58e29f'},
 'f4e138c85c5c50306cfd36457edd549ca295ba3b2b60064a485116dcba17f8b6': {'AddressOfEntryPoint': 22736,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 45056,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'OLEAUT32.dll': 'SysAllocStringLen',
                                                                                      'SETUPAPI.dll': 'SetupDiDestroyDeviceInfoList',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyW',
                                                                                            'FormatMessageW',
                                                                                            'SetThreadPreferredUILanguages',
                                                                                            'GetConsoleOutputCP',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLastError',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'Sleep',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'TerminateProcess',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_XcptFilter',
                                                                                            'wcschr',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__C_specific_handler',
                                                                                            '_fmode',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'wcscpy_s',
                                                                                            'exit',
                                                                                            'tolower',
                                                                                            'iswprint',
                                                                                            '_wsetlocale',
                                                                                            '_CxxThrowException',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'iswspace',
                                                                                            'wcsstr',
                                                                                            'wprintf',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            '_commode',
                                                                                            '_wcsicmp',
                                                                                            '_putws',
                                                                                            '_vsnwprintf',
                                                                                            'memmove_s',
                                                                                            'memcpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            'CoTaskMemFree',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'SysFreeString',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'SetupCopyOEMInfW',
                                                                                            'SetupDiGetDeviceInstanceIdW',
                                                                                            'SetupDiGetDeviceRegistryPropertyW',
                                                                                            'SetupDiGetClassDevsW',
                                                                                            'SetupDiEnumDeviceInfo',
                                                                                            'SetupDiDestroyDeviceInfoList'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 82,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3072,
                                                                                       '.pdata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/f4e138c85c5c50306cfd36457edd549ca295ba3b2b60064a485116dcba17f8b6'},
 'f4ee068cf6fa25701cb1c53807174641f916a5544844160498af3ad24f814c20': {'AddressOfEntryPoint': 94694,
                                                                      'DebugRVA': 180784,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33024,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 180224,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetStdHandle',
                                                                                      'SHELL32.dll': 'CommandLineToArgvW',
                                                                                      'USER32.dll': 'MessageBoxW'},
                                                                      'ImportedFunctions': ['GetTempFileNameW',
                                                                                            'CreateProcessW',
                                                                                            'CreateDirectoryW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'FormatMessageW',
                                                                                            'GetExitCodeProcess',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetSystemInfo',
                                                                                            'GetModuleHandleA',
                                                                                            'GetVersion',
                                                                                            'DeleteFileW',
                                                                                            'LocalFree',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'VerSetConditionMask',
                                                                                            'GetUserDefaultLCID',
                                                                                            'GetCommandLineW',
                                                                                            'GetLocaleInfoW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'SetLastError',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLastError',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'FlushFileBuffers',
                                                                                            'WriteConsoleW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'ReadFile',
                                                                                            'WriteFile',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'SetFilePointerEx',
                                                                                            'SetStdHandle',
                                                                                            'OutputDebugStringW',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'HeapReAlloc',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetFileType',
                                                                                            'GetModuleFileNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStringTypeW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'IsDebuggerPresent',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetCurrentThreadId',
                                                                                            'LoadLibraryExW',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'GetCPInfo',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetStartupInfoW',
                                                                                            'LCMapStringW',
                                                                                            'IsValidLocale',
                                                                                            'EnumSystemLocalesW',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'HeapSize',
                                                                                            'IsValidCodePage',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetProcessHeap',
                                                                                            'GetStdHandle',
                                                                                            'MessageBoxW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'CommandLineToArgvW'],
                                                                      'LinkerVersion': 12,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 94,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 32848,
                                                                      'SectionNames': {'.data\x00\x00\x00': 6656,
                                                                                       '.rdata\x00\x00': 42496,
                                                                                       '.rsrc\x00\x00\x00': 33280,
                                                                                       '.text\x00\x00\x00': 172544},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f4ee068cf6fa25701cb1c53807174641f916a5544844160498af3ad24f814c20'},
 'f5072d3c6641b987ce4f504adc8c945a0797864b08b7943ea53450738526ba28': {'AddressOfEntryPoint': 91327,
                                                                      'DebugRVA': 5280,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 10,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExW',
                                                                                      'CRYPT32.dll': 'CryptUnprotectData',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetVersion',
                                                                                      'MSVCR100.dll': '_initterm_e',
                                                                                      'OLEAUT32.dll': 'GetErrorInfo',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathRemoveBackslashW',
                                                                                      'USER32.dll': 'GetSystemMetrics',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'mscoree.dll': 'StrongNameFreeBuffer',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'CheckTokenMembership',
                                                                                            'FreeSid',
                                                                                            'RegQueryInfoKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegEnumKeyExA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCreateKeyExA',
                                                                                            'CryptVerifySignatureW',
                                                                                            'CryptHashData',
                                                                                            'CryptCreateHash',
                                                                                            'CryptImportKey',
                                                                                            'CryptAcquireContextW',
                                                                                            'CryptReleaseContext',
                                                                                            'CryptDestroyKey',
                                                                                            'CryptDestroyHash',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'GetVersionExA',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'GetUserDefaultLCID',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'SetFilePointer',
                                                                                            'GetModuleHandleA',
                                                                                            'GetLogicalDrives',
                                                                                            'GetDriveTypeW',
                                                                                            'GetDiskFreeSpaceExW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'FindAtomW',
                                                                                            'DeleteAtom',
                                                                                            'AddAtomW',
                                                                                            'SetLastError',
                                                                                            'SuspendThread',
                                                                                            'SetThreadContext',
                                                                                            'GetThreadContext',
                                                                                            'ResumeThread',
                                                                                            'VirtualAlloc',
                                                                                            'FlushInstructionCache',
                                                                                            'VirtualProtect',
                                                                                            'VirtualQuery',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentThread',
                                                                                            'CompareStringW',
                                                                                            'CompareStringA',
                                                                                            'GetSystemTime',
                                                                                            'GetCommandLineW',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetStdHandle',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'CloseHandle',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapDestroy',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'DecodePointer',
                                                                                            'EncodePointer',
                                                                                            'GetStartupInfoW',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetFileAttributesW',
                                                                                            'MoveFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'RaiseException',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'SizeofResource',
                                                                                            'LockResource',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceExW',
                                                                                            'GetLastError',
                                                                                            'lstrcmpiW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LoadLibraryExW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'HeapSetInformation',
                                                                                            'GetVersion',
                                                                                            'malloc',
                                                                                            '_callnewh',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            '_wcsicmp',
                                                                                            'wcschr',
                                                                                            'wmemcpy_s',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QAEXXZ',
                                                                                            '_wtol',
                                                                                            'swprintf_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            'ceil',
                                                                                            'memcpy',
                                                                                            'strcpy_s',
                                                                                            'isprint',
                                                                                            'vswprintf_s',
                                                                                            '_vscwprintf',
                                                                                            'calloc',
                                                                                            'wcsrchr',
                                                                                            '_ultow_s',
                                                                                            '_strlwr_s',
                                                                                            'fclose',
                                                                                            'fgetws',
                                                                                            '_wfopen_s',
                                                                                            '_wtoi',
                                                                                            'wcspbrk',
                                                                                            '_resetstkoflw',
                                                                                            'memmove',
                                                                                            'wcscpy_s',
                                                                                            '_wcsnicmp',
                                                                                            '_wsplitpath_s',
                                                                                            '_wmakepath_s',
                                                                                            'wcscat_s',
                                                                                            'wcsnlen',
                                                                                            'memmove_s',
                                                                                            'wcsstr',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'wcsncpy_s',
                                                                                            '_recalloc',
                                                                                            '_vsnwprintf',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_ismbblead',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_crt_debugger_hook',
                                                                                            '_controlfp_s',
                                                                                            '_invoke_watson',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__set_app_type',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '__setusermatherr',
                                                                                            '_configthreadlocale',
                                                                                            '_initterm_e',
                                                                                            'LoadStringW',
                                                                                            'LoadImageW',
                                                                                            'LoadIconW',
                                                                                            'MessageBoxW',
                                                                                            'CharNextW',
                                                                                            'GetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'StrongNameTokenFromAssemblyEx',
                                                                                            'StrongNameSignatureVerificationEx',
                                                                                            'StrongNameErrorInfo',
                                                                                            'StrongNameFreeBuffer',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetFolderPathW',
                                                                                            'ShellExecuteExW',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CoCreateInstance',
                                                                                            'StringFromGUID2',
                                                                                            'OleInitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'OleUninitialize',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayCreate',
                                                                                            'VariantClear',
                                                                                            'VarUI4FromStr',
                                                                                            'VarBstrCat',
                                                                                            'SysStringLen',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysFreeString',
                                                                                            'SysAllocStringLen',
                                                                                            'SysAllocString',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'SetErrorInfo',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'VariantInit',
                                                                                            'GetErrorInfo',
                                                                                            'PathAppendW',
                                                                                            'PathAddBackslashW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'AssocQueryStringW',
                                                                                            'PathCombineW',
                                                                                            'PathRemoveBackslashW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'VerQueryValueW',
                                                                                            'DeleteObject',
                                                                                            'CryptUnprotectData'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 239,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 212528,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17920,
                                                                                       '.reloc\x00\x00': 18432,
                                                                                       '.rsrc\x00\x00\x00': 212992,
                                                                                       '.text\x00\x00\x00': 166400},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f5072d3c6641b987ce4f504adc8c945a0797864b08b7943ea53450738526ba28'},
 'f5ba9e542df3b7d043126e54579bf7db7534e7ce23dd9b5071310f307267852a': {'AddressOfEntryPoint': 0,
                                                                      'DebugRVA': 164160,
                                                                      'DebugSize': 56,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 6891409244160,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1156,
                                                                      'SectionNames': {'.data\x00\x00\x00': 26624,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.text\x00\x00\x00': 119808,
                                                                                       '.xdata\x00\x00': 9216},
                                                                      'StackReserveSize': 0,
                                                                      'filename': './data/clean/f5ba9e542df3b7d043126e54579bf7db7534e7ce23dd9b5071310f307267852a'},
 'f637772f0605055e692f16e1e990e0c92af1b2d25a0ae51e5001b70c8e211df7': {'AddressOfEntryPoint': 8623,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 18192,
                                                                      'ExportSize': 105,
                                                                      'IATRVA': 16384,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 4,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LookupPrivilegeValueA',
                                                                                      'GDI32.dll': 'CreatePalette',
                                                                                      'KERNEL32.dll': 'GlobalLock',
                                                                                      'USER32.dll': 'LoadCursorA'},
                                                                      'ImportedFunctions': ['lstrcpyA',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'lstrlenA',
                                                                                            'MulDiv',
                                                                                            'GetTempFileNameA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'FormatMessageA',
                                                                                            'lstrcatA',
                                                                                            'GetLastError',
                                                                                            '_lwrite',
                                                                                            '_llseek',
                                                                                            'GlobalUnlock',
                                                                                            '_lopen',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            '_lclose',
                                                                                            '_lcreat',
                                                                                            'LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'OpenFile',
                                                                                            'GetVersionExA',
                                                                                            'GetCurrentProcess',
                                                                                            'WinExec',
                                                                                            'ExitProcess',
                                                                                            '_lread',
                                                                                            'LocalFree',
                                                                                            'GetTempPathA',
                                                                                            'GlobalLock',
                                                                                            'GetDC',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'InvalidateRect',
                                                                                            'PostQuitMessage',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'GetClientRect',
                                                                                            'CreateWindowExA',
                                                                                            'DrawTextA',
                                                                                            'ReleaseDC',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'UpdateWindow',
                                                                                            'SetTimer',
                                                                                            'LoadIconA',
                                                                                            'wsprintfA',
                                                                                            'MessageBoxA',
                                                                                            'ExitWindowsEx',
                                                                                            'RegisterClassA',
                                                                                            'LoadCursorA',
                                                                                            'DeleteObject',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'PatBlt',
                                                                                            'CreateSolidBrush',
                                                                                            'TextOutA',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SelectObject',
                                                                                            'StretchDIBits',
                                                                                            'CreateFontA',
                                                                                            'RealizePalette',
                                                                                            'SelectPalette',
                                                                                            'CreatePalette',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1600,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f637772f0605055e692f16e1e990e0c92af1b2d25a0ae51e5001b70c8e211df7'},
 'f682ddd88e8d48647fbd1cd8fa884f48e78b3baff02c00702115133cb662bec5': {'AddressOfEntryPoint': 193762,
                                                                      'DebugRVA': 349984,
                                                                      'DebugSize': 28,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 348160,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegisterEventSourceW',
                                                                                      'COMDLG32.dll': 'GetFileTitleW',
                                                                                      'GDI32.dll': 'PtVisible',
                                                                                      'IPHLPAPI.DLL': 'GetAdaptersAddresses',
                                                                                      'KERNEL32.dll': 'GetThreadLocale',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'DrawTextW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoSizeW',
                                                                                      'WININET.dll': 'InternetQueryDataAvailable',
                                                                                      'WINSPOOL.DRV': 'ClosePrinter',
                                                                                      'ntdll.dll': 'LdrUnloadDll',
                                                                                      'ole32.dll': 'CoUninitialize',
                                                                                      'urlmon.dll': 'URLDownloadToFileW'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'URLDownloadToFileW',
                                                                                            'InternetGetConnectedState',
                                                                                            'DeleteUrlCacheEntryW',
                                                                                            'HttpOpenRequestW',
                                                                                            'InternetConnectW',
                                                                                            'HttpSendRequestW',
                                                                                            'InternetReadFile',
                                                                                            'InternetWriteFile',
                                                                                            'InternetSetFilePointer',
                                                                                            'InternetSetStatusCallbackW',
                                                                                            'InternetOpenW',
                                                                                            'InternetGetLastResponseInfoW',
                                                                                            'InternetCloseHandle',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetQueryDataAvailable',
                                                                                            'RegQueryValueW',
                                                                                            'RegOpenKeyW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'ReportEventW',
                                                                                            'DeregisterEventSource',
                                                                                            'RegisterEventSourceW',
                                                                                            'GetVersion',
                                                                                            'ConvertDefaultLocale',
                                                                                            'GetCurrentThread',
                                                                                            'GlobalDeleteAtom',
                                                                                            'GetModuleHandleA',
                                                                                            'MulDiv',
                                                                                            'GlobalUnlock',
                                                                                            'LocalFree',
                                                                                            'GlobalFree',
                                                                                            'GlobalAddAtomW',
                                                                                            'FreeResource',
                                                                                            'LocalAlloc',
                                                                                            'GetVersionExA',
                                                                                            'LoadLibraryA',
                                                                                            'CompareStringW',
                                                                                            'GlobalFindAtomW',
                                                                                            'GlobalFlags',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'TlsGetValue',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalHandle',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'LocalReAlloc',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'lstrlenA',
                                                                                            'GetLocaleInfoW',
                                                                                            'LockFile',
                                                                                            'UnlockFile',
                                                                                            'GetFileSize',
                                                                                            'DuplicateHandle',
                                                                                            'GetVolumeInformationW',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'SetErrorMode',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'ExitProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'HeapSize',
                                                                                            'SetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetModuleFileNameA',
                                                                                            'EnumResourceLanguagesW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetCommandLineA',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'VirtualAlloc',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetTimeFormatA',
                                                                                            'GetDateFormatA',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'EnumSystemLocalesA',
                                                                                            'IsValidLocale',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'CreateFileA',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'LoadLibraryExW',
                                                                                            'CompareStringA',
                                                                                            'InterlockedExchange',
                                                                                            'GlobalLock',
                                                                                            'lstrcmpW',
                                                                                            'GlobalAlloc',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryW',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetSystemInfo',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetStdHandle',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'WriteConsoleW',
                                                                                            'ReadFile',
                                                                                            'DeleteCriticalSection',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'InitializeCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'lstrcmpA',
                                                                                            'EnterCriticalSection',
                                                                                            'lstrlenW',
                                                                                            'GetTickCount',
                                                                                            'TerminateProcess',
                                                                                            'Sleep',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetTempPathW',
                                                                                            'CreateEventW',
                                                                                            'FormatMessageW',
                                                                                            'GetCurrentProcess',
                                                                                            'IsWow64Process',
                                                                                            'CreateThread',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CloseHandle',
                                                                                            'GetFileTime',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'WideCharToMultiByte',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObject',
                                                                                            'InterlockedDecrement',
                                                                                            'CreateMutexW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetSystemDefaultLCID',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCommandLineW',
                                                                                            'lstrcpyW',
                                                                                            'WinExec',
                                                                                            'lstrcatW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetThreadLocale',
                                                                                            'IsDialogMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'MoveWindow',
                                                                                            'ShowWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'LoadCursorW',
                                                                                            'CharUpperW',
                                                                                            'UnregisterClassW',
                                                                                            'WinHelpW',
                                                                                            'GetCapture',
                                                                                            'GetClassLongW',
                                                                                            'GetClassNameW',
                                                                                            'SetPropW',
                                                                                            'GetPropW',
                                                                                            'RemovePropW',
                                                                                            'SetFocus',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetForegroundWindow',
                                                                                            'GetTopWindow',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'MapWindowPoints',
                                                                                            'SetForegroundWindow',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'GetClassInfoW',
                                                                                            'RegisterClassW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetDlgCtrlID',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'SetWindowLongW',
                                                                                            'SystemParametersInfoA',
                                                                                            'GetWindowPlacement',
                                                                                            'GetWindow',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetDesktopWindow',
                                                                                            'SetActiveWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'DestroyWindow',
                                                                                            'GetDlgItem',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'GetActiveWindow',
                                                                                            'IsWindowVisible',
                                                                                            'GetKeyState',
                                                                                            'PeekMessageW',
                                                                                            'GetCursorPos',
                                                                                            'ValidateRect',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetSubMenu',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'GetFocus',
                                                                                            'ModifyMenuW',
                                                                                            'GetMenuState',
                                                                                            'CheckMenuItem',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'ClientToScreen',
                                                                                            'ScreenToClient',
                                                                                            'GrayStringW',
                                                                                            'DrawTextExW',
                                                                                            'TabbedTextOutW',
                                                                                            'PostQuitMessage',
                                                                                            'DestroyMenu',
                                                                                            'InflateRect',
                                                                                            'RegisterWindowMessageW',
                                                                                            'SendDlgItemMessageW',
                                                                                            'PtInRect',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'GetParent',
                                                                                            'GetWindowLongW',
                                                                                            'GetLastActivePopup',
                                                                                            'IsWindowEnabled',
                                                                                            'SetCursor',
                                                                                            'GetSysColor',
                                                                                            'DrawStateW',
                                                                                            'FillRect',
                                                                                            'DrawIcon',
                                                                                            'SendMessageW',
                                                                                            'GetClientRect',
                                                                                            'InvalidateRect',
                                                                                            'GetSystemMetrics',
                                                                                            'KillTimer',
                                                                                            'EnableWindow',
                                                                                            'IsIconic',
                                                                                            'PostMessageW',
                                                                                            'LoadBitmapW',
                                                                                            'LoadImageW',
                                                                                            'SetTimer',
                                                                                            'GetWindowRect',
                                                                                            'SetWindowPos',
                                                                                            'LoadIconW',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'MessageBoxW',
                                                                                            'UnregisterClassA',
                                                                                            'SetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'MessageBeep',
                                                                                            'CopyIcon',
                                                                                            'WindowFromPoint',
                                                                                            'SendDlgItemMessageA',
                                                                                            'DrawTextW',
                                                                                            'GetBitmapDimensionEx',
                                                                                            'GetTextColor',
                                                                                            'RestoreDC',
                                                                                            'RectVisible',
                                                                                            'TextOutW',
                                                                                            'ExtTextOutW',
                                                                                            'Escape',
                                                                                            'SelectObject',
                                                                                            'SetViewportOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'CreateSolidBrush',
                                                                                            'SetWindowExtEx',
                                                                                            'ScaleWindowExtEx',
                                                                                            'CreateBitmap',
                                                                                            'GetStockObject',
                                                                                            'GetDeviceCaps',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DeleteDC',
                                                                                            'SaveDC',
                                                                                            'CreatePen',
                                                                                            'GetObjectW',
                                                                                            'ScaleViewportExtEx',
                                                                                            'CreateFontIndirectW',
                                                                                            'DeleteObject',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'GetClipBox',
                                                                                            'SetMapMode',
                                                                                            'SetTextColor',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'PtVisible',
                                                                                            'GetFileTitleW',
                                                                                            'OpenPrinterW',
                                                                                            'DocumentPropertiesW',
                                                                                            'ClosePrinter',
                                                                                            'ShellExecuteW',
                                                                                            'ShellExecuteExW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathStripToRootW',
                                                                                            'PathIsUNCW',
                                                                                            'PathFindExtensionW',
                                                                                            'CoSetProxyBlanket',
                                                                                            'CoInitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString',
                                                                                            'VariantClear',
                                                                                            'VariantChangeType',
                                                                                            'VariantInit',
                                                                                            'LdrGetProcedureAddress',
                                                                                            'LdrLoadDll',
                                                                                            'RtlInitString',
                                                                                            'RtlInitUnicodeString',
                                                                                            'LdrUnloadDll',
                                                                                            'GetAdaptersAddresses'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 16,
                                                                      'NumberOfImportFunctions': 365,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 320044,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 90112,
                                                                                       '.rsrc\x00\x00\x00': 323584,
                                                                                       '.text\x00\x00\x00': 344064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f682ddd88e8d48647fbd1cd8fa884f48e78b3baff02c00702115133cb662bec5'},
 'f6a0b698293529f5cd92d7e2e3885bf32d08ab42a103d32ca55db6a949baef8b': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 55520,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 55808,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f6a0b698293529f5cd92d7e2e3885bf32d08ab42a103d32ca55db6a949baef8b'},
 'f6c40e85d11f4014339b2b8fba5efe4a05d19963764f0c5244b1ceb2dece10fd': {'AddressOfEntryPoint': 1325248,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34816,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 1634304,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegSetValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SelectClipRgn',
                                                                                      'KERNEL32.dll': 'SetEnvironmentVariableA',
                                                                                      'OLEAUT32.dll': 'OleLoadPicture',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'SHDeleteKeyW',
                                                                                      'USER32.dll': 'PostThreadMessageW',
                                                                                      'WININET.dll': 'InternetAttemptConnect',
                                                                                      'WINMM.dll': 'mixerSetControlDetails',
                                                                                      'WINSPOOL.DRV': 'OpenPrinterW',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'ole32.dll': 'OleSetClipboard',
                                                                                      'oledlg.dll': 'OleUIBusyW'},
                                                                      'ImportedFunctions': ['LCMapStringA',
                                                                                            'HeapCreate',
                                                                                            'HeapSetInformation',
                                                                                            'GetStartupInfoA',
                                                                                            'SetHandleCount',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'HeapSize',
                                                                                            'GetFileType',
                                                                                            'RtlPcToFileHeader',
                                                                                            'RaiseException',
                                                                                            'GetCurrentDirectoryA',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwindEx',
                                                                                            'GetStartupInfoW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'VirtualQuery',
                                                                                            'GetSystemInfo',
                                                                                            'VirtualAlloc',
                                                                                            'CopyFileW',
                                                                                            'GlobalSize',
                                                                                            'SetErrorMode',
                                                                                            'FindResourceExW',
                                                                                            'GetProcessVersion',
                                                                                            'LCMapStringW',
                                                                                            'LocalReAlloc',
                                                                                            'GlobalReAlloc',
                                                                                            'GlobalFlags',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProfileIntW',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'GetFileTime',
                                                                                            'lstrcpyW',
                                                                                            'UnlockFile',
                                                                                            'LockFile',
                                                                                            'FlushFileBuffers',
                                                                                            'lstrcpynW',
                                                                                            'VirtualProtect',
                                                                                            'GlobalAddAtomW',
                                                                                            'GlobalFindAtomW',
                                                                                            'lstrcatW',
                                                                                            'GetVersionExA',
                                                                                            'GetModuleHandleA',
                                                                                            'FreeResource',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'lstrlenA',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpW',
                                                                                            'GlobalDeleteAtom',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTimeZoneInformation',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetStdHandle',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'IsBadReadPtr',
                                                                                            'IsBadWritePtr',
                                                                                            'IsBadCodePtr',
                                                                                            'GetLocaleInfoA',
                                                                                            'GetDriveTypeA',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'TlsAlloc',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'GetVersionExW',
                                                                                            'RemoveDirectoryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'WriteFile',
                                                                                            'CreateFileMappingW',
                                                                                            'MapViewOfFile',
                                                                                            'UnmapViewOfFile',
                                                                                            'GetTempPathW',
                                                                                            'CreatePipe',
                                                                                            'DuplicateHandle',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenEventW',
                                                                                            'LoadLibraryA',
                                                                                            'GetLongPathNameW',
                                                                                            'GlobalHandle',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetVersion',
                                                                                            'GetFullPathNameW',
                                                                                            'QueryDosDeviceW',
                                                                                            'DefineDosDeviceW',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileTime',
                                                                                            'ResetEvent',
                                                                                            'CloseHandle',
                                                                                            'GetVolumeInformationW',
                                                                                            'MoveFileW',
                                                                                            'SuspendThread',
                                                                                            'ResumeThread',
                                                                                            'FreeLibrary',
                                                                                            'lstrcmpiW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GlobalFree',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'GetTempFileNameW',
                                                                                            'SetThreadExecutionState',
                                                                                            'GetLogicalDrives',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'CreateEventA',
                                                                                            'DeviceIoControl',
                                                                                            'GetOverlappedResult',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'SetEvent',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'FindResourceW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'MulDiv',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'SetFilePointer',
                                                                                            'SetEndOfFile',
                                                                                            'GetFileSize',
                                                                                            'GetCurrentThread',
                                                                                            'SetThreadPriority',
                                                                                            'GetTickCount',
                                                                                            'GetLastError',
                                                                                            'SetLastError',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetFileAttributesW',
                                                                                            'FindNextFileW',
                                                                                            'CreateFileW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetLocaleInfoW',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'FindFirstFileW',
                                                                                            'GetDriveTypeW',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'FileTimeToSystemTime',
                                                                                            'GetLocalTime',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'ExitProcess',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateMutexW',
                                                                                            'DeleteCriticalSection',
                                                                                            'TlsFree',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'MessageBoxIndirectW',
                                                                                            'SetMenu',
                                                                                            'GetCapture',
                                                                                            'GetMessagePos',
                                                                                            'IsZoomed',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'ModifyMenuW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'WindowFromPoint',
                                                                                            'GetDCEx',
                                                                                            'GetDesktopWindow',
                                                                                            'GetKeyState',
                                                                                            'BeginDeferWindowPos',
                                                                                            'EndDeferWindowPos',
                                                                                            'EqualRect',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'GetClipboardData',
                                                                                            'GetSystemMenu',
                                                                                            'BroadcastSystemMessage',
                                                                                            'RemoveMenu',
                                                                                            'InsertMenuW',
                                                                                            'FindWindowW',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowScrollBar',
                                                                                            'LoadImageW',
                                                                                            'DestroyIcon',
                                                                                            'GetIconInfo',
                                                                                            'CreateIconIndirect',
                                                                                            'GetWindowDC',
                                                                                            'DrawFocusRect',
                                                                                            'DrawEdge',
                                                                                            'FrameRect',
                                                                                            'OffsetRect',
                                                                                            'InflateRect',
                                                                                            'DrawStateW',
                                                                                            'GetClassNameW',
                                                                                            'ShowWindow',
                                                                                            'SystemParametersInfoW',
                                                                                            'SetFocus',
                                                                                            'GrayStringW',
                                                                                            'DrawTextW',
                                                                                            'TabbedTextOutW',
                                                                                            'RedrawWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'IsWindow',
                                                                                            'PtInRect',
                                                                                            'GetSysColor',
                                                                                            'ReleaseCapture',
                                                                                            'GetParent',
                                                                                            'GetFocus',
                                                                                            'SetCapture',
                                                                                            'PostMessageW',
                                                                                            'SetMenuDefaultItem',
                                                                                            'ClientToScreen',
                                                                                            'CheckMenuRadioItem',
                                                                                            'GetMenuItemID',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'SetWindowsHookExW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'CallNextHookEx',
                                                                                            'CallWindowProcW',
                                                                                            'SetDlgItemTextW',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetDlgItem',
                                                                                            'GetWindowPlacement',
                                                                                            'MoveWindow',
                                                                                            'MessageBoxW',
                                                                                            'CopyRect',
                                                                                            'MessageBeep',
                                                                                            'IsWindowVisible',
                                                                                            'GetClientRect',
                                                                                            'OpenClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'GetSystemMetrics',
                                                                                            'LockWindowUpdate',
                                                                                            'LoadBitmapW',
                                                                                            'FillRect',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetCursorPos',
                                                                                            'ScreenToClient',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SetCursor',
                                                                                            'LoadCursorW',
                                                                                            'KillTimer',
                                                                                            'SetTimer',
                                                                                            'EnableWindow',
                                                                                            'GetWindowRect',
                                                                                            'GetMenuStringW',
                                                                                            'LoadMenuW',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetWindowTextW',
                                                                                            'EnumChildWindows',
                                                                                            'GetWindowTextW',
                                                                                            'InvalidateRect',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemCount',
                                                                                            'CheckMenuItem',
                                                                                            'MessageBoxA',
                                                                                            'LoadIconW',
                                                                                            'SendMessageW',
                                                                                            'UpdateWindow',
                                                                                            'UnregisterClassW',
                                                                                            'PostQuitMessage',
                                                                                            'ShowOwnedPopups',
                                                                                            'IsWindowEnabled',
                                                                                            'GetLastActivePopup',
                                                                                            'PeekMessageW',
                                                                                            'ValidateRect',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'GetActiveWindow',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'GetMenuState',
                                                                                            'GetNextDlgTabItem',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'CheckRadioButton',
                                                                                            'SendDlgItemMessageW',
                                                                                            'IsDlgButtonChecked',
                                                                                            'IsDialogMessageW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'SetWindowPos',
                                                                                            'wsprintfW',
                                                                                            'EndDialog',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'SetActiveWindow',
                                                                                            'DestroyMenu',
                                                                                            'BeginPaint',
                                                                                            'EndPaint',
                                                                                            'GetWindow',
                                                                                            'IsIconic',
                                                                                            'SystemParametersInfoA',
                                                                                            'IntersectRect',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassW',
                                                                                            'GetClassInfoW',
                                                                                            'SetScrollInfo',
                                                                                            'GetScrollInfo',
                                                                                            'DeferWindowPos',
                                                                                            'AdjustWindowRectEx',
                                                                                            'GetMenu',
                                                                                            'MapWindowPoints',
                                                                                            'GetForegroundWindow',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollPos',
                                                                                            'GetScrollRange',
                                                                                            'SetScrollRange',
                                                                                            'TrackPopupMenu',
                                                                                            'GetTopWindow',
                                                                                            'ScrollWindow',
                                                                                            'GetMessageTime',
                                                                                            'GetWindowLongPtrW',
                                                                                            'IsChild',
                                                                                            'SendDlgItemMessageA',
                                                                                            'RemovePropW',
                                                                                            'GetPropW',
                                                                                            'SetPropW',
                                                                                            'CreateWindowExW',
                                                                                            'WinHelpW',
                                                                                            'RegisterWindowMessageW',
                                                                                            'wvsprintfW',
                                                                                            'SetRectEmpty',
                                                                                            'GetAsyncKeyState',
                                                                                            'MapDialogRect',
                                                                                            'CharUpperW',
                                                                                            'SetCursorPos',
                                                                                            'DestroyCursor',
                                                                                            'TranslateAcceleratorW',
                                                                                            'BringWindowToTop',
                                                                                            'LoadAcceleratorsW',
                                                                                            'ReuseDDElParam',
                                                                                            'UnpackDDElParam',
                                                                                            'IsRectEmpty',
                                                                                            'SetParent',
                                                                                            'SetRect',
                                                                                            'LoadStringW',
                                                                                            'PostThreadMessageW',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegSetValueExW',
                                                                                            'GetTokenInformation',
                                                                                            'OpenProcessToken',
                                                                                            'RegSetValueW',
                                                                                            'DragQueryFileW',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetSpecialFolderPathW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'DragFinish',
                                                                                            'DragAcceptFiles',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHGetMalloc',
                                                                                            'ShellExecuteExW',
                                                                                            'CreatePatternBrush',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'StretchDIBits',
                                                                                            'GetCharWidthW',
                                                                                            'CreateFontW',
                                                                                            'SetRectRgn',
                                                                                            'CombineRgn',
                                                                                            'GetTextMetricsW',
                                                                                            'LPtoDP',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'CopyMetaFileW',
                                                                                            'Rectangle',
                                                                                            'CreatePen',
                                                                                            'PatBlt',
                                                                                            'SetStretchBltMode',
                                                                                            'SetPixel',
                                                                                            'GetPixel',
                                                                                            'GetDIBits',
                                                                                            'SetDIBits',
                                                                                            'GetStockObject',
                                                                                            'StretchBlt',
                                                                                            'SetBkColor',
                                                                                            'SetTextColor',
                                                                                            'Escape',
                                                                                            'ExtTextOutW',
                                                                                            'TextOutW',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'CreateRectRgn',
                                                                                            'Ellipse',
                                                                                            'GetTextColor',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateBitmap',
                                                                                            'CreateDIBSection',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'BitBlt',
                                                                                            'SelectObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'CreateICW',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteDC',
                                                                                            'CreateFontIndirectW',
                                                                                            'MoveToEx',
                                                                                            'LineTo',
                                                                                            'IntersectClipRect',
                                                                                            'ExcludeClipRect',
                                                                                            'GetClipBox',
                                                                                            'SetMapMode',
                                                                                            'ScaleWindowExtEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'SetViewportExtEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetBkMode',
                                                                                            'RestoreDC',
                                                                                            'SaveDC',
                                                                                            'RoundRect',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'SelectClipRgn',
                                                                                            'GetSaveFileNameW',
                                                                                            'GetFileTitleW',
                                                                                            'GetOpenFileNameW',
                                                                                            'waveOutOpen',
                                                                                            'waveOutGetDevCapsW',
                                                                                            'waveOutWrite',
                                                                                            'waveOutPrepareHeader',
                                                                                            'waveOutUnprepareHeader',
                                                                                            'waveOutClose',
                                                                                            'waveOutReset',
                                                                                            'mixerGetDevCapsW',
                                                                                            'mixerOpen',
                                                                                            'mixerGetNumDevs',
                                                                                            'mixerClose',
                                                                                            'mixerGetLineControlsW',
                                                                                            'mixerGetLineInfoW',
                                                                                            'mixerGetControlDetailsW',
                                                                                            'mixerSetControlDetails',
                                                                                            'SHDeleteKeyW',
                                                                                            'ClosePrinter',
                                                                                            'DocumentPropertiesW',
                                                                                            'OpenPrinterW',
                                                                                            'ImageList_SetBkColor',
                                                                                            'ImageList_Create',
                                                                                            'CreatePropertySheetPageW',
                                                                                            'DestroyPropertySheetPage',
                                                                                            'PropertySheetW',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Add',
                                                                                            '_TrackMouseEvent',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUIBusyW',
                                                                                            'OleFlushClipboard',
                                                                                            'DoDragDrop',
                                                                                            'CoTaskMemFree',
                                                                                            'OleGetClipboard',
                                                                                            'OleInitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'OleUninitialize',
                                                                                            'ReleaseStgMedium',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitialize',
                                                                                            'RegisterDragDrop',
                                                                                            'CoLockObjectExternal',
                                                                                            'RevokeDragDrop',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'CoTaskMemAlloc',
                                                                                            'OleDuplicateData',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'OleSetClipboard',
                                                                                            'OleLoadPicture',
                                                                                            'HttpQueryInfoW',
                                                                                            'InternetReadFile',
                                                                                            'HttpOpenRequestW',
                                                                                            'HttpAddRequestHeadersW',
                                                                                            'HttpSendRequestW',
                                                                                            'InternetCloseHandle',
                                                                                            'InternetOpenW',
                                                                                            'InternetConnectW',
                                                                                            'InternetAttemptConnect'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 14,
                                                                      'NumberOfImportFunctions': 518,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 382880,
                                                                      'SectionNames': {'.data\x00\x00\x00': 751104,
                                                                                       '.pdata\x00\x00': 117248,
                                                                                       '.rdata\x00\x00': 1377792,
                                                                                       '.rsrc\x00\x00\x00': 382976,
                                                                                       '.text\x00\x00\x00': 1623040,
                                                                                       'TEXT\x00\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f6c40e85d11f4014339b2b8fba5efe4a05d19963764f0c5244b1ceb2dece10fd'},
 'f6c58fd43d203ece69a80f8dad51b85188bd138200cf2834798d7c5de950564b': {'AddressOfEntryPoint': 35408,
                                                                      'DebugRVA': 4240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyExW',
                                                                                      'KERNEL32.dll': 'IsDBCSLeadByte',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'USER32.dll': 'CharToOemA',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlMultiByteToUnicodeN'},
                                                                      'ImportedFunctions': ['_llseek',
                                                                                            '_lwrite',
                                                                                            '_lclose',
                                                                                            '_lcreat',
                                                                                            'SetFileTime',
                                                                                            'GetLastError',
                                                                                            'LocalAlloc',
                                                                                            '_lread',
                                                                                            '_lopen',
                                                                                            'CloseHandle',
                                                                                            'LocalFree',
                                                                                            'WaitForSingleObject',
                                                                                            'GetConsoleCP',
                                                                                            'WideCharToMultiByte',
                                                                                            'FormatMessageW',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetACP',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryExA',
                                                                                            'GetSystemInfo',
                                                                                            'GetProcAddress',
                                                                                            'RaiseException',
                                                                                            'GetModuleHandleW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'CreateFileMappingW',
                                                                                            'SetLastError',
                                                                                            'CreateFileW',
                                                                                            'GetVersionExW',
                                                                                            'GetLocaleInfoW',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadResource',
                                                                                            'FreeLibrary',
                                                                                            'FindResourceExW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'SearchPathW',
                                                                                            'lstrcmpA',
                                                                                            'GetStringTypeW',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileTime',
                                                                                            'VirtualProtect',
                                                                                            'lstrlenA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'HeapSetInformation',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpiA',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetConsoleOutputCP',
                                                                                            'Sleep',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'VirtualQuery',
                                                                                            'IsDBCSLeadByte',
                                                                                            '_except_handler4_common',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_vsnprintf',
                                                                                            'vswprintf_s',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'strcpy_s',
                                                                                            '_wsetlocale',
                                                                                            '_snwprintf_s',
                                                                                            'fflush',
                                                                                            'strncpy_s',
                                                                                            'toupper',
                                                                                            '_iob',
                                                                                            'printf',
                                                                                            'fputs',
                                                                                            '_controlfp',
                                                                                            'strcat_s',
                                                                                            '_wcsicmp',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnwprintf',
                                                                                            'wcsncmp',
                                                                                            'bsearch',
                                                                                            'memcpy',
                                                                                            'memcmp',
                                                                                            'memset',
                                                                                            'LoadStringW',
                                                                                            'CharLowerA',
                                                                                            'LoadStringA',
                                                                                            'CharToOemA',
                                                                                            'UuidCreate',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'NlsMbCodePageTag',
                                                                                            'RtlMultiByteToUnicodeN'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 115,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 6416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 3584,
                                                                                       '.rsrc\x00\x00\x00': 6656,
                                                                                       '.text\x00\x00\x00': 33792},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f6c58fd43d203ece69a80f8dad51b85188bd138200cf2834798d7c5de950564b'},
 'f6cd7352d96fa8c8668e4f77751cf748212c237436b9b02f808190cf26a59fe7': {'AddressOfEntryPoint': 138480,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSVCRT.dll': 'exit',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'SHELL32.dll': 'ShellExecuteExA',
                                                                                      'USER32.dll': 'SetTimer'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'ExitProcess',
                                                                                            'exit',
                                                                                            'SysAllocString',
                                                                                            'ShellExecuteExA',
                                                                                            'SetTimer'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 8,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 26676,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 27136,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 40960},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f6cd7352d96fa8c8668e4f77751cf748212c237436b9b02f808190cf26a59fe7'},
 'f716f42d63040941cc2403b860200f829f67a0a58500708a21a2c46b47c65a45': {'AddressOfEntryPoint': 97202,
                                                                      'DebugRVA': 102768,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 102400,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'InterlockedExchange',
                                                                                      'MSVCR100.dll': 'memcpy'},
                                                                      'ImportedFunctions': ['WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'Sleep',
                                                                                            'LocalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'SetLastError',
                                                                                            'LoadLibraryExW',
                                                                                            'CloseHandle',
                                                                                            'GetLastError',
                                                                                            'CreateProcessW',
                                                                                            'LocalAlloc',
                                                                                            'CreateProcessA',
                                                                                            'GetSystemDirectoryW',
                                                                                            'CreateFileW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetFullPathNameW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'VerSetConditionMask',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'lstrcmpA',
                                                                                            'OutputDebugStringW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'IsDebuggerPresent',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'EncodePointer',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'InterlockedExchange',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__initenv',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_crt_debugger_hook',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_amsg_exit',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'wcscmp',
                                                                                            '_wcsnicmp',
                                                                                            'isalpha',
                                                                                            'wcslen',
                                                                                            'wcstok',
                                                                                            'getchar',
                                                                                            'exit',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'printf',
                                                                                            'wprintf',
                                                                                            '_stricmp',
                                                                                            'memset',
                                                                                            'memcpy'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 81,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.rdata\x00\x00': 3584,
                                                                                       '.reloc\x00\x00': 11264,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 94720},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f716f42d63040941cc2403b860200f829f67a0a58500708a21a2c46b47c65a45'},
 'f71c8f75c886b60689574a7353fe79f3a140ea5c2263595354af7f8959ab485f': {'AddressOfEntryPoint': 5776,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'SHELL32.dll': 'ShellAboutW',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '?terminate@@YAXXZ'},
                                                                      'ImportedFunctions': ['GetDateFormatW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'HeapSetInformation',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            'LoadStringW',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wcmdln',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            'ShellAboutW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 35,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 49608,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 49664,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f71c8f75c886b60689574a7353fe79f3a140ea5c2263595354af7f8959ab485f'},
 'f7698776c192abe73d84b35c270860d56e57fd80b9c1c018a801e80830ebb8c4': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 45568,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 45568,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f7698776c192abe73d84b35c270860d56e57fd80b9c1c018a801e80830ebb8c4'},
 'f778d267fc863772f35601fcea10ebff9a42f95ddd34c14c58af58e2f6d4cf96': {'AddressOfEntryPoint': 14960,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'Sleep',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'WINSTA.dll': 'WinStationGetAllProcesses',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['WinStationTerminateProcess',
                                                                                            'WinStationEnumerateProcesses',
                                                                                            'WinStationFreeMemory',
                                                                                            'WinStationFreeGAPMemory',
                                                                                            'WinStationOpenServerW',
                                                                                            'WinStationGetAllProcesses',
                                                                                            'LoadStringW',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetThreadUILanguage',
                                                                                            'FormatMessageW',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'HeapSetInformation',
                                                                                            'FreeLibrary',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryW',
                                                                                            'WriteConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetStdHandle',
                                                                                            'SetLastError',
                                                                                            'GetFileType',
                                                                                            'GetCommandLineW',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'FindFirstFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'setlocale',
                                                                                            'towupper',
                                                                                            '_wsetlocale',
                                                                                            'vfwprintf',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'vswprintf_s',
                                                                                            '_ultoa',
                                                                                            'wcscat_s',
                                                                                            'wcscpy_s',
                                                                                            '_wcsnicmp',
                                                                                            'wcstol',
                                                                                            'memmove',
                                                                                            '_wcsdup',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '_iob',
                                                                                            '_wcslwr',
                                                                                            'fwprintf',
                                                                                            'wcstoul',
                                                                                            'swprintf_s',
                                                                                            'wcschr',
                                                                                            'memcpy',
                                                                                            'wcsncpy_s',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 77,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2104,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 12800},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f778d267fc863772f35601fcea10ebff9a42f95ddd34c14c58af58e2f6d4cf96'},
 'f77a0b548c32115a7aa6a2951124e1fc550b6b24cf3e14bfba1852b9c74ed5ad': {'AddressOfEntryPoint': 7581,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 24576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['lstrcmpiA',
                                                                                            'lstrcpyA',
                                                                                            'lstrlenA',
                                                                                            '_lclose',
                                                                                            'RemoveDirectoryA',
                                                                                            'DeleteFileA',
                                                                                            'GetModuleFileNameA',
                                                                                            '_lread',
                                                                                            '_llseek',
                                                                                            '_lopen',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'CreateDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'lstrcatA',
                                                                                            'GetTempPathA',
                                                                                            'GetCurrentDirectoryA',
                                                                                            '_lwrite',
                                                                                            '_lcreat',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessA',
                                                                                            'ExitProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'GetModuleHandleA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersion',
                                                                                            'InitializeCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetEnvironmentVariableA',
                                                                                            'GetVersionExA',
                                                                                            'HeapDestroy',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'RtlUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetStdHandle',
                                                                                            'GetFileType',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsSetValue',
                                                                                            'TlsAlloc',
                                                                                            'SetLastError',
                                                                                            'TlsGetValue',
                                                                                            'GetLastError',
                                                                                            'WriteFile',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'wsprintfA',
                                                                                            'LoadCursorA',
                                                                                            'SetCursor',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 26928,
                                                                      'SectionNames': {'.data\x00\x00\x00': 12288,
                                                                                       '.rdata\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 28672,
                                                                                       '.text\x00\x00\x00': 20480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f77a0b548c32115a7aa6a2951124e1fc550b6b24cf3e14bfba1852b9c74ed5ad'},
 'f7ae0aa18ff14aff0e37972ce0a48545d2d3752a82e6696a5dcee801ae3466f3': {'AddressOfEntryPoint': 2719560,
                                                                      'DebugRVA': 4248704,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 3485696,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'DNSAPI.dll': 'DnsFree',
                                                                                      'GDI32.dll': 'CopyMetaFileW',
                                                                                      'IMM32.dll': 'ImmReleaseContext',
                                                                                      'KERNEL32.dll': 'FileTimeToSystemTime',
                                                                                      'MSIMG32.dll': 'AlphaBlend',
                                                                                      'OLEACC.dll': 'LresultFromObject',
                                                                                      'OLEAUT32.dll': 'SafeArrayGetElemsize',
                                                                                      'SHELL32.dll': 'SHGetFileInfoW',
                                                                                      'SHLWAPI.dll': 'PathFindExtensionW',
                                                                                      'USER32.dll': 'DrawTextExW',
                                                                                      'USERENV.dll': 'EnterCriticalPolicySection',
                                                                                      'UxTheme.dll': 'DrawThemeText',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'WINMM.dll': 'PlaySoundW',
                                                                                      'WINSPOOL.DRV': 'EnumPrintersW',
                                                                                      'WS2_32.dll': 'WSAAsyncSelect',
                                                                                      'gdiplus.dll': 'GdiplusShutdown',
                                                                                      'ole32.dll': 'StgCreateDocfile',
                                                                                      'oledlg.dll': 'OleUIBusyW'},
                                                                      'ImportedFunctions': ['GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'FindNextFileW',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileExW',
                                                                                            'FindFirstFileExA',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadConsoleW',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'GetTimeZoneInformation',
                                                                                            'EnumSystemLocalesW',
                                                                                            'IsValidLocale',
                                                                                            'GetTimeFormatW',
                                                                                            'GetDateFormatW',
                                                                                            'GetACP',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetStdHandle',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'SetStdHandle',
                                                                                            'HeapQueryInformation',
                                                                                            'FreeLibraryAndExitThread',
                                                                                            'ExitThread',
                                                                                            'CreateThread',
                                                                                            'VirtualQuery',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetCommandLineW',
                                                                                            'GetCommandLineA',
                                                                                            'ExitProcess',
                                                                                            'InterlockedFlushSList',
                                                                                            'InterlockedPushEntrySList',
                                                                                            'RtlUnwindEx',
                                                                                            'RtlPcToFileHeader',
                                                                                            'GetCPInfo',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW',
                                                                                            'OutputDebugStringW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'WriteConsoleW',
                                                                                            'GetFileType',
                                                                                            'SetConsoleCtrlHandler',
                                                                                            'SystemTimeToFileTime',
                                                                                            'EncodePointer',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CompareStringW',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GlobalFlags',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesExW',
                                                                                            'GetFileSizeEx',
                                                                                            'GetFileTime',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SetFileAttributesW',
                                                                                            'SetFileTime',
                                                                                            'SystemTimeToTzSpecificLocalTime',
                                                                                            'SetErrorMode',
                                                                                            'FreeResource',
                                                                                            'GlobalFindAtomW',
                                                                                            'VirtualProtect',
                                                                                            'lstrcpyW',
                                                                                            'FindResourceExW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'VerSetConditionMask',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetTickCount',
                                                                                            'GetProfileIntW',
                                                                                            'SearchPathW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'ReplaceFileW',
                                                                                            'GetUserDefaultLCID',
                                                                                            'LocalLock',
                                                                                            'LocalUnlock',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetAtomNameW',
                                                                                            'GlobalHandle',
                                                                                            'GlobalReAlloc',
                                                                                            'TlsFree',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'GetPrivateProfileIntW',
                                                                                            'ResumeThread',
                                                                                            'SuspendThread',
                                                                                            'SetThreadPriority',
                                                                                            'GlobalGetAtomNameW',
                                                                                            'GlobalAddAtomW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStringTypeExW',
                                                                                            'QueryActCtxW',
                                                                                            'FindActCtxSectionStringW',
                                                                                            'DeactivateActCtx',
                                                                                            'ActivateActCtx',
                                                                                            'CreateActCtxW',
                                                                                            'MoveFileW',
                                                                                            'DecodePointer',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'HeapDestroy',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapSize',
                                                                                            'GetProcessHeap',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'FreeLibrary',
                                                                                            'LoadLibraryExW',
                                                                                            'LoadResource',
                                                                                            'LockResource',
                                                                                            'SizeofResource',
                                                                                            'FindResourceW',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'LocalFree',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetCurrentProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetVersion',
                                                                                            'GetModuleHandleA',
                                                                                            'lstrcmpA',
                                                                                            'lstrlenA',
                                                                                            'LoadLibraryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateEventW',
                                                                                            'Sleep',
                                                                                            'InitializeCriticalSectionEx',
                                                                                            'GetSystemDirectoryA',
                                                                                            'LoadLibraryA',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalFree',
                                                                                            'GetComputerNameW',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleExW',
                                                                                            'DuplicateHandle',
                                                                                            'GlobalAlloc',
                                                                                            'WriteProfileStringW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'SetEvent',
                                                                                            'ReleaseMutex',
                                                                                            'WaitForSingleObjectEx',
                                                                                            'CreateMutexW',
                                                                                            'OpenMutexW',
                                                                                            'OpenEventW',
                                                                                            'GetCurrentProcessId',
                                                                                            'LocalReAlloc',
                                                                                            'WaitForMultipleObjects',
                                                                                            'FreeConsole',
                                                                                            'OutputDebugStringA',
                                                                                            'GetConsoleWindow',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'ResetEvent',
                                                                                            'GetCurrentThread',
                                                                                            'lstrlenW',
                                                                                            'GlobalSize',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'MulDiv',
                                                                                            'FormatMessageW',
                                                                                            'CopyFileW',
                                                                                            'GetCurrentThreadId',
                                                                                            'GlobalDeleteAtom',
                                                                                            'lstrcmpW',
                                                                                            'CompareStringA',
                                                                                            'CreateFileW',
                                                                                            'DeleteFileW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetFileSize',
                                                                                            'GetFullPathNameW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetVolumeInformationW',
                                                                                            'LockFile',
                                                                                            'ReadFile',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'UnlockFile',
                                                                                            'WriteFile',
                                                                                            'FileTimeToSystemTime',
                                                                                            'UnregisterClassW',
                                                                                            'PostMessageW',
                                                                                            'GetWindowTextW',
                                                                                            'EnumWindows',
                                                                                            'GetWindowThreadProcessId',
                                                                                            'SendMessageTimeoutW',
                                                                                            'PostQuitMessage',
                                                                                            'PeekMessageW',
                                                                                            'ShowWindow',
                                                                                            'SetTimer',
                                                                                            'KillTimer',
                                                                                            'CharLowerW',
                                                                                            'GetMenuStringW',
                                                                                            'GetMenuState',
                                                                                            'GetSubMenu',
                                                                                            'GetMenuItemID',
                                                                                            'GetMenuItemCount',
                                                                                            'GetTabbedTextExtentW',
                                                                                            'DestroyCursor',
                                                                                            'GetWindowRgn',
                                                                                            'WindowFromDC',
                                                                                            'CreateMenu',
                                                                                            'InSendMessage',
                                                                                            'SendNotifyMessageW',
                                                                                            'SubtractRect',
                                                                                            'TranslateMDISysAccel',
                                                                                            'DefMDIChildProcW',
                                                                                            'DefFrameProcW',
                                                                                            'DrawMenuBar',
                                                                                            'EnumChildWindows',
                                                                                            'GetUpdateRect',
                                                                                            'IsClipboardFormatAvailable',
                                                                                            'CharUpperBuffW',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'ModifyMenuW',
                                                                                            'GetDoubleClickTime',
                                                                                            'SetMenuDefaultItem',
                                                                                            'CopyAcceleratorTableW',
                                                                                            'DestroyAcceleratorTable',
                                                                                            'CreateAcceleratorTableW',
                                                                                            'GetKeyboardState',
                                                                                            'ToUnicodeEx',
                                                                                            'MapVirtualKeyExW',
                                                                                            'IsCharLowerW',
                                                                                            'GetKeyboardLayout',
                                                                                            'PostThreadMessageW',
                                                                                            'GetComboBoxInfo',
                                                                                            'MonitorFromPoint',
                                                                                            'UpdateLayeredWindow',
                                                                                            'DrawIcon',
                                                                                            'FrameRect',
                                                                                            'CopyIcon',
                                                                                            'SetCursorPos',
                                                                                            'IsZoomed',
                                                                                            'DrawFrameControl',
                                                                                            'DrawEdge',
                                                                                            'DrawStateW',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'OpenClipboard',
                                                                                            'SetWindowRgn',
                                                                                            'SetClassLongPtrW',
                                                                                            'EnumDisplayMonitors',
                                                                                            'SetLayeredWindowAttributes',
                                                                                            'GetMenuDefaultItem',
                                                                                            'NotifyWinEvent',
                                                                                            'InvertRect',
                                                                                            'HideCaret',
                                                                                            'EnableScrollBar',
                                                                                            'MessageBeep',
                                                                                            'GetIconInfo',
                                                                                            'DrawIconEx',
                                                                                            'DrawFocusRect',
                                                                                            'GetNextDlgGroupItem',
                                                                                            'GetDialogBaseUnits',
                                                                                            'TrackMouseEvent',
                                                                                            'AppendMenuW',
                                                                                            'RemoveMenu',
                                                                                            'CharUpperW',
                                                                                            'GetSystemMetrics',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'DispatchMessageW',
                                                                                            'WaitMessage',
                                                                                            'EnableWindow',
                                                                                            'SendMessageW',
                                                                                            'GetFocus',
                                                                                            'CheckMenuItem',
                                                                                            'EnableMenuItem',
                                                                                            'SetMenuItemBitmaps',
                                                                                            'LockWindowUpdate',
                                                                                            'GetDCEx',
                                                                                            'SetCapture',
                                                                                            'SetRect',
                                                                                            'WindowFromPoint',
                                                                                            'MapDialogRect',
                                                                                            'GetAsyncKeyState',
                                                                                            'GetNextDlgTabItem',
                                                                                            'EndDialog',
                                                                                            'CreateDialogIndirectParamW',
                                                                                            'SendDlgItemMessageA',
                                                                                            'SetParent',
                                                                                            'GetSystemMenu',
                                                                                            'IsRectEmpty',
                                                                                            'UnionRect',
                                                                                            'GetMenuItemInfoW',
                                                                                            'MapVirtualKeyW',
                                                                                            'GetKeyNameTextW',
                                                                                            'InflateRect',
                                                                                            'GetMonitorInfoW',
                                                                                            'MonitorFromWindow',
                                                                                            'GetScrollInfo',
                                                                                            'SetScrollInfo',
                                                                                            'GetTopWindow',
                                                                                            'GetClassLongPtrW',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'MapWindowPoints',
                                                                                            'AdjustWindowRectEx',
                                                                                            'RemovePropW',
                                                                                            'GetPropW',
                                                                                            'SetPropW',
                                                                                            'ShowScrollBar',
                                                                                            'GetScrollRange',
                                                                                            'SetScrollRange',
                                                                                            'GetScrollPos',
                                                                                            'SetScrollPos',
                                                                                            'ScrollWindow',
                                                                                            'RedrawWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'GetForegroundWindow',
                                                                                            'GetMenuCheckMarkDimensions',
                                                                                            'SetMenuItemInfoW',
                                                                                            'GetParent',
                                                                                            'LoadBitmapW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'TrackPopupMenu',
                                                                                            'EndDeferWindowPos',
                                                                                            'DeferWindowPos',
                                                                                            'BeginDeferWindowPos',
                                                                                            'SetWindowPlacement',
                                                                                            'GetWindowPlacement',
                                                                                            'DestroyWindow',
                                                                                            'IsChild',
                                                                                            'IsMenu',
                                                                                            'CreateWindowExW',
                                                                                            'GetClassInfoExW',
                                                                                            'RegisterClassW',
                                                                                            'CallWindowProcW',
                                                                                            'DefWindowProcW',
                                                                                            'GetMessageTime',
                                                                                            'GetMessagePos',
                                                                                            'RegisterWindowMessageW',
                                                                                            'FillRect',
                                                                                            'ScreenToClient',
                                                                                            'EndPaint',
                                                                                            'BeginPaint',
                                                                                            'GetWindowDC',
                                                                                            'TabbedTextOutW',
                                                                                            'GrayStringW',
                                                                                            'IsWindow',
                                                                                            'MoveWindow',
                                                                                            'SetWindowPos',
                                                                                            'GetDlgItem',
                                                                                            'SetDlgItemInt',
                                                                                            'GetDlgItemInt',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'CheckDlgButton',
                                                                                            'CheckRadioButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgCtrlID',
                                                                                            'SetFocus',
                                                                                            'IsWindowEnabled',
                                                                                            'ScrollWindowEx',
                                                                                            'SetWindowTextW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindow',
                                                                                            'IsDialogMessageW',
                                                                                            'GetClassInfoW',
                                                                                            'IsWindowVisible',
                                                                                            'IsIconic',
                                                                                            'BringWindowToTop',
                                                                                            'GetActiveWindow',
                                                                                            'GetKeyState',
                                                                                            'GetCapture',
                                                                                            'ReleaseCapture',
                                                                                            'LoadAcceleratorsW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'LoadMenuW',
                                                                                            'GetMenu',
                                                                                            'SetMenu',
                                                                                            'CreatePopupMenu',
                                                                                            'DestroyMenu',
                                                                                            'InsertMenuItemW',
                                                                                            'UpdateWindow',
                                                                                            'SetActiveWindow',
                                                                                            'InvalidateRect',
                                                                                            'SetCursor',
                                                                                            'GetSysColor',
                                                                                            'SetRectEmpty',
                                                                                            'CopyRect',
                                                                                            'IntersectRect',
                                                                                            'InsertMenuW',
                                                                                            'OffsetRect',
                                                                                            'EqualRect',
                                                                                            'GetDesktopWindow',
                                                                                            'GetClassNameW',
                                                                                            'GetLastActivePopup',
                                                                                            'LoadIconW',
                                                                                            'DestroyIcon',
                                                                                            'LoadImageW',
                                                                                            'WinHelpW',
                                                                                            'GetMenuBarInfo',
                                                                                            'UnpackDDElParam',
                                                                                            'ReuseDDElParam',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'ValidateRect',
                                                                                            'GetCursorPos',
                                                                                            'SetWindowsHookExW',
                                                                                            'CallNextHookEx',
                                                                                            'ShowOwnedPopups',
                                                                                            'MessageBoxW',
                                                                                            'GetDC',
                                                                                            'ReleaseDC',
                                                                                            'GetSysColorBrush',
                                                                                            'LoadCursorW',
                                                                                            'GetClientRect',
                                                                                            'CopyImage',
                                                                                            'SystemParametersInfoW',
                                                                                            'DeleteMenu',
                                                                                            'GetWindowRect',
                                                                                            'ClientToScreen',
                                                                                            'PtInRect',
                                                                                            'RealChildWindowFromPoint',
                                                                                            'DrawTextW',
                                                                                            'DrawTextExW',
                                                                                            'GetTextFaceW',
                                                                                            'GetTextAlign',
                                                                                            'GetStretchBltMode',
                                                                                            'GetPolyFillMode',
                                                                                            'GetNearestColor',
                                                                                            'GetBkMode',
                                                                                            'GetROP2',
                                                                                            'SetAbortProc',
                                                                                            'AbortDoc',
                                                                                            'EndPage',
                                                                                            'StartPage',
                                                                                            'EndDoc',
                                                                                            'DeleteMetaFile',
                                                                                            'CreateMetaFileW',
                                                                                            'CloseMetaFile',
                                                                                            'GetViewportOrgEx',
                                                                                            'GetWindowOrgEx',
                                                                                            'SetPixelV',
                                                                                            'SetPaletteEntries',
                                                                                            'ExtFloodFill',
                                                                                            'PtInRegion',
                                                                                            'GetBoundsRect',
                                                                                            'FrameRgn',
                                                                                            'FillRgn',
                                                                                            'RoundRect',
                                                                                            'GetCurrentObject',
                                                                                            'OffsetRgn',
                                                                                            'GetRgnBox',
                                                                                            'Rectangle',
                                                                                            'LPtoDP',
                                                                                            'CreateRoundRectRgn',
                                                                                            'Polyline',
                                                                                            'Polygon',
                                                                                            'CreatePolygonRgn',
                                                                                            'GetTextColor',
                                                                                            'Ellipse',
                                                                                            'CreateEllipticRgn',
                                                                                            'SetDIBColorTable',
                                                                                            'CreateDIBSection',
                                                                                            'StretchBlt',
                                                                                            'SetPixel',
                                                                                            'GetDIBits',
                                                                                            'GetTextCharsetInfo',
                                                                                            'EnumFontFamiliesW',
                                                                                            'CreateDIBitmap',
                                                                                            'RealizePalette',
                                                                                            'GetSystemPaletteEntries',
                                                                                            'GetPaletteEntries',
                                                                                            'GetNearestPaletteIndex',
                                                                                            'CreatePalette',
                                                                                            'EnumFontFamiliesExW',
                                                                                            'GetTextMetricsW',
                                                                                            'GetBkColor',
                                                                                            'StretchDIBits',
                                                                                            'GetCharWidthW',
                                                                                            'CreateFontW',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'DPtoLP',
                                                                                            'SetRectRgn',
                                                                                            'PatBlt',
                                                                                            'GetMapMode',
                                                                                            'CreateRectRgnIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'CombineRgn',
                                                                                            'ScaleWindowExtEx',
                                                                                            'ScaleViewportExtEx',
                                                                                            'OffsetWindowOrgEx',
                                                                                            'OffsetViewportOrgEx',
                                                                                            'SetWindowOrgEx',
                                                                                            'SetWindowExtEx',
                                                                                            'SetViewportOrgEx',
                                                                                            'SetViewportExtEx',
                                                                                            'PolylineTo',
                                                                                            'PolyBezierTo',
                                                                                            'ExtTextOutW',
                                                                                            'TextOutW',
                                                                                            'MoveToEx',
                                                                                            'GetObjectW',
                                                                                            'ExtCreatePen',
                                                                                            'SetArcDirection',
                                                                                            'SelectClipPath',
                                                                                            'PolyDraw',
                                                                                            'ArcTo',
                                                                                            'StartDocW',
                                                                                            'SetColorAdjustment',
                                                                                            'ModifyWorldTransform',
                                                                                            'SetWorldTransform',
                                                                                            'EnumMetaFile',
                                                                                            'PlayMetaFileRecord',
                                                                                            'SetTextJustification',
                                                                                            'SetTextAlign',
                                                                                            'SetTextColor',
                                                                                            'SetTextCharacterExtra',
                                                                                            'SetStretchBltMode',
                                                                                            'SetROP2',
                                                                                            'SetPolyFillMode',
                                                                                            'GetLayout',
                                                                                            'SetLayout',
                                                                                            'SetMapMode',
                                                                                            'SetGraphicsMode',
                                                                                            'SetMapperFlags',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'SelectPalette',
                                                                                            'SelectObject',
                                                                                            'ExtSelectClipRgn',
                                                                                            'SelectClipRgn',
                                                                                            'SaveDC',
                                                                                            'RestoreDC',
                                                                                            'RectVisible',
                                                                                            'PtVisible',
                                                                                            'PlayMetaFile',
                                                                                            'OffsetClipRgn',
                                                                                            'LineTo',
                                                                                            'IntersectClipRect',
                                                                                            'GetWindowExtEx',
                                                                                            'GetViewportExtEx',
                                                                                            'GetStockObject',
                                                                                            'GetPixel',
                                                                                            'GetObjectType',
                                                                                            'GetCurrentPositionEx',
                                                                                            'GetClipRgn',
                                                                                            'GetClipBox',
                                                                                            'ExcludeClipRect',
                                                                                            'Escape',
                                                                                            'DeleteDC',
                                                                                            'CreateSolidBrush',
                                                                                            'CreateRectRgn',
                                                                                            'CreatePatternBrush',
                                                                                            'CreatePen',
                                                                                            'CreateHatchBrush',
                                                                                            'CreateDIBPatternBrushPt',
                                                                                            'BitBlt',
                                                                                            'DeleteObject',
                                                                                            'CreateCompatibleDC',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'CreateBitmap',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateDCW',
                                                                                            'CopyMetaFileW',
                                                                                            'TransparentBlt',
                                                                                            'AlphaBlend',
                                                                                            'DeletePrinterConnectionW',
                                                                                            'AddPrinterConnectionW',
                                                                                            'GetPrinterW',
                                                                                            'GetJobW',
                                                                                            'DocumentPropertiesW',
                                                                                            'SetPrinterW',
                                                                                            'GetPrinterDataW',
                                                                                            'ClosePrinter',
                                                                                            'OpenPrinterW',
                                                                                            'EnumPrintersW',
                                                                                            'SystemFunction036',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'SetFileSecurityW',
                                                                                            'GetFileSecurityW',
                                                                                            'RegQueryValueW',
                                                                                            'RegEnumKeyW',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegSetValueW',
                                                                                            'LookupAccountSidW',
                                                                                            'IsValidSid',
                                                                                            'GetSidSubAuthorityCount',
                                                                                            'GetSidSubAuthority',
                                                                                            'GetSidIdentifierAuthority',
                                                                                            'OpenThreadToken',
                                                                                            'QueryServiceStatus',
                                                                                            'OpenServiceW',
                                                                                            'OpenSCManagerW',
                                                                                            'CloseServiceHandle',
                                                                                            'RegOpenKeyW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'EqualSid',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyA',
                                                                                            'GetUserNameW',
                                                                                            'ReportEventW',
                                                                                            'RegisterEventSourceW',
                                                                                            'DeregisterEventSource',
                                                                                            'ConvertStringSidToSidW',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'GetTokenInformation',
                                                                                            'CopySid',
                                                                                            'OpenProcessToken',
                                                                                            'SetEntriesInAclW',
                                                                                            'LookupAccountNameW',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'InitializeAcl',
                                                                                            'GetLengthSid',
                                                                                            'FreeSid',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'SHAddToRecentDocs',
                                                                                            'ExtractIconW',
                                                                                            'ShellExecuteW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetDesktopFolder',
                                                                                            'ShellExecuteExW',
                                                                                            'SHAppBarMessage',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetMalloc',
                                                                                            'SHGetFileInfoW',
                                                                                            'PathIsUNCW',
                                                                                            'PathStripToRootW',
                                                                                            'PathFindFileNameW',
                                                                                            'PathRemoveExtensionW',
                                                                                            'PathRemoveFileSpecW',
                                                                                            'StrFormatKBSizeW',
                                                                                            'PathFindExtensionW',
                                                                                            'IsThemeBackgroundPartiallyTransparent',
                                                                                            'GetThemeSysColor',
                                                                                            'GetWindowTheme',
                                                                                            'GetCurrentThemeName',
                                                                                            'GetThemeColor',
                                                                                            'IsAppThemed',
                                                                                            'GetThemePartSize',
                                                                                            'CloseThemeData',
                                                                                            'OpenThemeData',
                                                                                            'DrawThemeParentBackground',
                                                                                            'DrawThemeBackground',
                                                                                            'DrawThemeText',
                                                                                            'CoInitializeEx',
                                                                                            'CLSIDFromString',
                                                                                            'CoDisconnectObject',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'OleSetClipboard',
                                                                                            'OleFlushClipboard',
                                                                                            'OleIsCurrentClipboard',
                                                                                            'CreateItemMoniker',
                                                                                            'OleQueryCreateFromData',
                                                                                            'CreateGenericComposite',
                                                                                            'StgCreateDocfileOnILockBytes',
                                                                                            'OleRegEnumVerbs',
                                                                                            'OleRegGetMiscStatus',
                                                                                            'DoDragDrop',
                                                                                            'OleGetClipboard',
                                                                                            'CoLockObjectExternal',
                                                                                            'RegisterDragDrop',
                                                                                            'RevokeDragDrop',
                                                                                            'PropVariantCopy',
                                                                                            'OleSetMenuDescriptor',
                                                                                            'OleLockRunning',
                                                                                            'StgOpenStorage',
                                                                                            'StgOpenStorageOnILockBytes',
                                                                                            'StgIsStorageFile',
                                                                                            'CreateFileMoniker',
                                                                                            'CreateILockBytesOnHGlobal',
                                                                                            'OleCreateMenuDescriptor',
                                                                                            'OleDestroyMenuDescriptor',
                                                                                            'OleTranslateAccelerator',
                                                                                            'CoInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'SetConvertStg',
                                                                                            'WriteClassStm',
                                                                                            'OleCreate',
                                                                                            'OleRegGetUserType',
                                                                                            'ReleaseStgMedium',
                                                                                            'OleDuplicateData',
                                                                                            'ReadFmtUserTypeStg',
                                                                                            'WriteFmtUserTypeStg',
                                                                                            'WriteClassStg',
                                                                                            'ReadClassStg',
                                                                                            'CreateBindCtx',
                                                                                            'CoTreatAsClass',
                                                                                            'CoTaskMemFree',
                                                                                            'CoTaskMemAlloc',
                                                                                            'StringFromCLSID',
                                                                                            'CoCreateGuid',
                                                                                            'StringFromGUID2',
                                                                                            'OleCreateFromData',
                                                                                            'OleCreateLinkFromData',
                                                                                            'OleCreateStaticFromData',
                                                                                            'OleCreateLinkToFile',
                                                                                            'OleCreateFromFile',
                                                                                            'OleLoad',
                                                                                            'OleSave',
                                                                                            'OleSaveToStream',
                                                                                            'OleSetContainedObject',
                                                                                            'OleGetIconOfClass',
                                                                                            'GetHGlobalFromILockBytes',
                                                                                            'OleRun',
                                                                                            'CreateDataAdviseHolder',
                                                                                            'CreateOleAdviseHolder',
                                                                                            'GetRunningObjectTable',
                                                                                            'OleIsRunning',
                                                                                            'CoGetMalloc',
                                                                                            'OleQueryLinkFromData',
                                                                                            'CLSIDFromProgID',
                                                                                            'CoRegisterMessageFilter',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoGetClassObject',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'IsAccelerator',
                                                                                            'StgCreateDocfile',
                                                                                            'VariantInit',
                                                                                            'VarDecFromStr',
                                                                                            'VarBstrFromDec',
                                                                                            'VarBstrFromDate',
                                                                                            'VarBstrFromCy',
                                                                                            'VarCyFromStr',
                                                                                            'VarDateFromStr',
                                                                                            'VariantChangeType',
                                                                                            'VariantCopy',
                                                                                            'VariantClear',
                                                                                            'SafeArrayPtrOfIndex',
                                                                                            'SafeArrayCopy',
                                                                                            'SafeArrayPutElement',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnlock',
                                                                                            'SafeArrayLock',
                                                                                            'SafeArrayGetLBound',
                                                                                            'SafeArrayGetUBound',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'RegisterTypeLib',
                                                                                            'SysAllocStringLen',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysStringLen',
                                                                                            'SystemTimeToVariantTime',
                                                                                            'VariantTimeToSystemTime',
                                                                                            'SafeArrayAllocDescriptor',
                                                                                            'SafeArrayAllocData',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayDestroyDescriptor',
                                                                                            'SafeArrayDestroyData',
                                                                                            'SafeArrayDestroy',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayGetDim',
                                                                                            'SafeArrayGetElemsize',
                                                                                            'OleUIBusyW',
                                                                                            'WSACleanup',
                                                                                            'WSAStartup',
                                                                                            'socket',
                                                                                            'sendto',
                                                                                            'send',
                                                                                            'select',
                                                                                            'recvfrom',
                                                                                            'recv',
                                                                                            'getsockname',
                                                                                            'getpeername',
                                                                                            'connect',
                                                                                            'closesocket',
                                                                                            'bind',
                                                                                            'accept',
                                                                                            'getnameinfo',
                                                                                            'freeaddrinfo',
                                                                                            'getaddrinfo',
                                                                                            'WSAStringToAddressA',
                                                                                            'htonl',
                                                                                            'htons',
                                                                                            'inet_addr',
                                                                                            'inet_ntoa',
                                                                                            'ntohs',
                                                                                            'gethostbyaddr',
                                                                                            'gethostbyname',
                                                                                            'getservbyport',
                                                                                            'getservbyname',
                                                                                            'WSASetLastError',
                                                                                            'WSAGetLastError',
                                                                                            'WSAAsyncSelect',
                                                                                            'LeaveCriticalPolicySection',
                                                                                            'EnterCriticalPolicySection',
                                                                                            'DnsQuery_W',
                                                                                            'DnsFree',
                                                                                            'CreateStdAccessibleObject',
                                                                                            'AccessibleObjectFromWindow',
                                                                                            'LresultFromObject',
                                                                                            'GdipGetImagePixelFormat',
                                                                                            'GdipGetImagePalette',
                                                                                            'GdipGetImagePaletteSize',
                                                                                            'GdipCreateBitmapFromStream',
                                                                                            'GdipCreateBitmapFromFile',
                                                                                            'GdipCreateBitmapFromStreamICM',
                                                                                            'GdipCreateBitmapFromFileICM',
                                                                                            'GdipCreateBitmapFromScan0',
                                                                                            'GdipBitmapLockBits',
                                                                                            'GdipBitmapUnlockBits',
                                                                                            'GdipDeleteGraphics',
                                                                                            'GdipDrawImageI',
                                                                                            'GdipCreateBitmapFromHBITMAP',
                                                                                            'GdipCreateFromHDC',
                                                                                            'GdipSetInterpolationMode',
                                                                                            'GdipDrawImageRectI',
                                                                                            'GdipGetImageHeight',
                                                                                            'GdipGetImageWidth',
                                                                                            'GdipGetImageGraphicsContext',
                                                                                            'GdipDisposeImage',
                                                                                            'GdipCloneImage',
                                                                                            'GdiplusStartup',
                                                                                            'GdipFree',
                                                                                            'GdipAlloc',
                                                                                            'GdiplusShutdown',
                                                                                            'ImmGetContext',
                                                                                            'ImmGetOpenStatus',
                                                                                            'ImmReleaseContext',
                                                                                            'PlaySoundW'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 21,
                                                                      'NumberOfImportFunctions': 869,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 409456,
                                                                      'SectionNames': {'.data\x00\x00\x00': 48128,
                                                                                       '.pdata\x00\x00': 193536,
                                                                                       '.rdata\x00\x00': 1377792,
                                                                                       '.reloc\x00\x00': 82432,
                                                                                       '.rsrc\x00\x00\x00': 409600,
                                                                                       '.text\x00\x00\x00': 3479040,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f7ae0aa18ff14aff0e37972ce0a48545d2d3752a82e6696a5dcee801ae3466f3'},
 'f7d246347fa82ef329f23adf5583c1f1867d7ae422be94f8f5f1e7c0e52f78e1': {'AddressOfEntryPoint': 288096,
                                                                      'DebugRVA': 6144,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 303104,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegLoadMUIStringW',
                                                                                      'COMCTL32.dll': 'ImageList_ReplaceIcon',
                                                                                      'COMDLG32.dll': 'GetOpenFileNameW',
                                                                                      'CRYPT32.dll': 'CertDuplicateCertificateContext',
                                                                                      'DUI70.dll': '?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ',
                                                                                      'DUser.dll': 'GetGadgetFocus',
                                                                                      'KERNEL32.dll': 'SetEvent',
                                                                                      'OLEAUT32.dll': 'SafeArrayDestroy',
                                                                                      'RPCRT4.dll': 'UuidCreate',
                                                                                      'SHELL32.dll': 'ShellExecuteExW',
                                                                                      'SHLWAPI.dll': 'SHCreateStreamOnFileEx',
                                                                                      'Secur32.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'GetFocus',
                                                                                      'UxTheme.dll': 'SetWindowTheme',
                                                                                      'WINHTTP.dll': 'WinHttpCloseHandle',
                                                                                      'WINTRUST.dll': 'WinVerifyTrust',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtOpenProcessToken',
                                                                                      'ole32.dll': 'StringFromCLSID',
                                                                                      'wer.dll': 'WerReportSetParameter'},
                                                                      'ImportedFunctions': ['EventRegister',
                                                                                            'EventWrite',
                                                                                            'EventUnregister',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'CheckTokenMembership',
                                                                                            'CreateWellKnownSid',
                                                                                            'OpenThreadToken',
                                                                                            'OpenProcessToken',
                                                                                            'GetTokenInformation',
                                                                                            'ConvertSidToStringSidW',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegLoadMUIStringW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'HeapReAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'LoadLibraryW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'ResetEvent',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleFileNameW',
                                                                                            'CloseHandle',
                                                                                            'HeapFree',
                                                                                            'TlsGetValue',
                                                                                            'CreateFileW',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'GetCommandLineW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFullPathNameW',
                                                                                            'LocalFree',
                                                                                            'FreeLibrary',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetProcAddress',
                                                                                            'GetUserPreferredUILanguages',
                                                                                            'FindFirstFileW',
                                                                                            'FindNextFileW',
                                                                                            'FindClose',
                                                                                            'DeleteFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentThread',
                                                                                            'GetCurrentProcess',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'RemoveDirectoryW',
                                                                                            'CopyFileW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetSystemTime',
                                                                                            'CreateNamedPipeW',
                                                                                            'ConnectNamedPipe',
                                                                                            'OpenEventW',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'SetDllDirectoryW',
                                                                                            'GetTickCount64',
                                                                                            'GetCurrentThreadId',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetLastError',
                                                                                            'TlsAlloc',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFileTime',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'LockResource',
                                                                                            'GlobalFree',
                                                                                            'GetFileSizeEx',
                                                                                            'GlobalUnlock',
                                                                                            'SizeofResource',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalLock',
                                                                                            'LoadResource',
                                                                                            'FindResourceW',
                                                                                            'FreeResource',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetEvent',
                                                                                            'GetKeyState',
                                                                                            'CallNextHookEx',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'PostMessageW',
                                                                                            'CreateWindowExW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetClientRect',
                                                                                            'SendMessageW',
                                                                                            'IsChild',
                                                                                            'SetWindowsHookExW',
                                                                                            'LoadImageW',
                                                                                            'IsWindow',
                                                                                            'ShowScrollBar',
                                                                                            'OpenClipboard',
                                                                                            'EmptyClipboard',
                                                                                            'SetClipboardData',
                                                                                            'CloseClipboard',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'AllowSetForegroundWindow',
                                                                                            'SetForegroundWindow',
                                                                                            'EnableWindow',
                                                                                            'GetFocus',
                                                                                            '_purecall',
                                                                                            '_vsnwprintf',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnprintf',
                                                                                            '_wcsicmp',
                                                                                            'towlower',
                                                                                            'wcstombs_s',
                                                                                            'malloc',
                                                                                            'memcpy_s',
                                                                                            '_wcslwr_s',
                                                                                            'free',
                                                                                            'wcsncmp',
                                                                                            'iswdigit',
                                                                                            'wcstol',
                                                                                            'calloc',
                                                                                            'memmove_s',
                                                                                            '_wtol',
                                                                                            'wcschr',
                                                                                            'wcstok',
                                                                                            'mbstowcs_s',
                                                                                            '_callnewh',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'wcstok_s',
                                                                                            '_wopen',
                                                                                            '_errno',
                                                                                            '_wremove',
                                                                                            '_read',
                                                                                            'rand',
                                                                                            'srand',
                                                                                            '_get_osfhandle',
                                                                                            '_lseek',
                                                                                            'time',
                                                                                            '_write',
                                                                                            '_close',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_CxxThrowException',
                                                                                            'memset',
                                                                                            'NtQueryInformationToken',
                                                                                            'DbgPrintEx',
                                                                                            'RtlInitializeSid',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlSubAuthoritySid',
                                                                                            'RtlCreateEnvironment',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'RtlExpandEnvironmentStrings',
                                                                                            'RtlDestroyEnvironment',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtClose',
                                                                                            'NtOpenProcessToken',
                                                                                            'ShellExecuteW',
                                                                                            'CommandLineToArgvW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetKnownFolderIDList',
                                                                                            'ShellExecuteExW',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'PropertySheetW',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'SysAllocString',
                                                                                            'SysStringLen',
                                                                                            'SysFreeString',
                                                                                            'VariantInit',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayAccessData',
                                                                                            'SysAllocStringLen',
                                                                                            'SafeArrayPutElement',
                                                                                            'VariantClear',
                                                                                            'SafeArrayCreate',
                                                                                            'SafeArrayGetElement',
                                                                                            'SafeArrayDestroy',
                                                                                            'SetWindowTheme',
                                                                                            'CoCreateInstance',
                                                                                            'OleInitialize',
                                                                                            'StringFromGUID2',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'GetHGlobalFromStream',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'StringFromCLSID',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetOpenFileNameW',
                                                                                            'UuidCreate',
                                                                                            'ForwardGadgetMessage',
                                                                                            'GetGadgetFocus',
                                                                                            'WerReportCloseHandle',
                                                                                            'WerReportAddFile',
                                                                                            'WerReportCreate',
                                                                                            'WerReportSubmit',
                                                                                            'WerReportSetParameter',
                                                                                            'GetUserNameExW',
                                                                                            'WTHelperProvDataFromStateData',
                                                                                            'WTHelperGetProvSignerFromChain',
                                                                                            'WTHelperGetProvCertFromChain',
                                                                                            'WinVerifyTrust',
                                                                                            'CertGetCertificateContextProperty',
                                                                                            'CryptHashCertificate',
                                                                                            'CertFreeCertificateContext',
                                                                                            'CertDuplicateCertificateContext',
                                                                                            '?SetSelected@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z',
                                                                                            '?RemoveAll@Element@DirectUI@@QAEJXZ',
                                                                                            '?SetEnabled@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?Release@Value@DirectUI@@QAEXXZ',
                                                                                            '?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z',
                                                                                            '?Click@Button@DirectUI@@SG?AVUID@@XZ',
                                                                                            '?DestroyCP@TaskPage@DirectUI@@EAEXXZ',
                                                                                            '?CreateParserCP@TaskPage@DirectUI@@EAEJPAPAVDUIXmlParser@2@@Z',
                                                                                            '?CreateDUICP@TaskPage@DirectUI@@EAEJPAVHWNDElement@2@PAUHWND__@@1PAPAVElement@2@PAPAVDUIXmlParser@2@@Z',
                                                                                            '?OnQueryInitialFocus@TaskPage@DirectUI@@MAEPAVElement@2@XZ',
                                                                                            '?OnWizFinish@TaskPage@DirectUI@@MAEJXZ',
                                                                                            '?OnReset@TaskPage@DirectUI@@MAEJXZ',
                                                                                            '?OnKillActive@TaskPage@DirectUI@@MAEJXZ',
                                                                                            '?InitPropSheetPage@TaskPage@DirectUI@@MAEXPAU_PROPSHEETPAGEW@@@Z',
                                                                                            '?LoadPage@TaskPage@DirectUI@@MAEJPAVHWNDElement@2@PAUHINSTANCE__@@PAPAVElement@2@PAPAVDUIXmlParser@2@@Z',
                                                                                            '?LoadParser@TaskPage@DirectUI@@MAEJPAPAVDUIXmlParser@2@@Z',
                                                                                            '?OnListenedEvent@TaskPage@DirectUI@@MAEXPAVElement@2@PAUEvent@2@@Z',
                                                                                            '?OnListenedInput@TaskPage@DirectUI@@MAEXPAVElement@2@PAUInputEvent@2@@Z',
                                                                                            '?OnListenedPropertyChanged@TaskPage@DirectUI@@MAEXPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z',
                                                                                            '?OnListenedPropertyChanging@TaskPage@DirectUI@@MAE_NPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z',
                                                                                            '?OnListenerDetach@TaskPage@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?OnListenerAttach@TaskPage@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?SetTooltipMaxWidth@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetTooltip@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetContentString@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetAccDesc@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetAccValue@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?SetAccName@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHICON__@@_N11@Z',
                                                                                            '?SetLayoutPos@Element@DirectUI@@QAEJH@Z',
                                                                                            '?SetVisible@Element@DirectUI@@QAEJ_N@Z',
                                                                                            'StrToID',
                                                                                            '?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z',
                                                                                            '?EndDefer@Element@DirectUI@@QAEXK@Z',
                                                                                            '?StartDefer@Element@DirectUI@@QAEXPAK@Z',
                                                                                            '?PropSheet_SendMessage@TaskPage@DirectUI@@IAEJIIJ@Z',
                                                                                            '??1TaskPage@DirectUI@@UAE@XZ',
                                                                                            '??0TaskPage@DirectUI@@QAE@XZ',
                                                                                            '?OnNotify@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?GetClassInfoW@HWNDHost@DirectUI@@UAEPAUIClassInfo@2@XZ',
                                                                                            '?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?OnInput@HWNDHost@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?GetClassInfoPtr@HWNDHost@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?Register@HWNDHost@DirectUI@@SGJXZ',
                                                                                            '?KeyFocusedProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?OnPropertyChanged@HWNDHost@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?Initialize@HWNDHost@DirectUI@@QAEJIIPAVElement@2@PAK@Z',
                                                                                            '??1HWNDHost@DirectUI@@UAE@XZ',
                                                                                            '??0HWNDHost@DirectUI@@QAE@XZ',
                                                                                            '?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ',
                                                                                            '?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ',
                                                                                            '?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?AddChild@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            'InitProcessPriv',
                                                                                            '?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ',
                                                                                            '?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z',
                                                                                            '?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z',
                                                                                            '?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ',
                                                                                            '?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ',
                                                                                            '?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z',
                                                                                            '?Release@ClassInfoBase@DirectUI@@UAEHXZ',
                                                                                            '?AddRef@ClassInfoBase@DirectUI@@UAEXXZ',
                                                                                            '?GetClassInfoW@CCListView@DirectUI@@UAEPAUIClassInfo@2@XZ',
                                                                                            '?PostCreate@CCBase@DirectUI@@MAEXPAUHWND__@@@Z',
                                                                                            '?OnReceivedDialogFocus@CCBase@DirectUI@@UAE_NPAUIDialogElement@2@@Z',
                                                                                            '?OnLostDialogFocus@CCBase@DirectUI@@UAE_NPAUIDialogElement@2@@Z',
                                                                                            '?OnCustomDraw@CCBase@DirectUI@@UAE_NPAUtagNMCUSTOMDRAWINFO@@PAJ@Z',
                                                                                            '?OnNotify@CCBase@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?DefaultAction@CCBase@DirectUI@@UAEJXZ',
                                                                                            '?Add@Element@DirectUI@@QAEJPAV12@@Z',
                                                                                            '?MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?IsContentProtected@Element@DirectUI@@UAE_NXZ',
                                                                                            '??1ClassInfoBase@DirectUI@@UAE@XZ',
                                                                                            '??0ClassInfoBase@DirectUI@@QAE@XZ',
                                                                                            '??0CCListView@DirectUI@@QAE@XZ',
                                                                                            '?GetClassInfoPtr@Edit@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?GetClassInfoPtr@CCBase@DirectUI@@SGPAUIClassInfo@2@XZ',
                                                                                            '?Initialize@CCBase@DirectUI@@QAEJIPAVElement@2@PAK@Z',
                                                                                            '?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z',
                                                                                            '??0Edit@DirectUI@@QAE@XZ',
                                                                                            '??1Edit@DirectUI@@UAE@XZ',
                                                                                            '?IsRTLReading@Element@DirectUI@@UAE_NXZ',
                                                                                            '?IsContentProtected@Edit@DirectUI@@UAE_NXZ',
                                                                                            '?GetContentStringAsDisplayed@Edit@DirectUI@@UAEPBGPAPAVValue@2@@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@Edit@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z',
                                                                                            '?OnInput@Edit@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z',
                                                                                            '?OnDestroy@HWNDHost@DirectUI@@UAEXXZ',
                                                                                            '?OnEvent@HWNDHost@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?Paint@HWNDHost@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z',
                                                                                            '?GetContentSize@Edit@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?Add@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            'InitThread',
                                                                                            'UnInitThread',
                                                                                            'UnInitProcessPriv',
                                                                                            '?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z',
                                                                                            '?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z',
                                                                                            '?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z',
                                                                                            '?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z',
                                                                                            '?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z',
                                                                                            '?SetKeyFocus@HWNDHost@DirectUI@@UAEXXZ',
                                                                                            '?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z',
                                                                                            '?MessageCallback@Edit@DirectUI@@UAEIPAUtagGMSG@@@Z',
                                                                                            '?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z',
                                                                                            '?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z',
                                                                                            '?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z',
                                                                                            '?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z',
                                                                                            '?OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z',
                                                                                            '?SetNote@CCCommandLink@DirectUI@@QAEJPBG@Z',
                                                                                            '?Destroy@DUIXmlParser@DirectUI@@QAEXXZ',
                                                                                            '?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z',
                                                                                            '?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z',
                                                                                            '?GetKeyFocused@HWNDHost@DirectUI@@UAE_NXZ',
                                                                                            '?GetAccessibleImpl@HWNDHost@DirectUI@@UAEJPAPAUIAccessible@@@Z',
                                                                                            '?DefaultAction@Element@DirectUI@@UAEJXZ',
                                                                                            '?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z',
                                                                                            '?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z',
                                                                                            '?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ',
                                                                                            '?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?SetID@Element@DirectUI@@QAEJPBG@Z',
                                                                                            '?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z',
                                                                                            '?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z',
                                                                                            '?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ',
                                                                                            '?OnNotify@Edit@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?OnMessage@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?OnSysChar@HWNDHost@DirectUI@@UAE_NG@Z',
                                                                                            '?OnSinkThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?OnCtrlThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z',
                                                                                            '?OnWindowStyleChanged@HWNDHost@DirectUI@@UAEXIPBUtagSTYLESTRUCT@@@Z',
                                                                                            '?SetWindowDirection@HWNDHost@DirectUI@@UAEXPAUHWND__@@@Z',
                                                                                            '?EraseBkgnd@HWNDHost@DirectUI@@MAE_NPAUHDC__@@PAJ@Z',
                                                                                            '?CreateHWND@Edit@DirectUI@@MAEPAUHWND__@@PAU3@_N@Z',
                                                                                            '?Initialize@Edit@DirectUI@@QAEJIPAVElement@2@PAK@Z',
                                                                                            '?Register@Edit@DirectUI@@SGJXZ',
                                                                                            '?Register@HWNDElement@DirectUI@@SGJXZ',
                                                                                            '?Register@ClassInfoBase@DirectUI@@QAEJXZ',
                                                                                            '?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z',
                                                                                            '??1CritSecLock@DirectUI@@QAE@XZ',
                                                                                            '?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z',
                                                                                            '?GetClassInfoW@CCBase@DirectUI@@UAEPAUIClassInfo@2@XZ',
                                                                                            '?DUICreatePropertySheetPage@TaskPage@DirectUI@@QAEJPAUHINSTANCE__@@@Z',
                                                                                            '?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ',
                                                                                            '??0CCBase@DirectUI@@QAE@KPBG@Z',
                                                                                            '??1CCBase@DirectUI@@UAE@XZ',
                                                                                            '?DirectionProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ',
                                                                                            '?OnPropertyChanged@CCBase@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z',
                                                                                            '?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?OnInput@CCBase@DirectUI@@UAEXPAUInputEvent@2@@Z',
                                                                                            '?CreateHWND@CCBase@DirectUI@@UAEPAUHWND__@@PAU3@@Z',
                                                                                            '?Initialize@CCListView@DirectUI@@QAEJIPAVElement@2@PAK@Z',
                                                                                            '?Destroy@Element@DirectUI@@QAEJ_N@Z',
                                                                                            '?SetWinStyle@CCBase@DirectUI@@QAEJH@Z',
                                                                                            '?GetHWND@HWNDHost@DirectUI@@UAEPAUHWND__@@XZ',
                                                                                            '?OnAdjustWindowSize@HWNDHost@DirectUI@@UAEHHHI@Z',
                                                                                            '?GetMultiline@Edit@DirectUI@@QAE_NXZ',
                                                                                            '?GetThemedBorder@Edit@DirectUI@@QAE_NXZ',
                                                                                            '?AttachCtrlSubclassProc@HWNDHost@DirectUI@@KGXPAUHWND__@@@Z',
                                                                                            '?Register@CCBase@DirectUI@@SGJXZ',
                                                                                            '??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z',
                                                                                            '?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ',
                                                                                            'SHCreateStreamOnFileEx',
                                                                                            'WinHttpGetIEProxyConfigForCurrentUser',
                                                                                            'WinHttpSendRequest',
                                                                                            'WinHttpWriteData',
                                                                                            'WinHttpQueryHeaders',
                                                                                            'WinHttpGetDefaultProxyConfiguration',
                                                                                            'WinHttpOpen',
                                                                                            'WinHttpOpenRequest',
                                                                                            'WinHttpGetProxyForUrl',
                                                                                            'WinHttpCrackUrl',
                                                                                            'WinHttpReadData',
                                                                                            'WinHttpSetOption',
                                                                                            'WinHttpReceiveResponse',
                                                                                            'WinHttpConnect',
                                                                                            'WinHttpCloseHandle'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 432,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 647216,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 18432,
                                                                                       '.reloc\x00\x00': 21504,
                                                                                       '.rsrc\x00\x00\x00': 647680,
                                                                                       '.text\x00\x00\x00': 292352},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f7d246347fa82ef329f23adf5583c1f1867d7ae422be94f8f5f1e7c0e52f78e1'},
 'f7e30fbeaaf6b763866065d7289563f14e98cc8df3e5c43dfd49c694c4e504fe': {'AddressOfEntryPoint': 100388,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 131880,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'lstrcmpiA',
                                                                                            'LoadLibraryA',
                                                                                            'LocalFree',
                                                                                            'LocalAlloc',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetACP',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'IsValidLocale',
                                                                                            'GetSystemDefaultUILanguage',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'CompareStringW',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'DeleteCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'IsValidLocale',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumSystemLocalesW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 131,
                                                                      'NumberOfSections': 9,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 367624,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 4096,
                                                                                       '.didata\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 368128,
                                                                                       '.text\x00\x00\x00': 92672,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f7e30fbeaaf6b763866065d7289563f14e98cc8df3e5c43dfd49c694c4e504fe'},
 'f844a4a3e020fe064218d65a0f26b2db28a3d92ff10077fde023454d3adc8510': {'AddressOfEntryPoint': 41408,
                                                                      'DebugRVA': 4224,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 49152,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'SHLWAPI.dll': 'StrChrIW',
                                                                                      'SspiCli.dll': 'GetUserNameExW',
                                                                                      'USER32.dll': 'CharUpperW',
                                                                                      'VERSION.dll': 'GetFileVersionInfoExW',
                                                                                      'api-ms-win-core-console-l1-1-0.dll': 'GetConsoleMode',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFullPathNameW',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'HeapSetInformation',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleA',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'SetThreadUILanguage',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetStdHandle',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'GetCurrentThreadId',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'Sleep',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'InitializeAcl',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVerifyVersionInfo'},
                                                                      'ImportedFunctions': ['_wcsicmp',
                                                                                            '_except_handler4_common',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'wcstok',
                                                                                            '_iob',
                                                                                            '_vsnwprintf',
                                                                                            'wcspbrk',
                                                                                            '_memicmp',
                                                                                            '_errno',
                                                                                            'wcstod',
                                                                                            'wcstol',
                                                                                            'wcstoul',
                                                                                            '_fileno',
                                                                                            '_get_osfhandle',
                                                                                            '__iob_func',
                                                                                            'fprintf',
                                                                                            'fflush',
                                                                                            'toupper',
                                                                                            'wcsrchr',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            'SetConsoleMode',
                                                                                            'GetConsoleMode',
                                                                                            'GetLastError',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'SetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetVolumeInformationW',
                                                                                            'FindFirstFileW',
                                                                                            'GetVolumePathNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'GetFullPathNameW',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'GetModuleHandleA',
                                                                                            'SetThreadUILanguage',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'OpenProcessToken',
                                                                                            'OpenProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'Sleep',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'InitializeSecurityDescriptor',
                                                                                            'FreeSid',
                                                                                            'GetFileSecurityW',
                                                                                            'SetSecurityDescriptorDacl',
                                                                                            'SetFileSecurityW',
                                                                                            'AllocateAndInitializeSid',
                                                                                            'SetSecurityDescriptorOwner',
                                                                                            'GetSecurityDescriptorDacl',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetLengthSid',
                                                                                            'AddAce',
                                                                                            'GetTokenInformation',
                                                                                            'CheckTokenMembership',
                                                                                            'GetAclInformation',
                                                                                            'InitializeAcl',
                                                                                            'LoadStringW',
                                                                                            'CharUpperW',
                                                                                            'VerSetConditionMask',
                                                                                            'RtlVerifyVersionInfo',
                                                                                            'GetUserNameExW',
                                                                                            'StrChrW',
                                                                                            'StrStrIW',
                                                                                            'StrStrW',
                                                                                            'StrChrIW',
                                                                                            'GetFileVersionInfoSizeExW',
                                                                                            'VerQueryValueW',
                                                                                            'GetFileVersionInfoExW',
                                                                                            'DelayLoadFailureHook',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetComputerNameExW',
                                                                                            'HeapSize',
                                                                                            'HeapReAlloc',
                                                                                            'HeapAlloc',
                                                                                            'HeapValidate',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'ReadConsoleW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'ExitProcess',
                                                                                            'WriteConsoleW',
                                                                                            'CompareStringA',
                                                                                            'GetThreadLocale',
                                                                                            'CompareStringW',
                                                                                            'lstrlenW',
                                                                                            'lstrlenA',
                                                                                            'GetFileType',
                                                                                            'FlushConsoleInputBuffer',
                                                                                            'GetComputerNameW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'FormatMessageW',
                                                                                            'WideCharToMultiByte',
                                                                                            'QueryPerformanceCounter'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 19,
                                                                      'NumberOfImportFunctions': 117,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2056,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 2560,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 40448},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f844a4a3e020fe064218d65a0f26b2db28a3d92ff10077fde023454d3adc8510'},
 'f86944cfece2d19515389c9bb8775cddb1d0944fa2e1ae351c4e0796ef650fea': {'AddressOfEntryPoint': 91728,
                                                                      'DebugRVA': 4336,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 98304,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegDeleteKeyExW',
                                                                                      'DNSAPI.dll': 'DnsValidateName_W',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'GetCurrentThreadId',
                                                                                      'MPR.dll': 'WNetCancelConnection2W',
                                                                                      'RPCRT4.dll': 'RpcStringFreeW',
                                                                                      'USER32.dll': 'CreateDialogParamW',
                                                                                      'WDSCORE.dll': 'WdsDeleteBlackboardValue',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'NtQuerySystemInformation',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'TraceEvent',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'OpenProcessToken',
                                                                                            'RegSetValueExW',
                                                                                            'RegDeleteTreeW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteKeyExW',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetExitCodeProcess',
                                                                                            'CreateProcessW',
                                                                                            'DeleteCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'LoadLibraryW',
                                                                                            'InitializeCriticalSection',
                                                                                            'SetFileAttributesW',
                                                                                            'GetFileInformationByHandle',
                                                                                            'FindNextFileW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindFirstFileW',
                                                                                            'OpenEventW',
                                                                                            'SetErrorMode',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetModuleFileNameW',
                                                                                            'CreateDirectoryW',
                                                                                            'GetFullPathNameW',
                                                                                            'DeviceIoControl',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetVolumeLabelW',
                                                                                            'CreateThread',
                                                                                            'CloseHandle',
                                                                                            'CreateEventW',
                                                                                            'SetLastError',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetProcAddress',
                                                                                            'GetVersionExW',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'CompareStringW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetLastError',
                                                                                            'SetComputerNameExW',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'FindClose',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTextExtentPoint32W',
                                                                                            'CreateFontIndirectW',
                                                                                            'GetObjectW',
                                                                                            'DeleteObject',
                                                                                            'LoadStringW',
                                                                                            'DispatchMessageW',
                                                                                            'SetWindowTextW',
                                                                                            'MapWindowPoints',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'CreateWindowExW',
                                                                                            'IsWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowPos',
                                                                                            'SendDlgItemMessageW',
                                                                                            'EndDialog',
                                                                                            'GetDlgItem',
                                                                                            'ReleaseDC',
                                                                                            'SystemParametersInfoW',
                                                                                            'TranslateMessage',
                                                                                            'PostMessageW',
                                                                                            'LoadImageW',
                                                                                            'GetWindowDC',
                                                                                            'GetMessageW',
                                                                                            'GetWindowRect',
                                                                                            'CreateDialogParamW',
                                                                                            '_wcmdln',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'wcschr',
                                                                                            '_wcsicmp',
                                                                                            '_vscwprintf',
                                                                                            'memmove',
                                                                                            '_wcsnicmp',
                                                                                            '_vsnprintf',
                                                                                            '_initterm',
                                                                                            'wcsrchr',
                                                                                            'wcsspn',
                                                                                            'wcscspn',
                                                                                            'iswalpha',
                                                                                            '__setusermatherr',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            'iswdigit',
                                                                                            'iswspace',
                                                                                            'qsort',
                                                                                            '_wtoi',
                                                                                            '_vsnwprintf',
                                                                                            'memset',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance',
                                                                                            'DnsValidateName_W',
                                                                                            'WdsCreateBlackboard',
                                                                                            'WdsTerminate',
                                                                                            'WdsInitialize',
                                                                                            'WdsValidBlackboard',
                                                                                            'WdsInitializeDataStringW',
                                                                                            'WdsDestroyBlackboard',
                                                                                            'WdsEnumFirstBlackboardItem',
                                                                                            'WdsFreeData',
                                                                                            'WdsInitializeDataUInt32',
                                                                                            'WdsSetBlackboardValue',
                                                                                            'WdsGetBlackboardValue',
                                                                                            'WdsAbortBlackboardItemEnum',
                                                                                            'WdsDeleteBlackboardValue',
                                                                                            'UuidToStringW',
                                                                                            'UuidCreate',
                                                                                            'RpcStringFreeW',
                                                                                            'NtSetInformationFile',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'NtOpenFile',
                                                                                            'NtClose',
                                                                                            'RtlInitUnicodeString',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtQuerySystemInformation',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetCancelConnection2W'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 166,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 7448,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 7680,
                                                                                       '.text\x00\x00\x00': 90112},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f86944cfece2d19515389c9bb8775cddb1d0944fa2e1ae351c4e0796ef650fea'},
 'f886e452846d31c82b404962e11ed68e2576cdda8e36d6213a15eff36d044189': {'AddressOfEntryPoint': 5376,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'GetStockObject',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'NETPLWIZ.dll': 'UsersRunDllW',
                                                                                      'USER32.dll': 'DestroyIcon',
                                                                                      'msvcrt.dll': '_except_handler4_common'},
                                                                      'ImportedFunctions': ['HeapSetInformation',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'GetLocaleInfoW',
                                                                                            'CompareStringOrdinal',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'Sleep',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'RegisterClassW',
                                                                                            'CreateWindowExW',
                                                                                            'DestroyWindow',
                                                                                            'GetWindowLongW',
                                                                                            'SetWindowLongW',
                                                                                            'GetClassNameW',
                                                                                            'GetWindow',
                                                                                            'LoadCursorW',
                                                                                            'DestroyIcon',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            'UsersRunDllW',
                                                                                            'GetStockObject'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 6,
                                                                      'NumberOfImportFunctions': 45,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 18064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 18432,
                                                                                       '.text\x00\x00\x00': 4096},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f886e452846d31c82b404962e11ed68e2576cdda8e36d6213a15eff36d044189'},
 'f8bb94e382806820f6493ded8466f2ae8045a3b06b66fecbeaa9239bd0a32754': {'AddressOfEntryPoint': 40896,
                                                                      'DebugRVA': 4288,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 65536,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'GDI32.dll': 'MoveToEx',
                                                                                      'HID.DLL': 'HidP_GetCaps',
                                                                                      'IMM32.dll': 'ImmDisableTextFrameService',
                                                                                      'KERNEL32.dll': 'LocalFree',
                                                                                      'NInput.dll': 'DestroyInteractionContext',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'GetDC',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'SetUnhandledExceptionFilter',
                                                                                      'api-ms-win-core-file-l1-2-1.dll': 'GetFileAttributesA',
                                                                                      'api-ms-win-core-handle-l1-1-0.dll': 'CloseHandle',
                                                                                      'api-ms-win-core-heap-l1-2-0.dll': 'GetProcessHeap',
                                                                                      'api-ms-win-core-io-l1-1-1.dll': 'CancelIo',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleFileNameW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'GetCommandLineW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'OpenThreadToken',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-registry-l1-1-0.dll': 'RegCreateKeyExW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'CreateMutexW',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetTickCount',
                                                                                      'api-ms-win-security-base-l1-2-0.dll': 'GetTokenInformation',
                                                                                      'msvcrt.dll': 'memset',
                                                                                      'ntdll.dll': 'RtlVirtualUnwind'},
                                                                      'ImportedFunctions': ['CreatePen',
                                                                                            'SelectObject',
                                                                                            'DeleteObject',
                                                                                            'SetBkMode',
                                                                                            'SetBkColor',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetTextColor',
                                                                                            'LineTo',
                                                                                            'GetLayout',
                                                                                            'MoveToEx',
                                                                                            'TranslateMessage',
                                                                                            'DefWindowProcW',
                                                                                            'GetMonitorInfoW',
                                                                                            'GetPointerInfo',
                                                                                            'SendMessageW',
                                                                                            'GetSystemMetrics',
                                                                                            'MessageBoxW',
                                                                                            'CreateWindowExW',
                                                                                            'SetThreadDesktop',
                                                                                            'SwitchDesktop',
                                                                                            'MoveWindow',
                                                                                            'DispatchMessageW',
                                                                                            'GetPointerDevices',
                                                                                            'GetRawPointerDeviceData',
                                                                                            'GetPointerDeviceRects',
                                                                                            'GetPointerDeviceProperties',
                                                                                            'GetPointerDevice',
                                                                                            'GetRawInputDeviceInfoW',
                                                                                            'EndPaint',
                                                                                            'CreateDesktopW',
                                                                                            'DestroyWindow',
                                                                                            'EnumDisplayMonitors',
                                                                                            'GetMessageW',
                                                                                            'ShowCursor',
                                                                                            'RegisterClassExW',
                                                                                            'LoadIconW',
                                                                                            'InvalidateRect',
                                                                                            'ReleaseDC',
                                                                                            'SkipPointerFrameMessages',
                                                                                            'GetSysColor',
                                                                                            'LoadStringW',
                                                                                            'ShowWindow',
                                                                                            'GetSysColorBrush',
                                                                                            'GetPointerFrameInfoHistory',
                                                                                            'PostQuitMessage',
                                                                                            'GetThreadDesktop',
                                                                                            'ChangeDisplaySettingsExW',
                                                                                            'UnregisterClassW',
                                                                                            'PostMessageW',
                                                                                            'DrawTextW',
                                                                                            'LoadCursorW',
                                                                                            'MessageBeep',
                                                                                            'EnumDisplaySettingsExW',
                                                                                            'CloseDesktop',
                                                                                            'BeginPaint',
                                                                                            'SendMessageTimeoutW',
                                                                                            'GetDC',
                                                                                            '_wcsicmp',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'wcstoul',
                                                                                            'wcschr',
                                                                                            '_wcsnicmp',
                                                                                            'malloc',
                                                                                            '_wcslwr',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_wcmdln',
                                                                                            '__C_specific_handler',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_XcptFilter',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'free',
                                                                                            '_wcsdup',
                                                                                            'fclose',
                                                                                            'wcstok',
                                                                                            '_vsnprintf',
                                                                                            '_vsnwprintf',
                                                                                            'fprintf',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            'fopen',
                                                                                            'wcsstr',
                                                                                            'wcstol',
                                                                                            'memset',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'EtwUnregisterTraceGuids',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'GetLastError',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetFileAttributesA',
                                                                                            'CloseHandle',
                                                                                            'HeapSetInformation',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetProcessHeap',
                                                                                            'CancelIo',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'RegEnumValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegCreateKeyExW',
                                                                                            'GetCommandLineW',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcessId',
                                                                                            'OpenThreadToken',
                                                                                            'QueryPerformanceCounter',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'Sleep',
                                                                                            'CreateMutexW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetTickCount',
                                                                                            'GetTokenInformation',
                                                                                            'HidP_GetSpecificValueCaps',
                                                                                            'HidD_GetHidGuid',
                                                                                            'HidP_GetCaps',
                                                                                            'ImmDisableTextFrameService',
                                                                                            'CommandLineToArgvW',
                                                                                            'ShellExecuteW',
                                                                                            'RegisterOutputCallbackInteractionContext',
                                                                                            'ProcessPointerFramesInteractionContext',
                                                                                            'SetInteractionConfigurationInteractionContext',
                                                                                            'CreateInteractionContext',
                                                                                            'SetPropertyInteractionContext',
                                                                                            'DestroyInteractionContext',
                                                                                            'GetCurrentThread',
                                                                                            'lstrlenW',
                                                                                            'lstrcmpiW',
                                                                                            'ResolveDelayLoadedAPI',
                                                                                            'DelayLoadFailureHook',
                                                                                            'RegisterApplicationRestart',
                                                                                            'LocalFree'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 22,
                                                                      'NumberOfImportFunctions': 160,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 29240,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.didat\x00\x00': 512,
                                                                                       '.idata\x00\x00': 7168,
                                                                                       '.pdata\x00\x00': 1536,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 29696,
                                                                                       '.text\x00\x00\x00': 41984},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/f8bb94e382806820f6493ded8466f2ae8045a3b06b66fecbeaa9239bd0a32754'},
 'f8c631cadd48d010cc2afc1cac7fe22a9fbcc22cc4547d31e88311a449ffde6f': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 472952,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 473088,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f8c631cadd48d010cc2afc1cac7fe22a9fbcc22cc4547d31e88311a449ffde6f'},
 'f8eada16bdef5c858229591957df22ee5f1e69f052d9d63dd243bc5c4b731292': {'AddressOfEntryPoint': 19890,
                                                                      'DebugRVA': 4816,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 55536,
                                                                      'ExportSize': 173,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegOpenKeyW',
                                                                                      'KERNEL32.dll': 'VirtualFree',
                                                                                      'MSVCP100.dll': '??0_Lockit@std@@QAE@H@Z',
                                                                                      'MSVCR100.dll': '??2@YAPAXI@Z',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'PSAPI.DLL': 'EnumProcessModules',
                                                                                      'SHLWAPI.dll': 'PathIsRelativeW',
                                                                                      'USER32.dll': 'MessageBoxW',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyW',
                                                                                            'GetThreadPriority',
                                                                                            'SetThreadPriority',
                                                                                            'CreateProcessW',
                                                                                            'GetExitCodeProcess',
                                                                                            'ReadProcessMemory',
                                                                                            'HeapCreate',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemInfo',
                                                                                            'HeapDestroy',
                                                                                            'CreateMutexW',
                                                                                            'SetHandleInformation',
                                                                                            'WaitForSingleObject',
                                                                                            'ReleaseMutex',
                                                                                            'GetFileAttributesW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'DebugBreak',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThread',
                                                                                            'GetProcessHeap',
                                                                                            'HeapReAlloc',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'IsWow64Process',
                                                                                            'GetVersionExW',
                                                                                            'GetTempFileNameW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetNativeSystemInfo',
                                                                                            'WriteFile',
                                                                                            'GlobalMemoryStatus',
                                                                                            'lstrlenW',
                                                                                            'LocalAlloc',
                                                                                            'LoadLibraryA',
                                                                                            'FindFirstFileW',
                                                                                            'HeapSize',
                                                                                            'FindClose',
                                                                                            'GetFullPathNameW',
                                                                                            'VirtualQuery',
                                                                                            'GetUserDefaultUILanguage',
                                                                                            'FindResourceW',
                                                                                            'SizeofResource',
                                                                                            'LoadResource',
                                                                                            'LocalFree',
                                                                                            'LockResource',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'CreateFileW',
                                                                                            'LoadLibraryW',
                                                                                            'lstrlenA',
                                                                                            'CloseHandle',
                                                                                            'Sleep',
                                                                                            'SetEvent',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'InitializeCriticalSection',
                                                                                            'GetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedDecrement',
                                                                                            'InterlockedIncrement',
                                                                                            'GetModuleHandleW',
                                                                                            'DeleteCriticalSection',
                                                                                            'RaiseException',
                                                                                            'GetProcAddress',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'GetStartupInfoW',
                                                                                            'VirtualFree',
                                                                                            'PostThreadMessageW',
                                                                                            'MessageBoxW',
                                                                                            '_purecall',
                                                                                            'free',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'strncmp',
                                                                                            'strstr',
                                                                                            'wcscpy_s',
                                                                                            'swprintf_s',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memset',
                                                                                            '_amsg_exit',
                                                                                            'iswalpha',
                                                                                            'wcschr',
                                                                                            '_vsnwprintf',
                                                                                            'memcpy',
                                                                                            '_swscanf_s_l',
                                                                                            '_resetstkoflw',
                                                                                            '_vsnwprintf_l',
                                                                                            '_wmakepath_s',
                                                                                            '_wsplitpath_s',
                                                                                            '__getmainargs',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_ismbblead',
                                                                                            'exit',
                                                                                            '_acmdln',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_crt_debugger_hook',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'CoInitializeEx',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoAddRefServerProcess',
                                                                                            'CoReleaseServerProcess',
                                                                                            'CoRegisterSurrogate',
                                                                                            'CoFreeUnusedLibraries',
                                                                                            'StringFromGUID2',
                                                                                            'CoCreateInstance',
                                                                                            'SysAllocStringLen',
                                                                                            'SysFreeString',
                                                                                            'PathIsRelativeW',
                                                                                            '?_Decref@facet@locale@std@@QAEPAV123@XZ',
                                                                                            '??1_Lockit@std@@QAE@XZ',
                                                                                            '??0_Lockit@std@@QAE@H@Z',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW',
                                                                                            'GetModuleFileNameExW',
                                                                                            'EnumProcessModules'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 151,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2100,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 4608,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 51712},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/f8eada16bdef5c858229591957df22ee5f1e69f052d9d63dd243bc5c4b731292'},
 'f8f1ab00047cf2c5dd9f20fda3a2ead4f9ef72acae5f69eea2830f9d16e87ff7': {'AddressOfEntryPoint': 24624,
                                                                      'DebugRVA': 1036288,
                                                                      'DebugSize': 56,
                                                                      'Dll': 1024,
                                                                      'ExportRVA': 1118160,
                                                                      'ExportSize': 52,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {},
                                                                      'ImportedFunctions': [],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 0,
                                                                      'NumberOfImportFunctions': 0,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 0,
                                                                      'ResSize': 35876,
                                                                      'SectionNames': {'.data\x00\x00\x00': 17920,
                                                                                       '.rdata\x00\x00': 86528,
                                                                                       '.reloc\x00\x00': 21504,
                                                                                       '.rsrc\x00\x00\x00': 36352,
                                                                                       '.text\x00\x00\x00': 995840,
                                                                                       'PAGE\x00\x00\x00\x00': 5120,
                                                                                       'PAGER32C': 18432,
                                                                                       'PAGER32R': 512},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f8f1ab00047cf2c5dd9f20fda3a2ead4f9ef72acae5f69eea2830f9d16e87ff7'},
 'f91096d3662081ea8b2001812b860fadbb5dedd9fd663a071267e3b47d805c92': {'AddressOfEntryPoint': 17265,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetFileSecurityA',
                                                                                      'COMCTL32.DLL': 'InitCommonControls',
                                                                                      'GDI32.dll': 'SetTextColor',
                                                                                      'KERNEL32.dll': 'lstrlenA',
                                                                                      'SHELL32.dll': 'ShellExecuteA',
                                                                                      'USER32.dll': 'wsprintfA',
                                                                                      'ole32.dll': 'OleUninitialize'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'SetFileSecurityA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_Destroy',
                                                                                            'InitCommonControls',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'SelectObject',
                                                                                            'SetBkColor',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'CloseHandle',
                                                                                            'CompareFileTime',
                                                                                            'CopyFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'CreateProcessA',
                                                                                            'CreateThread',
                                                                                            'DeleteFileA',
                                                                                            'ExitProcess',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'FindClose',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FreeLibrary',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcess',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetFileAttributesA',
                                                                                            'GetFileSize',
                                                                                            'GetFullPathNameA',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'GetProcAddress',
                                                                                            'GetShortPathNameA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'GetTempPathA',
                                                                                            'GetTickCount',
                                                                                            'GetVersion',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GlobalAlloc',
                                                                                            'GlobalFree',
                                                                                            'GlobalLock',
                                                                                            'GlobalUnlock',
                                                                                            'LoadLibraryExA',
                                                                                            'MoveFileA',
                                                                                            'MulDiv',
                                                                                            'MultiByteToWideChar',
                                                                                            'ReadFile',
                                                                                            'RemoveDirectoryA',
                                                                                            'SearchPathA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'SetErrorMode',
                                                                                            'SetFileAttributesA',
                                                                                            'SetFilePointer',
                                                                                            'SetFileTime',
                                                                                            'Sleep',
                                                                                            'WaitForSingleObject',
                                                                                            'WriteFile',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'lstrcatA',
                                                                                            'lstrcmpA',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcpynA',
                                                                                            'lstrlenA',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetFileInfoA',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteA',
                                                                                            'AppendMenuA',
                                                                                            'BeginPaint',
                                                                                            'CallWindowProcA',
                                                                                            'CharNextA',
                                                                                            'CharPrevA',
                                                                                            'CheckDlgButton',
                                                                                            'CloseClipboard',
                                                                                            'CreateDialogParamA',
                                                                                            'CreatePopupMenu',
                                                                                            'CreateWindowExA',
                                                                                            'DefWindowProcA',
                                                                                            'DestroyWindow',
                                                                                            'DialogBoxParamA',
                                                                                            'DispatchMessageA',
                                                                                            'DrawTextA',
                                                                                            'EmptyClipboard',
                                                                                            'EnableMenuItem',
                                                                                            'EnableWindow',
                                                                                            'EndDialog',
                                                                                            'EndPaint',
                                                                                            'ExitWindowsEx',
                                                                                            'FillRect',
                                                                                            'FindWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'GetClientRect',
                                                                                            'GetDC',
                                                                                            'GetDlgItem',
                                                                                            'GetDlgItemTextA',
                                                                                            'GetMessagePos',
                                                                                            'GetSysColor',
                                                                                            'GetSystemMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindowLongA',
                                                                                            'GetWindowRect',
                                                                                            'InvalidateRect',
                                                                                            'IsWindow',
                                                                                            'IsWindowEnabled',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapA',
                                                                                            'LoadCursorA',
                                                                                            'LoadImageA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'OpenClipboard',
                                                                                            'PeekMessageA',
                                                                                            'PostQuitMessage',
                                                                                            'RegisterClassA',
                                                                                            'ScreenToClient',
                                                                                            'SendMessageA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'SetClassLongA',
                                                                                            'SetClipboardData',
                                                                                            'SetCursor',
                                                                                            'SetDlgItemTextA',
                                                                                            'SetForegroundWindow',
                                                                                            'SetTimer',
                                                                                            'SetWindowLongA',
                                                                                            'SetWindowPos',
                                                                                            'SetWindowTextA',
                                                                                            'ShowWindow',
                                                                                            'SystemParametersInfoA',
                                                                                            'TrackPopupMenu',
                                                                                            'wsprintfA'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 152,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 38056,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 5120,
                                                                                       '.ndata\x00\x00': 1024,
                                                                                       '.rdata\x00\x00': 27648,
                                                                                       '.rsrc\x00\x00\x00': 38400,
                                                                                       '.text\x00\x00\x00': 35840},
                                                                      'StackReserveSize': 2097152,
                                                                      'filename': './data/clean/f91096d3662081ea8b2001812b860fadbb5dedd9fd663a071267e3b47d805c92'},
 'f92b453d3f6c8ea595255273656352a99dde999ae1ca5015765999b4a875f3e4': {'AddressOfEntryPoint': 13643,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrcpynA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileW',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'CloseHandle',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrcpynA',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'FindWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 30136,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 30208,
                                                                                       '.text\x00\x00\x00': 25600},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/f92b453d3f6c8ea595255273656352a99dde999ae1ca5015765999b4a875f3e4'},
 'f94b5130a8fe71bef0ed851a297b0ffe3fc06905f335ce3c128d9b2fd89e1979': {'AddressOfEntryPoint': 615280,
                                                                      'DebugRVA': 8128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 876544,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SetThreadToken',
                                                                                      'KERNEL32.dll': 'FreeLibrary',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'POWRPROF.dll': 'PowerDeterminePlatformRole',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'WINSPOOL.DRV': 'EndDocPrinter',
                                                                                      'XmlLite.dll': 'CreateXmlReader',
                                                                                      'api-ms-win-core-com-l1-1-1.dll': 'CoTaskMemFree',
                                                                                      'msvcrt.dll': 'wcscmp',
                                                                                      'ntdll.dll': 'RtlReportException'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'RegCloseKey',
                                                                                            'RegQueryInfoKeyW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegDeleteValueW',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'RegQueryValueExW',
                                                                                            'EventWrite',
                                                                                            'EventEnabled',
                                                                                            'AccessCheck',
                                                                                            'MapGenericMask',
                                                                                            'OpenThreadToken',
                                                                                            'ConvertStringSecurityDescriptorToSecurityDescriptorW',
                                                                                            'RegEnumValueW',
                                                                                            'SetThreadToken',
                                                                                            'InitializeCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'OutputDebugStringW',
                                                                                            'HeapSetInformation',
                                                                                            'SetErrorMode',
                                                                                            'GetErrorMode',
                                                                                            'RtlCaptureStackBackTrace',
                                                                                            'CloseHandle',
                                                                                            'SetEvent',
                                                                                            'WaitForSingleObject',
                                                                                            'GetModuleFileNameW',
                                                                                            'OutputDebugStringA',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateEventW',
                                                                                            'CreateThread',
                                                                                            'Sleep',
                                                                                            'UnregisterWaitEx',
                                                                                            'CreateTimerQueue',
                                                                                            'RegisterWaitForSingleObject',
                                                                                            'DeleteTimerQueueEx',
                                                                                            'IsDebuggerPresent',
                                                                                            'FindResourceExW',
                                                                                            'GetPrivateProfileSectionW',
                                                                                            'VerifyVersionInfoW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'VerSetConditionMask',
                                                                                            'AddVectoredExceptionHandler',
                                                                                            'DebugBreak',
                                                                                            'DeleteTimerQueueTimer',
                                                                                            'CreateTimerQueueTimer',
                                                                                            'LoadResource',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'WaitForMultipleObjects',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WriteFile',
                                                                                            'FlushFileBuffers',
                                                                                            'ReadFile',
                                                                                            'DuplicateHandle',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'SetFilePointerEx',
                                                                                            'CreateFileW',
                                                                                            'GetTickCount64',
                                                                                            'LoadLibraryW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'DeleteFileW',
                                                                                            'FindFirstFileW',
                                                                                            'QueueUserWorkItem',
                                                                                            'ResetEvent',
                                                                                            'ExitProcess',
                                                                                            'ReleaseSemaphore',
                                                                                            'CreateSemaphoreW',
                                                                                            'GetCurrentThread',
                                                                                            'LocalFree',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoW',
                                                                                            'WideCharToMultiByte',
                                                                                            'SizeofResource',
                                                                                            'MultiByteToWideChar',
                                                                                            'EnterCriticalSection',
                                                                                            'RaiseException',
                                                                                            'LeaveCriticalSection',
                                                                                            'lstrcmpiW',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetProcAddress',
                                                                                            'GetLastError',
                                                                                            'FreeLibrary',
                                                                                            'CharNextW',
                                                                                            'DispatchMessageW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'UnregisterClassA',
                                                                                            '??0exception@@QEAA@AEBQEBD@Z',
                                                                                            'wcstoul',
                                                                                            '??0exception@@QEAA@XZ',
                                                                                            'towlower',
                                                                                            '_wcsicmp',
                                                                                            'sprintf_s',
                                                                                            'localeconv',
                                                                                            'strcspn',
                                                                                            '_strtoi64',
                                                                                            '_strtoui64',
                                                                                            'wcsstr',
                                                                                            '_wcsnicmp',
                                                                                            'wcstok_s',
                                                                                            'iswspace',
                                                                                            'setlocale',
                                                                                            '__uncaught_exception',
                                                                                            '__pctype_func',
                                                                                            'isupper',
                                                                                            '___lc_handle_func',
                                                                                            '___lc_codepage_func',
                                                                                            '__crtLCMapStringA',
                                                                                            'memcpy',
                                                                                            'islower',
                                                                                            '__mb_cur_max',
                                                                                            '___mb_cur_max_func',
                                                                                            '__crtLCMapStringW',
                                                                                            '__crtGetStringTypeW',
                                                                                            'isspace',
                                                                                            'tolower',
                                                                                            'abort',
                                                                                            'isalnum',
                                                                                            'isdigit',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            'wcsncpy_s',
                                                                                            '??0exception@@QEAA@AEBV0@@Z',
                                                                                            '?what@exception@@UEBAPEBDXZ',
                                                                                            'malloc',
                                                                                            'free',
                                                                                            'memcpy_s',
                                                                                            '_vsnwprintf',
                                                                                            '_vsnprintf',
                                                                                            '_purecall',
                                                                                            '_callnewh',
                                                                                            '??0exception@@QEAA@AEBQEBDH@Z',
                                                                                            '??1exception@@UEAA@XZ',
                                                                                            'memset',
                                                                                            'memmove_s',
                                                                                            '__C_specific_handler',
                                                                                            'wcscpy_s',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '_commode',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '_errno',
                                                                                            '_CxxThrowException',
                                                                                            'wcsrchr',
                                                                                            'realloc',
                                                                                            'memcmp',
                                                                                            'memchr',
                                                                                            'wcscmp',
                                                                                            'GetErrorInfo',
                                                                                            'VarUI4FromStr',
                                                                                            'SetErrorInfo',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'VariantCopy',
                                                                                            'IIDFromString',
                                                                                            'GetHGlobalFromStream',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'StringFromGUID2',
                                                                                            'CoGetObjectContext',
                                                                                            'CoCreateGuid',
                                                                                            'CoRevertToSelf',
                                                                                            'CoImpersonateClient',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoCreateInstance',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemRealloc',
                                                                                            'CLSIDFromString',
                                                                                            'CoTaskMemFree',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventEnabled',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'EtwTraceMessage',
                                                                                            'EtwEventRegister',
                                                                                            'EtwEventUnregister',
                                                                                            'RtlReportException',
                                                                                            'PowerDeterminePlatformRole',
                                                                                            'GetPrinterDataW',
                                                                                            'DocumentPropertiesW',
                                                                                            'EndPagePrinter',
                                                                                            'StartPagePrinter',
                                                                                            'SeekPrinter',
                                                                                            'WritePrinter',
                                                                                            'ReadPrinter',
                                                                                            'GetPrinterDriverDirectoryW',
                                                                                            'GetPrinterDriverW',
                                                                                            'SetJobW',
                                                                                            'GetPrinterW',
                                                                                            'OpenPrinter2W',
                                                                                            'FreePrintPropertyValue',
                                                                                            'GetJobNamedPropertyValue',
                                                                                            'StartDocPrinterW',
                                                                                            'OpenPrinterW',
                                                                                            'ClosePrinter',
                                                                                            'EndDocPrinter',
                                                                                            'CreateXmlReader'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 12,
                                                                      'NumberOfImportFunctions': 241,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3920,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.idata\x00\x00': 9216,
                                                                                       '.pdata\x00\x00': 32256,
                                                                                       '.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 827904},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/f94b5130a8fe71bef0ed851a297b0ffe3fc06905f335ce3c128d9b2fd89e1979'},
 'fa17f4ba95f3a9c109a4479adab435587245286b050101cddc91c0e17ead09bf': {'AddressOfEntryPoint': 5504,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'TerminateProcess',
                                                                                      'OLEAUT32.dll': 'SysFreeString',
                                                                                      'msvcrt.dll': '__getmainargs',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RaiseException',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '_except_handler4_common',
                                                                                            '__setusermatherr',
                                                                                            '_controlfp',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            'CoUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitialize',
                                                                                            'SysAllocString',
                                                                                            'SysFreeString'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 33,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3312,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 3072},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/fa17f4ba95f3a9c109a4479adab435587245286b050101cddc91c0e17ead09bf'},
 'fa2796a7c52e07a6a861d9a298df24d1c501ca417512db5bffb2fa2be7c4d199': {'AddressOfEntryPoint': 4988,
                                                                      'DebugRVA': 8432,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentProcessId',
                                                                                      'MSVCR100.dll': '__set_app_type',
                                                                                      'jli.dll': 'JLI_Launch'},
                                                                      'ImportedFunctions': ['JLI_CmdToArgs',
                                                                                            'JLI_GetStdArgc',
                                                                                            'JLI_MemAlloc',
                                                                                            'JLI_GetStdArgs',
                                                                                            'JLI_Launch',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '__initenv',
                                                                                            'exit',
                                                                                            '_XcptFilter',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            'getenv',
                                                                                            'printf',
                                                                                            '__argc',
                                                                                            '__argv',
                                                                                            '__set_app_type',
                                                                                            'IsDebuggerPresent',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'GetCommandLineA',
                                                                                            'GetCurrentProcessId'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 49,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 2632,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3072,
                                                                                       '.text\x00\x00\x00': 2560},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/fa2796a7c52e07a6a861d9a298df24d1c501ca417512db5bffb2fa2be7c4d199'},
 'fa2d81e6340ab279662bbd4b39d95e4595e0610505b7ff8e9b10fd28617a2fed': {'AddressOfEntryPoint': 46467,
                                                                      'DebugRVA': 78528,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34048,
                                                                      'ExportRVA': 84912,
                                                                      'ExportSize': 51,
                                                                      'IATRVA': 77824,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'AdjustTokenPrivileges',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'GDI32.dll': 'DeleteDC',
                                                                                      'KERNEL32.dll': 'GetNumberFormatW',
                                                                                      'OLEAUT32.dll': 'VariantInit',
                                                                                      'SHELL32.dll': 'SHGetPathFromIDListW',
                                                                                      'SHLWAPI.dll': 'SHAutoComplete',
                                                                                      'USER32.dll': 'GetClientRect',
                                                                                      'ole32.dll': 'CLSIDFromString'},
                                                                      'ImportedFunctions': ['InitCommonControlsEx',
                                                                                            'SHAutoComplete',
                                                                                            'DeleteFileW',
                                                                                            'DeleteFileA',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetTickCount',
                                                                                            'WideCharToMultiByte',
                                                                                            'GlobalAlloc',
                                                                                            'GetVersionExW',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFullPathNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetModuleFileNameW',
                                                                                            'FindResourceW',
                                                                                            'GetModuleHandleW',
                                                                                            'HeapAlloc',
                                                                                            'GetProcessHeap',
                                                                                            'HeapFree',
                                                                                            'HeapReAlloc',
                                                                                            'CompareStringA',
                                                                                            'ExitProcess',
                                                                                            'GetLocaleInfoW',
                                                                                            'SetFileAttributesW',
                                                                                            'DosDateTimeToFileTime',
                                                                                            'GetDateFormatW',
                                                                                            'GetTimeFormatW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'WaitForSingleObject',
                                                                                            'Sleep',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetTempPathW',
                                                                                            'MoveFileExW',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'GetCommandLineW',
                                                                                            'CreateFileMappingW',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'OpenFileMappingW',
                                                                                            'GetProcAddress',
                                                                                            'LocalFileTimeToFileTime',
                                                                                            'SystemTimeToFileTime',
                                                                                            'GetSystemTime',
                                                                                            'CompareStringW',
                                                                                            'IsDBCSLeadByte',
                                                                                            'GetCPInfo',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'LoadLibraryW',
                                                                                            'FreeLibrary',
                                                                                            'SetFileAttributesA',
                                                                                            'GetFileAttributesW',
                                                                                            'GetFileAttributesA',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'ReadFile',
                                                                                            'CreateFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'CreateFileA',
                                                                                            'GetFileType',
                                                                                            'SetEndOfFile',
                                                                                            'SetFilePointer',
                                                                                            'MoveFileW',
                                                                                            'SetFileTime',
                                                                                            'GetCurrentProcess',
                                                                                            'CloseHandle',
                                                                                            'SetLastError',
                                                                                            'GetLastError',
                                                                                            'GetNumberFormatW',
                                                                                            'wvsprintfA',
                                                                                            'wvsprintfW',
                                                                                            'ReleaseDC',
                                                                                            'GetDC',
                                                                                            'SendMessageW',
                                                                                            'SetDlgItemTextW',
                                                                                            'SetFocus',
                                                                                            'EndDialog',
                                                                                            'DestroyIcon',
                                                                                            'SendDlgItemMessageW',
                                                                                            'GetDlgItemTextW',
                                                                                            'GetClassNameW',
                                                                                            'DialogBoxParamW',
                                                                                            'IsWindowVisible',
                                                                                            'WaitForInputIdle',
                                                                                            'SetForegroundWindow',
                                                                                            'GetSysColor',
                                                                                            'PostMessageW',
                                                                                            'LoadBitmapW',
                                                                                            'LoadIconW',
                                                                                            'CharToOemA',
                                                                                            'OemToCharA',
                                                                                            'MapWindowPoints',
                                                                                            'CreateWindowExW',
                                                                                            'SetWindowTextW',
                                                                                            'UpdateWindow',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassExW',
                                                                                            'SetWindowLongW',
                                                                                            'GetWindowLongW',
                                                                                            'DefWindowProcW',
                                                                                            'PeekMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CopyRect',
                                                                                            'IsWindow',
                                                                                            'CharToOemBuffW',
                                                                                            'MessageBoxW',
                                                                                            'ShowWindow',
                                                                                            'GetDlgItem',
                                                                                            'EnableWindow',
                                                                                            'OemToCharBuffA',
                                                                                            'CharUpperA',
                                                                                            'CharToOemBuffA',
                                                                                            'LoadStringW',
                                                                                            'SetWindowPos',
                                                                                            'GetWindowTextW',
                                                                                            'GetSystemMetrics',
                                                                                            'GetWindow',
                                                                                            'CharUpperW',
                                                                                            'GetWindowRect',
                                                                                            'FindWindowExW',
                                                                                            'GetParent',
                                                                                            'GetClientRect',
                                                                                            'GetDeviceCaps',
                                                                                            'GetObjectW',
                                                                                            'CreateCompatibleBitmap',
                                                                                            'SelectObject',
                                                                                            'StretchBlt',
                                                                                            'CreateCompatibleDC',
                                                                                            'DeleteObject',
                                                                                            'DeleteDC',
                                                                                            'GetOpenFileNameW',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetSaveFileNameW',
                                                                                            'RegOpenKeyExW',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegCloseKey',
                                                                                            'SetFileSecurityW',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'SHChangeNotify',
                                                                                            'ShellExecuteExW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetFileInfoW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetMalloc',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoCreateInstance',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CLSIDFromString',
                                                                                            'VariantInit'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 10,
                                                                      'NumberOfImportFunctions': 166,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 16656,
                                                                      'SectionNames': {'.CRT\x00\x00\x00\x00': 512,
                                                                                       '.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 7680,
                                                                                       '.rsrc\x00\x00\x00': 16896,
                                                                                       '.text\x00\x00\x00': 73216},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fa2d81e6340ab279662bbd4b39d95e4595e0610505b7ff8e9b10fd28617a2fed'},
 'fa31d1c4201a6faa33a75004d1415d17cf677a719fb172b4e416e8b7c4b563e3': {'AddressOfEntryPoint': 4504,
                                                                      'DebugRVA': 115440,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetProcessHeap'},
                                                                      'ImportedFunctions': ['GetCommandLineA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameA',
                                                                                            'RtlUnwindEx',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetLastError',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoA',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'FlsGetValue',
                                                                                            'FlsSetValue',
                                                                                            'FlsFree',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'FlsAlloc',
                                                                                            'HeapSetInformation',
                                                                                            'HeapCreate',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'LoadLibraryA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapFree',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetDateFormatA',
                                                                                            'GetTimeFormatA',
                                                                                            'GetTimeZoneInformation',
                                                                                            'CompareStringA',
                                                                                            'CompareStringW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'CloseHandle',
                                                                                            'ReadFile',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'SetStdHandle',
                                                                                            'FlushFileBuffers',
                                                                                            'SetFilePointer',
                                                                                            'CreateFileA',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 78,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1576,
                                                                      'SectionNames': {'.data\x00\x00\x00': 9216,
                                                                                       '.pdata\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 15360,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 108032},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fa31d1c4201a6faa33a75004d1415d17cf677a719fb172b4e416e8b7c4b563e3'},
 'fa7da61bcfafcb669045627b9dc75f8501deab515992230016a8fe7f8965bd41': {'AddressOfEntryPoint': 70588,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103164,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 120,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 459612,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 3584,
                                                                                       '.itext\x00\x00': 3072,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 459776,
                                                                                       '.text\x00\x00\x00': 61952,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fa7da61bcfafcb669045627b9dc75f8501deab515992230016a8fe7f8965bd41'},
 'fae588c9c8c29207eb2dd4af42639e48ef705356d8ffb1cb3435f6d699f72c1e': {'AddressOfEntryPoint': 73530,
                                                                      'DebugRVA': 73136,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 48,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2368,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 65536},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fae588c9c8c29207eb2dd4af42639e48ef705356d8ffb1cb3435f6d699f72c1e'},
 'fae9df3860b5646e4b29e1d50fdcd4518e5bad04b998a796caa20a2bad08a930': {'AddressOfEntryPoint': 138990,
                                                                      'DebugRVA': 138776,
                                                                      'DebugSize': 28,
                                                                      'Dll': 1344,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 1648,
                                                                      'SectionNames': {'.reloc\x00\x00': 4096,
                                                                                       '.rsrc\x00\x00\x00': 4096,
                                                                                       '.text\x00\x00\x00': 131072},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fae9df3860b5646e4b29e1d50fdcd4518e5bad04b998a796caa20a2bad08a930'},
 'fb8ad1d3ef80c18604996c2a464e988c0ab7ca6f58cc83991a4e7479e5e6c682': {'AddressOfEntryPoint': 9399,
                                                                      'DebugRVA': 12624,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetSystemTimeAsFileTime',
                                                                                      'MSVCR100.dll': '_putenv',
                                                                                      'mozglue.dll': '?DllBlocklist_Initialize@@YAXXZ'},
                                                                      'ImportedFunctions': ['SetEnvironmentVariableW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetModuleFileNameW',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetTickCount',
                                                                                            'GetModuleHandleW',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'GetFileAttributesW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetProcessIoCounters',
                                                                                            'GetCurrentProcess',
                                                                                            'SetDllDirectoryW',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'DecodePointer',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'EncodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'InterlockedCompareExchange',
                                                                                            'Sleep',
                                                                                            'InterlockedExchange',
                                                                                            'IsDebuggerPresent',
                                                                                            'CreateFileW',
                                                                                            'CloseHandle',
                                                                                            'SetFilePointerEx',
                                                                                            'ReadFile',
                                                                                            'LoadLibraryExW',
                                                                                            'GetLastError',
                                                                                            'TerminateProcess',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            '_XcptFilter',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_initterm',
                                                                                            '_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_vsnprintf_s',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_lock',
                                                                                            '_onexit',
                                                                                            '_except_handler4_common',
                                                                                            '_invoke_watson',
                                                                                            '_controlfp_s',
                                                                                            '_crt_debugger_hook',
                                                                                            '_cexit',
                                                                                            '__wgetmainargs',
                                                                                            '_amsg_exit',
                                                                                            'memset',
                                                                                            'memcpy',
                                                                                            'fgets',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'fclose',
                                                                                            '_wfopen',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'getenv',
                                                                                            '_snprintf',
                                                                                            '_stricmp',
                                                                                            '??_V@YAXPAX@Z',
                                                                                            'strrchr',
                                                                                            '__winitenv',
                                                                                            '_putenv',
                                                                                            '?DllBlocklist_Initialize@@YAXXZ'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 252360,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 4096,
                                                                                       '.reloc\x00\x00': 2048,
                                                                                       '.rsrc\x00\x00\x00': 252416,
                                                                                       '.text\x00\x00\x00': 7168},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fb8ad1d3ef80c18604996c2a464e988c0ab7ca6f58cc83991a4e7479e5e6c682'},
 'fc27c9046d023838437b279b69cfb7af962acb4a8ef8c654acbaa0d12a965442': {'AddressOfEntryPoint': 14347,
                                                                      'DebugRVA': 4320,
                                                                      'DebugSize': 28,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 4096,
                                                                      'ImageBase': 16777216,
                                                                      'ImageVersion': 5,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'SetUnhandledExceptionFilter',
                                                                                      'msvcrt.dll': '?terminate@@YAXXZ'},
                                                                      'ImportedFunctions': ['GetLastError',
                                                                                            'FormatMessageW',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CloseHandle',
                                                                                            'DeviceIoControl',
                                                                                            'Sleep',
                                                                                            'CreateFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'wcslen',
                                                                                            'swprintf',
                                                                                            'wcscat',
                                                                                            'wcscpy',
                                                                                            '_CxxThrowException',
                                                                                            'wcstok',
                                                                                            '__CxxFrameHandler',
                                                                                            'printf',
                                                                                            'fprintf',
                                                                                            '_iob',
                                                                                            'wcscmp',
                                                                                            'wcsncmp',
                                                                                            '_wcsicmp',
                                                                                            '_c_exit',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '_cexit',
                                                                                            'exit',
                                                                                            '__winitenv',
                                                                                            '__wgetmainargs',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_adjust_fdiv',
                                                                                            '__p__commode',
                                                                                            '__p__fmode',
                                                                                            '__set_app_type',
                                                                                            '_except_handler3',
                                                                                            '??3@YAXPAX@Z',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_controlfp',
                                                                                            '?terminate@@YAXXZ'],
                                                                      'LinkerVersion': 7,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 54,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1016,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1024,
                                                                                       '.text\x00\x00\x00': 13312},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/fc27c9046d023838437b279b69cfb7af962acb4a8ef8c654acbaa0d12a965442'},
 'fc3b5f953fbcf97ca87a3da6c52fbebaa3dce8d70513cdb556db89a3aaa40028': {'AddressOfEntryPoint': 6421,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 40960,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'CreateFileA',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetFileType',
                                                                                            'GetStdHandle',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetCommandLineA',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'DeleteCriticalSection',
                                                                                            'VirtualAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'Sleep',
                                                                                            'GetProcAddress',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'SetHandleCount',
                                                                                            'GetStartupInfoA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStrings',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'TlsGetValue',
                                                                                            'TlsAlloc',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'GetCurrentThreadId',
                                                                                            'InterlockedDecrement',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'RtlUnwind',
                                                                                            'LoadLibraryA',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'FlushFileBuffers',
                                                                                            'HeapSize',
                                                                                            'GetLocaleInfoA',
                                                                                            'LCMapStringA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'SetFilePointer',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'WriteConsoleW',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileA',
                                                                                            'MessageBoxA'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 71,
                                                                      'NumberOfSections': 4,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 436,
                                                                      'SectionNames': {'.data\x00\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 8192,
                                                                                       '.rsrc\x00\x00\x00': 512,
                                                                                       '.text\x00\x00\x00': 35840},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fc3b5f953fbcf97ca87a3da6c52fbebaa3dce8d70513cdb556db89a3aaa40028'},
 'fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 17320,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 17408,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de'},
 'fc5dc427e76579a85ccb85c1d19899f748447ff34e1cf9975e2bb993bf7d47cd': {'AddressOfEntryPoint': 247056,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 0,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 0,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.DLL': 'ExitProcess',
                                                                                      'MSVCRT.dll': 'free'},
                                                                      'ImportedFunctions': ['LoadLibraryA',
                                                                                            'GetProcAddress',
                                                                                            'VirtualProtect',
                                                                                            'ExitProcess',
                                                                                            'free'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 5,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 28116,
                                                                      'SectionNames': {'.rsrc\x00\x00\x00': 28672,
                                                                                       'UPX0\x00\x00\x00\x00': 0,
                                                                                       'UPX1\x00\x00\x00\x00': 63488},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fc5dc427e76579a85ccb85c1d19899f748447ff34e1cf9975e2bb993bf7d47cd'},
 'fc8ef5704c871187ae4945000db3d3758e8b867e90f8e530b0f12c6438d17d35': {'AddressOfEntryPoint': 32792,
                                                                      'DebugRVA': 4112,
                                                                      'DebugSize': 56,
                                                                      'Dll': 352,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 135168,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ntdll.dll': '__C_specific_handler'},
                                                                      'ImportedFunctions': ['RtlComputeCrc32',
                                                                                            'RtlUpcaseUnicodeChar',
                                                                                            'NtOpenKey',
                                                                                            'RtlGetVersion',
                                                                                            'NtClose',
                                                                                            'TpAllocTimer',
                                                                                            'TpSetTimer',
                                                                                            'NtQuerySystemInformation',
                                                                                            'RtlAllocateHeap',
                                                                                            'RtlFreeHeap',
                                                                                            'NtSetValueKey',
                                                                                            'RtlUnicodeStringToInteger',
                                                                                            'RtlFreeUnicodeString',
                                                                                            'RtlInitUnicodeStringEx',
                                                                                            'NtOpenFile',
                                                                                            'NtDeviceIoControlFile',
                                                                                            'NtQueryValueKey',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlPrefixUnicodeString',
                                                                                            'NtQueryInformationProcess',
                                                                                            'NtQueryVolumeInformationFile',
                                                                                            '_vsnwprintf_s',
                                                                                            'NtCreatePagingFile',
                                                                                            'NtSetSystemInformation',
                                                                                            'RtlAppendUnicodeToString',
                                                                                            'NtCreateFile',
                                                                                            'NtPowerInformation',
                                                                                            'RtlSecondsSince1970ToTime',
                                                                                            'qsort',
                                                                                            'NtSetInformationFile',
                                                                                            'NtQueryInformationFile',
                                                                                            'NtFsControlFile',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlAppendUnicodeStringToString',
                                                                                            'RtlCompareMemory',
                                                                                            'NtDeleteValueKey',
                                                                                            'NtFlushKey',
                                                                                            'NtUpdateWnfStateData',
                                                                                            'NtSerializeBoot',
                                                                                            'RtlAllocateAndInitializeSid',
                                                                                            'RtlCreateSecurityDescriptor',
                                                                                            'RtlCreateAcl',
                                                                                            'RtlAddAccessAllowedAce',
                                                                                            'RtlSetDaclSecurityDescriptor',
                                                                                            'RtlSetOwnerSecurityDescriptor',
                                                                                            'NtSetSecurityObject',
                                                                                            'RtlExpandEnvironmentStrings_U',
                                                                                            'RtlDosPathNameToNtPathName_U',
                                                                                            'NtReadFile',
                                                                                            'NtCreateKey',
                                                                                            'RtlCreateUnicodeString',
                                                                                            'EtwEventWrite',
                                                                                            'EtwEventEnabled',
                                                                                            'RtlCopyUnicodeString',
                                                                                            'RtlAddMandatoryAce',
                                                                                            'RtlSetSaclSecurityDescriptor',
                                                                                            'RtlAdjustPrivilege',
                                                                                            'RtlFreeSid',
                                                                                            'RtlLengthSid',
                                                                                            'NtCreateMutant',
                                                                                            'RtlCreateTagHeap',
                                                                                            'NtSetInformationProcess',
                                                                                            'NtAlpcCreatePort',
                                                                                            'RtlInitializeBitMap',
                                                                                            'RtlClearAllBits',
                                                                                            'RtlSetBits',
                                                                                            'NtOpenEvent',
                                                                                            'RtlCreateEnvironment',
                                                                                            'RtlSetCurrentEnvironment',
                                                                                            'RtlQueryRegistryValuesEx',
                                                                                            'NtCreateDirectoryObject',
                                                                                            'RtlEqualUnicodeString',
                                                                                            'NtResumeThread',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtTerminateProcess',
                                                                                            'NtSetEvent',
                                                                                            'NtInitializeRegistry',
                                                                                            'TpAllocWork',
                                                                                            'TpPostWork',
                                                                                            'TpReleaseWork',
                                                                                            '_wcsupr_s',
                                                                                            'NtOpenDirectoryObject',
                                                                                            'NtCreateSymbolicLinkObject',
                                                                                            'NtMakeTemporaryObject',
                                                                                            '_stricmp',
                                                                                            'RtlInitAnsiString',
                                                                                            'RtlAnsiStringToUnicodeString',
                                                                                            'RtlRandomEx',
                                                                                            'qsort_s',
                                                                                            'LdrVerifyImageMatchesChecksumEx',
                                                                                            'RtlAppxIsFileOwnedByTrustedInstaller',
                                                                                            '_wcsicmp',
                                                                                            'RtlSetEnvironmentVariable',
                                                                                            'NtCreateSection',
                                                                                            'NtMapViewOfSection',
                                                                                            'iswctype',
                                                                                            'RtlQueryEnvironmentVariable_U',
                                                                                            'RtlDosSearchPath_U',
                                                                                            'RtlTestBit',
                                                                                            'RtlInterlockedSetBitRun',
                                                                                            'RtlFindSetBits',
                                                                                            'RtlCreateProcessParametersEx',
                                                                                            'RtlCreateUserProcess',
                                                                                            'RtlDestroyProcessParameters',
                                                                                            'NtDisplayString',
                                                                                            'RtlGetAce',
                                                                                            'RtlAddProcessTrustLabelAce',
                                                                                            'NtQueryDirectoryObject',
                                                                                            'NtOpenSymbolicLinkObject',
                                                                                            'NtQuerySymbolicLinkObject',
                                                                                            'RtlTimeToTimeFields',
                                                                                            'NtWriteFile',
                                                                                            'RtlAcquireSRWLockExclusive',
                                                                                            'RtlGetNtProductType',
                                                                                            'RtlReleaseSRWLockExclusive',
                                                                                            'NtOpenSection',
                                                                                            'NtQuerySection',
                                                                                            'NtMakePermanentObject',
                                                                                            'NtDeleteKey',
                                                                                            'NtDeleteFile',
                                                                                            'NtAlpcDisconnectPort',
                                                                                            'RtlAcquireSRWLockShared',
                                                                                            'RtlReleaseSRWLockShared',
                                                                                            'NtAlpcImpersonateClientOfPort',
                                                                                            'NtOpenThreadToken',
                                                                                            'NtQueryInformationToken',
                                                                                            'NtSetInformationThread',
                                                                                            'TpSetPoolMinThreads',
                                                                                            'RtlSetThreadIsCritical',
                                                                                            'AlpcInitializeMessageAttribute',
                                                                                            'NtAlpcSendWaitReceivePort',
                                                                                            'AlpcGetMessageAttribute',
                                                                                            'NtAlpcCancelMessage',
                                                                                            'NtAlpcOpenSenderProcess',
                                                                                            'RtlInitializeSRWLock',
                                                                                            'NtAlpcAcceptConnectPort',
                                                                                            'NtConnectPort',
                                                                                            'NtRequestWaitReplyPort',
                                                                                            'NtDuplicateObject',
                                                                                            'NtCreateEvent',
                                                                                            'RtlFindClearBits',
                                                                                            'RtlSleepConditionVariableSRW',
                                                                                            'NtClearEvent',
                                                                                            'RtlDeleteNoSplay',
                                                                                            'RtlClearBits',
                                                                                            'RtlWakeConditionVariable',
                                                                                            'RtlWakeAllConditionVariable',
                                                                                            'EtwGetTraceLoggerHandle',
                                                                                            'EtwGetTraceEnableLevel',
                                                                                            'EtwGetTraceEnableFlags',
                                                                                            'EtwRegisterTraceGuidsW',
                                                                                            'RtlSetHeapInformation',
                                                                                            'EtwEventRegister',
                                                                                            'TpAllocPool',
                                                                                            'TpAllocAlpcCompletion',
                                                                                            'NtWaitForMultipleObjects',
                                                                                            'NtRaiseHardError',
                                                                                            'RtlInitializeConditionVariable',
                                                                                            'NtDelayExecution',
                                                                                            'RtlUnicodeStringToAnsiString',
                                                                                            'NtQueryEvent',
                                                                                            'wcstoul',
                                                                                            'LdrQueryImageFileExecutionOptions',
                                                                                            'RtlAcquirePrivilege',
                                                                                            'RtlReleasePrivilege',
                                                                                            'EtwTraceMessage',
                                                                                            'TpAllocWait',
                                                                                            'TpSetWait',
                                                                                            'TpReleaseWait',
                                                                                            'DbgPrintEx',
                                                                                            'RtlNtStatusToDosError',
                                                                                            '_ltow_s',
                                                                                            'RtlCheckTokenMembership',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlUnhandledExceptionFilter',
                                                                                            '_wcsnicmp',
                                                                                            'RtlCompareUnicodeStrings',
                                                                                            'iswspace',
                                                                                            'RtlNormalizeProcessParams',
                                                                                            'RtlConnectToSm',
                                                                                            'RtlSendMsgToSm',
                                                                                            'NtQueryKey',
                                                                                            '__chkstk',
                                                                                            'memcpy',
                                                                                            'memset',
                                                                                            '__C_specific_handler'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 188,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2032,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.idata\x00\x00': 7680,
                                                                                       '.pdata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.rsrc\x00\x00\x00': 2048,
                                                                                       '.text\x00\x00\x00': 114176},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/fc8ef5704c871187ae4945000db3d3758e8b867e90f8e530b0f12c6438d17d35'},
 'fcb3a1bcbe786c808f6acc7cc0a8906deb37c83b170a937f9cca5635fcea35e5': {'AddressOfEntryPoint': 141104,
                                                                      'DebugRVA': 4480,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 258048,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegFlushKey',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'COMDLG32.dll': 'GetSaveFileNameW',
                                                                                      'KERNEL32.dll': 'QueryPerformanceCounter',
                                                                                      'OLEAUT32.dll': 'VariantClear',
                                                                                      'SHELL32.dll': 'ShellExecuteW',
                                                                                      'USER32.dll': 'SendMessageW',
                                                                                      'ole32.dll': 'CoInitialize'},
                                                                      'ImportedFunctions': ['RegCreateKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'RegFlushKey',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetCommandLineW',
                                                                                            'lstrlenA',
                                                                                            'FreeLibrary',
                                                                                            'WaitForSingleObject',
                                                                                            'SetEvent',
                                                                                            'RegisterApplicationRestart',
                                                                                            'LoadLibraryW',
                                                                                            'Sleep',
                                                                                            'CreateEventW',
                                                                                            'WaitForMultipleObjects',
                                                                                            'HeapSetInformation',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'GetVersionExW',
                                                                                            'GetProcAddress',
                                                                                            'GetSystemInfo',
                                                                                            'GetFullPathNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'CreateFileA',
                                                                                            'ReadConsoleW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'GetProcessHeap',
                                                                                            'SetEndOfFile',
                                                                                            'WriteConsoleW',
                                                                                            'WriteConsoleA',
                                                                                            'GetConsoleOutputCP',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'FlushFileBuffers',
                                                                                            'SetStdHandle',
                                                                                            'CreateFileW',
                                                                                            'SetFilePointer',
                                                                                            'GetConsoleMode',
                                                                                            'GetConsoleCP',
                                                                                            'LCMapStringA',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeA',
                                                                                            'GetStringTypeW',
                                                                                            'GetLocaleInfoA',
                                                                                            'MultiByteToWideChar',
                                                                                            'LoadLibraryExA',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'HeapSize',
                                                                                            'GetCPInfo',
                                                                                            'GetOEMCP',
                                                                                            'GetACP',
                                                                                            'lstrlenW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetFileAttributesW',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetSystemDirectoryW',
                                                                                            'InitializeCriticalSection',
                                                                                            'ReadFile',
                                                                                            'IsValidCodePage',
                                                                                            'VirtualAlloc',
                                                                                            'OutputDebugStringA',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsA',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'GetEnvironmentStrings',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCommandLineA',
                                                                                            'GetVersionExA',
                                                                                            'GetStartupInfoA',
                                                                                            'GetLastError',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'CreateThread',
                                                                                            'ExitThread',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'RaiseException',
                                                                                            'RtlUnwind',
                                                                                            'GetModuleHandleA',
                                                                                            'SetLastError',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'LoadLibraryExW',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'HeapCreate',
                                                                                            'VirtualFree',
                                                                                            'GetFileType',
                                                                                            'SetHandleCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'EnableWindow',
                                                                                            'SetWindowTextW',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DestroyWindow',
                                                                                            'SetTimer',
                                                                                            'GetWindowRect',
                                                                                            'PostQuitMessage',
                                                                                            'PostMessageW',
                                                                                            'KillTimer',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'GetKeyState',
                                                                                            'SetForegroundWindow',
                                                                                            'GetFocus',
                                                                                            'DialogBoxParamW',
                                                                                            'CallNextHookEx',
                                                                                            'IsWindowEnabled',
                                                                                            'UpdateWindow',
                                                                                            'SetFocus',
                                                                                            'GetClientRect',
                                                                                            'IsDialogMessageW',
                                                                                            'LoadIconW',
                                                                                            'GetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'GetDlgItem',
                                                                                            'EndDialog',
                                                                                            'GetDesktopWindow',
                                                                                            'SetWindowPos',
                                                                                            'CheckDlgButton',
                                                                                            'LoadStringW',
                                                                                            'ShowWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetWindowsHookExW',
                                                                                            'AdjustWindowRectEx',
                                                                                            'UnhookWindowsHookEx',
                                                                                            'MessageBoxW',
                                                                                            'SendMessageW',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_ReplaceIcon',
                                                                                            'ImageList_Destroy',
                                                                                            'GetSaveFileNameW',
                                                                                            'ShellExecuteW',
                                                                                            'CoCreateInstance',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeSecurity',
                                                                                            'CoInitialize',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'VariantInit',
                                                                                            'VariantClear'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 155,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 29784,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5120,
                                                                                       '.idata\x00\x00': 4608,
                                                                                       '.reloc\x00\x00': 10752,
                                                                                       '.rsrc\x00\x00\x00': 30208,
                                                                                       '.text\x00\x00\x00': 237056},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/fcb3a1bcbe786c808f6acc7cc0a8906deb37c83b170a937f9cca5635fcea35e5'},
 'fcbace1dac76aa93ad80549dd6c172b7f64562c68edd5f0065e32d39609f5dbc': {'AddressOfEntryPoint': 13333,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33792,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 32768,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumValueW',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'lstrlenW',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'IsWindow',
                                                                                      'VERSION.dll': 'VerQueryValueW',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['SetFileTime',
                                                                                            'CompareFileTime',
                                                                                            'SearchPathW',
                                                                                            'GetShortPathNameW',
                                                                                            'GetFullPathNameW',
                                                                                            'MoveFileW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'GetFileAttributesW',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileW',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetTempPathW',
                                                                                            'GetCommandLineW',
                                                                                            'SetErrorMode',
                                                                                            'lstrcpynA',
                                                                                            'CloseHandle',
                                                                                            'lstrcpynW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'LoadLibraryW',
                                                                                            'CreateProcessW',
                                                                                            'lstrcmpiA',
                                                                                            'CreateFileW',
                                                                                            'GetTempFileNameW',
                                                                                            'lstrcatW',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryA',
                                                                                            'GetModuleHandleA',
                                                                                            'OpenProcess',
                                                                                            'lstrcpyW',
                                                                                            'GetVersionExW',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetVersion',
                                                                                            'lstrcpyA',
                                                                                            'RemoveDirectoryW',
                                                                                            'lstrcmpiW',
                                                                                            'lstrcmpW',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GlobalFree',
                                                                                            'GetModuleHandleW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'WritePrivateProfileStringW',
                                                                                            'GetPrivateProfileStringW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MulDiv',
                                                                                            'lstrlenA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'lstrlenW',
                                                                                            'ScreenToClient',
                                                                                            'GetMessagePos',
                                                                                            'CallWindowProcW',
                                                                                            'IsWindowVisible',
                                                                                            'LoadBitmapW',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'GetWindowRect',
                                                                                            'AppendMenuW',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'EndDialog',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongW',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'DialogBoxParamW',
                                                                                            'CheckDlgButton',
                                                                                            'CreateWindowExW',
                                                                                            'SystemParametersInfoW',
                                                                                            'RegisterClassW',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetDlgItemTextW',
                                                                                            'MessageBoxIndirectW',
                                                                                            'CharNextA',
                                                                                            'CharUpperW',
                                                                                            'CharPrevW',
                                                                                            'DispatchMessageW',
                                                                                            'PeekMessageW',
                                                                                            'wsprintfA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamW',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextW',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'ShowWindow',
                                                                                            'wsprintfW',
                                                                                            'SendMessageTimeoutW',
                                                                                            'LoadCursorW',
                                                                                            'SetCursor',
                                                                                            'GetWindowLongW',
                                                                                            'GetSysColor',
                                                                                            'CharNextW',
                                                                                            'GetClassInfoW',
                                                                                            'ExitWindowsEx',
                                                                                            'FindWindowExW',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongW',
                                                                                            'LoadImageW',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextW',
                                                                                            'EndPaint',
                                                                                            'IsWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectW',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHBrowseForFolderW',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteW',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegEnumKeyW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegDeleteValueW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegSetValueExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegEnumValueW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeW',
                                                                                            'GetFileVersionInfoW',
                                                                                            'VerQueryValueW'],
                                                                      'LinkerVersion': 9,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 167,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 235704,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 236032,
                                                                                       '.text\x00\x00\x00': 26624},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fcbace1dac76aa93ad80549dd6c172b7f64562c68edd5f0065e32d39609f5dbc'},
 'fcc3442059d7314aee8904a5ce2b93ef0a0c9865c2ab670c8ee438e4d828a9b8': {'AddressOfEntryPoint': 5216,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 12288,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegGetValueW',
                                                                                      'KERNEL32.dll': 'TerminateProcess',
                                                                                      'msvcrt.dll': 'memset'},
                                                                      'ImportedFunctions': ['RegGetValueW',
                                                                                            'SearchPathW',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'TerminateProcess',
                                                                                            '_acmdln',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_initterm',
                                                                                            '_except_handler4_common',
                                                                                            '__setusermatherr',
                                                                                            '_ismbblead',
                                                                                            '__p__fmode',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_controlfp',
                                                                                            'memset'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 3,
                                                                      'NumberOfImportFunctions': 32,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 3328,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 1024,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 3584,
                                                                                       '.text\x00\x00\x00': 3584},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/fcc3442059d7314aee8904a5ce2b93ef0a0c9865c2ab670c8ee438e4d828a9b8'},
 'fcd95d7322e02b1835b27fa89ce11be07a2630d5481693b0bc76d0b783491733': {'AddressOfEntryPoint': 10952,
                                                                      'DebugRVA': 4128,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCloseKey',
                                                                                      'KERNEL32.dll': 'GetTickCount',
                                                                                      'msvcrt.dll': 'malloc',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['GetTraceEnableFlags',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'UnregisterTraceGuids',
                                                                                            'GetTraceEnableLevel',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'RegQueryValueExA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegCloseKey',
                                                                                            'SetEvent',
                                                                                            'lstrlenA',
                                                                                            'WaitForSingleObject',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'CreateEventW',
                                                                                            'CloseHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetStartupInfoA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            '_XcptFilter',
                                                                                            '__p__commode',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '_callnewh',
                                                                                            '_ismbblead',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '??1type_info@@UAE@XZ',
                                                                                            '_lock',
                                                                                            '_unlock',
                                                                                            '__dllonexit',
                                                                                            '_onexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__p__fmode',
                                                                                            'memmove_s',
                                                                                            '?what@exception@@UBEPBDXZ',
                                                                                            '??1exception@@UAE@XZ',
                                                                                            '??0exception@@QAE@XZ',
                                                                                            '??0exception@@QAE@ABQBD@Z',
                                                                                            '??0exception@@QAE@ABV0@@Z',
                                                                                            'memcpy_s',
                                                                                            'mbstowcs',
                                                                                            'strncpy_s',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'CoInitializeEx',
                                                                                            'IIDFromString',
                                                                                            'CoRegisterSurrogate',
                                                                                            'CoInitializeSecurity',
                                                                                            'CLSIDFromString',
                                                                                            'CoUninitialize',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoMarshalInterface',
                                                                                            'CoGetClassObject',
                                                                                            'CoReleaseMarshalData',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 74,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1264,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2560,
                                                                                       '.reloc\x00\x00': 3072,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 11264},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/fcd95d7322e02b1835b27fa89ce11be07a2630d5481693b0bc76d0b783491733'},
 'fd046e6edec4d0cef0edf372659257de09483793a2cb0212816b3e6d47c958d2': {'AddressOfEntryPoint': 36257,
                                                                      'DebugRVA': 115184,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegQueryValueExA',
                                                                                      'COMCTL32.dll': 'InitCommonControlsEx',
                                                                                      'KERNEL32.dll': 'GetStringTypeW',
                                                                                      'USER32.dll': 'MessageBoxA'},
                                                                      'ImportedFunctions': ['RegCloseKey',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegQueryValueExA',
                                                                                            'CharNextExA',
                                                                                            'MessageBoxA',
                                                                                            'InitCommonControlsEx',
                                                                                            'CreateFileW',
                                                                                            'GetCommandLineA',
                                                                                            'GetModuleFileNameA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'QueryPerformanceFrequency',
                                                                                            'LocalFree',
                                                                                            'FormatMessageA',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'CreateProcessA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryA',
                                                                                            'GetExitCodeThread',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'FindClose',
                                                                                            'GetModuleHandleW',
                                                                                            'ExitProcess',
                                                                                            'DecodePointer',
                                                                                            'HeapSetInformation',
                                                                                            'HeapFree',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetCurrentProcessId',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'HeapAlloc',
                                                                                            'HeapReAlloc',
                                                                                            'FileTimeToSystemTime',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'GetDriveTypeA',
                                                                                            'FindFirstFileExA',
                                                                                            'GetFileAttributesA',
                                                                                            'ExitThread',
                                                                                            'GetCurrentThreadId',
                                                                                            'CreateThread',
                                                                                            'SetFilePointer',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DeleteCriticalSection',
                                                                                            'EncodePointer',
                                                                                            'LoadLibraryW',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'InterlockedIncrement',
                                                                                            'SetLastError',
                                                                                            'InterlockedDecrement',
                                                                                            'WriteFile',
                                                                                            'GetStdHandle',
                                                                                            'GetModuleFileNameW',
                                                                                            'WideCharToMultiByte',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'SetHandleCount',
                                                                                            'GetFileType',
                                                                                            'GetStartupInfoW',
                                                                                            'HeapCreate',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'SetEnvironmentVariableW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'Sleep',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'RtlUnwind',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetConsoleMode',
                                                                                            'GetFullPathNameA',
                                                                                            'GetFileInformationByHandle',
                                                                                            'PeekNamedPipe',
                                                                                            'CreateFileA',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'FlushFileBuffers',
                                                                                            'GetCPInfo',
                                                                                            'GetACP',
                                                                                            'GetOEMCP',
                                                                                            'IsValidCodePage',
                                                                                            'HeapSize',
                                                                                            'CompareStringW',
                                                                                            'ReadFile',
                                                                                            'WriteConsoleW',
                                                                                            'GetDriveTypeW',
                                                                                            'SetEndOfFile',
                                                                                            'GetProcessHeap',
                                                                                            'GetTimeZoneInformation',
                                                                                            'LCMapStringW',
                                                                                            'GetStringTypeW'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 102,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 33208,
                                                                      'SectionNames': {'.data\x00\x00\x00': 5632,
                                                                                       '.rdata\x00\x00': 29696,
                                                                                       '.reloc\x00\x00': 6656,
                                                                                       '.rsrc\x00\x00\x00': 33280,
                                                                                       '.text\x00\x00\x00': 108544},
                                                                      'StackReserveSize': 327680,
                                                                      'filename': './data/clean/fd046e6edec4d0cef0edf372659257de09483793a2cb0212816b3e6d47c958d2'},
 'fd08ac764e086f40a53efc6d531a70aa8c63e608ec52cd7696ff5020d0abc168': {'AddressOfEntryPoint': 223088,
                                                                      'DebugRVA': 4544,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49504,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 253952,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'ESENT.dll': 'JetSetSystemParameterW',
                                                                                      'KERNEL32.dll': 'CreateEventW',
                                                                                      'OLEAUT32.dll': 'SysAllocString',
                                                                                      'USER32.dll': 'UnregisterClassA',
                                                                                      'api-ms-win-core-errorhandling-l1-1-1.dll': 'UnhandledExceptionFilter',
                                                                                      'api-ms-win-core-libraryloader-l1-2-0.dll': 'GetModuleHandleExW',
                                                                                      'api-ms-win-core-localization-l1-2-1.dll': 'GetLocaleInfoW',
                                                                                      'api-ms-win-core-processenvironment-l1-2-0.dll': 'SetCurrentDirectoryW',
                                                                                      'api-ms-win-core-processthreads-l1-1-2.dll': 'TerminateProcess',
                                                                                      'api-ms-win-core-profile-l1-1-0.dll': 'QueryPerformanceCounter',
                                                                                      'api-ms-win-core-string-l1-1-0.dll': 'CompareStringW',
                                                                                      'api-ms-win-core-synch-l1-2-0.dll': 'InitializeSRWLock',
                                                                                      'api-ms-win-core-sysinfo-l1-2-1.dll': 'GetSystemTimeAsFileTime',
                                                                                      'api-ms-win-devices-config-l1-1-1.dll': 'CM_Unregister_Notification',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ntdll.dll': 'RtlSetThreadErrorMode',
                                                                                      'ole32.dll': 'CoReleaseMarshalData'},
                                                                      'ImportedFunctions': ['TraceMessage',
                                                                                            'EventRegister',
                                                                                            'EventUnregister',
                                                                                            'GetTraceLoggerHandle',
                                                                                            'GetTraceEnableLevel',
                                                                                            'GetTraceEnableFlags',
                                                                                            'RegisterTraceGuidsW',
                                                                                            'UnregisterTraceGuids',
                                                                                            'SetServiceStatus',
                                                                                            'StartServiceCtrlDispatcherW',
                                                                                            'RegisterServiceCtrlHandlerW',
                                                                                            'EventWrite',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'PrivilegeCheck',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'RegGetValueW',
                                                                                            'RegNotifyChangeKeyValue',
                                                                                            'CloseTrace',
                                                                                            'ProcessTrace',
                                                                                            'OpenTraceW',
                                                                                            'EnableTraceEx2',
                                                                                            'ControlTraceW',
                                                                                            'StartTraceW',
                                                                                            'RegCreateKeyExW',
                                                                                            'CreateSemaphoreW',
                                                                                            'CreateThreadpoolWait',
                                                                                            'CloseThreadpool',
                                                                                            'CloseThreadpoolWait',
                                                                                            'WaitForThreadpoolWaitCallbacks',
                                                                                            'WaitForThreadpoolWorkCallbacks',
                                                                                            'GetLastError',
                                                                                            'DeleteCriticalSection',
                                                                                            'GetModuleHandleW',
                                                                                            'RaiseException',
                                                                                            'InitializeCriticalSection',
                                                                                            'CloseThreadpoolWork',
                                                                                            'Sleep',
                                                                                            'GetCurrentThreadId',
                                                                                            'CloseHandle',
                                                                                            'WaitForSingleObject',
                                                                                            'FreeLibraryWhenCallbackReturns',
                                                                                            'FindClose',
                                                                                            'FindNextFileW',
                                                                                            'FindFirstFileW',
                                                                                            'DeleteFileW',
                                                                                            'MoveFileW',
                                                                                            'CopyFileW',
                                                                                            'GetFileInformationByHandleEx',
                                                                                            'WaitForThreadpoolTimerCallbacks',
                                                                                            'GetFileAttributesW',
                                                                                            'FindNextVolumeW',
                                                                                            'FindVolumeClose',
                                                                                            'FindFirstVolumeW',
                                                                                            'SetThreadpoolTimer',
                                                                                            'CreateThreadpoolTimer',
                                                                                            'CloseThreadpoolCleanupGroup',
                                                                                            'CloseThreadpoolCleanupGroupMembers',
                                                                                            'CreateThreadpoolCleanupGroup',
                                                                                            'DeviceIoControl',
                                                                                            'GetVolumeNameForVolumeMountPointW',
                                                                                            'SetThreadpoolWait',
                                                                                            'SubmitThreadpoolWork',
                                                                                            'CreateThreadpoolWork',
                                                                                            'SetThreadpoolThreadMinimum',
                                                                                            'SetThreadpoolThreadMaximum',
                                                                                            'CreateThreadpool',
                                                                                            'CreateDirectoryW',
                                                                                            'SetEvent',
                                                                                            'CreateThread',
                                                                                            'CreateEventW',
                                                                                            'PostThreadMessageW',
                                                                                            'GetMessageW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadStringW',
                                                                                            'UnregisterClassA',
                                                                                            '__C_specific_handler',
                                                                                            'malloc',
                                                                                            'memset',
                                                                                            'free',
                                                                                            '_purecall',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '__wgetmainargs',
                                                                                            'wcscpy_s',
                                                                                            '_commode',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '_wcmdln',
                                                                                            '_fmode',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'swprintf_s',
                                                                                            'wcscat_s',
                                                                                            '_snwprintf_s',
                                                                                            '_CxxThrowException',
                                                                                            '__CxxFrameHandler3',
                                                                                            'realloc',
                                                                                            '_onexit',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '_lock',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            'memcpy',
                                                                                            'RtlCaptureContext',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCompareMemory',
                                                                                            'RtlInitUnicodeString',
                                                                                            'RtlCompareUnicodeString',
                                                                                            'RtlGUIDFromString',
                                                                                            'RtlNtStatusToDosError',
                                                                                            'NtClose',
                                                                                            'WinSqmStartSession',
                                                                                            'WinSqmEndSession',
                                                                                            'RtlStringFromGUID',
                                                                                            'WinSqmAddToStreamEx',
                                                                                            'RtlNumberOfClearBits',
                                                                                            'RtlInitializeBitMap',
                                                                                            'RtlCreateSystemVolumeInformationFolder',
                                                                                            'NtFsControlFile',
                                                                                            'NtWaitForSingleObject',
                                                                                            'NtOpenFile',
                                                                                            'RtlGetThreadErrorMode',
                                                                                            'RtlSetThreadErrorMode',
                                                                                            'CoUninitialize',
                                                                                            'CoInitializeEx',
                                                                                            'CoResumeClassObjects',
                                                                                            'CoRevokeClassObject',
                                                                                            'CoRegisterClassObject',
                                                                                            'CoSuspendClassObjects',
                                                                                            'CoCreateInstance',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'CoMarshalInterface',
                                                                                            'CreateStreamOnHGlobal',
                                                                                            'CoUnmarshalInterface',
                                                                                            'CoReleaseMarshalData',
                                                                                            'VariantClear',
                                                                                            'VariantInit',
                                                                                            'SysFreeString',
                                                                                            'SysAllocString',
                                                                                            'JetRollback',
                                                                                            'JetCommitTransaction',
                                                                                            'JetBeginTransaction',
                                                                                            'JetRetrieveColumn',
                                                                                            'JetSetColumns',
                                                                                            'JetRetrieveColumns',
                                                                                            'JetUpdate',
                                                                                            'JetPrepareUpdate',
                                                                                            'JetDelete',
                                                                                            'JetMove',
                                                                                            'JetSeek',
                                                                                            'JetMakeKey',
                                                                                            'JetGetObjectInfoW',
                                                                                            'JetComputeStats',
                                                                                            'JetGetColumnInfoW',
                                                                                            'JetCreateTableColumnIndex2W',
                                                                                            'JetOpenTableW',
                                                                                            'JetDeleteTableW',
                                                                                            'JetSetCurrentIndexW',
                                                                                            'JetCreateDatabase2W',
                                                                                            'JetOpenDatabaseW',
                                                                                            'JetAttachDatabase2W',
                                                                                            'JetBeginSessionW',
                                                                                            'JetEndSession',
                                                                                            'JetCloseDatabase',
                                                                                            'JetCloseTable',
                                                                                            'JetInit3W',
                                                                                            'JetTerm2',
                                                                                            'JetCreateInstance2W',
                                                                                            'JetEnableMultiInstanceW',
                                                                                            'JetSetSystemParameterW',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetModuleHandleExW',
                                                                                            'GetStartupInfoW',
                                                                                            'GetCurrentProcess',
                                                                                            'OpenProcessToken',
                                                                                            'GetCurrentProcessId',
                                                                                            'TerminateProcess',
                                                                                            'QueryPerformanceCounter',
                                                                                            'ResetEvent',
                                                                                            'ReleaseSRWLockExclusive',
                                                                                            'AcquireSRWLockExclusive',
                                                                                            'ReleaseSRWLockShared',
                                                                                            'AcquireSRWLockShared',
                                                                                            'InitializeSRWLock',
                                                                                            'GetTickCount',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetLocaleInfoW',
                                                                                            'CompareStringW',
                                                                                            'SetCurrentDirectoryW',
                                                                                            'CM_Register_Notification',
                                                                                            'CM_Unregister_Notification'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 18,
                                                                      'NumberOfImportFunctions': 203,
                                                                      'NumberOfSections': 7,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 6568,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.idata\x00\x00': 8704,
                                                                                       '.pdata\x00\x00': 5120,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 6656,
                                                                                       '.text\x00\x00\x00': 235520,
                                                                                       '.tls\x00\x00\x00\x00': 512},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/fd08ac764e086f40a53efc6d531a70aa8c63e608ec52cd7696ff5020d0abc168'},
 'fd6ca20a731613a2e954b7142c32cb94a3c038ed652ac93bb6e7334143af5973': {'AddressOfEntryPoint': 71644,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 103172,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'advapi32.dll': 'AdjustTokenPrivileges',
                                                                                      'comctl32.dll': 'InitCommonControls',
                                                                                      'kernel32.dll': 'Sleep',
                                                                                      'oleaut32.dll': 'SysAllocStringLen',
                                                                                      'user32.dll': 'CallWindowProcW'},
                                                                      'ImportedFunctions': ['SysFreeString',
                                                                                            'SysReAllocStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'GetKeyboardType',
                                                                                            'LoadStringW',
                                                                                            'MessageBoxA',
                                                                                            'CharNextW',
                                                                                            'GetACP',
                                                                                            'Sleep',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'GetSystemInfo',
                                                                                            'GetTickCount',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetVersion',
                                                                                            'GetCurrentThreadId',
                                                                                            'VirtualQuery',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'lstrlenW',
                                                                                            'lstrcpynW',
                                                                                            'LoadLibraryExW',
                                                                                            'GetThreadLocale',
                                                                                            'GetStartupInfoA',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetCommandLineW',
                                                                                            'FreeLibrary',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'ExitProcess',
                                                                                            'WriteFile',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'RtlUnwind',
                                                                                            'RaiseException',
                                                                                            'GetStdHandle',
                                                                                            'CloseHandle',
                                                                                            'TlsSetValue',
                                                                                            'TlsGetValue',
                                                                                            'LocalAlloc',
                                                                                            'GetModuleHandleW',
                                                                                            'CreateWindowExW',
                                                                                            'TranslateMessage',
                                                                                            'SetWindowLongW',
                                                                                            'PeekMessageW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'MessageBoxW',
                                                                                            'LoadStringW',
                                                                                            'GetSystemMetrics',
                                                                                            'ExitWindowsEx',
                                                                                            'DispatchMessageW',
                                                                                            'DestroyWindow',
                                                                                            'CharUpperBuffW',
                                                                                            'CallWindowProcW',
                                                                                            'WriteFile',
                                                                                            'WideCharToMultiByte',
                                                                                            'WaitForSingleObject',
                                                                                            'VirtualQuery',
                                                                                            'VirtualProtect',
                                                                                            'VirtualFree',
                                                                                            'VirtualAlloc',
                                                                                            'SizeofResource',
                                                                                            'SignalObjectAndWait',
                                                                                            'SetLastError',
                                                                                            'SetFilePointer',
                                                                                            'SetEvent',
                                                                                            'SetErrorMode',
                                                                                            'SetEndOfFile',
                                                                                            'ResetEvent',
                                                                                            'RemoveDirectoryW',
                                                                                            'ReadFile',
                                                                                            'MultiByteToWideChar',
                                                                                            'LockResource',
                                                                                            'LoadResource',
                                                                                            'LoadLibraryW',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'GetVersionExW',
                                                                                            'GetVersion',
                                                                                            'GetUserDefaultLangID',
                                                                                            'GetThreadLocale',
                                                                                            'GetSystemInfo',
                                                                                            'GetSystemDirectoryW',
                                                                                            'GetStdHandle',
                                                                                            'GetProcAddress',
                                                                                            'GetModuleHandleW',
                                                                                            'GetModuleFileNameW',
                                                                                            'GetLocaleInfoW',
                                                                                            'GetLastError',
                                                                                            'GetFullPathNameW',
                                                                                            'GetFileSize',
                                                                                            'GetFileAttributesW',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetEnvironmentVariableW',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetCurrentProcess',
                                                                                            'GetCommandLineW',
                                                                                            'GetCPInfo',
                                                                                            'InterlockedExchange',
                                                                                            'InterlockedCompareExchange',
                                                                                            'FreeLibrary',
                                                                                            'FormatMessageW',
                                                                                            'FindResourceW',
                                                                                            'EnumCalendarInfoW',
                                                                                            'DeleteFileW',
                                                                                            'CreateProcessW',
                                                                                            'CreateFileW',
                                                                                            'CreateEventW',
                                                                                            'CreateDirectoryW',
                                                                                            'CloseHandle',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'InitCommonControls',
                                                                                            'Sleep',
                                                                                            'AdjustTokenPrivileges'],
                                                                      'LinkerVersion': 2,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 122,
                                                                      'NumberOfSections': 8,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 65912,
                                                                      'SectionNames': {'.bss\x00\x00\x00\x00': 0,
                                                                                       '.data\x00\x00\x00': 3584,
                                                                                       '.idata\x00\x00': 4096,
                                                                                       '.itext\x00\x00': 4096,
                                                                                       '.rdata\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 66048,
                                                                                       '.text\x00\x00\x00': 62464,
                                                                                       '.tls\x00\x00\x00\x00': 0},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fd6ca20a731613a2e954b7142c32cb94a3c038ed652ac93bb6e7334143af5973'},
 'fd9a1bc3cf5e6d2c75b6c8e1674f87d3c6704d3822af495d8104b757abea704c': {'AddressOfEntryPoint': 534208,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 536576,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'LsaAddAccountRights',
                                                                                      'COMCTL32.dll': 'PropertySheetW',
                                                                                      'GDI32.dll': 'DeleteObject',
                                                                                      'KERNEL32.dll': 'WriteFile',
                                                                                      'MPR.dll': 'WNetGetResourceInformationW',
                                                                                      'OLEAUT32.dll': 'VariantCopy',
                                                                                      'SHELL32.dll': 'SHBrowseForFolderW',
                                                                                      'USER32.dll': 'DialogBoxParamW',
                                                                                      'comdlg32.dll': 'GetOpenFileNameW',
                                                                                      'msvcrt.dll': 'malloc',
                                                                                      'ole32.dll': 'OleInitialize'},
                                                                      'ImportedFunctions': ['ImageList_ReplaceIcon',
                                                                                            'InitCommonControlsEx',
                                                                                            'CreateToolbarEx',
                                                                                            'CreateStatusWindowW',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_GetImageCount',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'PropertySheetW',
                                                                                            'CommDlgExtendedError',
                                                                                            'GetOpenFileNameW',
                                                                                            'WNetGetResourceParentW',
                                                                                            'WNetAddConnection2W',
                                                                                            'WNetEnumResourceW',
                                                                                            'WNetCloseEnum',
                                                                                            'WNetOpenEnumW',
                                                                                            'WNetGetResourceInformationW',
                                                                                            'DeleteObject',
                                                                                            'SysStringLen',
                                                                                            'SysAllocStringLen',
                                                                                            'VariantClear',
                                                                                            'SysFreeString',
                                                                                            'SysStringByteLen',
                                                                                            'SysAllocString',
                                                                                            'VariantCopy',
                                                                                            'CoInitialize',
                                                                                            'CoUninitialize',
                                                                                            'ReleaseStgMedium',
                                                                                            'CoTaskMemAlloc',
                                                                                            'CoTaskMemFree',
                                                                                            'RegisterDragDrop',
                                                                                            'RevokeDragDrop',
                                                                                            'OleUninitialize',
                                                                                            'DoDragDrop',
                                                                                            'CoCreateInstance',
                                                                                            'OleInitialize',
                                                                                            'ChildWindowFromPointEx',
                                                                                            'RegisterClipboardFormatW',
                                                                                            'TrackPopupMenuEx',
                                                                                            'GetCursorPos',
                                                                                            'GetMenuItemCount',
                                                                                            'ClientToScreen',
                                                                                            'KillTimer',
                                                                                            'SetCursor',
                                                                                            'DestroyIcon',
                                                                                            'WindowFromPoint',
                                                                                            'CharUpperW',
                                                                                            'OpenClipboard',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'GetMenuItemInfoW',
                                                                                            'SetMenuItemInfoW',
                                                                                            'InsertMenuItemW',
                                                                                            'LoadStringW',
                                                                                            'SendMessageW',
                                                                                            'GetWindowTextLengthW',
                                                                                            'GetWindowTextW',
                                                                                            'GetWindowRect',
                                                                                            'ScreenToClient',
                                                                                            'MoveWindow',
                                                                                            'ShowWindow',
                                                                                            'SetWindowLongPtrW',
                                                                                            'GetWindowLongPtrW',
                                                                                            'GetDlgItem',
                                                                                            'MapDialogRect',
                                                                                            'SystemParametersInfoW',
                                                                                            'GetDialogBaseUnits',
                                                                                            'IsWindowEnabled',
                                                                                            'MapVirtualKeyW',
                                                                                            'SetTimer',
                                                                                            'UpdateWindow',
                                                                                            'GetMenu',
                                                                                            'LoadMenuW',
                                                                                            'SetMenu',
                                                                                            'DrawMenuBar',
                                                                                            'EnableMenuItem',
                                                                                            'CheckMenuItem',
                                                                                            'CheckMenuRadioItem',
                                                                                            'RemoveMenu',
                                                                                            'AppendMenuW',
                                                                                            'GetSubMenu',
                                                                                            'CheckRadioButton',
                                                                                            'IsDlgButtonChecked',
                                                                                            'CheckDlgButton',
                                                                                            'GetParent',
                                                                                            'LoadAcceleratorsW',
                                                                                            'GetMessageW',
                                                                                            'TranslateAcceleratorW',
                                                                                            'TranslateMessage',
                                                                                            'DispatchMessageW',
                                                                                            'LoadIconW',
                                                                                            'ReleaseCapture',
                                                                                            'SetCapture',
                                                                                            'GetCapture',
                                                                                            'IsZoomed',
                                                                                            'GetClientRect',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowPlacement',
                                                                                            'SetWindowPlacement',
                                                                                            'GetFocus',
                                                                                            'SetDlgItemTextW',
                                                                                            'GetKeyState',
                                                                                            'PostMessageW',
                                                                                            'InvalidateRect',
                                                                                            'EndDialog',
                                                                                            'EnableWindow',
                                                                                            'SetFocus',
                                                                                            'DestroyWindow',
                                                                                            'SetWindowTextW',
                                                                                            'LoadBitmapW',
                                                                                            'DestroyMenu',
                                                                                            'CreatePopupMenu',
                                                                                            'MessageBoxW',
                                                                                            'GetClassInfoW',
                                                                                            'LoadCursorW',
                                                                                            'RegisterClassW',
                                                                                            'DefWindowProcW',
                                                                                            'CallWindowProcW',
                                                                                            'CreateWindowExW',
                                                                                            'DialogBoxParamW',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegQueryValueExA',
                                                                                            'GetFileSecurityW',
                                                                                            'SetFileSecurityW',
                                                                                            'RegEnumKeyExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCreateKeyExW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegSetValueExW',
                                                                                            'LsaClose',
                                                                                            'RegDeleteKeyW',
                                                                                            'RegCloseKey',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueW',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'GetUserNameW',
                                                                                            'LsaOpenPolicy',
                                                                                            'LookupAccountNameW',
                                                                                            'LsaAddAccountRights',
                                                                                            'SHGetFileInfoW',
                                                                                            'ShellExecuteExW',
                                                                                            'SHGetMalloc',
                                                                                            'SHFileOperationW',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'ShellExecuteW',
                                                                                            'ExtractIconExW',
                                                                                            'SHChangeNotify',
                                                                                            'SHGetPathFromIDListW',
                                                                                            'DragQueryFileW',
                                                                                            'DragFinish',
                                                                                            'SHGetDesktopFolder',
                                                                                            'SHBrowseForFolderW',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '__getmainargs',
                                                                                            '_acmdln',
                                                                                            'exit',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            '_c_exit',
                                                                                            '_XcptFilter',
                                                                                            '_commode',
                                                                                            '__dllonexit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??1type_info@@UEAA@XZ',
                                                                                            '__C_specific_handler',
                                                                                            '_beginthreadex',
                                                                                            'wcscat',
                                                                                            '_wcsicmp',
                                                                                            '_purecall',
                                                                                            'strlen',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '_onexit',
                                                                                            'memcpy',
                                                                                            '__CxxFrameHandler',
                                                                                            'wcscmp',
                                                                                            'memmove',
                                                                                            'strcmp',
                                                                                            '_CxxThrowException',
                                                                                            'wcsstr',
                                                                                            'memcmp',
                                                                                            'wcslen',
                                                                                            'memset',
                                                                                            'rand',
                                                                                            'srand',
                                                                                            'free',
                                                                                            'malloc',
                                                                                            'Process32FirstW',
                                                                                            'CreateToolhelp32Snapshot',
                                                                                            'GlobalSize',
                                                                                            'GetSystemDefaultLangID',
                                                                                            'GetUserDefaultLangID',
                                                                                            'CopyFileW',
                                                                                            'GetCompressedFileSizeW',
                                                                                            'FindNextChangeNotification',
                                                                                            'GetCommandLineW',
                                                                                            'GetVersionExW',
                                                                                            'AreFileApisANSI',
                                                                                            'LeaveCriticalSection',
                                                                                            'EnterCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'FileTimeToLocalFileTime',
                                                                                            'WaitForMultipleObjects',
                                                                                            'CreateEventW',
                                                                                            'WaitForSingleObject',
                                                                                            'UnmapViewOfFile',
                                                                                            'MapViewOfFile',
                                                                                            'CreateFileMappingW',
                                                                                            'GetStdHandle',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'FileTimeToDosDateTime',
                                                                                            'GlobalMemoryStatusEx',
                                                                                            'lstrlenW',
                                                                                            'FileTimeToSystemTime',
                                                                                            'CompareFileTime',
                                                                                            'CreateProcessW',
                                                                                            'GetCurrentProcess',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'GetFileInformationByHandle',
                                                                                            'SetEndOfFile',
                                                                                            'Sleep',
                                                                                            'ReadFile',
                                                                                            'SetFilePointer',
                                                                                            'GetFileSize',
                                                                                            'DeviceIoControl',
                                                                                            'GetLogicalDriveStringsW',
                                                                                            'FindFirstChangeNotificationW',
                                                                                            'FindCloseChangeNotification',
                                                                                            'GetFileAttributesW',
                                                                                            'GetModuleHandleA',
                                                                                            'Process32NextW',
                                                                                            'FindFirstFileW',
                                                                                            'FindClose',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'SetLastError',
                                                                                            'GetTempPathW',
                                                                                            'GetCurrentDirectoryW',
                                                                                            'DeleteFileW',
                                                                                            'CreateDirectoryW',
                                                                                            'MoveFileW',
                                                                                            'RemoveDirectoryW',
                                                                                            'SetFileAttributesW',
                                                                                            'CreateFileW',
                                                                                            'SetFileTime',
                                                                                            'CloseHandle',
                                                                                            'GetWindowsDirectoryW',
                                                                                            'FormatMessageW',
                                                                                            'LocalFree',
                                                                                            'GetModuleFileNameW',
                                                                                            'LoadLibraryW',
                                                                                            'LoadLibraryExW',
                                                                                            'FreeLibrary',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'GetProcessHeap',
                                                                                            'HeapAlloc',
                                                                                            'HeapFree',
                                                                                            'GetModuleHandleW',
                                                                                            'GetProcAddress',
                                                                                            'GetDiskFreeSpaceW',
                                                                                            'GetDriveTypeW',
                                                                                            'GetVolumeInformationW',
                                                                                            'WideCharToMultiByte',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetLastError',
                                                                                            'GetTickCount',
                                                                                            'RtlCaptureContext',
                                                                                            'SetPriorityClass',
                                                                                            'ExpandEnvironmentStringsW',
                                                                                            'VirtualAlloc',
                                                                                            'VirtualFree',
                                                                                            'SetEvent',
                                                                                            'FindNextFileW',
                                                                                            'OpenProcess',
                                                                                            'InitializeCriticalSection',
                                                                                            'LoadLibraryA',
                                                                                            'GetStartupInfoA',
                                                                                            'QueryPerformanceCounter',
                                                                                            'TerminateProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'WriteFile'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 11,
                                                                      'NumberOfImportFunctions': 288,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 47856,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1536,
                                                                                       '.pdata\x00\x00': 51712,
                                                                                       '.rdata\x00\x00': 203264,
                                                                                       '.rsrc\x00\x00\x00': 48128,
                                                                                       '.text\x00\x00\x00': 532480},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fd9a1bc3cf5e6d2c75b6c8e1674f87d3c6704d3822af495d8104b757abea704c'},
 'fdb9fbd237662f095b5eccaac195803cadd16a3610c960a051ff4fee81339b1d': {'AddressOfEntryPoint': 12538,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 32768,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExA',
                                                                                      'COMCTL32.dll': 'ImageList_Create',
                                                                                      'GDI32.dll': 'SelectObject',
                                                                                      'KERNEL32.dll': 'GetTempPathA',
                                                                                      'SHELL32.dll': 'SHGetSpecialFolderLocation',
                                                                                      'USER32.dll': 'ShowWindow',
                                                                                      'VERSION.dll': 'VerQueryValueA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CompareFileTime',
                                                                                            'SearchPathA',
                                                                                            'GetShortPathNameA',
                                                                                            'GetFullPathNameA',
                                                                                            'MoveFileA',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'GetFileAttributesA',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'SetFileAttributesA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'GetCurrentProcess',
                                                                                            'CopyFileA',
                                                                                            'ExitProcess',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'SetFileTime',
                                                                                            'GetCommandLineA',
                                                                                            'SetErrorMode',
                                                                                            'LoadLibraryA',
                                                                                            'lstrcpynA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'CreateFileA',
                                                                                            'GetTempFileNameA',
                                                                                            'lstrlenA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetVersion',
                                                                                            'CloseHandle',
                                                                                            'lstrcmpiA',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'GlobalFree',
                                                                                            'GlobalAlloc',
                                                                                            'WaitForSingleObject',
                                                                                            'GetExitCodeProcess',
                                                                                            'GetModuleHandleA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetProcAddress',
                                                                                            'FreeLibrary',
                                                                                            'MultiByteToWideChar',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'WriteFile',
                                                                                            'ReadFile',
                                                                                            'MulDiv',
                                                                                            'SetFilePointer',
                                                                                            'FindClose',
                                                                                            'FindNextFileA',
                                                                                            'FindFirstFileA',
                                                                                            'DeleteFileA',
                                                                                            'GetTempPathA',
                                                                                            'EndDialog',
                                                                                            'ScreenToClient',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'RegisterClassA',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'DestroyWindow',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'SetWindowTextA',
                                                                                            'PostQuitMessage',
                                                                                            'SetForegroundWindow',
                                                                                            'wsprintfA',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'OpenClipboard',
                                                                                            'ExitWindowsEx',
                                                                                            'IsWindow',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'LoadImageA',
                                                                                            'GetDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndPaint',
                                                                                            'ShowWindow',
                                                                                            'SetBkColor',
                                                                                            'GetDeviceCaps',
                                                                                            'DeleteObject',
                                                                                            'CreateBrushIndirect',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetBkMode',
                                                                                            'SetTextColor',
                                                                                            'SelectObject',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'RegQueryValueExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'RegEnumValueA',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegDeleteKeyA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'ImageList_Create',
                                                                                            'CoTaskMemFree',
                                                                                            'OleInitialize',
                                                                                            'OleUninitialize',
                                                                                            'CoCreateInstance',
                                                                                            'GetFileVersionInfoSizeA',
                                                                                            'GetFileVersionInfoA',
                                                                                            'VerQueryValueA'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 8,
                                                                      'NumberOfImportFunctions': 154,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 296296,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 296448,
                                                                                       '.text\x00\x00\x00': 24064},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fdb9fbd237662f095b5eccaac195803cadd16a3610c960a051ff4fee81339b1d'},
 'fdfc28e2700cd6eae2aabc5d171d4a6a0da341d9f6172c4bdfa80176a79b1d6a': {'AddressOfEntryPoint': 94144,
                                                                      'DebugRVA': 120688,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 167424,
                                                                      'ExportSize': 78,
                                                                      'IATRVA': 118784,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'KERNEL32.dll': 'GetCurrentThread',
                                                                                      'MSVCP100.dll': '?_Xout_of_range@std@@YAXPEBD@Z',
                                                                                      'MSVCR100.dll': '_CxxThrowException',
                                                                                      'OLEAUT32.dll': 'SysAllocStringByteLen',
                                                                                      'USER32.dll': 'MsgWaitForMultipleObjects',
                                                                                      'VBoxRT.dll': 'RTCritSectInitEx',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['_initterm_e',
                                                                                            '_configthreadlocale',
                                                                                            '__setusermatherr',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '__set_app_type',
                                                                                            '?_type_info_dtor_internal_method@type_info@@QEAAXXZ',
                                                                                            '__crt_debugger_hook',
                                                                                            '_initterm',
                                                                                            '_acmdln',
                                                                                            '_cexit',
                                                                                            '??0exception@std@@QEAA@AEBQEBDH@Z',
                                                                                            '_recalloc',
                                                                                            'memmove_s',
                                                                                            '_ismbblead',
                                                                                            '_exit',
                                                                                            '_XcptFilter',
                                                                                            '__getmainargs',
                                                                                            '_amsg_exit',
                                                                                            '_onexit',
                                                                                            '_lock',
                                                                                            '__dllonexit',
                                                                                            '_unlock',
                                                                                            '__C_specific_handler',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '??0exception@std@@QEAA@AEBQEBD@Z',
                                                                                            '?what@exception@std@@UEBAPEBDXZ',
                                                                                            '??3@YAXPEAX@Z',
                                                                                            '??1exception@std@@UEAA@XZ',
                                                                                            '__CxxFrameHandler3',
                                                                                            'memcpy',
                                                                                            'memmove',
                                                                                            '_purecall',
                                                                                            'exit',
                                                                                            '??2@YAPEAX_K@Z',
                                                                                            '??_U@YAPEAX_K@Z',
                                                                                            'free',
                                                                                            'strncpy',
                                                                                            'memset',
                                                                                            'memcmp',
                                                                                            '__argv',
                                                                                            '__argc',
                                                                                            '??_V@YAXPEAX@Z',
                                                                                            '??0exception@std@@QEAA@AEBV01@@Z',
                                                                                            '_CxxThrowException',
                                                                                            '?_Xlength_error@std@@YAXPEBD@Z',
                                                                                            '?_Xout_of_range@std@@YAXPEBD@Z',
                                                                                            'PostThreadMessageW',
                                                                                            'PeekMessageW',
                                                                                            'DefWindowProcW',
                                                                                            'PostQuitMessage',
                                                                                            'UnregisterClassW',
                                                                                            'DestroyWindow',
                                                                                            'DispatchMessageW',
                                                                                            'TranslateMessage',
                                                                                            'GetMessageW',
                                                                                            'SetWindowPos',
                                                                                            'CreateWindowExW',
                                                                                            'RegisterClassW',
                                                                                            'MsgWaitForMultipleObjects',
                                                                                            'CoCreateFreeThreadedMarshaler',
                                                                                            'CoCreateInstance',
                                                                                            'CoInitializeEx',
                                                                                            'CoUninitialize',
                                                                                            'LoadTypeLib',
                                                                                            'LoadRegTypeLib',
                                                                                            'SysStringLen',
                                                                                            'SafeArrayRedim',
                                                                                            'SafeArrayAccessData',
                                                                                            'SafeArrayUnaccessData',
                                                                                            'SafeArrayCreate',
                                                                                            'SysFreeString',
                                                                                            'SafeArrayDestroy',
                                                                                            'SysAllocStringByteLen',
                                                                                            '?forAllNodes@NodesLoop@xml@@QEBAPEBVElementNode@2@XZ',
                                                                                            '??0NodesLoop@xml@@QEAA@AEBVElementNode@1@PEBD@Z',
                                                                                            '?nameEqualsNS@Node@xml@@QEBA_NPEBD0@Z',
                                                                                            '?getRootElement@Document@xml@@QEAAPEAVElementNode@2@XZ',
                                                                                            '?read@XmlFileParser@xml@@QEAAXAEBVRTCString@@AEAVDocument@2@@Z',
                                                                                            '??0RTCString@@QEAA@PEBD@Z',
                                                                                            '??0XmlFileParser@xml@@QEAA@XZ',
                                                                                            'SUPR3CallVMMR0Ex',
                                                                                            'RTNetUDPChecksum',
                                                                                            'RTNetIPv4FinalizeChecksum',
                                                                                            'RTNetTCPChecksum',
                                                                                            'RTNetIPv6PseudoChecksumEx',
                                                                                            'RTNetIPv4PseudoChecksum',
                                                                                            'RTNetIPv4HdrChecksum',
                                                                                            'RTNetIPv4IsUDPSizeValid',
                                                                                            'RTNetIPv4IsUDPValid',
                                                                                            'RTNetIPv4IsHdrValid',
                                                                                            'RTNetIPv4UDPChecksum',
                                                                                            'RTRandU32',
                                                                                            'RTCritSectEnter',
                                                                                            'RTCritSectLeave',
                                                                                            'RTLogLoggerEx',
                                                                                            'RTLogRelDefaultInstance',
                                                                                            'RTProcShortName',
                                                                                            'RTThreadCreate',
                                                                                            'RTMemAllocTag',
                                                                                            'SUPR3LoadVMM',
                                                                                            'RTPathExecDir',
                                                                                            'SUPR3Init',
                                                                                            'RTCritSectInit',
                                                                                            'RTCritSectDelete',
                                                                                            '??1NodesLoop@xml@@QEAA@XZ',
                                                                                            'RTBldCfgVersion',
                                                                                            'RTBldCfgRevision',
                                                                                            'RTMemFree',
                                                                                            'RTGetOpt',
                                                                                            'RTGetOptInit',
                                                                                            'RTStrToUInt32',
                                                                                            'RTStrStr',
                                                                                            '?createChild@ElementNode@xml@@QEAAPEAV12@PEBD@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBD_K@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBDI@Z',
                                                                                            'RTTimeMilliTS',
                                                                                            '??4RTCString@@QEAAAEAV0@AEBV0@@Z',
                                                                                            'RTR3InitExe',
                                                                                            'RTMsgInitFailure',
                                                                                            'RTGetOptPrintError',
                                                                                            'RTPrintf',
                                                                                            'RTStrPrintf',
                                                                                            '??0RTCString@@QEAA@XZ',
                                                                                            '??_7RTCString@@6B@',
                                                                                            '?cleanup@RTCString@@IEAAXXZ',
                                                                                            '?c_str@RTCString@@QEBAPEBDXZ',
                                                                                            'RTNetStrToIPv4Addr',
                                                                                            'g_pStdErr',
                                                                                            'RTStrmPrintf',
                                                                                            'RTNetIPv4IsDHCPValid',
                                                                                            '?printfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z',
                                                                                            '??1RTCString@@UEAA@XZ',
                                                                                            'RTCritSectRwEnterShared',
                                                                                            'RTCritSectRwLeaveShared',
                                                                                            'RTCritSectRwGetWriteRecursion',
                                                                                            '??1XmlFileParser@xml@@QEAA@XZ',
                                                                                            '??0Document@xml@@QEAA@XZ',
                                                                                            '?createRootElement@Document@xml@@QEAAPEAVElementNode@2@PEBD0@Z',
                                                                                            '??1Document@xml@@QEAA@XZ',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBD0@Z',
                                                                                            '??0XmlFileWriter@xml@@QEAA@AEAVDocument@1@@Z',
                                                                                            '?write@XmlFileWriter@xml@@QEAAXPEBD_N@Z',
                                                                                            '??1XmlFileWriter@xml@@QEAA@XZ',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAVRTCString@@0@Z',
                                                                                            'RTNetStrToMacAddr',
                                                                                            '?findChildElementNS@ElementNode@xml@@QEBAPEBV12@PEBD0@Z',
                                                                                            '?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBDAEBVRTCString@@@Z',
                                                                                            'SUPR3Term',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAI0@Z',
                                                                                            'RTCritSectRwLeaveExcl',
                                                                                            'RTCritSectRwEnterExcl',
                                                                                            '?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEA_K0@Z',
                                                                                            'RTStrToUtf16ExTag',
                                                                                            'RTStrNLen',
                                                                                            'RTStrCalcUtf16LenEx',
                                                                                            '?jolt@RTCString@@QEAAXXZ',
                                                                                            'RTPathStripTrailingSlash',
                                                                                            'RTPathStripFilename',
                                                                                            'RTStrFree',
                                                                                            'RTPathFilename',
                                                                                            'RTPathStripExt',
                                                                                            'RTUtf16Len',
                                                                                            'RTUtf16ToUtf8ExTag',
                                                                                            'RTStrAllocTag',
                                                                                            'RTThreadSelf',
                                                                                            'RTErrConvertFromWin32',
                                                                                            'RTThreadNativeSelf',
                                                                                            'RTCritSectRwInitEx',
                                                                                            'RTCritSectRwDelete',
                                                                                            'RTCritSectRwIsWriteOwner',
                                                                                            'RTCritSectInitEx',
                                                                                            'GetModuleHandleW',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'DeleteCriticalSection',
                                                                                            'lstrlenW',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'GetModuleFileNameW',
                                                                                            'EncodePointer',
                                                                                            'DecodePointer',
                                                                                            'Sleep',
                                                                                            'GetStartupInfoW',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'IsDebuggerPresent',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlCaptureContext',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetTickCount',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'RaiseException',
                                                                                            'GetLastError',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'DuplicateHandle',
                                                                                            'GetCurrentThread'],
                                                                      'LinkerVersion': 10,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 202,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 0,
                                                                      'SectionNames': {'.data\x00\x00\x00': 3584,
                                                                                       '.pdata\x00\x00': 9216,
                                                                                       '.rdata\x00\x00': 49152,
                                                                                       '.reloc\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 112640},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fdfc28e2700cd6eae2aabc5d171d4a6a0da341d9f6172c4bdfa80176a79b1d6a'},
 'fea559ea217255e913ec5587834e8d23235590b7fd70a92579c256fde068591f': {'AddressOfEntryPoint': 10036,
                                                                      'DebugRVA': 4160,
                                                                      'DebugSize': 28,
                                                                      'Dll': 33120,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 5368709120,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegCreateKeyExW',
                                                                                      'KERNEL32.dll': 'HeapAlloc',
                                                                                      'USER32.dll': 'LoadStringW',
                                                                                      'msvcrt.dll': '__wgetmainargs',
                                                                                      'ntdll.dll': 'RtlCaptureContext'},
                                                                      'ImportedFunctions': ['SetThreadPreferredUILanguages',
                                                                                            'GetLastError',
                                                                                            'CloseHandle',
                                                                                            'CreateThread',
                                                                                            'GetStdHandle',
                                                                                            'LocalFree',
                                                                                            'GetFileType',
                                                                                            'LocalAlloc',
                                                                                            'WriteConsoleW',
                                                                                            'GetProcessHeap',
                                                                                            'WideCharToMultiByte',
                                                                                            'WriteFile',
                                                                                            'TerminateProcess',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            'GetModuleHandleW',
                                                                                            'WaitForSingleObject',
                                                                                            'HeapFree',
                                                                                            'GetVersionExW',
                                                                                            'HeapAlloc',
                                                                                            '__C_specific_handler',
                                                                                            '_wcsicmp',
                                                                                            '_XcptFilter',
                                                                                            '_amsg_exit',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_commode',
                                                                                            '_fmode',
                                                                                            '_initterm',
                                                                                            '__setusermatherr',
                                                                                            '_cexit',
                                                                                            '_exit',
                                                                                            'exit',
                                                                                            '__set_app_type',
                                                                                            '__wgetmainargs',
                                                                                            'RtlLookupFunctionEntry',
                                                                                            'RtlVirtualUnwind',
                                                                                            'RtlCaptureContext',
                                                                                            'RegConnectRegistryW',
                                                                                            'RegSetValueExW',
                                                                                            'RegGetValueW',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExW',
                                                                                            'LoadStringW'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 5,
                                                                      'NumberOfImportFunctions': 50,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 1416,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.pdata\x00\x00': 512,
                                                                                       '.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 8192},
                                                                      'StackReserveSize': 524288,
                                                                      'filename': './data/clean/fea559ea217255e913ec5587834e8d23235590b7fd70a92579c256fde068591f'},
 'fecc1365cc1a49cc521cb2d849a71fb10bea2cca3d45cbb7cd81e0b2aacf6620': {'AddressOfEntryPoint': 45470,
                                                                      'DebugRVA': 45240,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 2072,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 37376},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/fecc1365cc1a49cc521cb2d849a71fb10bea2cca3d45cbb7cd81e0b2aacf6620'},
 'ff2f0e766fa89869acefe61ea18954f1b02060826215b6331548ae481862c145': {'AddressOfEntryPoint': 351390,
                                                                      'DebugRVA': 351180,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 8,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 68896,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 69120,
                                                                                       '.text\x00\x00\x00': 343552},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ff2f0e766fa89869acefe61ea18954f1b02060826215b6331548ae481862c145'},
 'ff6b47ee6165f4e10d450c96c1875d932b8e7fe788d0f53e615f2f25558db06b': {'AddressOfEntryPoint': 28667,
                                                                      'DebugRVA': 139200,
                                                                      'DebugSize': 84,
                                                                      'Dll': 33088,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 114688,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'SystemFunction036',
                                                                                      'KERNEL32.dll': 'UnhandledExceptionFilter'},
                                                                      'ImportedFunctions': ['GetCurrentProcess',
                                                                                            'TerminateProcess',
                                                                                            'IsProcessorFeaturePresent',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetCurrentProcessId',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'InitializeSListHead',
                                                                                            'IsDebuggerPresent',
                                                                                            'GetStartupInfoW',
                                                                                            'GetModuleHandleW',
                                                                                            'GetLastError',
                                                                                            'GetModuleFileNameW',
                                                                                            'InitializeCriticalSectionAndSpinCount',
                                                                                            'TlsAlloc',
                                                                                            'TlsGetValue',
                                                                                            'TlsSetValue',
                                                                                            'TlsFree',
                                                                                            'FreeLibrary',
                                                                                            'GetProcAddress',
                                                                                            'LoadLibraryExW',
                                                                                            'RtlUnwind',
                                                                                            'SetLastError',
                                                                                            'EnterCriticalSection',
                                                                                            'LeaveCriticalSection',
                                                                                            'DeleteCriticalSection',
                                                                                            'ExitProcess',
                                                                                            'GetModuleHandleExW',
                                                                                            'ReadFile',
                                                                                            'GetStdHandle',
                                                                                            'WriteFile',
                                                                                            'GetModuleFileNameA',
                                                                                            'MultiByteToWideChar',
                                                                                            'WideCharToMultiByte',
                                                                                            'GetCommandLineA',
                                                                                            'GetCommandLineW',
                                                                                            'GetACP',
                                                                                            'HeapFree',
                                                                                            'HeapAlloc',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'CompareStringW',
                                                                                            'LCMapStringW',
                                                                                            'GetFileType',
                                                                                            'HeapReAlloc',
                                                                                            'SetFilePointerEx',
                                                                                            'GetConsoleMode',
                                                                                            'ReadConsoleW',
                                                                                            'CloseHandle',
                                                                                            'SetStdHandle',
                                                                                            'GetConsoleCP',
                                                                                            'GetStringTypeW',
                                                                                            'FindClose',
                                                                                            'FindFirstFileExA',
                                                                                            'FindNextFileA',
                                                                                            'IsValidCodePage',
                                                                                            'GetOEMCP',
                                                                                            'GetCPInfo',
                                                                                            'GetEnvironmentStringsW',
                                                                                            'FreeEnvironmentStringsW',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetProcessHeap',
                                                                                            'FlushFileBuffers',
                                                                                            'CreateFileW',
                                                                                            'WriteConsoleW',
                                                                                            'HeapSize',
                                                                                            'SetEndOfFile',
                                                                                            'DecodePointer',
                                                                                            'RaiseException',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'SystemFunction036'],
                                                                      'LinkerVersion': 14,
                                                                      'NumberOfImportDLL': 2,
                                                                      'NumberOfImportFunctions': 70,
                                                                      'NumberOfSections': 6,
                                                                      'OSVersion': 5,
                                                                      'ResSize': 1336,
                                                                      'SectionNames': {'.data\x00\x00\x00': 2560,
                                                                                       '.gfids\x00\x00': 512,
                                                                                       '.rdata\x00\x00': 34304,
                                                                                       '.reloc\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 1536,
                                                                                       '.text\x00\x00\x00': 108032},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ff6b47ee6165f4e10d450c96c1875d932b8e7fe788d0f53e615f2f25558db06b'},
 'ff72358729e4240cb7c6be361505eb788dbf825df545f056038157c8bf0d99b5': {'AddressOfEntryPoint': 12991,
                                                                      'DebugRVA': 0,
                                                                      'DebugSize': 0,
                                                                      'Dll': 34112,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 28672,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'RegEnumKeyA',
                                                                                      'COMCTL32.dll': 'ImageList_Destroy',
                                                                                      'GDI32.dll': 'SetBkColor',
                                                                                      'KERNEL32.dll': 'GlobalAlloc',
                                                                                      'SHELL32.dll': 'SHFileOperationA',
                                                                                      'USER32.dll': 'SetWindowTextA',
                                                                                      'ole32.dll': 'CoCreateInstance'},
                                                                      'ImportedFunctions': ['CopyFileA',
                                                                                            'Sleep',
                                                                                            'GetTickCount',
                                                                                            'CreateFileA',
                                                                                            'GetFileSize',
                                                                                            'GetModuleFileNameA',
                                                                                            'ReadFile',
                                                                                            'GetFileAttributesA',
                                                                                            'SetFileAttributesA',
                                                                                            'ExitProcess',
                                                                                            'SetEnvironmentVariableA',
                                                                                            'GetWindowsDirectoryA',
                                                                                            'GetTempPathA',
                                                                                            'GetCommandLineA',
                                                                                            'lstrlenA',
                                                                                            'GetVersion',
                                                                                            'GetCurrentProcess',
                                                                                            'GetFullPathNameA',
                                                                                            'GetDiskFreeSpaceA',
                                                                                            'GlobalUnlock',
                                                                                            'GlobalLock',
                                                                                            'CreateThread',
                                                                                            'GetLastError',
                                                                                            'CreateDirectoryA',
                                                                                            'CreateProcessA',
                                                                                            'RemoveDirectoryA',
                                                                                            'GetTempFileNameA',
                                                                                            'WriteFile',
                                                                                            'lstrcpyA',
                                                                                            'MoveFileExA',
                                                                                            'lstrcatA',
                                                                                            'GetSystemDirectoryA',
                                                                                            'GetProcAddress',
                                                                                            'CloseHandle',
                                                                                            'SetCurrentDirectoryA',
                                                                                            'MoveFileA',
                                                                                            'CompareFileTime',
                                                                                            'GetShortPathNameA',
                                                                                            'SearchPathA',
                                                                                            'lstrcmpiA',
                                                                                            'SetFileTime',
                                                                                            'lstrcmpA',
                                                                                            'ExpandEnvironmentStringsA',
                                                                                            'lstrcpynA',
                                                                                            'SetErrorMode',
                                                                                            'GlobalFree',
                                                                                            'FindFirstFileA',
                                                                                            'FindNextFileA',
                                                                                            'DeleteFileA',
                                                                                            'SetFilePointer',
                                                                                            'GetPrivateProfileStringA',
                                                                                            'FindClose',
                                                                                            'MultiByteToWideChar',
                                                                                            'FreeLibrary',
                                                                                            'MulDiv',
                                                                                            'WritePrivateProfileStringA',
                                                                                            'LoadLibraryExA',
                                                                                            'GetModuleHandleA',
                                                                                            'GetExitCodeProcess',
                                                                                            'WaitForSingleObject',
                                                                                            'GlobalAlloc',
                                                                                            'ScreenToClient',
                                                                                            'GetSystemMenu',
                                                                                            'SetClassLongA',
                                                                                            'IsWindowEnabled',
                                                                                            'SetWindowPos',
                                                                                            'GetSysColor',
                                                                                            'GetWindowLongA',
                                                                                            'SetCursor',
                                                                                            'LoadCursorA',
                                                                                            'CheckDlgButton',
                                                                                            'GetMessagePos',
                                                                                            'LoadBitmapA',
                                                                                            'CallWindowProcA',
                                                                                            'IsWindowVisible',
                                                                                            'CloseClipboard',
                                                                                            'SetClipboardData',
                                                                                            'EmptyClipboard',
                                                                                            'PostQuitMessage',
                                                                                            'GetWindowRect',
                                                                                            'EnableMenuItem',
                                                                                            'CreatePopupMenu',
                                                                                            'GetSystemMetrics',
                                                                                            'SetDlgItemTextA',
                                                                                            'GetDlgItemTextA',
                                                                                            'MessageBoxIndirectA',
                                                                                            'CharPrevA',
                                                                                            'DispatchMessageA',
                                                                                            'PeekMessageA',
                                                                                            'ReleaseDC',
                                                                                            'EnableWindow',
                                                                                            'InvalidateRect',
                                                                                            'SendMessageA',
                                                                                            'DefWindowProcA',
                                                                                            'BeginPaint',
                                                                                            'GetClientRect',
                                                                                            'FillRect',
                                                                                            'DrawTextA',
                                                                                            'EndDialog',
                                                                                            'RegisterClassA',
                                                                                            'SystemParametersInfoA',
                                                                                            'CreateWindowExA',
                                                                                            'GetClassInfoA',
                                                                                            'DialogBoxParamA',
                                                                                            'CharNextA',
                                                                                            'ExitWindowsEx',
                                                                                            'GetDC',
                                                                                            'CreateDialogParamA',
                                                                                            'SetTimer',
                                                                                            'GetDlgItem',
                                                                                            'SetWindowLongA',
                                                                                            'SetForegroundWindow',
                                                                                            'LoadImageA',
                                                                                            'IsWindow',
                                                                                            'SendMessageTimeoutA',
                                                                                            'FindWindowExA',
                                                                                            'OpenClipboard',
                                                                                            'TrackPopupMenu',
                                                                                            'AppendMenuA',
                                                                                            'EndPaint',
                                                                                            'DestroyWindow',
                                                                                            'wsprintfA',
                                                                                            'ShowWindow',
                                                                                            'SetWindowTextA',
                                                                                            'SelectObject',
                                                                                            'SetBkMode',
                                                                                            'CreateFontIndirectA',
                                                                                            'SetTextColor',
                                                                                            'DeleteObject',
                                                                                            'GetDeviceCaps',
                                                                                            'CreateBrushIndirect',
                                                                                            'SetBkColor',
                                                                                            'SHGetSpecialFolderLocation',
                                                                                            'SHGetPathFromIDListA',
                                                                                            'SHBrowseForFolderA',
                                                                                            'SHGetFileInfoA',
                                                                                            'ShellExecuteA',
                                                                                            'SHFileOperationA',
                                                                                            'RegDeleteKeyA',
                                                                                            'SetFileSecurityA',
                                                                                            'OpenProcessToken',
                                                                                            'LookupPrivilegeValueA',
                                                                                            'AdjustTokenPrivileges',
                                                                                            'RegOpenKeyExA',
                                                                                            'RegEnumValueA',
                                                                                            'RegDeleteValueA',
                                                                                            'RegCloseKey',
                                                                                            'RegCreateKeyExA',
                                                                                            'RegSetValueExA',
                                                                                            'RegQueryValueExA',
                                                                                            'RegEnumKeyA',
                                                                                            'ImageList_Create',
                                                                                            'ImageList_AddMasked',
                                                                                            'ImageList_Destroy',
                                                                                            'OleUninitialize',
                                                                                            'OleInitialize',
                                                                                            'CoTaskMemFree',
                                                                                            'CoCreateInstance'],
                                                                      'LinkerVersion': 6,
                                                                      'NumberOfImportDLL': 7,
                                                                      'NumberOfImportFunctions': 158,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 30808,
                                                                      'SectionNames': {'.data\x00\x00\x00': 1024,
                                                                                       '.ndata\x00\x00': 0,
                                                                                       '.rdata\x00\x00': 5120,
                                                                                       '.rsrc\x00\x00\x00': 31232,
                                                                                       '.text\x00\x00\x00': 24576},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ff72358729e4240cb7c6be361505eb788dbf825df545f056038157c8bf0d99b5'},
 'ffb509f4a4e6619fb4535de95a41e7bdf08ac919ac564378e14411440ed9c6a9': {'AddressOfEntryPoint': 296382,
                                                                      'DebugRVA': 295984,
                                                                      'DebugSize': 28,
                                                                      'Dll': 34144,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 8192,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 0,
                                                                      'ImportedDLL': {'mscoree.dll': '_CorExeMain'},
                                                                      'ImportedFunctions': ['_CorExeMain'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 1,
                                                                      'NumberOfImportFunctions': 1,
                                                                      'NumberOfSections': 3,
                                                                      'OSVersion': 4,
                                                                      'ResSize': 43104,
                                                                      'SectionNames': {'.reloc\x00\x00': 512,
                                                                                       '.rsrc\x00\x00\x00': 43520,
                                                                                       '.text\x00\x00\x00': 288256},
                                                                      'StackReserveSize': 1048576,
                                                                      'filename': './data/clean/ffb509f4a4e6619fb4535de95a41e7bdf08ac919ac564378e14411440ed9c6a9'},
 'ffccf98379c579bc6da94188e51af360402c0fb5d0c6da72a5a12b70517e47ab': {'AddressOfEntryPoint': 11104,
                                                                      'DebugRVA': 4176,
                                                                      'DebugSize': 28,
                                                                      'Dll': 49472,
                                                                      'ExportRVA': 0,
                                                                      'ExportSize': 0,
                                                                      'IATRVA': 20480,
                                                                      'ImageBase': 4194304,
                                                                      'ImageVersion': 6,
                                                                      'ImportedDLL': {'ADVAPI32.dll': 'CloseServiceHandle',
                                                                                      'KERNEL32.dll': 'Sleep',
                                                                                      'msvcrt.dll': 'memcpy',
                                                                                      'ole32.dll': 'CoUninitialize'},
                                                                      'ImportedFunctions': ['OpenSCManagerW',
                                                                                            'OpenServiceW',
                                                                                            'RegQueryValueExW',
                                                                                            'RegOpenKeyExW',
                                                                                            'RegCloseKey',
                                                                                            'RegSetValueExW',
                                                                                            'CloseServiceHandle',
                                                                                            'FreeLibrary',
                                                                                            'GetSystemWindowsDirectoryW',
                                                                                            'SetThreadUILanguage',
                                                                                            'LoadLibraryW',
                                                                                            'FormatMessageW',
                                                                                            'GetModuleFileNameW',
                                                                                            'MultiByteToWideChar',
                                                                                            'GetConsoleOutputCP',
                                                                                            'GetLastError',
                                                                                            'GetProcAddress',
                                                                                            'LocalAlloc',
                                                                                            'CompareStringA',
                                                                                            'LocalFree',
                                                                                            'GetCurrentProcess',
                                                                                            'UnhandledExceptionFilter',
                                                                                            'GetTickCount',
                                                                                            'GetSystemTimeAsFileTime',
                                                                                            'GetCurrentThreadId',
                                                                                            'GetCurrentProcessId',
                                                                                            'QueryPerformanceCounter',
                                                                                            'GetModuleHandleA',
                                                                                            'TerminateProcess',
                                                                                            'SetUnhandledExceptionFilter',
                                                                                            'Sleep',
                                                                                            '_amsg_exit',
                                                                                            '__getmainargs',
                                                                                            '__set_app_type',
                                                                                            'exit',
                                                                                            '_exit',
                                                                                            '_cexit',
                                                                                            '__p__fmode',
                                                                                            '__setusermatherr',
                                                                                            '_initterm',
                                                                                            '?terminate@@YAXXZ',
                                                                                            '_controlfp',
                                                                                            '_except_handler4_common',
                                                                                            '__p__commode',
                                                                                            '_XcptFilter',
                                                                                            '_wsetlocale',
                                                                                            '??3@YAXPAX@Z',
                                                                                            'isdigit',
                                                                                            'wprintf',
                                                                                            'atoi',
                                                                                            '_strnicmp',
                                                                                            'swprintf_s',
                                                                                            'wcschr',
                                                                                            '??2@YAPAXI@Z',
                                                                                            'memcpy',
                                                                                            'CoInitializeEx',
                                                                                            'CoCreateInstanceEx',
                                                                                            'CoUninitialize'],
                                                                      'LinkerVersion': 11,
                                                                      'NumberOfImportDLL': 4,
                                                                      'NumberOfImportFunctions': 58,
                                                                      'NumberOfSections': 5,
                                                                      'OSVersion': 6,
                                                                      'ResSize': 2064,
                                                                      'SectionNames': {'.data\x00\x00\x00': 512,
                                                                                       '.idata\x00\x00': 2048,
                                                                                       '.reloc\x00\x00': 1024,
                                                                                       '.rsrc\x00\x00\x00': 2560,
                                                                                       '.text\x00\x00\x00': 8704},
                                                                      'StackReserveSize': 262144,
                                                                      'filename': './data/clean/ffccf98379c579bc6da94188e51af360402c0fb5d0c6da72a5a12b70517e47ab'}}

[*] Completed Clean PE information extraction:

Loop trough all samples in a folder and process each one of them then dump all those dictionaries into a csv file that we will use .

In [9]:
# now that we have a dictionary let's put it in a clean csv file
def vec2csv(dataset, output_file):
    df = pd.DataFrame(dataset)
    test_data = df.transpose()  # transpose to have the features as columns and samples as rows
# utf-8 is prefered 
#output_file = './output/dataset.csv'
    test_data.to_csv(output_file,sep=',', encoding='utf-8')
    print("")
    print("[+] Saving file to: " + output_file)
    print("")
        
        

Export the dataset as a csv file

In [10]:
datasetOutput_malware = "./output/dataset_malware.csv"
vec2csv(ds_malware, datasetOutput_malware)

datasetOutput_clean = "./output/dataset_clean.csv"
vec2csv(ds_clean, datasetOutput_clean)
[+] Saving file to: ./output/dataset_malware.csv


[+] Saving file to: ./output/dataset_clean.csv

Use Magic %matplotlib to display graphics inline instead of in a popup window.

In [11]:
%matplotlib inline

Malware Dataframe

In [12]:
# get the dataframe
df_malware = pd.read_csv("./output/dataset_malware.csv")
df_malware.shape
df_malware.head(5)
Out[12]:
Unnamed: 0 AddressOfEntryPoint DebugRVA DebugSize Dll ExportRVA ExportSize IATRVA ImageBase ImageVersion ... ImportedFunctions LinkerVersion NumberOfImportDLL NumberOfImportFunctions NumberOfSections OSVersion ResSize SectionNames StackReserveSize filename
0 0004cec68fdb95507c6161d84e4965db60f997a679ce20... 1073962461 0 0 32768 0 0 155648 4194304 0 ... ['GetPrivateProfileSectionW', 'CopyFileW', 'Se... 8 14 253 5 4 10856 {'.text\x00\x00\x00': 148992, '.rdata\x00\x00'... 1048576 ./data/malware/0004cec68fdb95507c6161d84e4965d...
1 0024eec62931670946abd4240d38127e23b4c0c9321de4... 37296 24720 28 0 0 0 24576 65536 6 ... ['StorPortPauseDevice', 'StorPortGetDeviceBase... 9 2 16 7 6 1536 {'.text\x00\x00\x00': 18432, '.rdata\x00\x00':... 262144 ./data/malware/0024eec62931670946abd4240d38127...
2 00a02d154e7389d3a5fe572e9800f1628e74b8aabe4270... 1073916548 0 0 32768 0 0 114688 5368709120 0 ... ['LoadBITMAP', 'LoadSTRINGW', 'LoadICON', 'Loa... 9 9 179 5 5 2552 {'.text\x00\x00\x00': 107520, '.rdata\x00\x00'... 1048576 ./data/malware/00a02d154e7389d3a5fe572e9800f16...
3 00aac566d9664b844e5d7ae641c58131ce59deced31223... 51656 5424 28 32832 0 0 4096 4294967296 6 ... ['OpenProcessToken', 'GetTokenInformation', 'R... 9 7 151 5 6 149376 {'.text\x00\x00\x00': 55296, '.data\x00\x00\x0... 524288 ./data/malware/00aac566d9664b844e5d7ae641c5813...
4 00cb557ec3c36d07f27e264dd6bffb6c858a3d9568878d... 39104 9360 28 32768 0 0 8192 4294967296 5 ... [] 8 0 0 4 5 3492 {'.text\x00\x00\x00': 57344, '.data\x00\x00\x0... 524288 ./data/malware/00cb557ec3c36d07f27e264dd6bffb6...

5 rows × 21 columns

In [13]:
# histograms
df_malware['NumberOfImportFunctions'].hist()
plt.title(r'Histogram of the Number of Imported Functions')
plt.xlabel('NumberOfImportFunctions')
plt.ylabel('Executables')
plt.show()
df_malware['NumberOfSections'].hist()
plt.title(r'Histogram of the Number of Sections')
plt.xlabel('NumberOfSections')
plt.ylabel('Executables')
plt.show()

Clean Dataframe

In [14]:
df_clean = pd.read_csv("./output/dataset_clean.csv")
df_clean.shape
df_clean.head(5)
Out[14]:
Unnamed: 0 AddressOfEntryPoint DebugRVA DebugSize Dll ExportRVA ExportSize IATRVA ImageBase ImageVersion ... ImportedFunctions LinkerVersion NumberOfImportDLL NumberOfImportFunctions NumberOfSections OSVersion ResSize SectionNames StackReserveSize filename
0 00070b0d4cb037c40d5d2464f92841aeb9ad863472bf95... 21704 4880 28 0 0 0 4096 4194304 1 ... ['__vbaVarTstGt', '__vbaVarSub', '__vbaStrI2',... 6 1 139 3 4 2184 {'.text\x00\x00\x00': 1179648, '.data\x00\x00\... 1048576 ./data/clean/00070b0d4cb037c40d5d2464f92841aeb...
1 00696555cbf6db83af785f8acb2270b9411cfc75e7f6d3... 29424 4256 28 49472 32576 163 36864 4194304 6 ... ['_except_handler4_common', '_controlfp', '?te... 11 21 114 6 6 2008 {'.text\x00\x00\x00': 28672, '.data\x00\x00\x0... 262144 ./data/clean/00696555cbf6db83af785f8acb2270b94...
2 007247436f041ca59c5ee0e8636c668c2a43376aeb8cfa... 227872 82400 84 49472 0 0 3522560 4194304 10 ... ['CryptAcquireContextW', 'CryptCreateHash', 'C... 12 8 157 5 6 1892 {'.text\x00\x00\x00': 246272, '.data\x00\x00\x... 4194304 ./data/clean/007247436f041ca59c5ee0e8636c668c2...
3 007bdab757d03d94e60c9b1e3eec13b07562705c514992... 10656 4320 28 49472 0 0 20480 4194304 6 ... ['??3@YAXPAX@Z', '_controlfp', '?terminate@@YA... 11 12 46 5 6 15632 {'.text\x00\x00\x00': 8704, '.data\x00\x00\x00... 262144 ./data/clean/007bdab757d03d94e60c9b1e3eec13b07...
4 008fa2b9697f9a173e40572face100410e51975e34a5ce... 152696 4224 28 33120 0 0 200704 5368709120 6 ... ['GetFileType', 'GetExitCodeProcess', 'CreateP... 11 7 144 6 6 28384 {'.text\x00\x00\x00': 181248, '.data\x00\x00\x... 524288 ./data/clean/008fa2b9697f9a173e40572face100410...

5 rows × 21 columns

In [15]:
# histograms
df_clean['NumberOfImportFunctions'].hist()
plt.title(r'Histogram of the Number of Imported Functions')
plt.xlabel('NumberOfImportFunctions')
plt.ylabel('Executables')
plt.show()
df_clean['NumberOfSections'].hist()
plt.title(r'Histogram of the Number of Sections')
plt.xlabel('NumberOfSections')
plt.ylabel('Executables')
plt.show()

Check the correlation

Helper function that displays correlation by color. Red is most correlated, Blue least.

In [16]:
def plot_corr(df, size=15):
    """
    Function plots a graphical correlation matrix for each pair of columns in the dataframe.

    Input:
        df: pandas DataFrame
        size: vertical and horizontal size of the plot

    Displays:
        matrix of correlation between columns.  Blue-cyan-yellow-red-darkred => less to more correlated
                                                0 ------------------>  1
                                                Expect a darkred line running from top left to bottom right
    """

    corr = df.corr()    # data frame correlation function
    fig, ax = plt.subplots(figsize=(size, size))
    ax.matshow(corr)   # color code the rectangles by correlation value
    plt.xticks(range(len(corr.columns)), corr.columns)  # draw x tick marks
    plt.yticks(range(len(corr.columns)), corr.columns)  # draw y tick marks

    
In [17]:
def correlation(dataset, threshold):
    col_corr = set() # Set of all the names of deleted columns
    corr_matrix = dataset.corr()
    for i in range(len(corr_matrix.columns)):
        for j in range(i):
            if corr_matrix.iloc[i, j] >= threshold:
                colname = corr_matrix.columns[i] # getting the name of column
                col_corr.add(colname)
                if colname in dataset.columns:
                    del dataset[colname] # deleting the column from the dataset

    print(dataset)
    
    

Malware Correlation

In [18]:
df_malware.corr()
Out[18]:
AddressOfEntryPoint DebugRVA DebugSize Dll ExportRVA ExportSize IATRVA ImageBase ImageVersion LinkerVersion NumberOfImportDLL NumberOfImportFunctions NumberOfSections OSVersion ResSize StackReserveSize
AddressOfEntryPoint 1.000000 0.035230 -0.090583 0.116372 -0.005256 -0.025972 -0.013244 -0.061953 -0.015695 -0.023625 0.074893 0.039400 -0.106693 -0.265357 -0.048695 -0.003774
DebugRVA 0.035230 1.000000 0.230066 -0.077622 0.019823 -0.023057 0.226593 -0.023712 -0.011859 0.056641 -0.018453 0.035660 0.290906 -0.058632 0.001549 -0.023430
DebugSize -0.090583 0.230066 1.000000 -0.120497 -0.032691 0.031825 -0.087493 -0.086138 -0.035535 0.108552 -0.109140 -0.178110 0.095590 0.464331 0.032082 -0.277207
Dll 0.116372 -0.077622 -0.120497 1.000000 0.010906 0.031482 -0.022954 0.682349 0.006064 0.054148 0.276413 0.216764 -0.570699 -0.182660 0.071357 0.122206
ExportRVA -0.005256 0.019823 -0.032691 0.010906 1.000000 0.001543 0.897566 0.027485 -0.002995 -0.000331 0.080676 -0.013044 0.115386 -0.011312 -0.005866 -0.004723
ExportSize -0.025972 -0.023057 0.031825 0.031482 0.001543 1.000000 -0.012096 0.024463 -0.000733 -0.012812 0.013740 0.002069 -0.030079 0.077484 0.226113 -0.023774
IATRVA -0.013244 0.226593 -0.087493 -0.022954 0.897566 -0.012096 1.000000 0.026367 -0.002431 0.011505 0.184731 0.119592 0.177349 -0.056255 -0.006979 0.043554
ImageBase -0.061953 -0.023712 -0.086138 0.682349 0.027485 0.024463 0.026367 1.000000 -0.056380 0.069552 0.249721 0.237441 -0.311564 0.075914 0.049947 0.157359
ImageVersion -0.015695 -0.011859 -0.035535 0.006064 -0.002995 -0.000733 -0.002431 -0.056380 1.000000 -0.003820 0.039075 0.002036 0.028018 -0.032553 -0.003823 -0.008052
LinkerVersion -0.023625 0.056641 0.108552 0.054148 -0.000331 -0.012812 0.011505 0.069552 -0.003820 1.000000 0.095095 0.139848 0.017280 0.127573 0.021913 -0.025194
NumberOfImportDLL 0.074893 -0.018453 -0.109140 0.276413 0.080676 0.013740 0.184731 0.249721 0.039075 0.095095 1.000000 0.894713 -0.012561 -0.073946 0.058651 0.233540
NumberOfImportFunctions 0.039400 0.035660 -0.178110 0.216764 -0.013044 0.002069 0.119592 0.237441 0.002036 0.139848 0.894713 1.000000 0.055095 -0.113983 0.032964 0.322661
NumberOfSections -0.106693 0.290906 0.095590 -0.570699 0.115386 -0.030079 0.177349 -0.311564 0.028018 0.017280 -0.012561 0.055095 1.000000 0.155466 -0.045400 -0.038067
OSVersion -0.265357 -0.058632 0.464331 -0.182660 -0.011312 0.077484 -0.056255 0.075914 -0.032553 0.127573 -0.073946 -0.113983 0.155466 1.000000 0.069099 -0.269090
ResSize -0.048695 0.001549 0.032082 0.071357 -0.005866 0.226113 -0.006979 0.049947 -0.003823 0.021913 0.058651 0.032964 -0.045400 0.069099 1.000000 -0.033629
StackReserveSize -0.003774 -0.023430 -0.277207 0.122206 -0.004723 -0.023774 0.043554 0.157359 -0.008052 -0.025194 0.233540 0.322661 -0.038067 -0.269090 -0.033629 1.000000
In [19]:
plot_corr(df_malware)
In [20]:
#correlation(df_malware, .99)
In [21]:
#plot_corr(df_malware)
Malware dataframe with 0 values
In [22]:
print("# rows in dataframe {0}".format(len(df_malware)))
print("# rows missing AddressOfEntryPoint: {0}".format(len(df_malware.loc[df_malware['AddressOfEntryPoint'] == 0])))
print("# rows missing DebugRVA: {0}".format(len(df_malware.loc[df_malware['DebugRVA'] == 0])))
print("# rows missing DebugSize: {0}".format(len(df_malware.loc[df_malware['DebugSize'] == 0])))
print("# rows missing Dll: {0}".format(len(df_malware.loc[df_malware['Dll'] == 0])))
print("# rows missing ExportRVA: {0}".format(len(df_malware.loc[df_malware['ExportRVA'] == 0])))
print("# rows missing ExportSize: {0}".format(len(df_malware.loc[df_malware['ExportSize'] == 0])))
print("# rows missing IATRVA: {0}".format(len(df_malware.loc[df_malware['IATRVA'] == 0])))
print("# rows missing ImageBase: {0}".format(len(df_malware.loc[df_malware['ImageBase'] == 0])))
print("# rows missing ImageVersion: {0}".format(len(df_malware.loc[df_malware['ImageVersion'] == 0])))
print("# rows missing LinkerVersion: {0}".format(len(df_malware.loc[df_malware['LinkerVersion'] == 0])))
print("# rows missing NumberOfSections: {0}".format(len(df_malware.loc[df_malware['NumberOfSections'] == 0])))
print("# rows missing OSVersion: {0}".format(len(df_malware.loc[df_malware['OSVersion'] == 0])))
print("# rows missing ResSize: {0}".format(len(df_malware.loc[df_malware['ResSize'] == 0])))
print("# rows missing StackReserveSize: {0}".format(len(df_malware.loc[df_malware['StackReserveSize'] == 0])))
print("# rows missing NumberOfImportDLL: {0}".format(len(df_malware.loc[df_malware['NumberOfImportDLL'] == 0])))
print("# rows missing NumberOfImportFunctions: {0}".format(len(df_malware.loc[df_malware['NumberOfImportFunctions'] == 0])))
print("# rows missing NumberOfSections: {0}".format(len(df_malware.loc[df_malware['NumberOfSections'] == 0])))
# rows in dataframe 995
# rows missing AddressOfEntryPoint: 3
# rows missing DebugRVA: 267
# rows missing DebugSize: 267
# rows missing Dll: 141
# rows missing ExportRVA: 910
# rows missing ExportSize: 910
# rows missing IATRVA: 19
# rows missing ImageBase: 0
# rows missing ImageVersion: 478
# rows missing LinkerVersion: 0
# rows missing NumberOfSections: 6
# rows missing OSVersion: 0
# rows missing ResSize: 64
# rows missing StackReserveSize: 0
# rows missing NumberOfImportDLL: 147
# rows missing NumberOfImportFunctions: 147
# rows missing NumberOfSections: 6

Clean Correlation

In [23]:
df_clean.corr()
Out[23]:
AddressOfEntryPoint DebugRVA DebugSize Dll ExportRVA ExportSize IATRVA ImageBase ImageVersion LinkerVersion NumberOfImportDLL NumberOfImportFunctions NumberOfSections OSVersion ResSize StackReserveSize
AddressOfEntryPoint 1.000000 0.376455 -0.001188 -0.046729 0.686100 0.159009 0.378447 -0.017464 0.048777 0.082353 0.120774 0.195789 -0.026106 -0.013296 0.130714 0.085269
DebugRVA 0.376455 1.000000 0.235510 -0.030202 0.165931 0.021710 0.550086 0.124848 -0.018012 0.158134 0.069459 0.363659 -0.050907 -0.039534 0.032462 0.068129
DebugSize -0.001188 0.235510 1.000000 0.386591 -0.001758 0.043174 0.132536 0.108120 0.027022 0.489312 0.062968 0.069459 -0.175783 0.499236 0.047429 -0.190557
Dll -0.046729 -0.030202 0.386591 1.000000 -0.064785 -0.050356 -0.033908 -0.014890 0.049520 0.326582 0.250669 -0.020009 -0.000204 0.537415 -0.020063 -0.354395
ExportRVA 0.686100 0.165931 -0.001758 -0.064785 1.000000 0.334106 0.347014 -0.008358 -0.007997 0.011629 0.083542 0.192323 0.090855 -0.021997 0.214102 0.044172
ExportSize 0.159009 0.021710 0.043174 -0.050356 0.334106 1.000000 0.178111 -0.006341 -0.006171 0.023095 0.088044 0.071586 0.214809 0.029201 0.005778 -0.008533
IATRVA 0.378447 0.550086 0.132536 -0.033908 0.347014 0.178111 1.000000 -0.025444 0.158022 0.041628 0.282145 0.542615 0.170300 0.074932 0.216881 0.084239
ImageBase -0.017464 0.124848 0.108120 -0.014890 -0.008358 -0.006341 -0.025444 1.000000 -0.005917 0.031480 -0.101067 -0.064428 -0.064906 -0.007955 -0.008473 -0.085809
ImageVersion 0.048777 -0.018012 0.027022 0.049520 -0.007997 -0.006171 0.158022 -0.005917 1.000000 0.028758 0.137971 -0.000887 0.017238 0.044935 -0.007953 -0.046360
LinkerVersion 0.082353 0.158134 0.489312 0.326582 0.011629 0.023095 0.041628 0.031480 0.028758 1.000000 -0.032442 -0.016006 -0.331794 0.366225 0.015706 -0.160583
NumberOfImportDLL 0.120774 0.069459 0.062968 0.250669 0.083542 0.088044 0.282145 -0.101067 0.137971 -0.032442 1.000000 0.481672 0.334914 0.195613 0.026599 -0.093554
NumberOfImportFunctions 0.195789 0.363659 0.069459 -0.020009 0.192323 0.071586 0.542615 -0.064428 -0.000887 -0.016006 0.481672 1.000000 0.168574 0.060505 0.085063 0.061108
NumberOfSections -0.026106 -0.050907 -0.175783 -0.000204 0.090855 0.214809 0.170300 -0.064906 0.017238 -0.331794 0.334914 0.168574 1.000000 -0.086133 -0.035504 0.090988
OSVersion -0.013296 -0.039534 0.499236 0.537415 -0.021997 0.029201 0.074932 -0.007955 0.044935 0.366225 0.195613 0.060505 -0.086133 1.000000 0.018603 -0.326980
ResSize 0.130714 0.032462 0.047429 -0.020063 0.214102 0.005778 0.216881 -0.008473 -0.007953 0.015706 0.026599 0.085063 -0.035504 0.018603 1.000000 0.010637
StackReserveSize 0.085269 0.068129 -0.190557 -0.354395 0.044172 -0.008533 0.084239 -0.085809 -0.046360 -0.160583 -0.093554 0.061108 0.090988 -0.326980 0.010637 1.000000
In [24]:
plot_corr(df_clean)
In [25]:
#correlation(df_clean, 0.8)
In [26]:
#plot_corr(df_clean)
Clean dataframe with 0 values
In [27]:
print("# rows in dataframe {0}".format(len(df_clean)))
print("# rows missing AddressOfEntryPoint: {0}".format(len(df_clean.loc[df_clean['AddressOfEntryPoint'] == 0])))
print("# rows missing DebugRVA: {0}".format(len(df_clean.loc[df_clean['DebugRVA'] == 0])))
print("# rows missing DebugSize: {0}".format(len(df_clean.loc[df_clean['DebugSize'] == 0])))
print("# rows missing Dll: {0}".format(len(df_clean.loc[df_clean['Dll'] == 0])))
print("# rows missing ExportRVA: {0}".format(len(df_clean.loc[df_clean['ExportRVA'] == 0])))
print("# rows missing ExportSize: {0}".format(len(df_clean.loc[df_clean['ExportSize'] == 0])))
print("# rows missing IATRVA: {0}".format(len(df_clean.loc[df_clean['IATRVA'] == 0])))
print("# rows missing ImageBase: {0}".format(len(df_clean.loc[df_clean['ImageBase'] == 0])))
print("# rows missing ImageVersion: {0}".format(len(df_clean.loc[df_clean['ImageVersion'] == 0])))
print("# rows missing LinkerVersion: {0}".format(len(df_clean.loc[df_clean['LinkerVersion'] == 0])))
print("# rows missing NumberOfSections: {0}".format(len(df_clean.loc[df_clean['NumberOfSections'] == 0])))
print("# rows missing OSVersion: {0}".format(len(df_clean.loc[df_clean['OSVersion'] == 0])))
print("# rows missing ResSize: {0}".format(len(df_clean.loc[df_clean['ResSize'] == 0])))
print("# rows missing StackReserveSize: {0}".format(len(df_clean.loc[df_clean['StackReserveSize'] == 0])))
print("# rows missing NumberOfImportDLL: {0}".format(len(df_clean.loc[df_clean['NumberOfImportDLL'] == 0])))
print("# rows missing NumberOfImportFunctions: {0}".format(len(df_clean.loc[df_clean['NumberOfImportFunctions'] == 0])))
print("# rows missing NumberOfSections: {0}".format(len(df_clean.loc[df_clean['NumberOfSections'] == 0])))
# rows in dataframe 1297
# rows missing AddressOfEntryPoint: 25
# rows missing DebugRVA: 387
# rows missing DebugSize: 387
# rows missing Dll: 90
# rows missing ExportRVA: 1220
# rows missing ExportSize: 1220
# rows missing IATRVA: 114
# rows missing ImageBase: 0
# rows missing ImageVersion: 433
# rows missing LinkerVersion: 0
# rows missing NumberOfSections: 0
# rows missing OSVersion: 3
# rows missing ResSize: 45
# rows missing StackReserveSize: 18
# rows missing NumberOfImportDLL: 29
# rows missing NumberOfImportFunctions: 29
# rows missing NumberOfSections: 0

Preparing the Data

Supervised machine learning is best understood as approximating a target function (f) that maps input variables (X) to an output variable (Y).

Y = f(X)

This characterization describes the range of classification and prediction problems and the machine algorithms that can be used to address them.

The cause of poor performance in machine learning is either overfitting or underfitting the data.

Screen%20Shot%202017-11-11%20at%203.22.18%20PM.png

Merge the Malware and Clean Datasets

We will add the two datasets together within a single csv file making a new column to indicate the sample is Malware or Clean. This new column will be a boolean value of 0 = "Clean" and 1 = "Malware" value.

Create a new def to assist in adding a new column for the Malware status and the corresponding value.

In [30]:
def appendCSV(inputfile, outputfile, newheader, newdata):
    """   
    Function to add a new columns, new header, and new data to a csv file.  
    This new "Malware" column will be a boolean value of 0 = "Clean" and 1 = "Malware" value.
    
    Input:
        inputfile: "./output/dataset_malware.csv"
        outputfile: "./dataset/dataset_malware.csv"
        newheader: "Malware"
        newdata: 1
        
    Example:
        appendCSV("./output/dataset_malware.csv", "./dataset/dataset_malware.csv", "Malware", 1)
    """
    csv.field_size_limit(100000000)
    reader = csv.reader(open(inputfile, "r"))
    writer = csv.writer(open(outputfile, "w"))
    headers = next(reader)
    headers.append(newheader)
    writer.writerow(headers)
    for row in reader:
        row.append(newdata)
        writer.writerow(row)
        
        

Append the CSV files to mark the datasets as Malware or Clean

In [31]:
appendCSV("./output/dataset_malware.csv", "./dataset/dataset_malware.csv", "Malware", 1)
appendCSV("./output/dataset_clean.csv", "./dataset/dataset_clean.csv", "Malware", 0)

Merge the Clean dataset and Malware dataset into one CSV file

We should also look into removing duplictaes and randomizing the order of samples in the dataset.

In [32]:
interesting_files = glob.glob("./dataset/dataset_*.csv") 

header_saved = False
with open("./dataset/merged_output.csv","w") as fout:
    for filename in interesting_files:
        with open(filename) as fin:
            header = next(fin)
            if not header_saved:
                fout.write(header)
                header_saved = True
            for line in fin:
                fout.write(line)

Loading and Reviewing the Merged Data

In [33]:
merged_df = pd.read_csv("./dataset/merged_output.csv")

We dont need the Columns "ImportedSymbols" and "filename" for now so we will just drop them from the dataframe.

In [34]:
try:
    del merged_df['ImportedSymbols']
    del merged_df['filename']
    del merged_df['SectionNames']
    del merged_df['ImportedFunctions']
except:
    print("")
    print("[*] Columns removed")
    print("")
[*] Columns removed

In [35]:
merged_df.shape
Out[35]:
(2292, 22)
In [36]:
merged_df.describe()
Out[36]:
AddressOfEntryPoint DebugRVA DebugSize Dll ExportRVA ExportSize IATRVA ImageBase ImageVersion LinkerVersion NumberOfImportDLL NumberOfImportFunctions NumberOfSections OSVersion ResSize StackReserveSize Malware
count 2.292000e+03 2.292000e+03 2292.000000 2292.000000 2.292000e+03 2.292000e+03 2.292000e+03 2.292000e+03 2292.000000 2292.000000 2292.000000 2292.000000 2292.000000 2292.00000 2.292000e+03 2.292000e+03 2292.000000
mean 6.568424e+07 1.244702e+05 23.396597 32417.284468 7.907806e+04 3.421876e+04 2.149736e+05 2.611155e+10 70.522251 9.008290 7.639616 143.489965 5.535777 5.18630 1.236307e+06 9.154542e+05 0.434119
std 3.082750e+08 4.572434e+05 18.261576 13518.295561 1.006857e+06 6.635917e+05 1.023666e+06 4.064159e+11 1179.422404 5.318443 6.294335 160.622470 1.703473 1.17953 1.190246e+07 1.334605e+06 0.495749
min 0.000000e+00 0.000000e+00 0.000000 0.000000 0.000000e+00 0.000000e+00 0.000000e+00 6.553600e+04 0.000000 1.000000 0.000000 0.000000 0.000000 0.00000 0.000000e+00 0.000000e+00 0.000000
25% 1.582400e+04 0.000000e+00 0.000000 32768.000000 0.000000e+00 0.000000e+00 8.192000e+03 4.194304e+06 0.000000 8.000000 3.000000 65.000000 5.000000 5.00000 1.992000e+03 3.276800e+05 0.000000
50% 5.000000e+04 4.880000e+03 28.000000 33088.000000 0.000000e+00 0.000000e+00 3.686400e+04 4.194304e+06 6.000000 9.000000 7.000000 120.000000 5.000000 5.00000 1.266400e+04 1.048576e+06 0.000000
75% 1.204425e+05 4.264000e+04 28.000000 34112.000000 0.000000e+00 0.000000e+00 1.351680e+05 5.368709e+09 6.000000 11.000000 10.000000 158.000000 6.000000 6.00000 1.327690e+05 1.048576e+06 1.000000
max 3.490505e+09 9.103792e+06 145.000000 53568.000000 3.993506e+07 1.298409e+07 3.993009e+07 6.892871e+12 21315.000000 187.000000 71.000000 3659.000000 21.000000 10.00000 3.391820e+08 3.355443e+07 1.000000
In [37]:
merged_df.head(5)
Out[37]:
Unnamed: 0 AddressOfEntryPoint DebugRVA DebugSize Dll ExportRVA ExportSize IATRVA ImageBase ImageVersion ... LinkerVersion NumberOfImportDLL NumberOfImportFunctions NumberOfSections OSVersion ResSize SectionNames StackReserveSize filename Malware
0 00070b0d4cb037c40d5d2464f92841aeb9ad863472bf95... 21704 4880 28 0 0 0 4096 4194304 1 ... 6 1 139 3 4 2184 {'.text\x00\x00\x00': 1179648, '.data\x00\x00\... 1048576 ./data/clean/00070b0d4cb037c40d5d2464f92841aeb... 0
1 00696555cbf6db83af785f8acb2270b9411cfc75e7f6d3... 29424 4256 28 49472 32576 163 36864 4194304 6 ... 11 21 114 6 6 2008 {'.text\x00\x00\x00': 28672, '.data\x00\x00\x0... 262144 ./data/clean/00696555cbf6db83af785f8acb2270b94... 0
2 007247436f041ca59c5ee0e8636c668c2a43376aeb8cfa... 227872 82400 84 49472 0 0 3522560 4194304 10 ... 12 8 157 5 6 1892 {'.text\x00\x00\x00': 246272, '.data\x00\x00\x... 4194304 ./data/clean/007247436f041ca59c5ee0e8636c668c2... 0
3 007bdab757d03d94e60c9b1e3eec13b07562705c514992... 10656 4320 28 49472 0 0 20480 4194304 6 ... 11 12 46 5 6 15632 {'.text\x00\x00\x00': 8704, '.data\x00\x00\x00... 262144 ./data/clean/007bdab757d03d94e60c9b1e3eec13b07... 0
4 008fa2b9697f9a173e40572face100410e51975e34a5ce... 152696 4224 28 33120 0 0 200704 5368709120 6 ... 11 7 144 6 6 28384 {'.text\x00\x00\x00': 181248, '.data\x00\x00\x... 524288 ./data/clean/008fa2b9697f9a173e40572face100410... 0

5 rows × 22 columns

In [38]:
merged_df.tail(5)
Out[38]:
Unnamed: 0 AddressOfEntryPoint DebugRVA DebugSize Dll ExportRVA ExportSize IATRVA ImageBase ImageVersion ... LinkerVersion NumberOfImportDLL NumberOfImportFunctions NumberOfSections OSVersion ResSize SectionNames StackReserveSize filename Malware
2287 fab80c8daa62c97bbb4cac1520a95c25b6cb755fbd1814... 1074123741 219760 28 32768 0 0 217088 5368709120 0 ... 8 10 288 5 4 72860 NaN 1048576 ./data/malware/fab80c8daa62c97bbb4cac1520a95c2... 1
2288 fd353ce31912ea745bf0b47144171a5700b128664711ad... 6656 8800 28 32768 0 0 8192 5368709120 0 ... 8 4 65 5 4 48484 {'.text\x00\x00\x00': 4096, '.rdata\x00\x00': ... 1048576 ./data/malware/fd353ce31912ea745bf0b47144171a5... 1
2289 fde7f22dcebcfbedafd5daecba1dc9952ff51c0ee43316... 51656 5424 28 32832 0 0 4096 4294967296 6 ... 9 7 151 5 6 344936 {'.text\x00\x00\x00': 55296, '.data\x00\x00\x0... 524288 ./data/malware/fde7f22dcebcfbedafd5daecba1dc99... 1
2290 fee18f402375b210fc7b89e29084fb8e478d5ee0f0cdb8... 72752 79760 28 32768 0 0 77824 5368709120 0 ... 8 11 216 5 4 13264 {'.text\x00\x00\x00': 70144, '.rdata\x00\x00':... 1048576 ./data/malware/fee18f402375b210fc7b89e29084fb8... 1
2291 fef17c9f848a3d291aa2070105bbbc143bb48ffd4c1fdf... 51656 5424 28 32832 0 0 4096 4294967296 6 ... 9 7 151 5 6 412204 {'.text\x00\x00\x00': 55296, '.data\x00\x00\x0... 524288 ./data/malware/fef17c9f848a3d291aa2070105bbbc1... 1

5 rows × 22 columns

Check For Null Values

In [39]:
merged_df.isnull().values.any()
Out[39]:
True

Check class distribution

Rare events are hard to predict

Learning the parameters of a prediction function and testing it on the same data is a methodological mistake: a model that would just repeat the labels of the samples that it has just seen would have a perfect score but would fail to predict anything useful on yet-unseen data. This situation is called overfitting. To avoid it, it is common practice when performing a (supervised) machine learning experiment to hold out part of the available data as a test set X_test, y_test.

In [40]:
num_obs = len(merged_df)
num_true = len(merged_df.loc[merged_df['Malware'] == 1])
num_false = len(merged_df.loc[merged_df['Malware'] == 0])

print("")
print("[*] Number of Malware files:  {0} ({1:2.2f}%)".format(num_true, (num_true/num_obs) * 100))
print("[*] Number of Clean files: {0} ({1:2.2f}%)".format(num_false, (num_false/num_obs) * 100))
print("")
[*] Number of Malware files:  995 (43.41%)
[*] Number of Clean files: 1297 (56.59%)

Spliting the data

70% for training, 30% for testing

We are using a simple split of our dataset but in the future we could use K-fold Cross Validation.

Tuning the Hyperparameters with Cross Validation

For each fold
    Determine the best hyperparameter value to tune
Next
    Set the model hyperparameter value to the average best

The sklearn.cross_validation library assists in this process.

Algorithm CV Variants: Algorithm + Cross Validation = AlgorithmCV

In [41]:
from sklearn.model_selection import train_test_split
from sklearn import datasets
from sklearn import svm

feature_col_names = ['AddressOfEntryPoint', 'DebugRVA', 'DebugSize', 'Dll', 'ExportRVA', 'ExportSize', 'IATRVA', 'ImageBase', 'ImageVersion', 'LinkerVersion', 'NumberOfSections', 'OSVersion', 'ResSize', 'StackReserveSize', 'Malware', "NumberOfImportDLL", "NumberOfImportFunctions", "NumberOfSections" ]
predicted_class_names = ['Malware']

X = merged_df[feature_col_names].values     # predictor feature columns 
y = merged_df[predicted_class_names].values # predicted class (1=true, 0=false) column 
split_test_size = 0.30

X_train, X_test, y_train, y_test = train_test_split(X, y, test_size=split_test_size, random_state=42) 
                            # test_size = 0.3 is 30%, 42 is the answer to everything
    
    

We check to ensure we have the the desired 70% train, 30% test split of the data

In [42]:
print("")
print("[*] {0:0.2f}% in training set".format((len(X_train)/len(merged_df.index)) * 100))
print("[*] {0:0.2f}% in test set".format((len(X_test)/len(merged_df.index)) * 100))
print("")
[*] 69.98% in training set
[*] 30.02% in test set

Verifying predicted value was split correctly

In [43]:
print("")
print("[*] Original Malware  : {0} ({1:0.2f}%)".format(len(merged_df.loc[merged_df['Malware'] == 1]), (len(merged_df.loc[merged_df['Malware'] == 1])/len(merged_df.index)) * 100.0))
print("[*] Original Clean : {0} ({1:0.2f}%)".format(len(merged_df.loc[merged_df['Malware'] == 0]), (len(merged_df.loc[merged_df['Malware'] == 0])/len(merged_df.index)) * 100.0))
print("")
print("[*] Training Malware  : {0} ({1:0.2f}%)".format(len(y_train[y_train[:] == 1]), (len(y_train[y_train[:] == 1])/len(y_train) * 100.0)))
print("[*] Training Clean : {0} ({1:0.2f}%)".format(len(y_train[y_train[:] == 0]), (len(y_train[y_train[:] == 0])/len(y_train) * 100.0)))
print("")
print("[*] Test Malware      : {0} ({1:0.2f}%)".format(len(y_test[y_test[:] == 1]), (len(y_test[y_test[:] == 1])/len(y_test) * 100.0)))
print("[*] Test Clean     : {0} ({1:0.2f}%)".format(len(y_test[y_test[:] == 0]), (len(y_test[y_test[:] == 0])/len(y_test) * 100.0)))
print("")
[*] Original Malware  : 995 (43.41%)
[*] Original Clean : 1297 (56.59%)

[*] Training Malware  : 698 (43.52%)
[*] Training Clean : 906 (56.48%)

[*] Test Malware      : 297 (43.17%)
[*] Test Clean     : 391 (56.83%)

Selecting the Machine Learning Algorithm

(Naive Bayes, Logisitic Regression, Decision Tree)

We may need to test several algorithms with the dataset which we have generated.
For our initial testing algorithm we have chosen the Gaussian Naive Bayes model which is based on likelihood and probability. We have chosen this algorithm because it is fast, simple, and stable.

Algorithm decision factors:

* Learning Type
    * Prediction Model => Supervised machine learning

* Results (Regression vs Classification)
    * Classification (Malware vs Not Malware)

* Complexity (Ensemble vs Simple)
    * Keep it Simple 

* Basic vs Enhanced
    * Basic 

Training the Model

Hidden missing values?

Are these 0 values possible?

How many rows have unexpected 0 values?

Common Problems with missing data, what options do we have?

* Ignore the missing data values

* Drop observation (rows) with missing data values

* Replace missing data values (impute) 

Impute with the mean

I have chosen not to imput missing data for initial testing

In [44]:
#from sklearn.preprocessing import Imputer

#Impute with mean all 0 readings
#fill_0 = Imputer(missing_values=0, strategy="mean", axis=0)

#X_train = fill_0.fit_transform(X_train)
#X_test = fill_0.fit_transform(X_test)

Training Initial Algorithm - Naive Bayes

Scikit-learn library

Designed to work with NumPy, SciPy and Pandas

Toolset for training and evaluation tasks

In [45]:
from sklearn.naive_bayes import GaussianNB

# create Gaussian Naive Bayes model object and train it with the data
nb_model = GaussianNB()

nb_model.fit(X_train, y_train.ravel())
Out[45]:
GaussianNB(priors=None)

Testing the Accuracy

Performance on Training Data

In [46]:
# predict the values using the training data
nb_predict_train = nb_model.predict(X_train)

# import the performance metrics library
from sklearn import metrics

# Accuracy
print("Training Accuracy: {0:.4f}".format(metrics.accuracy_score(y_train, nb_predict_train)))
print()
Training Accuracy: 0.4470

Performance on Testing Data

In [47]:
# predict the values using the testing data
nb_predict_test = nb_model.predict(X_test)

# Accuracy
print("Testing Accuracy: {0:.4f}".format(metrics.accuracy_score(y_test, nb_predict_test)))
print()
Testing Accuracy: 0.4375

Metrics - Confusion Matrix / Classification Report

| TN | FP |
| FN | TP |

Recall is the True Positive rate and indicates the probabilty of a true result.

Recall = TP / (TP +FN ) (How well the model is predicting true Malware)

Precision = TP / (TP + FP) (Positive predictor value)

True positives (TP) The amount of labels, which were correctly identified by the classifier, that is assigned point labeled A to class A.

True negatives (TN) The amount of labels, which were correctly rejected by the classifier, that is assigned point labeled A’ to class A’.

False positives (FP) The amount of labels, which were incorrectly identified by the classifier, that is assigned point labeled A’ to class A.

False negatives (FN) The amount of labels, which were incorrectly rejected by the classifier, that is assigned point labeled A to class A’.

Accuracy Accuracy measures a fraction of the classifier’s predictions that are correct, that is the number of correct assessments divided by the number of all assessments – (TN + TP)/(TN + TP + FN + FP).

Precision (P) Precision is the fraction of positive predictions that are correct – TP/(TP + FP). Be careful as classifier predicting only a single positive instance, that happens to be correct, will achieve perfect precision.

Recall (R) Recall, sometimes called sensitivity in medical domains, measures the fraction of the truly positive instances. A score of 1 indicates, that no false negative were present – TP/(TP + FN). Be careful as classifier predicting positive for every example will achieve a recall of 1.

F1 score Both precision and recall scores provide an incomplete view on the classifier performance and sometimes may provide skewed results. The F1 measure provides a better view by calculating weighted average of the scores – 2PR/(P + R). A model with perfect precision and recall scores will achieve an F1 score of one.

In [48]:
print("Confusion Matrix")
print("{0}".format(metrics.confusion_matrix(y_test, nb_predict_test)))
print()

print("Classification Report")
print(metrics.classification_report(y_test, nb_predict_test))
Confusion Matrix
[[  5 386]
 [  1 296]]

Classification Report
             precision    recall  f1-score   support

          0       0.83      0.01      0.03       391
          1       0.43      1.00      0.60       297

avg / total       0.66      0.44      0.28       688

In [50]:
import scikitplot as skplt
skplt.metrics.plot_confusion_matrix(y_test, nb_predict_test, normalize=True)
plt.show()

Random Forest

In [51]:
#random forests
from sklearn.ensemble import RandomForestClassifier
rf_model = RandomForestClassifier(random_state=42)
rf_model.fit(X_train, y_train.ravel())
Out[51]:
RandomForestClassifier(bootstrap=True, class_weight=None, criterion='gini',
            max_depth=None, max_features='auto', max_leaf_nodes=None,
            min_impurity_decrease=0.0, min_impurity_split=None,
            min_samples_leaf=1, min_samples_split=2,
            min_weight_fraction_leaf=0.0, n_estimators=10, n_jobs=1,
            oob_score=False, random_state=42, verbose=0, warm_start=False)

Performance on Training Data

In [52]:
# predict the values using the training data
rf_predict_train = rf_model.predict(X_train)

# Accuracy
print("Training Accuracy: {0:.4f}".format(metrics.accuracy_score(y_train, rf_predict_train)))
print()
Training Accuracy: 1.0000

Performance on Testing Data

In [53]:
# predict the values using the testing data
rf_predict_test = rf_model.predict(X_test)


# Accuracy
print("Testing Accuracy: {0:.4f}".format(metrics.accuracy_score(y_test, rf_predict_test)))
print()
Testing Accuracy: 1.0000

In [54]:
print("Confusion Matrix")
print("{0}".format(metrics.confusion_matrix(y_test, rf_predict_test)))
print()

print("Classification Report")
print(metrics.classification_report(y_test, rf_predict_test))
Confusion Matrix
[[391   0]
 [  0 297]]

Classification Report
             precision    recall  f1-score   support

          0       1.00      1.00      1.00       391
          1       1.00      1.00      1.00       297

avg / total       1.00      1.00      1.00       688

In [55]:
skplt.metrics.plot_confusion_matrix(y_test, rf_predict_test, normalize=True)
plt.show()

Logistic Regression

In [56]:
#logistic regression
from sklearn.linear_model import LogisticRegression
lr_model = LogisticRegression(C=0.7, random_state=42)
lr_model.fit(X_train, y_train.ravel())
Out[56]:
LogisticRegression(C=0.7, class_weight=None, dual=False, fit_intercept=True,
          intercept_scaling=1, max_iter=100, multi_class='ovr', n_jobs=1,
          penalty='l2', random_state=42, solver='liblinear', tol=0.0001,
          verbose=0, warm_start=False)

Performance on Training Data

In [57]:
# predict the values using the training data
lr_predict_train = lr_model.predict(X_train)

# Accuracy
print("Training Accuracy: {0:.4f}".format(metrics.accuracy_score(y_train, lr_predict_train)))
print()
Training Accuracy: 0.3990

Performance on Testing Data

In [58]:
# predict the values using the testing data
lr_predict_test = lr_model.predict(X_test)


# Accuracy
print("Testing Accuracy: {0:.4f}".format(metrics.accuracy_score(y_test, lr_predict_test)))
print()
Testing Accuracy: 0.4070

In [59]:
print("Confusion Matrix")
print("{0}".format(metrics.confusion_matrix(y_test, lr_predict_test)))
print()

print("Classification Report")
print(metrics.classification_report(y_test, lr_predict_test))
Confusion Matrix
[[176 215]
 [193 104]]

Classification Report
             precision    recall  f1-score   support

          0       0.48      0.45      0.46       391
          1       0.33      0.35      0.34       297

avg / total       0.41      0.41      0.41       688

In [60]:
skplt.metrics.plot_confusion_matrix(y_test, lr_predict_test, normalize=True)
plt.show()

Logistic RegressionCV

In [61]:
#logistic regressioncv
from sklearn.linear_model import LogisticRegressionCV
lr_cv_model = LogisticRegressionCV(n_jobs=-1, Cs=3, cv=10, refit=False, class_weight="balanced", random_state=42)
lr_cv_model.fit(X_train, y_train.ravel())
Out[61]:
LogisticRegressionCV(Cs=3, class_weight='balanced', cv=10, dual=False,
           fit_intercept=True, intercept_scaling=1.0, max_iter=100,
           multi_class='ovr', n_jobs=-1, penalty='l2', random_state=42,
           refit=False, scoring=None, solver='lbfgs', tol=0.0001,
           verbose=0)

Performance on Training Data

In [62]:
# predict the values using the training data
lr_cv_predict_train = lr_cv_model.predict(X_train)

# Accuracy
print("Training Accuracy: {0:.4f}".format(metrics.accuracy_score(y_train, lr_cv_predict_train)))
print()
Training Accuracy: 0.5648

Performance on Testing Data

In [63]:
# predict the values using the testing data
lr_cv_predict_test = lr_cv_model.predict(X_test)


# Accuracy
print("Testing Accuracy: {0:.4f}".format(metrics.accuracy_score(y_test, lr_cv_predict_test)))
print()
Testing Accuracy: 0.5683

In [64]:
print("Confusion Matrix")
print("{0}".format(metrics.confusion_matrix(y_test, lr_cv_predict_test)))
print()

print("Classification Report")
print(metrics.classification_report(y_test, lr_cv_predict_test))
Confusion Matrix
[[391   0]
 [297   0]]

Classification Report
             precision    recall  f1-score   support

          0       0.57      1.00      0.72       391
          1       0.00      0.00      0.00       297

avg / total       0.32      0.57      0.41       688

/Users/orlandobarreraii/anaconda3/lib/python3.6/site-packages/sklearn/metrics/classification.py:1135: UndefinedMetricWarning: Precision and F-score are ill-defined and being set to 0.0 in labels with no predicted samples.
  'precision', 'predicted', average, warn_for)
In [65]:
skplt.metrics.plot_confusion_matrix(y_test, lr_cv_predict_test, normalize=True)
plt.show()

Algorithm Comparison

We don’t know which algorithms would be good on this problem or what configurations to use. We get an idea from the plots that some of the classes are partially linearly separable in some dimensions, so we are expecting generally good results.

Let’s evaluate 6 different algorithms:

Logistic Regression (LR) Linear Discriminant Analysis (LDA) K-Nearest Neighbors (KNN). Classification and Regression Trees (CART). Gaussian Naive Bayes (NB). Support Vector Machines (SVM). This is a good mixture of simple linear (LR and LDA), nonlinear (KNN, CART, NB and SVM) algorithms. We reset the random number seed before each run to ensure that the evaluation of each algorithm is performed using exactly the same data splits. It ensures the results are directly comparable.

In [66]:
import warnings
warnings.filterwarnings("ignore")
# Spot Check Algorithms
models = []
models.append(('LR', LogisticRegression()))
models.append(('LDA', LinearDiscriminantAnalysis()))
models.append(('KNN', KNeighborsClassifier()))
models.append(('CART', DecisionTreeClassifier()))
models.append(('NB', GaussianNB()))
models.append(('SVM', SVC()))
# evaluate each model in turn
results = []
names = []

for name, model in models:
    kfold = model_selection.KFold(n_splits=10, random_state=42)
    cv_results = model_selection.cross_val_score(model, X_train, y_train.ravel(), cv=kfold, scoring='accuracy')
    results.append(cv_results)
    names.append(name)
    msg = "%s: %f (%f)" % (name, cv_results.mean(), cv_results.std())
    print(msg)



# Compare Algorithms
fig = plt.figure()
fig.suptitle('Algorithm Comparison')
ax = fig.add_subplot(111)
plt.boxplot(results)
ax.set_xticklabels(names)
plt.show()
LR: 0.472457 (0.075952)
LDA: 0.672675 (0.038834)
KNN: 0.923940 (0.018017)
CART: 1.000000 (0.000000)
NB: 0.446374 (0.045136)
SVM: 0.658979 (0.033874)

Screen%20Shot%202017-11-11%20at%209.22.16%20PM.png